Edit tour

Windows Analysis Report
http://nope.theworkpc.com

Overview

General Information

Sample URL:	http://nope.theworkpc.com
Analysis ID:	1354136
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Creates files inside the system directory

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3612 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4124 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6452 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nope.theworkpc.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://myaccount.nytimes.com/auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html%26EXIT_URI%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html&display=regiwall_lire&asset=RegiWall&application=Free_Experience&preloaded=true#lire-ui-261522

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: <input type="password" .../> found

Source: http://nope.theworkpc.com/	HTTP Parser: No favicon
Source: https://static01.nyt.com/ads/tpc-check.html	HTTP Parser: No favicon
Source: https://5290727.fls.doubleclick.net/activityi;dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?	HTTP Parser: No favicon
Source: https://5290727.fls.doubleclick.net/activityi;dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?	HTTP Parser: No favicon
Source: https://5290727.fls.doubleclick.net/activityi;dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?	HTTP Parser: No favicon
Source: https://edge.microsoft.com/parakeet/frame.html	HTTP Parser: No favicon
Source: https://edge.microsoft.com/parakeet/frame.html	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&dcc=t	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/v3/pr?exlist=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?id=3114214532401325210&ex=appnexus.com	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=3lift.com&id=2618672411569676278148	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=vmg.com&id=eS1hRGtwejBsRTJ1SmkxUl9sLmhTeC4zTVhQcHV6emo0UX5B	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=a9us&endpoint=us-east	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID	HTTP Parser: No favicon
Source: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?ex=pubmatic.com&id=PM_UID40D3C5B1-C944-4FD5-B1BE-0A313CAD2333	HTTP Parser: No favicon
Source: https://5290727.fls.doubleclick.net/activityi;dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html?	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID	HTTP Parser: No favicon
Source: https://myaccount.nytimes.com/auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html%26EXIT_URI%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html&display=regiwall_lire&asset=RegiWall&application=Free_Experience&preloaded=true#lire-ui-261522	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html	HTTP Parser: No favicon
Source: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html	HTTP Parser: No favicon
Source: https://5290727.fls.doubleclick.net/activityi;dc_pre=CNvg15jz-IIDFUvnKAUdpPUMZA;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://5290727.fls.doubleclick.net/activityi;dc_pre=COfBwJjz-IIDFfbNKAUd6k0OZg;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	HTTP Parser: No favicon
Source: https://5290727.fls.doubleclick.net/activityi;dc_pre=CMOT7Jjz-IIDFXf9KAUddlEBiw;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	HTTP Parser: No favicon

HTTP Parser: No <meta name="author".. found

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.51.54.94:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.54.94:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:50095 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:50080 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.54.94
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.191
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://nope.theworkpc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.2/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://nope.theworkpc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nope.theworkpc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://nope.theworkpc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.2/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://nope.theworkpc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.10.2/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://nope.theworkpc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gksXOnsw8XCS2Ux&MD=UvcwRhXS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /live/2023/12/05/world/israel-hamas-war-gaza-news HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/global-f449cfd9976ad673ef2b7ab5098b85be.css HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /ads/parakeet.min.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /us1/v4/datadog-rum.js HTTP/1.1Host: www.datadoghq-browser-agent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/11/05/multimedia/e74dd56e303bd96f9f37/e74dd56e303bd96f9f37-articleLarge-v11.jpg HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-hamas-early-lead-002-hvwq-threeByTwoLargeAt2X.jpg HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/11/05/multimedia/e74dd56e303bd96f9f37/e74dd56e303bd96f9f37-articleLarge-v11.jpg HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-hamas-early-lead-002-hvwq-threeByTwoLargeAt2X.jpg HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/adslot-c02e009c82341062ec30.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/vendor-7799bfe3d9a78d57c093.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/liveAsset-14d9fdd01d7a65e76eb5.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/main-5bad2df7824d8ab68c7b.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /fonts/family/franklin/franklin-normal-700.91eaf6b5642463af4091160b4bbfdfcb.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/franklin/franklin-normal-500.0f4aea3d462cdb64748629efcbbf36bc.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/tpc-check.html HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/franklin/franklin-normal-600.75739ac267f076931c6da9740386ee6b.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/prebid8.1.0.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /fonts/family/cheltenham/cheltenham-normal-700.530cfb72378419eedb60da7e266ad5f1.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/cheltenham/cheltenham-normal-400.a3ed7afe3eaa0a873f3fbd379f8c491b.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/imperial/imperial-normal-400.6131cd77b6e216c7693ed925f4309ffc.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b3960cc6-bfd2-4adc-910c-6e917e8a6a0e/grumi-ip.js HTTP/1.1Host: rumcdn.geoedge.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /als?uri=nyt%3A%2F%2Flegacycollection%2Ff82e3180-c7cf-5230-9381-bc17f573899a&typ=&prop=nyt&plat=web HTTP/1.1Host: als-svc.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /fonts/family/franklin/franklin-italic-500.0fb05587186331cd0a9b0f1a30805e76.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/cheltenham/cheltenham-italic-700.f99a0459024509f157a3352e5de4f873.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/franklin/franklin-normal-300.a6479a5200f9a6352bdb71589c27c9c3.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/imperial/imperial-italic-400.30d6073613e33e742de4c1325b31065c.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=3030&u=https%3A%2F%2Fwww.nytimes.com HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /als?uri=nyt%3A%2F%2Flegacycollection%2Ff82e3180-c7cf-5230-9381-bc17f573899a&typ=&prop=nyt&plat=web HTTP/1.1Host: als-svc.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /configs/3030 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b3960cc6-bfd2-4adc-910c-6e917e8a6a0e/grumi.js HTTP/1.1Host: rumcdn.geoedge.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/vendors~allAccessLandingPage~bestsellers~card~collections~cookingAppDownloadLandingPage~cookingLandi~3fc321fe-74ec4aa0b386b7ed501e.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /b?c1=2&c2=3005403&ns__t=1701800006685&ns_c=UTF-8&c8=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/vendors~accessCodeLPAllAccess~accessCodeLPCooking~accessCodeLPGames~accessCodeLPNews~activateaccess~~16fc2915-b5fb63b7557620588d95.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /tags.js HTTP/1.1Host: dd.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/vendors~account~byline~capsule~clientSideCapsule~collections~explainer~getstarted~liveAsset~newslett~64426ae5-506798ca96de1ea2e924.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=995821 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CU4WQK98 HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&tmax=10000 HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b2?c1=2&c2=3005403&ns__t=1701800006685&ns_c=UTF-8&c8=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
Source: global traffic	HTTP traffic detected: GET /video-static/vhs3/vhs.min.js HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: icu=ChgIkbx3EAoYASABKAEwx9C9qwY4AUABSAEQx9C9qwYYAA..; uuid2=3114214532401325210
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/comments-3f4cc7ef7c26c8dabbd6.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /svc/nyt/data-layer?assetUrl=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&caller_id=nyt-vi&jkcb=1701800008007&referrer=&sourceApp=nyt-vi HTTP/1.1Host: a.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /v1/purr-cache HTTP/1.1Host: purr.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
Source: global traffic	HTTP traffic detected: GET /v1/purr-cache HTTP/1.1Host: purr.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0
Source: global traffic	HTTP traffic detected: GET /svc/nyt/data-layer?assetUrl=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&caller_id=nyt-vi&jkcb=1701800008007&referrer=&sourceApp=nyt-vi HTTP/1.1Host: a.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-s=referrer=&landing=&start=1701800009282&isNew=1&pageIndex=1; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; nyt-jkidd=uid=0&lastRequest=1701800009282&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/world/middleeast/Khan-Younis-Hospital/Khan-Younis-Hospital-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05isrel-gaza-01-carousel-kcjw/05isrel-gaza-01-carousel-kcjw-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; nyt-jkidd=uid=0&lastRequest=1701800009282&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4 HTTP/1.1Host: vp.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: videoReferer: https://www.nytimes.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /js/chartbeat_video.js HTTP/1.1Host: static.chartbeat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video-static/vhs3/vhs-plugin-cover-vi-be85f508a34ad15e6073.min.js HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/85a1ebf79602421aa1c2c2f24d32cb6c/nyt.js HTTP/1.1Host: cdn.brandmetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=bomn82o&ct=0:s2f54xh&fmt=3&ttl=43200&gtmcb=603893681 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/show-ads.js HTTP/1.1Host: a1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/world/middleeast/Khan-Younis-Hospital/Khan-Younis-Hospital-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/comscore-streaming.js HTTP/1.1Host: a1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/2023/12/05/113942_1_05vid-Southern-Gaza_wg_1080p.vtt HTTP/1.1Host: vp.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: trackReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /video-static/vhs3/vhs-plugin-nyt-analytics-3c88df1299a47b81a5f9.min.js HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=true&us=anon&context-type=&areas=barOne&areas=dock HTTP/1.1Host: mwcm.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05isrel-gaza-01-carousel-kcjw/05isrel-gaza-01-carousel-kcjw-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=14110&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&i=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=video%40nytimes.com&g=16698&p=https%3A%2F%2Fvp.nyt.com%2Fvideo%2F2023%2F12%2F05%2F113940_1_05vid-khan-younis-hospital_wg_480p.mp4&i=&g0=international_desk&u=klOrWDxbmHwDhoapt&t=CLFNODC-76e_CMggykBaThD7rTDi3&x=0&y=0&V=141&VS=H5&n=1&b=7532&r=&_vd=14880&_vi=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&_vp=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&_vh=nytimes.com&_pu=DrMis-D7EHvcW-4Z2&_pt=RbJMdCJWPcJC1gVgIerf6xC4LqZW&_pr=&_vdd=nytimes.com&_vt=ct&_vs=s1&_vcs=0&_vbr=-1&_vvs=0.003&_vpt=0&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vaup=man&_vce=0&c=0&W=0&R=0&I=1&E=0&j=75&tz=-60&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /scripts/bundle/65568.js?sid=4486dfe2-780e-4dfa-a60a-2a948887658f&toploc=www.nytimes.com HTTP/1.1Host: cdn.brandmetrics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/cheltenham/cheltenham-normal-200.40ccfe2cc61a71e6617e56162d49b896.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5290727.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.02&x=0&m=0&y=907&o=1280&w=907&j=30&R=1&W=0&I=0&E=1&e=1&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=2&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy=&gpp=${GPP_STRING_142}&gpp_sid=${GPP_SID}&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=163427 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd HTTP/1.1Host: nytimes-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /sync?px=1&src=prebid& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535&google_gid=CAESEP_CDT7kH_vMT6e3BERXxH4&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRgFKAEyCwj08OPbk_K6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIGZ29vZ2xl
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcs.media.net%2Fcksync.php%3Fcs%3D8%26type%3Ddxu%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5290727.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5290727.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=&C=1 HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=14110&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&i=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: dd.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?cc=1 HTTP/1.1Host: nytimes-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
Source: global traffic	HTTP traffic detected: GET /ping?h=video%40nytimes.com&g=16698&p=https%3A%2F%2Fvp.nyt.com%2Fvideo%2F2023%2F12%2F05%2F113940_1_05vid-khan-younis-hospital_wg_480p.mp4&i=&g0=international_desk&u=klOrWDxbmHwDhoapt&t=CLFNODC-76e_CMggykBaThD7rTDi3&x=0&y=0&V=141&VS=H5&n=1&b=7532&r=&_vd=14880&_vi=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&_vp=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&_vh=nytimes.com&_pu=DrMis-D7EHvcW-4Z2&_pt=RbJMdCJWPcJC1gVgIerf6xC4LqZW&_pr=&_vdd=nytimes.com&_vt=ct&_vs=s1&_vcs=0&_vbr=-1&_vvs=0.003&_vpt=0&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vaup=man&_vce=0&c=0&W=0&R=0&I=1&E=0&j=75&tz=-60&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.02&x=0&m=0&y=907&o=1280&w=907&j=30&R=1&W=0&I=0&E=1&e=1&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=2&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRgFKAEyCwj08OPbk_K6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIGZ29vZ2xl
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=163427&rdf=1 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcs.media.net%2Fcksync.php%3Fcs%3D8%26type%3Ddxu%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=OQVhypoK1RazVj5
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132; c=1701800013; tuuid_lu=1701800013
Source: global traffic	HTTP traffic detected: GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=true&us=anon&context-type=&areas=barOne&areas=dock HTTP/1.1Host: mwcm.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=crt&ovsid=b9a04974-b683-41e4-9726-527f7252b018&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy= HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8 HTTP/1.1Host: cs.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?cc=1 HTTP/1.1Host: nytimes-d.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
Source: global traffic	HTTP traffic detected: GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&type=con&ovsid=AAAFnRlIKeHkCQNsRLKZAAAAAAA&expiration=1701886413&is_secure=true&gdpr_consent=${GDPR_CONSENT}&gdpr=${GDPR} HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&type=dxu&ovsid=OQVhypoK1RazVj5 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10
Source: global traffic	HTTP traffic detected: GET /adxcm.aspx?ssp=D41B0D84-4DB7-4D9C-81CC-3A497DB5D0A6&gdpr=&consent=&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D354%26user_id%3D%24%24visitor_cookie%24%24%26ssp%3Dmedianet%26bsw_param%3Ddd7b0c52-83c2-4fd9-a13e-07c274ba1132%26gdpr%3D%26consent%3D%26gdpr_pd%3D1%26expires%3D7 HTTP/1.1Host: inv-nets.admixer.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=55953&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC=1769~2ffu
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&type=con&ovsid=AAAFnRlIKeHkCQNsRLKZAAAAAAA&expiration=1701886413&is_secure=true&gdpr_consent=${GDPR_CONSENT}&gdpr=${GDPR} HTTP/1.1Host: cs.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&type=dxu&ovsid=OQVhypoK1RazVj5 HTTP/1.1Host: cs.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=354&user_id=0d6f033f3d39461fa9b3bd714dfb0a46&ssp=medianet&bsw_param=dd7b0c52-83c2-4fd9-a13e-07c274ba1132&gdpr=&consent=&gdpr_pd=1&expires=7 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132; c=1701800013; tuuid_lu=1701800013
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=-1&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; SyncRTB3=1702944000%3A220; ipc=163427^^1^0; pi=163427:2; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=1
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES; SyncRTB3=1702944000%3A220; ipc=163427^^1^0; pi=163427:2; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=bs&ovsid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132&gdpr=&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-c-ts=1701800015
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZW9oTgAEu8UX8gBU&_test=ZW9oTgAEu8UX8gBU HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=crt&ovsid=b9a04974-b683-41e4-9726-527f7252b018&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy= HTTP/1.1Host: contextual.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-c-ts=1701800015; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=bs&ovsid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132&gdpr=&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-c-ts=1701800015; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZW9oTgAEu8UX8gBU&_test=ZW9oTgAEu8UX8gBU HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /c2/3005403/cs.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
Source: global traffic	HTTP traffic detected: GET /loader.js HTTP/1.1Host: platform.iteratehq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/live-favicon-29072d699076b4150ceb4d77a33c448e.ico HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET //.status HTTP/1.1Host: a.et.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: /content-type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
Source: global traffic	HTTP traffic detected: GET /internal-c2/3005403/cs.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/favicon-d2483f10ef688e6f89e23806b9700298.ico HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /match-prod-eb0e5d28cbc017a01544.js HTTP/1.1Host: platform.iteratehq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //.status HTTP/1.1Host: a.et.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/live-favicon-29072d699076b4150ceb4d77a33c448e.ico HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/favicon-d2483f10ef688e6f89e23806b9700298.ico HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /2023/12/05/world/middleeast/united-nations-war-gaza-israel.html HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-who-health-fbgw/05israel-hamas-who-health-fbgw-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-who-health-ctlq/05israel-hamas-who-health-ctlq-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/10/17/multimedia/05israel-hamas-hostages-men-new/17israelgaza-photos-03-gfml-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-hamas-precision-cmpb/04israel-hamas-precision-cmpb-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-eu-terror-01-qwpm/05israel-hamas-eu-terror-01-qwpm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-hamas-khan-younis-01-wqvc/04israel-hamas-khan-younis-01-wqvc-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05nat-collegepresidents-ktzm/05nat-collegepresidents-ktzm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-who-health-ctlq/05israel-hamas-who-health-ctlq-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/surveys/embed HTTP/1.1Host: iteratehq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-hamas-precision-cmpb/04israel-hamas-precision-cmpb-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-eu-terror-01-qwpm/05israel-hamas-eu-terror-01-qwpm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/parakeet.min.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156If-None-Match: "adba4a1fb4bee00e1f70bd3e15c9f567"If-Modified-Since: Mon, 19 Jul 2021 19:29:47 GMT
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-settler-visa-ban-vzbf/05israel-hamas-settler-visa-ban-vzbf-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-hamas-miller-01-tjqm/04israel-hamas-miller-01-tjqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/10/17/multimedia/05israel-hamas-hostages-men-new/17israelgaza-photos-03-gfml-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-who-health-fbgw/05israel-hamas-who-health-fbgw-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-hamas-khan-younis-01-wqvc/04israel-hamas-khan-younis-01-wqvc-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-un-aid-01-bvqm/04israel-un-aid-01-bvqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /als?uri=nyt%3A%2F%2Farticle%2F5802e4f2-c830-5f17-ab9e-b5740b9fff98&typ=&prop=nyt&plat=web HTTP/1.1Host: als-svc.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/story-ba1053d3a59448a9f2d0.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156
Source: global traffic	HTTP traffic detected: GET /ads/prebid8.1.0.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156If-None-Match: "69d0b1569bbd0b87116d60db3a12cd34"If-Modified-Since: Mon, 26 Jun 2023 19:11:32 GMT
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05nat-collegepresidents-ktzm/05nat-collegepresidents-ktzm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/surveys/embed HTTP/1.1Host: iteratehq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05israel-hamas-settler-visa-ban-vzbf/05israel-hamas-settler-visa-ban-vzbf-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth/prefetch-assets HTTP/1.1Host: myaccount.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /fonts/family/franklin/franklin-normal-800.fdc7cad17deeec2db1fe2f9f8c0520ed.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/cheltenham/cheltenham-normal-300.7ea91ebd036309e1fe756ee3aab272da.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/tpc-check.html HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "598d685c63f68aaefa1f7c474e83327c"If-Modified-Since: Wed, 03 Apr 2019 14:30:57 GMT
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-hamas-miller-01-tjqm/04israel-hamas-miller-01-tjqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/imperial/imperial-normal-700.024693f96c8f2c457e4a6a8d02a636b7.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/family/imperial/imperial-italic-700.996d951f04d92feac357036afa5da0bc.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /als?uri=nyt%3A%2F%2Farticle%2F5802e4f2-c830-5f17-ab9e-b5740b9fff98&typ=&prop=nyt&plat=web HTTP/1.1Host: als-svc.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /images/2023/12/04/multimedia/04israel-un-aid-01-bvqm/04israel-un-aid-01-bvqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lire_ui/js/unified-lire.bundle.js?v=c4113f2 HTTP/1.1Host: myaccount.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://myaccount.nytimes.com/auth/prefetch-assetsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=995821 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&tmax=10000 HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /b?c1=2&c2=3005403&ns__t=1701800020779&ns_c=UTF-8&c8=On%20the%20Ground%20in%20Wars%20and%20Disasters%2C%20the%20U.N.%20Plays%20a%20Vital%20Role%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU\|t
Source: global traffic	HTTP traffic detected: GET /ut/v3/prebid HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CU4WQK98 HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1; data-c-ts=1701800016
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
Source: global traffic	HTTP traffic detected: GET /svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&caller_id=nyt-vi&jkcb=1701800021284&referrer=&sourceApp=nyt-vi HTTP/1.1Host: a.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=2; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /v1/purr-cache HTTP/1.1Host: purr.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/clientSideCapsule-3ba408d68d4aef1db00b.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&dcc=tAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1; data-c-ts=1701800016
Source: global traffic	HTTP traffic detected: GET /ups/58251/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu"
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
Source: global traffic	HTTP traffic detected: GET /getuid?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /getuid?https://s.amazon-adsystem.com/ecm3?id=$UID&ex=appnexus.com HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=3lift.com&id=2618672411569676278148 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?id=3114214532401325210&ex=appnexus.com HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=vmg.com&id=eS1hRGtwejBsRTJ1SmkxUl9sLmhTeC4zTVhQcHV6emo0UX5B HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openx.com&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=ZTcyZTBlM2QtNWM3NC02YzJkLTQ0NzMtYmU5NDViNDE3MDFi HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=index.com&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=index&google_cm&google_hm=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDPR_CONSENT%7d HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /711587.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRgBIAEoAjILCJbQ3fuT8ro8EAU4AVoHc3Z4OXQ1MGAC
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRgBIAEoAjILCJbQ3fuT8ro8EAU4AVoHc3Z4OXQ1MGAC
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=ZW9oTXuTmmdZfZr30kZulQAA%26574&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
Source: global traffic	HTTP traffic detected: GET /sync?nid=68 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/service-worker-test-1701795880486.js HTTP/1.1Host: www.nytimes.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-newsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=~scr7ducgbugYGyQuaPZXHhzWQx79Ohtdu45VKETD~ZRcAj5PCHhLxgM5r2e1_17tcdjMxfdNtYaUKs0ESDsFeQVFi3ukPfUAZ~10y7WXpTeUhIPj9LJii8aP9BLSnk5; _dd_s=rum=0&expire=1701800919156
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /unified_lire/js/standalone-client.bundle.js HTTP/1.1Host: myaccount.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=false&gwtype=REGIWALL&us=anon&context-type=&areas=barOne&areas=truncator HTTP/1.1Host: mwcm.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /activityi;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=bomn82o&ct=0:s2f54xh&fmt=3&ttl=43200&gtmcb=466688651 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRgBIAEoAjILCJbQ3fuT8ro8EAU4AVoHc3Z4OXQ1MGAC
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=media.net&id=3448016130184375000V10 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.26&x=0&m=0&y=1210&o=1263&w=907&j=30&R=1&W=0&I=0&E=6&e=5&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=3&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gksXOnsw8XCS2Ux&MD=UvcwRhXS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&caller_id=nyt-vi&jkcb=1701800021284&referrer=&sourceApp=nyt-vi HTTP/1.1Host: a.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=3
Source: global traffic	HTTP traffic detected: GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZW9oTXuTmmdZfZr30kZulQAA%26574&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=30d734a50f7e4e05b715ac1826c2c216 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1Host: 5290727.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKO3KxoNCNjQvasGEgUI6AcQAEIASgA HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=0yMn+PTOKhUuQId8uD+jMWAjhM0pu75h5qJ/uGohuII=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: dd.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=196&external_user_id=4541600553641608635&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: dsum.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392024&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /v1/purr-cache HTTP/1.1Host: purr.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69976975&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SyncRTB3=1702944000%3A220; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; pi=163427:3; chkChromeAb67Sec=2
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd HTTP/1.1Host: nytimes-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=123&external_user_id=ouSZFtWWWhZ1z51Vjhge9WalMFM HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /usersync/index/?gdpr=&gdpr_consent=&gpp=&gpp_sid=&s=2&us_privacy= HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=0ve4IDJUsd2OZC0HsNGu
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/15-562803a2e86b5b821208.js?_sw-precache=26c660da501ed7aefa73267c1f5c785b HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _dd_s=rum=0&expire=1701800919156; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?p=163427 HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SyncRTB3=1702944000%3A220; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; pi=163427:3; chkChromeAb67Sec=2
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESELezj83S7KBI3Z4Ws1BVBdw&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=Farnaz%20Fassihi&n=1&f=00001&c=0&x=0&m=0&y=948&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&b=7337&t=B4FYW8kZWmaBgsmf5Xj0TQBlCSN8&V=141&i=On%20the%20Ground%20in%20Wars%20and%20Disasters%2C%20the%20U.N.%20Plays%20a%20Vital%20Role&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=2&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?px=1&src=prebid& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgkIOhDm2r3ZwzE=; tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESECAa8WLXRHlPGPDOW4QQem0&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html%26EXIT_URI%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html&display=regiwall_lire&asset=RegiWall&application=Free_Experience&preloaded=true HTTP/1.1Host: myaccount.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/176-70e92b21a3c3b94f46fb.js?_sw-precache=0802c1b52f8dcda13df8247007b31913 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _dd_s=rum=0&expire=1701800919156; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=b9a04974-b683-41e4-9726-527f7252b018
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/177-dab6c51dede0a1b643e0.js?_sw-precache=1a5e5be10bcf732498e2bc288a2cb0e8 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _dd_s=rum=0&expire=1701800919156; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: dd.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=openx.com&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gpp=&gpp_sid= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=index.com&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRgFKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIHcnViaWNvbg..
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/178-402d852444b5149d85e8.js?_sw-precache=6e77cc0d194cfa617dcb9cea0a0cc5db HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800926174
Source: global traffic	HTTP traffic detected: GET /svc/nyt/data-layer?sourceApp=nyt-lire&referrer=https%3A%2F%2Fwww.nytimes.com%2F&assetUrl=https%3A%2F%2Fmyaccount.nytimes.com%2Fauth%2Fiframe%2Fenter-email%3Fresponse_type%3Dcookie%26client_id%3Dfreex%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252Fsubscription%252Fonboarding-offer%253FcampaignId%253D7JFJX%2526redirect_uri%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%2526EXIT_URI%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%26display%3Dregiwall_lire%26asset%3DRegiWall%26application%3DFree_Experience%26preloaded%3Dtrue%23lire-ui-261522 HTTP/1.1Host: a.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://myaccount.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://myaccount.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
Source: global traffic	HTTP traffic detected: GET /ium?sourceid=3&uid= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQ HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CggKBgjdARDUFg; lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu"
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5290727.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=PM_UID40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=-1&gdpr_consent=&piggybackCookie=CAESEO4HZyZ72dJGvMK1nyipGtU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; pi=163427:3
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=media.net&id=3448016130184375000V10 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=17&external_user_id=0ve4IDJUsd2OZC0HsNGu HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/40D3C5B1-C944-4FD5-B1BE-0A313CAD2333?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/179-9ce786c57ce144531cbf.js?_sw-precache=19cd6e7fb911f3682635a2d5278917b2 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCOrmg_PEv688EAUYBSABKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=QNPFsclET9WxvgoxPK0jMw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=false&gwtype=REGIWALL&us=anon&context-type=&areas=barOne&areas=truncator HTTP/1.1Host: mwcm.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/180-1dcf8f5ec828979b5585.js?_sw-precache=da1092368394d1ffb67100511ff4d664 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=ZTcyZTBlM2QtNWM3NC02YzJkLTQ0NzMtYmU5NDViNDE3MDFi HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCOrmg_PEv688EAUYBSABKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/181-6ccf757cb37605cd8921.js?_sw-precache=577c7f3f9e3eb6c9dafad9ba34569a09 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/vendors~emailsignup-01e5189b94e38dca3af6.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2040D3C5B1-C944-4FD5-B1BE-0A313CAD2333&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/emailsignup-f3ca1a7e06022030da1d.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=111&external_user_id=7523681944929849834&expiration=1703009624 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/cdn/Baymax-1.2.2.js HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TFBTTlM5VFgtMS1CVDgy HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3114214532401325210&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCOrmg_PEv688EAUYBSABKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; pi=163427:3; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=3396806&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7
Source: global traffic	HTTP traffic detected: GET /s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQ HTTP/1.1Host: i6.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=Mjk2ODgyNTJiY2IwMzNjMjdiYzlmNGYzOTNkNGI4ZTMxZjc2YzhjZA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/182-fce11dfd2749a3f8ba8b.js?_sw-precache=34da22edff8c2fcf0bc998311790f858 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; pi=163427:3; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:62D0F5E82D1A4ED6B3E32459FF4A59CA HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/183-58962d469cec4df94955.js?_sw-precache=fa04218e01f03f0aff1de4d78a63b400 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/cdn/ET/ad-tracking.js HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEO4HZyZ72dJGvMK1nyipGtU&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/184-7a1dec688f12c0accc59.js?_sw-precache=bf88f3ee49d28fab903ef277e816bab1 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/audio-on.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/audio-off.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/fonts/random1/cheltenham_normal_300.ttf HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/pause.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/play.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/fonts/random1/franklin_normal_500.ttf HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/FORfFIObwmMtoclO3LSTVQ?csrc= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/fonts/random1/franklin-normal-700.ttf HTTP/1.1Host: static01.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=pubmatic.com&id=PM_UID40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=55953&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30 HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=62D0F5E82D1A4ED6B3E32459FF4A59CA
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/185-5a3b79db604b7e400e35.js?_sw-precache=63ec24591a492ae4bbc17c099b85937c HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCPb6-ef-8bo8EAUSGQoKcmlnaHRtZWRpYRILCISf-uf-8bo8EAUYBSACKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIKcmlnaHRtZWRpYQ..
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; PugT=1701800030
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; PugT=1701800030
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=kJbBhtoqQaWo41VYJ3lV3w HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TFBTTlM5VFgtMS1CVDgy&google_push= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/186-e6ce936346f6f641e401.js?_sw-precache=592a70617459f3acd3e93e0dec463915 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3114214532401325210&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/187-614d260c892ee1a95276.js?_sw-precache=3b48d4751c8f3368428635df5a4c3689 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /ups/58160/sync?_origin=1&uid=LPSNS9TX-1-BT82&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=196&external_user_id=4541600553641608635&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029; pi=163427:3; chkChromeAb67Sec=5; SPugT=1701766087; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/188-340a3336cbd15c2795ac.js?_sw-precache=a75698f6c043e733aac7440d50652918 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.26&x=0&m=0&y=1210&o=1263&w=907&j=30&R=1&W=0&I=0&E=6&e=5&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=3&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392024&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /setuid/magnite?uid=LPSNS9TX-1-BT82 HTTP/1.1Host: prebid.a-mo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd HTTP/1.1Host: nytimes-d.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=Farnaz%20Fassihi&n=1&f=00001&c=0&x=0&m=0&y=948&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&b=7337&t=B4FYW8kZWmaBgsmf5Xj0TQBlCSN8&V=141&i=On%20the%20Ground%20in%20Wars%20and%20Disasters%2C%20the%20U.N.%20Plays%20a%20Vital%20Role&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=2&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=55953&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=123&external_user_id=ouSZFtWWWhZ1z51Vjhge9WalMFM HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:62D0F5E82D1A4ED6B3E32459FF4A59CA HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESECAa8WLXRHlPGPDOW4QQem0&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&vxii_pid=12&vxii_pid1=10067&vxii_rcid=ebe308dd-d709-4689-8b60-d83ca68d342e HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImViZTMwOGRkLWQ3MDktNDY4OS04YjYwLWQ4M2NhNjhkMzQyZSIsImwiOjE3MDE4MDAwMzA5MDEsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3355&partner_device_id=LPSNS9TX-1-BT82 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESELezj83S7KBI3Z4Ws1BVBdw&google_cver=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/189-3e065270ece8c1d79bad.js?_sw-precache=7de843da5589f4c57725ee4b0d29b3fe HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LPSNS9TX-1-BT82 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/25-4442bfdc00564bf7dbda.js?_sw-precache=1bf7cf9b566ff27e7b0b5585d81425db HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029; SPugT=1701766087; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702944000%3A21_54_250_13_71_3_220%7C1702339200%3A223_15; ipc=0^^2^0; pi=0:3; chkChromeAb67Sec=6
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?_origin=0&dpid=58160&ovsid=LPSNS9TX-1-BT82&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu:18vk~2ffu"
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; SPugT=1701766087; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702944000%3A21_54_250_13_71_3_220%7C1702339200%3A223_15; ipc=0^^2^0; pi=0:3; chkChromeAb67Sec=6; PugT=1701766031
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/26-829d0d92ab50da3d5923.js?_sw-precache=089b1e142d629ea3bba142f182e4acf5 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LPSNS9TX-1-BT82&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=HxYFaQZH4kNk_msmT5qdhI6D
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/27-0a22638425338ab5880d.js?_sw-precache=e20139d108ee9cd9cf7b667a2b071c6f HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
Source: global traffic	HTTP traffic detected: GET /video/2023/11/08/113087_1_MKTG-BAU-USAllAccessCrisisRefresh-Nov2023_wg_360p.mp4 HTTP/1.1Host: vp.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/4-24263788fe90843adf10.js?_sw-precache=e4506aa7da56f4c7d46b6faceeddb4a4 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/ChineseHanLogo-8e84986353404735d8b1.js?_sw-precache=fe1ff79b4e18e86237d737e3ee7838e4 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/DealbookLogo-85c9c99a372cbf774226.js?_sw-precache=a8f57f9443d5cf6b10360a51d88f3dec HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SPugT=1701800031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=d9de6a69-c98e-4eac-8fb8-dfc3bfac3260\|1701800030698
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&ovsid=LPSNS9TX-1-BT82&dpid=58160 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/InsiderLogo-c49a1384c9b2a921a374.js?_sw-precache=9656013fbf712008dc1c4bb2d1732352 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /svc/nyt/data-layer?sourceApp=nyt-lire&referrer=https%3A%2F%2Fwww.nytimes.com%2F&assetUrl=https%3A%2F%2Fmyaccount.nytimes.com%2Fauth%2Fiframe%2Fenter-email%3Fresponse_type%3Dcookie%26client_id%3Dfreex%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252Fsubscription%252Fonboarding-offer%253FcampaignId%253D7JFJX%2526redirect_uri%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%2526EXIT_URI%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%26display%3Dregiwall_lire%26asset%3DRegiWall%26application%3DFree_Experience%26preloaded%3Dtrue%23lire-ui-261522 HTTP/1.1Host: a.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=4; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /ium?sourceid=3&uid= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /graphql/v2 HTTP/1.1Host: samizdat-graphql.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/NYT-BestSeller-1200x675-699eb842421d5076f318fe0df3d903a5.png HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAB9mE5p6zvZQM1GvWLAAAAAAA&expiration=1701886432&nuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/NYT-BestSeller-Orange-ad8203552f20bd135b7419d88e7d0c58.png HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=kJbBhtoqQaWo41VYJ3lV3w HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800031460586
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/NYTCommunitiesFundHeader-d4499c07bbe7d7de8ad6.js?_sw-precache=7696c902100627070a9d09d7425908e9 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=17&external_user_id=0ve4IDJUsd2OZC0HsNGu HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/40D3C5B1-C944-4FD5-B1BE-0A313CAD2333?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=3234567c-3640-0686-54f2-fa4f8c223b8f
Source: global traffic	HTTP traffic detected: GET /crum?cm_dsp_id=111&external_user_id=7523681944929849834&expiration=1703009624 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SPugT=1701800031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2618672411569676278148
Source: global traffic	HTTP traffic detected: GET /s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQ HTTP/1.1Host: i6.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/audio-on.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: dd.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=Mjk2ODgyNTJiY2IwMzNjMjdiYzlmNGYzOTNkNGI4ZTMxZjc2YzhjZA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/audio-off.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/pause.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /ads/adplatforms/user-interface-elements/video-icons/play.svg HTTP/1.1Host: static01.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; PugT=1701800033
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/Rio2016-f600e68f03ca5de89a5f.js?_sw-precache=57d95bfdf2be29bd5fef63cf0b5fe745 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932378
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63; data-mag=LPSNS9TX-1-BT82~~63
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TFBTTlM5VFgtMS1CVDgy&google_push= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/SportsFromTheAthleticLogo-e587aa02e1b6ef4fde30.js?_sw-precache=e5ef7cc08b56313d98540823fbf010cc HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /merge?pid=80&3pid=LPSNS9TX-1-BT82&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=HxYFaQZH4kNk_msmT5qdhI6D; _ljtrtb_80=LPSNS9TX-1-BT82
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3355&partner_device_id=LPSNS9TX-1-BT82 HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=1!8154
Source: global traffic	HTTP traffic detected: GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1Host: image8.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; KRTBCOOKIE_279=22890-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23011-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23355-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260; PugT=1701800032
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=1!8154
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; PugT=1701800033
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&vxii_pid=12&vxii_pid1=10067&vxii_rcid=ebe308dd-d709-4689-8b60-d83ca68d342e HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImViZTMwOGRkLWQ3MDktNDY4OS04YjYwLWQ4M2NhNjhkMzQyZSIsImwiOjE3MDE4MDAwMzE0NDksInQiOjF9
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&ovsid=LPSNS9TX-1-BT82&dpid=58160 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63; data-mag=LPSNS9TX-1-BT82~~63
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/TMagazineLogo-60522d4a2b54b2e7ab89.js?_sw-precache=5b920a0788a3bc552fb9179e303fa217 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/UpshotLogo-cae1c9a0f5f4fb8229c4.js?_sw-precache=ba894baad4421b4eef386a2ad10bca76 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/WorldCupLogo2018-a56fb1eb76c9f639508c.js?_sw-precache=5189da5aa9659224ddacad70f91a93e4 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63; data-mag=LPSNS9TX-1-BT82~~63
Source: global traffic	HTTP traffic detected: GET //.status HTTP/1.1Host: a.et.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: /content-type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /c2/3005403/cs.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/accessCodeLPAllAccess-331bb86cf1a4f5301fbd.js?_sw-precache=fb38989d44bfbc4344e8bbbaa8802710 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/accessCodeLPAllAccess~accessCodeLPCooking~accessCodeLPGames~accessCodeLPNews~account~activateaccess~~44777ebe-5561fb88a80831cc4174.js?_sw-precache=3dc7d37664faa6e00e75b0b3683bf7c5 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/accessCodeLPCooking-1ed9fb47e963dd322707.js?_sw-precache=8ab96cf955cac65b2919817b7a17a03f HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET //.status HTTP/1.1Host: a.et.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/accessCodeLPGames-31a59c4c49841febf334.js?_sw-precache=f6e4d4401c739bc293705986605aa917 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /api/v1/surveys/embed HTTP/1.1Host: iteratehq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/accessCodeLPNews-c4ce21c894f39cd01056.js?_sw-precache=4e7707bb284e0c9628a7d180424e4eef HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/account-0d5cbed5aea38cde65b4.js?_sw-precache=d091cb3780cccf4ddbe227b80e5acc89 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/activateaccess-e88e470913eaaf28b000.js?_sw-precache=44f23b962029c4019df81ced6ef1d33b HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /api/v1/surveys/embed HTTP/1.1Host: iteratehq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/additionalPlaylists-bb95ce52ed85fd8f45d0.js?_sw-precache=943364173fb0fc29c9d4dc82e4715519 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/adslot-c02e009c82341062ec30.js?_sw-precache=078400628199a3340ce1953af112096e HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/allAccessLandingPage-49658b8b29ff1f82e48c.js?_sw-precache=f6b120f6f543b14da8485d0fa412b2f4 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/apple-touch-icon-28865b72953380a40aa43318108876cb.png HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/apple-touch-icon-dark-f74e69bf6dae735169854a4126cebf8c.png HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/ask-c408ff9a5a264659800d.js?_sw-precache=789f6d5a3fb3a851b4f4e9ccc16e8b02 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/athletic-image-48c84c9ba0e2ed07e6178913f3916ac8.jpg HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/athletic-logo-8898f51e86f8fcda54cf9db8031db0d8.svg HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/athletic_app-0178f6b583ae0f075961296ff3dc87a3.png HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/audio-app-download-50297e52380b36c9a9c7998bb4d9e70b.svg HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /2023/12/05/world/africa/nigeria-strike-civilians.html HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/audio-c6e4659005d0c18dac15.js?_sw-precache=b71f65da3a7a83f071d19cada0a3157f HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
Source: global traffic	HTTP traffic detected: GET /js/ HTTP/1.1Host: dd.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/audio-image-e9fd4c82808d35df03a9330e33c65257.jpg HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593; datadome=zTtnnDi3OP57cfpZ9BD_RLJ2yTOFWvGQyP5n4UWvRFlsyx2n9WX8teuaRGt982YKX1rhdKuBg_J7bUw41R8vcO0n1TXUGaoBns7UA~zIM4znVLjnyWXnc_TfTuaTcVvZ
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/audioApp-8440b3159e28c1ef0b8d.js?_sw-precache=302ca132b60b2f2c8b4794bccd0bd269 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593; datadome=zTtnnDi3OP57cfpZ9BD_RLJ2yTOFWvGQyP5n4UWvRFlsyx2n9WX8teuaRGt982YKX1rhdKuBg_J7bUw41R8vcO0n1TXUGaoBns7UA~zIM4znVLjnyWXnc_TfTuaTcVvZ
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/parakeet.min.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754If-None-Match: "adba4a1fb4bee00e1f70bd3e15c9f567"If-Modified-Since: Mon, 19 Jul 2021 19:29:47 GMT
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/audio_app-fcc6aae6ed18840c4d678ad97f4d5423.png HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754
Source: global traffic	HTTP traffic detected: GET /images/2019/07/03/reader-center/author-elian-peltier/author-elian-peltier-thumbLarge-v6.png HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/audioblock-ca3d723f343fe31abc72.js?_sw-precache=e10fdabdbc7eef7835d3fe551148aa16 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/autoSave-e29f1d51273327022c43.js?_sw-precache=11175ac6e73ad443237fe4717f2e1ace HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/bestsellers-ee775d91faac0c716b6e.js?_sw-precache=ab0be8b3bac74b0b426b15292310359c HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800937280
Source: global traffic	HTTP traffic detected: GET /als?uri=nyt%3A%2F%2Farticle%2F9c6ba5a0-b7c9-5979-aa85-77e25cf8125c&typ=&prop=nyt&plat=web HTTP/1.1Host: als-svc.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841
Source: global traffic	HTTP traffic detected: GET /ads/tpc-check.html HTTP/1.1Host: static01.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "598d685c63f68aaefa1f7c474e83327c"If-Modified-Since: Wed, 03 Apr 2019 14:30:57 GMT
Source: global traffic	HTTP traffic detected: GET /fonts/family/cheltenham-small/cheltenham-small-normal-400.108ce298d451197b23fefceb3e36959f.woff2 HTTP/1.1Host: g1.nyt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/prebid8.1.0.js HTTP/1.1Host: www.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800937280If-None-Match: "69d0b1569bbd0b87116d60db3a12cd34"If-Modified-Since: Mon, 26 Jun 2023 19:11:32 GMT
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /b?c1=2&c2=3005403&ns__t=1701800039537&ns_c=UTF-8&c8=Nigeria%E2%80%99s%20President%20Calls%20for%20Inquiry%20After%20Military%20Strike%20Kills%20at%20Least%2085%20Civilians%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
Source: global traffic	HTTP traffic detected: GET /images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-jumbo.jpg?quality=75&auto=webp HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2019/07/03/reader-center/author-elian-peltier/author-elian-peltier-thumbLarge-v6.png HTTP/1.1Host: static01.nyt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/blank-bc69fc3beb0b3a4f5ca2.js?_sw-precache=30da5847810b2eef5ca667e7be144e2c HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _dd_s=rum=0&expire=1701800937280
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/book-review-0d11a69e2206485e972a.js?_sw-precache=61162e268a23c7e8e9374127020f7ab5 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _dd_s=rum=0&expire=1701800937280
Source: global traffic	HTTP traffic detected: GET /vi-assets/static-assets/brandLandingPage-7b61278485ff97a6aad2.js?_sw-precache=f1a5bb9a49bf98fe97d02acb229b7e39 HTTP/1.1Host: www.nytimes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _dd_s=rum=0&expire=1701800937280
Source: global traffic	HTTP traffic detected: GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.52&x=0&m=0&y=1210&o=1263&w=907&j=45&R=0&W=0&I=1&E=6&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=4&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1Host: pnytimes.chartbeat.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&caller_id=nyt-vi&jkcb=1701800040554&referrer=&sourceApp=nyt-vi HTTP/1.1Host: a.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=5; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /v1/purr-cache HTTP/1.1Host: purr.nytimes.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.nytimes.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=2&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-1_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=3&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-2%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-2_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nytimes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nytimes.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0

Source: chromecache_429.2.dr	String found in binary or memory: </span>')),i&&l.push('<a href="https://www.facebook.com/'.concat(i,'" class="').concat(o.bioLinkClass,'" rel="noopener noreferrer" target="_blank">Facebook</a>')),l.push("</span>");var c=t;if(c){var u=c.split("</p>");u.splice(u.length-1,0,l.join(" ")),u.push("</p>"),c=u.join("")}return r.default.createElement(o.Bio,{className:(0,a.cx)(s)},r.default.createElement("div",{dangerouslySetInnerHTML:{__html:c}}))};s.displayName="Bio",s.defaultProps={htmlShortBiography:null,facebook:null,twitter:null,className:void 0};var l=s;t.default=l},bFSk:function(e,t,n){"use strict";var i=n("lSNA"),r=n.n(i),a=n("q1tI"),o=n("X6oL"),s=n("xHA4"),l=n("2XMp"),c=n("fZdH");function u(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function d(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?u(Object(n),!0).forEach((function(t){r()(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):u(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var f=s.storyPageTests.TRACKING_BEACON_TEST,p=s.storyPageTests.TRACKING_TEST_COMPONENTS;t.a=function(e){var t,n,i=e.name,r=e.region,s=e.template,u=e.parentUri,m=e.pageType,h=Object(o.useTracking)(),g=Object(c.a)(),v=null===(t=g[f.name])\|\|void 0===t?void 0:t.variant,y=(null===(n=g[f.name])\|\|void 0===n?void 0:n.allocated)&&p.includes(s),b=Object(a.useCallback)((function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return function(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};if(!t)return t;var a=d(d({name:i,region:r,block:s,action:"click",pgtype:m},e),n);return Object(l.b)(t,a)}}),[s,m,i,r]);return{trackImpression:Object(a.useCallback)((function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},n=d(d(d({},e),t),{},{module:d(d({name:i,context:s,region:r,list:{uri:u}},e.block\|\|{}),t.block\|\|{})});h.trackEvent(n)}}),[h,i,s,r,u]),trackInteraction:Object(a.useCallback)((function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return function(t,n){var a,o=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};v!==f.control&&y\|\|(t.preventDefault(),a=function(){var e=document.createElement("a");e.href=n,e.click()});var l=d(d(d({},e),o),{},{event:"moduleInteraction",module:d(d({name:i,context:s,region:r},e.module\|\|{}),o.module\|\|{}),eventCallback:a});h.trackEvent(l)}}),[h,i,s,r,v,y]),trackLink:b}}},bLcY:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.navListClass=t.dotClass=t.activeClass=void 0;var i=n("Jqp9"),r=n("3sMT"),a=(0,i.css)("list-style:none;counter-reset:list-block-counter;display:inline-flex;flex-flow:row nowrap;align-items:center;");t.navListClass=a
Source: chromecache_626.2.dr	String found in binary or memory: function Pd(){function a(){function a(b){r._cbv.push(b.target)}var b=r.YT.Player;t(document.getElementsByTagName("iframe"),function(f){var h=f.src,l=h&&h.indexOf("www.youtube.com/embed/");h&&l>=0&&l<9&&new b(f,{events:{onReady:a}})})}if(r.YT&&r.YT.Player)a();else{var b=r.onYouTubeIframeAPIReady;r.onYouTubeIframeAPIReady=function(){if(b){try{b.apply(r,arguments)}catch(c){}a()}}}};function Wd(a){var b=Xd;return function(c,e){if(!Kb){b();var f=r._sf_async_config,h="",l=f[B],l=ua(l);/^\//.test(l)&&(h=x(r.location.hostname));f[Wb]=Qa()+"//"+h+l;if(La(c))f[B]=J(c),e&&(f[Vb]=e);else if(c&&c.constructor===Object){var o=["authors","sections",Vb,B,Wb];t(c,function(a,b){if(Ra(o,function(a){return a===b})!==-1\|\|b.indexOf("_")===0)f[b]=b===B?J(a):a})}a()}}};if(!H.N("cb_optout")){if(window.location==window.parent.location&&!r.pSUPERFLY){var Yd=new cd,Zd={};r.pSUPERFLY=Zd;var $d=!!Sc,Xd=function(){Yd.tb();$d&&Sc.evps()};Zd.virtualPage=Wd(function(){Yd.Gb();$d&&Sc.svps()});Zd.endTracking=Xd;Zd.activity=v(Yd.nd,Yd);Yd.ob();Yc.exec(document.referrer)&&$c();var ae=I.ga(g);if(!ae?0:ae.getItem("_cb_ip")){var be=r.location;(!/^(.+[.])?chartbeat\.com$/.test(be.hostname)?0:/^\/publishing\/(overlay\|hud\|mab)\//.test(be.pathname))\|\|Bb(Zc)}else Ia(r,"message",ad)}r.pSUPERFLY_video\|\| equals www.youtube.com (Youtube)
Source: chromecache_720.2.dr	String found in binary or memory: guenos en Twitter"}};function Oi(){var e=Object(G.useTheme)(),t=e.language&&yi[e.language]\|\|yi["en-US"];return r()("div",{className:gi},void 0,r()("span",{className:hi},void 0,t.follow,": "),r()("a",{className:bi,href:"https://www.facebook.com/nytimeses/",target:"_blank",rel:"noopener noreferrer","aria-label":t.facebook},void 0,"Facebook"),r()("a",{className:bi,href:"https://twitter.com/nytimesES",target:"_blank",rel:"noopener noreferrer","aria-label":t.twitter},void 0,"Twitter"))}Oi.displayName="FollowLinks";var wi,xi,ki,Ei,_i,Ci,Ti,Pi,ji,Si,Ni,Mi,Ri=Oi,Ii=n("vftj"),Ai=n("49re"),Li=n("eOFh"),Di=n("B88b"),Bi=n("WTlo"),zi=n("jqtF"),Ui=function(e){return Object(Cn.parseISODate)(e.toISOString())},Hi={international:{issueStringBuilder:function(e){var t=Ui(e);return"/issue/todaysinyt/".concat(t.year,"/").concat(t.month,"/").concat(t.day,"/todays-new-york-times-international-edition")},sectionFrontUrl:"/section/todayspaper#international",title:"Today's Paper International"},normal:{issueStringBuilder:function(e){var t=Ui(e);return"/issue/todayspaper/".concat(t.year,"/").concat(t.month,"/").concat(t.day,"/todays-new-york-times")},sectionFrontUrl:"/section/todayspaper",title:"Today's Paper"}},qi=function(e,t,n){var a,i,r=null,o=null,l=new Date,s=n.sectionFrontUrl,c=n.issueStringBuilder,d=n.title,u=c(l);if(e===s\|\|e===u)a=d,i="https://www.nytimes.com".concat(s);else{var f=function(e,t){var n=new Date(t);n.setDate(n.getDate()+1);var a=e(n),i=new Date(t);return i.setDate(i.getDate()-1),[e(i),a]}(c,t),p=k()(f,2);o=p[0],r=p[1]}return{canonicalUrl:i,title:a,nextLink:r,prevLink:o}},Fi=function(e,t){var n,a=e.pathname+e.hash,i=(n=a).includes("/todaysinyt")\|\|n.includes("#international"),r=function(e){return e.includes("/todayspaper")}(a);return i\|\|r?[!0,qi(a,t,i?Hi.international:Hi.normal)]:[!1,{}]};function Vi(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function Wi(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?Vi(Object(n),!0).forEach((function(t){l()(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):Vi(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var Yi=["videoSixteenByNineJumbo1600","videoSixteenByNine1050","videoSixteenByNine768"];function Gi(e){var t,n,a=e.collection,i=e.lists,o=e.type,l=e.isCustomFeatures,s=e.isEspanolHp,c=Object(_.useLocation)(),d=a.sourceId,f=a.collectionType,p=a.headline,m=a.section,g=a.subsection,h=a.firstPublished,v=a.lastModified,b=a.longDescription,y=a.slug,O=a.url,x=a.name,E=a.tagline,C=a.promoMedia,T=a.language,P=g?g.displayName:m.displayName,j=O.split(".com")[1],S="".concat(f,"collection").toLowerCase(),N=Object(L.m)({url:O,slug:y,language:T}),M=C&&C.crops?Object(L.c)(C,Yi):null,R=M?M.url:Ut.b,I=Object(w.d)(c),
Source: chromecache_720.2.dr	String found in binary or memory: guenos en Twitter"}};function Oi(){var e=Object(G.useTheme)(),t=e.language&&yi[e.language]\|\|yi["en-US"];return r()("div",{className:gi},void 0,r()("span",{className:hi},void 0,t.follow,": "),r()("a",{className:bi,href:"https://www.facebook.com/nytimeses/",target:"_blank",rel:"noopener noreferrer","aria-label":t.facebook},void 0,"Facebook"),r()("a",{className:bi,href:"https://twitter.com/nytimesES",target:"_blank",rel:"noopener noreferrer","aria-label":t.twitter},void 0,"Twitter"))}Oi.displayName="FollowLinks";var wi,xi,ki,Ei,_i,Ci,Ti,Pi,ji,Si,Ni,Mi,Ri=Oi,Ii=n("vftj"),Ai=n("49re"),Li=n("eOFh"),Di=n("B88b"),Bi=n("WTlo"),zi=n("jqtF"),Ui=function(e){return Object(Cn.parseISODate)(e.toISOString())},Hi={international:{issueStringBuilder:function(e){var t=Ui(e);return"/issue/todaysinyt/".concat(t.year,"/").concat(t.month,"/").concat(t.day,"/todays-new-york-times-international-edition")},sectionFrontUrl:"/section/todayspaper#international",title:"Today's Paper International"},normal:{issueStringBuilder:function(e){var t=Ui(e);return"/issue/todayspaper/".concat(t.year,"/").concat(t.month,"/").concat(t.day,"/todays-new-york-times")},sectionFrontUrl:"/section/todayspaper",title:"Today's Paper"}},qi=function(e,t,n){var a,i,r=null,o=null,l=new Date,s=n.sectionFrontUrl,c=n.issueStringBuilder,d=n.title,u=c(l);if(e===s\|\|e===u)a=d,i="https://www.nytimes.com".concat(s);else{var f=function(e,t){var n=new Date(t);n.setDate(n.getDate()+1);var a=e(n),i=new Date(t);return i.setDate(i.getDate()-1),[e(i),a]}(c,t),p=k()(f,2);o=p[0],r=p[1]}return{canonicalUrl:i,title:a,nextLink:r,prevLink:o}},Fi=function(e,t){var n,a=e.pathname+e.hash,i=(n=a).includes("/todaysinyt")\|\|n.includes("#international"),r=function(e){return e.includes("/todayspaper")}(a);return i\|\|r?[!0,qi(a,t,i?Hi.international:Hi.normal)]:[!1,{}]};function Vi(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function Wi(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?Vi(Object(n),!0).forEach((function(t){l()(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):Vi(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var Yi=["videoSixteenByNineJumbo1600","videoSixteenByNine1050","videoSixteenByNine768"];function Gi(e){var t,n,a=e.collection,i=e.lists,o=e.type,l=e.isCustomFeatures,s=e.isEspanolHp,c=Object(_.useLocation)(),d=a.sourceId,f=a.collectionType,p=a.headline,m=a.section,g=a.subsection,h=a.firstPublished,v=a.lastModified,b=a.longDescription,y=a.slug,O=a.url,x=a.name,E=a.tagline,C=a.promoMedia,T=a.language,P=g?g.displayName:m.displayName,j=O.split(".com")[1],S="".concat(f,"collection").toLowerCase(),N=Object(L.m)({url:O,slug:y,language:T}),M=C&&C.crops?Object(L.c)(C,Yi):null,R=M?M.url:Ut.b,I=Object(w.d)(c),
Source: chromecache_688.2.dr	String found in binary or memory: return b}sC.F="internal.enableAutoEventOnTimer";var yc=ea(["data-gtm-yt-inspected-"]),tC=["www.youtube.com","www.youtube-nocookie.com"],uC,vC=!1; equals www.youtube.com (Youtube)
Source: chromecache_631.2.dr	String found in binary or memory: s National Emergency Management Agency.","formats":[]}]},{"__typename":"Dropzone","adsDesktopHoldout":false,"adsMobileHoldout":false,"adsMobile":false,"adsDesktop":false,"index":1,"bad":false},{"__typename":"ParagraphBlock","textAlign":"LEFT","content":[{"__typename":"TextInline","text":"As of Tuesday, at least 85 people had been pronounced dead, including children, women and older people, the agency ","formats":[]},{"__typename":"TextInline","text":"said in a statement","formats":[{"__typename":"LinkFormat","url":"https:\u002F\u002Fwww.facebook.com\u002Fnemanigeria\u002Fposts\u002F767548232083286","title":"","uri":null}]},{"__typename":"TextInline","text":". At least 66 others were injured, and the search for more bodies was continuing, the agency said. ","formats":[]}]},{"__typename":"Dropzone","adsDesktopHoldout":false,"adsMobileHoldout":true,"adsMobile":false,"adsDesktop":false,"index":2,"bad":false},{"__typename":"ParagraphBlock","textAlign":"LEFT","content":[{"__typename":"TextInline","text":"As Nigeria, a West African nation, has been fighting extremist groups for more than a decade, its military has increasingly resorted to airstrikes, with accidental bombings becoming far too common, security analysts and human rights experts say. ","formats":[]}]},{"__typename":"Dropzone","adsDesktopHoldout":true,"adsMobileHoldout":false,"adsMobile":true,"adsDesktop":true,"index":3,"bad":false},{"__typename":"ParagraphBlock","textAlign":"LEFT","content":[{"__typename":"TextInline","text":"But Sunday equals www.facebook.com (Facebook)
Source: chromecache_631.2.dr	String found in binary or memory: s National Emergency Management Agency.</p><p class="css-at9mc1 evys1bk0">As of Tuesday, at least 85 people had been pronounced dead, including children, women and older people, the agency <a class="css-yywogo" href="https://www.facebook.com/nemanigeria/posts/767548232083286" title="" rel="noopener noreferrer" target="_blank">said in a statement</a>. At least 66 others were injured, and the search for more bodies was continuing, the agency said. </p><p class="css-at9mc1 evys1bk0">As Nigeria, a West African nation, has been fighting extremist groups for more than a decade, its military has increasingly resorted to airstrikes, with accidental bombings becoming far too common, security analysts and human rights experts say. </p></div><aside class="css-ew4tgv" aria-label="companion column"></aside></div><div></div><div class="css-s99gbd StoryBodyCompanionColumn"><div class="css-53u6y8"><p class="css-at9mc1 evys1bk0">But Sunday equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:13:04 GMTServer: Apache/2.4.6 (CentOS) PHP/5.4.16Content-Length: 209Keep-Alive: timeout=5, max=98Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /favicon.ico was not found on this server.</p></body></html>

Source: chromecache_539.2.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_773.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_773.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_626.2.dr	String found in binary or memory: http://img.youtube.com/vi/
Source: chromecache_773.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_773.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_626.2.dr	String found in binary or memory: http://link.theplatform.com/s/ngc/
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: http://nope.theworkpc.com
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: http://nytimes.com/wirecutter/gifts/?areas=dock&campaign=WCHoliday&channel=onsite
Source: chromecache_720.2.dr	String found in binary or memory: http://nytimesineducation.com/schoolwide/?Pardot_Campaign_Code_Form_Input=64JLW#find-rep
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: http://opengraphprotocol.org/schema/
Source: chromecache_405.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_445.2.dr	String found in binary or memory: http://tap.rubiconproject.com/partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded
Source: chromecache_416.2.dr, chromecache_548.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_632.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_596.2.dr	String found in binary or memory: http://www.nytimes.com
Source: chromecache_725.2.dr, chromecache_433.2.dr	String found in binary or memory: http://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html
Source: chromecache_524.2.dr, chromecache_614.2.dr	String found in binary or memory: http://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://a.et.nytimes.com
Source: chromecache_596.2.dr	String found in binary or memory: https://a.et.nytimes.com/
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://a.nytimes.com/svc/nyt/data-layer
Source: chromecache_603.2.dr, chromecache_712.2.dr	String found in binary or memory: https://aax-us-east.amazon-adsystem.com
Source: chromecache_608.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://als-svc.nytimes.com
Source: chromecache_405.2.dr	String found in binary or memory: https://apnews.com/article/israel-palestine-settler-bedouin-displacement-violence-un-108e11712310b5e
Source: chromecache_631.2.dr	String found in binary or memory: https://army.mil.ng/?p=7496
Source: chromecache_661.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://bostonglobe-prod.cdn.arcpublishing.com/resizer/hVHMTKx5DarqZBZHivNO22lZQnU=/1440x0/cloudfron
Source: chromecache_688.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_580.2.dr	String found in binary or memory: https://cdn.brandmetrics.com
Source: chromecache_618.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/hls.js
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js
Source: chromecache_626.2.dr	String found in binary or memory: https://chartbeat.com
Source: chromecache_626.2.dr	String found in binary or memory: https://chartbeat.com/publishing/hud2/versioninfo/?host=
Source: chromecache_661.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZW9oTXuTmmdZfZr30kZu
Source: chromecache_642.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_642.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZTcyZTBlM2QtNWM3NC02YzJkLTQ0NzMtYmU5ND
Source: chromecache_692.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=QNPFsclET9WxvgoxPK0jMw%3D%3
Source: chromecache_692.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_391.2.dr	String found in binary or memory: https://cn.nytimes.com/
Source: chromecache_580.2.dr	String found in binary or memory: https://collector.brandmetrics.com
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://content.api.nytimes.com
Source: chromecache_391.2.dr	String found in binary or memory: https://cooking.nytimes.com
Source: chromecache_720.2.dr	String found in binary or memory: https://cooking.nytimes.com/
Source: chromecache_551.2.dr	String found in binary or memory: https://cooking.nytimes.com/frequently-asked-questions
Source: chromecache_720.2.dr	String found in binary or memory: https://cooking.nytimes.com/guides/26-how-to-make-cocktails-and-mixed-drinks
Source: chromecache_720.2.dr	String found in binary or memory: https://cooking.nytimes.com/guides/41-how-to-drink-wine
Source: chromecache_720.2.dr	String found in binary or memory: https://cooking.nytimes.com/learn-to-cook
Source: chromecache_720.2.dr	String found in binary or memory: https://cooking.nytimes.com/topics/cocktail-recipes
Source: chromecache_461.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_cons
Source: chromecache_507.2.dr	String found in binary or memory: https://datadome.co
Source: chromecache_692.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&dongle=u6nf&gdpr=0&gdp
Source: chromecache_773.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_578.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_578.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Lora:400
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LIftL.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LJftLp_A.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LLPtLp_A.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LL_tLp_A.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LLvtLp_A.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIvMX1D_JOuMw77I-NP.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIvMX1D_JOuMwT7I-NP.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIvMX1D_JOuMwX7I-NP.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIvMX1D_JOuMwf7I-NP.woff2)
Source: chromecache_498.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v32/0QIvMX1D_JOuMwr7Iw.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_745.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwkxduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlBduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmBduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmRduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmhduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmxduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwkxduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlBduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmhduz8A.woff2)
Source: chromecache_494.2.dr, chromecache_763.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmxduz8A.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlBduz8A.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmBduz8A.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmRduz8A.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2)
Source: chromecache_494.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2)
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css
Source: chromecache_650.2.dr, chromecache_674.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_751.2.dr, chromecache_423.2.dr	String found in binary or memory: https://github.com/BlackrockDigital/startbootstrap-clean-blog/blob/master/LICENSE)
Source: chromecache_472.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_650.2.dr, chromecache_674.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_650.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_410.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_410.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us
Source: chromecache_639.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/10940941449492
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/115014792127-Copyright-notice
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_639.2.dr, chromecache_405.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/115014893428-Terms-of-service
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/115014893968-Terms-of-sale
Source: chromecache_631.2.dr, chromecache_551.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/115015385887-Contact-Us
Source: chromecache_786.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/115015385887-Contact-us
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/115015727108-Accessibility
Source: chromecache_786.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/115015957688-NYTimes-com-passes
Source: chromecache_551.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/articles/360052272251-New-York-Times-Games-Subscription
Source: chromecache_551.2.dr	String found in binary or memory: https://help.nytimes.com/hc/en-us/sections/115003859548-The-New-York-Times-News-App
Source: chromecache_661.2.dr	String found in binary or memory: https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZW9oTXuTmmdZfZr30kZulQAA%26574&gpdr=
Source: chromecache_461.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_661.2.dr	String found in binary or memory: https://id.rlcdn.com/711587.gif
Source: chromecache_720.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/nyt-cooking-recipes-from-new/id911422904?mt=8
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://js.sentry-cdn.com/7bc8bccf5c254286a99b11c68f6bf4ce.min.js
Source: chromecache_661.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale
Source: chromecache_692.2.dr, chromecache_461.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_642.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://meter-svc.nytimes.com
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://mwcm.nytimes.com
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://myaccount.nytimes.com
Source: chromecache_759.2.dr, chromecache_449.2.dr	String found in binary or memory: https://myaccount.nytimes.com/auth/iframe/enter-email
Source: chromecache_631.2.dr, chromecache_606.2.dr	String found in binary or memory: https://myaccount.nytimes.com/auth/prefetch-assets
Source: chromecache_429.2.dr	String found in binary or memory: https://myaccount.nytimes.com/get-started/manage-billing
Source: chromecache_773.2.dr	String found in binary or memory: https://myaccount.nytimes.com/get-started/payment
Source: chromecache_768.2.dr, chromecache_732.2.dr, chromecache_502.2.dr, chromecache_613.2.dr	String found in binary or memory: https://myaccount.stg.nytimes.com
Source: chromecache_596.2.dr	String found in binary or memory: https://nyt-dti-prd-staticjs.storage.googleapis.com/analytics/et2/eventtracker-snippet.js
Source: chromecache_786.2.dr	String found in binary or memory: https://nytimes.com/contactinternational
Source: chromecache_551.2.dr	String found in binary or memory: https://nytimes.onelink.me/IM32/954270da
Source: chromecache_391.2.dr	String found in binary or memory: https://nytlicensing.com/
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://nytmediakit.com/
Source: chromecache_760.2.dr, chromecache_667.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_416.2.dr, chromecache_548.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_548.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_416.2.dr, chromecache_548.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_760.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_667.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_688.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_483.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_512.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_760.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_667.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_606.2.dr	String found in binary or memory: https://peacekeeping.un.org/en/department-of-peace-operations
Source: chromecache_692.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=40D3C5B1-C944-4FD5-B1BE-
Source: chromecache_446.2.dr	String found in binary or memory: https://platform.iteratehq.com
Source: chromecache_446.2.dr	String found in binary or memory: https://platform.iteratehq.com/
Source: chromecache_642.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0
Source: chromecache_692.2.dr, chromecache_461.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/40D3C5B1-C944-4FD5-B1BE-0A313CAD2333?gdpr=0&gdpr_consent=
Source: chromecache_405.2.dr	String found in binary or memory: https://reliefweb.int/report/occupied-palestinian-territory/hostilities-gaza-strip-and-israel-flash-
Source: chromecache_692.2.dr, chromecache_461.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=40D3C5B1-C944-4FD5-B1B
Source: chromecache_642.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9397a18a-89a9-8973-919
Source: chromecache_661.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_661.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=index.com&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB
Source: chromecache_642.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=9397a18a-89a9-8973-919d-66baf990759b
Source: chromecache_640.2.dr, chromecache_475.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_o
Source: chromecache_515.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=pm-db5_rbd_n-MediaNet
Source: chromecache_485.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=rbd
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/ATH8A-MAMN8-XPXCH-N5KAX-8D239
Source: chromecache_539.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_539.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_608.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/studio/cached_libs/gsap_3.2.4_min.js
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://samizdat-graphql.nytimes.com/graphql/v2
Source: chromecache_482.2.dr	String found in binary or memory: https://schema.org/Book
Source: chromecache_483.2.dr, chromecache_472.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_631.2.dr	String found in binary or memory: https://securityassistance.org/wp-content/uploads/2022/05/Nigeria-May-2022-Factsheet-FINAL.pdf
Source: chromecache_661.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDP
Source: chromecache_626.2.dr	String found in binary or memory: https://static.chartbeat.com/js/inpage.js
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com
Source: chromecache_623.2.dr	String found in binary or memory: https://static01.nyt.com/ads/readTpc.js
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/ads/tpc-check.html
Source: chromecache_631.2.dr	String found in binary or memory: https://static01.nyt.com/images/2019/07/03/reader-center/author-elian-peltier/author-elian-peltier-t
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/10/17/multimedia/05israel-hamas-hostages-men-new/05israel-hamas
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/10/17/multimedia/05israel-hamas-hostages-men-new/17israelgaza-p
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-mediumSq
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-superJum
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-videoSix
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-khan-younis-01-wqvc/04israel-ha
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-miller-01-tjqm/04israel-hamas-m
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-precision-cmpb/04israel-hamas-p
Source: chromecache_606.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/04/multimedia/04israel-un-aid-01-bvqm/04israel-un-aid-01-bvq
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-ha
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-eu-terror-01-qwpm/05israel-hama
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-settler-visa-ban-vzbf/05israel-
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-who-health-fbgw/05israel-hamas-
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05nat-collegepresidents-ktzm/05nat-collegepres
Source: chromecache_631.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-fa
Source: chromecache_631.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-me
Source: chromecache_631.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-su
Source: chromecache_631.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-vi
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/5-gaza-promo1230-gphw/5-gaza-promo1230-gphw-fa
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/5-gaza-promo1230-gphw/5-gaza-promo1230-gphw-me
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/5-gaza-promo1230-gphw/5-gaza-promo1230-gphw-su
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/2023/12/05/multimedia/5-gaza-promo1230-gphw/5-gaza-promo1230-gphw-vi
Source: chromecache_521.2.dr	String found in binary or memory: https://static01.nyt.com/images/icons/t_logo_150_black.png
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/images/icons/t_logo_291_black.png
Source: chromecache_720.2.dr	String found in binary or memory: https://static01.nyt.com/marketing/images/newsletter/louder/music_75.jpg
Source: chromecache_720.2.dr	String found in binary or memory: https://static01.nyt.com/marketing/newsletters/images/Edit_75b.jpg
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/vi-assets/images/share/1200x1200_t.png
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/vi-assets/images/share/1200x675_nameplate.png
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/vi-assets/images/share/1200x900_t.png
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://static01.nyt.com/vi-assets/static-assets/fides-0947c9327de3886fd8ebc6ecc05cc502.js
Source: chromecache_618.2.dr	String found in binary or memory: https://static01.nytimes.com/ads/adplatforms/cdn/hls.js
Source: chromecache_618.2.dr	String found in binary or memory: https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/audio-off.svg
Source: chromecache_618.2.dr	String found in binary or memory: https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/audio-on.svg
Source: chromecache_618.2.dr	String found in binary or memory: https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/fullscreen-off.svg
Source: chromecache_618.2.dr	String found in binary or memory: https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/fullscreen-on.svg
Source: chromecache_618.2.dr	String found in binary or memory: https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/pause.svg
Source: chromecache_618.2.dr	String found in binary or memory: https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/play.svg
Source: chromecache_405.2.dr	String found in binary or memory: https://static01.nytimes.com/newsgraphics/2023-12-04-evacuations-south/0f184179-b2eb-4a1c-a40d-98dbe
Source: chromecache_626.2.dr	String found in binary or memory: https://static2.chartbeat.com/frontend_ng/hud/hud-inpage/hud-inpage-
Source: chromecache_391.2.dr	String found in binary or memory: https://store.nytimes.com/
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://store.nytimes.com/discount/HOLIDAY2023?utm_source=nyt&utm_medium=dock&utm_campaign=bfcm
Source: chromecache_461.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=
Source: chromecache_661.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=68
Source: chromecache_688.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_391.2.dr	String found in binary or memory: https://theathletic.com
Source: chromecache_461.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_
Source: chromecache_391.2.dr	String found in binary or memory: https://timesmachine.nytimes.com/browser
Source: chromecache_445.2.dr	String found in binary or memory: https://token.rubiconproject.com/khaos.json?
Source: chromecache_667.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_667.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_692.2.dr, chromecache_461.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_692.2.dr, chromecache_461.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&re
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://us-central1-nyt-dsra-prd.cloudfunctions.net/datagov-dsr-formhandler
Source: chromecache_461.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_co
Source: chromecache_692.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_405.2.dr	String found in binary or memory: https://vp.nyt.com/video/2023/12/05/113942_1_05vid-Southern-Gaza_wg_240p.mp4
Source: chromecache_405.2.dr	String found in binary or memory: https://www.adl.org/resources/press-release/nearly-three-quarters-jewish-students-experienced-or-wit
Source: chromecache_405.2.dr	String found in binary or memory: https://www.cair.com/press_releases/cair-reports-sharp-increase-in-complaints-reported-bias-incident
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js
Source: chromecache_405.2.dr	String found in binary or memory: https://www.europol.europa.eu/media-press/newsroom/news/terrorism-in-eu-in-2022-%E2%80%93-facts-and-
Source: chromecache_667.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_786.2.dr	String found in binary or memory: https://www.google.com/calendar/render?action=TEMPLATE&text=
Source: chromecache_667.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_416.2.dr, chromecache_548.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_688.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-P528B3&gtm_auth=tfAzqo1rYDLgYhmTnSjPqw&gtm_preview=en
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-P528B3&gtm_auth=tfAzqo1rYDLgYhmTnSjPqw&gtm_preview=e
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytco.com/
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytco.com/careers/
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytco.com/company/diversity-and-inclusion/
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytco.com/company/standards-ethics/
Source: chromecache_617.2.dr	String found in binary or memory: https://www.nytcommunitiesfund.org/donate/?utm_source=widget&utm_medium=nytwebsite&utm_content=CF&ut
Source: chromecache_606.2.dr, chromecache_429.2.dr, chromecache_639.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/#publisher
Source: chromecache_631.2.dr	String found in binary or memory: https://www.nytimes.com/2022/03/30/world/africa/nigeria-train-attack.html
Source: chromecache_606.2.dr	String found in binary or memory: https://www.nytimes.com/2022/08/19/world/europe/united-nations-odesa.html
Source: chromecache_606.2.dr	String found in binary or memory: https://www.nytimes.com/2022/08/22/world/middleeast/humanitarian-aid-gap-un.html
Source: chromecache_631.2.dr	String found in binary or memory: https://www.nytimes.com/2023/02/24/world/africa/nigeria-election-kidnappings.html
Source: chromecache_606.2.dr	String found in binary or memory: https://www.nytimes.com/2023/09/27/world/middleeast/united-nations-security-council-reform.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/10/15/us/muslim-boy-stabbed-landlord-chicago.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/10/18/us/harvard-students-israel-hamas-doxxing.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/10/19/us/politics/us-missiles-yemen.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/02/world/middleeast/west-bank-palestinians-israel-settlers.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/03/world/middleeast/mohammed-abu-hatab-reporter-killed-gaza.html#:~:
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/04/us/politics/israel-gaza-deaths-bombs.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/09/us/antisemitic-speech-palestine-israel-protests.html
Source: chromecache_606.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/14/world/middleeast/unrwa-gaza-aid-struggles.html
Source: chromecache_606.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/15/world/middleeast/united-nations-security-council-israel-gaza.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/25/world/middleeast/israel-gaza-death-toll.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/26/us/palestinian-students-shootings-burlington.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/29/us/harvard-antisemitism-civil-rights-investigation.html
Source: chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/30/world/middleeast/israeli-hostages-stories.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/11/30/world/middleeast/the-truce-broke-down-over-the-details-of-further
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/01/world/middleeast/palestinian-prisoners-released-gaza.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/briefing/why-dont-we-dance-more.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/americas/canada-buys-boeing-poseidon.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/americas/chile-deportation-killing-victor-jara.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/asia/earthquake-philippines-mindanao.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/asia/philippines-explosion.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/europe/ireland-palestinians-support.html
Source: chromecache_619.2.dr, chromecache_405.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/europe/paris-knife-attack.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/europe/ukrainian-military-dnipro-river-battle.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/middleeast/israel-gaza-evacuations-war.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/middleeast/israel-hamas-attack-intelligence.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/middleeast/israel-hostages-tel-aviv-protest.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/middleeast/israel-netanyahu-hamas-war.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/02/world/middleeast/kamala-harris-israel-gaza.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/americas/maduro-vote-essequibo-guyana.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/asia/india-state-elections-modi.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/asia/modi-india-state-bjp-gaza.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/europe/germany-ukraine-refugees.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/europe/munich-airport-snow-bavaria-canceled.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/europe/paris-terror-attack.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/middleeast/gaza-israel-evacuation-orders.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/middleeast/israel-hamas-hostages-gaza.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/middleeast/israel-war-mothers.html
Source: chromecache_619.2.dr, chromecache_405.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/03/world/middleeast/navy-red-sea-attack-pentagon.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/briefing/gaza-evacuation-germany-ukraine.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/briefing/tuesday-briefing-israel-expands-operations-across-gaza.h
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/climate/global-fossil-fuel-emissions.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/us/politics/kamala-harris-israel-middle-east.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/us/politics/us-congress-ukraine.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/us/politics/us-red-sea-task-force-iran.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/africa/johannesburg-squatters-building-fire.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/asia/hong-kong-agnes-chow-activist.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/asia/indonesia-volcano-hikers.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/asia/taiwan-election-youth-vote-china.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/asia/us-osprey-crash-japan.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/australia/kiwi-birds-wellington-new-zealand.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/europe/evan-gershkovich-russia-detained.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/europe/olive-oil-fraud-italy-spain.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/europe/russia-prison-wagner-ukraine.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/middleeast/israel-hamas-gaza-war.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/middleeast/israel-hamas-sexual-violence-un.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/middleeast/militant-rocket-israel-oct-7.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/middleeast/netanyahu-corruption-trial.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/04/world/middleeast/oct-7-attacks-israel-hamas-sexual-violence.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/briefing/gaza-war-cop28-ukraine.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/climate/air-conditioning-electricity.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/climate/cop28-climate-faith-religion.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/climate/fishing-whale-endangered-species.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/climate/renewable-energy-inflation-climate-cop28.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/us/harvard-university-of-pennsylvania-mit-antisemitism-congress.h
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/us/math-scores-pandemic-pisa.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/us/politics/ukraine-aid-zelensky-congress.html
Source: chromecache_631.2.dr, chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/world/asia/rohingya-refugees-boat-thailand-indonesia.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/world/europe/boris-johnson-uk-covid-inquiry.html
Source: chromecache_619.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/world/europe/putin-visit-saudi-arabia-uae.html
Source: chromecache_619.2.dr, chromecache_405.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/world/middleeast/israel-hamas-eu-terror-christmas.html
Source: chromecache_606.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html
Source: chromecache_619.2.dr, chromecache_405.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/2023/12/05/world/middleeast/us-visas-israelis-palestinians.html
Source: chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/account/product-switch
Source: chromecache_786.2.dr	String found in binary or memory: https://www.nytimes.com/activate-access/sso
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/article/how-the-times-is-covering-the-israel-hamas-war.html
Source: chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/article/israel-gaza-photos.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/adam-sella
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/anemona-hartocollis
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/ben-hubbard
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/edward-wong
Source: chromecache_631.2.dr	String found in binary or memory: https://www.nytimes.com/by/elian-peltier
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/emma-bubola
Source: chromecache_606.2.dr	String found in binary or memory: https://www.nytimes.com/by/farnaz-fassihi
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/matthew-mpoke-bigg
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/michael-crowley
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/peter-baker
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/shashank-bengali
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/the-new-york-times
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/by/victoria-kim
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/ca/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.nytimes.com/column/book-review-podcast
Source: chromecache_551.2.dr	String found in binary or memory: https://www.nytimes.com/content/help/account/purchases/subscriptions-and-purchases.html
Source: chromecache_720.2.dr	String found in binary or memory: https://www.nytimes.com/interactive/2018/briefing/global-morning-briefing-newsletter-signup.html
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/interactive/2019/04/03/world/white-extremist-terrorism-christchurch.html
Source: chromecache_720.2.dr	String found in binary or memory: https://www.nytimes.com/interactive/2022/10/31/realestate/affordable-housing-calculator.html
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/interactive/2023/01/28/admin/the-new-york-times-masthead.html
Source: chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/interactive/2023/10/07/world/middleeast/israel-gaza-maps.html
Source: chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/interactive/2023/12/02/world/middleeast/gaza-map-displaced-people.html
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/international/
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/11/17/world/israel-hamas-gaza-war-news#the-israeli-army-escorted-t
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/11/30/world/israel-hamas-war-gaza-news#the-israeli-military-signal
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/02/world/israel-hamas-war-gaza-news/the-truce-talks-broke-down-
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/04/world/israel-hamas-war-gaza-news/as-gazans-face-evacuation-o
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/04/world/israel-hamas-war-gaza-news/khan-younis-a-city-in-south
Source: chromecache_405.2.dr, chromecache_500.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#bombardment-intensifies-as-
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#harvard-university-of-penns
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#how-the-times-is-covering-t
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#israel-hamas-eu-terror-chri
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#israeli-families-fear-for-t
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#khan-younis-a-city-in-south
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#the-state-department-says-h
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#the-us-says-israel-must-do-
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#us-red-sea-task-force-iran
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#us-visas-israelis-palestini
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#worse-by-the-hour-the-who-w
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news/bombardment-intensifies-as-
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news/the-state-department-says-h
Source: chromecache_619.2.dr, chromecache_405.2.dr, chromecache_504.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news/the-us-says-israel-must-do-
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news/worse-by-the-hour-the-who-w
Source: chromecache_551.2.dr	String found in binary or memory: https://www.nytimes.com/marketing/cooking/app
Source: chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/news-event/israel-hamas-gaza
Source: chromecache_556.2.dr	String found in binary or memory: https://www.nytimes.com/privacy/cookie-policy
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/privacy/cookie-policy#how-do-i-manage-trackers
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/privacy/privacy-policy
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/section/todayspaper
Source: chromecache_551.2.dr	String found in binary or memory: https://www.nytimes.com/subscription
Source: chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/cooking
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/cooking/gift?campaignId=8LWRF&source=gifting.dockcooking
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/games/gift?campaignId=8LWRF&source=gifting.dockgames
Source: chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/gift?campaignId=8LWRF&source=gifting.dock
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/gift?campaignId=8LWRF&source=gifting.dockallaccess
Source: chromecache_551.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/groups
Source: chromecache_551.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/home-delivery
Source: chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/multiproduct/lp8HYKU.html?campaignId=4KKHF
Source: chromecache_773.2.dr	String found in binary or memory: https://www.nytimes.com/subscription/onboarding-offer
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/subscription?campaignId=37WXW
Source: chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/svc/oembed/json/?url=
Source: chromecache_631.2.dr, chromecache_606.2.dr	String found in binary or memory: https://www.nytimes.com/svc/oembed/json/?url=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH-TheAthleticGiftDoc
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_AAGiftDock.gif
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_AALogo.svg
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_CookingGiftDock.gi
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_CookingLogo.svg
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_GamesGiftDock.gif
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_GamesLogo.svg
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_TheAthleticLogo.sv
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_WirecutterLogo.svg
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/NYTBox-RED.png
Source: chromecache_560.2.dr, chromecache_429.2.dr	String found in binary or memory: https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/NYTimes-logo.svg
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/video/players/offsite/index.html?videoId=100000009210275
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/video/world/middleeast/100000009160394/gaza-rafah-israel-hamas.html?smid=url
Source: chromecache_405.2.dr	String found in binary or memory: https://www.nytimes.com/video/world/middleeast/100000009210275/southern-gaza-khan-younis-hospital.ht
Source: chromecache_631.2.dr	String found in binary or memory: https://www.reuters.com/investigates/special-report/nigeria-military-abortions/
Source: chromecache_631.2.dr	String found in binary or memory: https://www.reuters.com/investigates/special-report/nigeria-military-children/
Source: chromecache_631.2.dr	String found in binary or memory: https://www.sbmintel.com/2023/02/chart-of-the-week-nigeria-air-force-mishaps/
Source: chromecache_631.2.dr	String found in binary or memory: https://www.sbmintel.com/2023/11/chart-of-the-week-kidnapped-priests-in-nigeria/
Source: chromecache_606.2.dr	String found in binary or memory: https://www.stephenschlesinger.com/act-of-creation/
Source: chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	String found in binary or memory: https://www.tbrandstudio.com/
Source: chromecache_606.2.dr	String found in binary or memory: https://www.unocha.org/publications/report/world/global-humanitarian-overview-2023-october-update-sn
Source: chromecache_405.2.dr	String found in binary or memory: https://www.unrwa.org/palestine-refugees
Source: chromecache_405.2.dr	String found in binary or memory: https://x.com/TomWhiteGaza/status/1731923657692250583?s=20

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50579
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50571
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50570
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50575
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50580
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50584
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 50609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50593
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 50654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 50617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081

Source: unknown	HTTPS traffic detected: 23.51.54.94:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.54.94:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:50095 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3612_1109555937

Jump to behavior

Source: classification engine

Classification label: clean2.win@39/369@372/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nope.theworkpc.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4124 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4124 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://nope.theworkpc.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
http://nope.theworkpc.com/rss_content/js/rss_blog.min.js	0%	Avira URL Cloud	safe
http://nope.theworkpc.com/favicon.ico	0%	Avira URL Cloud	safe
https://sync.bfmio.com/sync?pid=187&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://army.mil.ng/?p=7496	0%	Avira URL Cloud	safe
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.236.220.17	true	false	high
ny5-prebid.a-mx.net	147.75.198.144	true	false	unknown
us-east-eb2.3lift.com	35.71.139.29	true	false	high
prebid.media.net	34.120.63.153	true	false	high
platform.iteratehq.com	104.26.6.229	true	false	high
rtb.openx.net	35.186.253.211	true	false	high
cdn.w55c.net	54.163.159.203	true	false	high
crb.kargo.com	44.217.198.78	true	false	high
imagesync-vac.pubmnet.com	8.28.7.82	true	false	unknown
us-east-tlx.3lift.com	44.198.213.90	true	false	high
dsum.casalemedia.com	172.64.151.101	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
gob-njr3.pubmnet.com	104.36.115.111	true	false	unknown
cm.g.doubleclick.net	172.253.63.155	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
idaas-ext.cph.liveintent.com	50.17.66.232	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	52.73.239.53	true	false	unknown
www.google.com	142.251.16.147	true	false	high
cdn.brandmetrics.com	104.26.12.18	true	false	unknown
id.rlcdn.com	35.244.154.8	true	false	high
idaas6.cph.liveintent.com	54.86.106.102	true	false	high
match.adsrvr.org	35.71.131.137	true	false	high
match.prod.bidr.io	54.157.75.191	true	false	unknown
pagead-googlehosted.l.google.com	142.251.16.132	true	false	high
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
googleads4.g.doubleclick.net	172.253.122.155	true	false	high
securepubads46.g.doubleclick.net	172.253.122.155	true	false	high
iteratehq.com	104.26.6.229	true	false	high
d1ykf07e75w7ss.cloudfront.net	18.160.53.102	true	false	high
cs.media.net	23.46.192.28	true	false	high
d1jvc9b8z3vcjs.cloudfront.net	3.162.114.30	true	false	high
ssum-sec.casalemedia.com	172.64.151.101	true	false	high
d1bqktvj79b0wh.cloudfront.net	13.32.151.58	true	false	high
spug-vac.pubmnet.com	8.28.7.84	true	false	unknown
sb.scorecardresearch.com	18.165.98.49	true	false	unknown
td.doubleclick.net	142.251.111.155	true	false	high
clients.l.google.com	142.251.16.138	true	false	high
config.aps.amazon-adsystem.com	18.173.132.21	true	false	high
user-data-us-east.bidswitch.net	35.211.178.172	true	false	unknown
s0.2mdn.net	172.253.122.149	true	false	high
nope.theworkpc.com	216.9.224.57	true	false	unknown
dart.l.doubleclick.net	142.251.111.149	true	false	high
hb.yahoo.net	23.218.218.72	true	false	high
www.googletagservices.com	172.253.122.156	true	false	high
htlb.casalemedia.com	172.64.151.101	true	false	high
u.openx.net	35.244.159.8	true	false	high
pnytimes.chartbeat.net	34.227.121.59	true	false	unknown
d3f7zc5bbfci5.cloudfront.net	18.160.55.166	true	false	high
adservice.google.com	142.251.16.157	true	false	high
nytimes-d.openx.net	35.244.159.8	true	false	high
contextual.media.net	23.56.8.25	true	false	high
insight.adsrvr.org	52.223.40.198	true	false	high
region-selector.nyti.nytimes.com	52.54.49.121	true	false	high
detpi4b5pore2.cloudfront.net	18.67.65.51	true	false	high
rtb.adentifi.com	54.175.39.171	true	false	unknown
sync.srv.stackadapt.com	54.198.207.123	true	false	high
thrtle.com	44.218.177.189	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.45.125.152	true	false	high
nava.vap.lijit.com	23.92.190.68	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
sync.ipredictive.com	52.5.231.5	true	false	unknown
accounts.google.com	172.253.62.84	true	false	high
ad.doubleclick.net	172.253.63.148	true	false	high
s.amazon-adsystem.com	52.46.155.104	true	false	high
aax-eu.amazon-adsystem.com	52.95.125.22	true	false	high
pugm88000nfc.pubmnet.com	104.36.115.113	true	false	unknown
ssbsync-use1.smartadserver.com	216.22.16.37	true	false	high
spug-njrpb.pubmnet.com	162.248.18.34	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	high
pug-njrpb.pubmnet.com	162.248.18.37	true	false	unknown
www.datadoghq-browser-agent.com	13.32.195.219	true	false	unknown
inv-nets.admixer.net	216.219.92.22	true	false	high
nytimes.map.fastly.net	151.101.129.164	true	false	unknown
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	3.225.218.10	true	false	unknown
ib.anycast.adnxs.com	68.67.179.164	true	false	high
us01.z.antigena.com	40.76.134.238	true	false	unknown
pug-sfo-bc.pubmnet.com	104.36.113.107	true	false	unknown
securepubads.g.doubleclick.net	unknown	unknown	false	high
medianet-match.dotomi.com	unknown	unknown	false	high
fastlane.rubiconproject.com	unknown	unknown	false	high
prebid.a-mo.net	unknown	unknown	false	unknown
aax.amazon-adsystem.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
token.rubiconproject.com	unknown	unknown	false	high
pubmatic-match.dotomi.com	unknown	unknown	false	high
i6.liadm.com	unknown	unknown	false	high
g1.nyt.com	unknown	unknown	false	high
ssbsync.smartadserver.com	unknown	unknown	false	high
5290727.fls.doubleclick.net	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
c1.adform.net	unknown	unknown	false	high
ce.lijit.com	unknown	unknown	false	high
als-svc.nytimes.com	unknown	unknown	false	high
ads.pubmatic.com	unknown	unknown	false	high
simage4.pubmatic.com	unknown	unknown	false	high
sync-tm.everesttech.net	unknown	unknown	false	high
purr.nytimes.com	unknown	unknown	false	high
hbopenbid.pubmatic.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.nytimes.com/vi-assets/static-assets/176-70e92b21a3c3b94f46fb.js?_sw-precache=0802c1b52f8dcda13df8247007b31913	false		high
https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9397a18a-89a9-8973-919d-66baf990759b	false		high
https://aax.amazon-adsystem.com/e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D	false		high
https://g1.nyt.com/fonts/family/franklin/franklin-normal-500.0f4aea3d462cdb64748629efcbbf36bc.woff2	false		high
https://www.nytimes.com/vi-assets/static-assets/foo-c09067089f8db07e16d3.js?_sw-precache=4f3bcf0c1b0807b083f8f355f0c96a8a	false		high
https://us-u.openx.net/w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0&gdpr_consent=	false		high
https://www.nytimes.com/vi-assets/static-assets/vendor-7799bfe3d9a78d57c093.js	false		high
https://samizdat-graphql.nytimes.com/graphql/v2	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://5290727.fls.doubleclick.net/activityi;dc_pre=COfBwJjz-IIDFfbNKAUd6k0OZg;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	false		high
https://g1.nyt.com/fonts/family/imperial/imperial-normal-400.6131cd77b6e216c7693ed925f4309ffc.woff2	false		high
https://www.nytimes.com/vi-assets/static-assets/179-9ce786c57ce144531cbf.js?_sw-precache=19cd6e7fb911f3682635a2d5278917b2	false		high
https://s.amazon-adsystem.com/ecm3?ex=index.com&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB	false		high
https://sync.bfmio.com/sync?pid=187&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://static01.nytimes.com/ads/adplatforms/fonts/random1/franklin_normal_500.ttf	false		high
https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-khan-younis-01-wqvc/04israel-hamas-khan-younis-01-wqvc-jumbo.jpg?quality=75&auto=webp	false		high
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	false	Avira URL Cloud: safe	unknown
https://g1.nyt.com/fonts/family/franklin/franklin-normal-800.fdc7cad17deeec2db1fe2f9f8c0520ed.woff2	false		high
https://purr.nytimes.com/v1/purr-cache	false		high
https://g1.nyt.com/fonts/family/cheltenham-small/cheltenham-small-normal-400.108ce298d451197b23fefceb3e36959f.woff2	false		high
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3114214532401325210&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535	false		high
https://eb2.3lift.com/xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://static.chartbeat.com/js/chartbeat_video.js	false		high
https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/play.svg	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	false		high
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc	false		high
https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-hamas-early-lead-002-hvwq-threeByTwoLargeAt2X.jpg	false		high
https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/audio-on.svg	false		high
https://s.amazon-adsystem.com/ecm3?ex=media.net&id=3448016130184375000V10	false		high
https://www.nytimes.com/vi-assets/static-assets/autoSave-e29f1d51273327022c43.js?_sw-precache=11175ac6e73ad443237fe4717f2e1ace	false		high
http://nope.theworkpc.com/index.php	false		unknown
https://crb.kargo.com/api/v1/dsync/Martin?exid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-eu-terror-01-qwpm/05israel-hamas-eu-terror-01-qwpm-jumbo.jpg?quality=75&auto=webp	false		high
https://dd.nytimes.com/js/	false		high
https://image8.pubmatic.com/AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}	false		high
https://image8.pubmatic.com/AdServer/ImgSync?p=163427	false		high
https://www.nytimes.com/vi-assets/static-assets/WorldCupLogo2018-a56fb1eb76c9f639508c.js?_sw-precache=5189da5aa9659224ddacad70f91a93e4	false		high
https://www.nytimes.com/vi-assets/static-assets/cookingLandingPage-785ae9eab46d5977ac9c.js?_sw-precache=c1f043c80f170a268346f37b781332b5	false		high
https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news	false		high
http://nope.theworkpc.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-miller-01-tjqm/04israel-hamas-miller-01-tjqm-jumbo.jpg?quality=75&auto=webp	false		high
https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&dcc=t	false		high
https://myaccount.nytimes.com/auth/prefetch-assets	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEO4HZyZ72dJGvMK1nyipGtU&google_cver=1	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:62D0F5E82D1A4ED6B3E32459FF4A59CA	false		high
https://5290727.fls.doubleclick.net/activityi;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	false		high
https://www.nytimes.com/vi-assets/static-assets/giftLandingPage-9773ead2a4f8ae322c08.js?_sw-precache=882ed9ac7131fd57d03f1111754d8a80	false		high
https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4	false		high
https://www.nytimes.com/vi-assets/static-assets/accessCodeLPCooking-1ed9fb47e963dd322707.js?_sw-precache=8ab96cf955cac65b2919817b7a17a03f	false		high
https://5290727.fls.doubleclick.net/activityi;dc_pre=CMOT7Jjz-IIDFXf9KAUddlEBiw;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	false		high
https://www.nytimes.com/vi-assets/static-assets/featuredproperties-446b10205d6f0e016e09.js?_sw-precache=78ac30f0c0aff2dfc4756a999bd327fe	false		high
https://c.amazon-adsystem.com/aax2/apstag.js	false		high
http://nope.theworkpc.com/rss_content/js/rss_blog.min.js	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css	false		high
https://www.nytimes.com/vi-assets/static-assets/180-1dcf8f5ec828979b5585.js?_sw-precache=da1092368394d1ffb67100511ff4d664	false		high
https://als-svc.nytimes.com/als?uri=nyt%3A%2F%2Farticle%2F9c6ba5a0-b7c9-5979-aa85-77e25cf8125c&typ=&prop=nyt&plat=web	false		high
https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=0ve4IDJUsd2OZC0HsNGu	false		high
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent=	false		high
https://g1.nyt.com/fonts/family/cheltenham/cheltenham-normal-400.a3ed7afe3eaa0a873f3fbd379f8c491b.woff2	false		high
https://www.nytimes.com/vi-assets/static-assets/Rio2016-f600e68f03ca5de89a5f.js?_sw-precache=57d95bfdf2be29bd5fef63cf0b5fe745	false		high
https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css	false		high
https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQ	false		high
https://www.nytimes.com/vi-assets/static-assets/story-ba1053d3a59448a9f2d0.js	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?	false		high
https://www.nytimes.com/vi-assets/static-assets/cooking-image-6bed8f56dbeac63d2d9946ffae981eb6.jpg	false		high
https://www.nytimes.com/vi-assets/static-assets/vendors~allAccessLandingPage~bestsellers~card~collections~cookingAppDownloadLandingPage~cookingLandi~3fc321fe-74ec4aa0b386b7ed501e.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.reuters.com/investigates/special-report/nigeria-military-children/	chromecache_631.2.dr	false		high
https://www.nytimes.com/by/farnaz-fassihi	chromecache_606.2.dr	false		high
https://static01.nyt.com/images/2023/12/05/multimedia/5-gaza-promo1230-gphw/5-gaza-promo1230-gphw-me	chromecache_405.2.dr	false		high
https://www.nytimes.com/2023/11/26/us/palestinian-students-shootings-burlington.html	chromecache_405.2.dr	false		high
https://www.nytimes.com/by/shashank-bengali	chromecache_405.2.dr	false		high
https://www.nytimes.com/2023/09/27/world/middleeast/united-nations-security-council-reform.html	chromecache_606.2.dr	false		high
https://cooking.nytimes.com/	chromecache_720.2.dr	false		high
https://token.rubiconproject.com/khaos.json?	chromecache_445.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_472.2.dr	false		high
https://fontawesome.com/license/free	chromecache_578.2.dr	false		high
https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news#israel-hamas-eu-terror-chri	chromecache_405.2.dr	false		high
https://reliefweb.int/report/occupied-palestinian-territory/hostilities-gaza-strip-and-israel-flash-	chromecache_405.2.dr	false		high
https://www.nytimes.com/subscription/multiproduct/lp8HYKU.html?campaignId=4KKHF	chromecache_429.2.dr	false		high
https://timesmachine.nytimes.com/browser	chromecache_391.2.dr	false		high
https://www.nytimes.com/2023/12/03/world/europe/paris-terror-attack.html	chromecache_619.2.dr, chromecache_504.2.dr	false		high
https://www.nytimes.com/2023/12/03/world/europe/munich-airport-snow-bavaria-canceled.html	chromecache_619.2.dr, chromecache_504.2.dr	false		high
https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/NYTimes-logo.svg	chromecache_560.2.dr, chromecache_429.2.dr	false		high
https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-ha	chromecache_405.2.dr	false		high
https://getbootstrap.com/)	chromecache_650.2.dr, chromecache_674.2.dr	false		high
https://a.nytimes.com/svc/nyt/data-layer	chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	false		high
http://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html	chromecache_524.2.dr, chromecache_614.2.dr	false		high
https://meter-svc.nytimes.com	chromecache_631.2.dr, chromecache_606.2.dr, chromecache_405.2.dr	false		high
http://nytimes.com/wirecutter/gifts/?areas=dock&campaign=WCHoliday&channel=onsite	chromecache_560.2.dr, chromecache_429.2.dr	false		high
https://static01.nyt.com/images/2023/12/05/multimedia/5-gaza-promo1230-gphw/5-gaza-promo1230-gphw-fa	chromecache_405.2.dr	false		high
https://www.nytimes.com/2023/12/04/us/politics/us-red-sea-task-force-iran.html	chromecache_405.2.dr	false		high
https://army.mil.ng/?p=7496	chromecache_631.2.dr	false	Avira URL Cloud: safe	unknown
https://static01.nyt.com/marketing/images/newsletter/louder/music_75.jpg	chromecache_720.2.dr	false		high
https://static01.nytimes.com/ads/adplatforms/cdn/hls.js	chromecache_618.2.dr	false		high
https://www.nytimes.com/vi-assets/static-assets/images/MessageComponentLibrary/GH_GamesLogo.svg	chromecache_560.2.dr, chromecache_429.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.194.66.159	unknown	United States	15169	GOOGLEUS	false
147.75.198.144	ny5-prebid.a-mx.net	Switzerland	54825	PACKETUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
18.67.65.51	detpi4b5pore2.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.251.16.138	clients.l.google.com	United States	15169	GOOGLEUS	false
142.251.111.149	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
52.4.98.207	unknown	United States	14618	AMAZON-AESUS	false
44.218.177.189	thrtle.com	United States	14618	AMAZON-AESUS	false
13.32.151.58	d1bqktvj79b0wh.cloudfront.net	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
44.211.112.71	unknown	United States	14618	AMAZON-AESUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
18.160.53.102	d1ykf07e75w7ss.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.253.122.148	unknown	United States	15169	GOOGLEUS	false
172.253.122.149	s0.2mdn.net	United States	15169	GOOGLEUS	false
142.251.16.147	www.google.com	United States	15169	GOOGLEUS	false
172.253.62.84	accounts.google.com	United States	15169	GOOGLEUS	false
151.101.1.164	unknown	United States	54113	FASTLYUS	false
104.26.12.18	cdn.brandmetrics.com	United States	13335	CLOUDFLARENETUS	false
68.67.160.76	unknown	United States	29990	ASN-APPNEXUS	false
142.251.16.149	unknown	United States	15169	GOOGLEUS	false
54.198.207.123	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
23.46.192.28	cs.media.net	United States	19429	ETB-ColombiaCO	false
54.157.75.191	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
3.225.218.10	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
54.163.159.203	cdn.w55c.net	United States	14618	AMAZON-AESUS	false
142.251.16.157	adservice.google.com	United States	15169	GOOGLEUS	false
104.26.7.229	unknown	United States	13335	CLOUDFLARENETUS	false
74.119.119.150	widget.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
18.160.1.134	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.193.164	unknown	United States	54113	FASTLYUS	false
44.217.198.78	crb.kargo.com	United States	14618	AMAZON-AESUS	false
34.200.65.202	unknown	United States	14618	AMAZON-AESUS	false
23.222.200.28	unknown	United States	16625	AKAMAI-ASUS	false
23.92.190.74	unknown	United States	29791	VOXEL-DOT-NETUS	false
13.32.195.219	www.datadoghq-browser-agent.com	United States	16509	AMAZON-02US	false
52.95.125.22	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
52.223.22.214	unknown	United States	8987	AMAZONEXPANSIONGB	false
54.86.106.102	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
52.3.42.214	unknown	United States	14618	AMAZON-AESUS	false
52.46.130.91	unknown	United States	16509	AMAZON-02US	false
34.120.63.153	prebid.media.net	United States	15169	GOOGLEUS	false
52.45.125.152	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.5.231.5	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
52.54.49.121	region-selector.nyti.nytimes.com	United States	14618	AMAZON-AESUS	false
216.9.224.57	nope.theworkpc.com	Reserved	7018	ATT-INTERNET4US	false
18.173.132.21	config.aps.amazon-adsystem.com	United States	3	MIT-GATEWAYSUS	false
142.251.163.148	unknown	United States	15169	GOOGLEUS	false
23.92.190.68	nava.vap.lijit.com	United States	29791	VOXEL-DOT-NETUS	false
172.253.115.149	unknown	United States	15169	GOOGLEUS	false
35.211.178.172	user-data-us-east.bidswitch.net	United States	19527	GOOGLE-2US	false
8.28.7.84	spug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
8.28.7.83	pug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
34.227.121.59	pnytimes.chartbeat.net	United States	14618	AMAZON-AESUS	false
8.28.7.82	imagesync-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
68.67.160.184	unknown	United States	29990	ASN-APPNEXUS	false
3.232.123.49	unknown	United States	14618	AMAZON-AESUS	false
52.46.155.104	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
104.36.115.113	pugm88000nfc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
18.160.55.166	d3f7zc5bbfci5.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.253.63.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.253.63.149	unknown	United States	15169	GOOGLEUS	false
216.22.16.37	ssbsync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
52.94.220.185	unknown	United States	16509	AMAZON-02US	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
104.36.115.111	gob-njr3.pubmnet.com	United States	62713	AS-PUBMATICUS	false
23.55.204.22	unknown	United States	16625	AKAMAI-ASUS	false
216.219.92.22	inv-nets.admixer.net	United States	19318	IS-AS-1US	false
44.215.149.250	unknown	United States	14618	AMAZON-AESUS	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
52.73.239.53	ds-pr-bh.ybp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
54.175.39.171	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
151.101.129.164	nytimes.map.fastly.net	United States	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.6.229	platform.iteratehq.com	United States	13335	CLOUDFLARENETUS	false
3.162.114.30	d1jvc9b8z3vcjs.cloudfront.net	United States	16509	AMAZON-02US	false
172.64.151.101	dsum.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.97.85.167	unknown	United States	7843	TWC-7843-BBUS	false
70.42.32.191	unknown	United States	22075	AS-OUTBRAINUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
172.253.115.99	unknown	United States	15169	GOOGLEUS	false
18.165.98.49	sb.scorecardresearch.com	United States	3	MIT-GATEWAYSUS	false
23.218.218.72	hb.yahoo.net	United States	6453	AS6453US	false
23.56.8.25	contextual.media.net	United States	16625	AKAMAI-ASUS	false
142.251.111.154	unknown	United States	15169	GOOGLEUS	false
142.251.111.155	td.doubleclick.net	United States	15169	GOOGLEUS	false
34.202.221.201	unknown	United States	14618	AMAZON-AESUS	false
162.248.18.34	spug-njrpb.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.71.139.29	us-east-eb2.3lift.com	United States	237	MERIT-AS-14US	false
142.251.167.155	unknown	United States	15169	GOOGLEUS	false
104.36.113.107	pug-sfo-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.186.253.211	rtb.openx.net	United States	15169	GOOGLEUS	false
44.198.213.90	us-east-tlx.3lift.com	United States	14618	AMAZON-AESUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
35.227.252.103	unknown	United States	15169	GOOGLEUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1354136
Start date and time:	2023-12-05 19:11:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://nope.theworkpc.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@39/369@372/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://nope.theworkpc.com/index.php Browse: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Browse: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Browse: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.179.94, 34.104.35.123, 142.250.31.95, 142.251.16.94, 23.48.104.47, 23.48.104.38, 23.48.104.45, 23.48.104.50, 23.48.104.39, 23.48.104.41, 23.205.107.86, 23.205.107.68, 23.205.107.69, 23.205.107.80, 23.205.107.85, 23.205.107.72, 23.205.107.88, 23.205.107.89, 23.205.107.90, 72.21.81.240, 192.229.211.108, 172.253.115.97, 8.43.72.113, 8.43.72.62, 8.43.72.115, 8.43.72.114, 8.43.72.41, 8.43.72.52, 8.43.72.42, 8.43.72.43, 69.173.151.98, 69.173.151.97, 8.43.72.32, 205.180.85.169, 20.40.202.2, 151.101.194.49, 151.101.130.49, 151.101.2.49, 151.101.66.49, 13.107.21.239, 204.79.197.239, 23.221.241.11, 23.48.9.103, 69.173.151.100, 185.167.164.49, 185.167.164.39, 184.28.136.147, 172.253.115.95, 172.253.62.95, 172.253.122.95, 172.253.63.95, 142.251.167.95, 142.251.16.95, 8.43.72.98, 8.43.72.97, 142.251.16.132, 104.87.84.133, 142.251.167.94, 13.107.42.14, 172.64.146.152, 104.18.41.104, 172.253.63.207, 142.250.31.207, 172.253.122.207, 142.251.111.207, 142.251.167.207, 172.253.1
Excluded domains from analysis (whitelisted): bmcollector-geo.trafficmanager.net, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, track.adformnet.akadns.net, tagged-by.rubiconproject.net.akadns.net, l-0005.l-msedge.net, ocsp.digicert.com, www.googletagmanager.com, pubmatic.edgekey.net, update.googleapis.com, e15634.dscj.akamaiedge.net, nyt-dti-prd-staticjs.storage.googleapis.com, c2a35b6f438b0595e16e6604ed508e2b.safeframe.googlesyndication.com, e4518.dscx.akamaiedge.net, ip46.go-mpulse.net.edgekey.net, www-linkedin-com.l-0005.l-msedge.net, edge-microsoft-com.dual-a-0036.a-msedge.net, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, fonts.gstatic.com, ajax.googleapis.com, pixel-us-east.rubiconproject.net.akadns.net, ctldl.windowsupdate.com, capi.connatix.com.cdn.cloudflare.net, pagead2.googlesyndication.com, waws-prod-dm1-179-pork.centralus.cloudapp.azure.com, edge.m
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: http://nope.theworkpc.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFBTTlM5VFgtMS1CVDgy&google_push=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.372414155614473
Encrypted:	false
SSDEEP:	3:YAv+e9BAl5vAA1rxKUex0VifrhxOX8Rr8A1rxKUexy:YAme2jvpxKUex0V4xNRpxKUexy
MD5:	4337B32FACC4DD7E8864AAFFC35FAD5A
SHA1:	17C7FE9BDAE7812058BF9B0421EA14995111F446
SHA-256:	85A586C95826FD3D41799D7DBED061410A14AE1DEFD0FBD29457986ABF101D54
SHA-512:	414C3345DF7919BB279863CB24D0F2E8A3F7C8909D29A8E44BD1806F12301566BA35B8608932C1BE66E9C85CCDBF5158AED4102291E08791F0C29683ED4A0BE2
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":112,"message":"Endpoint not found","type":"not_found","user_message":"Endpoint not found"}]}

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3882)
Category:	downloaded
Size (bytes):	3958
Entropy (8bit):	4.883426727295216
Encrypted:	false
SSDEEP:	96:qve3QQWjC2wnTrhZf0IuZrjHt3dQqwaKmb9ufShYNMuxadVo1e:v3WjNwRtL4HHtNHXYXISe
MD5:	C6EE50EB9EAC1A96EFA5F27697530D23
SHA1:	5923FA813242A09F49D37FAC00C92E9DF71B846C
SHA-256:	DE84CCF2472A249AACE155C765FE0ACB78633BEC3136B3797C46E93ED167BE7D
SHA-512:	77698E095B647B608BF7717366EC34FE8346C6513B2E60EB902A67CFEAB2C76C0F987B8D9DEDEFF42F54FD101A126263211D56D94516AF0ACC2C986D2EDE6291
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/canadaSiteIndexData-eed2ece5657f2194f9c0.js?_sw-precache=c6ee50eb9eac1a96efa5f27697530d23
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[57],{gR4i:function(n,e,i){"use strict";i.r(e),i.d(e,"indexData",(function(){return o}));var a=i("q1tI"),t=i.n(a),o=[{id:1,name:"news",pages:[{name:"Home Page",link:"/ca/",edition:"CA"},{name:"World",link:"/ca/section/world"},{name:"Coronavirus",link:"/news-event/coronavirus"},{name:"U.S. News",link:"/ca/section/us"},{name:"U.S. Politics",link:"/ca/section/politics"},{name:"New York",link:"/ca/section/nyregion"},{name:"Business",link:"/ca/section/business"},{name:"Tech",link:"/ca/section/technology"},{name:"Science",link:"/ca/section/science"},{name:"Climate",link:"/ca/section/climate",deviceType:"smartphone"},{name:"Sports",link:"/ca/section/sports"},{name:"Wildfire Tracker",link:"/interactive/2022/us/fire-tracker-maps.html"},{name:"Obituaries",link:"/ca/section/obituaries"},{name:"The Upshot",link:"/ca/section/upshot",deviceType:"smartphone"},{name:"International",link:"/international/",deviceType:"smartphone",edition:"INT"},{name:"

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsty79H0_Ip7HUCptizyhmd24SkB3fkKH_MdwHpBV4kAfEVitwecqtLW3JkfnMBy_5aNMJ6VJtYILHBY13kI9-HsOg6G6qwOPie0kXw3Xu9YWaY3a8WzLeOIzlZjfgbzEKZkuvprZDfZFS00uRYO0lPVdDeWB1IVpc1HbgnCuEIOOwAUSpTPO_rgjia2oT4CsXfVVV7A2MIAgcA&sai=AMfl-YQa7OkieIUq2A36n2DmLNKB0ySgL1s481hlb6q7G5VWaILgVS4&sig=Cg0ArKJSzCiP3hu0nzzqEAE&id=lidar2&mcvt=1011&p=76,146,326,1116&mtos=1011,1011,1011,1011,1011&tos=1011,0,0,0,0&v=20231204&bin=7&avms=nio&bs=1263,907&mc=1&vu=1&app=0&itpl=19&adk=2358209754&rs=4&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&rst=1701800041432&rpt=3354&isd=0&lsd=0&met=ie&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemJhn:8WiIUemL
MD5:	FDC2E3DFA95F50207C7BE90E613A1DB8
SHA1:	24CBEDE491BCE2D96B5053ADFA82A6B3E58D0D4E
SHA-256:	6139DDDD3B6B6B847BCCD476918DC8FB4F4F5A10908E5707C704F155E0918E84
SHA-512:	10F3B68A8D3B9A25148A5C386AD5BEA7D7ABE96756EB14BBEC9576CD4985E769FAC046C4A62D37F06D1A114F278A8373F7D4382934237DE17F2258EDEB328674
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=4&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-3%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-3_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cb":"4"})

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1046
Entropy (8bit):	5.398389340003655
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3n6/PHh3rAT+XTJ0SsEEP1lpp1rwNfdE8FJqcgHldokR:2ddATLf3yB3a+XTdEzCfdECocgHIM
MD5:	346F9807DD0B6FEB5E3B3DCB6313C24B
SHA1:	5867FC61780F97264A02D0D1A33859B0E9F14292
SHA-256:	E44027EE643A87C2B6EE2CBD3E738302BE02274940DEDE3F3AA13D0BD15AAE57
SHA-512:	EBF330E49D505B1886D1D856B6C883B1214544A639AADCE9970B2C2315F99A6ECF15AE53375B5C7D7A343948D072C4034518D84086E15CC270F9C302E29B13F3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26 26" style="enable-background:new 0 0 26 26;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st2{fill:none;stroke:#FEFEFE;stroke-linecap:round;}.</style>.<path class="st0" d="M13,25.5c6.9,0,12.5-5.6,12.5-12.5c0-6.9-5.6-12.5-12.5-12.5C6.1,0.5,0.5,6.1,0.5,13C0.5,19.9,6.1,25.5,13,25.5..z"/>.<path class="st1" d="M12,15.7v-2.4v0v0v0V11v-0.8V8.5h-0.7l-2.7,2.7H6.5c-0.4,0-0.7,0.3-0.7,0.7v2.7c0,0.4,0.3,0.7,0.7,0.7h2.1..l2.7,2.7H12v-1.7V15.7z"/>.<path class="st2" d="M17.3,8.2c1.5,1.1,2.6,3,2.6,5.3c0,2.3-1,4.2-2.6,5.3"/>.<path class="st2" d="M15.3,9.5c1.2,0.8,1.9,2.3,1.9,4c0,1.7-0.8,3.2-2,4"/>.<path class="st2" d="M13.7,10.9c0.7

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (791), with no line terminators
Category:	downloaded
Size (bytes):	791
Entropy (8bit):	5.594685901006513
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHfg3B9IreSnsnjJnOqDF0JrTiUMGT2IWSBWjJnOf8:hMiRO9ggRiKoSJnOqDmR8G9x6JnOf8
MD5:	9A384EF8371D42EB9A917AE5FF51E424
SHA1:	2F1FBAAEC2168A4A716D2BD7E4ACDDFF9E4EA898
SHA-256:	66BD19972F2C9DF31D0F316FA92DD810C117BC3B8459F3D3FC64F6D382B158EF
SHA-512:	7304520C29FFAB7145AFE62221D4B785B8A70C5A01E9A00203BFD32ABC09CC09F50F781ED0B75B50E41F7F1B7EA36EDE2E3653AF0B0498EFE001DD9CC11B7D72
Malicious:	false
Reputation:	low
URL:	https://5290727.fls.doubleclick.net/activityi;dc_pre=COfBwJjz-IIDFfbNKAUd6k0OZg;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=COfBwJjz-IIDFfbNKAUd6k0OZg;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html"/></body></html>

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	471010
Entropy (8bit):	5.454174518321279
Encrypted:	false
SSDEEP:	12288:3IsseitGzr3rpzFWLONT+mH4+u8E5ZwPzqvgvz2HK2cC:3Iss2r3rpzFWLONT+mH46L0Ka
MD5:	B71F65DA3A7A83F071D19CADA0A3157F
SHA1:	0D6F0E28D61C186B403574872F14E8EB6D20421F
SHA-256:	16324A5C729110704B53079BB4B06AD68DDBD628D9AF707D46CBDD080EC3B771
SHA-512:	3315BEDE232B9A5FFDCCD76A42B40FCE2161FEE9F119F8A325FE8E8106CEBC75DBBA2DA483900DF9E9E5FCCA084BF96E82E70235EFDA79350CFAE8FE9D22DF5B
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/audio-c6e4659005d0c18dac15.js?_sw-precache=b71f65da3a7a83f071d19cada0a3157f
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[47,11,17,21,81,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return T})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return j}));var r=n("ygvk"),a=n("8iTF"),i=n("7WMn"),o=n("XWHH"),l=n.n(o),s=n("LgWu"),c=n("a9ya"),u=function(e,t){var n,a=null;switch(e.type){case r.a.GET_ARTICLE_REQUEST:n=function(e,t){return"".concat(t,"/rest/articles/article_").concat(e.articleId)}(e.meta,t);break;case r.a.GET_COMMENT_LIST_REQUEST:n=function(e,t){if(e.nextUrl)return e.nextUrl;var n=Object(s.parse)("".concat(t,"/rest/comments")),r={"filter[articleId]":e.articleId,"filter[isAccepted]":!0,include:"replyTo"};switch((e.sortType\|\|c.c.NEWEST)===c.c.OLDEST?r.sort="sourceCreatedAt":r.sort="-sourceCreatedAt",e.listId){case c.a.HIGHLIGHTED:r["filter[isHighlighted]"]=!0;break;case c.a.RECOMMENDED:r.sort="-recommendedCount,".concat(r.sort)}return n.query=r,Object(s.format)(n)}(e.meta,t);break;case r.a.GET_COMMENTS_REQUEST:var i=func

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 637 x 469, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	117784
Entropy (8bit):	7.988798206525481
Encrypted:	false
SSDEEP:	3072:a7vYsKEhyVr/SiykR9KmCQaFXGnnYd9M9raLk/SXB5:KxxnWpdagnYI1Cf
MD5:	E8CDC48CCE88EB270009957422F88F9C
SHA1:	808CE67BD30E39FB75BC83DBB0E9B6A3A68D041B
SHA-256:	DFDEFC3C7268FDF89BFDBDF31E72C497B2540EDF08BD18517D589CCDBB0FCD19
SHA-512:	DC8C1ABBD339A3C07269F04D665FA5C1BE8991797B5E211CE7EE4AF96FD4D15392D1B740607B7983F89B28DA60E6CFE046235B9F06F39A8B547C90F2D97DF047
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/audio_app-fcc6aae6ed18840c4d678ad97f4d5423.png
Preview:	.PNG........IHDR...}...........M.....pHYs...%...%.IR$.....sRGB.........gAMA......a....IDATx...[.m.Y.....1.k..9:.H ..e.ma.S...B.rbW9..+q..4......y.....I.....r%niU.rZ..` U.s..d0.c,..nG./k.9........>.\..s....Z..G[k.y...>...........=[..-Z.h.E.k......h.E..-Z....@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S....h.E..-Z<..@_..-Z.h..S...h..+.!.......W......{...r....c....[~.....v...W.E..c>l....._m..1.T........F"X~...*.s{..E...7..k..O.....m.{[...]g.P.......BJ......R.=.ls.....d....b.Y6.m.9Y...O.'l..... ...f...\|y]W^. 8M.2^..Xv1...]_..mc..3..k. k.k..{......X..A.......1...r.......2....5.]....O..l...c.c...P.8.........C@Y...3.....9W._...e.f...:.u.\|.q...`...p...$

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65436)
Category:	downloaded
Size (bytes):	235221
Entropy (8bit):	5.527145142767579
Encrypted:	false
SSDEEP:	3072:JARHwTfsUxsqFht3um94Ljr+CL2t9xjctsnTh4z8nD/Hv:4EfsUDtbgccSh4z8nD/Hv
MD5:	065CFFA7304069B687BA8C1188D91808
SHA1:	1214FF06AD5F5AE369AB0875A8874CCB79435FDE
SHA-256:	2E7155781CBB0A74849A302AE777C8996FC8E427A3CA273720ED0CD195CC186B
SHA-512:	B2CE99B342DCC0A27ED2CE5C0DCB31E2A9B9A6C21EA4974534CE7A2321C9F888865B356ED00F7B1F769DACD662A42F3720F1ED65D2B7527FEC29E1F708A978E7
Malicious:	false
Reputation:	low
URL:	https://rumcdn.geoedge.be/b3960cc6-bfd2-4adc-910c-6e917e8a6a0e/grumi.js
Preview:	var grumiInstance = window.grumiInstance \|\| { q: []};.(function createInstance (window, document) {..!function r(o,i,a){function s(n,e){if(!i[n]){if(!o[n]){var t="function"==typeof require&&require;if(!e&&t)return t(n,!0);if(c)return c(n,!0);throw new Error("Cannot find module '"+n+"'")}e=i[n]={exports:{}};o[n][0].call(e.exports,function(e){var t=o[n][1][e];return s(t\|\|e)},e,e.exports,r,o,i,a)}return i[n].exports}for(var c="function"==typeof require&&require,e=0;e<a.length;e++)s(a[e]);return s}({1:[function(e,t,n){var i=!0;t.exports={addRenderImpListener:function(e){var n=function(){for(var e=window,t=0;t<5;){e=e.parent;try{if(e.apstag)return e.apstag}catch(e){}t++}}(),r=e;if(n&&n.renderImp){var o=n.renderImp;try{n.renderImp=function(e,t){try{i&&r()}catch(e){}return o.apply(n,arguments)}}catch(e){}}},removeRenderImpListener:function(){i=!1}}},{}],2:[function(e,t,n){var p=e("./session"),r=e("./urlParser.js"),f=e("./utils.js"),o=e("./domUtils.js").isIframe,l=e("./htmlParser.js"),m=e("./b

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63937
Entropy (8bit):	5.694527339247149
Encrypted:	false
SSDEEP:	1536:8gIgKgeg73LZOctpRJagzvDNoadobEDhC0GFN7/WigbkY2:jXDch6kh
MD5:	59A1DC37BBAC062F29B0293C967A2B0F
SHA1:	CE29E6AD4FE8F8D7D4513311907DD69208DFBEE6
SHA-256:	BE55A74FE5D3A72C15684A7BE9B2617312147E51D8C425AC3CCCD90F3C46F624
SHA-512:	53098C7832EB0285EC04919368E42FB673950636B2F3FC17B51AE4DFE58BEDAAC443DEDDB1CD5711341CA9E66E76AAC44C630C9F597E5B3D4075E91639A9DEB6
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=878389057636863&correlator=1454723853388112&eid=31077978%2C31079784%2C44782503%2C31079527%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202311290101&ptt=17&impl=fif&iu_parts=29390238%2Cnyt%2Cworld%2Cmiddleeast&enc_prev_ius=%2F0%2F1%2F2%2F3&prev_iu_szs=320x50%7C728x90%7C970x90%7C970x250%7C1605x300&fluid=height&ifi=1&sfv=1-0-40&sc=1&cookie_enabled=1&abxe=1&dt=1701800024687&lmt=1701800019&adxs=0&adys=132&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&bz=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&vis=1&psz=1280x-1&msz=1280x-1&fws=516&ohw=1280&ga_vid=245187411.1701800025&ga_sid=1701800025&ga_hid=2138761322&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yOTM5MDIzOC9ueXQvd29ybGQvbWlkZGxlZWFzdCIsW11dXV1d&dlt=1701800019118&idt=5249&prev_scp=div%3Dtop%26pos%3Dtop%26hb_format_rubicon%3Dbanner%26hb_size_rubicon%3D970x250%26hb_pb_rubicon%3D0.20%26hb_adid_rubicon%3D64701fe0cf2ce9%26hb_bidder_rubicon%3Drubicon%26hb_format%3Dbanner%26hb_size%3D970x250%26hb_pb%3D0.20%26hb_adid%3D64701fe0cf2ce9%26hb_bidder%3Drubicon%26amznbid%3D2%26amznp%3D2%26request_time%3D5389&cust_params=als_test_clientside%3Dweb_none_low_20231205181340%26mktg%3Dtype_anon%252Clogf%252Cabf%26bt%3D%26sub%3Danon%26edn%3Dus%26test%3Dprojectvi%26ver%3Dvi%26template%3Darticle%26hasVideo%3Dfalse%26vp%3Dlarge%26als_test%3D1701795752097%26prop%3Dnyt%26plat%3Dweb%26brandsensitive%3Dtrue%26per%3Dguterresantonio%252Cgriffithsmartin%26org%3Dunitednations%26geo%3Dafghanistan%252Cgazastrip%252Cukraine%26des%3Dinternationalrelations%252Cisraelgazawar2023%252Chumanitarianaid%252Cpoliticsandgovernment%252Crefugeesanddisplacedpersons%26auth%3Dfarnazfassihi%26coll%3Dworldnews%252Cmiddleeast%26artlen%3Dlong%26ledemedsz%3Dnone%26typ%3Dart%26section%3Dworld%26si_section%3Dworld%26id%3D100000009197910%26pt%3Dnt10%252Cnt12%252Cnt13%252Cnt14%252Cnt15%252Cnt16%252Cnt18%252Cnt2%252Cnt3%252Cnt4%252Cnt6%252Cnt8%252Cpt17%252Cpt20%252Cpt5%252Cpt7%26gscat%3Dneg_ibmtest%252Cneg_ibm%252Cneg_ihw%252Cneg_citi_aa%252Cneg_gg1%252Cneg_chan2%252Cneg_chanel%252Cneg_capitalone%252Cneg_gg2%252Cneg_hms%252Cneg_bp%252Cneg_mastercard%252Cneg_ms_safe%252Cneg_bofa%252Cneg_google%252Cneg_mtb%252Cneg_debeer%252Cneg_orep%252Cneg_rchmt%252Cpolitics_sentiment%252Cneg_hearts%252Cneg_ubs%252Cneg_rmw%252Cneg_aramco%252Cneg_fcli%252Cgs_science%252Cneg_kaypemg%252Cgb_death_injury_high_med%252Cgb_death_injury_high_med_low%252Cgb_death_injury_news-ent%252Cneg_amerex%252Cneg_chan3%252Cneg_kvue%252Cneg_sub0%252Cneg_racism%252Cgs_politics%252Cneg_newyorkp%252Cgs_science_geography%252Cneg_enerca%252Cneg_amex%252Cneg_cathay%252Cneg_mktg_safe_q4_2019%252Cgs_busfin%252Cneg_rolex%252Cneg_sabic%252Cneg_weather%252Cneg_am%252Cneg_mttl%252Cneg_ts%252Cgv_death_injury%252Cgv_military%252Cneg_samsung%252Cgs_politics_issues_policy%252Cneg_sia%252Cgs_politics_misc%252Cneg_rms%252Cgs_health_misc%252Cneg_msft%252Cneg_cme%252Cgs_busfin_economy%252Ccc_tech_society%252Cneg_victims%252Cgs_t%26is_viral%3Dlow%26tt%3D43%252C63%252C73%26mt%3DMT9%26abra_dfp%3Ddfp_prebid_0723_3_index_pubmatic%252Cdfp_als_home_1_als%26sov%3D2%26page_view_id%3Dy4BaNoaK-J9dzZ8sn6p8pfb-%26purr%3Dfull%26uap%3Dbrowser%26typ_materials%3D%2523news%2523%26slug%3Daid%26cookie%3Dfalse&adks=2311091294&frm=20
Preview:	{"/29390238/nyt/world/middleeast":["html",1,0,null,1,0,0,0,0,"height",null,1,1,[["ID=c271b46e8512f71c:T=1701800026:RT=1701800026:S=ALNI_MYMrbOoB7sxNBa7_PkUa9N4tb1gZg",1735496026,"/","nytimes.com",1],["UID=00000da63e07b3fe:T=1701800026:RT=1701800026:S=ALNI_MZ4cZhHiFh-63XR-VW1awVNHjfQAw",1735496026,"/","nytimes.com",2]],[138454869413],[6179366817],[4538914019],[3124068421],null,null,[374881],[11950633],null,null,null,0,[676982996],null,null,null,null,null,"AOrYGsmm5mcamylwH5Bh6oE_C--JKyvH3AaI5N_DUUW8kEbmFaGfrJqy8Nr6LQsLq7-gBLyaKD-Us0s_Ei964cfSxk71AsiouEUgOX57r7aCoH4srwavY1LXWMOz0ozv","CJLOypDz-IIDFbiHywEdXGEClw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qMZB5kVwFm7CbdWC3ANVpCzdosY7uqZjx6nuWHBEfJRtuNc7UzYyKxfq14PjgfmV_lTBeqycLqGl3nXY-iFBbQiQ23_O2KeMCOEcb-F1ui1tMxEj2ERKJIG46faMwr2kkpIMf1CYp-jPglL-HnBx3dB71RjUAyhag"]}.<!DOCTYPE html><span id="6179366817138454869413" data-dv-view="6179366817138454869

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemPM:8WiIUemPM
MD5:	39FC3D21236E89707A548E7FF802C026
SHA1:	7409F920C8A197C7327B89334B5D1977F0636CEF
SHA-256:	89B4AA9E9BF8516C2AB7B5134F65D47B02071637259A14C9F60DCCC207E05CE4
SHA-512:	346A467F6FEAF83F272092AEB56F756364E0BFB38095549E9847E77770B46ED18A97E22BD756342D3356CE7F8F7CBD060656FD17EF5F94841E485B62BEF5A85A
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"1"})

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Category:	downloaded
Size (bytes):	77381
Entropy (8bit):	5.307210170497617
Encrypted:	false
SSDEEP:	768:YZq/FzmE/9ikOLI1gr49NuQIcRq01qeLS/PRNA0ArT51+1iaK4+UP9CE2dM1wz97:YZq/FzmE/DOLI1U4dK/Y17crK4+f6gv
MD5:	FA04218E01F03F0AFF1DE4D78A63B400
SHA1:	218A8A91E92F80C454DD28EA47918811AC9ED03A
SHA-256:	05110A016504D3B4AA46E621B8A9D8C76E7B26A2E80248194528EBD79A40C199
SHA-512:	8E63F2FB921AC7AA49C3967F42818DE51B3AB9C480FC969ACF6F58C949AE2C89E530D728103AE4015B37AF3AAC1A53E0750E73CC6172646C551ED539DCE851D9
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/183-58962d469cec4df94955.js?_sw-precache=fa04218e01f03f0aff1de4d78a63b400
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[183],{"2P7h":function(e,t,r){"use strict";r.d(t,"b",(function(){return T})),r.d(t,"c",(function(){return O})),r.d(t,"a",(function(){return N}));var n,i,a=r("gcR/"),o=r.n(a),c=r("J4zp"),s=r.n(c),u=r("q1tI"),l=r.n(u),d=r("MShG"),p=r("5Aio"),b=r("WDoI"),m=r("qkuN"),f=r("4+a0"),y=r("kc0S"),v=r("EOa1"),g=r("+yCz"),h=r("hgSA"),S=r("DRvx"),I=r("xIq5"),w=r("dZ3W"),T=l.a.createContext({setPersistentFooter:function(e){}}),O=l.a.createContext({setUserProfile:function(e){}}),C=function(e){var t=e.pageContentMaxWidth,r=e.children,a=Object(u.useContext)(p.b),c=Object(u.useState)(null),l=s()(c,2),b=l[0],f=l[1],C=Object(u.useState)(null),N=s()(C,2),x=N[0],P=N[1];Object(u.useEffect)((function(){var e;Object(m.f)(),Object(y.c)(null!=x&&null!==(e=x.subscriptions)&&void 0!==e&&e.length?"sub":"regi","")}),[]);var E=Object(u.useMemo)((function(){return x?Object(S.a)(x):[]}),[x]),j={setPersistentFooter:function(e){f(e)}},A={setUserProfile:function(e){P(e)}

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://nytimes-d.openx.net/w/1.0/pd?cc=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?
Preview:	<html></html>

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (64887)
Category:	downloaded
Size (bytes):	1191716
Entropy (8bit):	5.709138971410063
Encrypted:	false
SSDEEP:	12288:POarvWRr5spUxI9uJ3ijpRs8WAc80Y1yM6phFs0NApNDCARXx+0:POas+pUxRgxz
MD5:	E24DC9588DA4E95F5D11777597EFBE73
SHA1:	5125A1646CB794B0F032BFE72BB9A34988703309
SHA-256:	BE080B5729802613542C0F12214A1AF9027744FE1350277CB8B619B1CD0E6F82
SHA-512:	47626C3CF3FCDAF110E94BEF1B457B9DC844610B639ED8A3FB6C0BF5169EC0E2F53E877B54EE8F578D2AA40556A7925656CB9EE7C32AFFAD439070B7ECEB20CF
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news
Preview:	<!DOCTYPE html>.<html lang="en" xmlns:og="http://opengraphprotocol.org/schema/">. <head>. <meta charset="utf-8" />. <title data-rh="true">Israel-Hamas War News: Latest Updates - The New York Times</title>. <meta data-rh="true" name="robots" content="noarchive, max-image-preview:large"/><meta data-rh="true" name="description" content="Israel.s renewed strikes have killed hundreds since Friday, Gazan officials say, raising questions about its stated efforts to reduce harm to civilians."/><meta data-rh="true" property="og:url" content="https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news"/><meta data-rh="true" property="og:type" content="article"/><meta data-rh="true" property="og:title" content="Israel-Hamas War: Israeli Forces Enter Southern Gaza.s Largest City as Fears Grow for Civilians"/><meta data-rh="true" property="og:image" content="https://static01.nyt.com/images/2023/12/05/multimedia/5-gaza-promo1230-gphw/5-gaza-promo1230-gphw-facebookJumbo.jp

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1001, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	98694
Entropy (8bit):	7.997681919783342
Encrypted:	true
SSDEEP:	1536:8I63EQX6aLzAfkEN4ysrlk8gmrn4e8cjVjv1xu/YMQPtLAM3kRtls7WA1Zw6Xj3I:8IPyzAj41trn4oj3Q/YMQPtzkvlFA9M
MD5:	8AACF0901AAA291865CE583E0C9582D9
SHA1:	7F7C9A06BBBBAF39AA47538F3A332ADB667EB349
SHA-256:	12759D4E12D5EAF09A8179847BA96AD0CFDF501436A4B02E1BE5673E0F70E3C6
SHA-512:	D0AF3D80AE7156CFF20ED70A7FA0AC42C96BD44B7F52F2D453188E22807D59336E0E95BC9057FA242290B632F2AD86A0A1B9EA1CEBCAD8E77CC051C9E659832D
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05isrel-gaza-01-carousel-kcjw/05isrel-gaza-01-carousel-kcjw-threeByTwoMediumAt2X.jpg?quality=75&auto=webp
Preview:	RIFF~...WEBPVP8 r....K.......>.B.K%../#..I...en-w`..f;.4.J.[......H,.Q..N.........o..-.u.o...m}W..q.tR./.....^Q.t.....8:..?4NM.G..Z.3......?O..J..t..A....O..w.....6........._..K...k.~..S.6o...G.F.>..q.}.4.........z.....x<..(.I.Y..OI.Y.._C.D.zq..`./...XX$s5..=..-....;O..<..CXF..R.pF...P..c.....Z.W.........7QBa.g.....E\J..#.T..C......?....u.H.I..7.i.~......j.[zO.v\..n......t.8x.S.y....#...I.#`1'.~.'.#.7.F>.X%.6.K@...;9h..1;..."..#..I......;.f..Z.......=a.....l.R...../. ..c.F...........]..)w}.Jr.%E?...^P...p.g..G^.u4..z.;6<......i.f.....K.....{..\.\8.1z.<W.`..1Y..M..t.....q...b..q..60E........_fn..u..t....E.. ........u.....of.-..]..2.....E.-....0...I.....#..<mM...9H`.L..f..\!oS.......k=..r...q.-...C.........L].(..xj...I{T7"..r?@..d#..?.u..d...?..@...^.r}.U^....qE..8u. .....7..O\|..p.)...[.......=......l.=...%.....<,..m7....<.t...>-.n.yW#M5-....D.Q.;.+.5A4...J ..i._DM...........-.}...o.a.x........%.u^..Wz...R..e..h..d....OG...8.O.`........V.*...

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35799), with no line terminators
Category:	downloaded
Size (bytes):	35799
Entropy (8bit):	5.1018837851379955
Encrypted:	false
SSDEEP:	768:lszWashm0dxPU939/xyD4g549ngzSRpcWpLMu:6z2c98004HLcWph
MD5:	4D761FDF8F9D8C7D287F196ED50263FA
SHA1:	5ACE592D9182A9454774351785875EFB2991BF20
SHA-256:	8AC68A13437A6491D784AEAD5E6991ADC3B698A8B92F30726D468ABABDC50374
SHA-512:	FDB6BF7C86DCB881FBA53FF876D9F3D9D5463ED5D7A633359AD86684D367775546E47C0C18A7F0F00D4F1EE742AFB72C9CDE6650086F9912AA7A4B2F8940457A
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js
Preview:	"use strict";var precacheConfig=[["/vi-assets/static-assets/15-562803a2e86b5b821208.js","26c660da501ed7aefa73267c1f5c785b"],["/vi-assets/static-assets/176-70e92b21a3c3b94f46fb.js","0802c1b52f8dcda13df8247007b31913"],["/vi-assets/static-assets/177-dab6c51dede0a1b643e0.js","1a5e5be10bcf732498e2bc288a2cb0e8"],["/vi-assets/static-assets/178-402d852444b5149d85e8.js","6e77cc0d194cfa617dcb9cea0a0cc5db"],["/vi-assets/static-assets/179-9ce786c57ce144531cbf.js","19cd6e7fb911f3682635a2d5278917b2"],["/vi-assets/static-assets/180-1dcf8f5ec828979b5585.js","da1092368394d1ffb67100511ff4d664"],["/vi-assets/static-assets/181-6ccf757cb37605cd8921.js","577c7f3f9e3eb6c9dafad9ba34569a09"],["/vi-assets/static-assets/182-fce11dfd2749a3f8ba8b.js","34da22edff8c2fcf0bc998311790f858"],["/vi-assets/static-assets/183-58962d469cec4df94955.js","fa04218e01f03f0aff1de4d78a63b400"],["/vi-assets/static-assets/184-7a1dec688f12c0accc59.js","bf88f3ee49d28fab903ef277e816bab1"],["/vi-assets/static-assets/185-5a3b79db604b7e400

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (43995)
Category:	downloaded
Size (bytes):	44085
Entropy (8bit):	5.296440688648076
Encrypted:	false
SSDEEP:	768:vsc6+GBVzLP5ypmIbGnZzx/vcMYbaGJNIGjyn51fjN3l4/xfS4:CZLfIYT355j9l4/xK4
MD5:	07AA5A9AF90D84AFBB5B2FF8C567899C
SHA1:	79413C8908ECF8155E096C6F7449686774DCB2AB
SHA-256:	F6D7F85C21A865A1BDA17F29889E6A77BD19B3D41A4F5CAE108C6D454A3B2E23
SHA-512:	F94F36B1434D00FCA12AA44C6AD62330C09B0F5D0380CACA125443562762AFDE1B549833DB5F51730DE794D791861D64C63CE066D7FBD5E99B41871B15265854
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/collectionnewsletterform-f74d128cd8c4b210d436.js?_sw-precache=07aa5a9af90d84afbb5b2ff8c567899c
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[62],{"4gx8":function(e,t,n){"use strict";var a=n("gcR/"),r=n.n(a),o=(n("q1tI"),n("Jqp9")),i=n("X6oL"),s=n("+zxi"),l=n("oXTd"),c=Object(o.css)("text-decoration:underline;&:hover{text-decoration:none;}"),d=function(e){var t=e.url,n=e.linkPageType,a=e.className,d=e.dataTestId,p=e.productCode,u=Object(i.useTracking)(),m=Object(s.d)(p),f={indivPage:l.l.seeSample[m],subHubPage:l.o},g={indivPage:function(){u.trackEvent(function(e){return{event:"moduleInteraction",eventData:{pagetype:"newsletter",trigger:"module",type:"click"},module:{name:"newsletters",context:"individual page",label:"",region:"body",element:{name:"link click",label:"see sample"}},newsletter:{product:e}}}(p))},subHubPage:function(){u.trackEvent({event:"moduleInteraction",eventData:{pagetype:"newsletter",trigger:"module",type:"click"},module:{name:"newsletters",context:"sub hub page",label:"",region:"",element:{name:"link click",label:"read the latest"}},newsletter:{product:

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (43953)
Category:	downloaded
Size (bytes):	44029
Entropy (8bit):	4.014058795972372
Encrypted:	false
SSDEEP:	768:+mFOAnkVFsuNR9H/6Ay1rvgk0fW+unlxKRaadNrmUHLh7LjX3YztWn2o:VSFsuNb/dAsk0C6fHLh7LjX3YztW2o
MD5:	FE1FF79B4E18E86237D737E3EE7838E4
SHA1:	D845944F6E30259C8917C1B370A29ADD8D15E77F
SHA-256:	78E65689DA51A0F7E56B41171BB9A0E7CC3A75D11C4455B5266DC081D73C8094
SHA-512:	607CB0236D97C1F8C5D2F3BBDDD25B10AE2EF584A03679F6AF4E382BF214D79F2D25D04767A6A5D9FF88A11BDA882E81AB6E4797C916BD0F4EAEFEFE3CBB9F90
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/ChineseHanLogo-8e84986353404735d8b1.js?_sw-precache=fe1ff79b4e18e86237d737e3ee7838e4
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{Ur6H:function(C,L,i){"use strict";i.r(L),i.d(L,"ChineseSimplified",(function(){return o})),i.d(L,"ChineseTraditional",(function(){return a}));var l,Z,M,e,d=i("gcR/"),t=i.n(d),n=(i("q1tI"),i("KhZS")),o=function(C){var L=C.className;return t()("svg",{width:"228px",height:"27px",viewBox:"0 0 228 27",className:L},void 0,l\|\|(l=t()("title",{},void 0,"The New York Times in Simplified Chinese")),Z\|\|(Z=t()("g",{id:"Page-1",stroke:"none",strokeWidth:"1",fill:"none",fillRule:"evenodd"},void 0,t()("g",{id:"new-logo0922...",transform:"translate(114.000000, 13.500000) rotate(-90.000000) translate(-114.000000, -13.500000) translate(100.500000, -100.500000)"},void 0,t()("path",{d:"M8.00537165,7.68496532 L16.7636513,7.68496532 L15.5881346,4.96615937 C15.5881346,4.96615937 14.0837723,4.26878243 11.8985634,4.39090374 C10.2002372,4.4868868 8.15572482,5.46450001 7.30604252,6.22497295 L8.00537165,7.68496532 Z M26.0378874,15.6378476 C25.9845162,

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58431)
Category:	downloaded
Size (bytes):	58728
Entropy (8bit):	5.336495561160618
Encrypted:	false
SSDEEP:	768:f3eibpASbQHYXjfBXnM1St+ibjxKIhLJl9LIlw1MVxKRzMTDLuSvkRhEduqeR:f3vbZBXMgtfB7b1MFbv8
MD5:	793F7BF9C76EAF35DA8169524F220515
SHA1:	E71CC10FEF25B555ED4DD33EB7E24FF79EFA819F
SHA-256:	E8403779D45A9590B43C0ECF984EBE11E75FD2982630D658390A6001A6768770
SHA-512:	04F0BB40AB3DDD0E59FADEB1C1B7AC3437AA5B7AB9F5A7A2F234575DD14C5A8CC3668F86D72D0DDED9DAF030B04135255694705E20A02FFF7E3FADBFF213FE29
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/ads/studio/cached_libs/gsap_3.2.4_min.js
Preview:	/!. GSAP 3.2.4. * https://greensock.com. * . * @license Copyright 2020, GreenSock. All rights reserved.. * Subject to the terms at https://greensock.com/standard-license or for Club GreenSock members, the agreement issued with that membership.. * @author: Jack Doyle, jack@greensock.com. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t=t\|\|self).window=t.window\|\|{})}(this,function(e){"use strict";function _inheritsLoose(t,e){t.prototype=Object.create(e.prototype),(t.prototype.constructor=t).__proto__=e}function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function n(t){return"string"==typeof t}function o(t){return"function"==typeof t}function p(t){return"number"==typeof t}function q(t){return void 0===t}function r(t){return"object"==typeof t}function s(t){return!1!==t}function t(){return"undefined"!

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6469
Entropy (8bit):	4.978819546754936
Encrypted:	false
SSDEEP:	96:kzd913zi3lz3zZ3zeibOWQ3zUaF6E4SFViG3OlEhanaz/3AE0kfk3TPLW+v:k1YH1NbOWCTTViG+l/albibv
MD5:	D9094EFB44BDB26E751B24864331FC7D
SHA1:	137A6ED1CA050E9962473D6FB065C193F5405472
SHA-256:	04DFBF4A99020CE4AA946AB2E2F064833A005AB24E8E2B184BF5174BA67E0BAC
SHA-512:	B81B0E14BF30900F009FF33A62BD45B92923F415726066544D5605FC812C7D086E1D9128D7BE11DFCD7B49706C8B59EC53605B021A1752830F3E344B5167D8BD
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=ATH8A-MAMN8-XPXCH-N5KAX-8D239&d=myaccount.nytimes.com&t=5672667&v=1.720.0&sl=0&si=4da08a6c-27d0-4b10-b054-ca35ca75810e-s57hay&plugins=ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao="
Preview:	{"h.key":"ATH8A-MAMN8-XPXCH-N5KAX-8D239","h.d":"nytimes.com","h.t":1701800029600,"h.cr":"c065687bbf746e711252f1fd1f72dc2ab4065acc-1ecf58e7-92a1ea73","session_id":"7204c402-a166-4c90-81b3-1cf424d75496","site_domain":"nytimes.com","beacon_url":"//173bf110.akstat.io/","autorun":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":5,"sendAfterOnload":true,"sendInterval":2000},"Continuity":{"enabled":true},"PageParams":{"xhr":"none","pageGroups":[{"type":"Custom","parameter1":"nytAnalytics.pagemeta.PT","on":["navigation"]},{"type":"Regexp","parameter1":"myaccount.nytimes.com/get-started/thank-you*","parameter2":"Subscribe Thank You","on":["navigation"]},{"type":"Regexp","parameter1":"[mobile\|www].nytimes.com/?($\|#\|\\?)","parameter2":"homepage","on":["navigation"]},{"type":"Regexp","parameter1":"nytimes\\.com/\\d{4}/\\d{1,2}/\\d{1,2}/.+","

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15451), with no line terminators
Category:	downloaded
Size (bytes):	15451
Entropy (8bit):	5.450946051987196
Encrypted:	false
SSDEEP:	384:J+YWOU1MXsK1QyJuwiJCANJl8NwA+VPGjhvi2O7pSGFyJpO:0YjU1MXpQyWJCAND9A+VOcb+O
MD5:	4C4F4BF824D2AA120A5E0B665B4C9828
SHA1:	755309710C76C46798A0675970E429E23B299447
SHA-256:	CCF7B12ECC8E9E8FFDDE253BA24560E0B8742463AD4868C7659FC90968FFCB3A
SHA-512:	92F4503E2F4E845917D7F08325F29C6A77033BA242408F305201DDEBF57A396993C23BC502186C4085E33C82DAA51EBCD76775106D4FFC6BAC5870BDAED8B5F5
Malicious:	false
Reputation:	low
URL:	https://rumcdn.geoedge.be/b3960cc6-bfd2-4adc-910c-6e917e8a6a0e/grumi-ip.js
Preview:	!function(){window.googletag=window.googletag\|\|{};var a=window.googletag,e=(a.cmd=a.cmd\|\|[],window.grumi),y=window.WrapperPubKey\|\|e.key,t=e&&e.cfg,E=e&&e.overrides\|\|{},I=t&&t.fromGrumi,H=E.adUnitPath,T=t&&t.advs,d=t&&t.pubIds,c=t&&t.exclude,s={ac038e71:{146082922:!0}},_=("http"===window.location.protocol.substr(0,4)?window.location.protocol:"https:")+"//protect.geoedge.be/api/event",J="//gw.geoedge.be/api/report",S=function(){for(var e=[],t="0123456789abcdef",n=0;n<36;n++)e[n]=t.substr(Math.floor(16*Math.random()),1);return e[14]="4",e[19]=t.substr(3&e[19]\|8,1),e[8]=e[13]=e[18]=e[23]="-",e.join("")}(),u=4e-4,G=t&&t.blockedByGeoKey\|\|"blocked_by_ge",W=t&&t.timeout\|\|"",A=!1,p=(!I&&((e=document.createElement("link")).rel="preload",e.as="script",e.href="//rumcdn.geoedge.be/"+y+"/grumi.js",e.onload=function(){A=window.performance&&window.performance.timeOrigin&&(window.performance.now()\|\|!0)},t=document.getElementsByTagName("script")[0])&&t.parentNode.insertBefore(e,t),'<div id="grumi-contai

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27122
Entropy (8bit):	7.991702390650528
Encrypted:	true
SSDEEP:	768:OKt2uVFNKZ6eyvdW5C5Y5uQweWIZOqXiRq:4u/NKZ6DaD8bIZOqXMq
MD5:	F6099428BADD73E68BC6B752F12FABC1
SHA1:	4544AE6A7DB62CC8768D41A8BDC5BBA14F6C4B50
SHA-256:	F7C39F78A1A7FFA2C7CA6A1C348C0F6AD71271C8FD8E444520C8333EB56386E6
SHA-512:	E61BFEA649172D7C1E3C6BDFA72D5EE2B4BC8E7649D0D491405BEB71202CD3FD6D06FB79762FCAB7EBB07B7656A29D20E0F3BC5D66962657793D42E33766E831
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF.i..WEBPVP8 .i...........>.D.L%..5..Z....gnP../.e....m..?..#......4}?.7.....>.?..?x?P.5..'...=.V...L...x....=.....&y..`.v...........=~..z._..._.s..O..!~...s.}.._...m...3...=..Qz....+.?.>.\..'FH.V.C.c4...._N.T1.=O..m..!K......u.Vx%>....h..=+..0j.H3..I.\|R.U-y.....E...0....}.i........ )..R......yA........k....e:...e.....~j!.....a.;.\V...].....Kl.....(...L.....Cd%....^k./..a...0..=.w..A...."..... @.wsb6..\|..^d.3.>..t.&.)&.Kw..^..}.^Y.`...o}...}...p.Z...p.K....P..5....k....A.b...J.y.g.A..q...&..[.V,]@t.![....Al..vIw....uw...x)...L j.;...]c...ua.m~.N..{x..KH.I....#A,{.U.r.[c.)....O....nB..VV}.{...j.q..e..>^?<.R5scT.>...~^.....$f..S.Q.R'.........$l.IR ..#.".9...x..#-.g.C....ER..}..... C\|.. .l..7]h......N.....M...u.=.....S..]....y......s....[di~NI..{d..9U...GvO..............).I..."K..Q.....o.W.3.O....B{V.p..>..w...W..r...-3...3...b\|.../.A..\..K,.bo$..e...0q.];...b.T%....)...Y....G.\..0....6;...M.^..8.....e..}\...[.5._..r...74.%..Z.t.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?
Preview:	<html></html>

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21647
Entropy (8bit):	7.970758859554298
Encrypted:	false
SSDEEP:	384:PH08C76j7fmSJdHeqrrGs0wf5fpJxJbAeB7Srf1Cpl8vdVbeXgDxUUfAEScm66wW:f0N76j71DeqrrUUdp1bZROf1CAlV1FUv
MD5:	92270E9AAD520659FA96A6F73FCE0433
SHA1:	C2B41FAD52D4F98765EC2214299876F2DDA9D9EA
SHA-256:	789923AF17E15B9F2D2BB6AD6F8F23144C3ADAC50B510F737700F377F57EBC66
SHA-512:	9B11071218F36D93662114B0B498D18E24A7F72433CD233701DC24698D06F8014DB88F41E3E932B16DCBA1F81DB035E9856B27BE6EAD3B979E5AF2B2B251459D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....tIME.....4("Y&.....orNT..w...T6IDATx..y.$.u......>.....@..c..").A..R.h.d...{...]...k..a.a.w...^k%Z.dZ.....6E..).$H..`...zzz........#...UN.`..=.....:.....{.w\|...E.......k....~...>t............n?....d.~..8Q .DF......}y.0`B......w5......n[...2.I.......<P..@j..g..C.........W.&....=...p.......A.....`r'..8..........>..0..o../......F`..h.w...+.5..q.e..............o'.-.........\|&..........:....B..n...X.\|..(l...........W..U...x.4.<u~v.y...~..m........R..t...?8..`h.4.....H;...>b....J..........;.X!@.Ey..c#@e.`....y...m.XV.g..Qk.....y.~L.+...{....0....3.W.5.0Pf....w$....8.C....Sw.........x...8..m.{.H........"...e. y..p8...$...?f.Cg.@..~................\|......F.G.]L...Y...>.i.q...q.D..R.....8.."...V.N.K<.#..aY....j.F..d{{...e.\b~a.T*I$..q.<.c8.2..x.K4.%.........n=...O...u......;.X.B..BQ.S..$......w...t.]\|.'...8..f........d...F.X....bQ\|?.......{...+...x.G:.....t{.y....0..h.;T.UvwwY\<..{...iz.>>>.\|..G.c[6.mQ,...s..q.....>...h1.{..

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385)
Category:	downloaded
Size (bytes):	207209
Entropy (8bit):	5.398409421408782
Encrypted:	false
SSDEEP:	3072:P62deQY42MD/Pig887rJ8rGrFIw6gor9vV0USUBuWJg8vMssaGiF:S2RMMDKUJqsFMr16USUBuWJg80ssaGc
MD5:	82F8E09973A0342FE3A4ABEF0885FD1A
SHA1:	2432658B42C1008D4F41C4302F6C6F1C4FC1C525
SHA-256:	4DCE4158779DCE6DA3EDE11337029F817A03F45C9559B1F91D8A7C5AC130F38C
SHA-512:	6EC16EDAD5325700775374EBF39BCD5176820A33664E345F6B71DD085233411B761B1B4725FB88D1BDC6E3BF11E4DC95D85527B9B8B8CE1F2671563FD3901632
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/activeview/js/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Ig=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Ig};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18178)
Category:	downloaded
Size (bytes):	18269
Entropy (8bit):	5.340222477284612
Encrypted:	false
SSDEEP:	192:U8gFNlA5RdwFBuXtZVVKNtLSB4NMKsomjQG/MBgal9u/BNEZ3NS1p81XAunTOseG:UNQCFAV6+7Uc/eNS03feV2kUV8YJifO
MD5:	63EC24591A492AE4BBC17C099B85937C
SHA1:	005FCD639D4F736DFF30D6C683408CCB8F90B6C6
SHA-256:	DAFE97F9DB9B71D3E9F9913922CAB1D5353583F61F2A012F6A0A07B7A3FC0960
SHA-512:	B0F023166C159DB71A04E9DCA29C8668116F88E994D72FA9842AB386741059BDA8D068A40E5679794376FCDC3294389D2B0230F3217AB7BD219A790CC964C3B0
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/185-5a3b79db604b7e400e35.js?_sw-precache=63ec24591a492ae4bbc17c099b85937c
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[185],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return O})),n.d(t,"c",(function(){return C})),n.d(t,"a",(function(){return I}));var a,r,i=n("gcR/"),o=n.n(i),l=n("J4zp"),u=n.n(l),c=n("q1tI"),s=n.n(c),d=n("MShG"),b=n("5Aio"),p=n("WDoI"),m=n("qkuN"),f=n("4+a0"),g=n("kc0S"),v=n("EOa1"),y=n("+yCz"),h=n("hgSA"),E=n("DRvx"),x=n("xIq5"),w=n("dZ3W"),O=s.a.createContext({setPersistentFooter:function(e){}}),C=s.a.createContext({setUserProfile:function(e){}}),N=function(e){var t=e.pageContentMaxWidth,n=e.children,i=Object(c.useContext)(b.b),l=Object(c.useState)(null),s=u()(l,2),p=s[0],f=s[1],N=Object(c.useState)(null),I=u()(N,2),D=I[0],j=I[1];Object(c.useEffect)((function(){var e;Object(m.f)(),Object(g.c)(null!=D&&null!==(e=D.subscriptions)&&void 0!==e&&e.length?"sub":"regi","")}),[]);var k=Object(c.useMemo)((function(){return D?Object(E.a)(D):[]}),[D]),A={setPersistentFooter:function(e){f(e)}},P={setUserProfile:function(e){j(e)}

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65439)
Category:	downloaded
Size (bytes):	272953
Entropy (8bit):	5.292296087905988
Encrypted:	false
SSDEEP:	3072:racs9GjMn3D6vh4DdYPJ0AJjtjI5RPbtE/yBEdt3Y0Bl3B/JuC:rdMnz6vh4DuPJ0Yjt05Rjtu73Y0BFBl
MD5:	08899AB5B5F986F64974630AD47B39A1
SHA1:	6277C1F17F439405514C46C5F9BE4E3A2AD3DC75
SHA-256:	C484C78D502A9769494D9FE87C9A826618B36FD60B567DEE2CFA0F4E9163D79D
SHA-512:	DAA00F060CF00C33FB48720C0B740B043F98E4AA659EBCFEEF96819A93C536CFFAF9F9A54D300D1768FCC2384EC9C645CAC8BEE586B0C306BAB002D7B934E685
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v23.1108.2350 - 2023-11-08 23:50:14 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};var e,n,o,r,i=function(){return i=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},i.apply(this,arguments)};function a(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var u=t.length-1;u>=0;u--)(r=t[u])&&(a=(i<3?r(a):i>3?r(e,n,a):r(e,n))\|\|a);return i>3&&a&&Object.defineProperty(e,n,a),a}function u(t,e,n,o){return new(n\|\|(n=Promise))((function(r,i){function a(t){try{c(o.next(t))}catch(t){i(t)}}function u(t){try{c(o.th

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (854)
Category:	downloaded
Size (bytes):	1009
Entropy (8bit):	5.1598759845111974
Encrypted:	false
SSDEEP:	24:5f6f5fD9DnIIvn9XlWox9XrhoFkfCJlzEQDSjh5Efp3ecj+6j0Nv:tw5fJDnBv9/7GGfUbWp
MD5:	3572479088DF42A8CC50B5D9B8E1DD65
SHA1:	B8EF5B2106C42184D9F9934F5AF221C9075E6AB5
SHA-256:	A3710B9EC7535F6A1054569759736628A3A1C5758EAFA985AE1544A8CD60C293
SHA-512:	B7692347391B7F3EC7BE0BF5D35AF99BCC619D6BDC099568922A300E78106943800FED8560BEAE17A5CF35674C3CD9436AB8004CBCE0C590F72B5DEE146B6514
Malicious:	false
Reputation:	low
URL:	http://nope.theworkpc.com/rss_content/js/rss_blog.min.js
Preview:	/!. Copyright 2013-2019 Start Bootstrap. * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-clean-blog/blob/master/LICENSE). */..!function(o){"use strict";o("body").on("input propertychange",".floating-label-form-group",function(i){o(this).toggleClass("floating-label-form-group-with-value",!!o(i.target).val())}).on("focus",".floating-label-form-group",function(){o(this).addClass("floating-label-form-group-with-focus")}).on("blur",".floating-label-form-group",function(){o(this).removeClass("floating-label-form-group-with-focus")});if(992<o(window).width()){var s=o("#mainNav").height();o(window).on("scroll",{previousTop:0},function(){var i=o(window).scrollTop();i<this.previousTop?0<i&&o("#mainNav").hasClass("is-fixed")?o("#mainNav").addClass("is-visible"):o("#mainNav").removeClass("is-visible is-fixed"):i>this.previousTop&&(o("#mainNav").removeClass("is-visible"),s<i&&!o("#mainNav").hasClass("is-fixed")&&o("#mainNav").addClass("is-fixed")),this.previousTop=i})}}(

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1940 x 2368, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	13771
Entropy (8bit):	7.416664317053969
Encrypted:	false
SSDEEP:	384:rsbuFrK8vEzIMX8DWqy0I5GcDcrU0eTMa:QbChv2JsRy0eGF3a
MD5:	65D52F3F73042D3CEBE3850EA23D814A
SHA1:	FFC0DD438F03A4B1D3C79D6ECBF4152458F3E691
SHA-256:	B10552651724A0FFA4ECA58EDBD7B9B0219D4CC26AA5449AA7626E497FECF7E1
SHA-512:	3F421A5B919ADFAAE24C6A3AE725431704EDD9EFDCD3976CA5CD8B20AB05560291A0B4FE6A052BD33E46ED422DE6C8D6A8BF93DD7F99604118B90E374AE490AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@.............PLTEGpL.>U.8M.8L#. .5E.Gd8.L....tRNS..u;..y0`h..5_IDATx....r.X...#.>5..o..g....g......x9Dr..NuR.oA...JyA....{....^...o...`.... ......../.@A..7..e...F>+..`....+W...........................J..B...Y&Uf.d.^M..C..F.].H...'..q.v.......7.`.U.....M...I...KI>t...P.S......&I.q.JO.IR..)gK..t~2..^.g...Rm...x,......0e.........!..2..T..o.V..6.K.~[..1...9.I.r:.Kf.%)..o.....$..B.'..f.Y}2if.:...)f.')..wG.L.*.!IyY...b...K...).....H.fKr...I..\R>.KS.\|t....E....){.[.0....3...9.R!I..>My....3....j-S.N.S...R.JR..d..dI....Oj.?..N........u]..lc..EaI...~h..U..9.(.R._..Q.m......U.......U.Jy..q.0'_.2R.>.....R..@;...J9..?.......'.^..W.H./M.F..Y>.'.^Q.).zRk.... .S..r...Q.'..v...S..ZO9S..N.z...B.g....U.R.......#"..).:..N.'..1.~...>..... .<M9......4....1....6. .~Z.,{.....)..l.....i....Ve..).....`[.0jR-).z....Oi.;M.<]....ds.Qk.Io..P(.lI..0.h....).(i..j....r...x....jJ..(e[..?)t..5Ls..;)......k............................6.{o....\|..

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2647
Entropy (8bit):	5.038758782120578
Encrypted:	false
SSDEEP:	48:U9PdjtxErQlrbjOKk3e7H+uFwOU88mETkFSsLmmt:UnI0lCO7HJa87t
MD5:	0135C08A4CB9B51E33563C6E33D5DC84
SHA1:	4112D8C4D7E097DD6BCFB761AEF11EFA672C5183
SHA-256:	893264BAC2EC9A5D6051AE3C45B3C620D8CFE2359F6D399DE8F8AE46329CA08B
SHA-512:	B5C4C7D0E519DA4226A19DFDD6856533F3C2AC926567182A544EC9EA92A839EEB6FFE953F575C0135761E9F936B4659A8362700CBCF7D1B15CD7FE2057BA3CBB
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/style.css
Preview:	body {margin: 0px;}.#container {..background-color: white;..border: 1px solid gray;./.box-shadow: inset 0 0 0 1px gray;/..-moz-box-sizing: border-box;..box-sizing: border-box;..cursor: pointer;..display: none;..overflow: hidden;..position: absolute;..width: 970px;..height: 250px;..pointer-events: none;.}..#container * {..position: absolute;.}..#clickthru{..width: 100%;..height: 100%;..pointer-events: auto;.}../-------------- SPRITE -------------/..sprite { background: url('sprite.png') no-repeat top left; width: 970px; height: 1184px; background-size: 970px 1184px; } ..sprite.cta-arrow { background-position: 0 0; width: 7px; height: 7px; } ..sprite.cta-text { background-position: 0 -12px; width: 118px; height: 12px; } ..sprite.t1-1 { background-position: 0 -29px; width: 293px; height: 32px; } ..sprite.t1-2 { background-position: 0 -66px; width: 370px; height: 32px; } ..sprite.t1-3 { background-position: 0 -103px; width: 365px; height: 31px; } ..sprite.t1-4 { background-position: 0

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	5.481355270285456
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3nsRHh3rAjQKehGbOciZ5Jkpp7AbpCx0L7n:2ddATLf3qB3mfXbjiZXkI1Cxy7n
MD5:	61F5AA96FB4CD2D84623EA97B5EC005E
SHA1:	4B37B35A29B58E06501C12A5185C61C67A1F70F2
SHA-256:	19195533133B2D5CF2CC8FC1D489120E453DD814075B3A95A09DB6C339C6D1D3
SHA-512:	75E69D645FB680C71D3887F59E6D08E94660EA5684471204FA226354ABBE88B5ACB5DE0C2FB0601351E14BBE0A7BACFB808FD7EA1B50BB158B97F97797A425CA
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/audio-off.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 25 25" style="enable-background:new 0 0 25 25;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st2{fill:none;stroke:#FFFFFF;stroke-linecap:square;}.</style>.<path class="st0" d="M12.5,24.5c6.6,0,12-5.4,12-12s-5.4-12-12-12c-6.6,0-12,5.4-12,12S5.9,24.5,12.5,24.5z"/>.<path class="st1" d="M12.3,15v-2.5v0v0v0V10V9.2V7.5h-0.7l-2.9,2.9H6.6c-0.4,0-0.7,0.3-0.7,0.7v2.9c0,0.4,0.3,0.7,0.7,0.7h2.1..l2.9,2.9h0.7v-1.7V15z"/>.<path class="st2" d="M15.3,14.4l3.7-3.8"/>.<path class="st2" d="M15.3,10.6l3.7,3.8"/>.</svg>.

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	2869582
Entropy (8bit):	5.444907757494515
Encrypted:	false
SSDEEP:	49152:wr84rurK2o3RiNCWL3MJIeFcpAvakBZW85+9EC7gJ3dxhu6A3a0C/pZonmhGR4Wa:S6pCaSz5sFm3d/uIioFrTuQ
MD5:	58E9ABDC032720265798A4ED64CEF2B0
SHA1:	4C9B15F68DACAA28319E8827A810263CF48A2AB4
SHA-256:	EB0299FDF9BFC935D4E2359B134EDDA943DEF5EE2B55FE41510EBC9821B5CD70
SHA-512:	F83974AB681C0C0FD9DD3CC61CAAB45E4E4674FC325852E4C6731E144D3B732BEC28E51C4A81A6D6FB2562BC0E2AA706E1511B634E173070F2EAB49262BA243F
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/story-ba1053d3a59448a9f2d0.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[133,5,8,10,17,20,21,60,81,144,145,150,163,164],{"+/Tm":function(e,t,n){"use strict";var i=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=o;var r=i(n("q1tI")),a=(i(n("17x9")),i(n("wXC7")));function o(e){var t=e.className,n=e.fill;return r.default.createElement("svg",{className:t,viewBox:"0 0 16 22"},r.default.createElement("path",{d:"M15.863 13.08c-.687 1.818-1.923 3.147-3.64 3.916v-3.917l2.129-1.958-2.129-1.889V6.505c1.923-.14 3.228-1.609 3.228-3.358C15.45.84 13.32 0 12.086 0c-.275 0-.55 0-.962.14v.14h.481c.824 0 1.51.42 1.51 1.189 0 .63-.48 1.189-1.304 1.189-2.129 0-4.6-1.749-7.279-1.749C2.13.91.481 2.728.481 4.546c0 1.819 1.03 2.448 2.128 2.798v-.14c-.343-.21-.618-.63-.618-1.189 0-.84.756-1.469 1.648-1.469 2.267 0 5.906 1.959 8.172 1.959h.206v2.727l-2.129 1.889 2.13 1.958v3.987c-.894.35-1.786.49-2.748.49-3.502 0-5.768-2.169-5.768-5.806 0-.839.137-1.678.344-2.518l1.785-.769v7.973l3.57-1.608V6.575L3.984 8.953c.5

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1940 x 500, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4099
Entropy (8bit):	7.596712717160207
Encrypted:	false
SSDEEP:	96:xsWIxifq6ZF9B9UrFZD6iyTApHBJjQ4NfeXlm1SUuqX/6lcl:xbIgfpF9B9UrFZD6iyTAd0QfeXA1SUuS
MD5:	EC2B661EB03183076A01053AA1F158C2
SHA1:	BE2E6AE19F212CDA48AA07DBFF715B233EFF3C5B
SHA-256:	AE4487B40E2D161CB8DB6CCFDA5061EF72576F6AA71BEB3AAA8A7E3C12283807
SHA-512:	216AC9614DB038DD74A39A69D144BE2DCBB08430B137AAB98AA6CD6A36AE9FB8A1A75E488E119EB0751F760C794A73DDF074633EAC20C642E8AEEB804DEBD27D
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/lines.png
Preview:	.PNG........IHDR................*....PLTE.........h.8.....IDATx^.Aj.H..%....D../....E-........\|.9..n.....7.b....,.~/.0........g._?.O...O.....G...~}.h9y...(....a;at?g...d......F'(_g......].....E=y.z....O....3'..7.......-..W........_......./\|..'...O.(&......A0..?)....-...Q\<)....[.................8)W.(.....:#...x....O..Q.../.(......;.h.......n.?......7...]..P......W5o.y.u..\|]..........<g....Jp.......NvBp^.....H.......K 8/8ZBp.^g....-.rStf......Q.g.'.uU.?..]`\|.p].st..-.S......p........3..-.w..."87...].s.... 8..[?.V...B./8.p..L...h.0..'.7.3.s........i.n...$8.r..g...>0............`./^.p.$8.....g.\.e..,^.p..?.j.-&8.p..../=@y..u......$.]$Q.........+...Kp...%B.X...<......(^.p....-.\...ppD!.,^.p..G.-V.xY...-,..Op.p.....`..<...)i..C.g..Mp.........Kp."8....vPHI.G..L.3...(.st%8W.(..k..#!.3....T.-.D..=.Ip&.Y,..e..x...a31.......GpFp...7Xp.+W<..L5.t.V...y...l..<.........:#..\\......Kpn..@..P........([.$.. 8...R.$."..)...+W..l&v0H._...+.)i.DpFp......'.7..$8.W..D...p#8#8UCL.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1055
Entropy (8bit):	4.969356891825413
Encrypted:	false
SSDEEP:	12:YADKkbwXtjDLYJ/H3BvPUTauXLFW9/qYExPtBPXCNtO4W9Nu/eHLtBMCuQ:YAlbwXtjI/fg6YvwO4W9EWpOCuQ
MD5:	B6778046611554B0061A71E8B04DD269
SHA1:	A42693BAAB9599E1CEBA57997DB60DA8376C7E3B
SHA-256:	9FA34B91DD61A48A628E343233D07E7A25060C5C0F0B1929EF2554ACD034A68E
SHA-512:	4B20F2713414247999173A63A9088F32EEB49B4712AC7DFBBC7F7315AE4598A5F6FBCDBDAFE2F875A4BCA87E59FCE7DAB8C9379482F5D241D3C9818BE97B7431
Malicious:	false
Reputation:	low
URL:	https://a.nytimes.com/svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&caller_id=nyt-vi&jkcb=1701800040554&referrer=&sourceApp=nyt-vi
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800042277,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-bxzfv","asset":{"wordCount":0,"url":"http://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html","derivedDesk":"international_desk"},"ip":{"

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (811), with no line terminators
Category:	downloaded
Size (bytes):	811
Entropy (8bit):	5.551969881614971
Encrypted:	false
SSDEEP:	24:hMiRO9/VKHDJ4CjR9zDaR8G9xbJ4CjR908:NOUmCj/aGG9dmCjc8
MD5:	BE68D924C306C2CAC16F7FD2EDC12320
SHA1:	511AEB9FFFB22945266A009767585ACC0D835134
SHA-256:	0C0F9B24F145D8B71B56BB317E0895222FEF15D22286DD6DC12E45B688797222
SHA-512:	353BE6E412F26086DEBDFF0C9FDDDE353F11FDA0FB8708049C946F2F3D2480A1A897FC044160AF96321CCEFE67FF0EED74529C3492FACCB27CDB80D603DCB5D0
Malicious:	false
Reputation:	low
URL:	https://5290727.fls.doubleclick.net/activityi;dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html"/></body></html>

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	64459
Entropy (8bit):	6.1482905334947855
Encrypted:	false
SSDEEP:	768:BBpmuUg80OaAtFlxe7BFvqnSeSoENunkbYJDA9g8KFTI8fwR0u5xkTnjRvrhGRTU:HobED8f3TIWw+u5xkjj9rn9KPVuHwnc
MD5:	EA9DF3F005B636D59467E5012282A42D
SHA1:	E8BA3A9BD9ED5D6BB7A2436E5773ACB08D955922
SHA-256:	3F31C59D3B7176F83FB9805A50FC5292C376AC644F2397DA3698C7381DE46A93
SHA-512:	21C7DA4BD1585812867FB804BD56DC11B3B16F5762B0E6DB525C6101306C5A522C869246813999E15CE1936E011609C6E41E1A8F33E8FF262B125FFA67D02F68
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1666082311302517&correlator=2435454733284148&eid=31079969%2C31079233%2C44782503%2C31079527%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202311290101&ptt=17&impl=fif&iu_parts=29390238%2Cnyt%2Cworld%2Cafrica&enc_prev_ius=%2F0%2F1%2F2%2F3&prev_iu_szs=320x50%7C728x90%7C970x90%7C970x250%7C1605x300&fluid=height&ifi=1&sfv=1-0-40&sc=1&cookie=ID%3D36bc5e8533adab59%3AT%3D1701800026%3ART%3D1701800026%3AS%3DALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw&gpic=UID%3D00000da63dc47ce1%3AT%3D1701800026%3ART%3D1701800026%3AS%3DALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw&abxe=1&dt=1701800039010&lmt=1701798354&adxs=0&adys=76&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&vis=1&psz=1263x90&msz=1263x0&fws=4&ohw=1263&ga_vid=681427960.1701800039&ga_sid=1701800039&ga_hid=617904059&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yOTM5MDIzOC9ueXQvd29ybGQvYWZyaWNhIixbXV1dXSxudWxsLDNd&dlt=1701800036712&idt=2265&prev_scp=div%3Dtop%26pos%3Dtop%26request_time%3D2287&cust_params=als_test_clientside%3Dweb_none_low_20231205181359%26mktg%3Dtype_anon%252Clogf%252Cabf%26bt%3D%26sub%3Danon%26edn%3Dus%26test%3Dprojectvi%26ver%3Dvi%26template%3Darticle%26hasVideo%3Dfalse%26vp%3Dlarge%26als_test%3D1701796214195%26prop%3Dnyt%26plat%3Dweb%26brandsensitive%3Dtrue%26per%3Dtinububolaahmed%26geo%3Dkadunanigeria%26des%3Dciviliancasualties%252Cdronespilotlessplanes%252Cdefenseandmilitaryforces%252Chumanrightsandhumanrightsviola%26auth%3Delianpeltier%26coll%3Dworldnews%252Cafrica%26artlen%3Dmedium%26ledemedsz%3Dnone%26typ%3Dart%26section%3Dworld%26si_section%3Dworld%26id%3D100000009210185%26pt%3Dnt1%252Cnt11%252Cnt12%252Cnt13%252Cnt14%252Cnt16%252Cnt2%252Cnt21%252Cnt3%252Cnt4%252Cnt6%252Cnt9%252Cpt15%252Cpt17%252Cpt18%252Cpt5%252Cpt7%26gscat%3Dneg_ibmtest%252Cneg_ibm%252Cneg_ihw%252Cneg_chan2%252Cneg_chanel%252Cneg_gg1%252Cneg_capitalone%252Cneg_gg2%252Cneg_mtb%252Cneg_ms_safe%252Cneg_bp%252Cneg_orep%252Cneg_citi_aa%252Cneg_ubs%252Cneg_cathay%252Cneg_mktg_safe_q4_2019%252Cneg_hearts%252Cgb_death_injury_high_med%252Cgb_death_injury_high_med_low%252Cgb_death_injury_newsent%252Cneg_amerex%252Cneg_chan3%252Cneg_kaypemg%252Cneg_kvue%252Cneg_rchmt%252Cneg_sub0%252Cneg_hms%252Cneg_mastercard%252Cneg_sabic%252Cneg_aramco%252Cneg_cme%252Cgv_death_injury%252Cneg_newyorkp%252Cneg_am%252Cneg_google%252Cneg_rmw%252Cneg_debeer%252Cpolitics_sentiment%252Cneg_bofa%252Cneg_mttl%252Cgb_arms_edu%252Cgb_arms_high_med_low%252Cgv_military%252Cgs_politics%252Cneg_rolex%252Cneg_racism%252Cneg_rms%252Cgb_sensitive_edu%252Cgb_sensitive_high_med_low%252Cneg_msft%252Cneg_samsung%252Cneg_victims%252Cneg_captialone_p1%252Cneg_ts%252Cgs_war_conflict%252Ctest_bs%252Cgs_society%252Cneg_captialone_p2%252Cneg_amex%252Cgs_science_geography%252Cneg_sia%252Cgv_crime%252Cgb_sensitive_high_med%252Cgb_sensitive_newsent%252Cgb_crime_high_med%252Cgb_crime_high_med_low%252Cgb_crime_newsent%252Cgv_arms%252Cneg_korean_air%252Ccc_business_lead_boards%252Cneg_ssi%252Cneg_chldis%252Cgs_busfin_indus%252Cgb_crime_edu%252Ccc_tech_society%252Cneg_thrv_fin%252Cgs_politics_misc%252Cgs_politics_issues_policy%252Cgs_t%26is_viral%3Dlow%26tt%3D47%252C73%26mt%3DMT9%26abra_dfp%3Ddfp_prebid_0723_3_index_pubmatic%252Cdfp_als_home_1_als%26sov%3D2%26page_view_id%3Dz3DiZN4mOIhoKcvokH-eY6zy%26purr%3Dfull%26uap%3Dbrowser&adks=2358209754&frm=20
Preview:	{"/29390238/nyt/world/africa":["html",1,0,null,1,250,970,0,0,null,null,null,1,null,[138455944542],[6407248555],[33107678],[3265058107],null,null,null,null,null,null,null,1,[676982996],null,null,null,null,null,"AOrYGslIoK-a-fABkvZ05Pc3X6NwD1kA6xoI-d8wka3D3PaA99o_yZP0qXceoz2RonibCH8Msz0IuqHvbKeYyxSODAIoRpL25PYrt-6nxMgT5t3Hbvz1W64","COOQopfz-IIDFfiCdwEda9AN7A",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qPkYnaenykQ_yjkAeyXY8ZCY3ivCUtq2Ua2NFzN711Twh_Lg4HL8EHI3wA9rLoR8tCUIPI0S817ZVHct9aobw3QeW_ncaR5KoURL_nQvTmvulAhhvdIdNUPZy77JWVtLjmR0LYEebfZHb_JH7ot"]}.<span id="6407248555138455944542" data-dv-view="6407248555138455944542"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20231130" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb~"]">(function(){'use strict';/* Copyright The Cl

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27268, version 1.0
Category:	downloaded
Size (bytes):	27268
Entropy (8bit):	7.9920063268490305
Encrypted:	true
SSDEEP:	768:5s/5hQviOb4L3htjIUVhJSLg1Htzisq9S:5s/sadVhegzRqk
MD5:	30D6073613E33E742DE4C1325B31065C
SHA1:	850011A6C6F4664ACD3C4EE129278F35B769158D
SHA-256:	96841EEDF52D29D710373F4905A8232C96C0AB58201ADB0BEBA011516AD4CD04
SHA-512:	102AB5637BBE04FF96A395B77CDCCC35C8CCB2EFF4340DD0E50073EFF051036AFD1C37AFBCB04A19A8EB9E555AF736F7B216D359BEF9604D59977F5A92D1E32E
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/imperial/imperial-italic-400.30d6073613e33e742de4c1325b31065c.woff2
Preview:	wOF2......j.......%...j#............................b.`..~.F..b........Y.6.$........ ..3......['.q.m.......@.`.[.6.F.p..b{....e...bR.1..i[.P.y........Bf.j..j.y&....7.8..n.p.twK.]...{..&{.#..."~..;.....o.}9.........o.(z...vK..'.._.5..z9..7.B..Tp\|.n.d.8.`.D....s.}.g..n.2...e.4M....}.....%E..G3...n...lF.../<....j`I6..-.L$s}..a..(H.....M'.l..=.{......D. .....R.(.Y.1.."......p...v....._...bg.~.(....#(.8........v..iN.........).R.Rs.Y.m%...e..~........k.......a..".e..<T2h.)JN..f...MK&!.\|d"?b.fy..#....xD.uRE.."rC..m....&]..uS.9.:...D.J.L9E;b....5.ko..+.x..R;..yA..n.Y@...C...V........+..=.(...(M.-JQ.(J..Q.E~y.r.9.Q../.....@..b.....d.....o....5. ...]..?.Y..=..V..B....._...\|.'.m...Na....".Z.5{.@.\|..K?..G...5I..~.l+.\|.T.#.)X.....\..D.......2.....R..........a.8../...y..".ch).....~.o .as...Kj3..q>../5..\|..3...^....z...o....P.....Mm.....TS..n..s...o.`...g@...%p Q")~...O.._.`.. .@R.?o.....3...!T.:....._.>....[T..2..<..Z.f.~..\.T-...q....J..U*P..U:.!\|./..#dV\

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	112442
Entropy (8bit):	7.99847171465202
Encrypted:	true
SSDEEP:	3072:9fWQCzN67NNhxeWHrKOwKL3iWMtn2VpHmfzFSe:AjeKOXPMJ2VpwSe
MD5:	08139498A12EA279A0BCEDD5A0A297C0
SHA1:	63A0C80453D49DEDDBA8B746094BA92D980FFAA7
SHA-256:	563BABF7DCEECCDCC58B54601783E22E64F8313E665D417F20026B655A71AA33
SHA-512:	925D829E9C39C3924F049EE5A5834D7C82A38D9D775F577F17CB2D6A7ED776CBE4E3333F11172BD1738C53BD7733F44E3E7D9BBA8DD8990D07C49A89056BD854
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/04/multimedia/04israel-un-aid-01-bvqm/04israel-un-aid-01-bvqm-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF2...WEBPVP8 &...P........>.<.I%."......cn..?.m...;.?.y..i..L.o....#...W..Z........:,t.c....Yo...../..Gg...\|...9Oj.....\.............!...W....?..p=.?.z..................O...............7.....`..^...?..y4.....\|%..._....E.......K.?.?........=..k.i.?......I...._b..........s./._.?j.u>..g..Y.}.S...G....._.=....=.............G..........f.....-.?.W.....7.......> .q....:..G....$..M.5m.r.C...Twt.YBo..!4.....s...0........Y...M7..........."m.u..Y.......z!...e......-,......ac8#...Z{#0...M....tZ..<.\|...9...... ..R\9...F.....;..=....O..:9.2Q.....d4..K...m.`.6...P..E$-wa...Ox.Gc;6.X".C.zI...h..K"..T.#..U..i.DUD..//Dd....v.L_......7....\|6........o.5...#..a.r.Ab...5.F...l.....Ox..Y....\|....%.r.3~2...G(4.s........#..I..T....EUQM+..Z.C.X+3.]\R.).D..m%...u.Qd.~f.$....`.._.c......n.K.$R.....2u..uJ..I.u%......'q.ym"]..0.@9...;c.((. ..l 6.3Zt..5......cG&..<>...1../.bZW{.........hs..k...t/...=q..`, ..j.eb.!?.5...z....%.`p?8.\|ui..V..m.........q.E..T..K..i..

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "GPOS", 20 names, Macintosh, Copyright Type Network; all rights reserved. Any use or distribution beyond original license pro
Category:	downloaded
Size (bytes):	54172
Entropy (8bit):	6.104067479026946
Encrypted:	false
SSDEEP:	768:PUzk68Phf1naH3uzk/kC2ePyC/EYTFemQGPqz1RvBu6w0GP+aulCh/X1YZnU60sE:968PIz8+PcYTFsG81/Zw5j/mZU71
MD5:	041BD4D97A02DF6F948BE4C09936951D
SHA1:	C76489F3610250866A6A34AEA1E2C26F9BA2180B
SHA-256:	8CBCC84FEDF4EA9306537BBC014B21DA29EA0EB13D991BC1AEF7C2D1CFA6DE29
SHA-512:	8C6DB839090023A286DD971CF697E784576AD1F23E6BFA48DAE3B3D3E77B89004AE16096D1AE705D35356B203604E749C9A7541AAA3E64243D08025951A0FAEC
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/fonts/random1/franklin-normal-700.ttf
Preview:	............GPOS2V=.......,8GSUBJ8T...-D....OS/2.;C...-....`cmap.......,....cvt .T.V..4L...:fpgm...7..4....sgasp......5.....glyf......6....`head..9....d...6hhea..."......$hmtxE.K.........loca'=L....h....maxp.......... name..lP........post..........prep...I...x...$.........,..latn................kern......................+~.......8............."...&.0.:.D.N.T.Z.`.f.l.r.@.~...f...".T.......@.".P....... ...<.....".T.......(.:.`.......h........... ...<.n.........4.>.x...@.v.....,.V.`.....F............................ @ .!.!r!.">".".#.#f#.$.$<$v$.$.%.%>%x%.%.&&&`&.&.'.'8'.'.'.'.(.( (2(D(N(.(.(.).)D)R)h).).).).**\.......+...."...$...(...0...2...5...7...8...:...k...m...o.H.z.............................................................n...p..............."...5...7...8...:...z...............................H...H.d.H...5...7...8...9...:...K.p.z.....n.4.p.4.>."...$.$.(.$.+...0.$.2.$.4...5...6...7...8...9...:...;...D...E...F...G...P...R...T...U...W...X...Y...Z...[...i...l...n...p...v..

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28620, version 0.0
Category:	downloaded
Size (bytes):	28620
Entropy (8bit):	7.993141565652742
Encrypted:	true
SSDEEP:	768:6OycalWBk4gxL0w6KsDRj+ogdisBuvMh3YGpNcf:6BWBDg90wed+ogBuv2cf
MD5:	F99A0459024509F157A3352E5DE4F873
SHA1:	6C14317BD26D3EAEF5C207A3427B4314B2C29DBB
SHA-256:	2CCD0CE11738369585C6F39ED2CDE7B3B3B1C25C12FC30047218AA201D6ADD76
SHA-512:	348B8EA2A64994FC82B37148B94BFF703808645E023DCBE08DC16F8CC5A5E6384053E6EAC878EE8DC21DE6C2F11EE3E2777E85304D347B4558191DA73DF9769E
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/cheltenham/cheltenham-italic-700.f99a0459024509f157a3352e5de4f873.woff2
Preview:	wOF2......o...........ol..........................@....`..d.2..s.....@..[.6.$........ .....+..4.....6m.v;`,...3:...a...m):....U.{w...Jr1.q....Z.....L......p=.#.....I5". ....q.......]D'}.WT....TGy\Lu...._.v....VY..}D..c..;..~7....i.f.WE%.+.P.........I.......I........G_.KJJ...Q..7...L9.....P.....w....x.J....6E.A.S.0.#....,.;6k.\.\..r.].Wq.........P..y..\|.m>..l.BG..;t....r.....'u...c....8. .~..h,hZ...8.,..?.4..}Ax/h....'fD..$>.3..r.^...E.W.[...\ot.l;.. ..... .0m..a...fNg....h..~...bA.4\|....._N...)7.\....._.~......Uk#3.).......6n.A1...T.~. ..../..1$W..EH..}{}j...%Z-bA,.Y..Y....X.j..Nuw..Al.....E,(...[.I.>P.N~......'....k@...Sn.n.....w$6s.k.yuB.F....q...r.#~...h[ ......0..#y..e.k.9^....1...\d._#m..Mi.q..V.J.......&...4.......<?.........u.^-..................$ko-_QY..m.5.G.G..V..4.....A.7....``.l.%....R.....Qv.@...S,:<9..w...EE\^j?.X......:%.~..W....1.N..B,=..../.....;..~.*bJS.q]............g..\|.....1.....S..H..@.._.r]....3.Q. .$.}Y.RS?...@.

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	122688
Entropy (8bit):	7.998472490514778
Encrypted:	true
SSDEEP:	3072:bCNrijj7LkcEiHkrBsf5jgkbaKowAcGgk:b2i3/Sakm8Y3owAjr
MD5:	6192A9CAC15129D6E2B282848152C64F
SHA1:	AC4D7CF694324B52E86DF5973AEFC4B573A88A4A
SHA-256:	357CBACD7610A69D4A81C612C6D7EB9730D92FB5E451045627BD77A43B36E697
SHA-512:	06ECEE1EC1E15E58752B73D4EB86F5AD3CDC012B255DDA4C5371F27C25184ADDEBCCED4A4ED2E728924B94789761DD6D4B6FAAF92A8903D8DF9AC9B6025E35DB
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-who-health-fbgw/05israel-hamas-who-health-fbgw-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF8...WEBPVP8 ,............>.<.H.."(,......M.v..3.$....9...../x4.e....?...W^.......?].w0...9...>~~........^...zI.....s.'...#......C.9.Y..^w................}........M.;....O......S?.~..'..j....y7..o...?..e...q.....\|.8..?..........?...g.o........?.w.'.{..e.a.......?.~...~.~.{{.....c...............c..h.B..K.l...{..&....92....^...G....q&...C...d.p..t.TX\|[.d.2A..q^....g.O<....9..h..P......Z..]..@...#..Z\|~.52e..p...p.).3....i;:E.-.\|t.....<.....:k.....{^....~...%%.q.n..n..tbp..5..`R.8.....!.h.qqW.q.)Q3...l..5T..[.p...^..qi...L..sP...>..~.0.#..."_...K ..=."p.u.......`.......[..5....E.w.b.-.A....$...]%3k....r....v.8.q*.+2...9.8..Il@...y@.wF.^.TX..S.F.."KP..z..>..s..j..4.8..v....9.<L...ix...?.....4#Z....b...Be$.......R[3y=.S.Z.'[4nd.].}...f..m........mW...d]...u.?...e.jb.........y...'q....i.;....i.....T....f...&=.'..@..zt......N...:...8X..4.~.......A.\.F...,.6J...O......Jx.N..5.....JR1}...)6b..2r.Z+UP...LE.4...!$..k..X.....[.D;.....k.m.Q.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	dropped
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22940)
Category:	downloaded
Size (bytes):	22998
Entropy (8bit):	5.312211133163171
Encrypted:	false
SSDEEP:	384:Ktche2gkjsEgzMfoM/pOl2uKrIkbC39y9yS:wcZ9gMOnebC39ycS
MD5:	078400628199A3340CE1953AF112096E
SHA1:	8640EDE3096E1AC075361F6D4BF01CCA5C9031D8
SHA-256:	559BDD296B5FED626F9DC30C00E521CD4615AD6ECD4FEE7C44AEEFC811F26CFA
SHA-512:	ECDB501408E1C822B23E181AEDA0745F54BE1BCB3508DA35A33747E70953F24A2538AD43070277B9D489112660A2C9095652082D9A0494755A21A3035BE59783
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/adslot-c02e009c82341062ec30.js?_sw-precache=078400628199a3340ce1953af112096e
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[44],{"1iyJ":function(e,t,n){"use strict";n.r(t);n("RzqG")},2:function(e,t,n){e.exports=n("1iyJ")},RzqG:function(e,t){!function(){"use strict";function e(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function t(e,t){var n,i=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),i.push.apply(i,n)),i}function n(n){for(var i=1;i<arguments.length;i++){var o=null!=arguments[i]?arguments[i]:{};i%2?t(Object(o),!0).forEach((function(t){e(n,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(n,Object.getOwnPropertyDescriptors(o)):t(Object(o)).forEach((function(e){Object.defineProperty(n,e,Object.getOwnPropertyDescriptor(o,e))}))}return n}function i(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,i=new Array(t);n<t;n++)i[n]=e[n];return i}var o,r

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20136, version 1.197
Category:	downloaded
Size (bytes):	20136
Entropy (8bit):	7.990627851422643
Encrypted:	true
SSDEEP:	384:1UF38N9+LPBmScbdlpzKuzh6Y8B/twshqtRaq79SgTs8+I9Z:10S9CZmbauh81wk0cqdTWcZ
MD5:	A6479A5200F9A6352BDB71589C27C9C3
SHA1:	A5977CEEAFAB9A9DEC9504AC379F534204BF2222
SHA-256:	284B0236A4042298BEAB7FBD92E85285533473C1316488A1FD2E0AA3522F607A
SHA-512:	4FFC55F83F6790BAF6F9517F001A0DC02C3D4A9DB71CD6D903074FEBBD75046B00D6A99C7C5F2915EBEEC2A46236BE15A7FDD7F78B9BCEC571858A2EC115E9BF
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/franklin/franklin-normal-300.a6479a5200f9a6352bdb71589c27c9c3.woff2
Preview:	wOF2......N...........NI..........................Z....`..v.,..s.....D....6.$........ ..D.......7....1.r;.._...........`..LH.....NPs..u.fZ...DX..VG.9.N..UZ.a.N:j.Lc...-..o.......=..a...F.c)..^.....gE.L...C.6.j.....2.\|.+..y1.....D..;.....`.DK......G...ex.WY........CTW\|/22..{.+}..YHG.(...9@...m.7..3.....PD....E.D..5.f...mn:{f...]D.h....J.$.....O.+.d.M.....3..].0.[f..$.f.l7p4..vr..!...cr...:..._.V.Ek.Pa_.z..5...A.VKj.e%........om...}..hH.-..._f..[..j[.^,....$.Y<l....P.^..R...jL.F.x..\.....kM...R.(.../y.~..._.g..=.P..pM.c.s~.9.w.{.c.w..d..0.v..^..nc.A.c..F....&..l....o( .......C .{..'.w..i.6..._JG..Y..^[.4..{....5..UE,..?.AK..\|...U...B8...+......[.rY.....G...@..!..Vu%..4....T&S.S-#)K...S..2e.Z.9.Xw......Sx.~.7..o.F...Z.......W...WC...#..%.$<UC.......@.....Q...R.L.~..w~x.8....3.n\|6.$......=...\.....F.#....>.qI. R.....T.../.4...`..m.[..}...... r.."a.... ..n...._.....7RE...8..{...OT.x(......=8.?f..0.%mS..........^.. q....]JUn...+.l7%.7.S.....w.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24722)
Category:	downloaded
Size (bytes):	46659
Entropy (8bit):	5.3984884192302856
Encrypted:	false
SSDEEP:	768:pf2/z/+l/s/sHs1Rfo0h2gwXLiUYKriG+LEcbnXcf+Y2qisXtQp:pfaL+l1s00anrqLEcbXcmuXtu
MD5:	4C9440E25B9A5DD01B391F9C03C4F24B
SHA1:	85659CEFB3C9860DE527D7178D0BA350D16DC33A
SHA-256:	B710291AF28FFDDF385D79F6F0077BAE70BF854AAED3AA22A2E6F89194B6DAA9
SHA-512:	CF21388C840C562B783E42E834AF7CB73138DAF48D2F15C8A55B91AB20FF3B78AD7632596E1EA51617A0A37D0EE24562D200AEE16E2088244B40A27DD065965D
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2023-12-05 03:03:14 PST';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1324), with no line terminators
Category:	downloaded
Size (bytes):	1324
Entropy (8bit):	5.132166472365133
Encrypted:	false
SSDEEP:	24:lrBms+8BmGaY9NVN0mZTCzfIZ+0k/x/dyEjLSGRWZa3duHUjM8RRRnV:ZSQuYHVNzSuvk5/drfwwtRR5
MD5:	6FD8C0D9C79A14080171D5BA1EA3E510
SHA1:	F0AF7211BC5F3D1472574EF951E22B6EA4F30BA3
SHA-256:	75C31214E8A4C355803486B0181E2D2E47D03D66F584B8DE9D3BED3013C5335D
SHA-512:	A140C85D9041C63F224A1D2C064B06E819D66D971599B246821CEBDB0791A10B670EF028E732353F63BACF2112F2AA3A8B634FDE527C19B12B3AC327F024A2E4
Malicious:	false
Reputation:	low
URL:	https://platform.iteratehq.com/loader.js
Preview:	!function(r){var n={};function o(e){var t;return(n[e]\|\|(t=n[e]={i:e,l:!1,exports:{}},r[e].call(t.exports,t,t.exports,o),t.l=!0,t)).exports}o.m=r,o.c=n,o.d=function(e,t,r){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(o.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var n in t)o.d(r,n,function(e){return t[e]}.bind(null,n));return r},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="https://platform.iteratehq.com/",o(o.s=338)}({338:function(e,t,r){const n=(window.iterateSettings\|\|{}).scriptHost\|\|"ht

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	702
Entropy (8bit):	5.410289972832761
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3nsRHhzfHaopGZGEUGas6d67:2ddATLf3qBGoKU59I7
MD5:	67652DA3A119C795C417355D9E1AC31A
SHA1:	32BAE02FDCAC9FBB2A1C00682053CF8815BC8344
SHA-256:	C9FB083529541E219AD17A00CB201B3DBA9DABCDCC01EAE4EB9AC04B8CB72216
SHA-512:	5169390A5E13E6B96BF865C4D04370B57A7A01A268576205DB0F319821691B7460D5A1CEDAF6281F8FE5B40CD30855174BFECF1ADB000684E4C70E9AA4E4F399
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 25 25" style="enable-background:new 0 0 25 25;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill:#FFFFFF;}.</style>.<path class="st0" d="M12.5,0.5L12.5,0.5c6.6,0,12,5.4,12,12l0,0c0,6.6-5.4,12-12,12l0,0c-6.6,0-12-5.4-12-12l0,0..C0.5,5.9,5.9,0.5,12.5,0.5z"/>.<rect x="13.7" y="7" class="st1" width="3.3" height="11"/>.<rect x="8" y="7" class="st1" width="3.3" height="11"/>.</svg>.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1014
Entropy (8bit):	4.936009741153502
Encrypted:	false
SSDEEP:	12:YADKkbwLjDLYJ/H3BvPUTauXLFW9/qYExPt5iXC0iQhYs0eHLtBMCuQ:YAlbwLjI/fg6YTiqunnpOCuQ
MD5:	FE92012FE4899798DD7EF5F23B0F5FBF
SHA1:	5BC6E34C49CF6310B81581285075E229A6EA0CAA
SHA-256:	E212943CB62878DD8D1F4BCA8AE601766A413F584AD3A9D1D3BC3CEEDC06FF20
SHA-512:	82B30DC4FD7A352741165895BF4BDF57E05AEA4D9EA40182CF92A8C00D56B1688EA54C1CE01A42BCC281470A09048D93DB0AA94308A37DE032A862C6EC9096B3
Malicious:	false
Reputation:	low
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800033059,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-9sxgb","asset":{"wordCount":0,"url":"https://myaccount.nytimes.com/auth/iframe/enter-email","derivedDesk":""},"ip":{"corp":null,"edu":null},"session":{"isLogg

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1648
Entropy (8bit):	7.808664207258903
Encrypted:	false
SSDEEP:	48:Yn4cf3t85cIgqkMrbwI2Z6f+6YSzrPe98esI8YV:Yn4CUcTJUbLMv6YSza+ej
MD5:	4BF96CB6A1093748BF5B3C429ACCB9B4
SHA1:	E4B171ED710CCFE7EBC7BDBE9A75BA91D6D3171F
SHA-256:	94DE5AE7E9BCF74727F45BB30AE37F553DB4594012E2704336DA5FBBF3357C3E
SHA-512:	B4819D6A4FDD4115C18FC55BB42245BB0D93D833998BB2BAA50555BDFABB9238FEAFBA175CF47784409A0524B59BC3813E4AF9AC8D2CBE477C223925D2A6F1F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......sRGB........IDATh..iL\U..am....H.B.....$6q.k.j.....&5......Kb..4.h.~l.F..`..PMT.j.........6,U..f...G.<.{s.P. 7........y311+e%....x.......<~ll........x<..`..Fi.:555...U8....m...LOOo...\....W..+...Lx9u.u.z..wD..@ ..X.`...5.N..@..."Bq...\VVVi(.:.H?. ...P.x.......:>/....O.&.?.\...W[H....L.W..".(.v....(.....sB.!s....U....h...((....b..hF..D.....3T..[.y.....]j&........3K./ ....$t...R.r:.e..N.e.....r...(..rt.....6.......c.{.av...H...-e.j......Ur....{I.S..1.E....0......^ePh.8.i6P..r....l....Z%".N.D..iO.....+8z.....?@.!%%%..].........f7.m...L..I....r...-....++.D;'''..... s.......ZO.....L..._....twIII".. 5,...yJd..?D}..>..V...h9.......,`\|...m.+D.-r.....\nA...W.q...."s..+..D^^.Z../..%.(..cd......z.......B..X...._..ct...._$...z..k...+.FGG.F.L.M........!.HJ.]pv.....BP.....L(..Da.....<.A.2...F.i.....rf.......sV+D\|....G+.i,......I.....\|A.nt..i9@...u.......;.V..T...l7.p"..1...L..k9..Uc.Ut;...r.+3MVs..Y;];...W..0i..n

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x957, components 3
Category:	dropped
Size (bytes):	175883
Entropy (8bit):	7.980253599054171
Encrypted:	false
SSDEEP:	3072:2c4Q+TG+nch70jMlKcomtThDUNul8pFYqY4/0XtmlS+qj0HpxAv+bXj:2czlOckOtThDUBHYqn/09mlS1mz2+bz
MD5:	676329CCB01824E8E0B809CBC4A23EB8
SHA1:	DE94DC6B6608DC252F5A5084FB9227207753D975
SHA-256:	C1E6B9DB255ABBB1C6D9C89C60865B11396842904FEDF3ED623235C075B8C140
SHA-512:	7E34754EEAB268C93D6B820A2F8660823812693B34002A51A48791635FFD330F4ACF01B6A241D3169B800075606E2BE92F529C4861CE21F40E329D1740692976
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".................................................................................U......g.}.(.Y._,..+=....hJ..c........lo#.)I..S..w...].^Vy...m9kI.-k...gjL...d.v{....$..$...H...`.J:z[..A.'..2,.\|.b.....8A./i.].(.TY........Q_.......I.i..R.L..

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392024&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x687, components 3
Category:	dropped
Size (bytes):	92368
Entropy (8bit):	7.9674254835007865
Encrypted:	false
SSDEEP:	1536:dzTSYp2ogZRD8+rakSm+GVUHhpVFgNTbLuoAC4ro67woa6EoYa0My4//1JIg:dzTS3t98+rRAGVUJFgNnLuoACYwoa6Eg
MD5:	DAF90B3282FFF5DD840950CFC041C50C
SHA1:	E56616CCF97925C36B90BAE37E05A3E045AFE778
SHA-256:	F866F877D4E7D62A931D3D8B0E35977C92D8B50A68ECDB47428721C6754343B6
SHA-512:	5875C92D556D982E835E8CE1ED38DBD003069E14F37676E5445BCB86D308AE7F55E1B2F7143B2219ABD00AD61EF18FBC0CD444FBD4E5F7B1290B8099448DA884
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................D......................!..1A.Qaq."...2...B...#R.br...3$C..c.DS.4ds...............................).....................!1.A.Q."a2q..#Bb..............?..5....(H... .V.3...p..G...r..5..I...@X.K.Q.U..n.._E.....%?.!6..\....r.2b\S...A%_p.-..<

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "FFTM", 20 names, Macintosh
Category:	downloaded
Size (bytes):	51448
Entropy (8bit):	6.169312101523017
Encrypted:	false
SSDEEP:	768:rUwCL4ZtB8hRQ4CPUQCSiNPV5Xu9Z/RL3keun9UkgtQMThiRe2OFxvUU3:YwCq8cJULNzuXRTgKkpuCcFx8U3
MD5:	65B2BB7121FF70A8F06E0EE5054A91FA
SHA1:	EE6CB580D6F4D30DBF2E1DB983C3371093F7ADBA
SHA-256:	73928B362B61260B4AFEE186C2F126CC0E2D668A3C849C2935208B548A139AC5
SHA-512:	5597AD86904E65CD874F7C1D8F0BEB6268A679F953F21073D833B0828BFDB9022AA75B52BC79F225C300BB8609CC05F8C040BD84273E1F1AF4B8B7349BB5C601
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/fonts/random1/franklin_normal_500.ttf
Preview:	........... FFTM.%..........GDEF./.........GPOS!An<......%GSUBI.T....(....OS/2.sC........`cmapvW<Z........cvt ...e...P...2fpgm...7.......sgasp............glyfs6..........head.xj....,...6hhea.......d...$hmtxB4e.........loca............maxp........... name......@....post=.q~........prepR,..................<.v_.<..........).t.....t?..h...?.r.................].......h.@.?.........................]...G.......................N.......y.....L.y.......f..................@. Z........C&C .@. ...#.#...].< .............. ...H...............s...=.}...d...T.......?...}.......=.H.....d.H.....m.H.........L.......N...)...5...L...`...X...L...J...........w...q.....L.P...............P.V.......L...N.P.X.......................f...P.P.....P.P.......;.3...9...................P.........m...D...}...%.......D.=.....H.=.H.%.H.N.......J.......................J...3.H.=...=.H......./.....H.......q...........R.....=.R.....V...h.s.........`...H...;........./.V...o.%.y...d...m...N...........d...........).N.X.3.....#

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4360)
Category:	downloaded
Size (bytes):	4441
Entropy (8bit):	5.297986925351313
Encrypted:	false
SSDEEP:	96:1STQdJeMxvDsAZwsDfsSa1C2FvOXZFwrYcb0Ky:1SieIvI8Y1+XZFUYcb0J
MD5:	818F073E6C02489B41C4C23DEDAD1461
SHA1:	A56C441695D9B4E911B36731CEA97470A83D3C38
SHA-256:	F18DE703E80AC94DFF518A8F6872C33163B468453AC89990E07AFEA8AD2C976A
SHA-512:	FC45C4D408E7D70C01C2263046EF14C1D74A51F4FA501F43DD796FF643533BACAE5FF4777E72B00FA0D621FB67342B7FEBE5644196B77234D05459A30444FDCD
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/datasubjectrequestverification-5fff936f049d2d4ac598.js?_sw-precache=818f073e6c02489b41c4c23dedad1461
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[69],{Eiy8:function(e,t,i){"use strict";i.r(t),i.d(t,"DsrVerification",(function(){return v}));var o,n,r,a,c,l,s,p,d=i("gcR/"),u=i.n(d),f=i("q1tI"),m=i.n(f),h=i("B0Ek"),x=i("lZ/M"),g=i("vftj"),b=i("XSdp");function w(){return m.a.createElement(m.a.Fragment,null,u()("h1",{className:b.l},void 0,"Verification Error"),u()("div",{className:b.b},void 0,a\|\|(a=u()("p",{},void 0,"Something went wrong. Please try again later.")),c\|\|(c=u()("p",{},void 0,"If you are repeatedly experiencing problems with this form, please call us at our toll-free number, 1-800-NYTIMES."))))}var y={success:function(){return m.a.createElement(m.a.Fragment,null,u()("h1",{className:b.l},void 0,"Verification Successful"),o\|\|(o=u()("p",{},void 0,"Thank you for verifying your identity.")),n\|\|(n=u()("p",{},void 0,"We will now begin the process to answer your request which we hope to complete within the allowed legal time frame. If we need more time to process your request,

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x731, components 3
Category:	dropped
Size (bytes):	116523
Entropy (8bit):	7.971325003853783
Encrypted:	false
SSDEEP:	3072:dzREZRAx7QTZKIT/eNxSnBzO+IagLvtvW1PydvH2AJrZlWrDI:dzGLw7QVKIKxStvdgzY1advWcdlW3I
MD5:	EA70410F8AA9BDE42B65FA27F55B4AF4
SHA1:	97B49E18FB705A373D5A9865AA3D79C14078B680
SHA-256:	F5778D98D7A662119F8E8C13006D4465A7B784876E562E348F6C8F0C867744E7
SHA-512:	CCFDA2BEEEA8976360CD9A548D4FE03606CE42AA6265938E82CB4198153B7D2E0615F7421974B636CD956E453A71E94135151C44EE7DB09FD1EABF9BD28D2493
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................F........................!1AQ."a.q.2..#B...R....$3b.CTr...%4DScs................................../....................!.1AQ.aq...".R.2Bb.#.r...............?...F.l."y.&].&..5.k.L8k&.G.5`.ccD..`L92eT.....92`L.1..\5..&.y.....&.....Ll.....t..

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	194045
Entropy (8bit):	5.092363013109591
Encrypted:	false
SSDEEP:	3072:Nn6+54/spIL72kMEFve/XuYFR1d3tOrQO5:B6+i/oyTMKve/XuU1d3tO55
MD5:	C0C159D49A7ED61D7A27C09704925F2B
SHA1:	67983B5547F9DEC6436DCFF47FFCC87CA0C89D9C
SHA-256:	C7C11AC58A435009DD3B6CD506FBE4E4F3CB11CE497CFEE9427AA1A9F17B8541
SHA-512:	82C21DBDE83FAF7A8592F5E237A2C55FF8CEEBB6BCC121085C82F583F76C7172D470FCE5F4C66148E16763C21C8A430F73622F6BEFED0DCC85D2E001340D6E6B
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/emailsignup-f3ca1a7e06022030da1d.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[75],{"5DNu":function(a,c,e){"use strict";e.d(c,"a",(function(){return b})),e.d(c,"c",(function(){return n})),e.d(c,"b",(function(){return t}));var b=function(a){var c=a.clientId,e=a.newsletterName,b=a.productCode,n=a.label,t=void 0===n?"":n;return{event:"impression",module:{name:"newsletter",context:c,region:"body\|marginalia",label:t,element:{name:b,label:t}},newsletter:{product:b,productName:e}}},n=function(a){var c=a.clientId,e=a.newsletterName,b=a.productCode,n=a.label;return{event:"moduleInteraction",eventData:{pagetype:"article",trigger:"module",type:"click",status:"success"},module:{name:"newsletters",context:c,region:"body\|marginalia",element:{name:"subscribe",label:void 0===n?"":n}},newsletter:{product:b,productName:e}}},t=function(a){return{event:"moduleInteraction",eventData:{type:"response",trigger:"module"},module:{name:"newsletter-shared-ui",context:a.clientId,region:"embed",element:{name:"newsletter code invalid",label:

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29076, version 0.0
Category:	downloaded
Size (bytes):	29076
Entropy (8bit):	7.992567117169786
Encrypted:	true
SSDEEP:	384:aohJFL+g6o0a1VaEYhQ8RwTWtUK3jD0oWJXt0hh2AIirQhuK/xay5dFxDn4B8:3JFRT0aLVYSbWtln0oSehU2QpfDv4W
MD5:	A3ED7AFE3EAA0A873F3FBD379F8C491B
SHA1:	6EC545AB586AAD49B960EE65F41D8D4B5E1856A6
SHA-256:	48C17DF8A89E5C3ACB4127A265CCE50218716F0DFDF7AD265267D4A013F01B2F
SHA-512:	6C69ADBDC53BF45E4C7692E8017168C260FC4EA8FE9B560F7CEE10DB44818222B2261FFBAD1A67AAD47F81B0B98C98C34823E3F47854778A30CDA2B53F4FFECE
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/cheltenham/cheltenham-normal-400.a3ed7afe3eaa0a873f3fbd379f8c491b.woff2
Preview:	wOF2......q...........q5............................f.`..x.F..b........}.6.$..8..^.. ..g..0...[..Q.v=..W{......../J..tV.;p.'V......d....f...\...m...l..............n8...^...a.\|b'..z....n../.)..W..\|..3.....%(,....]..Q-.....Y..h.17...].%..'..O..w...H...l..X1.c4".h#..i..%++.c...g.C...n..@.D....\4:S[O$l#T+\|.............c.,.V,.1b0.PA..........~.....}Y...>.A.....-.i.5D.....T.Nb...?...{).E...{....G`..m..^m...wr....I.j...8R..}..~v.x..R..@..^.Y\.v3...&h.g:...W>..`.SI..&.......g&.o.]...@....PulG..F.i'w.."..Q.......~.>..iqr...)=5RzNE..P..H.5 B]...%..U6@v....)..\|T.)ju..a.W.....gHrv..(......z.....a.......{....9..y.M6...N.XB...1..!....#....A.. ..y.d.nXn....P.nY..>+i^0M.Mk[2...y..Rf.t..An...v.....t..A..&....!O.H........n.:v,..-}.._g...u.b^...!...h.y...g...r[........)....`0....7U....i.t.-....At.~.6....C...b..y... q..0 .$@.".@..!P..`...K..a9.!%.T$.)K.Y.cL]LUH.T..r.mc...-._..i6......vo/. .1.P.SJ.V5t....D..4..h..&.#.`.............2..v.[9b..F.).....!Cc:g.*.....o

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1587), with no line terminators
Category:	downloaded
Size (bytes):	1587
Entropy (8bit):	5.593515749891891
Encrypted:	false
SSDEEP:	24:CGrwEu/1jk/1Du/1dzu/1a0o1NZaM/KfYCSiFf1DKH11S27S5fMiwmlg:Ccgdjkdidodybj/5CS8gS5OSq
MD5:	BFF5305E6F7215DC01D5714DB4BA94C1
SHA1:	9E2C4C58482EC0AA58B615840D1E0EAEA45071F3
SHA-256:	9FEDE197B6837369EFC4704F76F93252DB8A0E7B9532B74B74D9D067DEFAE387
SHA-512:	083A0C40197A5A188B5DC83533B5908428F4D2209695F9008B716BAF657A0351EFE00DB292DE1968B9E1E09947952DEFC84516498D6C87ABC7F2F5B14CFA6179
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=3396806&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=40D3C5B1-C944-4F

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8547)
Category:	downloaded
Size (bytes):	8605
Entropy (8bit):	4.62298494975909
Encrypted:	false
SSDEEP:	192:PzZ8LKMNGBX5kALnzUywE2iebI72ieZOq8QY9:raLKycX5LzUDQKI9yOVQY9
MD5:	46FC9AEBC6D97B21A4BD0CDF02A39503
SHA1:	927EB90437CB7C62AE782A5464CE20F82529BBA6
SHA-256:	18C3AD95801958586BE041378CCCC7334CCE6E39C7DBAB9786DF7D78490CC124
SHA-512:	A6C9696DFE6953FECBABB0061849FC83662C268C398438D507B53E6220A7732B41FCA99EF598B652F72B950E5C019672A4696821E2BCC09ECB0601BBFFC50394
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/dealbook-04f5ba9ad464466ed702.js?_sw-precache=46fc9aebc6d97b21a4bd0cdf02a39503
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[70],{BSKy:function(e,l,c){"use strict";var a=c("TqRt");Object.defineProperty(l,"__esModule",{value:!0}),l.default=void 0;var t=a(c("q1tI")),h=(a(c("17x9")),c("Jqp9")),d=(c("/jA0"),(0,h.css)("fill:currentColor;mask{fill:white;}")),n=function(e){var l=e.className,c=e.size;return t.default.createElement("svg",{className:(0,h.cx)(d,l),width:"small"===c?"160px":"320px",height:"small"===c?"24px":"42px",xmlnsXlink:"http://www.w3.org/1999/xlink",viewBox:"small"===c?"0 0 260 41":"0 0 411 40"},t.default.createElement("title",null,"DealBook","standard"===c&&" Business and Policy"),t.default.createElement("defs",null,t.default.createElement("path",{id:"a",d:"M0 .739h27.5v32.962H0z"}),t.default.createElement("path",{id:"c",d:"M0 41.261h410.504V1H0z"})),t.default.createElement("g",{transform:"translate(0 -1)",fillRule:"evenodd"},t.default.createElement("g",{transform:"translate(0 .261)"},t.default.createElement("mask",{id:"b"},t.default.createElem

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (779), with no line terminators
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	5.593517453042717
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHwJKWgBRE2eYezZnsnjJnO8v0JrTiUMGT2IWSBWjJnOf8:hMiRO9b+BRE5Ye5SJnO8cR8G9x6JnOf8
MD5:	392400185C05065074180B02D82D129B
SHA1:	318C7D21C4644093601CFB6FDA82A54DAC914150
SHA-256:	2FDB1C3C5A876E8DE35940E29F834600701C1CD03EBC8D8141447980EA05115E
SHA-512:	9B6189AEA176901F7956A4E4DA7AB0534A95E5502B8BAC4125FF6A81270A09089FBA7F6AF657FC579FE5A1CE7607D3E05D3948D2A17E82E6A9C3BD6C2EAE4005
Malicious:	false
Reputation:	low
URL:	https://5290727.fls.doubleclick.net/activityi;dc_pre=CNvg15jz-IIDFUvnKAUdpPUMZA;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNvg15jz-IIDFUvnKAUdpPUMZA;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html"/></body></html>

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	681
Entropy (8bit):	5.481331483660789
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3naXPHhW0a6UcmDQzhNRmJT:2ddATLf3EPBWrMVNRmJ
MD5:	AC79F9CF6AA8BD6F20FC5BC3A629E040
SHA1:	2C47E61CDA58E569675F08C9B519195F45A067B5
SHA-256:	8658FC44CA45CF40EE56D54BCCB269E8CBCA4AD85F1EA1BFBBC5FAF127A7DEC3
SHA-512:	E6794A513AD903FB5194AFE11FE568EEAB6B0E59D71A6D80A69C5EDFD2CEA1FECAFE21B2C8DF3F6BF9C88F952BF2C182A6F64814C0CD7D1A4C928E75877A169F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 40 40" style="enable-background:new 0 0 40 40;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}.</style>.<path class="st0" d="M20,0.5L20,0.5c10.8,0,19.5,8.7,19.5,19.5l0,0c0,10.7-8.7,19.5-19.5,19.5H20C9.2,39.4,0.5,30.7,0.5,20l0,0..C0.5,9.2,9.2,0.5,20,0.5z"/>.<path class="st1" d="M15,26V14l12,6L15,26z"/>.</svg>.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20276, version 1.197
Category:	downloaded
Size (bytes):	20276
Entropy (8bit):	7.988592381163741
Encrypted:	false
SSDEEP:	384:Igh8TrvPX9V4jBEn7GzBjcycTcd+oOcs3cyh7Rvellkzfz3QxoKmwSW0dVEfM6w:IYuX98EnUB/codscsF9zr3yXGVCw
MD5:	91EAF6B5642463AF4091160B4BBFDFCB
SHA1:	0624A04E8CA03817AEF4F02B492D331CAC9ECB6C
SHA-256:	B5221E0636A97505AE38720D4EF182D35BE5FB47D2628428DB4FC918AB7EE30E
SHA-512:	C7FDBFCE6186C2B053F408139358933C8D373547CAEF7BB34CB78F52F2343610A9C758426611DD34F5B704044A344FB6E601E0C0276DA56D6DC52FE1FBCE8898
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/franklin/franklin-normal-700.91eaf6b5642463af4091160b4bbfdfcb.woff2
Preview:	wOF2......O4.........N...........................8....`....:..s.....`..d.6.$..t..\|.. ..D..^..$....d..~..7^....w.6.h...R................1.f...Z.C..>&Jw_}.....:...gI..'V4+J.C...L.`h...@%oK..4D.kT.=q;.Z?.V...t....b]..h.....7.%2.0......9L.mL.A.n...z..Y..T4.......Uj..w~M..m.....$'/...?.....` ..Oy.6..5....O:?{3..4.i...d... ...?,yw.D.tI.]..p....\.TwWnu..A.....\z...8I.9..(.2..X.S.....P$L..Qr.!J.q...:..\|..7s...\..vp_.........p..e.HfY.!5...fjb.sz8.;y..Hu\..9.D..89.`f.Y...y..1ob......^u.ip......q...s!#.....ypJ.......0.dUV.EQdE..UV.....FQ...:).+<.......#9...\....yQe.....VS.e.x.^.,%%.....`.@.x...<.)...[...[R.#.p8I.....O.M'..]Z....7..k-_......GO.........6c.G....?i}3....I.>^W`.b.p.....h.W..F.v......p.y<..Z..;sj ..N...a.XE...U[.ok'....e......P.YR... +r.p.R2..X.!]..T.ly...C...t.h8.......>6......p4.. j.)i.G......vHMQ......\.%....U .{ny.......eK..ArH..N....#.y..(N..oD...0o...c..p...0w...e..L3...@...8..]....O.;....!H.AD....c8s...x...8$.nW.aY"...D.[.F.e..:.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 526 x 526, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9358
Entropy (8bit):	7.934377127470344
Encrypted:	false
SSDEEP:	192:nRZC5/QMICY5q1x3/xr1N+rT2QjwYYhPmUWW0/veFeH4oKAu6C+1E:n6uCw+/xbswJo5WAveFeYwu6a
MD5:	482417CD6BC9BB38C8DC54A500698D5F
SHA1:	32A3B3F6D1A2BE2BC6AA0C06031EBE13D3D6E56C
SHA-256:	E19E9CF7B889F92BC13C7AE4EB2434E412263F362F0B30EE83E87FE8A0D89A02
SHA-512:	8339E0E931619C83FA671618DEE413C2A6636761210F908EEE62AD5FDA7C49CFCA5E35CA280E8FF10A80DFCBEA37D732098F8A7EF176CECAAD3951AAE3732608
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/NYT-BestSeller-Orange-ad8203552f20bd135b7419d88e7d0c58.png
Preview:	.PNG........IHDR..............eu....<PLTE.-.-.-.-.T.`..x...F.....................m...9...9.....tRNS. .@.....#.IDATx...A......C..^..2,..gt@.t@.t@.t@.t@.t@.t@.t@.t@.t@.t@.t@.................a.5..Vy..KQ..b...^.C..o\X9.>.S..o..M.m.........N.[.WR^I.b...:...F.X,o...0....N8...:..EuP...Au.K.y].!.z.s..;..k.T..d0o...z......E..g../.2m8...._.S....+.Q..P.o?2..:.B.m,..J.`.......fs.Bw.:.<.>Do.@+...68t.H.5../L....E..=..+[h........EuxU.V.}6...hJ....5....U.W......tj...i.sp..y .....6.U.F...].U0..<..XL%..+a+.8...Ig.n..Z..m..b~'..2Qi.[eV.^..!.......9:.R.\|.....@.E1..Q.^.@.;....B....(.B?....n.P.f,"..+..)....=...zx......:.d.[V.....[.?....]...A....L.7ZS....0...3.....:$...Qp...2..?.".IexW!..t.G.C.,!..Y$.hzW.^.tt.....Ou(.."....#.K\{.y...e}..U..........?.!..... :.p......3'LAu."1....m.Q.xX...............,s..).."Su..W..&..kL7..e.X...p..P..#+z.4...t@.'1.~..:.+1...6...r....~.........Yq,......&...O.Iu.Z....0&Q...[`.?..o^...-.p\+...Bx..O.Vu..-8@..I....C...:8...^Uq&......

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (43725)
Category:	downloaded
Size (bytes):	43786
Entropy (8bit):	5.407649237032375
Encrypted:	false
SSDEEP:	768:ClXxgxUh16CQRtOSWi/VHDQ/EAdi9dU+Tb:kXOxUYt7/VHDQ/EA09d/
MD5:	592A70617459F3ACD3E93E0DEC463915
SHA1:	79E05CF270E93853E16F9798895F7D4574657AB8
SHA-256:	750650E50D65AD5A61F41C02C6895640065D05786638D7E5B7E1916D8089A5D9
SHA-512:	5DDFEDBEFBAF4EA3D1F65D31EB6A54174FCEF723BF77AAD995CA8E49F111C5F72A9CF819B3FB54BF55A68BB521A4D8B970E842538569B88BE7F0A1FAB83C9EC7
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/186-e6ce936346f6f641e401.js?_sw-precache=592a70617459f3acd3e93e0dec463915
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[186],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return E})),n.d(t,"c",(function(){return R})),n.d(t,"a",(function(){return h}));var o,i,a=n("gcR/"),r=n.n(a),l=n("J4zp"),d=n.n(l),c=n("q1tI"),u=n.n(c),s=n("MShG"),p=n("5Aio"),y=n("WDoI"),v=n("qkuN"),b=n("4+a0"),m=n("kc0S"),f=n("EOa1"),S=n("+yCz"),D=n("hgSA"),g=n("DRvx"),T=n("xIq5"),O=n("dZ3W"),E=u.a.createContext({setPersistentFooter:function(e){}}),R=u.a.createContext({setUserProfile:function(e){}}),I=function(e){var t=e.pageContentMaxWidth,n=e.children,a=Object(c.useContext)(p.b),l=Object(c.useState)(null),u=d()(l,2),y=u[0],b=u[1],I=Object(c.useState)(null),h=d()(I,2),C=h[0],H=h[1];Object(c.useEffect)((function(){var e;Object(v.f)(),Object(m.c)(null!=C&&null!==(e=C.subscriptions)&&void 0!==e&&e.length?"sub":"regi","")}),[]);var N=Object(c.useMemo)((function(){return C?Object(g.a)(C):[]}),[C]),A={setPersistentFooter:function(e){b(e)}},P={setUserProfile:function(e){H(e)}

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	downloaded
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/ATH8A-MAMN8-XPXCH-N5KAX-8D239
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2348)
Category:	downloaded
Size (bytes):	6105
Entropy (8bit):	5.437874807472625
Encrypted:	false
SSDEEP:	96:5NcjRhp0zrAPKI1xtOXVy6s9R4Y1CfPDqZaw2PMTBxj6kDxx1vnysfRjUlEYdO6s:5NcjR30zK3ws6s9R4YAfPDhNETflDBy2
MD5:	8E62FBC0AD68AF20BD820DED5B8DE62A
SHA1:	7EB712F30E1355CF59F28033C3F513EE0B5C8981
SHA-256:	367E9BA17BEE1E676E15D01DAA52D8FEC079988777F11440D25CF1710ECDA7EB
SHA-512:	9F3F76B22EC6C27AF29821A8DF0AE0009E63803E95EFF99D9A4E1047FD89A426899B147ACA03C1DBB18CDC529F3E74A31C1AE0B9E77F76E17CFFCD2064EB4827
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var f=this\|\|self,h=function(a,c){function b(){}b.prototype=c.prototype;a.D=c.prototype;a.prototype=new b;a.prototype.constructor=a;a.C=function(d,e,g){for(var y=Array(arguments.length-2),l=2;l<arguments.length;l++)y[l-2]=arguments[l];return c.prototype[e].apply(d,y)}},k=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function m(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function n(a){return-1===a.toString().indexOf("`")}const p=n(a=>a``)\|\|n(a=>a`\0`)\|\|n(a=>a`\n`)\|\|n(a=>a`\u0000`),q=m``&&m`\0`&&m`\n`&&m`\u0000`;function r(a,c){if(Error.captureStackTrace)Error.captureStackTrace(this,r);else{const b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a));void 0!==c&&(this.cause=c)}h(r,Error);r.prototype.name="CustomError";function t(a,c){a=a.split("%s");let b="";const d=a.length-1;for(let e=0;e<d;e++)b+=a[e]+(e<c.length?c[e]:"%s");r.call(this,b+a[d])}h(t,r);t.protot

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16053
Entropy (8bit):	6.017640384780145
Encrypted:	false
SSDEEP:	384:LJJwft6SCnLZsDU5AjEicQFVvKqnvd3eChNQBiVQQwVFxf79/G90rMRYDv1I:FWgOI5ldUV30ChNQEjwVDfB60UYhI
MD5:	4097EEBE5A6551104A0E8E9981E102E7
SHA1:	2A7BB38BF309C35FEC7924FA9B5039B3FE1166A2
SHA-256:	E6E27806C52C719DC9A1B87DBF2AE9F256EFAAD883FC107F322EDB901B666086
SHA-512:	DDF00BA8F8A029B59269A54FE808F564F62FDFE097A1B29E5639ED82C0BEDE7AA51017FB4FBFBB8431863373DDB54EC13915CB8F2E796C61ACC14C4E72A4DDF1
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202311290101&st=env
Preview:	{"sodar_query_id":"b2hvZbVY9Paj2Q-Ui4qQDA","injector_basename":"sodar2","bg_hash_basename":"Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow","bg_binary":"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

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	191
Entropy (8bit):	5.285472655371158
Encrypted:	false
SSDEEP:	3:8WiCLViemMQ32p0kHRTFHHVIoCYKgQnIwBM4D/YLxtiGT/6eR0TLI5DefNh:8WiIUem/32p0kHRTFH1fCYKbY4DexIGy
MD5:	7094852EB6BC1DEF52CFA3A35E61234F
SHA1:	0561FCF8DA492C94451C8F155D76D71E38899126
SHA-256:	4DCE82188087B5A879AFAED84F7C41579A9CCD759994D30D908879EDC355CA62
SHA-512:	0D5CCE0E35E1567AB58CC99DF80A8FD6FF03F208730ABED79522C8341820C86E924329D27039872F3DF52B83E681AF756A44066089F09150177A03D39841B45D
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift","cb":"0"})

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376)
Category:	downloaded
Size (bytes):	446
Entropy (8bit):	5.395901645637268
Encrypted:	false
SSDEEP:	12:lD71AZet3uUQJAuHtdNQWgMMAoWEfG2WDEqAx:lD58ewUQJAuNb3MNEDEqAx
MD5:	F6B120F6F543B14DA8485D0FA412B2F4
SHA1:	0855FA00C0C8B039CC4B54BF1128431000E9E540
SHA-256:	EB5A8E4D8E9ED25DB6DAA9D633FC0D3F8AF4E2D1893E367E80067B59564D5A1E
SHA-512:	33D8E0F80406AFF043B0E8BD9FC704F8E82CE369C7AED7D83FFE6B1D92B6B28B6E61DBB5E6DC6EAADD1A8533F02D4E447835699FC4DF6E21015C8FE46B671CA3
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/allAccessLandingPage-49658b8b29ff1f82e48c.js?_sw-precache=f6b120f6f543b14da8485d0fa412b2f4
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[45],{GxRy:function(e,n,s){"use strict";s.r(n);var a,c=s("gcR/"),i=s.n(c),l=(s("q1tI"),s("G453")),t=s.n(l),o=s("K5H2"),r=s("qs2k");function d(){return i()(o.ViMessagingContextProvider,{client:o.clients.landingPageAllAccess,performanceMeasureCallback:r.d},void 0,a\|\|(a=i()(t.a,{})))}d.displayName="AllAccess",n.default=d}}]);.//# sourceMappingURL=allAccessLandingPage-49658b8b29ff1f82e48c.js.map

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1500x1000, components 3
Category:	dropped
Size (bytes):	74638
Entropy (8bit):	7.934729856572627
Encrypted:	false
SSDEEP:	1536:dz5HVhWB/5Is0xKhR+xgAb3RXGUG5hmR65UOk6ufHLIBPU+FKWgJ:dz5HS30xKhR6gAbRWUSURuQ9GNKWA
MD5:	37527AF20A2B5FE75AADEC0F0AE85A52
SHA1:	72089762C020F5405EC776DDB0D4D87A958600DD
SHA-256:	BD10BA965650C4A75749D0E19E0C4E59EB0E9EEDBA99016308C9733DB1990F37
SHA-512:	993BD82D3B951F265000534BDB287F266F2E225C18670FFA98078CD237FAC73A24A289981A487826E692C969D92E1B2603064DF969AEABCD8E5A6B223DAD5152
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................?........................!.1."B..2AQR#3abr...$q..4CSDs...%c...................................,.......................!1..AQ2a.".q#B.3.R.............?...`.>c..C...d2A.T...2 0......1...(...]...c>.........`\....`.#.m....Y...h\.#.x41p..`.4`\...pjp...

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	648386
Entropy (8bit):	7.998733579337521
Encrypted:	true
SSDEEP:	12288:oxr5KHDPTq0rWVIaFxB6qxfYnfQ/96y1u2W1o7gUzZOWsfsHX:0GTqNVIaXAt49p3W1o8UFOTcX
MD5:	6873C36DC36D7FAF297B5BCD78A57EE2
SHA1:	172127625EB8685F16D91F98635F1D955105019F
SHA-256:	E9A35FC4213F61FA7B50E782561A1585212C80EFB77BBAF1BA871C64277A6533
SHA-512:	072A277C711FC613D75B4B1071B71CC6DD84CC97844A6E86F4F55403F9F3563B0A7A313B71F9261DCD57AD0A35E2F830DC884511F24FC5D046EC2C004479BD97
Malicious:	false
Reputation:	low
URL:	https://vp.nyt.com/video/2023/11/08/113087_1_MKTG-BAU-USAllAccessCrisisRefresh-Nov2023_wg_360p.mp4:2f6a5d7ae39aab:1
Preview:	;...>...37^.9.G...M.`...\.h.]n{~4...? ...........p.>..m..u.t..X].n..j.....H4D\|q...~i.....=...+La;..dkG0....jMit;...m....t.x..3..s..0.....6o.\...uk..Q....g.....H.H.....z.%..\l........>.".,)='.NvD...#6c.r....1....)5If...._ .p.7.[.G.<a.rO(..v.".....&.....uc....\|.........\|e.-Y."....[..3B...\o$.1..<..{.^.vG....o.8..T.'J...2.<....'./-...!nZ...~...!....56).H.d.w.q.j........}.......j@.;...]O....16.~U2d..%.....Q..&./.;...g......N9)..........1...........0.?..-...e.l...d..DMf. Id..r..u....'....F.W.r....v.>...p;.\E...Ll.~..'.%......>j............f......N_z...<.n.42.L<o.Z.wH.i.....f...n...=...{....8.E....d......8l\|..3......D[...4d.....e&..@z.5..D*...&+sf...W..s.,.S61.4..ty.u+...H...C.8#ET..M...hq.F.}.I/...r`v.....y.>$v ..31].}..kR.!]..Fji...I2.N../.i...Cs.\|..3.FO..y.Ij.kV.a.9..5..R......o..F2P...k.."K.>:W>.=......3\|./xf..a..I$l.....@@..P..0".(..{.t..&.......z.}....N"9Cah.0.y.V...O.e.i.5..4<6.t.]7D..pV;.J.=.v.,y..t..`.$d2...p.V_.B.f...A{.A.$fxrO.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (768), with no line terminators
Category:	downloaded
Size (bytes):	768
Entropy (8bit):	5.558836816719997
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHmGQQBRE2eEU1gnsnBSCz20JrTiUMGT2IWSBWBSAf:hMiRO9/QBRE5vEw5R8G9xo
MD5:	922ACDC2A6184C49AA6CD8BF675BCB71
SHA1:	D5F3CAE22A9760FF8CD02DEB8F637409E5A251BC
SHA-256:	16FD6F62FA5CD3482DAFA98FA1207D98FA8CC7AE70B51A9F48A6CAEED7017BEE
SHA-512:	227A8367D72EE83324D8A7632102F15D1B0750C2379ADF8405F67CE503E1540BC4F124E8C731E17F43D506FDD58FEE892EF4379919F114DF9D081320419C0EF6
Malicious:	false
Reputation:	low
URL:	https://5290727.fls.doubleclick.net/activityi;dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news"/></body></html>

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9643)
Category:	downloaded
Size (bytes):	9705
Entropy (8bit):	4.678701518054924
Encrypted:	false
SSDEEP:	192:StnI2C+L6XiiC6/SmRP1tWp0vIWODy1u6mokac9sYwSlS/I1RbAZwMmffl:SpI2C+C/SmLfQx003S/g6Zxmffl
MD5:	A8F57F9443D5CF6B10360A51D88F3DEC
SHA1:	93C96423EFE622FC8DE109C3AC1356AC9F1D78BC
SHA-256:	4977129910957A2FE9A3BA195791AE0BB248BAB92C6E558376DA773F515F997F
SHA-512:	A2EEA8CA19911DD7DAB98BDA55615629372891B4D5290AAE6F32F129AB469DDE5B3040C58E5921F05B9AEC054B244D401303EAED215D33E9BB54B7B3146836AD
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/DealbookLogo-85c9c99a372cbf774226.js?_sw-precache=a8f57f9443d5cf6b10360a51d88f3dec
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{AiSA:function(h,a,c){"use strict";c.r(a);var V,Z,t,d,p,M,l,s,H,v,e,o,r,m,i,n,C,w,S,u,L,f,A,g,N,b,x,k,P,B,y,J,R,j,q,D,E,I,K=c("gcR/"),O=c.n(K),z=(c("q1tI"),c("KhZS")),F=O()("title",{},void 0,"DealBook, with founder Andrew Ross Sorkin"),G=function(h){var a=h.className;return O()("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 800 80",className:a},void 0,F,V\|\|(V=O()("path",{d:"M5.32,42.46V10.53H.94V3.61h19c14.76,0,24.23,8.09,24.23,22.85,0,15.34-10.45,22.92-24.36,22.92H.94V42.46Zm29-16.13c0-10.71-5.49-15.8-15.15-15.8H15V42.46H18.9C28.37,42.46,34.31,37,34.31,26.33Z"})),Z\|\|(Z=O()("path",{d:"M61.93,50.23c-9.86,0-15.67-6.73-15.67-16.26s6.6-16.06,15.28-16.06,15.15,6.2,15.15,16.78a15.82,15.82,0,0,1-.07,1.82H54.94c.4,4.77,3.53,7.45,7.58,7.45,3.26,0,5.61-1.5,6.53-3.79h7.24C74.66,46.77,68.66,50.23,61.93,50.23ZM55,31.36H68.59c-.46-4.25-3.07-6.86-6.79-6.86C58.41,24.5,55.66,26.92,55,31.36Z"})),t\|\|(t=O()("path",{d:"M78.78,39.45c0-6.53,4.7

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	262551
Entropy (8bit):	5.479041121904755
Encrypted:	false
SSDEEP:	6144:TJcthBfX9RkB99IDMdnGYfhyMUUFGfD7O:T6thP299IDMdnGAlUXf2
MD5:	AB0BE8B3BAC74B0B426B15292310359C
SHA1:	4DE2EF28AE2013F5FFCB91559C16B78A687AAC65
SHA-256:	E8942AC54D478D8ED6E1D6D7B3CF6558B5DA21DC3AD95616F1B19B1A07745321
SHA-512:	52E079EDE87297E0814B71F7D37868DA4727962DA4C6BBFB3C41DA3DE82F68F274A0F52EC78C5495C0CB163B8B0DC5D5177A506BCFB9B58D28979D40DDA2C989
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/bestsellers-ee775d91faac0c716b6e.js?_sw-precache=ab0be8b3bac74b0b426b15292310359c
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[51,11,17,81],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return j})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return _}));var o=n("ygvk"),a=n("8iTF"),i=n("7WMn"),r=n("XWHH"),s=n.n(r),l=n("LgWu"),c=n("a9ya"),d=function(e,t){var n,a=null;switch(e.type){case o.a.GET_ARTICLE_REQUEST:n=function(e,t){return"".concat(t,"/rest/articles/article_").concat(e.articleId)}(e.meta,t);break;case o.a.GET_COMMENT_LIST_REQUEST:n=function(e,t){if(e.nextUrl)return e.nextUrl;var n=Object(l.parse)("".concat(t,"/rest/comments")),o={"filter[articleId]":e.articleId,"filter[isAccepted]":!0,include:"replyTo"};switch((e.sortType\|\|c.c.NEWEST)===c.c.OLDEST?o.sort="sourceCreatedAt":o.sort="-sourceCreatedAt",e.listId){case c.a.HIGHLIGHTED:o["filter[isHighlighted]"]=!0;break;case c.a.RECOMMENDED:o.sort="-recommendedCount,".concat(o.sort)}return n.query=o,Object(l.format)(n)}(e.meta,t);break;case o.a.GET_COMMENTS_REQUEST:var i=function(e,

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31420)
Category:	downloaded
Size (bytes):	102990
Entropy (8bit):	5.483843662356011
Encrypted:	false
SSDEEP:	1536:cIZKeBMUL7UumnD7S1OlVPESlM27qFT4hMULgMFHX+tN57juwD+:FIA7UTn3S1Qxs2uFTUbgMFOJTy
MD5:	7A899F7779B76D9688A6A6314A28AB39
SHA1:	DB80813D3052B7821213B20A1E8B831B5EAAB979
SHA-256:	D080A5BDCEB3DCD678EE61EA0B53E97BF11EEB783D121CF94E76FCB6703D6C82
SHA-512:	37DA0F81C8C36499004DFF82E0ED95C056C82D4DCB733E5D6272950F65F07B65F76364D311C1FCF6A80E10F9A93BD312BFABFFA0E93A154B421E5CCAD7CF21A5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ea=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
Category:	dropped
Size (bytes):	152794
Entropy (8bit):	7.968354825596297
Encrypted:	false
SSDEEP:	3072:dzarPaytYLp+3D5O348LEr8npBT+WP93QdaKLsbbjj5dxVFArYIP3:dzGPnYd+T5rkDP9SDAj7yEIf
MD5:	C9DBDEBE79341725A1179F3496F36ACE
SHA1:	565E63F3D8F6261D99B8B0FC11D8C133BE295C23
SHA-256:	9E01A09421BDBA049680B9B84B4CEB34D544E7C748B92AF46AF3D76A9A14EF6F
SHA-512:	DF179264C716265E027551410C431C6F20F3C58B8A6BBC9C099F31BF00364E66D162E2AEE3CB24B7BA42A7AE9EC35211D9DC8C4CA24D503553E61B34589977DE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................F.........................!1A."Qaq...2..#B...R...3br..$.CS..4%cs..D.................................;.......................!1.AQ.aq"2.....BR.#.3br....C.4DS..............?...$.c5&.9..Z..^/K....GG._...w..~...@......Vw'.q.~*.........S......c...]&

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	98
Entropy (8bit):	4.768527417058189
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4D/YXHo/nM:8WiIUemo/H1fCYKbY4DCI/nM
MD5:	70E382B2ACCE97959A12E00C528F0BE6
SHA1:	C752A549637CC73B7AF7D05862EF6B67E37A0178
SHA-256:	A0583B981B2718C2B7FA7648808F0C88C5930EFCD6664804FFF98400A13A916A
SHA-512:	2A01BAF7F9CA06EB522DA1AC924D11538D1207D039FBF3FC49D56BD279A1A83D462AB477F79837A3BCF35EE0ECADA0D8370EE3E8434065DBD6BF850C35464FA1
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=rbd","cb":"1"})

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 5760x3840, components 3
Category:	dropped
Size (bytes):	2087884
Entropy (8bit):	7.943663674336997
Encrypted:	false
SSDEEP:	49152:0CUjfJfLyg0Ss64vAhorHSBrwGAI1K7u3fQ5:fwhfhoAyHS2+UuM
MD5:	2BA2E927841A3790FE7B80DEE746DAF6
SHA1:	73579142F41AA3CB46133BBF5DC163005546A919
SHA-256:	F91ED9FE50F53140C822A79E2002CBDCF59ED1EB433D5F88AE9758C7CBA6FE06
SHA-512:	696C21E0023C11B230F3BD49BAC49F1D45B9A19A43AC18E79EC5EB1F1CD0CBE6860B859E9CA5F13446E7B0DDAF452353A7CA34EFC6E8D8B375568B4090742B32
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (782), with no line terminators
Category:	downloaded
Size (bytes):	782
Entropy (8bit):	5.588558711311385
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEH478IreYvcK9lnsnBSAP0JrTiUMGT2IWSBWBSAf:hMiRO9tKqcKHA8R8G9xo
MD5:	84138B7F889084024C311A6364EE2D2F
SHA1:	E035FC4F97C9C7214FF024CFBC685CA424F63E95
SHA-256:	0891A04DD6F5DE09FF7D6C1215986F1A86C13C825DA6C53A9DDF3F5BF58191F2
SHA-512:	ACD2AC1D281316BA9E3A283B43EFD9EEAC032AAE4A4A43C300AD61790C4655DCC925209A7E899C5CAFF07474C8ABE19415DB047359BDBC593DAD1E8C51DD8013
Malicious:	false
Reputation:	low
URL:	https://5290727.fls.doubleclick.net/activityi;dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news"/></body></html>

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	561980
Entropy (8bit):	5.34677084542916
Encrypted:	false
SSDEEP:	12288:CzSUjFcooDkFx90K+CaGE0k+KBh/eQVtWP+C3JvuAr:dU9013y
MD5:	BC675FEF99CED23E789ABB23DB1F9F31
SHA1:	07A457BB845B96C727F94A0BE45F7C337E032428
SHA-256:	9CDAC7C18E471C1D200144AF2FE17A8412FA24B36B011F10AE3DDF48858367D9
SHA-512:	DE1BCE68707963B3674539DE160C43F1C390B4E2337C9114E64DAE2C889DE0EC5AD0B67F2FDB0D76CC48EDD815A93DF481E044621F554F33C45F0CBF5823ABC6
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/clientSideCapsule-3ba408d68d4aef1db00b.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[61,163],{"+nHC":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){var e=(0,a.keyframes)("0%{transform:translate(0,0) scale(1,1) translate(0,0);}25%{transform:translate(0,0) scale(1,0.95) translate(0,0);}50%{transform:translate(0,0) scale(1,0.9) translate(0,0);}75%{transform:translate(0,0) scale(1,0.95) translate(0,0);}100%{transform:translate(0,0) scale(1,1) translate(0,0);}"),t=(0,a.keyframes)("0%{transform:translate(0,0) translate(0,0) translate(0,0);}25%{transform:translate(0,0) translate(0,0) translate(0,5px);}50%{transform:translate(0,0) translate(0,0) translate(0,10px);}75%{transform:translate(0,0) translate(0,0) translate(0,5px);}100%{transform:translate(0,0) translate(0,0) translate(0,0);}"),n=(0,a.keyframes)("0%{transform:translate(11.329999923706055px,0) scale(1,0.95) translate(-11.329999923706055px,0);}25%{transform:translate(11.329999923706055px,0) scale(1,1) translate(-11.

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	561980
Entropy (8bit):	5.34677084542916
Encrypted:	false
SSDEEP:	12288:CzSUjFcooDkFx90K+CaGE0k+KBh/eQVtWP+C3JvuAr:dU9013y
MD5:	BC675FEF99CED23E789ABB23DB1F9F31
SHA1:	07A457BB845B96C727F94A0BE45F7C337E032428
SHA-256:	9CDAC7C18E471C1D200144AF2FE17A8412FA24B36B011F10AE3DDF48858367D9
SHA-512:	DE1BCE68707963B3674539DE160C43F1C390B4E2337C9114E64DAE2C889DE0EC5AD0B67F2FDB0D76CC48EDD815A93DF481E044621F554F33C45F0CBF5823ABC6
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/clientSideCapsule-3ba408d68d4aef1db00b.js?_sw-precache=bc675fef99ced23e789abb23db1f9f31
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[61,163],{"+nHC":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){var e=(0,a.keyframes)("0%{transform:translate(0,0) scale(1,1) translate(0,0);}25%{transform:translate(0,0) scale(1,0.95) translate(0,0);}50%{transform:translate(0,0) scale(1,0.9) translate(0,0);}75%{transform:translate(0,0) scale(1,0.95) translate(0,0);}100%{transform:translate(0,0) scale(1,1) translate(0,0);}"),t=(0,a.keyframes)("0%{transform:translate(0,0) translate(0,0) translate(0,0);}25%{transform:translate(0,0) translate(0,0) translate(0,5px);}50%{transform:translate(0,0) translate(0,0) translate(0,10px);}75%{transform:translate(0,0) translate(0,0) translate(0,5px);}100%{transform:translate(0,0) translate(0,0) translate(0,0);}"),n=(0,a.keyframes)("0%{transform:translate(11.329999923706055px,0) scale(1,0.95) translate(-11.329999923706055px,0);}25%{transform:translate(11.329999923706055px,0) scale(1,1) translate(-11.

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49485)
Category:	downloaded
Size (bytes):	49575
Entropy (8bit):	5.365513194514142
Encrypted:	false
SSDEEP:	768:5crizMMaiUolw7lp5ADn/itoqS4HNbGZkt5KR42TwVzuCCJ9IOp41Jn:5ctb3+CuZ+b3
MD5:	089B1E142D629EA3BBA142F182E4ACF5
SHA1:	0E06A96B70B25F77E69C4A742B7376F325129551
SHA-256:	49DACD77958FCBC64C36966F0DFCFF08ADF738C1897C0541773F8F231ED80D4D
SHA-512:	73C717DA454003C79C71193813BEF9C77943E936423E18752079C67D6AE050402B08BD74561ED4D99688590B14FACF422CA3D74A69936162B73F92D206688808
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/26-829d0d92ab50da3d5923.js?_sw-precache=089b1e142d629ea3bba142f182e4acf5
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"6Z20":function(t,n,e){"use strict";e.d(n,"a",(function(){return c})),e.d(n,"A",(function(){return o})),e.d(n,"z",(function(){return a})),e.d(n,"e",(function(){return u})),e.d(n,"d",(function(){return l})),e.d(n,"c",(function(){return s})),e.d(n,"I",(function(){return d})),e.d(n,"C",(function(){return f})),e.d(n,"G",(function(){return p})),e.d(n,"H",(function(){return h})),e.d(n,"n",(function(){return v})),e.d(n,"b",(function(){return m})),e.d(n,"E",(function(){return C})),e.d(n,"i",(function(){return y})),e.d(n,"F",(function(){return g})),e.d(n,"y",(function(){return b})),e.d(n,"x",(function(){return M})),e.d(n,"j",(function(){return S})),e.d(n,"o",(function(){return P})),e.d(n,"m",(function(){return A})),e.d(n,"g",(function(){return z})),e.d(n,"h",(function(){return H})),e.d(n,"D",(function(){return I})),e.d(n,"l",(function(){return B})),e.d(n,"f",(function(){return w})),e.d(n,"p",(function(){return V})),e.d(n,"r",(function(){

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22441)
Category:	downloaded
Size (bytes):	22511
Entropy (8bit):	4.645709915136459
Encrypted:	false
SSDEEP:	384:uako/Knxudv1BnoOq4jA0YiDjN3uTiBZyp2vuMcSL46sfZ5pnfA:uvnxudv1Bod6dBZyEG6gpfA
MD5:	ADBA4A1FB4BEE00E1F70BD3E15C9F567
SHA1:	B823D61E3CA5618FE535BC981417F2530B4739C9
SHA-256:	7D185A68EC7C2C52FD808D2EEFD86E68264830AF4CF3F1FA8946607B16B56907
SHA-512:	7651BE096B0D8215470847F1C0D71F0448BE0081DE8451EFCE9C577C55777915FB52A099FE77F17AD3FEF89AFCEE2DE62504612A43E0AEB482C09DBC219F4B2F
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/ads/parakeet.min.js
Preview:	/! For license information please see parakeet.min.js.LICENSE.txt /.(()=>{"use strict";var __webpack_modules__={"./lib/AdInterests.ts":(__unused_webpack_module,exports)=>{eval('\nObject.defineProperty(exports, "__esModule", ({ value: true }));\nexports.AdInterests = void 0;\nclass AdInterests {\n constructor(other) {\n if (other) {\n if (typeof other.origin === \'string\') {\n this.origin = new URL(other.origin);\n }\n else {\n this.origin = (!!other.origin && other.origin instanceof URL) ? other.origin : new URL("about:blank");\n }\n this.business = other.business;\n this.interests = Array.isArray(other.interests) ? other.interests.slice() : [];\n this.representations = Array.isArray(other.representations) ? other.representations.slice() : [];\n this.readers = other.readers;\n }\n else {\n this.origin = new URL("about:blank");\n

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	119535
Entropy (8bit):	5.604902860183116
Encrypted:	false
SSDEEP:	1536:tznYMOlYNboz7O/o2J7UBt1LMnSN4qI6B8:NOtz0o2J7UBjdI6S
MD5:	3DC7D37664FAA6E00E75B0B3683BF7C5
SHA1:	4CFCAD3B7834E13791098CE61874A1D6D1A6F1A0
SHA-256:	AF595C87BC051A4E42D626D7D829D909C1346927D78963E393DFAEBEFC0F7846
SHA-512:	8749BFB70FF82712905B5FD1B2CE1DD5BE8B0E1FBD05E6E6617DE60A303F9515186D69FC9FF6458E10531034217C1CC9D41071BFC494EF07C22CD4DE7CA7D552
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/accessCodeLPAllAccess~accessCodeLPCooking~accessCodeLPGames~accessCodeLPNews~account~activateaccess~~44777ebe-5561fb88a80831cc4174.js?_sw-precache=3dc7d37664faa6e00e75b0b3683bf7c5
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[6],{"/Efl":function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var r=n("q1tI"),i=n.n(r),o=n("9t18");n.d(t,"b",(function(){return o}));var a=n("4QM3");n.d(t,"c",(function(){return a}));var c=function(e){var t=e.copy,n=e.params;if("string"==typeof t)return i.a.createElement(i.a.Fragment,null,t);if("function"==typeof t){var r=t;return i.a.createElement(r,n)}return i.a.createElement(i.a.Fragment,null,"type error")}},"2i44":function(e,t,n){"use strict";n.d(t,"j",(function(){return v})),n.d(t,"l",(function(){return b})),n.d(t,"c",(function(){return y})),n.d(t,"g",(function(){return L})),n.d(t,"f",(function(){return w})),n.d(t,"e",(function(){return C})),n.d(t,"h",(function(){return x})),n.d(t,"i",(function(){return O})),n.d(t,"k",(function(){return k})),n.d(t,"b",(function(){return I})),n.d(t,"d",(function(){return N})),n.d(t,"n",(function(){return V})),n.d(t,"a",(function(){return _})),n.d(t,"m",(function(){return j}));var r=n(

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9276
Entropy (8bit):	5.505015185658838
Encrypted:	false
SSDEEP:	192:lb1Roigt/FvS0lQQJGSERZGstYvYlWIL5d8yEBPJC:VljmmkmZX
MD5:	976D7698FD289DE255747A892AE5097C
SHA1:	3B92AAC3480E3C1D3F01C57380D16C4FAA3F6FCB
SHA-256:	88E2639B29C1D092CD03D6771D44EFE87A08B258EA38EC607C96BFBC2E36364C
SHA-512:	23D6F97366939D3FDCE2BE2401A39B9D37067888F09F1C4A825F7673DEB228386BCE26F51104FD10AD60C1D39255484C0330E7E6B190D61BD2E8C73AE4FDFA0F
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700&lang=en"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 300;. src: url(https://fo

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27037)
Category:	downloaded
Size (bytes):	27115
Entropy (8bit):	5.151133690226773
Encrypted:	false
SSDEEP:	768:737Gz+fIRA1rN4t4x1FdYYWnJVjhsqfD5r5dDWx3nFtPxG15qmBV2:ZdnBA2
MD5:	2B5B0D555D93DEC3DFF3345730CE4AC0
SHA1:	849EE470CC7D4DE3C886FDE8E0105036BD93CA7B
SHA-256:	E9E003A3DA41A44B4AC2DD3CB9E239E04489122D9D5141AF50E3B705C2EFDBA9
SHA-512:	2F5602ED8689F036EC9D3E498168006D3F49793DA9F4A1095257DC5226AF66A2F1A57D094D75FBFFCC21BA0BA03AB1D16A2C36376977D57E857DB5647F730903
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/video-static/vhs3/vhs-plugin-nyt-analytics-3c88df1299a47b81a5f9.min.js
Preview:	(window.webpackJsonpVHS=window.webpackJsonpVHS\|\|[]).push([[6],{367:function(e,t,i){"use strict";i.r(t);var a=i(2),s=i(57),r=i(110),n=i(4),o=i(8);var l=(e=Object(o.a)())=>"string"==typeof e&&/nytios/i.test(e),d=i(108),u=i(3),h=i.n(u),p=i(112),v=i.n(p),m=i(17);const y=new n.a("vhs:util:session-storage");var c=class{constructor(e="nytvhs"){this.prefix=e}getItem(e){try{const t=sessionStorage.getItem(`${this.prefix}.${e}`);return JSON.parse(t)}catch(e){y.error(e)}return null}setItem(e,t){try{sessionStorage.setItem(`${this.prefix}.${e}`,JSON.stringify(t))}catch(e){y.error(e)}}removeItem(e){try{sessionStorage.removeItem(`${this.prefix}.${e}`)}catch(e){y.error(e)}}clear(){try{Object.keys(sessionStorage).filter(e=>0===e.indexOf(this.prefix)).forEach(e=>sessionStorage.removeItem(e))}catch(e){y.error(e)}}};const g=new n.a("vhs:plugin:nyt-tracking"),T=new c;class D{constructor(e,t){this.store=e,this.player=t,this.state={mediaSessionId:v()(),startTimestamp:Date.now(),readyTimestamp:null,timeToPlayS

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit grayscale, non-interlaced
Category:	downloaded
Size (bytes):	2424
Entropy (8bit):	7.824659126149244
Encrypted:	false
SSDEEP:	48:V7lIMD9V2OsRnsRxZoW9ymtYvIz0J4c8hG83ycEw:lAODRxZ3ftYvIYJ4X8yV
MD5:	515D16F1CF801524AF90E75750E5048E
SHA1:	00B6A56C582094487AA68B433A48FF505A6C0FB3
SHA-256:	788B6264FB77732704FDA0B12C85E8BA094FB5557ECE690F123CC2BF4FC7B2D8
SHA-512:	5D1F0A4A9289198B6E2A730F32FE081A2A93C4726C71BC9AEFAC78A34B9597E53EE54D80016471B46A21664ACEAAF42146C19646EABDABCC320D66801169B984
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/apple-touch-icon-dark-f74e69bf6dae735169854a4126cebf8c.png
Preview:	.PNG........IHDR..............-.d....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........tIME.....41).}....0IDATx..?l.......j..i.E...\|\.)wF.?C.R.....&j...D.b.....".sPYK#...Tv.;-.QX..yc..[.RS'SS...;.<~.>.......?.?~.{.......8]..0...M[^U/.`DN..f@3.....e...HN.\..I.X...>%@}.......R..H....J.)t......A..b$c...:..~yE...9....G.(......1.Pt.~..(..i.._.@.G.@YQ".J<2..>...~..2......y.....^.J.......{R"#.)..o.O4...a.iH................i.Y.N...P....M...>.y3.\|.h..{.nK....D&R?.....p>x..R@Z..w...V..H.....*P.........$@.\|.z<.v..o............$...........S/r........H.e..l.y".B.G^.g. .\..a.C...".4....O..$J. ....M......ej...P.I....Bk.H4.....BNa...'..M....K..S...E.P.....PF.8.....^'@....4hEb.\..1.Z.f..wej.l..P....K.....j...R.. I...P`?.?/......7...\|.H...(..>s.R.Z.N.r..1..y..:....e...Cg.`.....;WB.R.eQ6....&O9...`..V...X.j..$_.C..E..'...b..\|........:..U...(Z..w.w.~....`.3..5.b.T.......^...m}.?.F. \I....l%B.nb.........;.....;.#.\|...y.h.c./....i.ATcTZ..jw.v..F

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	61556
Entropy (8bit):	5.142137849254292
Encrypted:	false
SSDEEP:	384:CkmdtJwqjbmxAMspd8R0QZaZVGSikeI4aAxQERZx/MdwHMlPM5uIxIK3Df8OfoFC:fomxFxH4YIKwfQeYNHEsUkRkDYH
MD5:	385208A5B49861E9DFCA2B84752FF792
SHA1:	C512E9B1CF6F6EAA2B08FFCF8F7A4E760BAE45A0
SHA-256:	09BFF184EA094A06E46D7F26512FD7B245304078A27F1BA8084488CBCF7704DE
SHA-512:	BF5C0572424C6550745B9A7EA5FA5ABD8C4704ADB1E28A5338AA45B064F062E1356DB8A55578D061C0144C4B86CB106FC417DF8CCCA04AD17B47FBB46FF8DAD9
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css
Preview:	@font-face {. font-family: 'nyt-cheltenham';. src: url('/fonts/family/cheltenham/cheltenham-italic-200.64dd3cfc209bc73fb3279ba16dd3d09f.woff2') format('woff2'),. url('/fonts/family/cheltenham/cheltenham-italic-200.a9e372cb4c5086e3924e23b9dad94ff6.woff') format('woff'),. url('/fonts/family/cheltenham/cheltenham-italic-200.57d2121fab27583198550b38ed84c4a6.ttf') format('truetype');. font-style: italic;. font-weight: 200;. font-display: swap;.}..@font-face {. font-family: 'nyt-cheltenham';. src: url('/fonts/family/cheltenham/cheltenham-italic-300.5278551441f9d1ce9cd247421e26a143.woff2') format('woff2'),. url('/fonts/family/cheltenham/cheltenham-italic-300.55c933f230696eae11a43a9a2995b24d.woff') format('woff'),. url('/fonts/family/cheltenham/cheltenham-italic-300.574eeb5bb2bf407111d0789ef94a6504.ttf') format('truetype');. font-style: italic;. font-weight: 300;. font-display: swap;.}..@font-face {. font-family: 'nyt-cheltenham';. src: url('/fonts/family/ch

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6508
Entropy (8bit):	5.404210756606308
Encrypted:	false
SSDEEP:	192:3kFnkP2kxk0Xk3pFnpP2pxp0XpnBXm0NpHJBem5IpOI:3enS26Jwfnx2/qjW6TU
MD5:	61D9AD92456255976AA047C9E97536A7
SHA1:	B5FE503FD1B84D97FE2ABF6BC2E884071C9C6A68
SHA-256:	6810B59CEB179A87DC832C0F7D545B9CFC2FE40DB04FD86779C13F9613D3D77B
SHA-512:	B2FE5F583BEB24DFF01297623714EB9F13CA47CBE5B14BB22529DE2DD3E24A6660E1894BFC56DE888A3824FFFEB7AA32C96B9F4A5CC1A2B649C13B7FD93A4C11
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Lora';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LLPtLp_A.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Lora';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LJftLp_A.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Lora';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LLvtLp_A.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-family: 'Lora';. font-style: italic;. font-weight:

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19137)
Category:	downloaded
Size (bytes):	19193
Entropy (8bit):	5.177697666501811
Encrypted:	false
SSDEEP:	384:DW4gqLKtS0MWWCAexf9pJbqicvvNcuFMbfK:DoqLaSWW42icZwC
MD5:	E20139D108EE9CD9CF7B667A2B071C6F
SHA1:	863708E90A5374C4C03D17978B056CEA15D42C9C
SHA-256:	C7ECA6F93DB529EB3FD7A84F0EFD5A507F4D739AB0CC6A2D8C7DF77ADE78422D
SHA-512:	99A2CFD8BC3B6B5FDCDD736711331AE45EAE9B1167F897B84CE8141565A381CAA48B14D7B172301C9060FCCB9F6CA5A0E878A1F8375A66D41FE85992BDEC6142
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/27-0a22638425338ab5880d.js?_sw-precache=e20139d108ee9cd9cf7b667a2b071c6f
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"SD/l":function(e,t,n){"use strict";n.d(t,"a",(function(){return j}));var r,o,i,c,a,s,u,l,d=n("gcR/"),f=n.n(d),p=n("J4zp"),m=n.n(p),v=n("q1tI"),b=n("Kxyt"),w=n("MShG"),g=n("fTxn"),O=n("/Efl"),A=n("+3M4"),N=n("YTjG"),y=n("xEI7"),C=n("u0vE"),k=n("f63j"),h=n("hVev"),E=n("siIh"),T=function(){return f()(w.r,{typeStyle:w.Z.body2,colorVariant:w.N.text.primary},void 0,f()(O.a,{copy:k.copyAthleticEmailsOptout,params:{athleticLinkComponent:f()(w.x,{to:O.c.ATHLETIC_REQUEST_LINK,targetTab:w.db.newTab,colorVariant:w.N.text.interactiveInline,onClick:h.a},void 0,r\|\|(r=f()(O.a,{copy:k.linkContactAthletic})))}}))};T.displayName="AthleticOptoutSection";var j=function(e){var t=e.accountInfo,n=t.marketingEmailsPref,r=t.emailAddress,d=Object(b.useApolloClient)(),p=Object(v.useState)(n),j=m()(p,2),S=j[0],I=j[1],M=Object(b.useMutation)(N.c),L=m()(M,2),P=L[0],D=L[1],B=D.loading,x=D.error,U=D.data,R=Object(b.useMutation)(N.b),H=m()(R,2),V=H[0],Y=H[1],q=

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1051
Entropy (8bit):	4.971935500243139
Encrypted:	false
SSDEEP:	12:YADKkb0cxjDLYJ/H3BvPUTauXLFW9/qYExPtSp5XCfPsSAPytNu/eHLtBMCuQ:YAlbzjI/fg6Y4p5yioEWpOCuQ
MD5:	2E064F4806E7FEFAB74E399705B68CFA
SHA1:	0CFF6C7E8A7684E58DD569B7696594C257C42366
SHA-256:	C1A72C7D878E986630DC7831EB24ED01C395F4EF8C6E506923081119D15B5F21
SHA-512:	9E90BE8B9BF002892462F93B2C04ECCB1EB3708D22EAC127F4E40BF70BE9C21C2B13DDA784756079F7402CF7518B4ADABADEF59CDD5C279AED3345C8FEB28E71
Malicious:	false
Reputation:	low
URL:	https://a.nytimes.com/svc/nyt/data-layer?assetUrl=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&caller_id=nyt-vi&jkcb=1701800008007&referrer=&sourceApp=nyt-vi
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800009282,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-zd97m","asset":{"wordCount":0,"url":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news","derivedDesk":"international_desk"},"ip":{"corp

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x687, components 3
Category:	dropped
Size (bytes):	105167
Entropy (8bit):	7.977428679378289
Encrypted:	false
SSDEEP:	3072:dzYl5uTm+C4KpsDORCFyO2za4GoWy9uecAf33:dzNCh4bDORCFe248GIs
MD5:	1A83D0DA3A41B0D4BDC47516A7E887E3
SHA1:	0E0601B6179354E8A7D9EC8C1A22AF99945606C2
SHA-256:	849AB5FC45CE4CAAE30B8E5F66E0D377633400BE74EADEBA559583536836E51E
SHA-512:	CAACE3D00DB6E5411CA1D93B696D0935A8106B0084BE9B3E5AD3CB2702F9314A07DC9F7A45AE044654C70218748F7DF9D7E2D26C3E2EE83FE927C6FA3A3A2B3C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................M.......................!.1.AQ.."aq.2....#B..Rr..$3b...%4Cs....ScTD..5d..&..................................@.......................!.1AQ.aq."2...BRr..#3b...$.4C.cs..S.%d.............?..S..D.0.6.C...A.V..\|&.........eM.......XL.p......PJ...A..1..'

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4386)
Category:	downloaded
Size (bytes):	4457
Entropy (8bit):	5.406661030109249
Encrypted:	false
SSDEEP:	96:mCVr/o1rRWUgBfh6vyCSol6RSqtQl4AL50qvuIQYI7pgyTJnWhVytSq:FVTmWNBf0qCSolgSqt64ALeqvXYtBTJJ
MD5:	F6E4D4401C739BC293705986605AA917
SHA1:	3355DC69EB33381DA19BA0D9C5594C684F06AA0D
SHA-256:	36F141942FF1781AACE406F14C4A2C2528C456B936233CA6BF5B09D8538FA8C1
SHA-512:	105426CCB2368EFDD29D57795E018DD09FE8B671B8A12E42E08931FF6C449A03F5762C9830B290D246C41B587AB207F044791045F701BFF77A5F3491509DFACE
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/accessCodeLPGames-31a59c4c49841febf334.js?_sw-precache=f6e4d4401c739bc293705986605aa917
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"V6G+":function(e,t,c){"use strict";(function(e){c.d(t,"a",(function(){return p}));var n=c("TxU7"),r=c("r538"),a=c("hEyz"),s=c("zJ6h"),o=c("XWHH"),i=c.n(o),u=c("iVi/"),d=c.n(u),l=c("fTxn"),f=function(){if(!("prd"===vi.env.ENVIRONMENT)){var t,c,n=new URLSearchParams(null===(t=e)\|\|void 0===t\|\|null===(c=t.location)\|\|void 0===c?void 0:c.search);if(n.has("AUTH_HOST_OVERRIDE"))return n.get("AUTH_HOST_OVERRIDE");var r=d.a.parse(document.cookie),a=r.ACAC_BFF_HOST_OVERRIDE;if(a)return a;var s=r.AUTH_HOST_OVERRIDE;if(s)return s}return"sbx"===vi.env.ENVIRONMENT?"https://myaccount.stg.nytimes.com":vi.env.AUTH_HOST},p=function(){return new n.ApolloClient({link:r.ApolloLink.from([Object(a.createHttpLink)({uri:"".concat(f(),"/svc/activate-access/query"),fetch:i.a,fetchOptions:{credentials:"include"},headers:{"x-pageview-id":Object(l.n)(),"x-plid":l.o}})]),cache:new s.InMemoryCache})}}).call(this,c("oDJU"))},gB0l:function(e,t,c){"use strict";c.

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.995238784959996
Encrypted:	true
SSDEEP:	24576:8dHXWDUaDHR+8QEO0slVaE+oDwSBpkfLYTB2BT2:YHQUIHzQp0slMi02kfcTBD
MD5:	B13B623A427A8547807029D46084D65C
SHA1:	BC5822AB3A9F955048EA3B930E8BC79FDEF1628D
SHA-256:	74FD30A46898F325E5B0BF068EB25BD2914D29B2C72460355714520E2DC25610
SHA-512:	9878D28C1F07FCE817CE452D21E8B7869F116B75A734AC126800BF0F13B19D9681093B6489EB36D6164CD06CC37A6CA6A7B12BA59A1FCAB6B4F35EA0F7F7E62F
Malicious:	false
Reputation:	low
URL:	https://vp.nyt.com/video/2023/11/08/113087_1_MKTG-BAU-USAllAccessCrisisRefresh-Nov2023_wg_360p.mp4:2f6a5d7ae39aab:0
Preview:	....ftypisom....isomavc1mp42.. Umoov...lmvhd.....q.;.q.;...X....................................................@...................................iods.......O..)......trak...\tkhd.....q.8.q.;............................................................@........h.....$edts....elst.......................%mdia... mdhd.....q.8.q.;..u0....U......!hdlr........vide.................minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1...........................h.H...H................................................pasp...........2avcC.M@.....gM@..P....P...........<`.X...h.. ....btrt...%.'.........stts....................ctts.......T...........................................................................................................................................................+..........................................................................................................................................................................

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (545)
Category:	downloaded
Size (bytes):	34124
Entropy (8bit):	5.02893760890414
Encrypted:	false
SSDEEP:	384:nUYnxLXE33Aj2+czus+Jq2UHlzSOBQKBHtlRwlGHTV0qu:9xLcG2+c92+lzSOBQKBHnR2GHTV0Z
MD5:	9A371C5FA2E1CBD336ED0E8EDC8CC145
SHA1:	ACC95226D300AD7AF099BE8D1D99D657BBC91420
SHA-256:	9BED455D476BCE30D37D67FC7ED2C15FB5C9BF948C96AA5C0268BEA56766E65E
SHA-512:	0DC395F98975CF109E394D81081C024D2E2E524ACA785110A231686D4FB6E792DE99158EE210F4EBC283BEE1D7ACED25A6CB3163E2500A63C512F22C7DE17910
Malicious:	false
Reputation:	low
URL:	http://nope.theworkpc.com/index.php
Preview:	<!DOCTYPE html>.<html lang="en">..<head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>World News Blog - Powered by NOPE.THEWORKPC.COM Journalists</title>.. Bootstrap core CSS -->. <link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css" rel="stylesheet">.. Custom fonts for this template -->. <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css" rel="stylesheet" type="text/css">. <link href='https://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'>. <link href='https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800' rel='stylesheet' type='text/css'>.. Custom styles for this template -->. <link href="rss_content/css/rss_blog.min

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.995691657276572
Encrypted:	true
SSDEEP:	24576:CyzeXN+/3bhO1G+Ju+q3MZIgFiYVIbMdXAwWzkvSjcUw:CyIi015mc7VOzk1t
MD5:	55663F0FDF95A40A18DD120E2B450C50
SHA1:	34B4976195BCB46E547D54315547D71208E45BD3
SHA-256:	1D9F5900C230121EB1384716BD3547D9350D79E8F2E515FD420DBC4EAD4E2FCC
SHA-512:	16BFD22EF35C2C732265AFAAD2A072EB3B3E81F5F3C1B484EA506A8E5917A0534BB9A00BEAED26A49AFB0699130F1C16220B4E7A68C6D94DD5ADEBF49FD35BD2
Malicious:	false
Reputation:	low
URL:	https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4:2f6a5d798f44d5:0
Preview:	....ftypisom....isomavc1mp42..".moov...lmvhd...........X..".................................................@...................................iods.......O..).....ptrak...\tkhd..................".................................................@..............$edts....elst..........".............mdia... mdhd..........]...p.U......!hdlr........vide.................minf....vmhd...............$dinf....dref............url ......._stbl....stsd............avc1.............................H...H................................................pasp...........1avcC.M@.....gM@..Z...P...........<`.X...h.. ....btrt..........p....stts...........d........ctts.......].......................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65431)
Category:	downloaded
Size (bytes):	150742
Entropy (8bit):	4.402278544672284
Encrypted:	false
SSDEEP:	3072:Gr0AXyTgAlPmWeLkSLLwAxiJhb9eq6a9oxiCSt/NqC37fDYp:1BrpeLY9rfDc
MD5:	6F4A2F64ABE0AB106F95E0B360A85E44
SHA1:	67C915C3AC11571834A806B99CF3F511EEF2049F
SHA-256:	C54140EAC6DF64B97ABF9BF21E88910BAC89DDC973D871FCD33DCA119B8B4C24
SHA-512:	E5587574D0C408AAE1998191A25EC0929715B4989B05BCE400E21224D31FDFDBC7F0226932DEED159CE68B0563495F7A0FB563C7443174722C00F48844EF5FF6
Malicious:	false
Reputation:	low
URL:	https://dd.nytimes.com/tags.js
Preview:	/** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.19.0) */ .!function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)return a(r,!0);var c=new Error('\x43\x61\x6e\x6e\x6f\x74\x20\x66\x69\x6e\x64\x20\x6d\x6f\x64\x75\x6c\x65\x20\x27'+r+'\x27');throw c[['\x63\x6f\x64\x65']]='\x4d\x4f\x44\x55\x4c\x45\x5f\x4e\x4f\x54\x5f\x46\x4f\x55\x4e\x44',c;}var l=n[r]={exports:{}};t[r][0][['\x63\x61\x6c\x6c']](l[['\x65\x78\x70\x6f\x72\x74\x73']],function(e){return i(t[r][1][e]\|\|e);},l,l[['\x65\x78\x70\x6f\x72\x74\x73']],e,t,n,o);}return n[r][['\x65\x78\x70\x6f\x72\x74\x73']];}for(var a='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require,r=0;r<o[['\x6c\x65\x6e\x67\x74\x68']];r++)i(o[r]);return i;}({1:[function(e,t,n){t[['\x65\x78\x70\x6f\x72\x74\x73']]=function(){this[['\x65\x6e\x64\x70\x6f\x69\x6e\x74']]='\x68\x74\x74\x70\x73\x3a\x2f\x2f\x61\x70\x69\x2d\x6a\x73

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65374), with no line terminators
Category:	downloaded
Size (bytes):	120316
Entropy (8bit):	5.0932707229184535
Encrypted:	false
SSDEEP:	768:ipINgzJR1BwJP3Ue4e9YqxNitTyfDmASCJFy+rJQbIWIkjIiOFyRWnnfSx+BtKQp:6zJR/AjKi3fDmgFyIWIkcPbu+
MD5:	0802C1B52F8DCDA13DF8247007B31913
SHA1:	02BE5E81A4B821B099D4A6F8820A29BB0FBB81E0
SHA-256:	2FD5DD5AD97D0B03E9A8FD3AEAF757133C910A0FD22D93EC28A5EFD5FE2753C5
SHA-512:	D125DD3F5AA1A4CC5A2FC9B160C9214E08464190989A640A5446CDDE6A89FE56B9AD0EEF5C86F1E0947DA7B8936C305EC4DB40958CFC31C3503E6E0D3A1EDB4C
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/176-70e92b21a3c3b94f46fb.js?_sw-precache=0802c1b52f8dcda13df8247007b31913
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[176],{"0ZkC":function(e,n,t){"use strict";t.r(n),t.d(n,"buttonCancelHDSub",(function(){return d})),t.d(n,"buttonContinueHDSub",(function(){return l})),t.d(n,"buttonReportContinueHDSub",(function(){return f})),t.d(n,"buttonCreditHDSub",(function(){return p})),t.d(n,"buttonDamagedPaperHDSub",(function(){return y})),t.d(n,"buttonIncorrectPaperHDSub",(function(){return m})),t.d(n,"buttonLatePaperHDSub",(function(){return b})),t.d(n,"buttonMissingPaperHDSub",(function(){return g})),t.d(n,"buttonMissingRedeliveryHDSub",(function(){return h})),t.d(n,"buttonMissingSectionHDSub",(function(){return v})),t.d(n,"buttonOtherHDSub",(function(){return S})),t.d(n,"buttonOtherProblemHDSub",(function(){return D})),t.d(n,"buttonOtherSuspensionHDSub",(function(){return w})),t.d(n,"buttonRedeliverTodayHDSub",(function(){return C})),t.d(n,"buttonWetPaperHDSub",(function(){return H})),t.d(n,"buttonRedeliverTomorrowHDSub",(function(){return P})),t.d(n,"copy

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (769), with no line terminators
Category:	downloaded
Size (bytes):	769
Entropy (8bit):	5.573232801956529
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHaEi1zCGBRE2eAZnsnBSCz/YO0JrTiUMGT2IWSBWBSAf:hMiRO9nLsGBRE5A9w8R8G9xo
MD5:	D47357000DBF52D4C2C19A8E6D49309A
SHA1:	11F828A0C08AD4C4577851A37B864FCAC3C8683F
SHA-256:	9306B067C4247E210C0E12661EC9DC47011BA00AD76E9A301C78459CA9BFFA1F
SHA-512:	18F23DB07C6E4A9B20A89504CE7A7972E1DD57709808E12ED5274A28A7DD27BC666CAF4F55237901F8739325F970A3D72411DE9C9EC101D26494BEAFABEA7FB0
Malicious:	false
Reputation:	low
URL:	https://5290727.fls.doubleclick.net/activityi;dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news"/></body></html>

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.385133026718091
Encrypted:	false
SSDEEP:	24:4Hksjq5/Jz2pRNrBZJuvu8goqc0ioNhc+Q4+mI:2ez2bNrVENtmN+Q+j
MD5:	B2DB968CA6BBF2CF683A48D7AB6CF747
SHA1:	DAAD4F78635C4A61FA0010A64505D31527889D7E
SHA-256:	0B98C7CA294919097491821D531BC2A17409954D08970CD60E814015D0E9CF12
SHA-512:	B50C282BD3E02693043A3DE31BD724E284E49BA1D9A2102C95F771BD1A3422CEAB8EA969FC50DDD56463B8FEAEBB91D30C790FF842DFFFC69B9B985F2C1C76B8
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="NROtu5x3e8S0fan7aqMCGg">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1701800036252');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6469
Entropy (8bit):	4.974275263111214
Encrypted:	false
SSDEEP:	96:k7d913zi3lz3zZ3zeibOWQ3zUaF6E4SFViG3OlEhanaz/3AE0kfk3TPLW+v:kdYH1NbOWCTTViG+l/albibv
MD5:	ADD2777B2E794E0D7AF133B23EEF82C6
SHA1:	B63DF76C80380817A5CD9B0DCCB2C2C466686A26
SHA-256:	1BCA035270210CFEF1CEF4E66BFD3D78857A8FD81D68EF3048C8E1AF1EE03C7B
SHA-512:	72CD483A7743B087541E49168AA90D2C7485D4C47FAA4C109BC7557FF5683FFB1362A64E16C7B9E167500361DD84FC25895B68EE35FFAF62BE47BF09331C24F5
Malicious:	false
Reputation:	low
Preview:	{"h.key":"ATH8A-MAMN8-XPXCH-N5KAX-8D239","h.d":"nytimes.com","h.t":1701800044274,"h.cr":"6e201e22e5daff89ce175d41a6a3d8131e172fb4-1ecf58e7-92a1ea73","session_id":"e3c81dba-e030-43d2-b3a4-b69ffd51632f","site_domain":"nytimes.com","beacon_url":"//173bf104.akstat.io/","autorun":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":5,"sendAfterOnload":true,"sendInterval":2000},"Continuity":{"enabled":true},"PageParams":{"xhr":"none","pageGroups":[{"type":"Custom","parameter1":"nytAnalytics.pagemeta.PT","on":["navigation"]},{"type":"Regexp","parameter1":"myaccount.nytimes.com/get-started/thank-you*","parameter2":"Subscribe Thank You","on":["navigation"]},{"type":"Regexp","parameter1":"[mobile\|www].nytimes.com/?($\|#\|\\?)","parameter2":"homepage","on":["navigation"]},{"type":"Regexp","parameter1":"nytimes\\.com/\\d{4}/\\d{1,2}/\\d{1,2}/.+","

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.894293874617553
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4D/YVnN0a/nM:8WiIUemo/H1fCYKbY4DAnd/nM
MD5:	6F0B02C6FBDEA6F845AC79094CCA8DFF
SHA1:	08BF457A95EC878382B4D46626FBE8940BCEFA07
SHA-256:	C0DAE12DBED7809B35C461870BC663D5F5FFDA8095A81F9349380F35EA7E5CE1
SHA-512:	12BF45E8C16472F731B6437529974A2082B5210B807B102B227A9E17C592673CE0ED5F77DDC77D3E7FF1E22BE38048B051441660CE3F4CB535CA46BCF845423E
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=pm-db5_rbd_n-MediaNet","cb":"1"})

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	143980
Entropy (8bit):	5.301094525922425
Encrypted:	false
SSDEEP:	1536:VzjBIrw2LBzTh0yHiKSFB0lSxkquULKpe2UoXuSSqtuptVtQMEM9f++vF1ge+b8C:QTF9exkkoXu+tmftQlMZrF1ge+b8C
MD5:	1A5E5BE10BCF732498E2BC288A2CB0E8
SHA1:	AB8C0A31F0396048F5B64B5737075C0D3CFB28A6
SHA-256:	D604D35EB7B8A681B6F44D84D4B17D0FB84A1FE3D67C252DCFA0ACA1467126C3
SHA-512:	B7B846FC4C185523482E65B6923591A82674DC2D21A39710CACA219EF8988321D517F04B06E66F5EB61B9EE16BFA7C9B01F5FD8CADAD725F07BDA45AA770F666
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/177-dab6c51dede0a1b643e0.js?_sw-precache=1a5e5be10bcf732498e2bc288a2cb0e8
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[177],{"+e6F":function(t,e,n){"use strict";n.r(e);var i,a,r,o=n("gcR/"),c=n.n(o),s=n("q1tI"),u=n.n(s),d=n("MShG"),l=n("Ke7S"),p=n("4+a0"),b=n("J4zp"),m=n.n(b),f=n("/Efl"),y=n("fu10"),v=(n("W8MJ"),n("lwsE"),n("NcXk")),g=n("5lfh"),h=Object(g.d)("div",{target:"eoy06s80"})("padding:",d.hb[3],";"),S=Object(g.d)("div",{target:"eoy06s81"})("display:grid;grid-template-columns:auto max-content;grid-column-gap:",d.hb[2],";"),I=Object(g.d)("div",{target:"eoy06s82"})("width:100%;text-align:center;"),O=n("HLED"),T=function(t){var e,n;Object(O.c)({moduleName:"AccountHelp",moduleContext:"AccountHelp",elementName:"ContactUsLnk",elementLabel:null==t\|\|null===(e=t.currentTarget)\|\|void 0===e?void 0:e.textContent,elementUrl:null==t\|\|null===(n=t.currentTarget)\|\|void 0===n?void 0:n.href})},C=function(t){var e,n;Object(O.c)({moduleName:"AccountHelp",moduleContext:"AccountHelp",elementName:"ReviewHelpTopicsLnk",elementLabel:null==t\|\|null===(e=t.currentTarget)

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1554 x 1131, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	443553
Entropy (8bit):	7.985476009352742
Encrypted:	false
SSDEEP:	12288:hIJ4pqq71zLe50F6KL2i1TItAfwtuHCz3t9AmOfx:hyOqC1P+7WThfDiz3Q
MD5:	DCD7C23D4A42E0CEFACDA19B86609430
SHA1:	4E0A369F9B624BF953835454CEF8574DBF73138B
SHA-256:	52A8D2E02144887E2334D163B1747311286E908A5502B8E75018F31C2F9BA468
SHA-512:	4DDE02DF5B92EAE70C637CDA09084E4844294F79DECBDBE01BD23A384482242E92A9F63DF0E241F347FAEE3709B683BFE72805EEEB181624EBEBBCF6FE048094
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/corenews_app-fd6a5ed5307a89935254771e533c46b1.png
Preview:	.PNG........IHDR.......k.....f.<.....pHYs.................sRGB.........gAMA......a....6IDATx....eUu....L...6(.....a............P...5......._bW4*........E..z.a`....]..Z{.s.}3....}?3..SvY....Yk...................T. ................`H..............@/0$......................................................................C...............z.!.................................^`H..............@/0$......................................................................C...............z.!.................................^`H..............@/0$...................................................>`H..............@/0$......................................................................C...............z.!.................................^`H..............@/0$......................................................................C...............z.!.................................^`H..............@/0$......................................................................C...............z.!..........

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	4.374860596185445
Encrypted:	false
SSDEEP:	3:RRzoSMLKEZWmGR7Dn:To/LKEk7D
MD5:	1D291DA792456BD015B664EE1119A5E0
SHA1:	8E6A203E13D9EE40C7284B5D063D2E92B29C0C8C
SHA-256:	8AA1E610B22079CB84A89491850B86860036E3F2C9750A367D839B9A6A63D306
SHA-512:	B11442656E6CF3C583532A76C441780E2A08194A20ABA56BF4951F9126E8E9507EA34735B40475F520E648738E58D860094E4AB5DA57EFC874024F4495F1CEF2
Malicious:	false
Reputation:	low
URL:	https://a1.nyt.com/analytics/show-ads.js
Preview:	//show-ads.js.window.adBlockDetected = false;

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/40D3C5B1-C944-4FD5-B1BE-0A313CAD2333?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	COM executable for DOS
Category:	downloaded
Size (bytes):	908199
Entropy (8bit):	7.999595998689644
Encrypted:	true
SSDEEP:	24576:8WOEEo7y6h3Zsv9Nqyh7ywwL7bdUfOT7soizL7z3w:rOER7clcyh7GSXoizvz3w
MD5:	90924EEE121E73387500461D9606FB78
SHA1:	519C755F116581212F4D6EF207E955E07EFDA6B0
SHA-256:	F7BB53681CBE918671DCBBBD66B734648B76A015427B4F08E2CFE47827153E53
SHA-512:	6F0294758B6F1C11E301DAA973F26630D78FAE0C9BB651C91FC7E123435E711CDFC95579FB3FAC044B3AC24AB79DF222CC1B26758D2E2F5A006938DD14E8D10A
Malicious:	false
Reputation:	low
URL:	https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4:2f6a5d798f44d5:2
Preview:	..W...._.h.(?.6n../...G....F...ro.F.....t.QJ.U....~..:..Y9R+."...RVB.....u..i.?i..:.F.0.....!.B...~..=.^8....m..&.M+.g.qS .i.NK.....o..pBA..c.......wM7}(..U..4......M.\5(M..gH.Ek..U...=....A.........].IF......B.....#.....hq..SP.I.....kv.K..2KSg.........{+...>..........J..i.....p./.R...I..[....m.Q.i].54.+?C..I.1.jm...X\|..ZR1.J.wE..h.y.f.....i.j.*......pk..0.]q....f.w...b..+.Pi...'.D..k...fe..GU.&8...m....j...]...~.>..(8..O..Ba.^uqH....{...,...T.1....c..F..l.m.......qA<..GX...........4`#.._>.I.....q.m.J.r3....2#..E./....k...Wb.../._...gYC...jl:J@Q..$....EP..&J..:..,b.-...L......t.....~....x^.=K[H;....)T...S...k...9..\|:4........9..JMNn..1H..F...2b[../v....W=k.u.E..F.L..V...~RUm...........Z... j.D.7+.b.T...<X]R.&.px.(.94.$h.. . .]...]E.W\|F]P..2..5..l.5............9..04.ix...Y....\3.U..........f....2..N.].K..\|..K...}...jH..0.U.o...S.n.I....L..."...).P.E>.j3G.H...1.t.z^.6.....F.O.....!.Q..w.78....:..Y. .8...$...{.?.u......`.....].g..=..`.y@'"

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1081870
Entropy (8bit):	5.418966887512681
Encrypted:	false
SSDEEP:	12288:1hSslnP+UK+/DhM0eOKJx80XdK5wIz5zyAxxnrMGSKWp/LZ9AZB03celpNMjSd4y:1hSs9hNK5czyUQWBsciM+ofm
MD5:	83C60D79AAE3A2A4C568DFDFD7CD545A
SHA1:	25A681B916185A151B42B0F83FEF1EFCF6005DF1
SHA-256:	1195D4466105A4404F888A753A17BB289DE7A2EF54D10BDFA0A3BA7462344A28
SHA-512:	CB2A2B85525530020E6449A9F220D5FAC54079CDF93E5DA069FE91F884DCBB19EB85D7DAEE2BF7792EFD5E52998BF59C6D45D0E79FD81F6EB51D4B98D537F533
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/capsule-68ba43fb343715c23e98.js?_sw-precache=83c60d79aae3a2a4c568dfdfd7cd545a
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[58,17,20,60,81,145,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return N}));var a=n("ygvk"),r=n("8iTF"),i=n("7WMn"),o=n("XWHH"),l=n.n(o),s=n("LgWu"),d=n("a9ya"),u=function(e,t){var n,r=null;switch(e.type){case a.a.GET_ARTICLE_REQUEST:n=function(e,t){return"".concat(t,"/rest/articles/article_").concat(e.articleId)}(e.meta,t);break;case a.a.GET_COMMENT_LIST_REQUEST:n=function(e,t){if(e.nextUrl)return e.nextUrl;var n=Object(s.parse)("".concat(t,"/rest/comments")),a={"filter[articleId]":e.articleId,"filter[isAccepted]":!0,include:"replyTo"};switch((e.sortType\|\|d.c.NEWEST)===d.c.OLDEST?a.sort="sourceCreatedAt":a.sort="-sourceCreatedAt",e.listId){case d.a.HIGHLIGHTED:a["filter[isHighlighted]"]=!0;break;case d.a.RECOMMENDED:a.sort="-recommendedCount,".concat(a.sort)}return n.query=a,Object(s.format)(n)}(e.meta,t);break;case a.a.GET_COMMENTS_REQUEST:var i=

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.5605173424005265
Encrypted:	false
SSDEEP:	3:YWR4bdVG6A2QmW9:YWybdVG6amO
MD5:	69FF46D1B6DDFC73C42C08574750246C
SHA1:	D6D5D45EA6F15491CBE173F3ABDBBFC469369D59
SHA-256:	8E26B1E3AF5D0A1168ED531E90C41DFAE92679F3DEC8D4218FBD1405121CDDD9
SHA-512:	407720B7308CBB08A7F70A99705C988C6BACBBD25C1AF172A6EE3F1E5B8BD02EB648C39A7AC428F1FD89E3875248D8876B6F1C2EB7A005F3D7A5D2E0FB8D2043
Malicious:	false
Reputation:	low
Preview:	{"status":200,"message":"success"}

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1065
Entropy (8bit):	4.971941124880498
Encrypted:	false
SSDEEP:	12:YADKkbQjDLYJ/H3BvPUTauXLFW9/qYExPt3XCNLIRMW0cW9Nu/eHLtBMCuQ:YAlbQjI/fg6YFUIR9NW9EWpOCuQ
MD5:	EC005651A64EE5DB84F01DECD89666B4
SHA1:	2B64C013E261E402E48A6948222242F7EE258B4E
SHA-256:	829DBDA61F6AC3952B2C35EBED5F8E892B520E82ED107574DF8F62A0D20A7E07
SHA-512:	A091E45AB765C33F066E73042C8F8C53719B7055AD043689F17980B89C514AA323ECC087CFCB37C7B23AEE8C173A28A92BD4A684E636A6FEDA88EF1A5A948E86
Malicious:	false
Reputation:	low
URL:	https://a.nytimes.com/svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&caller_id=nyt-vi&jkcb=1701800021284&referrer=&sourceApp=nyt-vi
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800022408,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-lh7cx","asset":{"wordCount":0,"url":"http://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html","derivedDesk":"international_desk

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x715, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	65704
Entropy (8bit):	7.997208555681179
Encrypted:	true
SSDEEP:	768:c+68ZisPZqJH5VtpPY2t/9QlqgGHui498qkttUpTIFGUHiyC4x1VCbn7jobJXzhv:tYVHDvQlLi4eMTvUCyZybnWjeTbagI
MD5:	0A7C30C3C3448137FB5A39A0AE940D4C
SHA1:	C00D4D67DB8D1F1D6DE243B5812F054593507D31
SHA-256:	3877758265E879DA556B98BCE953D1C66F84AD896C8F72CF243627E2617D0020
SHA-512:	78D9043274FCCD9DE3B6D8651FA736373568A2266D0F646DB9341043415BC659708AA486123DA8F29386C34130CCE56D2E0E31B156A18BFC08A1592B931D3FC6
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-settler-visa-ban-vzbf/05israel-hamas-settler-visa-ban-vzbf-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF....WEBPVP8 .............>.B.K%../$.....ck.z_^...`rK.rz.........?:.......@n5..y.6U.f..k..\|.7..iq.7S.............w...}G..~............C..........?...~............O.......n.s.3...._..............................r.o....._.B.......k...\|.(!&n.?.......'._.?x..n.}.\|4...n..b5..l.P([h...6e..n?...F.../.\........?."..Jc3.j...o.g=....YU.c.JG...*5s<..Q.4;n..#l.f.[...X1....MBad........:..c....b...tN'z..:,b.............mz......c..>.l..V,P/U5.W.__d(`G..J......T...[..~.~R&...?...4.+.+k[.]....QO_.NG.. .....=M..b..O_ ....7nB\|..^9.4..m.Q...%.4..I.....dZ!X.I.G.m.s..F..<v.>.Z...;.u...,.}g...D......F{.F./....6....w.a.....J.....T..zD...X..,.. N{;+..Z.!..8..U.....M...5'.uE..r<5....!...8..i..e..K?.N.j.j...."....e.g..../..n[XX..bMD...8..K.P..b......0##3.Nn..3U.....Fm.r.]h9...b..l..s...5s.K.b?s.s.I3.%PW.%...{!.47.....t....%..[I.M..........l..5.U...s...<R...m.... .yM\|.../a.H+.[.WB.0......(.Q.z`..9.y.cg... ..eu6.2.q....x..`.e.!,..1c..!....-........kg...T.C.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViem/YM:8WiIUemQM
MD5:	A825E31D18F2FF5845D245FED741E9F1
SHA1:	6E196F0B42376389AE1CC16E8F2D0C886940FAD7
SHA-256:	5D7C7D25A0DA74C0DD466120C3C09BD94CB982FC66EBC4A78675339F37323BF5
SHA-512:	3899089984B75089171A7A7DF174C75FED1E09CDB58C61BC0C4573B4716F5AE0274D0A63FAD5077E782BA4BF3EDF786102EE18EE4E4BD8DA93A0E12D85C7DA88
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"2"})

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21506)
Category:	downloaded
Size (bytes):	21593
Entropy (8bit):	5.366501027619676
Encrypted:	false
SSDEEP:	384:fc1CJXhETxuVXBO1JQ30pegawnTo9qPCkhsd:0U7ETxyXBOHnnrCXd
MD5:	577C7F3F9E3EB6C9DAFAD9BA34569A09
SHA1:	DC8E0826E9E66DAE128D0DA4E32341B7B143D6CE
SHA-256:	E8AB292DC16F200E0F505B8C086EA3D4A2E6A92D3265463C974CE83AA954BDA3
SHA-512:	381F94BE80BFE02B849898F13D2FC5EC288AD3934431597D516D63ABF6113EA152D1E3524AE05AA1F707799F90782E1D542F364E5D90B2B891344B9CB9C6ECA0
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/181-6ccf757cb37605cd8921.js?_sw-precache=577c7f3f9e3eb6c9dafad9ba34569a09
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[181],{"+3M4":function(e,t,n){"use strict";n.d(t,"f",(function(){return d})),n.d(t,"g",(function(){return m})),n.d(t,"a",(function(){return g})),n.d(t,"e",(function(){return f})),n.d(t,"d",(function(){return b})),n.d(t,"c",(function(){return v})),n.d(t,"b",(function(){return h}));var a,r,o,i,l,u,c=n("lSNA"),s=n.n(c),d=(a={},s()(a,"google","google"),s()(a,"facebook","facebook"),s()(a,"apple","apple"),a),m=["facebook"],g=(r={},s()(r,"NYT_EMAIL_PASSWORD","NYT_EMAIL_PASSWORD"),s()(r,"FACEBOOK_SSO","FACEBOOK_SSO"),s()(r,"GOOGLE_SSO","GOOGLE_SSO"),s()(r,"APPLE_SSO","APPLE_SSO"),r),f=(o={},s()(o,"OPT_OUT","OPT_OUT"),s()(o,"OPT_IN","OPT_IN"),o),b=(i={},s()(i,"ACTIVE","ACTIVE"),s()(i,"DORMANT","DORMANT"),s()(i,"FREE_TRIAL","FREE_TRIAL"),i),v=(l={},s()(l,"SUSPENDED","SUSPENDED"),s()(l,"DELAYED","DELAYED"),s()(l,"DELIVERED","DELIVERED"),l),h=(u={},s()(u,"STANDARD","STANDARD"),s()(u,"MAIL","MAIL"),u)},"2P7h":function(e,t,n){"use strict";n.d(t,"b"

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
Category:	dropped
Size (bytes):	117302
Entropy (8bit):	7.943380648060896
Encrypted:	false
SSDEEP:	3072:dzKj3D469hwhobfRzAr120Lxc5xJR+XWW/ZRLt3JEsK9:dzU06cOtk1S5xJSWW/Pt3U9
MD5:	BF94AFBF193E2DCD56C6A19BD1A476C4
SHA1:	E0645C60354D6B5B203A888A6BEE77A71F669162
SHA-256:	500005354A997B74F98412D6C92E98B79A01EA2B81623D2E0F90CE691C6E150B
SHA-512:	950A2B338B2C850E56D47185C0E7E17698A275D19AEBDC56CBC6E489FF19D2DAF4AD21616576B4BF83161DF3F4A7B5601D5BBC342F09CB74FF3B2052DA4CDD28
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................K......................!..1A.Qaq."..2.....#B..R...b$3Cr.%4Scs...Dd..5T.t.................................8.......................!1AQ.2aq."...BR...#.3b....$Cr..............?..17.......aN..^X....-...r.PAIP<.B.....`.P#.....>u.r.G...UbK.B...f..D...

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CMOT7Jjz-IIDFXf9KAUddlEBiw;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESELezj83S7KBI3Z4Ws1BVBdw&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	5.064998719968706
Encrypted:	false
SSDEEP:	6:hxuJzhqIzcWNnM9VRk6QcjWR0NNEXW0YBwZ3fAbpB0IT1XOxvfVJUAADPN4Nhdxm:hY7NnM9w6QclfhAYPPOxzUAAD14Nbx4T
MD5:	9E4D08DF7483E2AE71E0DBF0C639417E
SHA1:	64399439FF6F320848090920E16B6DFB95914664
SHA-256:	EAF5D1C90F443AF592F7F0A3D13BB3141D951CEC17AA27A2B16A5B55DCDDE208
SHA-512:	87D71F272ADD6474D886CCC5441C2E7DCA091DC447CFA0CF8C555FF3F9B35CD1AB38DF3750EC87927B4CE32D12E50018317757AAE75FCBE961F19612371CB8D3
Malicious:	false
Reputation:	low
URL:	https://myaccount.nytimes.com/auth/prefetch-assets
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <title>The New York Times</title>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <meta name="viewport" content="initial-scale=1, maximum-scale=1" />. <script src="/lire_ui/js/unified-lire.bundle.js?v=c4113f2"></script>.</head>.<body>.</body>.</html>

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38305)
Category:	downloaded
Size (bytes):	38379
Entropy (8bit):	5.257692051250109
Encrypted:	false
SSDEEP:	768:uZO1dAV++Yn9ZS/ynIQHAusIALDM0dUYRLROje212lWMZ:GqicS/UgVIAVz+Er
MD5:	5DB7BECBE75E5353C5C0D30F2E92F79E
SHA1:	C8BC588AB63E72794F77F1800F6C1B9DB247B4EF
SHA-256:	F526CBCA89330049775E6838A9C8496CC015462FD2570A5D0D90424D6D75DA10
SHA-512:	2BF6DC0B0453BD75775D02AB2BD0A46BD670F36F2D5406E10B61BD45ECB79DCFF64371607563C658A4988A6B3B5BF1FAF44E4F88CBE761A6191F7925612F1618
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/datasubjectrequest-8baae275f04720ea9c57.js?_sw-precache=5db7becbe75e5353c5c0d30f2e92f79e
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[68],{"4kNj":function(e){e.exports=JSON.parse('[{"name":"Alabama","key":"AL"},{"name":"Alaska","key":"AK"},{"name":"Arizona","key":"AZ"},{"name":"Arkansas","key":"AR"},{"name":"California","key":"CA","ccpaAccessOptEligible":true},{"name":"Colorado","key":"CO"},{"name":"Connecticut","key":"CT"},{"name":"Delaware","key":"DE"},{"name":"District Of Columbia","key":"DC"},{"name":"Florida","key":"FL"},{"name":"Georgia","key":"GA"},{"name":"Hawaii","key":"HI"},{"name":"Idaho","key":"ID"},{"name":"Illinois","key":"IL"},{"name":"Indiana","key":"IN"},{"name":"Iowa","key":"IA"},{"name":"Kansas","key":"KS"},{"name":"Kentucky","key":"KY"},{"name":"Louisiana","key":"LA"},{"name":"Maine","key":"ME"},{"name":"Maryland","key":"MD"},{"name":"Massachusetts","key":"MA"},{"name":"Michigan","key":"MI"},{"name":"Minnesota","key":"MN"},{"name":"Mississippi","key":"MS"},{"name":"Missouri","key":"MO"},{"name":"Montana","key":"MT"},{"name":"Nebraska","key":"NE"

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://c2a35b6f438b0595e16e6604ed508e2b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 675, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11605
Entropy (8bit):	7.872534959583824
Encrypted:	false
SSDEEP:	192:s9nHHYJemMmrwi3+xvLxiUXpo8Hj1jXvVsFh3VjeRuuOKZwsOwY1v77/sqOqbz9s:s9nHH2BMYgvNiU5o8D1jNsr1eguhjo1y
MD5:	84503D139C9BC060C754589889FA3767
SHA1:	BD6CA6CBEE58A9DCEF35941BED22848105D15D85
SHA-256:	23398DEFA27C8D0DF0756B7813F0DE4603636BC0BADBC32850D3F4FB34EEEF73
SHA-512:	B9BABC7DD21909CB0D26044356B0EC13F0792679773D88AB8A77784C96CD6FC8531B9518F2132BEF3C6661077923D39A7028A801CB8CA96E4DCFBA61AF620729
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/NYT-BestSeller-1200x675-699eb842421d5076f318fe0df3d903a5.png
Preview:	.PNG........IHDR.............:m.....{PLTE.-.G.U.a.o..\|........................:....b.T..\|.T.G..................{.n......o...................,.IDATx...........?t.)l.......................................................................................j..;aR.G.....K&%...w.;..........Yj.v1..{..z..J7Y..t..UU.So.[.......K.........<3...V......K..........<q......Y..p.....0....q......x.......I.Z....G.......Vd...z>....V.Y...NZ>....).....G....?8n.lK.....c.c!..sqX.B?...L7.w.....<.....)}G.g.u....Ma..1...#K..=.\|/t3.......a......O.F;Vn.....n.....\|.&g...3<.[........~O....:.C:Vh..1;:s..<u..;H............<.-......_..FH....`..joX...+.f.....K.by....:....p.Z..$X.4.;.]!.t.e"m.#W....G..T..p2..j...7.....Wj..T..#.k................Q..c]..g...>r..u...\k...../..9=#.........Ig..?8"./g!...V'...XId...3.....N.JC....... ..k.....#P?..(.O..!..4..P.3>.n.......ZeX.s%..]..8.m......X....F.+..V2.......n........gV......9.,.e..l......h...G.....X....v.'.7

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3190)
Category:	downloaded
Size (bytes):	113329
Entropy (8bit):	5.5425534745301075
Encrypted:	false
SSDEEP:	1536:sEo6wmPpFI51aHP0/+MzVnks85XU3GkwE+nprJd0x5qFtSR37LyT/mCm:sIBFaAMm2ks85k3iEqw/R3/yHm
MD5:	B96023064158A454A208A49620C0734C
SHA1:	E3C1CC046EFDFABF65D41A8A3CB4EFC63E3C6C46
SHA-256:	1642DD5DC126DF4FEFF2255CBA0988528507973D842D0A73331A5873F6B9D4E5
SHA-512:	44F33B8D6FFFABBFC6FEF7AF60DC2D7A07EF59B6969F828C177AC5814C5D07C2C103ADFC165F07CE4B6D9B55928A913BEB5BFCD854BE09596E401A41B884585F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.fa("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25680, version 1.0
Category:	downloaded
Size (bytes):	25680
Entropy (8bit):	7.991733675915669
Encrypted:	true
SSDEEP:	768:G0EUOJNsVQG5p56Ksda1x7ij28465YKv05:GR4Jz5751x7i1z+c05
MD5:	024693F96C8F2C457E4A6A8D02A636B7
SHA1:	1DDE20183D4E633D15C80959FA912EED5C66D1BF
SHA-256:	A931FED0C94DFFA9E7B8C2211BBEF72DA62D20B73CD718BE5D515BD8962CF078
SHA-512:	6E84605CF38CCE51B8EC58D2D59C1668E776153667A4B6DCB6ACAD37AF4B3EAB4159D860E21A9B3E958EF4D11DC1D40F600947868D8107BEBBF39C417CAD229D
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/imperial/imperial-normal-700.024693f96c8f2c457e4a6a8d02a636b7.woff2
Preview:	wOF2......dP..........c...............................`..~.F..b.....p....6.$........ ..3.........'..Aq;.....L7w(....Y/.lD...B.../...........B..$Gr"2.h...eS......yZ...G...qe...).#.X.^..G.j......j......j...i_..K:.839(..!.,9.......GaT..2.G.)....)(.Z......d....Q'...!;Y.Dq.o.M....]........e.nz.g..%......]6#V.....o.....1......!...r@...w.j..............^.^....Y....>B}...}FG.E....bO..4.4EeK.<\|p....;.....R....F Dk:.3........S.@M%....\O_......D..~.J..$E.n3?.7@.....A..:R.APT.,D%.ic....\....w.....N7._./..G....c.....^F3..Y...(/...t5W..u.Xl+.2...a.......)..y...6a....m{..B.z..^..1......h,3..Z...m..u..UXv........X...b3....,.PI.../j..........A...p...n..<.8..>Mi.<8....?..s:.N..%.&.+..^.....MYM}..n..L..i'P(.._!............z...PO..G,.e...&+Y...!A........#Y.\3..M.....A..r.0%...6..!.A..p.4xm.K...C..<.?....).N.?...lK..00.Z__...KJ.h;..4m.V.6.T....Z..ZaP..b9<.&,........7.HP..g...c(JQ..sQ.sQa.{of.. ....\p...!WK..@H.E&@P1:.D..R....T.X..._.!......../...........:$G...&.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74524, version 330.15859
Category:	downloaded
Size (bytes):	74524
Entropy (8bit):	7.99636049198076
Encrypted:	true
SSDEEP:	1536:iLT8p4MshznuE/ewUpA2FGML3zgH2dyZNxwM8SZ1AnNHYBlQlVZ6CfNUjy:iLTcihjuEmwUBFGy3zXyZNqFYKBr
MD5:	3E1B2A654A784CEB385157140B4CCD71
SHA1:	24354CCF21FB13A37B4484DFAC21A90E33953FB0
SHA-256:	975714C6CB70BA105BFA87D2415DF2FDDDE4A46C1D3AB9D0CF45465E56CBA97D
SHA-512:	347B20A3DB72224B04698AED1D6BD5820A16B769624656E82985D48491C7EEAE6901325E1A6E68318F5DF93F3802BC5865462F829A99C96A43723FC07832709F
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/webfonts/fa-brands-400.woff2
Preview:	wOF2......#..........."..J=.....................?FFTM....`........<..\|.6.$..<..`.. ......[{.q.h..BPwU..?..03.!l..14.(:...@..[#....O.E...)o..}~..3..Z..R.. ..Z....'.m..n./-.3... ....1P;....u... ...`..xj...... p.E;..=.r.L]$#.&..\.......~..k.!.F<....z3E'.e1..C.`.L.J$....y...P...R.Z...cZ.5...D.W.....Ror...y....&.....G.....rc..6...+.....k........(.nD)].Qh.I x......X=..3.&P.g......f3........p.E...v.R...X(M$.R..(.....c..UlI4.Vb..i..i.......".X....%..#"%..L......3..+..w.I......e.n....L.q..~....~.Z.W..[..- ..A.2+.D....Al...}..oFKp.T^3......U...&0~.,.\8..}...8h.n3;}.8.8KB.(...W.mJr..M..n.!...,aL.\.t[c.c..k_....!...<D".#3.4oT.dM..0.(._E.T...GF8z.j).OO..t.a;...........R.$.......KHj...)....uB.[y@...%.......\Ve\|3...Y...=.%>....G.us~.=>.W.&.........`8.rx....z....H....2.I...\....tf..E[..:G...edff.9.j..=?7.B....{....a.A...QJ.N=........>.GK..\.{=..P...a...#........_..!`1]%........Q..1...9..;....D...s...W%_....1.0..tu.r!dws..........:.&..?.........k.A.Z@..

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3744)
Category:	downloaded
Size (bytes):	3804
Entropy (8bit):	4.71844043415917
Encrypted:	false
SSDEEP:	96:1ZpOy8oDsWT+mEqhLsK3uXzdmWmj54j1d1fx:1Z5VDsWT+mbsquDdmWqwdv
MD5:	BA894BAAD4421B4EEF386A2AD10BCA76
SHA1:	0A9F6E4D3C8B84857E8CB7622E2FA60A5E13ED91
SHA-256:	22AFBA027CCA9A6E2DF4C7357903E011B0892B6279DF238F031AF27B36F0D8A4
SHA-512:	D8D9003C7A0294AA4E1D931E0E6B00312F159756461CE0170B482B3E46A4093C03DAC2FCD82DBCB47F3930BF77ECC6F8A714CD19738662433219C129F3DF22ED
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/UpshotLogo-cae1c9a0f5f4fb8229c4.js?_sw-precache=ba894baad4421b4eef386a2ad10bca76
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"2dkG":function(c,h,v){"use strict";v.r(h);var a,p,t=v("gcR/"),V=v.n(t),d=(v("q1tI"),v("KhZS")),e=function(c){var h=c.className;return V()("svg",{x:"0px",y:"0px",viewBox:"0 0 285 54",xmlSpace:"preserve",className:h},void 0,a\|\|(a=V()("title",{},void 0,"The Upshot")),p\|\|(p=V()("g",{},void 0,V()("path",{fill:"#BAD62D",d:"M8.444,21.889c4.664,0,8.444-3.78,8.444-8.444S13.108,5,8.444,5S0,8.781,0,13.445 S3.78,21.889,8.444,21.889"}),V()("path",{fill:"#BAD62D",d:"M8.444,43c4.664,0,8.444-3.781,8.444-8.444c0-4.664-3.78-8.445-8.444-8.445S0,29.892,0,34.556 C0,39.219,3.78,43,8.444,43"}),V()("g",{},void 0,V()("path",{d:"M57.971,20.687h-6.528v-6.145h-2.784v18.865h3.888V40.8H32.385v-7.393h3.84V14.542h-2.736v6.145h-6.576V7.148h31.059 V20.687z"}),V()("path",{d:"M90.371,40.8h-12.77V27.263c0-2.112-1.008-3.265-2.592-3.265c-1.873,0-2.593,1.633-2.593,3.937v6.625h1.92v6.24H59.744 v-6.24h1.824V13.39h-1.824V7.148h12.673v13.346c3.024-2.208,4.944-3.217,7.776

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	313
Entropy (8bit):	4.160049624499517
Encrypted:	false
SSDEEP:	6:YdwVKJbHQ+tuHjg1S5QHJHz/iJysqVT26s:Ydc+cAck1S+JHz/iBd
MD5:	52E4DFF6E256B7D47ABBDD538F65AB93
SHA1:	40C484C084520A37452E4857A17250410B8B2EE5
SHA-256:	337798C1985CBB2D4B52FEFF6E04F120225AB6F2A5E393AA4EEF7AF499FF5EF9
SHA-512:	0C798382081A36718E0D7203EB02C4B2DB7274CD4A6623AFCB724111C60DBEBE0EE9E5AA84E0A415015DAE40467EB3880D5C78EC60235D710F08DB5AF9D8F777
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1666082311302517&correlator=2435454733284148&eid=31079969%2C31079233%2C44782503%2C31079527%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202311290101&ptt=17&impl=fif&iu_parts=29390238%2Cnyt%2Cworld%2Cafrica&enc_prev_ius=%2F0%2F1%2F2%2F3&prev_iu_szs=150x50&ifi=2&sfv=1-0-40&sc=1&cookie=ID%3D36bc5e8533adab59%3AT%3D1701800026%3ART%3D1701800026%3AS%3DALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw&gpic=UID%3D00000da63dc47ce1%3AT%3D1701800026%3ART%3D1701800026%3AS%3DALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw&abxe=1&dt=1701800041216&lmt=1701798354&adxs=-12245933&adys=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&vis=1&psz=150x16&msz=0x0&fws=132&ohw=1263&ga_vid=681427960.1701800039&ga_sid=1701800039&ga_hid=617904059&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yOTM5MDIzOC9ueXQvd29ybGQvYWZyaWNhIixbXV1dXSxudWxsLDNd&dlt=1701800036712&idt=2265&prev_scp=div%3Dsponsor%26pos%3Dsponsor%26request_time%3D3838&cust_params=als_test_clientside%3Dweb_none_low_20231205181359%26mktg%3Dtype_anon%252Clogf%252Cabf%26bt%3D%26sub%3Danon%26edn%3Dus%26test%3Dprojectvi%26ver%3Dvi%26template%3Darticle%26hasVideo%3Dfalse%26vp%3Dlarge%26als_test%3D1701796214195%26prop%3Dnyt%26plat%3Dweb%26brandsensitive%3Dtrue%26per%3Dtinububolaahmed%26geo%3Dkadunanigeria%26des%3Dciviliancasualties%252Cdronespilotlessplanes%252Cdefenseandmilitaryforces%252Chumanrightsandhumanrightsviola%26auth%3Delianpeltier%26coll%3Dworldnews%252Cafrica%26artlen%3Dmedium%26ledemedsz%3Dnone%26typ%3Dart%26section%3Dworld%26si_section%3Dworld%26id%3D100000009210185%26pt%3Dnt1%252Cnt11%252Cnt12%252Cnt13%252Cnt14%252Cnt16%252Cnt2%252Cnt21%252Cnt3%252Cnt4%252Cnt6%252Cpt10%252Cpt17%252Cpt18%252Cpt5%26gscat%3Dneg_ibmtest%252Cneg_ibm%252Cneg_ihw%252Cneg_chan2%252Cneg_chanel%252Cneg_capitalone%252Cneg_gg1%252Cneg_gg2%252Cneg_mtb%252Cneg_ms_safe%252Cneg_bp%252Cneg_orep%252Cneg_citi_aa%252Cneg_ubs%252Cneg_cathay%252Cneg_mktg_safe_q4_2019%252Cneg_hearts%252Cgb_death_injury_high_med%252Cgb_death_injury_high_med_low%252Cgb_death_injury_news-ent%252Cneg_amerex%252Cneg_chan3%252Cneg_kaypemg%252Cneg_kvue%252Cneg_rchmt%252Cneg_sub0%252Cneg_hms%252Cneg_mastercard%252Cneg_sabic%252Cneg_aramco%252Cneg_cme%252Cgv_death_injury%252Cneg_newyorkp%252Cneg_am%252Cneg_rmw%252Cneg_google%252Cpolitics_sentiment%252Cneg_debeer%252Cgb_arms_edu%252Cgb_arms_high_med_low%252Cgv_military%252Cneg_bofa%252Cgs_politics%252Cneg_rolex%252Cneg_msft%252Cneg_racism%252Cneg_mttl%252Cgb_sensitive_edu%252Cgb_sensitive_high_med_low%252Cneg_victims%252Cneg_samsung%252Cneg_rms%252Cneg_captialone_p1%252Cgs_war_conflict%252Cneg_ts%252Ctest_bs%252Cneg_captialone_p2%252Cneg_amex%252Cgv_crime%252Cgs_society%252Cgb_sensitive_high_med%252Cgb_sensitive_news-ent%252Cgb_crime_high_med%252Cgb_crime_high_med_low%252Cgb_crime_news-ent%252Cgs_science_geography%252Cneg_sia%252Cgv_arms%252Cneg_korean_air%252Ccc_business_lead_boards%252Cneg_ssi%252Cneg_chldis%252Cgs_busfin_indus%252Cgb_crime_edu%252Ccc_tech_society%252Cneg_thrv_fin%252Cgs_politics_misc%252Cgs_politics_issues_policy%252Cgs_t%26is_viral%3Dlow%26tt%3D47%252C73%26mt%3DMT10%252CMT7%26abra_dfp%3Ddfp_prebid_0723_3_index_pubmatic%252Cdfp_als_home_1_als%26sov%3D2%26page_view_id%3Dz3DiZN4mOIhoKcvokH-eY6zy%26purr%3Dfull%26uap%3Dbrowser%26typ_materials%3D%2523news%2523%26slug%3Dstrike%26cookie%3Dfalse&adks=2456805700&frm=20
Preview:	{"/29390238/nyt/world/africa":["html",0,0,null,0,0,0,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,[676982996],null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CKOBoZjz-IIDFW0ITwgdXNAK6Q",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2"]}..

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6312
Entropy (8bit):	4.969577769987656
Encrypted:	false
SSDEEP:	96:kVqd913zi3lz3zZ3zeibOWQ3zUaF6E4SFViG3OlEhanaz/3AE0kfk3TPA:kUYH1NbOWCTTViG+l/albiE
MD5:	D21B2E51EBE2EA8C239C0BD8C3FFF23E
SHA1:	9C5D9906C7A9BDCBC58105E10BAD1991244A628B
SHA-256:	0A23846B4C8332B4EE7F3517A74924994B8255DFE3B0FB032DCE229B2F14A6AD
SHA-512:	E0D59881110E647660AB7CA00244C201132B39B292BBB3CE98CDB829E3D8D39CAA2815BA5E8B071FAFE572AB29726EF7D08B845D6AFDFCFF27E8ABBE861CF94C
Malicious:	false
Reputation:	low
Preview:	{"h.key":"ATH8A-MAMN8-XPXCH-N5KAX-8D239","h.d":"nytimes.com","h.t":1701800033824,"h.cr":"8699ab8d7c90d7e98ff44d2ad1f4e119778b952e-1ecf58e7-92a1ea73","session_id":"2e48ba23-6ff1-423e-b246-26543ebd8db1","site_domain":"nytimes.com","beacon_url":"//173bf10d.akstat.io/","autorun":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":5,"sendAfterOnload":true,"sendInterval":2000},"Continuity":{"enabled":true},"PageParams":{"xhr":"none","pageGroups":[{"type":"Custom","parameter1":"nytAnalytics.pagemeta.PT","on":["navigation"]},{"type":"Regexp","parameter1":"myaccount.nytimes.com/get-started/thank-you*","parameter2":"Subscribe Thank You","on":["navigation"]},{"type":"Regexp","parameter1":"[mobile\|www].nytimes.com/?($\|#\|\\?)","parameter2":"homepage","on":["navigation"]},{"type":"Regexp","parameter1":"nytimes\\.com/\\d{4}/\\d{1,2}/\\d{1,2}/.+","

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385)
Category:	downloaded
Size (bytes):	207209
Entropy (8bit):	5.398409421408782
Encrypted:	false
SSDEEP:	3072:P62deQY42MD/Pig887rJ8rGrFIw6gor9vV0USUBuWJg8vMssaGiF:S2RMMDKUJqsFMr16USUBuWJg80ssaGc
MD5:	82F8E09973A0342FE3A4ABEF0885FD1A
SHA1:	2432658B42C1008D4F41C4302F6C6F1C4FC1C525
SHA-256:	4DCE4158779DCE6DA3EDE11337029F817A03F45C9559B1F91D8A7C5AC130F38C
SHA-512:	6EC16EDAD5325700775374EBF39BCD5176820A33664E345F6B71DD085233411B761B1B4725FB88D1BDC6E3BF11E4DC95D85527B9B8B8CE1F2671563FD3901632
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/activeview/js/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Ig=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Ig};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.5578155996179355
Encrypted:	false
SSDEEP:	3:qinPNbnN3qmVEnkO3WR:qyPNbnIaR
MD5:	5A1687636CF027DB324B8022D0598DA4
SHA1:	075AA4069CD0FD9FCC9AFB829FD96F5F34769C7D
SHA-256:	595A5BB7DDAE2F41E04B3B416F18D0A918F585D6D75EDCBACBFD03D0152FBCA4
SHA-512:	DA4613E11163FBCC8F30AFD14407C2403247A82AF293EE08B2E980382D35DD53BA9427640B6B8E89CC82AD15FB8CF1736EA24F4323BDCF14745D18218C4D64D7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnBoz8ZDcHgcxIFDYOoWz0SBQ3oIX6GEhcJKIAUHBn6JiwSBQ2DqFs9EgUN6CF-hg==?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3oIX6GGgAKHAoRDYOoWz0aBAgJGAEaBAhkGAIKBw3oIX6GGgA=

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65516), with no line terminators
Category:	downloaded
Size (bytes):	88717
Entropy (8bit):	5.366964778056369
Encrypted:	false
SSDEEP:	1536:Jo55ITO/T18etVONLXMsctZTBdG3H000D:m5f/T1pWaZTBdG2
MD5:	DD5ADD533A4550D28A0E1917410CF507
SHA1:	42A524A478E045CADB3BB4234B2007B22EEF0F7E
SHA-256:	ED96B31D7A723D21390CA811BB1D85A75CCEDD5983AB4CD275FBD0F90DA6EC32
SHA-512:	E20C8DCB7F9224726C62925EABF0A577A1B8F7C81ED7CDE091C2A98C7619C8F0204773F7777F13E85A30027AD4CFBD4217C9045CBD808CB6E9A1AA1A0D75BC16
Malicious:	false
Reputation:	low
URL:	https://platform.iteratehq.com/match-prod-eb0e5d28cbc017a01544.js
Preview:	!function(n){var r={};function o(e){var t;return(r[e]\|\|(t=r[e]={i:e,l:!1,exports:{}},n[e].call(t.exports,t,t.exports,o),t.l=!0,t)).exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)o.d(n,r,function(e){return t[e]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="https://platform.iteratehq.com/",o(o.s=339)}({102:function(e,t,n){"use strict";function r(e){var t,e=e.Symbol;return"f

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	198417
Entropy (8bit):	5.402706043374467
Encrypted:	false
SSDEEP:	1536:kjqi8n86ZSdW5CxgIxgciBqTJMTJo7naVFdtf:kjGOW5epTJMTJsKdt
MD5:	C1F043C80F170A268346F37B781332B5
SHA1:	2D88B7D77FC21893F399CFBDEB89F4C74DF8BB06
SHA-256:	340D24A47E08DE69132D8E2B84C66993F2FAAE561994E0F50C9F2482E957D625
SHA-512:	207ED5EA0F4EDCAD05C8EE2E80F7C38E7E1AE936B94882CC88F393C091C4D7D352879C2CF28567D6FBF31FB53EDE4E3E726A2717C13EE16DBC789FBAC44B8703
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/cookingLandingPage-785ae9eab46d5977ac9c.js?_sw-precache=c1f043c80f170a268346f37b781332b5
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[67],{"0XYP":function(n,e,t){"use strict";var i=this&&this.__makeTemplateObject\|\|function(n,e){return Object.defineProperty?Object.defineProperty(n,"raw",{value:e}):n.raw=e,n};Object.defineProperty(e,"__esModule",{value:!0}),e.category=e.firstDivItem=e.divItem=e.liItem=e.list=e.head=e.containerWrapper=e.container=void 0;var a,o,r,d,l,s,c,p,m=t("Jqp9"),g=t("lVLo");e.container=(0,m.css)(a\|\|(a=i(["\n padding: 0 20px;\n\n @media (min-width: ","px) {\n padding: 0 40px;\n }\n @media (min-width: ","px) {\n padding: 0 64px;\n }\n @media (min-width: ","px) {\n padding: 0 120px;\n }\n"],["\n padding: 0 20px;\n\n @media (min-width: ","px) {\n padding: 0 40px;\n }\n @media (min-width: ","px) {\n padding: 0 64px;\n }\n @media (min-width: ","px) {\n padding: 0 120px;\n }\n"])),g.widths.medium,g.widths.mediumLarge,g.widths.xLarge),e.containerWrapper=(0,m.css)(o\|\|(o=i(["\n border-top: "," solid 1px;\n border-bottom:

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32698)
Category:	downloaded
Size (bytes):	32770
Entropy (8bit):	5.376976912617051
Encrypted:	false
SSDEEP:	768:+wbwZg5Duac6HcGGj4MqULPADxyNeSNy51vJKvEZl/v35/0Ylj7vROJa:OZg5Duac68GGj4MqKGyNMJp/0YlPvRia
MD5:	9C27AC548C2C3B9CB5180D3FB338E7B9
SHA1:	4F68209A9BFD000A0B34265E3246F7F71DAB1C86
SHA-256:	1AA4AA3E64984747AACBB88E08C40D7C431AF0104080DE88FB97575CCF1F73FF
SHA-512:	0B5A638E4B17B85BBEB53F181EEC87E8AF33BD870D646C052B63D35BFB90A85CEF2329AA2458D1F7F74BD2894809EB51F5EEFBB96746A1A197A3161119D831B9
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/canadaHamburgerNavData-9832152fd34a7a1baeae.js?_sw-precache=9c27ac548c2c3b9cb5180d3fb338e7b9
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[56],{PvlA:function(e,a,n){"use strict";n.r(a);var s=n("q1tI"),o=n.n(s),t=[{edition:"domestic",name:"Home Page",parent:null,path:"/ca/",taxonomyId:"A963B567-7D3D-4D0C-9E47-BF91609EFCE7",className:"homepage",show_in_nav:!0,hasSubsections:!1,level:1},{name:"World",parent:null,path:"/ca/section/world",taxonomyId:"9A43D8FC-F4CF-44D9-9B34-138D30468F8F",edition:"",className:"world",show_in_nav:!0,hasSubsections:!0,level:1},{name:"Africa",parent:"9A43D8FC-F4CF-44D9-9B34-138D30468F8F",path:"/ca/section/world/africa",taxonomyId:"350E94CC-926C-4D2A-9DB4-FD9ED99A66DC",edition:"",className:"africa",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Australia",parent:"9A43D8FC-F4CF-44D9-9B34-138D30468F8F",path:"/ca/section/world/australia",taxonomyId:"7GDDJ7E-037B-4C6B-A88D-741B06663078",edition:"",className:"australia",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Americas",parent:"9A43D8FC-F4CF-44D9-9B34-138D30468F8F",path:"/ca/section/world/am

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "FFTM", 16 names, Macintosh
Category:	downloaded
Size (bytes):	63728
Entropy (8bit):	6.387907723754205
Encrypted:	false
SSDEEP:	1536:VhMKBvssQNnVB+jp/uNVdKHyl7lBpMXG21LB831:rM3nP+V/uXdKHSlBpM31LB831
MD5:	F55D6AC3959BE35FE19A3379C9A8EFB0
SHA1:	2F5FFFEC0829925286CE8C8B2DA40428E2B42BA5
SHA-256:	B5BF2F060412D352A324D32745A7905BCEE710F284E7300A6CAFF998BB6B16ED
SHA-512:	466829775D045B92915ECDDCD4C7398A50EE40538B6329A4F6DB42E78042CDA15ED6F9D8CE6FAB1085E8AF9C67383657245D51D02D12FCAD3B2B60CBA87BE27D
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/fonts/random1/cheltenham_normal_300.ttf
Preview:	........... FFTM~..........GDEF.&........*GPOSk.<W...T...~GSUBI.T.........OS/2..%(.......`cmapW\'8........cvt .!.z...T...,fpgm...7.......sgasp...........glyf.0.s.......head.f.....,...6hhea.".G...d...$hmtxZ.O.........loca=...........maxp........... name.I........jpost.......\|....prep8..D...\...........BK..._.<..........'W+.......)...`.-...................B...........-.....................................................^.,.....y.....L.y..........................@. Z........C&C .@. ...V.V...B................. ...................D.../.......d.B...}.%.?.......o.......L.!.....5...Z...u.......V...d.../.....1.....3...V.....7./...=.......P.!...!...!.....T...........F.#.B...F...F...H...B.'.H.\.R.....L.H...F.).F...F...B...H...B.P.H...B.......9.....F.............%.......P...H.!.B.%...X...../.....9.+.-.+...+.B.B.....N.5...B...f...5...7...?.Z.?...+.'.9...+...?.;.1.B.%.L.-.................L.....;.......B.!...D.....q...3.q.-.........X.s...B...j...\.!.....Z...!.X.}...9.!...........X.....H...j.X..

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (445), with no line terminators
Category:	dropped
Size (bytes):	449
Entropy (8bit):	5.326941944943739
Encrypted:	false
SSDEEP:	6:qTthqIY9UxVHmEvX6jHzKRwszpuEIRuL5loXFNRXuRYA/bRIM2PLVe/NX96rzRHS:qTEuxVZgH/sI0llokRt/Jq5e/mvRy
MD5:	D68F5C79B585EEAADA3EBC02208C314C
SHA1:	A2EA8912707E477EB1B559187B600CE01BECE9E1
SHA-256:	7154FA4E43375900E0A5763222D361B4AAC5C08DB03EBCD76573615794FF8DD2
SHA-512:	D483E4ECF5C81D644D182186D2E20162F9830C0DE8B99D3C43192402987654943CFDD3724DE43DEE6307530A5FE18F98A35A7D1863E902AF3D5A4ACBA11E8086
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><title>HTTP Status 405 . Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 405 . Method Not Allowed</h1></body></html>

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48176)
Category:	downloaded
Size (bytes):	48339
Entropy (8bit):	5.342565609254076
Encrypted:	false
SSDEEP:	384:0NSR1eBiaXgHko2/Ob1+Ks2qF1aeW/dmgiyRHuerFKfS8vV1/BGcH:0NSLkiaXVmb12JW/dmxIHuerKDH
MD5:	218CEA4A58C1227B419565F0AC94AD24
SHA1:	8A1A0BCA9D90D6997ED38AF64AE91B1E5C74306A
SHA-256:	5FE30B386A7B85303CB8594CCC6800C2F39C3C259B740C4CF293D574692D5D96
SHA-512:	E4DD50C7D799D921A9D19027082AD06C8A3739F3F8E6BE3ECC07983E422F517BB5E03DE5935A63E87B6398800187AC6172CD01CE8D1F84C0E6954A60A1A3BD1C
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/vendors~allAccessLandingPage~bestsellers~card~collections~cookingAppDownloadLandingPage~cookingLandi~3fc321fe-74ec4aa0b386b7ed501e.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+S+O":function(e,n,t){"use strict";var i=t("TqRt");Object.defineProperty(n,"__esModule",{value:!0}),n.contentClass=n.SnackbarContainer=void 0;var a=t("Jqp9"),o=i(t("wXC7")),r=function(){return(0,a.keyframes)("0%{opacity:1;visibility:visible;}50%{opacity:0;}100%{opacity:0;visibility:hidden;}")},s=function(){return(0,a.keyframes)("0%{opacity:0;visibility:hidden;}50%{opacity:0;}100%{opacity:1;visibility:visible;}")},l=(0,a.styled)("div",{target:"ezd49050"})("position:fixed;right:0;bottom:-50px;padding:0 10px;box-sizing:border-box;visibility:hidden;z-index:",o.default.zIndex.overlay,";transition:transform ",(function(e){return e.animationTime}),"ms ease-out,opacity ",(function(e){return e.animationTime}),"ms;&.fadeIn{animation:",s," ",(function(e){return e.animationTime}),"ms;transform:translateY(",(function(e){return 0-e.offsetY-70}),"px);visibility:visible;}&.fadeOut{animation:",r," ",(function(e){return e.animationTime}),"ms;tran

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20196, version 1.197
Category:	downloaded
Size (bytes):	20196
Entropy (8bit):	7.989459350608052
Encrypted:	false
SSDEEP:	384:SAN63muTmNwCFXSuQq1YGxRKPILhyqs5fl/9gTh5mJn7NalEll64uva:SAg3zaWCFiuQqYGyqslESx7QE+va
MD5:	75739AC267F076931C6DA9740386EE6B
SHA1:	89385AB1C9877D865965A2A3BEC4DB1616EFB057
SHA-256:	29706C4AB8F4D48B33CCB0EA813F8AFB5F7AC569F623536B96FBA6CF1FC60E9B
SHA-512:	2000DA143CB3568163D34E75210D7B01E032EC4F3E4316422ACC86EE0A9011E2049977036BEDCB244E4F230129E307288A8515CDB848E198466223BF35646752
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/franklin/franklin-normal-600.75739ac267f076931c6da9740386ee6b.woff2
Preview:	wOF2......N........t..N................................`..v.:..s........!.6.$........ ..D.....4..5l.6=.[U.......I...a.86.....EJ....9A.....=(Y...$.M.q...5.]gj]....bo...G2.I......(,8..ji{....N.eV...G...S....h.....wx....f..h"..../..8.....95...'_.....I.{fi.......hn.Y.F...%.EAo.z0.....Q..I..H........C1..,._.u..)........6.....U..:B...I".Q6Na.......N9....z..sJuZ.=.5.)..9.)}.<..h.c.o.mJi^.a...c...<.p.HN.......U.eU>y.d..Cn.....:...o...0...J...E...5....K...-_..x..n....Q...\|..kV..X.~.%UI.I'.j...pw/.....P..ss...c.f..'.B..... .j....`@..R.......a..T.r.W..M\|.._.c.......[..I....xJ9-[...............P6%.8..vr..@...5K;?..9...........3.......f&..9.&K4.ar4..%.[N69`REz...R..JU)T........j.....]B<..j.-.!...U..7...&.On...I.=.6!D..(V...H..._..).o....p(0<..fg*.v..E>g. .4.`.h4..q....;c...Y.HjW..g.6t&.....g".J.T..+e$..=.$.k..[..__?..^5.K..vg...._.r.....+)....q..c.XQZ[..RF..t....'4A.\|.....V>.q.s..:...!4U..c4+.A.!J7~......,..zTCL\.....t....>3.....'..k..\,.n.I.4(H.

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemJhn:8WiIUemL
MD5:	FDC2E3DFA95F50207C7BE90E613A1DB8
SHA1:	24CBEDE491BCE2D96B5053ADFA82A6B3E58D0D4E
SHA-256:	6139DDDD3B6B6B847BCCD476918DC8FB4F4F5A10908E5707C704F155E0918E84
SHA-512:	10F3B68A8D3B9A25148A5C386AD5BEA7D7ABE96756EB14BBEC9576CD4985E769FAC046C4A62D37F06D1A114F278A8373F7D4382934237DE17F2258EDEB328674
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"4"})

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	1822062
Entropy (8bit):	5.448812238258653
Encrypted:	false
SSDEEP:	49152:eBboDrCR33q/Eh0dgM8ZmHgku105Ypk3Uj4NKTwEYmVcWISdKvbPo:YPSUjx
MD5:	2B0B0FB9ECFB5174E5785CD0DD0D7CCE
SHA1:	0E5C4101ED8F54175B9A0DA92979AB12A4D76296
SHA-256:	20F1A6A17BBAAAE723B025B7337CACF57B5FBD4F47C8A18C785F33E792C2A7D6
SHA-512:	7271E5A2FE915F76413B48A1142F46A56FF632CD93CC0ACD595E59AECA6A7709868AA1A04DEFF83721699BEC112A7F6A92E957861639B1BB74D54256A6B8B5CB
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/liveAsset-14d9fdd01d7a65e76eb5.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[98,5,8,17,20,21,23,60,81,144,145,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return j}));var a=n("ygvk"),i=n("8iTF"),r=n("7WMn"),o=n("XWHH"),l=n.n(o),s=n("LgWu"),d=n("a9ya"),c=function(e,t){var n,i=null;switch(e.type){case a.a.GET_ARTICLE_REQUEST:n=function(e,t){return"".concat(t,"/rest/articles/article_").concat(e.articleId)}(e.meta,t);break;case a.a.GET_COMMENT_LIST_REQUEST:n=function(e,t){if(e.nextUrl)return e.nextUrl;var n=Object(s.parse)("".concat(t,"/rest/comments")),a={"filter[articleId]":e.articleId,"filter[isAccepted]":!0,include:"replyTo"};switch((e.sortType\|\|d.c.NEWEST)===d.c.OLDEST?a.sort="sourceCreatedAt":a.sort="-sourceCreatedAt",e.listId){case d.a.HIGHLIGHTED:a["filter[isHighlighted]"]=!0;break;case d.a.RECOMMENDED:a.sort="-recommendedCount,".concat(a.sort)}return n.query=a,Object(s.format)(n)}(e.meta,t);break;case a.a.GET_COMMENTS_

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41001)
Category:	downloaded
Size (bytes):	41104
Entropy (8bit):	5.3069040014906355
Encrypted:	false
SSDEEP:	768:dG+y8ojuP3ruPjrijXtCfeSRkFD+l0cxlre:owoj5l2FD+l0cxlre
MD5:	DA1092368394D1FFB67100511FF4D664
SHA1:	C9F16AB99A56E8C228EDC7C826096E2F4FB2555F
SHA-256:	504A824EBB357FE8A9F343761064370E925CAB1C246E8721EBEE772135275FD3
SHA-512:	1CCDEF882B6EF07F4FDFCCA0A6FB9EEA453BE41B8B86769B6FCED70C030181F06F357791F8BD15B6B2F0CD17A11DFB8D59CF80A043BBF78C84FB6EB123A22356
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/180-1dcf8f5ec828979b5585.js?_sw-precache=da1092368394d1ffb67100511ff4d664
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[180],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return P})),n.d(t,"c",(function(){return N})),n.d(t,"a",(function(){return C}));var i,r,a=n("gcR/"),o=n.n(a),u=n("J4zp"),s=n.n(u),c=n("q1tI"),l=n.n(c),d=n("MShG"),f=n("5Aio"),m=n("WDoI"),p=n("qkuN"),b=n("4+a0"),g=n("kc0S"),v=n("EOa1"),h=n("+yCz"),E=n("hgSA"),S=n("DRvx"),y=n("xIq5"),I=n("dZ3W"),P=l.a.createContext({setPersistentFooter:function(e){}}),N=l.a.createContext({setUserProfile:function(e){}}),T=function(e){var t=e.pageContentMaxWidth,n=e.children,a=Object(c.useContext)(f.b),u=Object(c.useState)(null),l=s()(u,2),m=l[0],b=l[1],T=Object(c.useState)(null),C=s()(T,2),O=C[0],R=C[1];Object(c.useEffect)((function(){var e;Object(p.f)(),Object(g.c)(null!=O&&null!==(e=O.subscriptions)&&void 0!==e&&e.length?"sub":"regi","")}),[]);var D=Object(c.useMemo)((function(){return O?Object(S.a)(O):[]}),[O]),A={setPersistentFooter:function(e){b(e)}},x={setUserProfile:function(e){R(e)}

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32963)
Category:	downloaded
Size (bytes):	93182
Entropy (8bit):	5.592229155475219
Encrypted:	false
SSDEEP:	1536:9Vjfa6Q0V6M/sfbX/EwmheVAdYV3zm4YQIipkqSC+GOry:Pa69sTXWiP564Z
MD5:	9608F0BB874D486DC38AA51ABC77B14F
SHA1:	07F19D41BD47D5F0BD8D66D13765B7779B4FDA33
SHA-256:	A9A2F3361E40BB9E139C464FBAD8F19C58DCAE660776D63525E5175185FD2CFD
SHA-512:	77BB73BAEFA641CE16DDD8DD0817ABD34A8678B813BE770556DFA582122639D42D06DB744BEB38BFF4626E6DF2F697754C08735F895652612C258C5579E24AE9
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},fa={},u=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var h=d[e];if(!(h in f))brea

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	553
Entropy (8bit):	5.158449202258168
Encrypted:	false
SSDEEP:	12:Ydc+okIM8pFLA4NWLG8Cf+8U4k6S+JHz/idMv3v:Ydc+okIM8fLA4NeG8CftU4k6lJHz/idy
MD5:	79D1C76B633AC824B15A801CE652415A
SHA1:	1A19520B16FACED6E0E07AD8793084F58E2723F6
SHA-256:	F7145EC8A70606C68D9255358890872AF99605719B4F6084BF3E521B8A81561C
SHA-512:	10BCCCF3A24FD0EF9E918563E7CD0D632EA26FBF910DE3DAA6965C61C77A53583486AE3E97C9DF73D4F19EA44B8BD8CF6208AA0AE802D44880CCC614A39AD45E
Malicious:	false
Reputation:	low
Preview:	{"/29390238/nyt/world/middleeast":["html",0,0,null,0,0,0,1,0,null,null,null,null,[["ID=7fcb016d43548583:T=1701800031:RT=1701800031:S=ALNI_MYZxMeNJGQIHMZnbkwGo0CG4EArKQ",1735496031,"/","nytimes.com",1],["UID=00000da63dae43ba:T=1701800031:RT=1701800031:S=ALNI_MaYQ8s0ZoW-E_cmDgCsDgpcb-mHYw",1735496031,"/","nytimes.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,[676982996],null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CPuv65Lz-IIDFQEWoQodYUsBmQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2"]}..

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	97220
Entropy (8bit):	5.4151407898229875
Encrypted:	false
SSDEEP:	1536:fcmifaQ0G9/5wvrEFIJblJE6UTU2TcvYMaX3MC092QDgZ2HGYMG4U6dGhfzm++mh:f5ifaQ39/KTEF6b/ELTU2TcvZu3m91Pb
MD5:	F1CC3C101219F48A89F805EA43931AB9
SHA1:	50246A77AD2ED9A12214AC2EEC1F8A35163FE802
SHA-256:	1EC74359CAF7DEBEFD9081CB98BA2DEDAF05B8BA96BA734A9CD6D9720DDBA418
SHA-512:	6D5BB07B568CE379B1A0A0FCC474B9BD4CB5B39E04DADDA89256A4D823AB2AB75DD2EE0F7319CFA8C234A366DFEEE66B564232DBFC416B63857D15BCB5913DC1
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/card-59ab16713c1ee6a5b879.js?_sw-precache=f1cc3c101219f48a89f805ea43931ab9
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[59],{"/tu1":function(e,t,n){"use strict";n.d(t,"a",(function(){return g})),n.d(t,"b",(function(){return h})),n.d(t,"c",(function(){return b})),n.d(t,"e",(function(){return v})),n.d(t,"h",(function(){return y})),n.d(t,"d",(function(){return x})),n.d(t,"g",(function(){return w})),n.d(t,"f",(function(){return O})),n.d(t,"i",(function(){return j}));var i=n("cDf5"),a=n.n(i),r=n("gcR/"),o=n.n(r),c=n("q1tI"),l=n.n(c),s=n("cr+I"),d=n.n(s),u=n("oqc9"),m=n("JwCr"),p=n.n(m),f=n("bmDE"),g=function(e){var t=null==e?void 0:e.substring(0,e.indexOf(".")+1),n=null==e?void 0:e.substring(e.indexOf(".")+1);return(null==e?void 0:e.match(/[.]/g).length)>1?l.a.createElement(l.a.Fragment,null,o()(p.a,{},void 0,t),n):e};function h(e,t){var n={};return e.filter((function(e){if(null==e)return!1;if(t&&"object"!==a()(e))throw new Error("Cannot access property ".concat(t," of ").concat(e,". A keyBy argument can only be passed for arrays of objects."));if("object"

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViem/YM:8WiIUemQM
MD5:	A825E31D18F2FF5845D245FED741E9F1
SHA1:	6E196F0B42376389AE1CC16E8F2D0C886940FAD7
SHA-256:	5D7C7D25A0DA74C0DD466120C3C09BD94CB982FC66EBC4A78675339F37323BF5
SHA-512:	3899089984B75089171A7A7DF174C75FED1E09CDB58C61BC0C4573B4716F5AE0274D0A63FAD5077E782BA4BF3EDF786102EE18EE4E4BD8DA93A0E12D85C7DA88
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=2&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-1_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cb":"2"})

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6772)
Category:	downloaded
Size (bytes):	6835
Entropy (8bit):	4.723182155921454
Encrypted:	false
SSDEEP:	96:eYRRgz1ZXzbg5kSigEkF5aUMSWbx5gOFL050noPbZN+gXEU1PfyN38VeNfaud4OF:eBJbmTiL15V5Jy56qbmEzy4OuoP
MD5:	5B920A0788A3BC552FB9179E303FA217
SHA1:	4DA4843187B6C915A20E16AC9D22A6E60D95AE55
SHA-256:	6E76237FF0218751295DF96B75DE5DE41762AC6FC1C98BE932856465E457DCBE
SHA-512:	9E4074E180C779502FBFDFF5FBB12CFF5DEA5526670E2CF9234AEF17DF3F89FC122769A676DEE05F16E8244F8C0E55ABF3F6088AF9D2AE9882F2BD91D5BA875D
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/TMagazineLogo-60522d4a2b54b2e7ab89.js?_sw-precache=5b920a0788a3bc552fb9179e303fa217
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[34],{OwcG:function(h,v,c){"use strict";c.r(v);var a,V,t,Z,p,d,H,M,l,s,e,o,m,i,n,w,r,L,u,g,C,S,f,A,N,b,k,T,q,x,y,z,J,P=c("gcR/"),B=c.n(P),G=(c("q1tI"),c("KhZS")),I=function(h){var v=h.className;return B()("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 316 36",className:v},void 0,a\|\|(a=B()("title",{},void 0,"The New York Times Style Magazine")),V\|\|(V=B()("path",{d:"M4.1,3.75H26L29.79,0H0V7.86Z"})),t\|\|(t=B()("path",{d:"M26.47,4.8H15.8V31.89L11.7,36h7.86V8.56h11V.7Z"})),Z\|\|(Z=B()("path",{d:"M4.51,4.8.7,8.55h9.56L14,4.8Z"})),p\|\|(p=B()("path",{d:"M14.75,5.5,11,9.31V35.23l3.75-3.75Z"})),d\|\|(d=B()("path",{d:"M45.84,14.46v1.93H42.91V29.47H40.39V16.34h-3V14.4h8.44Z"})),H\|\|(H=B()("path",{d:"M52.79,21.62c0-1.23-.41-1.88-1.47-1.88s-1.47.7-1.47,1.93v7.68H47.4V14h2.46v5.39a2.3,2.3,0,0,1,2.23-1.23h.64c1.76,0,2.58,1,2.58,2.87v8.33H52.85V21.62Z"})),M\|\|(M=B()("path",{d:"M62.72,26.23v-.59h2.4v.88c0,1.88-1.23,3-3.28,3H60.38c-2.17,0-3.58-1.23-3.58

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505), with no line terminators
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	4.964293866147223
Encrypted:	false
SSDEEP:	12:2JqxHmwm4pM86VVC05Zs5ohgwML9cV4JHMVodQXvloub:2JVwfm8uVCxwgxvHmflok
MD5:	A6B33B14C34C4EA4B73BA73C5BF7871E
SHA1:	9A33C53CC8DE001CEAC06D2155C6F2692E422735
SHA-256:	F4C8C10C577F10D982568BD0E5128CB974CC1B3A889DC41A7712734D161DE050
SHA-512:	03FCA868122FC5F83157F1BE6B88D57FE4ED7AA0F9F059061295734BDD56BACEDEBCCCF23892707B914E9FA60C413548B90990DFA92ED858FCD0C44CEEE6DD47
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/3030
Preview:	(function () {try {const accountId = "3030";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("log/analytics/setSampling", {"ratio": 0.001});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 823 x 599, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	127597
Entropy (8bit):	7.9858182477349
Encrypted:	false
SSDEEP:	3072:6VFfauBDUdRdqp8J0EbV5yzzRegrRHPJTyVIFbTVopfQ7T:6VtaiAnde8J7bsRt1HgKtoiH
MD5:	2469CD82C14B7C041A18E9563BC47ECF
SHA1:	E242AB4A64074471430E10E5D0BD622F5169CC87
SHA-256:	76E7FE4259EF58E2BC342D4C628E2D90E1685F03B486A23E98FD7B07D526393A
SHA-512:	626ACC84BBB3500F71087BD37E259F975AC03F08947C71281FCAED14CF7AF913C2867E4EA44832752167BA6E48A015D1E2F4A8E1661C3B9E5F272F8BDE1F0435
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/athletic_app-0178f6b583ae0f075961296ff3dc87a3.png
Preview:	.PNG........IHDR...7...W......R.4....pHYs.................sRGB.........gAMA......a.....IDATx...`Te...S.{!..{.W.Al."(...uu..ww.ww........*.....N(...)...gN.B...$..c.).........4.a..a..a....a..a..a.....a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...a..a..a..A..a..a..a......a..a..a..,n..a..a..i...0.s.i.Q..^^^...F...l..9{.^.Sw.~.....g.......5...y.U..cAAA..~...0...%,n...uH....M..S.;$$D....6...0.&!!.W.^-..ZL5m..=z.....SRR..!.C.IMM.......gTT...a....06C..L.m.Oz......j...Uvvv.k....B.)))AQQQ..e..z$''#::.......*.....\|X/......e..}..eYCB.D....b4^

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65336), with no line terminators
Category:	downloaded
Size (bytes):	176881
Entropy (8bit):	5.332900600451061
Encrypted:	false
SSDEEP:	1536:pcepuUFvl4KN3pL1TFeokcdlVbRS3j0kr9RJJaMuH74CSh8pMjqEK21fGbycZsw2:Ww6yjSraMy4CpFFqe+osKg
MD5:	B5E3F2C1B76554752BB8D61689B81DC5
SHA1:	178D54EDB5505CA44399E9F88F2A6BF0225F405D
SHA-256:	3459A86A1A5A0EBEFC38BA347C8EEE86838664553D2732A9F0D75D9B474BAB72
SHA-512:	78ADC8530765A0B01711BB634B23E7A200E66D5C08BD0E3D1485F7BD302EA7EB67851EE776D7B8B68BBD8E9BC8C9AACE3136B2946F4F13694F05464D11E0F156
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/vendor-7799bfe3d9a78d57c093.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{"+ZMC":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var r,o=n("JFyH"),i=(r=o)&&r.__esModule?r:{default:r};t.default=i.default,e.exports=t.default},"+c9P":function(e,t,n){"use strict";t.__esModule=!0,t.getChildMapping=o,t.mergeChildMappings=i,t.getInitialChildMapping=function(e,t){return o(e.children,(function(n){return(0,r.cloneElement)(n,{onExited:t.bind(null,n),in:!0,appear:a(n,"appear",e),enter:a(n,"enter",e),exit:a(n,"exit",e)})}))},t.getNextChildMapping=function(e,t,n){var u=o(e.children),s=i(t,u);return Object.keys(s).forEach((function(o){var i=s[o];if((0,r.isValidElement)(i)){var l=o in t,c=o in u,f=t[o],d=(0,r.isValidElement)(f)&&!f.props.in;!c\|\|l&&!d?c\|\|!l\|\|d?c&&l&&(0,r.isValidElement)(f)&&(s[o]=(0,r.cloneElement)(i,{onExited:n.bind(null,i),in:f.props.in,exit:a(i,"exit",e),enter:a(i,"enter",e)})):s[o]=(0,r.cloneElement)(i,{in:!1}):s[o]=(0,r.cloneElement)(i,{onExited:n.bin

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22940)
Category:	downloaded
Size (bytes):	22998
Entropy (8bit):	5.312211133163171
Encrypted:	false
SSDEEP:	384:Ktche2gkjsEgzMfoM/pOl2uKrIkbC39y9yS:wcZ9gMOnebC39ycS
MD5:	078400628199A3340CE1953AF112096E
SHA1:	8640EDE3096E1AC075361F6D4BF01CCA5C9031D8
SHA-256:	559BDD296B5FED626F9DC30C00E521CD4615AD6ECD4FEE7C44AEEFC811F26CFA
SHA-512:	ECDB501408E1C822B23E181AEDA0745F54BE1BCB3508DA35A33747E70953F24A2538AD43070277B9D489112660A2C9095652082D9A0494755A21A3035BE59783
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/adslot-c02e009c82341062ec30.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[44],{"1iyJ":function(e,t,n){"use strict";n.r(t);n("RzqG")},2:function(e,t,n){e.exports=n("1iyJ")},RzqG:function(e,t){!function(){"use strict";function e(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function t(e,t){var n,i=Object.keys(e);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(e),t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),i.push.apply(i,n)),i}function n(n){for(var i=1;i<arguments.length;i++){var o=null!=arguments[i]?arguments[i]:{};i%2?t(Object(o),!0).forEach((function(t){e(n,t,o[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(n,Object.getOwnPropertyDescriptors(o)):t(Object(o)).forEach((function(e){Object.defineProperty(n,e,Object.getOwnPropertyDescriptor(o,e))}))}return n}function i(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,i=new Array(t);n<t;n++)i[n]=e[n];return i}var o,r

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (44372)
Category:	downloaded
Size (bytes):	44433
Entropy (8bit):	5.356281231701382
Encrypted:	false
SSDEEP:	768:5oGnFnXfJFLvni/XDHex+EpjUoORmdoBTrzC6H+/De6hed8EkDy3Q7iZcNWMJTKS:5Dp/7SX2+Y5EqoBTrzC6UDe/Ti7hNbqs
MD5:	78A8FB0DE49431BB85499463A6652B9C
SHA1:	81F3CAA095083D148937E91503FF0FFBCA26653D
SHA-256:	A6311D189C8A7F4D09D3F1B4D8C2CA9598432849B4D9F7A61A77461E504D6D35
SHA-512:	3C2D1111B23AB1CD9FC119FA600CB1B1AB3905FA546E8A5AC326A5F8C68EDFCB645901851C8999C5536CDD26A7E2B6055E3AE4F44A25DF97F6A34626B3720201
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/comments-3f4cc7ef7c26c8dabbd6.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[64],{EcvJ:function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return c})),n.d(t,"c",(function(){return s}));var o=n("Jqp9"),i=n("wXC7"),a=n.n(i),r=Object(o.css)("background-color:",a.a.color.gray50,";border-radius:50%;height:","26px",";width:","26px",";max-width:unset;object-fit:cover;"),c=Object(o.css)("min-width:","26px",";width:","26px",";line-height:0;"),s=Object(o.css)("background:none;border:none;color:",a.a.color.linkColor,";font-family:",a.a.font.franklinBase,";font-size:0.5625rem;font-weight:",a.a.font.weight.medium,";letter-spacing:0.013em;line-height:normal;padding-top:3px;text-align:center;text-decoration:none;text-transform:uppercase;width:100%;&:hover{text-decoration:underline;cursor:pointer;}")},GUXu:function(e,t,n){"use strict";n.d(t,"a",(function(){return v}));var o={};n.r(o),n.d(o,"actionClass",(function(){return f})),n.d(o,"secondaryClass",(function(){return b})),n.d(o,"defaultClass

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4164
Entropy (8bit):	4.390112888346981
Encrypted:	false
SSDEEP:	96:11oPhoWMVfbAc28ITfxnaXZOXEECCQ49wOwMpS1:zoJoWMZsnuHC0OwMA1
MD5:	95B36F6F5DCEEC6B8E46B31A5CABCCFC
SHA1:	DC5D950430B2500352590304ADEC833807273020
SHA-256:	D31FC3FA1ADC948CF075B2A5A4A380CDCF93B1B99B8796A005C7F6F4057F2254
SHA-512:	49064D6C7B07FFB48D7D95D77B25712EBEAF7023F600623E63FD34E761AC8244C287EFC48355084A3B8D46F683FDC003704F1244E00143ABC0EF3D5639A8AE45
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/athletic-logo-8898f51e86f8fcda54cf9db8031db0d8.svg
Preview:	<svg width="350" height="49" viewBox="0 0 226 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_182_2565)">.<path d="M56.556 21.9582C56.8677 24.2738 58.6649 26.3578 61.2713 26.3578C62.979 26.3578 64.5938 25.6329 65.4029 24.2234L71.4645 24.851C69.6241 29.3044 65.761 31.3951 61.1817 31.3951C55.0306 31.3951 50.4049 26.5927 50.4049 20.2332C50.4049 13.8737 54.9411 9.07129 61.0889 9.07129C66.7459 9.07129 71.8657 13.0112 71.8657 21.7333V21.9582H56.556V21.9582ZM56.42 18.0082H65.6251C65.3134 15.9174 63.5593 13.9777 61.0889 13.9777C58.6185 13.9777 56.8677 15.7798 56.42 18.0082V18.0082Z" fill="black"/>.<path d="M162.583 21.9582C162.895 24.2738 164.692 26.3578 167.299 26.3578C169.006 26.3578 170.621 25.6329 171.43 24.2234L177.485 24.851C175.645 29.3044 171.785 31.3951 167.206 31.3951C161.055 31.3951 156.429 26.5927 156.429 20.2332C156.429 13.8737 160.965 9.07129 167.113 9.07129C172.77 9.07129 177.89 13.0112 177.89 21.7333V21.9582H162.587H162.583ZM162.447 18.0082H171.649C

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 312x312, components 3
Category:	downloaded
Size (bytes):	34555
Entropy (8bit):	7.974075978962824
Encrypted:	false
SSDEEP:	768:5pqMcyyJjX5jPPKfxaZcBV/xxqTMiGmiEy26UV0c5btGlQS:ey+pnKfQZoQTMvrrrlV
MD5:	AE45930D17B73078637E73C37F79B0EC
SHA1:	435C3CD0C6D9EF7376DC9611FC9AB766E770F3F4
SHA-256:	4A3D13AD55F032F8026C2739C122B79AAAE70B78E8710C31E1A0AB62B5ACC6CA
SHA-512:	2D9AA684A02B3553E2921F4FAF2E5DA56F380B0D62AF69D9D77D3A58CB6446F17A989E303B7F3028E8A102DD467B2B20F3EB7EBD4E8D1AD8021339866FFF5DE8
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/cooking-image-6bed8f56dbeac63d2d9946ffae981eb6.jpg
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................8.8............................................E........................!...1."AQ..aq#2...B...3R..$Cb....Scr..%4....................................7.......................!..1."A.Qa.2qB...#....3R....$C............?...d.#4.1.;V(.D. ..l..+y#......3.Sn...8O.P..+.H...)*z..r(...@I.4./.:.`j,...6..R....+..v.mp..0Q.A ..C..t!...-......j{.COc!.Gv.#..7.k.0...2.3.4....~........y.......2Q.#)......(P...;..cP..=9...@q .......).......G"...q.j...(.Gm.;......?I.\\.`...\.p..V..y0...........e.d,r....Mx.)...G......J.l..#.r?ZR...\|.j...t....^.8../..s....jK.\|..rJ.08.`[..H@.....:..bi.Q...[).!.$....>$h.:.......#t.......8.n...I....fh.....7.H.P.\7uZ.l.....3..5/ .....I... .$..q@..T#.=..K.q@......Z.gQ."..pN.o5E..I....).UQ..Y;...s..$d>x..q@l.....}v4.@:.......5.@..1..]...........>.n.k..#L......L...C.Ia'...4....ZH..1.5..dU\.....

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 583 x 583, 8-bit grayscale, non-interlaced
Category:	downloaded
Size (bytes):	5743
Entropy (8bit):	7.568339659090029
Encrypted:	false
SSDEEP:	96:1xbLxyxMxExxWxx7xRx0xxxsxOxxxzxxuSxIxE/qarXy6nex4TlXz8xlOCtDIAJX:1xbLxyxMxExxgx7xRx0xxxsxOxxxzxxo
MD5:	97B9FAA1D1B49453F742F35E2B010F96
SHA1:	AF7F22FBADAEE7E9704889495239BCE3A880F1FE
SHA-256:	8DD8D471FDE82BDFA2E5D65AEADA2E6897A6E3C30AEA9AFEE629AC68A847EDB6
SHA-512:	FCB686E57E8ED7A230E33B2D368FF7E9E9DFC23F58D50D0FC5B141BCFF5CA6E7838E12A7193C3687FDA9DA58F3FA94C54B2522EF3624A8FC05BB67C8DA986701
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/core-news-download-regi-3421d050601d15d3dde1a842c1bfef2a.png
Preview:	.PNG........IHDR...G...G......(.+....bKGD........(IDATx........q....D....V....l)....j......z...k.&.{.W.j.....K..<Y.H....Rm.R@-&BU..P.HB.3...BN.}........'{ffg.{....\&.B=......8"pD.8"pD....A.....#.G..#.G..........8"...8"R..e:...%K.CZ...........p.#...G8...p.#...G8...p.#....G..2..Z.:.....6...w4.w.@oW...t..h..G8...p.#...G8...p.#...G8.QJ9.....C.B2...?.QG).m..#...G8...p.#...G8...p.#...G8...T@.5..5o.nb.G8...p.#...G8...p.#...G8...p.#..V.d.....Ah.B....#...G8...p.#...G8...p.#...G8...<..#d.k.c..R=.(9.UH...y.p.#...G8...p.#...G8...p.#........Qh.:o.l.9(^..W..(..G8.U...p.#...G..#F.G8...x.G..]GA.{{.$..2..ZP93...v..p.#...G8...p.#...G8...p.#...G.9.pQN.H.....6).N.H...G8...p.#...G8...p.#...G8....p.5+.u..G6........a.q.#...G8...p.#...G8...p.#...G8..#?5..>..M.......).;.*...p.#...G8...p.#...G8...p.#....G.)&..i. I...D.T......G8...p.#...G8...p.#...G8...p.#.....A%......$...L..T..p.#...G8...p.#...G8...p.#...Gf8R.....jC=C.u.....&.\|%.q.#...G8...p.#...G8...p.#...G8..#....2^Z.uZ.TA..C8.d...

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56331)
Category:	downloaded
Size (bytes):	56517
Entropy (8bit):	4.717598476867252
Encrypted:	false
SSDEEP:	768:8EC31sPizPq4/vBUAUHJvkQCg/xMQyjJrX759sGZQz5:8ETPUC4/pMHBBC8gd7nsDF
MD5:	164A58DCCA37A5B00C22E06EE8E2FC68
SHA1:	72FEE61A5A92CDC35B77313F3637A117310119F5
SHA-256:	CE67CD6665E835604C7A650EA355D41857DCD2284618B61D82D252DCA0ABFE5D
SHA-512:	BBBA693B84CB838BFA118F3243A4FA77AEA29D3D1D686C93A1D022EB271BC3DFBF014F0A30B005ED9ED818A3CC440F7ABFBB7E73B3B5B3A6024C692893AA7D64
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css
Preview:	/!. Font Awesome Free 5.10.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	194
Entropy (8bit):	5.204331065227855
Encrypted:	false
SSDEEP:	6:CClHqXNUG6PQAVKgnqPCWlKRkSL+EwTrkuw3t0w1:MXNUGaQLNtlcL+bTHZq
MD5:	F1475DCB4FF69EBE0819387A0153F9C3
SHA1:	52A85A58C3BF1E48AF7A8B18DA60F5F0D42B009E
SHA-256:	C2ED9DF9770DEB2A1F3C12906F033BD184431E5F83551B0BBE23879CF4DB646A
SHA-512:	3344CDC01B6AF7F2C60EFD2D51B2CC433DCB3B1F3175437338B9C18AD964EB7D63324DEB265E3C4FB06F86641BE66EE9CBB76DA83B848BF49B58E7AE0C971642
Malicious:	false
Reputation:	low
URL:	https://edge.microsoft.com/parakeet/frame.html
Preview:	<h2>Our services aren't available right now</h2><p>We're working to restore all services as soon as possible. Please check back soon.</p>0amhvZQAAAACKJYBxt3xPSYNib/fF4uouQkwyRURHRTEzMTAARWRnZQ==

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4643), with no line terminators
Category:	downloaded
Size (bytes):	4643
Entropy (8bit):	5.202742548182845
Encrypted:	false
SSDEEP:	96:GbJ0U8jqkSfDw5g51b5CBlE7yows1QqmIHf:GbJ9ky/1FuCjw+Qqv/
MD5:	056AAF469FE887A958EDAE8AA31A7E5F
SHA1:	F640DDE6CB75C6C0521A47F7293992FD236B9E83
SHA-256:	A6A464E55B66DA4EA128368C807CF47F6B05C8E939C8CA27A01E30E41F57A914
SHA-512:	705F4A1C174E3F9A8C92142D7146AC230AA042B112027F43F9302080043BAE1712D95821C035FA9571AEE7F194691CF8F5F175BF9A966F78CE0482134EF8A17C
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/tag/85a1ebf79602421aa1c2c2f24d32cb6c/nyt.js
Preview:	"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function(l){if(void 0===l.api){l.api=null;var n,r="unknown";l.bootstrap=function(e,t,n){void 0===n&&(n=!1);var o=function(){window._brandmetrics_initiated&&window._brandmetrics_initiated(window.brandmetrics.api),t&&t(window.brandmetrics.api)};"unknown"===r\|\|n?(r="strapping",i(e,function(e,t){var n;if(e&&!(null===(n=window.brandmetrics.api)\|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isReady:function(){return!0}},o()}})):o()},l.register=function(e){o[e.id]=e.ctor,n&&n(e)},l.getModule=function(e){return o[e],o[e]},l.defaultOption

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 708x446, components 3
Category:	dropped
Size (bytes):	41953
Entropy (8bit):	7.97851540698083
Encrypted:	false
SSDEEP:	768:lSP5T7oc2CssNA/gZzc1eZ8teVm6Xj9TXLij3wMDD9QbYs8Dfqoc4Mq/WbHqgN:lA/YAKgZzcoRj9PibTDJLDfqN4pWjq+
MD5:	EE327607976B77593F1D9B44D6A5C9D4
SHA1:	5291898D28195251BFE7D7051A8E76E378D9D7C6
SHA-256:	D936D9754F9D669B739BED117C88B9DCCB3AED9F9D4CB2ECF5703023B4F6B842
SHA-512:	84B376462216BFCDA804C8D29E24B9EE9B4DB06E8D2936957C235EC2EB5A54AA1F938B8E5DB00BE10FE3E07DA51BAFF7012C9CC150A7A6D438926227DE7AF890
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|.............."..........3................................................................LU\....`.....;.h..>V.40..N...8..\..PV...x."#..k.v. ...}.j.....0i.+!5..?R.6.9.+...kw..=&7........y3!:.j` .:..ni...{q..$.i.4'.8=...TI....m,3...........U,...&....\|r.oU.+....4...>.mx\|A...E.......V...M..+.F4.[d.%...i....v....... ..........P.3..Q}60..Tx......r.W.:...>.e5.4..^..J)..>T..u..o'F...>...#3iJ...WT..d.Np<+.....k.oo.>....p.......... ...2.......+....R...p....5..}.]...f...:..j..L.)[0\|JD-.u. .).".Z..\|,jn .X...p).....{.l.J.....k.2z:.UG..i..]gtU..laP.......y.q.t..-.X.tw1.FVZ........'..~KWyKdW.&.x..b..P.....T.. ......G 0....`D...R....[ZOMY..a}#..f....$=ib.n.......VZ..t`..{.\..SL..4.U...v-h....W'..V..+5..W.Ri...2.S.W...;....5.w.cm...f....i;:.....gz/1..O...T^}.8"O.A.....v,.4..,.v...&..I....3.41....\..".......z

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48575)
Category:	downloaded
Size (bytes):	516892
Entropy (8bit):	5.457199905871428
Encrypted:	false
SSDEEP:	6144:+MAUIUSWMAPP6JsN6FYQUtfyMNxJ93OKM6Zhbz324v7s:+IPPcCQClNxJ93Vhhf3nTs
MD5:	9FC4078E71733F8A49085B949F9FBAEA
SHA1:	6D90AE323C45B95FED99800704E99C9BE6F18DD5
SHA-256:	E0F73DD8B17F87114DF92DB3BA62CA85304EF76EC98B0DB9065D7364A6112A5D
SHA-512:	FE0345DEE14A9CF1289DD7832F5AF248C57EEDF4A13639C56F27C52945EBE19F8456F0CF8019A74AD5C84D4C05304D388F81DF82F6F56C72091288C98FC83FEF
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/video-static/vhs3/vhs.min.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.VHS=t():e.VHS=t()}(window,(function(){return function(e){function t(t){for(var n,i,o=t[0],r=t[1],a=0,h=[];a<o.length;a++)i=o[a],Object.prototype.hasOwnProperty.call(s,i)&&s[i]&&h.push(s[i][0]),s[i]=0;for(n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n]);for(l&&l(t);h.length;)h.shift()()}var n={},s={3:0};function i(t){if(n[t])return n[t].exports;var s=n[t]={i:t,l:!1,exports:{}};return e[t].call(s.exports,s,s.exports,i),s.l=!0,s.exports}i.e=function(e){var t=[],n=s[e];if(0!==n)if(n)t.push(n[2]);else{var o=new Promise((function(t,i){n=s[e]=[t,i]}));t.push(n[2]=o);var r,a=document.createElement("script");a.charset="utf-8",a.timeout=120,i.nc&&a.setAttribute("nonce",i.nc),a.src=function(e){return i.p+"vhs-"+({0:"audioControlsV1",1:"hlsjs",2:"kaleidoscope",4:"plugin-cover-vi",5:"plugin-end-slate",6:"plugin-nyt-analy

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5913)
Category:	downloaded
Size (bytes):	5971
Entropy (8bit):	5.305421301805846
Encrypted:	false
SSDEEP:	96:rkfBheWOP4JtRkqW2swxYdi0BHUuK6J40tKbOPhuRqz:rkfBhHOPYtRkQMRUuK6JdtKbOARqz
MD5:	C79BF57C8F2EC2A2D41679B317945B1E
SHA1:	3EBD942FBBF4F32C94602BF8E589F949E1AB73B1
SHA-256:	52427D76F8BF2C942944E1691E41C7BCA57C028325E87A05CFEC83D5F1A74D30
SHA-512:	F074A2186401BF770B5565E0704D791A1C1F6C8B9DDBAE77D9B3AD6304FCFD361C3F8806777C4F77BE47189E1AD55DE8D86A4F258A72A710674365AE6648BA2D
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/carddeck-5910608c6db84b2a3809.js?_sw-precache=c79bf57c8f2ec2a2d41679b317945b1e
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[60],{"0RI2":function(e,t,n){"use strict";var r=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=r(n("ALE8")),a=r(n("MzAb")),i=r(n("pfWQ"));t.default=function(e,t){(0,o.default)()&&(0,a.default)((function(){var n,r;null===(n=(r=(0,i.default)()).updateAdReq)\|\|void 0===n\|\|n.call(r,e,t)}))}},"5OSB":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.hiddenA11yAnchorClass=t.adContainerClass=void 0;var r=n("Jqp9"),o=(0,r.css)("position:absolute;width:1px;height:1px;margin:-1px;padding:0;border:0;clip:rect(0 0 0 0);overflow:hidden;text-align:center;&:focus-visible{background-color:#fff;border-radius:3px;height:auto;width:auto;clip:auto;font-family:nyt-franklin,helvetica,arial,sans-serif;font-size:0.6875rem;font-weight:700;left:50%;padding:8px 8px 6px;transform:translateX(-50%);top:5px;}");t.hiddenA11yAnchorClass=o;var a=(0,r.css)("text-align:center;height:100%;display:block;");t.a

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 1200x538, components 3
Category:	downloaded
Size (bytes):	302372
Entropy (8bit):	7.915461283488376
Encrypted:	false
SSDEEP:	6144:ydd5WRbfscvjWalB9anzUSBMGRNO0F0ljuHD+xODNiS9GpFcbLDchr:aM5vj/90926o9lSDCGSrhr
MD5:	D0C49C3C7BD6560D3564AE6C08A6463B
SHA1:	4B41A780045436A1353B9C6C5A899F02B4A9091D
SHA-256:	AA905A73A35A33D9F1E2121EBB71A08979162B022CE89E79E1C0732C66752CAC
SHA-512:	3447752A5922D78850C32BB47C7B16B86FDA7A661E13F55CC44AB666AE6A9B10E74E2E35C97FED4F4E9B03829487A9070AFAD66F632018488DF862334DCDC847
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16912288737783888581?
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(...

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26504, version 1.0
Category:	downloaded
Size (bytes):	26504
Entropy (8bit):	7.992523564635897
Encrypted:	true
SSDEEP:	384:v1DnK6HioKKlUNT7JH83edsIPP7kNa+a0bu+YJYgA7RDokW0LK1C3paQrlbG8z:vVLi31NXJHieWIPCa4JZVW1CjlS8z
MD5:	6131CD77B6E216C7693ED925F4309FFC
SHA1:	5D9F75D296465779DD988B62CE0A839F629790A9
SHA-256:	B32E3879C83AF441E675EFA49587CB894BDD3C10420475F79879FBFB7A69766B
SHA-512:	D38EE4E4E5DD91FEEC4897A85D05609561FF3667392D225C06E184D1065E007E48DD2BBB1088C5F4D111402F772DF6FA79EDC387DA7880893A219DE0F71A67EF
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/imperial/imperial-normal-400.6131cd77b6e216c7693ed925f4309ffc.woff2
Preview:	wOF2......g...........g)............................n.`..~.F..b.....L..x.6.$........ ...............G....i......Awp..H...8....v.....yGE.L.I....9A.pV.r7M.........-$....!6.0II..X.@g......F#6.x..t.3....0.:.;..'.@;......#^......^g..j...CO<i....,).`.1CA.M..u..z..(.....Vh...a..'..[.Iz...Q/.0.z/.......]f#b......U.sny.. Uh...M....KUv@(....A..K)..7..k..&..,...P.].5.$.......h{.?91.j...?c.g...pB:.Jk....C@....@.G..6P..H...../.Y....e...(....H......I....E.._...x.T%5......u..O......>.T....\|....[#..S.)_.!~.{M.@ZN...!rI...+Ja.fm..4@sk0..1X.......,.Q...RR.D....W.Q...W......0^....oK.E6<dO..w.RBdg#... ..sUd F.?..=q...o'?.....6....)T....?...9.....5....l.........jMOMMMMM}5...[...X..A~.{....dN....9.....?.^......g.. !...X...j...p.......c..l3WZ..!+./4mn-.n}...IW....u....n.%.A.A......._.k....l5...#...oX....;jEC.bZ..b.M....L.(.B....Z3.n.O.X.B..........A.= W.9v.d..Q..J..d.++d........6{m...}..XyLIJ...K.F.7o..h....j$.....;.X.....E. ,.6.u.2...z..FbW\|~`..Ct.5.\...}

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2468)
Category:	downloaded
Size (bytes):	2529
Entropy (8bit):	5.03305387553973
Encrypted:	false
SSDEEP:	48:lD58IoUK+WyYDas3HniHpVlwniH4ULLeniz5AB5uGx7foqeTJraZ1Uqxgr3IQ:eUK+4Da2HniHpwniYULLeniE5u0fotJT
MD5:	9656013FBF712008DC1C4BB2D1732352
SHA1:	ECC6AF65B1F9D4B1FDFD592E30A6EA13B6040FCC
SHA-256:	1FA487FE49A68BE49AF475F9A11BFF1EAC1E24A7C810031C75F21441042CD118
SHA-512:	F73BAD71D0AD962AED7EE872945EAEB2A0E712BC01EF5BBD5CC7B8FBF3D7E5C4B0610B447B83CBF813143D5E6493A7E8A338A55C9C7BF38282D8D58D06A9161F
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/InsiderLogo-c49a1384c9b2a921a374.js?_sw-precache=9656013fbf712008dc1c4bb2d1732352
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[30],{Wft1:function(c,l,o){"use strict";o.r(l);var p,t,a,n,s,e,d,i,h,r,V,M,v,g,u,w,C=o("gcR/"),f=o.n(C),L=(o("q1tI"),o("KhZS")),m=function(c){var l=c.className;return f()("svg",{viewBox:"0 0 240 72",xmlSpace:"preserve",className:l},void 0,p\|\|(p=f()("title",{},void 0,"Insider from The New York Times")),t\|\|(t=f()("polygon",{points:"0,0 0,68 12,68 12,12 0,0 "})),a\|\|(a=f()("polygon",{points:"101.2,9.3 109.8,17.8 118.3,9.2 109.8,0.7 "})),n\|\|(n=f()("path",{d:"M109.8,21.3l-9.4,6.7c1,1.3,2.6,3.5,3.3,4.3c0.9,1,1.2,1.9,1.2,3V68h12V34.4c0-4.3-1.7-6.9-3.5-9 C111.8,23.6,109.8,21.3,109.8,21.3"})),s\|\|(s=f()("polygon",{points:"180.8,26.9 191,43.9 184,48.9 184.4,49.6 197,40.5 201,37.6 191.3,21.1 "})),e\|\|(e=f()("path",{d:"M189.5,62.3l-8.1-6.3c-0.5-0.4-0.9-1-0.9-1.7V27l-12,6.6v20.6c0,4.6,2.2,8.9,5.9,11.5l5.8,4.2l20.6-15l-0.4-0.6L189.5,62.3z "})),d\|\|(d=f()("path",{d:"M18.8,28c1,1.3,2.6,3.5,3.3,4.3c0.9,1,1.2,1.9,1.2,3V68h12V34.4c0-0.9-0.1-1.8-0.2-2.6l3.6-

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24184, version 0.0
Category:	downloaded
Size (bytes):	24184
Entropy (8bit):	7.991393750981752
Encrypted:	true
SSDEEP:	384:7GZPpZXxvEIPfwhZtZewE70CQiQbPGGWV6TC79+XUt/RU78Ji0GF8o8/zwMP0joA:7GZDBdSZtwwE704Qb+AW7gktZxJfyeGR
MD5:	FDC7CAD17DEEEC2DB1FE2F9F8C0520ED
SHA1:	1E59F4F935825301676AA1DAD90BB788E23209F3
SHA-256:	1A48C22120FF01ABB38156633970ADDEC986B69AF1E59BFAF9B8ABB6673F78C7
SHA-512:	3B721805AD4F5DC1410931AA15A83453FECFE03F2A0A10A1AE3EDDF67265E9361C04EEFDDB53041A6F0AB7597CC9238C0BB553D061D55E3F014A864E8056D89A
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/franklin/franklin-normal-800.fdc7cad17deeec2db1fe2f9f8c0520ed.woff2
Preview:	wOF2......^x..........^...........................>.f.`..x.<..b.....P..).6.$..<..`.. ..g..1..........~w......w..P.......6..C."e....T..>l..!5...HGm.-..&.....P..5.D@..N....x....iDC..t.F..S....i}...IL.:...`b.7..x...dv$...y..._...G...T.a...e..6".e........o.... ..R...z..Sg0.SA+w...].#jeO.....?.P..+...I...2......a..F..I-.....2...k..e........?o[....c........."&]..x.....?.....JER.,....E.R(.$t..[.x....6..U.8...@..Th...Dh.+0.sb..bsk.oW..............._...4....r..*....R..t.G.zj..2,.-a8..4...aj!.NQ-....?..(.11"Uh....q>2?.2YrHH^....KG....r.0...$o......R.+$An..ye_...~qf. @..~J..9......Z.@I......C.o....`25.~.GB'V2q"f..u .\.p.l%.3.Q...Y..!.)...Ln.6l7.$WrQ........3.(....S.;.<...[..I{.@....k..........X.....Q......U/...?......N..-..T.;moo.../...@.qfIT.'.w\|NB....~.....Ds..#..o5/~.b.z}../A.FN...dH..#.=..F.E.P....V.....G.-R...yr,u..S.s>.. j.~..............N.83.(C.Z4..Z.)g..I.,..E.q..o2..Y.D.M8....G.%.n.^x.%.....{M..=..\P&.AC......[Y..\....o..T9UN......~Z_...M`.P.....R.

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	880
Entropy (8bit):	5.481355270285456
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3nsRHh3rAjQKehGbOciZ5Jkpp7AbpCx0L7n:2ddATLf3qB3mfXbjiZXkI1Cxy7n
MD5:	61F5AA96FB4CD2D84623EA97B5EC005E
SHA1:	4B37B35A29B58E06501C12A5185C61C67A1F70F2
SHA-256:	19195533133B2D5CF2CC8FC1D489120E453DD814075B3A95A09DB6C339C6D1D3
SHA-512:	75E69D645FB680C71D3887F59E6D08E94660EA5684471204FA226354ABBE88B5ACB5DE0C2FB0601351E14BBE0A7BACFB808FD7EA1B50BB158B97F97797A425CA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 25 25" style="enable-background:new 0 0 25 25;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st2{fill:none;stroke:#FFFFFF;stroke-linecap:square;}.</style>.<path class="st0" d="M12.5,24.5c6.6,0,12-5.4,12-12s-5.4-12-12-12c-6.6,0-12,5.4-12,12S5.9,24.5,12.5,24.5z"/>.<path class="st1" d="M12.3,15v-2.5v0v0v0V10V9.2V7.5h-0.7l-2.9,2.9H6.6c-0.4,0-0.7,0.3-0.7,0.7v2.9c0,0.4,0.3,0.7,0.7,0.7h2.1..l2.9,2.9h0.7v-1.7V15z"/>.<path class="st2" d="M15.3,14.4l3.7-3.8"/>.<path class="st2" d="M15.3,10.6l3.7,3.8"/>.</svg>.

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8834)
Category:	downloaded
Size (bytes):	8887
Entropy (8bit):	5.448798676819256
Encrypted:	false
SSDEEP:	192:9wyI5kdbHXHVljpQSw3iHq+KQ/TF12WmxqP0dkOJXmsirgKd+70FI0CIavFC+jin:9H1HVljpQSwWKQ/TF12WmxqP0dkOJXmV
MD5:	BF88F3EE49D28FAB903EF277E816BAB1
SHA1:	1714416E5EB0C33A5B59279951827ED6C1BE6A9E
SHA-256:	263D937702F63B25BD52C30BBA564D8FF83A787D97961F0BF367C8160D1AF7ED
SHA-512:	8968163C9DFE4383C380F60FB08BE130080438E6557826FFAD9476491A4E63D49623B97DD87DA3F5E2A221136147AB41AC28FC0234C7D7C8C8892E8F1E4172B2
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/184-7a1dec688f12c0accc59.js?_sw-precache=bf88f3ee49d28fab903ef277e816bab1
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[184],{EOa1:function(e,n,t){"use strict";t.d(n,"b",(function(){return a})),t.d(n,"a",(function(){return i}));var r=t("q1tI"),a=Object(r.createContext)({emailAddress:"",subscriptions:[]}),i=Object(r.createContext)({refreshProfile:function(){}})},Ke7S:function(e,n,t){"use strict";t.d(n,"c",(function(){return a}));var r=t("QS0n");t.d(n,"b",(function(){return r.useLocation})),t.d(n,"a",(function(){return r.useHistory}));var a=function(){var e=Object(r.useHistory)();return{to:function(n,t){e.push(n,t)},getState:function(){return e.location.state}}}},XjtR:function(e,n,t){"use strict";n.a=function(){return new Date}},ZAcT:function(e,n,t){"use strict";t.r(n);var r,a,i,u,o=t("gcR/"),c=t.n(o),s=t("q1tI"),f=t.n(s),E=t("vftj"),l=t("MShG"),I=t("fTxn"),D=t("/Efl"),A=t("f63j"),R=t("bzjU"),S=t("wYF2"),T=t("YTjG"),O=t("siIh"),y=t("V7WW"),_=t("SD/l"),d=t("5lfh"),v=Object(d.d)("div",{target:"e1waevr60"})("box-sizing:border-box;,::before,*::after{box-s

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x687, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	70660
Entropy (8bit):	7.997102730168224
Encrypted:	true
SSDEEP:	1536:7KXf9xdYuxVdBX6NKcoFQyM+jyRiJHk9xtvOgI4kbYK4a:AF7X6/yM4yYk9x1OsOYTa
MD5:	560FE1E8F777EBD733DC21B513318D49
SHA1:	2873C54118ED8BC5F92898A515CC0FD54497B877
SHA-256:	381E2619ED322647D7D7F9931CD7F75CB63AB3D2F8D2082E88FED3E5913F988D
SHA-512:	4984FE2481374D8EDF220005E7A848FE5E2705D98F469E1E6EB60F3CF17C35AEC414D92D5EDFB4D4FC68420C98FAE7F7BA7A8BE78E183E98D0E276A7636004C5
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-eu-terror-01-qwpm/05israel-hamas-eu-terror-01-qwpm-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF....WEBPVP8 ....p........>.@.J%..)'... ..M...f......;.......is..%=..9.~.......]........>........{.\|..............{..?....?....r?x..................._........K.w.............1...s.o.o.x.S...<..?..s....?..S./.?D...y._..n}..../.W.y.....`O4.F.3...'....X..<....?.XWGi.O2.W.<.M.U2r.9.....b&...).P....7x.3.....c4....0>......'. ..O....'.N...n..L.l..b.Na.!i.G.....r.'....ri.....1/...M....1!<..A.v.0...r...Vk..#.....!..Hu......w.....@.. ..dl...bd.Y....Gy.A+....Z..U.D.C,P.......5ZB.E......l.....[..UpB.4BeX0{...s..$...f.X..].\|...!CO..5%..`./.{...k.7...AM. E....y..N.)E..;...=.k\.'{,.T.............4I#....c.r....a..o_...(.<....F.~..../.N.".BK.......h...'..}...l.....g. .'.A..S...=Z...+.M.....?.T%.xx/\|v....*..,.L5D..d.vv.\|L..m....mK.O..X].......K.YfK..:..[....I.3...[...Ek.!..&..S.v...[._G.x..Z.8.....].B...aM......r.....Ab.O.>}W0....a./D..+.VE..U..s.v5....d.q.._..M.%^d.M..0 h.\|E..]..)...l.hl.)....2B.@.4....F.?u.U].N..y.k......!}.c...'..L/.z.....h.

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	9231
Entropy (8bit):	4.139864798128189
Encrypted:	false
SSDEEP:	96:8PC+vrTg+9yDmceGCvE6BWIEjml7qYDz5mjTBCyZYomj/giDtOJSvwn3pVP7mUyI:MT198QBWP+7qTBdG/vOJSyZVTgNme3YF
MD5:	B787E3D6003409A1E48A30E0600CDB37
SHA1:	F4A8D93AB6A380B13BC4C7E0613DE184254FA56F
SHA-256:	46DB5B462E063BCD60EDFB6A6EFA82969E1D1FBB8812259BC70B337AFE026755
SHA-512:	6F2926EDFD831B01A6398DF60DD789366D2FC37FEF9EB08DB6FAAE79C46FFAAD81C872129935D43496956C518A73E04D8EC2AAF69AD487AF26FE150211185988
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/cdn/ET/ad-tracking.js
Preview:	/* ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: /./ NYT Ad Tracker :::::::::::::::::::::::::::::::::::::::::::::::::::::: /./ Version: 1.0.1 :::::::::::::::::::::::::::::::::::::::::::::::::::::: /./ Team: Creative Technology T-Brand Studio ::::::::::::::::::::::::::: /./ Last updated: 07.07.2023 ::::::::::::::::::::::::::::::::::::::::::: /./ ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: /...window.ET = function () {.. let prop,pos,clickThrough,ctx_id,lineitemid,viewport,orderid,creativeid,uap,pv_id,numberOfSlides,currentSlide,indexTracker,subject,postMessage;.. try {.. return {.. / . "app" is used since this was the mobile app method we used . in the past and post message for web in the past . */ .. "appmessaging": function (data) {. console.debug("trigger app tracking: ",data);. try { nyt_et("send", data); }.

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41664)
Category:	downloaded
Size (bytes):	41737
Entropy (8bit):	5.335664170016531
Encrypted:	false
SSDEEP:	768:6qNRYr6wgt3ZlEsQqnTR+S12w1s141seIIK6GTvI5vqoJR4fII2+d:6qvYr6ZnJk514OIZL5vdCAa
MD5:	D091CB3780CCCF4DDBE227B80E5ACC89
SHA1:	2FB4624631A0F934B5D421EC979F5A7F96E3D97C
SHA-256:	1A0E5514D5AE0802158106575DA82042AA2E8DC111C1D8C77B2A20B3FD7473A3
SHA-512:	3C9C353AF3166A9ADF818FC62047F29BD756E30151369CAA22845A119390081D5119B65902DE82183BB42D6E5E5AD1FA07ACA0396FB1AA6D3BBF8E778154250A
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/account-0d5cbed5aea38cde65b4.js?_sw-precache=d091cb3780cccf4ddbe227b80e5acc89
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[41,111,112],{"+wx4":function(e,t,n){"use strict";n.d(t,"f",(function(){return p})),n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"e",(function(){return b})),n.d(t,"d",(function(){return v})),n.d(t,"c",(function(){return g}));var r,o,i,a,s,c=n("VkAN"),l=n.n(c),u=n("eFc+"),d=n.n(u).a,p={ACTIVE:"ACTIVE",DORMANT:"DORMANT",FREE_TRIAL:"FREE_TRIAL"},m=d(r\|\|(r=l()(['\n query getUserProfileByToken($token: String!) {\n userProfileByToken(surfaceCode: "manage-preferences-page", token: $token) {\n regiId\n emailAddress\n newsletterSubscriptions {\n productCode\n productName\n productIconUrl\n latestNewsletterUrl\n frequency\n activationEntitlements\n deliveryStatus\n }\n marketingEmailsPref\n }\n }\n']))),f=d(o\|\|(o=l()(["\n mutation optOutByToken(\n $surfaceCode: String!\n $productType: OptOutProductType!\n $productCode: String

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 960x541, components 3
Category:	dropped
Size (bytes):	264486
Entropy (8bit):	7.890550422986743
Encrypted:	false
SSDEEP:	6144:vgoqy/LqY3Vyno8dLy8Ct/Qw/hjtKtkjs:vFqkqYono8dL19wZjEtko
MD5:	360A34E4914AF70D7B6E2F236A797BF0
SHA1:	DFCE051959F9C07BBB00565E6242F74ADC9D0A06
SHA-256:	50456D79BB4AC577CF7FA9909061C408D67DA8740A032E7888F0D39E45F607CC
SHA-512:	01347CE10E01720BDEFAD7801BBCA46B75B4A7A20432BFBCB5974BB8E3C28D175007178274DD4D2701491EB466180E8A2474B226E2119B07FE669B333C82277B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K...$.<7E......%;$.....7..$.P..O..........k.F......t9}..9B...L..q...SP.....s.J.U...ly....8.x.w..>...d#d.....Buz.'7\|...?{..:......".J..............?.sT...m.e_..N..2D.$`...q..4..}......s...N2......8..YF.k.O"..?R.i......y..?.n...?........y..`C.T.....p9.....G<...q]..ZA....'..+:......[K....VU...z..........d._.....nCzs......5.9.i;.oM.F.7..5........Xgp.o..z~.B.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39208, version 1.0
Category:	downloaded
Size (bytes):	39208
Entropy (8bit):	7.994161182359584
Encrypted:	true
SSDEEP:	768:lLqDvxYUXJWr5447iT8lqV7hEyR4gpi2ggq3o4johbhidHbpHj/:lLuxYyWrGWA8IV7hOOwkifj/
MD5:	C08B0AB8F163C9B8563E7B99B5DE737F
SHA1:	0B04989A5AA89D9437780E3B163240B9E717A0DA
SHA-256:	5D55CE9C3AC7A5F37A38813A2DEED310ABDE9E63D0D36912E2E5E59751CA66C7
SHA-512:	7D37386970B0D18E129FF4B03FEE4132862FA62AAFA125F8A8EB6A919E664790F6BAE52A15F498B7F5A60C9348C0ED954CC40A16E3BAD40CC55669455BB69DFF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v32/0QIhMX1D_JOuMw_LIftL.woff2
Preview:	wOF2.......(......+...............................Y.....z?HVAR.#.`?STATn..r/L.....L..x..6.0..&.6.$..h. ..@..'..[!.q.7w0.\n.L}s.m.z2n...._w.j...C=c..F9...S.....I.....-.)...v..&J...4.....^....?..bK..-.F...gI...(....m...I..Y.7.)..@..m...P./..B..g9.i......w.J.M..I.....E{<......e....7...]dL.u=.N.p.DZ.v.........}...u9z9.6~.:..........Ld.#..........;R..JK.%\..-..3.%......[o.../....`...-)ia`Uc^.u.Y..F.^X .?._...k_.T5@dBF..1...Q;...=......!iD-u.[-5.[<........PDAtU..WuYxArA.!..>.....A.?..E.....$.e.[..!"v..c=D..E..."AD.n..3. f`W.$....b....;.<ryz8...[.y.N....1.dl.....^I..l..(@....b.....b.@..8..U.....y.g8.@f..U...w.+...{..5~c..3.(.8....Q;Ho:.LD....^..g..5.gr.{..6U.2O.p.~}...CK.-i..v.wfgId.DQ...2h&..@.=t.&..].l.O..fm1y....T+..R..}R.....\|...&.EA...e....G<{..C..'.....u..^...L.B.H..1!..?....M.9.o[..0.0....u..p&......;D..q..>.T!.R.X....e..:.> -.^K.i..Z+..."....g.>%R.U..i...e..`...}5...i...j~.)....;6kD1.....U.r.U....dT....0...........\._=m8K.V.?..d..k...&...s.+.

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.8698728513422216
Encrypted:	false
SSDEEP:	48:W46cFmEuBg+at1Z5RrntZRMlc1pmSjO1raWpm47n1GN/:UXBgDJ3jt3Sc1tjMrn0h
MD5:	C459746C056EF2A44D991C94C6A4F8A6
SHA1:	11B156B5B5D352EE825F26F8B4D60E082CD2A13B
SHA-256:	7756C0D16CA94BB7014AAA1A066402562E56C7D353D0F5F6CD621BB27CB2A4C5
SHA-512:	4BBFC0D40A79662B46EE486FC5004384D7B76D87F58BE056AC12F1E0945DA51D50F07C3E98C6E006717DE137104E52F9EDCB9D5BF4254330C7895F83A5419AEC
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .........%...%...................................................@ ..:%.`9%.;%..:%..:%..:%..:%..;%..9%.:%.`@ ..........................................................................8(. 9%.:%..:%..:%..:%..:%..:%..:%..:%..:%..:%..:%..:%..:#.8 . ............................................................:%.:%..:%..:%..k\..................................k\..:%..:%..:%..:%.@ ..............................................8(. :&..:%..:%...w...................................................w..:%..:%..9%..8 . ....................................5%.0:&..:%..S@......................MMM. .........///.MMM.....................S@..:%..9%..5%.0............................8(. :&..:%..wi..............jjj.........................................MMM..............w..:%..9%..8 . ....................@ ..:&..:%...v..............!!!................................................. .............xi..:%..9%......................:%.:%..S@........................

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=0ve4IDJUsd2OZC0HsNGu
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6312
Entropy (8bit):	4.974147889535223
Encrypted:	false
SSDEEP:	96:kGcd913zi3lz3zZ3zeibOWQ3zUaF6E4SFViG3OlEhanaz/3AE0kfk3TPA:kGEYH1NbOWCTTViG+l/albiE
MD5:	CA9900A6B1FF2883A90E0CAB932230A8
SHA1:	2B2BD6BD0D144A009CAE8C216C523EDFBC9A74D1
SHA-256:	4801AB5964740F32AC3DD378EFFA1790E719FEF304764C788C5D5F57300F60D3
SHA-512:	09A3B67DEEE7AFDD29E1D223CCBF673AC71FF4220C041D519595A858EDED9E26F5675F1074A77E697E2FF9ADEDA1DA530A4BE244C3FFB1B4714248DF6B2C70B9
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=ATH8A-MAMN8-XPXCH-N5KAX-8D239&d=www.nytimes.com&t=5672667&v=1.720.0&sl=1&si=7204c402-a166-4c90-81b3-1cf424d75496-s57hay&bcn=%2F%2F173bf110.akstat.io%2F&plugins=ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao="
Preview:	{"h.key":"ATH8A-MAMN8-XPXCH-N5KAX-8D239","h.d":"nytimes.com","h.t":1701800039780,"h.cr":"85f6621ca371324940c8588307abe54b1f947467-1ecf58e7-92a1ea73","session_id":"414e6fee-1b2b-4c70-8098-89c8f5ec6043","site_domain":"nytimes.com","beacon_url":"//173bf10f.akstat.io/","autorun":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":5,"sendAfterOnload":true,"sendInterval":2000},"Continuity":{"enabled":true},"PageParams":{"xhr":"none","pageGroups":[{"type":"Custom","parameter1":"nytAnalytics.pagemeta.PT","on":["navigation"]},{"type":"Regexp","parameter1":"myaccount.nytimes.com/get-started/thank-you*","parameter2":"Subscribe Thank You","on":["navigation"]},{"type":"Regexp","parameter1":"[mobile\|www].nytimes.com/?($\|#\|\\?)","parameter2":"homepage","on":["navigation"]},{"type":"Regexp","parameter1":"nytimes\\.com/\\d{4}/\\d{1,2}/\\d{1,2}/.+","

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	dropped
Size (bytes):	535
Entropy (8bit):	5.268375052083764
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THVDUnbvbUNqk0/+5Y2PmEGNM0vxTc/fCYKO+kFl+O:WDlf8Eg96bTI1lsYKO+kFlF
MD5:	2B3E770E02173A65C157D5F18DE45B74
SHA1:	FF96F380736E11AF16348E65CF9C767CC5E182D1
SHA-256:	B39458451C4144B45AC393F0B2482EA0BFC078EFE5D1553D4AC2D103591A7E7F
SHA-512:	7FC09E805414187BF230703D999D0D6A354C22A9C6C2FBF63878B3AA8B1516B2612C56E451A199BB40A5C6341271BFF19DEBC6F37816A850F9B983D1D32EF28C
Malicious:	false
Reputation:	low
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JC08uBeuqh9Cs_Zy4GgBqJgAAAGMOy_rrAEAAAvWAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAQIRqZ","size":"970x250","crid":"478431900","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"970x250","slotID":"story-ad-2","amznp":"19hks1s","mediaType":"d","amznbid":"scruo0"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"3"})

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 497713
Category:	downloaded
Size (bytes):	163118
Entropy (8bit):	7.9976271758196384
Encrypted:	true
SSDEEP:	3072:qwlkYUu6KnoRAPX9SjuPNJcoDCPWkvvAEVJAdHfxLOX/JhOc+V:/0IooNV2PPgL2GV
MD5:	E77D1F77A1EE60FFB19BB8A65E0C0914
SHA1:	B61BE2DF1F62AA6D5C58C1332F66C6C8592298E4
SHA-256:	7F9FE49D5A5A95CB1ED2FC48321E190DDDEC8D4A385A628FD7C904E658A6FD47
SHA-512:	677F0317332A3F5C28CAD0EF784ABA7E40E828BC5C23E92228B2251F3A5FAFF91FC434F2F5DABCC747B1DD329964E29330B8B4596BEA86B6D64CDFD48304A7C6
Malicious:	false
Reputation:	low
URL:	https://myaccount.nytimes.com/lire_ui/js/unified-lire.bundle.js?v=c4113f2
Preview:	............z.....}..I..lB...0....h.(....@.h.@.@...\|.y..z.I.o....lJ.w...O...5.Z.n.s..,.UFI/...J2...q7K.Ie:..<..qe1I.I...%..q...Gq.......W....".\|s...5XLz.i-._.ug..s.j...ImV.J...pvT...b6..u#....l.O.<.\%.Y4j.jF.e.j.j.b.....j..6J..zR.f...?[M..N.M..N..~....GYD.&.T......q/k..A2....i<....U<Y..Y.x....$.Z.U}E}....U.....[..r.......8.ml..F..d.dr.{..qS...FL.h.../..b.WW....>.s[.}vk.t7...eQ....F-.......[....;...T;nL........$k9....fq7.k..hT..0`..*..]..j.6.f.1.....u..I..@oM..H..uV.6.6.j3X.D..q.L..(...\|.dI'..9h^..6.U.F..j....,..j...G.4.....^.....,.Hj...........n..i.z[0.."..q~..M..ygw.A}U;........r3....."..;.]..lq....v."./].r..X.@6L.d~0...e.,M...N..7..d.tW...'....e......^.W.k...<.-.N...;.a.].W.1`.h.~+.yF.?.n.F.....a.......V.....n.Y.t.-tDe..O{..I.0(.?..V.g......1..G..q..Q..n.....j...Gf.n...4ll......^.Y..t.O.O.._[..."{..i...g+._..ud}.b4F..$....3.-..._.b[..z.....mme..?..M..eve....\|X..u.fy.eM....\...QH.....qN..m...F.....Kr ...h...f....fG...p.)..v...+.^;

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 75408, version 330.15859
Category:	downloaded
Size (bytes):	75408
Entropy (8bit):	7.997143546582975
Encrypted:	true
SSDEEP:	1536:T2tGzfR+ZLtE6zaM3tSmcpoN9xiGX66h3qbLLPcmcRcjA+1:ytGfR+ZLXdwSL3Xj3EbVd08
MD5:	D6D8D5DA9214DC7D46B297672A602D55
SHA1:	9991033CE701C9A3D092BA2263A6A89C4D7E21DA
SHA-256:	80FE90CB559538158BC235F4E539D9BCAE203E19FAB7C6970AAD37B0154348FF
SHA-512:	6C2F42D8547EEEE5D8F95B653E1B3DDE318B1D280A7226D9B6DA326B5DE2ECAC2F7C55D2A45DC5C4CE88ABA308E9A872A5EF3666CC0028A56A8B81B473EEE7E1
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/webfonts/fa-solid-900.woff2
Preview:	wOF2......&........X..&4.J=.....................?FFTM....`..r........c.6.$..\|..... ..+..4[KR....#TTt....,.4....J...N...n...\.f....oJ.2..c..="` .Tjj..PHbO...M....\J.c,.[.A.4..T.(G....!%..........qJ3....Y-f.............$..4........#.S>.0.O4.{3.A......\.X..'....L.W\|...k_..=...Ab...BH".S.)..Z...KX.m...]..7Uzi........2..a..Sd...b.vV..eD{)M)j....{......[o.:k....<...tq...u..D...........O..&.h......R(..!T....S..5.......pj.+...\ \...].T.....v..Q....k.74..0<?....e.......Z.WDm.F..!.......P...(..,..@.N<=.1....0.........6f._.....@.Dv..zobMvG..J.5...6L[ ........._......LV.P.6K-......".....N..)5.?3...e$..gT.6........#7Bo..g.>..a.....`>V.=L..@..o..>..1`.90.b..37h..... $...B...wa....l..?..A....4...^4.......pU....,..6.........m.~4Y8.I.z\|".....rU..1.O.N.(...J..........yn....P.....Ro...=3...C......l.v.+...^._j .\.9H.F...o3.<..v...~X...ByT4V+..K.8.p?...[..(0$l..<....P......p....k.zj.!......h..K....j.W.......l.u.)&...(..3@X.d.~.....`...P..,y.....$[

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (45291)
Category:	downloaded
Size (bytes):	242625
Entropy (8bit):	5.592682361982089
Encrypted:	false
SSDEEP:	1536:hw2oGZQ2yXszDplRx7qYUIE/Nk2tomebmlhA0SxnQAGZUcUgClc87KTOTE3G+eyB:RTeepQAMUy8+T2b8E/0kZuKUI/Yjh
MD5:	883FCA2E1AFF1B9707FA9D61A426BB33
SHA1:	B12305AE3553A124E1F6B731BD5F1B491BB96E4C
SHA-256:	4EB4EBEDCCF57044C6ED3B2097FF38631674BC00F81F5539FA07C324AA81208C
SHA-512:	A1C95FE989C2B46146502E41BECC168CB2E61E0D1C2FF00AB7568A7F58F8A41BD15A5F8422E8A6D9272D7B9E352DDD37752E757D8B1D7791D7E9F6F163D17BA5
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html
Preview:	<!DOCTYPE html>.<html lang="en" class=" story nytapp-vi-article" xmlns:og="http://opengraphprotocol.org/schema/">. <head>. <meta charset="utf-8" />. <title data-rh="true">On the Ground in Wars and Disasters, the U.N. Plays a Vital Role - The New York Times</title>. <meta data-rh="true" name="robots" content="noarchive, max-image-preview:large"/><meta data-rh="true" name="description" content="While some critics say the world body is paralyzed by political differences, its humanitarian agencies are helping needy people in Gaza and other places around the world."/><meta data-rh="true" property="og:url" content="https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html"/><meta data-rh="true" property="og:type" content="article"/><meta data-rh="true" property="og:title" content="On the Ground in Wars and Disasters, the U.N. Plays a Vital Role"/><meta data-rh="true" property="og:image" content="https://static01.nyt.com/images/2023/12/04/multimedia/04

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=ouSZFtWWWhZ1z51Vjhge9WalMFM
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	8873
Entropy (8bit):	4.994822646345489
Encrypted:	false
SSDEEP:	192:1Exwdtgq/ILBYce7nalVMaFnYI2mkkNztypdufd:j1c3fR
MD5:	3099A8CA0EEEB826FEE625B0C2923D2F
SHA1:	D41BEB6ADB701E6AFC7D007418BD2EEE60AED03A
SHA-256:	58922FD952737207ADACA3243315D8652B182732DD5A8183E0657111E1D57BD6
SHA-512:	F7AEF78119EB558A8EE2EDA1374AF4C5958D241C13C406F72AD45F666C10195BCF55A9F6A25554F11F01FAC564AEA7367B7A0B5F7A31AF9280C6D7916DD05FB1
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->..<meta charset="UTF-8">..<title>CandyBanners</title>..<meta name="ad.size" content="width=970,height=250"> ..<link rel="stylesheet" href="style.css">..<script> var clickTag = ""; </script>. <script src="https://s0.2mdn.net/ads/studio/cached_libs/gsap_3.2.4_min.js"></script>..<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>.<script type="text/javascript">. . (function() {. var MAX_URL_PARAM_LENGTH = 34;. var CLICK_X_URL_KEY = 'nx';. var CLICK_Y_URL_KEY = 'ny';. var CREATIVE_DIMENSIONS_KEY = 'dim';. var AD_URL_PARAM = '&adurl=';.. var relegateNavigation = '';. var urlParamMap = {};.. var isNewtonTokenSet = false;. var isTurtleXAdClick = false;. var reportingIds = {};.. urlParamMap[CLICK_X_URL_KEY] = null;. urlParamMap[CLICK_Y_URL_KEY] = null;. urlParamMap[CREATIVE_DIMENSIONS_KEY] = null;.. var handleClickTagMess

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20136, version 0.0
Category:	downloaded
Size (bytes):	20136
Entropy (8bit):	7.989424386754503
Encrypted:	false
SSDEEP:	384:m9QXGIhPBwBTluRSS2zjd9rLI9Xef1sqxtwso9j+qZX3V:mPaPBwBTluRSSqdm9Xu1HfNo91ZHV
MD5:	108CE298D451197B23FEFCEB3E36959F
SHA1:	F92142FF12C754C0644C5B42F9C7049AEC00FC58
SHA-256:	7E600A56D48EF1C596BF57DAB35AFECD2D31A8D2672B045EFDDE1FEC1A0F0F07
SHA-512:	2B0941F2A26071D184ED2B3F0E08A128309C3FB81729D1CEA61DC9C3B1647473451A20F21DABF0BE9F492D7AAD0C61AB4FBF09EFE400BDCEB8349382A87E32E1
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/cheltenham-small/cheltenham-small-normal-400.108ce298d451197b23fefceb3e36959f.woff2
Preview:	wOF2......N...........NK............................`..,.6..s.....\..e.6.$..,..... ..(..!....B.E#".8..._.(r;PI.lrd .#.P....c..1l.6.....u..O5..K..QG....y...._.<G.^u.6.e...........=.Ny...S.^z/J.d .,Q...NM^........0Vu..m:..W.@..`.2uY.L.\T.....5^.......6....Uu...U@BE.us7...q...2GR.')%.K.B.\9...re#...`.............q....S..k..C`.....a..w....[....3Kt....+..6O.....W...r..L......IJ...{X....o..Qq.)..a..B...s.wfHC...........V..Q.?.T4..~Q.Eg....;.k...y..{~..%'I.f.4.h..x.a$%..PsM...iFB.w@...q.....l'.+YN.J8jJ..H....8P.)V#.t.....r..<.D....l...&.{&........w.R.......>..k.%....PE.......W.](..).t.c.-......-..!P..9<tH<p.Ee.V....rQQ....>?...j.C..5...~r.$..!:.....O.}...X.8.a.s].../.f....(..XI..;..eL...Z.. B<.[....}o..q#(........`e...SO.J....u.1..X..P..y..,..[............,w....\|LZ.G.......F...O=O9\<V...D.3.J..\4v.y.k..1...I..4.,..&..n.#....lr..$.I...hi."bO..8.M.5Y..c.&T\. `M...2.+....Uj..QS..U....6.Y....$.H.b...L...;bg..$..G.itm:F..f..@...M.CO..av..`....

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	85038
Entropy (8bit):	7.997032915967826
Encrypted:	true
SSDEEP:	1536:KIrP7210H3Qnib7V9a6nkcXa1tW0Cewh/n4mVHHu8dh0Ck9wasiTHa:KIrPCOAW7G6nLOKNh/xVNdhlriT6
MD5:	31A07FE28D411A5906C319AB66B3E3C3
SHA1:	08ADCFB09E304C937B113C8AC76124B5509D1815
SHA-256:	CA8FDBFEDB78BA6214B474AEFE9CEFEC8AF35CAB96E184A066869B80CCFCBF3F
SHA-512:	C65882DD8766667D210625E5360653B7F223D205AC69BEB4BEDEC2FE8AF2628660780B39567B9C280886014D59AAF893F3FBF146C4A13737D11ECA38ADFF9486
Malicious:	false
Reputation:	low
URL:	https://bostonglobe-prod.cdn.arcpublishing.com/resizer/hVHMTKx5DarqZBZHivNO22lZQnU=/1440x0/cloudfront-us-east-1.images.arcpublishing.com/bostonglobe/SWNY3XRVJFGH7GHEQVYH7Z7LWY.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................K ...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma.................K(mdat.....l.y.....2........a@..M....:...N...n..........]v.]./V.^..(/U.4.F..D.j.^BR...\...i...X..xL..X......z.PM.3aJ..-d\|...+...\.7.'.dN..E....w....o.yyS.J.....;.Ns.....2..j..}..0.f_..t...0..E.g....q..\.7.aa.3..X.....@..=..2.N0........zv...K.E+.P..o.i....{K.h..e..gI..vv..1..zT..3...Z....."..v......oH..K.......GY... ^..+o..2FG..R....d./P..u..hJrk?...A.3p. ..f..b.vmzG#.$....3&E,.............V....7}6.8....4#..(.....;.....C..n...r...V...jR....n.g(...F. ..OPh.y.....A@.F+*\|=..M...Q.'.,...D-......ts.!.S......m..6;K.tg....St`l.D.........n..T.....:...].........\|..e.2Bs.".fz.e.w.`.=..G...Q.`.....K;.......A;9....g......V._.L. K.."...R..r.y..{....8..~U ?z.......e....GC..?%f.`.q..~.0.Y.;..(......

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4390)
Category:	downloaded
Size (bytes):	4463
Entropy (8bit):	5.403519155635041
Encrypted:	false
SSDEEP:	96:wCVr/f1rThwfh6vyCSolpfSYMxrW15QlvfH50rPv+IQdtIKPpgyTJlnDFyJ/62:7VTzwf0qCSolpSYMxrW156vferPvHEuh
MD5:	8AB96CF955CAC65B2919817B7A17A03F
SHA1:	635850287D2FD6CD7AE02FE4CE615090918807ED
SHA-256:	9E1D22335EB01DBCD250EA4ADC9BEFE1214168E0F88CF49599AFC8793E193F35
SHA-512:	73285885B9F13E1039885E25418DC16355FE7171732BED21580F7B53B91439A582C13450D5E8C4535D8384C47D94F33214FFF8E16BD9070CE2DB2FF246E90E05
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/accessCodeLPCooking-1ed9fb47e963dd322707.js?_sw-precache=8ab96cf955cac65b2919817b7a17a03f
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[38],{"V6G+":function(e,t,c){"use strict";(function(e){c.d(t,"a",(function(){return O}));var n=c("TxU7"),r=c("r538"),a=c("hEyz"),s=c("zJ6h"),o=c("XWHH"),i=c.n(o),u=c("iVi/"),d=c.n(u),l=c("fTxn"),f=function(){if(!("prd"===vi.env.ENVIRONMENT)){var t,c,n=new URLSearchParams(null===(t=e)\|\|void 0===t\|\|null===(c=t.location)\|\|void 0===c?void 0:c.search);if(n.has("AUTH_HOST_OVERRIDE"))return n.get("AUTH_HOST_OVERRIDE");var r=d.a.parse(document.cookie),a=r.ACAC_BFF_HOST_OVERRIDE;if(a)return a;var s=r.AUTH_HOST_OVERRIDE;if(s)return s}return"sbx"===vi.env.ENVIRONMENT?"https://myaccount.stg.nytimes.com":vi.env.AUTH_HOST},O=function(){return new n.ApolloClient({link:r.ApolloLink.from([Object(a.createHttpLink)({uri:"".concat(f(),"/svc/activate-access/query"),fetch:i.a,fetchOptions:{credentials:"include"},headers:{"x-pageview-id":Object(l.n)(),"x-plid":l.o}})]),cache:new s.InMemoryCache})}}).call(this,c("oDJU"))},mLsP:function(e,t,c){"use strict";va

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.976766316704038
Encrypted:	false
SSDEEP:	12:YADKkb2ljDLYJ/H3BvPUTauXLFW9/qYExPt2+vXCNLIRMW0cW9Nu/eHLtBMCuQ:YAlb2ljI/fg6YQ+vUIR9NW9EWpOCuQ
MD5:	C08C3711054EA6B92B46040199FC48E1
SHA1:	DDDEB6A55236444764DA9BF0E1BB69451C7C39F5
SHA-256:	C6232EE04A01C5CEFBC309DF278F45649CB72362BF2D334461B9B7F049FE4778
SHA-512:	BCAFABE0869836396A34C020636FA3DFEB283A4621D57A07F2EA2FC5A3C7109EC7712FB8A852389B8EEA591C90C699E23B612DFA1CBCDD86DD46912C2A7BE18E
Malicious:	false
Reputation:	low
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800026695,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-797gb","asset":{"wordCount":0,"url":"http://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html","derivedDesk":"international_desk

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	313
Entropy (8bit):	4.13652098853522
Encrypted:	false
SSDEEP:	3:YMcwVKJPDHuf+HNuJHJjVJkKNaaaaaaaaaaaaaaSSbFQHJsaaaxzfyG3MtE5MJW1:YdwVKJbHQ+tuHjg1S5QHJHz/iJSIT4os
MD5:	C112FFF413DF4A4D37B35C9A7FCFF312
SHA1:	F6EBA44E694BB405E36C9F535D1C1A6B8FBEC591
SHA-256:	FA350AE53A86EBB3F924ADEA1F6D285E1606BE541CC4FBC0054FB6A0D01A16CA
SHA-512:	F093D1632C6D9FF1915BDAE927F03C0F434BAF5A47672EF841957F9A74FA36AE7F160613EB7F8B9323CBF4CDA158DC726BD38EA059EAE3F77CCC43B9BE537C99
Malicious:	false
Reputation:	low
Preview:	{"/29390238/nyt/world/africa":["html",0,0,null,0,0,0,1,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,[676982996],null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CI7vtJnz-IIDFbGW0QQd9eAOZg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2"]}..

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20492, version 1.197
Category:	downloaded
Size (bytes):	20492
Entropy (8bit):	7.989629078652395
Encrypted:	false
SSDEEP:	384:jY7pAe/c7FmZWFhJTu8CxLxBbFixImbUyRuZmuLdlM16m2l4YyT8eqel:j+ygZEu88nBiSmbNuZmIQ16mCI8del
MD5:	0FB05587186331CD0A9B0F1A30805E76
SHA1:	8E309C432AC518D9312B3939FC7E3FF0990C7FCA
SHA-256:	6F775562F9391E1811D388D8F0842A2CE9865DF86EF8DC55965EA37F8D756443
SHA-512:	A682DEC38E37EB021C49EC99756138D26DCB0373F59B02AEB4A28F722F64D9C85019A731A60927A94D42323F61B6FE5BDD8D76ACC0EFF584AB595FF6E58624EB
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/franklin/franklin-italic-500.0fb05587186331cd0a9b0f1a30805e76.woff2
Preview:	wOF2......P........$..O...........................@....`....2..s.....h..1.6.$..`..r.. ..D..J..D.a.5l..1.[U.6....n.R.^....@..........\..j.A....A.LMAI"M.RU.4.N...22..04.B...t....92....C....-....+.T...q.w?.\v\0.}.7....['......t....;.6.....(...H.y..Cd..........Hf.e.....[..6.Q.z\|`..F..I.Z.btN........y.#.Hg&p..q...r!w..1...T.Y.f..ff.&....s.y.9.\r...G_~..}4Zx.......~4..9.R....13oq^.}.3.......>E.....`s.N....R.X.I...9...`.e...~..~wO..9............xp..../$....V.....+.x.$.#. ....D....d..Ig..P.G]g94E..Z...y..G .fl).4..X.....~g.d....R>..7....#.....r[....R....-J9).o...T.&...c..Y..F.!."..+D.E6.>..*b........6...u.._......?...."G...j.......L....b..$......."2....dT....Z..}...;9...T,.&....Kes.)....~..f.xv.G.k.4..........].G.A............".)..3...)..,C....\|......h.\|P..v. ..V.....8.0w..m..n...u..3........C-.5..._....... C...$H....j....~^.:...QZ.1Ji...q9..j,%.D..QtY.q81n....M{%__-....#.0..\|l..O...!{.%.......M._...`..:.u+.)...a...?n.b...veV.j^...W.kx...Q-.

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1192)
Category:	downloaded
Size (bytes):	1266
Entropy (8bit):	5.368590603948249
Encrypted:	false
SSDEEP:	24:lD58ew8rXIoMXyGAF0kaq3eZxoWwTzCBQPOtKsWUUx0lUTlkDXJQ:lD58dqXIh2GYsTqfgXJQ
MD5:	7696C902100627070A9D09D7425908E9
SHA1:	BB0B1C49919B1FCCA5D4457CCD1B2308B3216853
SHA-256:	A4AABF7CE84C34B28EC851063547856526E896E95FCB8F97DA071A784C57E78B
SHA-512:	FC7039CB0A3B1858EB3E99D4B543247E6E9DA6368D8479EA75FACE2FED41353D634091FFAE22762F7DA344F88B060FEBA484EC93C03E9DA88905078ACFE38F19
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/NYTCommunitiesFundHeader-d4499c07bbe7d7de8ad6.js?_sw-precache=7696c902100627070a9d09d7425908e9
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[31],{"1kWG":function(e,i,n){"use strict";n.r(i);var t,o,a=n("gcR/"),s=n.n(a),r=n("q1tI"),d=n.n(r),c=n("Jqp9"),p=Object(c.css)("border:solid 1px #e5e5e5;border-radius:3px;box-sizing:border-box;max-width:600px;padding:20px;& p{font-family:'nyt-franklin',arial,helvetica,sans-serif;font-size:15px;line-height:1.4;margin:0 0 1em;}"),l=Object(c.css)("background-color:#ffcb05;color:white;border-radius:4px;padding:12px 24px;display:inline-block;text-decoration:none;vertical-align:middle;font-size:16px;font-family:Open Sans,sans-serif;line-height:24px;");i.default=function(){return d.a.createElement(d.a.Fragment,null,t\|\|(t=s()("br",{})),o\|\|(o=s()("div",{className:p},void 0,s()("p",{},void 0,"Donate to The New York Times Communities Fund, continuing the 112-year legacy of The Neediest Cases Fund by assisting nonprofits that provide direct support to people and communities facing hardship. Your donation is tax deductible."),s()("a",{id:"gfm-char

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	34872
Entropy (8bit):	4.597360945338517
Encrypted:	false
SSDEEP:	768:tGfBplg9gig7gugbg4TkXAaS13BR3BB3hL3hHzCN3AN+/N3wduf1DSs3pw3JGA3r:S5g9gig7gugbgORRRBxLxyQWAiZw5n3r
MD5:	6B65754B2F2B9A52ECECC373672351D1
SHA1:	8AB3277A8C03BB4F94FCB8C9D3660DF5BFF4A0E7
SHA-256:	2CC6CFC6F07BC4CEF11C2DEE27CA861146085B4AEB618527BEF97C9E2A1C54CE
SHA-512:	340ADD0E65B9B1971B316823F0ABD998F29597120FDB4BFBD8B2B57DF8B1EABCE2AEF5C0FA096D191CF347DA8B33335916D40AA958EE2ED6D7D738384E8CC3F0
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/cdn/Baymax-1.2.2.js
Preview:	. . . ./* ::: BAYMAX Media Player :::::::: /./ ::: version: 1.0.8 :::::::::::: /./ ::: developer: Tanvir Haider ::: /..//const { Hls } = require("./HLS");...class Media {. constructor (data) {.. //console.log("video creation data: ",data);.. let Scope = this;. Scope.data = data;. let wrapper;. let Q0 = true;. let Q1 = true;. let Q2 = true;. let Q3 = true;. let Q4 = true;. let playerStyle = "video-style";. let MediaPlayButton;. let MediaPauseButton;. let MediaMuteButton;. let MediaUnMuteButton;. let MediaFullScreenButton;. let MediaFullScreenCloseButton;. let videoContainerWidth;. let videoContainerHeight;. let vdoEndScreen;. . let posterBG;. let HLSCDN = " https://static01.nytimes.com/ads/adplatforms/cdn/hls.js"; . / "https://cdn.jsdelivr.net/npm/hls.js@latest" */. //let HLSCDN = 'https://cdn.jsdelivr.net/npm/hls.js';. let genericPlayButton = "https://static01.nytimes.com/ads/adp

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (545)
Category:	downloaded
Size (bytes):	34124
Entropy (8bit):	5.02893760890414
Encrypted:	false
SSDEEP:	384:nUYnxLXE33Aj2+czus+Jq2UHlzSOBQKBHtlRwlGHTV0qu:9xLcG2+c92+lzSOBQKBHnR2GHTV0Z
MD5:	9A371C5FA2E1CBD336ED0E8EDC8CC145
SHA1:	ACC95226D300AD7AF099BE8D1D99D657BBC91420
SHA-256:	9BED455D476BCE30D37D67FC7ED2C15FB5C9BF948C96AA5C0268BEA56766E65E
SHA-512:	0DC395F98975CF109E394D81081C024D2E2E524ACA785110A231686D4FB6E792DE99158EE210F4EBC283BEE1D7ACED25A6CB3163E2500A63C512F22C7DE17910
Malicious:	false
Reputation:	low
URL:	http://nope.theworkpc.com/
Preview:	<!DOCTYPE html>.<html lang="en">..<head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>World News Blog - Powered by NOPE.THEWORKPC.COM Journalists</title>.. Bootstrap core CSS -->. <link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css" rel="stylesheet">.. Custom fonts for this template -->. <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css" rel="stylesheet" type="text/css">. <link href='https://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic' rel='stylesheet' type='text/css'>. <link href='https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800' rel='stylesheet' type='text/css'>.. Custom styles for this template -->. <link href="rss_content/css/rss_blog.min

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6857)
Category:	downloaded
Size (bytes):	6914
Entropy (8bit):	5.128435822811265
Encrypted:	false
SSDEEP:	192:tWfSAqr1ygVOBqWTWbibJ4Fj2/fvj8avtltPOi5e9:y21dgBnAj2/nj8aV32iQ9
MD5:	57D95BFDF2BE29BD5FEF63CF0B5FE745
SHA1:	875BAC3EBDF4E96B58A91D5747E6EE7BA72677BF
SHA-256:	D1D3420D71734A98D13F68D5BD8293EF862FD8A87F94F2A59E2D05C7B9A29F3D
SHA-512:	3966A5CAE49B4F9A662824392A69A937E04FB4E2D1F651AAB35D53189FFAF0BB76DB73B4DCEE0E29BFEE89F4FDD6BD9F56B7559FAB376E48FB65326F02A8280F
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/Rio2016-f600e68f03ca5de89a5f.js?_sw-precache=57d95bfdf2be29bd5fef63cf0b5fe745
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[32],{"1Clw":function(e,i,t){"use strict";t.r(i),t.d(i,"default",(function(){return y}));var o,s=t("gcR/"),l=t.n(s),h=(t("q1tI"),t("Jqp9"));function c(){return o\|\|(o=l()("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 285 75"},void 0,l()("title",{},void 0,"Rio 2016"),l()("g",{fill:"none",fillRule:"evenodd"},void 0,l()("g",{fill:"currentColor"},void 0,l()("path",{d:"M55.5188169 41.275685h-3.1411291v-2.2089041c0-4.135274-.0766129-5.5993151-.8682795-7.3715754-1.327957-2.9537671-3.7284947-4.2636986-8.8615592-5.1626712v-.1541096c2.5026882-.744863 3.6008065-1.1815068 4.6223118-1.8493151 3.217742-2.0547945 4.9798388-5.5222602 4.9798388-10.094178 0-4.93150689-1.8387097-8.63013702-5.3629033-11.04452059C44.333333 1.61815074 41.6008061.95034252 37.3615588.95034252H.255376V12.3030822h4.85215054V41.275685H.255376v11.3527397h28.8064516V41.275685h-4.9798387v-9.1438356h1.608871c5.5672043 0 7.5591398 1.9777397 7.5591398 7.6541096v12.8167808h22.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19951)
Category:	downloaded
Size (bytes):	20022
Entropy (8bit):	5.288367886350874
Encrypted:	false
SSDEEP:	384:4ya8ecBocuU72pZPvRqjQljuCa1QZXFidSSRvRBQWx4:4yaNcBocuU72pdvRGQljuCaW6Qa4
MD5:	00A949E1F40C55D079FCB2C65FE7B727
SHA1:	F3C7ECC893984C2EC0A1360B811E17077AC94399
SHA-256:	ABF4A2EACC7FD2696EE6C28BBCAA00F94B1E2C8C8443155D4638D13F7873850C
SHA-512:	DA0ADAE3B34EFB52B38FC62B5F321324BDDD72D9B62B8E0054C3FE1B3869C5A703CB30D03A9368271B094680FE846EF8F6A550F0D773C44AC98286ABCF9A42A5
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/vendors~emailsignup-01e5189b94e38dca3af6.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[148],{"+fUE":function(e,t,n){"use strict";var o=n("TqRt"),a=n("cDf5");Object.defineProperty(t,"__esModule",{value:!0}),t.default=t.FadeInOut=void 0;var s,r=o(n("J4zp")),l=o(n("lSNA")),i=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e\|\|"object"!==a(e)&&"function"!=typeof e)return{default:e};var n=f(t);if(n&&n.has(e))return n.get(e);var o={},s=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var r in e)if("default"!==r&&Object.prototype.hasOwnProperty.call(e,r)){var l=s?Object.getOwnPropertyDescriptor(e,r):null;l&&(l.get\|\|l.set)?Object.defineProperty(o,r,l):o[r]=e[r]}o.default=e,n&&n.set(e,o);return o}(n("q1tI")),d=n("Jqp9"),u=n("BqrV"),c=n("jPn9");function f(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,n=new WeakMap;return(f=function(e){return e?n:t})(e)}var p=function(e){return e.ENTERING="ENTERING",e.ENTERED="ENTERED",e.EXITING="EXITING",e.EXITED="EXITED",e}(p\|\|{}),m=(s={},(0,l.default)(s,p.ENTE

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35888, version 1.0
Category:	downloaded
Size (bytes):	35888
Entropy (8bit):	7.994243693545152
Encrypted:	true
SSDEEP:	768:qXWIhHCxjChOiFoM1QBbRPsdUTmVSPOpZUdplVh8lDHSUPYvdla4Chw:gWIxQjChOF5sdUqVV8plVh8lz9elaM
MD5:	78BE9C1DAEADB1AE4F8D1E622D7B2011
SHA1:	60923C3B5DFE1A5A07B9092EC9C5583D004D0C5B
SHA-256:	9F46649EA544819982EA288C6F386DD67D46DA0F453F95DA542196372B79731E
SHA-512:	791C090F44796904DDCD1E13AB67BCDF37930BA319CF042079C2E37DF633D1C95AE6F2F04A88A7814379487CC3ACDEC13AE172B615305B864023EA0A15CB6573
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v32/0QIvMX1D_JOuMwr7Iw.woff2
Preview:	wOF2.......0......................................9...$..6?HVAR.b.`?STATr..r/L.....\..f..2.0..b.6.$..`. ..b.....[..Q#.;...f.4"...`....s[......`...0~\|{g..9Ie.M.=-".(..)...z&5.!J\I=F...v.....h.......JS.>.e>.t.i\.zv.{..PF.......f..[,....?.m....y...1~[W~.l....."......MZ.+.?...y....D...A!..n..#.2......S.1v1..51.w....#.$...x.4V.W..IE..U.....N.........Sd.....1....\|.\.!lS}.3.Mn:.v3Ky'.J.>...c....&/.DI.j.C..P..Q..!kBE.~...<x...............t..c Y@#..iFd..2..3UG.5.].?..)..._.@z...j..9>(].....A..>+.&.L`.@.X..'..U...`u.....tY...%...Rz=.[fa.......(9.,..:.....e...,...w^F.2+..,.R..u.S.M..$.... .@.6..W.c0].ugX.Xv.>....z<.H:.Y..o.;...rJ?.).ar'h.E.R.....U.......u.Z`..R..I.0.d.ee................l.;....x..?.X..:].T."9@5UE.....'..xa.....P=....W..3PQf2.]..3P........Nx.?.....n]...U.....9f/....=.....%TK..........Q...&.[i.$@.X.b!..Tk............rp..B./...K..^....?Q.`.;.E?...YeM......cI. k.....!..9..z..'C.2K..[?....k..q..Np.-.l5(i....d7)....4$.b.....[I:3...3.\|...\|8.n...

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1371
Entropy (8bit):	4.610035098979636
Encrypted:	false
SSDEEP:	24:hYexluYGM8uASRszyRWUnGuOyKAlpc0RFY9abwkWCQOyfKfjCowcAu:2QASRszywUnYyblOg+s1Q9fijDH
MD5:	598D685C63F68AAEFA1F7C474E83327C
SHA1:	00BA27002C2B28DCB4124E62727A75305508D059
SHA-256:	A948A4464F5FD459E65B35799DC65DA324E59D9F307E12C51A34471186631D3E
SHA-512:	0ECAC03B87D42C43AC72BDFABBD8C66B1FFE7E9A7A8DB442BE49AB7592E98E66887FDEC4B38C6999265A479A17670A1CD4CEF172CD3B0FE3C11268D36B9387BA
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/ads/tpc-check.html
Preview:	<!DOCTYPE html>.<html>. <head></head>. <body>. <script>. function setCookie(name,value) {. var expires = "";. var date = new Date();. date.setTime(date.getTime() + 300000);. expires = "; expires=" + date.toUTCString();. document.cookie = name + "=" + (value \|\| "") + expires + "; path=/";. }.. // function createScript(src) {. // var targetNode = document.getElementsByTagName('script')[0];. // var script = document.createElement('script');.. // script.src = src;. // script.async = true;. // targetNode.parentNode.appendChild(script, targetNode);. // }. . function getCookie() {. var c_name = 'nyt-check3pc';. var message = '3PCookieSupported';. if (document.cookie.length > 0) {. var c_start = document.cookie.indexOf(c_name + "=");. if (c_start !== -1) {. window.parent.postMessage(message, "*");. } else {. message = '3

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=196&external_user_id=4541600553641608635&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	downloaded
Size (bytes):	1586
Entropy (8bit):	5.2661893404596665
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZMS8f:3qD+2+pUAew85zsZTA
MD5:	317FB49AA6BB70D9B21C5007104C3557
SHA1:	646F5CAE434A9C42537A8DAD5A8C12DD3C0CFD16
SHA-256:	C4591EED27ABFF378652A507923552094808684C88965A1F19A163B684B6616E
SHA-512:	9A631570F397C5F90E45C530B129012155BA9923A31CAF6EA4491230FF9DB4343FF98F7FFA2B550B683915906838CD5CD33BFA3F401A801179DE38B144F7C1B5
Malicious:	false
Reputation:	low
URL:	https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/safeframe/1-0-40/html/ads
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1791)
Category:	downloaded
Size (bytes):	72062
Entropy (8bit):	5.438804863345283
Encrypted:	false
SSDEEP:	1536:7Eyh11LSx22rWFTqYK6bUJKoBAd/1Z8soAbBjoxLDPjO19Gd:o01WYnUPAuFbjRd
MD5:	3E8A7D92BD65E756CD1D1A98CBF4F301
SHA1:	BE519521858C3B8F7663C025A184570AFE77DF96
SHA-256:	FF18779BB7F76122171E9FAA51B7AF30BC0239D361C926489B02032BB5BCCB54
SHA-512:	350959C10138265D91EF744A98253EAFD7EA3AE4F9A9FB5E8C5AC2CC5E91AC974B1CCFE02FCB2F82B4FEEB3AD7C7BC7FA62CB6AA02DB4A9D9486AD626693C085
Malicious:	false
Reputation:	low
URL:	https://static.chartbeat.com/js/chartbeat_video.js
Preview:	(function(){var d=void 0,g=true,i=null,j=false;function k(){return function(){}}function m(a){return function(){return this[a]}}function p(a){return function(){return a}}var q,r=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function da(a,b,c){if(!a)throw Error();if(arguments.length>2){var e=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prot

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1648
Entropy (8bit):	7.808664207258903
Encrypted:	false
SSDEEP:	48:Yn4cf3t85cIgqkMrbwI2Z6f+6YSzrPe98esI8YV:Yn4CUcTJUbLMv6YSza+ej
MD5:	4BF96CB6A1093748BF5B3C429ACCB9B4
SHA1:	E4B171ED710CCFE7EBC7BDBE9A75BA91D6D3171F
SHA-256:	94DE5AE7E9BCF74727F45BB30AE37F553DB4594012E2704336DA5FBBF3357C3E
SHA-512:	B4819D6A4FDD4115C18FC55BB42245BB0D93D833998BB2BAA50555BDFABB9238FEAFBA175CF47784409A0524B59BC3813E4AF9AC8D2CBE477C223925D2A6F1F8
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/favicon-d2483f10ef688e6f89e23806b9700298.ico
Preview:	.PNG........IHDR...0...0.....W.......sRGB........IDATh..iL\U..am....H.B.....$6q.k.j.....&5......Kb..4.h.~l.F..`..PMT.j.........6,U..f...G.<.{s.P. 7........y311+e%....x.......<~ll........x<..`..Fi.:555...U8....m...LOOo...\....W..+...Lx9u.u.z..wD..@ ..X.`...5.N..@..."Bq...\VVVi(.:.H?. ...P.x.......:>/....O.&.?.\...W[H....L.W..".(.v....(.....sB.!s....U....h...((....b..hF..D.....3T..[.y.....]j&........3K./ ....$t...R.r:.e..N.e.....r...(..rt.....6.......c.{.av...H...-e.j......Ur....{I.S..1.E....0......^ePh.8.i6P..r....l....Z%".N.D..iO.....+8z.....?@.!%%%..].........f7.m...L..I....r...-....++.D;'''..... s.......ZO.....L..._....twIII".. 5,...yJd..?D}..>..V...h9.......,`\|...m.+D.-r.....\nA...W.q...."s..+..D^^.Z../..%.(..cd......z.......B..X...._..ct...._$...z..k...+.FGG.F.L.M........!.HJ.]pv.....BP.....L(..Da.....<.A.2...F.i.....rf.......sV+D\|....G+.i,......I.....\|A.nt..i9@...u.......;.V..T...l7.p"..1...L..k9..Uc.Ut;...r.+3MVs..Y;];...W..0i..n

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=7523681944929849834&expiration=1703009624
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51872)
Category:	downloaded
Size (bytes):	51945
Entropy (8bit):	5.710516670093591
Encrypted:	false
SSDEEP:	768:QZd7L5x5sstGSbLZtfkZW3NWasMjs3HGG5w6uYAUrxiu8:QZfx5sstGSbLEZlMOw60Zp
MD5:	CE11A703045909935823373860AF3830
SHA1:	BA8E916FE4C8930255119A5346904D0F2DAD2956
SHA-256:	E2B82F6D02B6A9DD97B51D8AEEAB7CAE6B551F3E442439439FD31035AB17C2F2
SHA-512:	0567999BCA0E6C70260D04328FC70362E9B8C3B0D7D367A7509177D1D34C2F1B6C2B4A5A7E6AA80AA629089B61AC2860885ADDA67B68209A3B7EBA11BFA3F703
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/video-static/vhs3/vhs-plugin-cover-vi-be85f508a34ad15e6073.min.js
Preview:	(window.webpackJsonpVHS=window.webpackJsonpVHS\|\|[]).push([[4],{270:function(n,e,t){"use strict";t.d(e,"b",(function(){return s})),t.d(e,"c",(function(){return p})),t.d(e,"a",(function(){return f}));var a=t(0),i=t(274),l=t.n(i);class o extends a.default.Component{mapPropsToCssClasses(){const n=[l.a.Grid];return this.props.horizontal&&n.push(l.a["horizontal-"+this.props.horizontal]),this.props.vertical&&n.push(l.a["vertical-"+this.props.vertical]),this.props.fill&&n.push(l.a.fill),this.props.className&&n.push(this.props.className),n.join(" ")}mapPropsToInlineStyle(){let n={};return this.props.padding&&(n.padding=""+String(this.props.padding).split(" ").map(n=>n+"px").join(" ")),this.props.style&&(n={...n,...this.props.style}),n}render(){const n=this.mapPropsToCssClasses(),e=this.mapPropsToInlineStyle();return a.default.h("div",{className:n,style:e},this.props.children)}}var s=o,r=t(276),c=t.n(r);class d extends a.default.Component{mapPropsToCssClasses(){const n=[c.a.Row];return this.prop

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
Category:	dropped
Size (bytes):	124157
Entropy (8bit):	7.967666443013785
Encrypted:	false
SSDEEP:	3072:dz55Rh4EvnZ9+5G0DCcUNxw4keivwKAVTHHuuyeD:dzkE/QzaxDawlRHHKk
MD5:	919C66C1E3050A089CD036FDD8FCDC2D
SHA1:	D20232956BB572B27718D2E83E88546225F6FAC5
SHA-256:	0B9530B422DF9FD7A10280DB01A1526BDFDDE297B3C007ADC98B46765D7F8818
SHA-512:	DB4720009021D1C8B630380B6FB44313CE83A6DD44F8B85952D68A40E0364070BF2D1998EC9367028F5B93C48A0C8629A539E8C9D7C18D33583C1F6A9632930C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw..............".......................................J......................!..1AQ.."aq..2...#B...Rb....$3rCs..%4Sc..5..Tdt.D................................<......................!1.AQ.aq."2...B...#R..b.$3C..cr...T.............?...t.>(S].q.L.'5....8....K.&.x.>..N.........-)&.....yK..x.g..k..*.l..

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (42233)
Category:	downloaded
Size (bytes):	204355
Entropy (8bit):	5.634659246749076
Encrypted:	false
SSDEEP:	3072:8keiS3QepQAMUj8T8Ap28A5sZQuKlI/Yjh:AQepQAMUj0SLrh
MD5:	73CC175344BAE4CBED51A1BD3A9A1909
SHA1:	F6DA251AD0CB22EC1293843BCBB463C7492D36D3
SHA-256:	E4607B10A11E6C0F349EFC614F9C9E2A1B6439CA13032A39892E4CE242A684D9
SHA-512:	4194A8828D537D4AFCCDBD718815D5DDD60B570704DC5A69528140E104699E1CE9DF6B9424C33567940AA5E3CACAC0B73196ADA6740F6A7ED988271B10E81340
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html
Preview:	<!DOCTYPE html>.<html lang="en" class=" story nytapp-vi-article" xmlns:og="http://opengraphprotocol.org/schema/">. <head>. <meta charset="utf-8" />. <title data-rh="true">Nigeria.s President Calls for Inquiry After Military Strike Kills at Least 85 Civilians - The New York Times</title>. <meta data-rh="true" name="robots" content="noarchive, max-image-preview:large"/><meta data-rh="true" name="description" content="Many of the victims were women and children gathered for a religious celebration. President Bola Ahmed Tinubu described the attack as a .bombing mishap.."/><meta data-rh="true" property="og:url" content="https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html"/><meta data-rh="true" property="og:type" content="article"/><meta data-rh="true" property="og:title" content="Nigeria.s President Calls for Inquiry After Military Strike Kills at Least 85 Civilians"/><meta data-rh="true" property="og:image" content="https://static01.nyt.com/imag

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	441875
Entropy (8bit):	5.50202120654638
Encrypted:	false
SSDEEP:	6144:ndoJFDRj52/XhLTMwBtlAT/wom114ZGid4S+gw021Z:K75aZBomX4YS+J04
MD5:	DBE45D56ACB2B382A060039441026BE8
SHA1:	56E40C9B69A1FF52BDEB06A24C6E8086DF6C83A3
SHA-256:	FA40858BC00AA25239B434A313F9B30B4B604715B21395C0F278A3055CD31DEB
SHA-512:	2D5B72AECEF9F25A7403F3A5337540ECD4744E61BFB4D3A7DE6C2527EEE6EFCCC4B0F18F6CE61B0D8E2244CE48D72D2DF5225D44E80DBA88CC36280AB383FC86
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202311290101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ca,ea,ha,ja,na,qa,sa,va,ua,wa,xa,Aa,Ba,Ca,Ea,Fa,Ka,La,Ma,Na,Pa,Ya,fb,hb,jb,lb,pb,sb,wb,zb,Eb,Gb,Ib,Kb,Lb,Qb,Sb,Rb,Ub,Vb,Mb,Wb,Xb,$b,ac,dc,ec,fc,gc,hc,ic,nc,oc,rc,sc,tc,vc,yc,Ac,Cc,zc,Ec,Gc,Jc,Lc,Mc,Nc,Oc,Pc,Qc,Sc,Xc,Zc,$c,ad,Vc,bd,Uc,Tc,cd,dd,ed,fd,gd,hd,id,ld,kd,nd,od,qd,vd,wd,yd,zd,Ad,Cd,Bd,Id,Kd,Jd,Md,Ld,Nd,Pd,xd,Ud,Vd,Zd,ae,ee,fe,ie,je,ke,le,oe,pe,$d,qe,re,te,ue,ve,ze,Ae,Be,xe,He,ye,Ie,Me,Oe,Qe,Se,We,Xe,Ye,df,ef,gf,hf,jf,kf,lf,nf,pf,qf,tf,uf,vf,yf,Af,Cf,Ef,Gf,Hf,Mf,Nf,Of,Pf,Rf,Sf,Uf,Vf,Yf,$f,ag,bg,cg,fg,ig,jg,lg,pg,ng,tg,ug,vg,rg,sg,wg,xg,yg,Bg,Cg,Ig,Jg,Qg,Rg,Ug,Yg,bh,eh,gh,ih,jh,kh,lh,mh,nh,ph,sh,th,zh,Gh,Jh,Lh,L,Mh,Sh,Qh,hi,ji,li,mi,ni,xi,Ai,Ei,Hi,Ji,Ii,Qi,Ri,Si,Ti,Ki,Ui,Li,Wi,Xi,Zi,$i,bj,aj,dj,ij,gj,jj,sj,vj,nj,oj,wj,zj,xj,Cj,Dj,Ej,Hj,Ij,Nj,Oj,Zj,fk,dk,ek,kk,ok,qk,rk,sk,uk,yk,Hk,Bk,vk,Qk,Ok,Pk,Sk,Uk,Xk,P,Zk,$k,al,cl,el,fl,nl,ol

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8700)
Category:	downloaded
Size (bytes):	8755
Entropy (8bit):	5.222474038713405
Encrypted:	false
SSDEEP:	192:EKB5/9/mz00tqv/PTASDIYFlHFApJYuYxYjROYdYdy:EUVxMqv/s8l2L
MD5:	3B48D4751C8F3368428635DF5A4C3689
SHA1:	1E09B852285DA67884D72A02E10D8E8ACA9B775A
SHA-256:	18FC8CCCC597A46FCDAF8024D85D36D0CB9DA093FBE55CC4EF6F5B46C1849F08
SHA-512:	4E36AD1E71EC030A8F9167B905ADD62B3D7084AB04A5D7C49891662FB53FED6292E705493F602968E996D4390CB30E939A864A1511E3627A8D087D720A32D71E
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/187-614d260c892ee1a95276.js?_sw-precache=3b48d4751c8f3368428635df5a4c3689
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[187],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return O})),n.d(t,"c",(function(){return N})),n.d(t,"a",(function(){return j}));var o,i,r=n("gcR/"),u=n.n(r),c=n("J4zp"),a=n.n(c),l=n("q1tI"),d=n.n(l),s=n("MShG"),m=n("5Aio"),f=n("WDoI"),g=n("qkuN"),b=n("4+a0"),v=n("kc0S"),h=n("EOa1"),p=n("+yCz"),y=n("hgSA"),w=n("DRvx"),x=n("xIq5"),C=n("dZ3W"),O=d.a.createContext({setPersistentFooter:function(e){}}),N=d.a.createContext({setUserProfile:function(e){}}),D=function(e){var t=e.pageContentMaxWidth,n=e.children,r=Object(l.useContext)(m.b),c=Object(l.useState)(null),d=a()(c,2),f=d[0],b=d[1],D=Object(l.useState)(null),j=a()(D,2),k=j[0],A=j[1];Object(l.useEffect)((function(){var e;Object(g.f)(),Object(v.c)(null!=k&&null!==(e=k.subscriptions)&&void 0!==e&&e.length?"sub":"regi","")}),[]);var T=Object(l.useMemo)((function(){return k?Object(w.a)(k):[]}),[k]),P={setPersistentFooter:function(e){b(e)}},S={setUserProfile:function(e){A(e)}

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
Category:	dropped
Size (bytes):	50019
Entropy (8bit):	7.9624916170734235
Encrypted:	false
SSDEEP:	768:dz/60v2P5Vdutzs8qygFaIrq69zoesD8TuOjmdO17/i6fticC2m0T7YEVu:dz/60+RWzhqtt1S1dAzbF/zDTkEVu
MD5:	8B915E69D8B9EB8F22F9DC467AC45BAC
SHA1:	779E1018E74316FBE9CFDF0E3387C09E3CA7AB04
SHA-256:	A4C2C25D910738CC17490B42F299B058C02720388656C65239A2BF9C616F5212
SHA-512:	3D8A04A52993AE30150BA068EF5B6589447CC0286267AF6599C5CBDC8717DAAA69F28716DFAE572ECC95E5497610A189913A5C297F6F95827FCB50A2D3A0CF5D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................E........................!1..AQa.q.".2.....#BRb..r..3..$%4Ccs...tSd................................2.......................!1A.Qaq."2..B....r..#Cb..............?.ia...K...tn..M..NZ.8.k.b.[....$..1..:....6V..%A.....G.+=..I.H...v.8o...T.qq..>...

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
Category:	downloaded
Size (bytes):	48432
Entropy (8bit):	7.995895299372476
Encrypted:	true
SSDEEP:	768:XB5SYCg36D2GCHVDsCemwehTeQoAcJT7T7R+CAJ+PK3ZDK/4zJ9KDsg48rmBk1jm:XB7u2GApMwhTHoA2T7RLPKJ+AzJ9KVxG
MD5:	E2D74C5E631BC53A7240BBFE4BE99C8F
SHA1:	EB513857BB01CC4F7249067FC7E969BEF415FC90
SHA-256:	9B1B9D7CB74A9923D83F36F0026F421940B861FD6E1A51B8F79AF45492ED4ED5
SHA-512:	CE26A692DBAE0D0A5A0CCDA9D5E10B0BD135D104428BEDDEE0EDAF7DA6961F9DBF27BAE19130CFD11564F2ACFDC414559BB8C918CFE459D7A7FAE44ABB5FE1B8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......0......B...............................O..:..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..\.6.$..`. ..~......[`1q..2X;..zF.$..NA..m..z...= '.......}......"c&.O.u.`r.g.\.Bm.:F.jYG_.....m...C.- ..Kr'a'9.X,..n..R....oC#.m...5..y..p.7..r..{...@8D......D....J.9......fpC.\|...A=.,o.l.....L.+..?........?.F..d.v~...I..$..`G.:..t.w...]......V.}.C..<m.].Q.W.Y,k.`..^L...{........bok........D...@.....H.A..n.Y\|......W..b.\|.1..E.F.=.x..?.D.6.+D+.....M..2n....k.B0....s......K.7..6,R._R.LR..O......U.@.r..@....u..9.....w.9S..o...&.'.3...Q.xB-i.$.Z5........}...0......V...)....\|.........K...h...0..h.c........5...3..j%?.... ..4]..J.\Q......+!....&.0...."".R..Foc0.X.b,.%....5zd.`.#.:..D=.S...j.y.7)t5.....u.;l......%....VIE..\|s.....N2l7.Y..Q.\|.!v..?!..0..1N.p%..@);..d..w...U%q....9...<..........,q.?......P v...o..%v...wQ&.K..I..W.e.d{.C.0.).].....].u...+>........P.....+..ty.~t8~g..7s..vD.X... R.%.j5.&.Q:!.i..._..]-.hgo....,.d.....%@..C...~.{........T..P8

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=Mjk2ODgyNTJiY2IwMzNjMjdiYzlmNGYzOTNkNGI4ZTMxZjc2YzhjZA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8852)
Category:	downloaded
Size (bytes):	8911
Entropy (8bit):	5.3212283797776685
Encrypted:	false
SSDEEP:	96:gWfncWkCGwGDcBA8UJAiP1WZAjhmPMeSCc6omOPsqJN292mTEP8ezfSDETFPXBAC:BfnBGp+m6SsEif0idO36u8dOBQ9rjaOq
MD5:	302CA132B60B2F2C8B4794BCCD0BD269
SHA1:	F2AB534B206CBBA9AF2B80223FF3E8589E751647
SHA-256:	B81D967394081B74CABA9AC30F38E3CB324F934774CAAB6E330C2F93FD83CBD3
SHA-512:	17454914AF082A7CD512308B88F7D84F74398EEA7DB13EBFAE0537310B2FDBFBF430B42F918F41B9FFA6DF4B445BEC6495EF939C8F19377E565142A87A019A45
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/audioApp-8440b3159e28c1ef0b8d.js?_sw-precache=302ca132b60b2f2c8b4794bccd0bd269
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[48],{"0OYu":function(e,i,t){"use strict";t.r(i);var a,o,n,d,s,m,r,p,l=t("gcR/"),c=t.n(l),h=t("q1tI"),g=t.n(h),w=t("i9j7"),f=t.n(w),u=t("vftj"),b=t("LjBh"),k=t("XvdP"),v=t("wXC7"),y=t.n(v),x=t("Jqp9"),N=Object(x.css)("display:block;@media (min-width:",y.a.breakpoint.width.mediumLarge,"px){min-height:100vh;display:flex;flex-direction:row;}"),z=Object(x.css)("@media (min-width:",y.a.breakpoint.width.mediumLarge,"px){align-items:center;justify-content:center;text-align:center;display:flex;flex:1;height:auto;}"),j=Object(x.css)("background-repeat:no-repeat;background-size:cover;background-position:center;background-image:url(","https://static01.nyt.com/images/2023/05/03/podcasts/audio-app-marketing-hero/audio-app-marketing-hero-superJumbo-v5.png",");height:16.125em;@media (min-width:",y.a.breakpoint.width.small,"px){height:30rem;}@media (min-width:",y.a.breakpoint.width.mediumLarge,"px){height:inherit;flex:1;}"),A=Object(x.css)("margin-to

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	191
Entropy (8bit):	5.285472655371158
Encrypted:	false
SSDEEP:	3:8WiCLViemMQ32p0kHRTFHHVIoCYKgQnIwBM4D/YLxtiGT/6eR0TLI5DefNh:8WiIUem/32p0kHRTFH1fCYKbY4DexIGy
MD5:	7094852EB6BC1DEF52CFA3A35E61234F
SHA1:	0561FCF8DA492C94451C8F155D76D71E38899126
SHA-256:	4DCE82188087B5A879AFAED84F7C41579A9CCD759994D30D908879EDC355CA62
SHA-512:	0D5CCE0E35E1567AB58CC99DF80A8FD6FF03F208730ABED79522C8341820C86E924329D27039872F3DF52B83E681AF756A44066089F09150177A03D39841B45D
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift","cb":"0"})

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 37, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3159
Entropy (8bit):	7.892180873029145
Encrypted:	false
SSDEEP:	48:9ZMt/aUY+PrxKmMkzTFlBCRmpuce7Q7WJhIOlI6cxEwYnIIb0FGR2G/yNUh5ePmi:9+CutTpw4whXi6eEwYIIb0xUOv
MD5:	E6BDD14A70854781578BD0E2D6B1C7D3
SHA1:	19A5DE61CD868D4E3BFF21F2A87027D887C3951A
SHA-256:	8ACE62372953ABA1F03C8D4CBF7158355D6AC7D0DA8D255DEC532991E2D1AE23
SHA-512:	95266DD17801D2CE32ADC6C1F41188A26881881FED0EC78D7DDDFD1E64EFE59723C39C91B1B13C63FD6444E121086D9980F5AC0EE220A0EBD206405493F63E6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%......zG.....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx..\.u......ol...`..l+....?.".6.." ....P.`........HG.Ei...j...A....`?j......3....7..M.q...4b.%.j...I.......Mz.f....~..z+..L..8.&h.FY..../.._p..-..a..fhm5.7.w.vl3_....,..LbeNa......4.r=........F.#...3.<..#....u....y.a]3.p.$.Y..XG..6.sxe..;..I.v......4.c....ME7.m#z..?..!u...C...7S........rN.r..+..=.......],R.O...v..r.s..l..<..tq..v.Gk.......:.~8..U....O,{z.<.g..9Q..p.`!......(V.M..K.q\|...vh*.W.=....^...P.....#K/_q....1,........;:..(...!:....Z..'7.a.q\|8.[...2Qu....u...)Lp...G.1.....=.&x9.0U.W].5....J.b....+G...O.....O ...g.......]wx...y...#Nc4.u....y8..........N........7o.... \(........a{..:.`...c...027p=....lr.x..!"...g....a.~C::.k....+._....th..\..~...8?.......I....+...1.1:......'.we>.......v..M.....G..".P........y!~...sx.\|lp.....k<.J....}uu.x..,.u../..vs...~...<.~yI.v..6L':.]g~....q.a../o.$...9.\E]........#...G...4..A.......v.......V.i...Y.e.R..f.v.

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (625)
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	5.497502932458247
Encrypted:	false
SSDEEP:	12:2ebxffCYK+zs85BH0pYHnW5GfCYKA2TN9gs85hmdOhRL8BMnueIwkL8BMnupb7oA:2eHK+zsEap/5+KzN9gsEaOwBOBf
MD5:	9419E25405FBAD67B814A391BD8D2BFD
SHA1:	ECB1BC931B04655234DA4E5D10ADD98BB096E2BF
SHA-256:	F850F231488595125A0BB5ADB6D8DED9B7467A21EF22ACC11E6356E839CC758B
SHA-512:	8C7F724BBD869249D14D023653643CC13BC30A220438CE424F1482E6FEB6A78E83B938155766A7796124F5278450BBA4AB7C3B8E757755BCDD28ED052CAC71B9
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D
Preview:	<html>.<head><title>Pixels</title></head>.<body>..<img src="https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=9397a18a-89a9-8973-919d-66baf990759b"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9397a18a-89a9-8973-919d-66baf990759b"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZTcyZTBlM2QtNWM3NC02YzJkLTQ0NzMtYmU5NDViNDE3MDFi"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc">..</body>.</html>.

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392043&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	153156
Entropy (8bit):	5.313184589772049
Encrypted:	false
SSDEEP:	1536:PpbrUzacicmSKzO9R0cFMX/kC7dCqGjHlUHNaVcZRxRBA04VKsuntF0dTGgQ18u5:Wza1ke70eNaVGAvkF2kl
MD5:	2630B3D7AD4A41FAC67742216E506D83
SHA1:	DDA36227690CB7C9EC74DE3667DD595D59FB8EEC
SHA-256:	CD5EB76033D96219A0C4FE45FB0DF10202E1FEBCB4D086FB1305F1B3304A6B1A
SHA-512:	DF4BBC981FDD148A6EC0E97CBCCB16B66C9054EB144A6055EAC76A2B34FEFE071617E6AA00338A7D2C990ED7D521BA1FB95D086C20B4A37BB95C0820C9B9124D
Malicious:	false
Reputation:	low
URL:	https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)};function o(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var a,s=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},u=!1;function c(t){u=t}function l(t){return function(){return d(t,this,arguments)}}function d(t,e,n){try{return t.apply(e,n)}catch(t){if(f(t),a)try{a(t)}catch(t){f(t)}}}function f(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];u&&i.error.apply(i,s(["[MONITOR]"],t,!1))}function p(t,e){return-1!==t.indexOf(e)}function v(t){if(Array.from)r

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1554 x 1131, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	893327
Entropy (8bit):	7.986585511022949
Encrypted:	false
SSDEEP:	24576:tePM01X1TMQ84ZNaWDvjbwXqlRgzLEYTq:teU0Jp4ycWNDRV
MD5:	4B519A64150C8CD00D3437CC856727D3
SHA1:	2BFB7690D0B2FF6717E433020957631D3183B9AC
SHA-256:	8CD3CE1EC581937F5FA321EB4EF575505F9B1E37E8EEEF0D2151D0A20C68D546
SHA-512:	84D83588F19D6A02FBEBA6AA8F3D943DDBBC1B838FB086AC01E5E84E328CE296F3E31299F7E66B40864EC3E5F4D54E284AC146D745518B6FE005DD78DD07CC4D
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/cooking_app-f06ad6a83e83b6e5c60bc1e012c82d8f.png
Preview:	.PNG........IHDR.......k.....f.<.....pHYs.................sRGB.........gAMA......a....$IDATx....dU..O.....0C.QA..+A........kZ.u..Sw..&V]...9..3*..@....d..9T....{.;w.:MwOO....u.[7.{..9..f.<...............h@.............4.#...........................M.H.............`$...........@S0.............)............................h.F............4.#...........................M.H.............`$...........@S0.............)............................h.F............4.#...........................M.H.............`$............h.F............4.#...........................M.H.............`$...........@S0.............)............................h.F............4.#...........................M.H.............`$...........@S0.............)............................h.F............4.#...........................M.H.............`$...........@S0.............)............................h.F............4.#...........................M.H.............`$...........@S0.............)............................h

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19816, version 1.197
Category:	downloaded
Size (bytes):	19816
Entropy (8bit):	7.9873682301981574
Encrypted:	false
SSDEEP:	384:arQxjoXHfa8fEQp7X0+TdgKpEWwmgrcTXJ9iFVBW4pIksqGZAp64Mw1D:arQS7X0+xDKoTXmtVpjC4D
MD5:	0F4AEA3D462CDB64748629EFCBBF36BC
SHA1:	BA0417347AC6209ADC114AE218E8FD007E0548C0
SHA-256:	0B904723C5938B523C9AE329BA2B763681CB1DE225C8F202D11012CBFD533F1F
SHA-512:	793C53C8742621613B0C8FA73AE1B4ACCE2984388ED5126CD600AB0C7C80029F29390CEEF48A506C8AFE64AABF4BF62D5A3C5DC844AAB58E4088EF7C22526F24
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/franklin/franklin-normal-500.0f4aea3d462cdb64748629efcbbf36bc.woff2
Preview:	wOF2......Mh.......p..M...........................t....`..v.2..s.....,..l.6.$........ ..D.....D......v.p........=.2...7..6..?.....?'....l.j+...2$.T.$.H.@.nv4.$kkh<.aQT.O.C.R.5..b...-)......p....9.%.z>\-..(...M.._.9.,.n.N..^...)v}.~A.I{.....N.-..N.Ea.6.QO.W}.:P.....t.U`.z...N.<.k..>I3....@P.r...@.\|R.N.eR.6.nE..3T...=@n..R...Q..9..). .n..c.p...8_..Lq6..i6.l..mG.e....F6..y.)...\ ;.......Z......Z..B......R.3.......~.=.!..n.u.).i...SJU..x......mw...mJiF.1h.c..B.c.q....)....Cq3d..\|...u.E.Q$.En...:.Oy.4"$..dwQ...4RHi..{V..J.).#...e.9.].oj...S..HV.-..m.n....P..<..`.K.....?.I........$.6~.8.Z4.b)V..Cj...Sq.{...5.X..~........iI.0..<L..k.95.......&..W)0..?..wR...A.... .-.Z.?"B....k.v.N.n&..k..p.lT....}S{..M..x/8.C.A..a;.(T........h..l./U...0...$..+..\|.@.Ld\:IH6>..4{Z..Y..g.Q...DA\.5s.s&.. .M....f......N".ua.u......._.....Y-.Vl..P2.%..t2.d. ...).R.6m...uZl.Tm..H.....O..t.`..B0&S}..>i....2.ZU...qEDD....pb.qU..{....g\|%m.(o,<d.C ...1.....%E..FDq.S.5?O...

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65084)
Category:	downloaded
Size (bytes):	308841
Entropy (8bit):	5.345493085695167
Encrypted:	false
SSDEEP:	6144:05VtWONVC2hljjjWzFdpMZJE0hHZNkDUk:EdNNjAMZDHE
MD5:	69D0B1569BBD0B87116D60DB3A12CD34
SHA1:	E49C24DBCEE817888518C0F0E6E09196F6D9C981
SHA-256:	BAABB01C05F5A7A83CF26233FCBB29790B584AFB736CAA63CB26ED1D051AA78D
SHA-512:	FB87AA91EA0603F8F6425B3D422E1BDEC08ED26772C1464B2694430668ABDA9C799370D19BAF78286D10E8227523200BE5C053390E792B4D1DFAEE99B5ED74DA
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/ads/prebid8.1.0.js
Preview:	/* prebid.js v8.1.0.Updated: 2023-06-23.Modules: appnexusBidAdapter, ixBidAdapter, medianetBidAdapter, openxBidAdapter, pubmaticBidAdapter, rubiconBidAdapter, tripleliftBidAdapter, enrichmentFpdModule, gptPreAuction, sizeMappingV2 */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.!function(){var e,n={35706:function(e,n,t){t.d(n,{Pd:function(){return d},Th:function(){return s},_U:function(){return f}});var r=t(55730),i=t(64358),o=t(20265),a=t(34614),u=(0,t(78640).R)(),c="outstream";function s(e){var n=this,t=e.url,o=e.config,a=e.id,u=e.callback,s=e.loaded,d=e.adUnitCode,f=e.renderNow;this.url=t,this.config=o,this.handlers={},this.id=a,this.renderNow=f,this.loaded=s,this.cmd=[],this.push=function(e){"function"==typeof e?n.loaded?e.call():n.cmd.push(e):(0,i.logError)("Commands given to Renderer.push must be wrapped in a

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4772)
Category:	downloaded
Size (bytes):	4841
Entropy (8bit):	5.164530364263686
Encrypted:	false
SSDEEP:	96:RIeNmaurE2xZxc7esB5yZr//2uRVaMKPhj3kSJhpfS93UB0:RIeNmaurESZi7q1a9N3vpy3Uq
MD5:	943364173FB0FC29C9D4DC82E4715519
SHA1:	7FB376C87029DF50C9B1D0EECDAB88054D2B0D9C
SHA-256:	9811A6305DFD2A2D3197C83989A07F6286149BB47159AD4D3170237DF2F1C3FA
SHA-512:	98564C845C5DBEA1C78956780EBD07E834E8D33FF1E5E0C121FA16BAC080338F1DE4BEBBF582A06C287A6B73BEDBF9EB18380C80F2AAE871D314B7AA76C11F27
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/additionalPlaylists-bb95ce52ed85fd8f45d0.js?_sw-precache=943364173fb0fc29c9d4dc82e4715519
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{ny9q:function(n,i,e){"use strict";e.r(i),e.d(i,"mapSummaryToPlaylist",(function(){return O})),e.d(i,"additionalPlaylistsQuery",(function(){return H}));var t,a=e("gcR/"),o=e.n(a),s=e("VkAN"),r=e.n(s),d=e("q1tI"),l=e.n(d),u=e("Kxyt"),m=e("wXC7"),c=e.n(m),p=e("eFc+"),y=e.n(p),v=e("9i1U"),b=e("Jqp9"),g=Object(b.css)("position:absolute;top:0;left:0;bottom:0;right:0;"),f=Object(b.css)("width:100%;height:100%;position:absolute;top:-2px;left:-2px;right:0;bottom:0;border-radius:50%;border:2px solid rgba(0,0,0,0.3);border-color:rgba(0,0,0,0.3) transparent transparent transparent;animation:",Object(b.keyframes)("0%{transform:rotate(20deg);}100%{transform:rotate(380deg);}")," 1500ms cubic-bezier(0.77,0.1,0.45,0.8) infinite;"),h=Object(b.css)("animation-delay:40ms;"),P=Object(b.css)("box-sizing:border-box;width:100%;height:100%;position:absolute;border-radius:50%;border:2px solid rgba(0,0,0,0.05);"),w=Object(b.css)("margin:0 auto;width:40px;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 312x312, components 3
Category:	downloaded
Size (bytes):	32599
Entropy (8bit):	7.972315683765569
Encrypted:	false
SSDEEP:	768:N1vmRmFFT+PPu/2wcJGQRshC5pzoMTftfR2jwxYg/ed9aOjM0:HSmzT0G/wAaKC5pzffX2gYg/eyOj3
MD5:	82063159560D361F437A3652B00E7E61
SHA1:	C5FC355F061BF6A5B4E677A303D5E6DD2A4C940E
SHA-256:	DBE064FD12B6B46741C74140F51C9B03BFD4E121DF987393A0B1862B20AF57B9
SHA-512:	D91E6B532757CD7268FF74E3589CF62A31F49AB9B5D651D367D08110BD43129D72117F4EAE7EEB0E9EB0C1FF146413D1EDB979FB177EDA54DCC6FB57BD2718D8
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/athletic-image-48c84c9ba0e2ed07e6178913f3916ac8.jpg
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................8.8............................................^.........................!.1A..Qa.."q.2B....#R........$3CSTbr....%67Du....&Vcst4Ef...5FUWde..................................>......................!..1.A."..Qqr..2Ra...$345BS.#%...C..b.............?...R.....4.......i{...!._/Zw..N.j...C..~..a....9w.h...;~.w..L.L...%.h...Dm%.h..(.........G.e.h...Z..z.\.+...(....\....K.v....a\5N...o..3K...fu.....>t..2R..Os..F{..e.I.Jx..!...>..D..e.j...m.....\|..e...fjuzM..>....1.w.#..f`.;.V.o.d:...Y.QcW.&Np0P.X%;.3..[#I..#../9.....D.....R.T.c...c.."Qwew..}.Ys.&..B.)....g..r..y.....s..&.r.......li..&...I$....G..s..j...N1rvG....7..g.....=...c....._.&..#uJ....5Ym.U....J.V2<..}.(,.H....8.....I)..YfCai..."...9F..<q]<#..M.5f...;.rT$e.p0..QJ..7nH.L..d4.2s..WS..1....}....Hi...o~.X.K.%...-..T....W.nUVia.w...VI.....)H..hV}F

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65297)
Category:	downloaded
Size (bytes):	78635
Entropy (8bit):	5.263861622876498
Encrypted:	false
SSDEEP:	768:59YDXypxHVIg3Xeh2p0NH04UX+TG9qTXAdQ+fZMQnOwkqUNFJUIU7lW0+YVxiM+A:59YeHqTEZChY223CzWpV0ea7In
MD5:	A454220FC07088BF1FDD19313B6BFD50
SHA1:	265A733CB7FBC481FD2510A659A85AD55C93C895
SHA-256:	7F3145C87D3570154F633975E8A4F8D30AA38603EDABA145501E9C90DDBE186C
SHA-512:	4EA980874FEC49BC12B9504E0C46A002889421E191A3CBBDE5AE35CF29067EAE623E43BDA227BC20A0A0C7BC80AF56DF8818D97AE6A98CB80C769F5432909561
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,function(t,p){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable}))),e.forEach(function(t){v

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 600x400, components 3
Category:	dropped
Size (bytes):	37706
Entropy (8bit):	7.900625087101519
Encrypted:	false
SSDEEP:	768:CYyoFoP/kcuDvJllF5+fOCCEmln99TRsnfe8iUMMzToZ:CUw/kLjJV5+XCEmh7Rsnfe8iU3zT6
MD5:	76EE634356A08AC2AE5402073F0CD456
SHA1:	94582ED841D0E6FCB339D7297BB0E639E6DC58BF
SHA-256:	908690A960BB1ACE47997EDD7B5CCD2AA3E1145B4BB41EDE1E96D56D2C87B905
SHA-512:	FD453A6AB8A217050F89D83CB1B15FB51CC4422E86235274047E62CB59D8705B56E5005FE79DA3F77130013547C5791E731342960B44DFB53C2C4095DAB4DEFF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38622)
Category:	downloaded
Size (bytes):	39606
Entropy (8bit):	5.679119871052659
Encrypted:	false
SSDEEP:	768:jKvZzLcOBo9xlOrGstkk9XPAiSjsi3l2IlrBj7aMSWMCGDtYp3:jKloFOr9tkk9fU12ItBxMvYV
MD5:	509FC31DA1611D556288E9EFEAAC7FFA
SHA1:	F41923D59672895D3B295F5630665AADFD08F1C0
SHA-256:	0EDB7FF8B4775B1A73C15D06B1C7EDAB503F0F5A30B2DBF1A139D65A1C18E0EC
SHA-512:	1343D77ECA31AA1A975F669651F8D7DA9EAD4164D6C44127F0FE6AB090A1800C95273C608C67AE6C99A3D1670DA6CE2E922881C9F5577F71A5DFF30DAF3FAC83
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function x(C){return C}var q=this\|\|self,W=function(C,k,m,Y,t){if(!(t=(Y=k,q.trustedTypes),t)\|\|!t.createPolicy)return Y;try{Y=t.createPolicy(C,{createHTML:T,createScript:T,createScriptURL:T})}catch(I){if(q.console)q.console[m](I.message)}return Y},T=function(C){return x.call(this,C)};(0,eval)(function(C,k){return(k=W("bg",null,"error"))&&1===C.eval(k.createScript("1"))?function(m){return k.createScript(m)}:function(m){return""+m}}(q)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){var

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESECAa8WLXRHlPGPDOW4QQem0&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13319)
Category:	downloaded
Size (bytes):	13381
Entropy (8bit):	5.420173209500004
Encrypted:	false
SSDEEP:	192:dXJaIL50EhqDUZwd0V1xpHPVqtG+Tlj9Mvh:BBL57hqDUJFCPJjSh
MD5:	5069485BC406F6B26EC21864896596D7
SHA1:	8E3A3F8BD2F8E9A7C33236CE52C3AB000BDFA76A
SHA-256:	9F78D953D897585B6EAF58C94578A8366EAF0B1505D7FCB68A31E4E40679832E
SHA-512:	CA7E0D29FAE3BFC213C92F6D67F6135559A2F23C53FFD6B4EB092C7B58AB60C72EF7C3E49F1B77A1A38C352EDB675FC25D052E5C8BC14369817A345338D01BC0
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/commentsForm-33d5d4cf5aa475738f35.js?_sw-precache=5069485bc406f6b26ec21864896596d7
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[65],{"2XQA":function(e,a,t){"use strict";t.r(a),t.d(a,"validate",(function(){return P}));var n=t("gcR/"),r=t.n(n),o=t("q1tI"),i=t.n(o),l=t("X6oL"),c=t("MCI9"),s=t("Vg22"),u=t("vBu7"),m=t("PxMw"),d=t.n(m),f=t("hKNt"),p=t("pVnL"),v=t.n(p),b=t("RIqP"),g=t.n(b),O=t("Jqp9"),h=t("X1K8"),y=Object(O.css)("margin-top:6px;"),N=function(e){var a=e.input,t=e.options,n=a.name,o=a.onChange,i=a.onBlur,l=a.onFocus,c=t.map((function(e,t){var c=e.label,s=e.value,u=a.value.includes(s),m="".concat(n,"[").concat(t,"]");return r()(h.a,{className:y,label:c,input:{id:m,name:m,value:s,checked:u,onChange:function(e){var t=g()(a.value);return e.target.checked?t.push(s):t.splice(t.indexOf(s),1),i(t),o(t)},onFocus:l}},m)}));return r()("div",{},void 0,c)};N.displayName="FieldComponent";var j=N;function x(e){return i.a.createElement(c.Field,v()({},e,{type:"checkbox",component:j}))}x.displayName="CheckboxGroup";var A=x,C=t("f81r"),T=t("e0Jg"),I=t("wXC7"),L=t.n(I),w

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 708x446, components 3
Category:	downloaded
Size (bytes):	41953
Entropy (8bit):	7.97851540698083
Encrypted:	false
SSDEEP:	768:lSP5T7oc2CssNA/gZzc1eZ8teVm6Xj9TXLij3wMDD9QbYs8Dfqoc4Mq/WbHqgN:lA/YAKgZzcoRj9PibTDJLDfqN4pWjq+
MD5:	EE327607976B77593F1D9B44D6A5C9D4
SHA1:	5291898D28195251BFE7D7051A8E76E378D9D7C6
SHA-256:	D936D9754F9D669B739BED117C88B9DCCB3AED9F9D4CB2ECF5703023B4F6B842
SHA-512:	84B376462216BFCDA804C8D29E24B9EE9B4DB06E8D2936957C235EC2EB5A54AA1F938B8E5DB00BE10FE3E07DA51BAFF7012C9CC150A7A6D438926227DE7AF890
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/image.jpg
Preview:	......JFIF...........................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|.............."..........3................................................................LU\....`.....;.h..>V.40..N...8..\..PV...x."#..k.v. ...}.j.....0i.+!5..?R.6.9.+...kw..=&7........y3!:.j` .:..ni...{q..$.i.4'.8=...TI....m,3...........U,...&....\|r.oU.+....4...>.mx\|A...E.......V...M..+.F4.[d.%...i....v....... ..........P.3..Q}60..Tx......r.W.:...>.e5.4..^..J)..>T..u..o'F...>...#3iJ...WT..d.Np<+.....k.oo.>....p.......... ...2.......+....R...p....5..}.]...f...:..j..L.)[0\|JD-.u. .).".Z..\|,jn .X...p).....{.l.J.....k.2z:.UG..i..]gtU..laP.......y.q.t..-.X.tw1.FVZ........'..~KWyKdW.&.x..b..P.....T.. ......G 0....`D...R....[ZOMY..a}#..f....$=ib.n.......VZ..t`..{.\..SL..4.U...v-h....W'..V..+5..W.Ri...2.S.W...;....5.w.cm...f....i;:.....gz/1..O...T^}.8"O.A.....v,.4..,.v...&..I....3.41....\..".......z

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 312x312, components 3
Category:	downloaded
Size (bytes):	17488
Entropy (8bit):	7.933919757826652
Encrypted:	false
SSDEEP:	384:38WuCHWTkqwOYGkTOH1qaNPVK6yxQjIRq:QCHLNOYGkTy1qahgsjIM
MD5:	5A5F9F62BFA45A1FD885AD66A9539A5E
SHA1:	FA5AA3D21E536234FAC7D086E5C363A09BDAD267
SHA-256:	99005C03B750C69BDB20AC7222B5092C3DC3A13C0DEC71C0325746554B03B037
SHA-512:	4D377E89B67E7EE5B4BC25AF7D46384667FA99DCF580AE07C3EDD4ECC36414D2646CED608D2F1D2E5E3DFDEE37CA35F688C1A508B0D489F20A6C91D623B034C2
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/audio-image-e9fd4c82808d35df03a9330e33c65257.jpg
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................8.8.............................................I.........................!..1..AQa."q..2B....#Rb..$3r.....C..4....Scs..................................9.......................!1....AQ"aq.2..........3B.#CRb..............?...r. \|................................S(*.....................................AT..................................................u.+....3..h.U+..F..D.../.j(.L......+.G...z...7.g..Vc.r.G#%ce...x.k..#.t..........................Q.PS#.8I.rr....}....d.{l>...Q..Oa..p....dz.\......#I....1]3.4.r.. @.A..d.!.s,k...kE..(.\|.T...A.ss..#h.....q>y..nK..T...1....Q6.m..%.P..5Q..$....<>k..sTa.~..r..v...........................w.Gl..h....m.<..]...+...k...X..o1.`..n.A[3.g.2.x.n......0...kQ..(......cG....,.....#.....m}]O#.YE.........+S..?.)_E.W.3&..u.....7...H.x...8~.v[.v.m\<.."...Y.N.]....~..l......

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZTcyZTBlM2QtNWM3NC02YzJkLTQ0NzMtYmU5NDViNDE3MDFi
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1652), with no line terminators
Category:	downloaded
Size (bytes):	1652
Entropy (8bit):	5.259067419049417
Encrypted:	false
SSDEEP:	48:koBfiZ62dmRFP62PckSW6cDuWzGy+rlymv/62+t:5BMdmXFPcDkDFzGy+smvV+t
MD5:	1BB27412003E9035145831D5E2DADE1F
SHA1:	835FC0E39B4EEF164A9B75D7D8C8DF3DBA69DF0C
SHA-256:	53E5CFA3554C922F54BE9585C9DFC5670F1F697135713DE2E29806A399F82BC6
SHA-512:	303A5F0920FF52E29937040E7BAE5F3D2DFD6FDE32E44EE7FEBEABCD2C76C4DEEFCD9C472DCC14D666CBE421CA4D710B37EAB470729082A59428DDC670B36F20
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID
Preview:	<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZW9oTXuTmmdZfZr30kZulQAA%26574&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://ssbsync.smartadserver.com/api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGD

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13133)
Category:	downloaded
Size (bytes):	13186
Entropy (8bit):	5.3165257008355224
Encrypted:	false
SSDEEP:	192:Gyh7neKqtYCVy6GPiCWTArYnFy0tcAOUJh+iOsIn:PlnJkBG1WM4ofsIn
MD5:	7DE843DA5589F4C57725EE4B0D29B3FE
SHA1:	EACA34370D4A5B38FE70B602F8DC53A518D8B86D
SHA-256:	5F72A1C5CAB0AB1BEF263FAA022852EBCAFEC3AD7BBE86A41EA7999F49C70DAF
SHA-512:	E4D934B3BCC98D62D1C9FEE4FA70EA00E160758F087DB5DD63E1E771F07907A9526A0525C242935E38AE27E52BFEE27374A37300C18FB5C59CBB2C0412D36F70
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/189-3e065270ece8c1d79bad.js?_sw-precache=7de843da5589f4c57725ee4b0d29b3fe
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[189],{"2ipm":function(e,t,n){"use strict";n.r(t),n.d(t,"changeDaysHDSub",(function(){return a})),n.d(t,"currentSubHDSub",(function(){return o})),n.d(t,"priceHDSub",(function(){return c})),n.d(t,"promoRateDisclaimerHDSub",(function(){return u})),n.d(t,"changeSubscriptionAll",(function(){return d})),n.d(t,"changeSubscriptionBody",(function(){return l})),n.d(t,"changeSubscriptionButton",(function(){return s})),n.d(t,"keepSubscriptionAll",(function(){return p})),n.d(t,"contactCareAll",(function(){return y})),n.d(t,"confirmationMessageTitleHDSub",(function(){return m})),n.d(t,"confirmationMessageCopyHDSub",(function(){return b})),n.d(t,"technicalErrorAll",(function(){return f}));var r=n("gcR/"),i=n.n(r),a=(n("q1tI"),"Change your home delivery"),o="Current home delivery",c=function(e){var t=e.weeklyPrice;return"".concat(t," every week")},u=function(e){var t=e.fullRateAmount,n=e.currentRateAmount;return i()("span",{},void 0,"*Your promotion

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html?
Preview:	<html></html>

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5542)
Category:	downloaded
Size (bytes):	5602
Entropy (8bit):	5.345154974536213
Encrypted:	false
SSDEEP:	96:QggpdzeqDYEUt4OqASfP5+Ya69UtHtTQeuyCXe58Z:mpdzevEuToPMYdUtHt1uyCu5e
MD5:	E10FDABDBC7EEF7835D3FE551148AA16
SHA1:	CE3CC0343BD64B2F376371724EADAA425043248D
SHA-256:	77AE7B09B5FC212FA0AF16CEE199BB7D0782B3DD763DECDA4F42AAC8E6001F12
SHA-512:	62F3CB6DB7D238BF9D01CC19EA9DC782616ACDE2C1C5E57D07F6358DF49EB144E44E427AC6CD1681DF67696EC213257DED99D2B95F015239C486AFFC76E9BEA8
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/audioblock-ca3d723f343fe31abc72.js?_sw-precache=e10fdabdbc7eef7835d3fe551148aa16
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[49],{L1Rh:function(a,e,i){"use strict";i.r(e);var t=i("VkAN"),r=i.n(t),n=i("gcR/"),o=i.n(n),c=i("pVnL"),s=i.n(c),l=i("J4zp"),d=i.n(l),u=i("q1tI"),m=i.n(u),p=i("X6oL"),h=i("cr+I"),g=i.n(h),w=i("eFc+"),b=i.n(w),v=i("QS0n"),f=i("O5al"),y=i.n(f),T=i("OXmc"),k=i.n(T),S=i("4zjr"),P=i.n(S),x=i("pCca"),E=i("sOrY"),M=i("M5Mg"),j=i("Kjui");var A,L=i("qwrD"),O=i("Jqp9"),N=Object(O.css)("margin-bottom:1rem;");function I(a){var e,i,t,r,n,c=a.data,l=a.article,h=a.url,w=Object(x.a)().initialDeviceType,b=Object(p.useTracking)({asset:{url:h\|\|""},presentation:{program:{breakpoint:{initial:w\|\|""}}}}),f=b.Track,T=b.trackEvent,S=Object(v.useLocation)(),j=Object(u.useRef)(null),A=Object(u.useReducer)(E.a,{showTranscript:!1,currentTime:0,isPlaying:!1}),O=d()(A,2),I=O[0],U=O[1],C=function(a){if(a&&"function"==typeof a.stopPropagation&&(a.stopPropagation(),a.preventDefault()),U({showTranscript:!0}),window&&window.history&&window.history.pushState){var e=S&&g

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1940 x 2368, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	13771
Entropy (8bit):	7.416664317053969
Encrypted:	false
SSDEEP:	384:rsbuFrK8vEzIMX8DWqy0I5GcDcrU0eTMa:QbChv2JsRy0eGF3a
MD5:	65D52F3F73042D3CEBE3850EA23D814A
SHA1:	FFC0DD438F03A4B1D3C79D6ECBF4152458F3E691
SHA-256:	B10552651724A0FFA4ECA58EDBD7B9B0219D4CC26AA5449AA7626E497FECF7E1
SHA-512:	3F421A5B919ADFAAE24C6A3AE725431704EDD9EFDCD3976CA5CD8B20AB05560291A0B4FE6A052BD33E46ED422DE6C8D6A8BF93DD7F99604118B90E374AE490AD
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/sprite.png
Preview:	.PNG........IHDR.......@.............PLTEGpL.>U.8M.8L#. .5E.Gd8.L....tRNS..u;..y0`h..5_IDATx....r.X...#.>5..o..g....g......x9Dr..NuR.oA...JyA....{....^...o...`.... ......../.@A..7..e...F>+..`....+W...........................J..B...Y&Uf.d.^M..C..F.].H...'..q.v.......7.`.U.....M...I...KI>t...P.S......&I.q.JO.IR..)gK..t~2..^.g...Rm...x,......0e.........!..2..T..o.V..6.K.~[..1...9.I.r:.Kf.%)..o.....$..B.'..f.Y}2if.:...)f.')..wG.L.*.!IyY...b...K...).....H.fKr...I..\R>.KS.\|t....E....){.[.0....3...9.R!I..>My....3....j-S.N.S...R.JR..d..dI....Oj.?..N........u]..lc..EaI...~h..U..9.(.R._..Q.m......U.......U.Jy..q.0'_.2R.>.....R..@;...J9..?.......'.^..W.H./M.F..Y>.'.^Q.).zRk.... .S..r...Q.'..v...S..ZO9S..N.z...B.g....U.R.......#"..).:..N.'..1.~...>..... .<M9......4....1....6. .~Z.,{.....)..l.....i....Ve..).....`[.0jR-).z....Oi.;M.<]....ds.Qk.Io..P(.lI..0.h....).(i..j....r...x....jJ..(e[..?)t..5Ls..;)......k............................6.{o....\|..

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13103)
Category:	downloaded
Size (bytes):	13169
Entropy (8bit):	4.663565081050224
Encrypted:	false
SSDEEP:	192:E2gBNmBA52VBSv9BemDHf5a8V5uebvcCJc4/AQSFOhiT2/hNIjqoEqpFk3IsP9fI:E2Uce52v2hhw/WAk/hkhpFQcBbgH0
MD5:	5189DA5AA9659224DDACAD70F91A93E4
SHA1:	E0E1D436C00218CAE39AE73F467FE4A5268F1198
SHA-256:	BF8BDF028DDC155A1CCA7B2492BA12E784EC70D3BAEC1F87220B937FD814AC6F
SHA-512:	F97369C4B40E2941FD7154737FBE0E9BBE85AD81E97CA55F33C5822AA4DB76685D1ADEAEB88DD6D765AB83E35B3882CC5329EC7A75B6899F7154852516EAC9AB
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/WorldCupLogo2018-a56fb1eb76c9f639508c.js?_sw-precache=5189da5aa9659224ddacad70f91a93e4
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[36],{zH7N:function(e,C,a){"use strict";a.r(C);var t,r,V,H,s,n,l,o,d,p,L,f,Z,M,m,h,i,w,c,u,v,g,N,b,x,A,B,P,E,k,y=a("gcR/"),D=a.n(y),J=(a("q1tI"),a("KhZS")),j=D()("title",{},void 0,"World Cup 2018"),q=function(e){var C=e.className;return D()("svg",{viewBox:"0 0 382 56",xmlns:"http://www.w3.org/2000/svg",className:C},void 0,j,t\|\|(t=D()("path",{d:"M-4.69123e-06 5.09091V5.88493e-07H11.5292V5.09091H9.83823L11.8366 13.4215L15.6797 5.88493e-07H21.9823L25.8254 13.8843L28.1312 5.09091H26.4402V5.88493e-07H34.2801V5.09091H33.204L27.9775 23.449H20.4451L17.5243 11.8788L14.6036 23.449H6.45634L1.22978 5.09091H-4.69123e-06V5.09091Z",transform:"translate(127.128 17.124)"})),r\|\|(r=D()("path",{d:"M9.6845 -2.94247e-07C14.7573 -2.94247e-07 19.369 2.93113 19.369 8.48485C19.369 13.8843 14.7573 16.8154 9.6845 16.8154C4.61167 16.8154 2.34562e-06 13.8843 2.34562e-06 8.48485C2.34562e-06 2.93113 4.61167 -2.94247e-07 9.6845 -2.94247e-07ZM9.6845 4.31956C7.83983 4.

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9309)
Category:	downloaded
Size (bytes):	9367
Entropy (8bit):	5.393873115510937
Encrypted:	false
SSDEEP:	192:g4AhXrZ+mR39wjONTb6yLAq9KmEPR8qBqM1vKFYgv7sIJVfBJB:vcR39aelcq9KRG9MUmgv7sIJVfBn
MD5:	11175AC6E73AD443237FE4717F2E1ACE
SHA1:	665877B3FD93812DD0C8546689664116BAB2FAED
SHA-256:	45A10A8AAA5B7E01B9B0B127DA29A4046C3376B2F98E7A4E849D55B6E5261C4E
SHA-512:	71310C94A9B7E37672A0ECBFCF7C724A460A208EBDBF1F536029AAD6A47F26B85C698FA04755B5FA90DFB8D7675497EEE4659A140655D370A9E012343BB0D6F5
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/autoSave-e29f1d51273327022c43.js?_sw-precache=11175ac6e73ad443237fe4717f2e1ace
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"5xNV":function(e,t,n){"use strict";n.d(t,"d",(function(){return l})),n.d(t,"a",(function(){return d})),n.d(t,"b",(function(){return p})),n.d(t,"c",(function(){return O}));var a,r=n("VkAN"),i=n.n(r),o=n("eFc+"),s=n.n(o),u=n("NW2b"),c=n("8LP6"),l=function(e){return function(t,n){var r=n.data;if(r){var o="addToReadingList"===e,u=r[e].url;t.writeFragment({id:"ReadingListStatus:".concat(u),fragment:s()(a\|\|(a=i()(["\n fragment ReadingListStatusSave on ReadingListStatus {\n __typename\n saved\n }\n "]))),data:{saved:o,__typename:"ReadingListStatus"}})}}},d=function(e){return Object(c.a)(e)},f="0_control",v="1_number_saves_shown",b="US_saves_count",m=function(e){var t;return null==e\|\|null===(t=e[b])\|\|void 0===t?void 0:t.allocated},g=function(e){var t;return null==e\|\|null===(t=e[b])\|\|void 0===t?void 0:t.variant},p=function(e){return m(e)&&g(e)===v},O=function(e){(function(e){return m(e)&&g(e)===f}(e)

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	155758
Entropy (8bit):	5.06621719317054
Encrypted:	false
SSDEEP:	1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F
MD5:	A15C2AC3234AA8F6064EF9C1F7383C37
SHA1:	6E10354828454898FDA80F55F3DECB347FD9ED21
SHA-256:	60B19E5DA6A9234FF9220668A5EC1125C157A268513256188EE80F2D2C8D8D36
SHA-512:	B435CF71A9AE66C59677A3AC285C87EA702A87F32367FE5893CF13E68F9A31FCA0A8D14F6A7D692F23C5027751CE63961CA4FE8D20F35A926FF24AE3EB1D4B30
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.303701696057348
Encrypted:	false
SSDEEP:	3:eQWT3XWVnCk8b:wXjk8b
MD5:	96D182ED030763390735977E073F4B8D
SHA1:	486E3DB590C227CAE7ADD470316AFA7ED50E7FCE
SHA-256:	C00F42BB63A30F20FCFF991F81D81A2E52F27073CFF1501FF35F9FAAB5B805E0
SHA-512:	2C3B9FA6DBF1666A64ECACA2F44385D394C1ADCAD69F075DB6D58060177978B57457F5F9127B2D0E25E3AF8A9D020E6A814DBF3297BE7119D325C56988EDFE2A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkogBQcGfomLBIFDYOoWz0SBQ3oIX6G?alt=proto
Preview:	ChwKEQ2DqFs9GgQICRgBGgQIZBgCCgcN6CF+hhoA

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29591)
Category:	downloaded
Size (bytes):	29645
Entropy (8bit):	5.428103146621888
Encrypted:	false
SSDEEP:	768:pPwZxwGvVNHIC6NwKiQKjhjDjFvlTmwlSijNl3gNlet+k9gmIAj65ljAhl4P1/uR:+vwGvbT6NwDQKjhjDjFvBmwcijNhgNo1
MD5:	789F6D5A3FB3A851B4F4E9CCC16E8B02
SHA1:	76904B024E36B2718EBC8913F0C27E67E1327F03
SHA-256:	D897336B872EFE5FEDEE11B328F75829EC40FE5116AA40CC02ACCB224DC5007E
SHA-512:	BD2904667C6701B72B6AD4A0D7882B650D0A5188B6D9980354B49337AF8E5D90CCD8AB3B012FFA00B0FC301ECCD62125CAFB08D23B723DF8295D4EB9A54D3D5C
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/ask-c408ff9a5a264659800d.js?_sw-precache=789f6d5a3fb3a851b4f4e9ccc16e8b02
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[46],{"5ugd":function(t,e,o){"use strict";var n=o("TqRt"),a=o("cDf5");Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var i=n(o("lwsE")),r=n(o("W8MJ")),s=n(o("7W2i")),l=n(o("a1gu")),c=n(o("Nsbk")),u=y(o("q1tI")),d=n(o("17x9")),p=o("Jqp9"),f=n(o("9rZX")),h=n(o("wXC7")),m=n(o("aanX")),g=y(o("sj7d")),v=o("w6U+");function b(t){if("function"!=typeof WeakMap)return null;var e=new WeakMap,o=new WeakMap;return(b=function(t){return t?o:e})(t)}function y(t,e){if(!e&&t&&t.__esModule)return t;if(null===t\|\|"object"!==a(t)&&"function"!=typeof t)return{default:t};var o=b(e);if(o&&o.has(t))return o.get(t);var n={},i=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var r in t)if("default"!==r&&Object.prototype.hasOwnProperty.call(t,r)){var s=i?Object.getOwnPropertyDescriptor(t,r):null;s&&(s.get\|\|s.set)?Object.defineProperty(n,r,s):n[r]=t[r]}return n.default=t,o&&o.set(t,n),n}function x(t){var e=function(){if("undefined"==ty

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21647
Entropy (8bit):	7.970758859554298
Encrypted:	false
SSDEEP:	384:PH08C76j7fmSJdHeqrrGs0wf5fpJxJbAeB7Srf1Cpl8vdVbeXgDxUUfAEScm66wW:f0N76j71DeqrrUUdp1bZROf1CAlV1FUv
MD5:	92270E9AAD520659FA96A6F73FCE0433
SHA1:	C2B41FAD52D4F98765EC2214299876F2DDA9D9EA
SHA-256:	789923AF17E15B9F2D2BB6AD6F8F23144C3ADAC50B510F737700F377F57EBC66
SHA-512:	9B11071218F36D93662114B0B498D18E24A7F72433CD233701DC24698D06F8014DB88F41E3E932B16DCBA1F81DB035E9856B27BE6EAD3B979E5AF2B2B251459D
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2019/07/03/reader-center/author-elian-peltier/author-elian-peltier-thumbLarge-v6.png
Preview:	.PNG........IHDR.............<.q.....tIME.....4("Y&.....orNT..w...T6IDATx..y.$.u......>.....@..c..").A..R.h.d...{...]...k..a.a.w...^k%Z.dZ.....6E..).$H..`...zzz........#...UN.`..=.....:.....{.w\|...E.......k....~...>t............n?....d.~..8Q .DF......}y.0`B......w5......n[...2.I.......<P..@j..g..C.........W.&....=...p.......A.....`r'..8..........>..0..o../......F`..h.w...+.5..q.e..............o'.-.........\|&..........:....B..n...X.\|..(l...........W..U...x.4.<u~v.y...~..m........R..t...?8..`h.4.....H;...>b....J..........;.X!@.Ey..c#@e.`....y...m.XV.g..Qk.....y.~L.+...{....0....3.W.5.0Pf....w$....8.C....Sw.........x...8..m.{.H........"...e. y..p8...$...?f.Cg.@..~................\|......F.G.]L...Y...>.i.q...q.D..R.....8.."...V.N.K<.#..aY....j.F..d{{...e.\b~a.T*I$..q.<.c8.2..x.K4.%.........n=...O...u......;.X.B..BQ.S..$......w...t.]\|.'...8..f........d...F.X....bQ\|?.......{...+...x.G:.....t{.y....0..h.;T.UvwwY\<..{...iz.>>>.\|..G.c[6.mQ,...s..q.....>...h1.{..

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1892)
Category:	downloaded
Size (bytes):	1947
Entropy (8bit):	5.328968158562351
Encrypted:	false
SSDEEP:	48:lD58WTCPmQDOYC1KvD2nRb2NjoAj9anLY84+CktCXNx:rCe/f1K72RmpaE87q
MD5:	30DA5847810B2EEF5CA667E7BE144E2C
SHA1:	BC94953B10F7CC6210B93A8E4D5B2AB5BB70AA5D
SHA-256:	1F3FF92C4DD7DCBF67B5D29A8D3940FE1A94FBEF0910A37A9A21E7FEFB0349D4
SHA-512:	5873F3D8DFBD732329B9EB62A62B1C44EE52BF7C73136F8CA3D50A7CD9EB1716869AACC97D92DE7A554B2BFF78D55509A2528FD7DC04DB4C96EE9C864AFF7128
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/blank-bc69fc3beb0b3a4f5ca2.js?_sw-precache=30da5847810b2eef5ca667e7be144e2c
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jt2X:function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var r=n("lSNA"),o=n.n(r),i=n("q1tI"),a=n("txtk");function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function u(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){o()(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(){return u(u({data:null},Object(i.useContext)(a.a)),{},{loading:!1})}},mKkl:function(e,t,n){"use strict";n.r(t),n.d(t,"blankQuery",(function(){return v})),n.d(t,"getInitialQuery",(function(){return w}));var r,o,i=n("gcR/"),a=n.n(i),c=n("

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25787)
Category:	downloaded
Size (bytes):	25947
Entropy (8bit):	5.22227140200553
Encrypted:	false
SSDEEP:	384:qkQhBnqNQFAsCWWT3folwN87V7uhcx1dyg4GcA9y:vNqzuDoOu7uhcfdy+cAo
MD5:	26C660DA501ED7AEFA73267C1F5C785B
SHA1:	5214013CAC00882FD2419A0C44C0A6FD820486A0
SHA-256:	CA7880660704B2D35DA3089D039C4DB72036DDA6B87AA5EB3F1A0AB249E3E39D
SHA-512:	211F7A1AC1462809C17CA58AD7B65112D0534CCF4A4B7C583B04166B42ED6B5D7AA21424AEA0CBBBDC005906F1A71C65027BFBC41C1E4A288496359B33DA1072
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/15-562803a2e86b5b821208.js?_sw-precache=26c660da501ed7aefa73267c1f5c785b
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{"+3M4":function(e,r,t){"use strict";t.d(r,"f",(function(){return s})),t.d(r,"g",(function(){return f})),t.d(r,"a",(function(){return p})),t.d(r,"e",(function(){return b})),t.d(r,"d",(function(){return y})),t.d(r,"c",(function(){return m})),t.d(r,"b",(function(){return v}));var n,o,a,u,i,l,c=t("lSNA"),d=t.n(c),s=(n={},d()(n,"google","google"),d()(n,"facebook","facebook"),d()(n,"apple","apple"),n),f=["facebook"],p=(o={},d()(o,"NYT_EMAIL_PASSWORD","NYT_EMAIL_PASSWORD"),d()(o,"FACEBOOK_SSO","FACEBOOK_SSO"),d()(o,"GOOGLE_SSO","GOOGLE_SSO"),d()(o,"APPLE_SSO","APPLE_SSO"),o),b=(a={},d()(a,"OPT_OUT","OPT_OUT"),d()(a,"OPT_IN","OPT_IN"),a),y=(u={},d()(u,"ACTIVE","ACTIVE"),d()(u,"DORMANT","DORMANT"),d()(u,"FREE_TRIAL","FREE_TRIAL"),u),m=(i={},d()(i,"SUSPENDED","SUSPENDED"),d()(i,"DELAYED","DELAYED"),d()(i,"DELIVERED","DELIVERED"),i),v=(l={},d()(l,"STANDARD","STANDARD"),d()(l,"MAIL","MAIL"),l)},"0ZkC":function(e,r,t){"use strict";t.r(r),t.d

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999711003276894
Encrypted:	true
SSDEEP:	24576:JYI3PEP3WbxqjMPTemMurj9lHYnEuBiLfOPTxhTt6PIiCR1K0h8:JYI3PEvMqy/MoL4E0FTp6o1zh8
MD5:	33C70C56C09E2FC7FE78FFFD5B9D12A3
SHA1:	6CD993A6FAC8795BCB0D9F931B49133F1156018F
SHA-256:	B3F29A562D2260D0C549E343A8D0758B20ED8C294D3731EA2F9472FD810DC78C
SHA-512:	0F5A80C44CD8D101D2C918444230CBF1EFB83C892040D4C2284B69FEA74510D7D780D0C15792E30C233D9B48710150F824263028ABF0C96F590830106C377E81
Malicious:	false
Reputation:	low
URL:	https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4:2f6a5d798f44d5:1
Preview:	..v/..Ak.=O.MGp.z.U..)...e....E1.... le.3`%&..B'....)....+..,....q....s.5.Dq....U.?.....N..k....z..;... .............h.Vwn]eRb7_h...y..y.T.#E...n....C..H.y..D.`g.........,..v......}..@..\|._.N......>.W...Q.D=@...j..<...CLq..r......3...(.h\..)..:[...x....."X<..../(...@ 3W.f)~...\|hI...C..V'.\|...3....?Wt.OR ..KW....^.P.(..@...#.S.......(.....m..~.....'...g..EhX.M.!...o+S)...H...}...v.......xj0%@ku..Z.8s.~..y.0H..."lr2.Mo..wv...C....0..e.7....jim.9..NP....YTz..#.T.q......`..V...l..X..w>..U..S...i...nMB.#...N...g....T....&:...R&.....>.v.....QL....Ia]C>....j...Ie....o.X..C.'.K..S..B.....-C].,.i...c?5...b...7....G..g.....>J..J..s.s..C..A0'.6.A."VQ......6.....}Vd....Y..T.....ok..j.o.B01....{.S..;.....-2....u,.X.\|.m.[.c...mC%.x..L+I)xmZ\.v.d...E.N..={.0..d...........m.2.f._..s^;....."6..g..b.)...q0..)s.A...<...G!...;.ex7r.h.../7....7....'................r.....z.....55...$..~.u..s...Pj.`..R...M_L.c....$.../X..WL);..o.....#v.=..C....x..m}..6..l.

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1191458
Entropy (8bit):	5.4186844917318915
Encrypted:	false
SSDEEP:	12288:ShbQjITqCrW88AvdDeVZcdP505UjfYWzakx4UjrHm6/lxVBtfKT0dYijZEY7iw1K:ShbQ+vQVOzzaEli8Xj343qq
MD5:	F5D429F8F3128689D94D11CE44C8709E
SHA1:	66F00BB10FDE155D871569EB05A2A8C1695366B5
SHA-256:	3F8EFF5D7523CF22E93C798BD9F5B306015F4EDEABAC64122AAA29D3603954D1
SHA-512:	02A12C474DA802E51DD4CC09641DA24EB9C0685914B3C0B60EDABF4EE53B033644C8D535D589957667592BE747B4292AE3B2E7E985773653CB75FAA15385947B
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/byline-5a719c65dc4802653631.js?_sw-precache=f5d429f8f3128689d94d11ce44c8709e
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[55,11,17,18,20,60,81,145,150,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return j}));var a=n("ygvk"),i=n("8iTF"),r=n("7WMn"),o=n("XWHH"),l=n.n(o),s=n("LgWu"),d=n("a9ya"),c=function(e,t){var n,i=null;switch(e.type){case a.a.GET_ARTICLE_REQUEST:n=function(e,t){return"".concat(t,"/rest/articles/article_").concat(e.articleId)}(e.meta,t);break;case a.a.GET_COMMENT_LIST_REQUEST:n=function(e,t){if(e.nextUrl)return e.nextUrl;var n=Object(s.parse)("".concat(t,"/rest/comments")),a={"filter[articleId]":e.articleId,"filter[isAccepted]":!0,include:"replyTo"};switch((e.sortType\|\|d.c.NEWEST)===d.c.OLDEST?a.sort="sourceCreatedAt":a.sort="-sourceCreatedAt",e.listId){case d.a.HIGHLIGHTED:a["filter[isHighlighted]"]=!0;break;case d.a.RECOMMENDED:a.sort="-recommendedCount,".concat(a.sort)}return n.query=a,Object(s.format)(n)}(e.meta,t);break;case a.a.GET_COMMENTS_REQU

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26448, version 0.0
Category:	downloaded
Size (bytes):	26448
Entropy (8bit):	7.9922794730877955
Encrypted:	true
SSDEEP:	384:O9Y3jtK/Xjo7miJfbypxGguyNua58mP535xb9sM4jqnK8iFgH7Fa1As6T+D3BU9:Oa3xSoJjmGF48mRpxN4jqOifs6TB9
MD5:	40CCFE2CC61A71E6617E56162D49B896
SHA1:	F1C18D79C8930FEDFD037CB5E5FFCEA5F50A5287
SHA-256:	4F837869B80C34ED1A128362A6ED24FF5EBDAE743DC55EB3C183AE9C8B5F4CA3
SHA-512:	BA25D70C87E7BCEC9F6FAE9B37AB76D96EE476A3F9943A8E282F145842F943862B7C86DD0F9960F1D5D6069123BD3522007006DAFB8EDFC55D3110A804EDAEB1
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/cheltenham/cheltenham-normal-200.40ccfe2cc61a71e6617e56162d49b896.woff2
Preview:	wOF2......gP..........f...........................(....`..d.,..s.....\....6.$........ .....+..v...G.m...(..I..u.'(`...!.q..UdD....d....YIe.LSLKa.C.{( (.H.z..(..v....XIFO%n...Nt..Ct._.>#.l.J..e.g.5H.....!...(..M%Q.bb.os....;I.x_......o.......%5:..37..INDP.._...<.L.pD..i.......}.\|L:V....w.oa...6..l..".q.#Y9I^..VTJ%.g...=0....M@...ZGy.lj..T.N....2b.."a.lc.....%...#%Z.T.@.BD.+.a..G.....A8....NpN.O.pd+.....B...2..L...=p........J..0us9.G?....E...$...@..b...T..o.ov..._.f=P.I.p.Rjb_....B..M....`.M8...t..If.Iv...AU.,...t.....n...x}.K...L.;'.#e...P..!3...L...9...P..._u?.7.nV..Va..V..k...+.......GF..'b... Y.,(u.Q..d(<.....a.\.&r.M9@G`[.t...J..I...t..H.....\|.7..?..b^..F.....CtQ..[!A,.. .....!..R..<~..v.S..Ux...q.2~._....B7.....G.....e.3.bva.o...$.G:.....yC.k.....A....a....#....%.....x4..X..t.p. ...#...:...r.)..e^@.4.4e.nB..2........2..`..2C.w#m..ZG47..8.q\.R...-...'...14.n........i..>..J#.....r.A.w.}..G.......".....v....C.H9T......m.4..YP.I.\|.eZGr....]...2

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?
Preview:	<html></html>

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31810
Entropy (8bit):	5.845814978374956
Encrypted:	false
SSDEEP:	768:DYVBpmuUg80OaAtFlxe7BFvqnSeSoENunkbYJObk/D5Mspg6mIUNiwdrEI:GobEDJ8D5Hw/
MD5:	2228699CEF590C6D158C06870B69F9A5
SHA1:	FC6ECBA880DAE92EB1E7E0FA571599419B4708AF
SHA-256:	D226C9E92EB3F1AFCBB0C085AE0F7029FA891729ED8300223015FB752F77D7C3
SHA-512:	6A4228608BC044ABC559613CF5A9F04CF9C4296D4D856C9B058F529E19EFCFBC12094959FB908E8C10D6D8B98AA1D2130F14D550232FEA1CBA645BD17B540E45
Malicious:	false
Reputation:	low
Preview:	{"/29390238/nyt/world/middleeast":["html",1,0,null,1,250,970,0,0,null,null,1,1,[["ID=6560fff6f3ed6a59:T=1701800031:RT=1701800031:S=ALNI_MZgr3xMv_Gz2Yot1inopB45cC1DSw",1735496031,"/","nytimes.com",1],["UID=00000da63dad0833:T=1701800031:RT=1701800031:S=ALNI_Ma4VKiiT96GGsQu9OqwiUWI_CeO7g",1735496031,"/","nytimes.com",2]],[138447675297],[6179366817],[4538914019],[3124068421],null,null,null,null,null,null,null,0,[676982996],null,null,null,null,null,"AOrYGsnV1AXYTlWfBcvnO_oP6gESIROC_bLBXOfZG29euHKmJdjjVczH1buFFUudDGwOLVd63tZ_bNIadPlKjj2s2YVtajhJtVPN91sjq9ZyxxjZr9EQfbO48iH0Czb8","CICH55Lz-IIDFbqxywEdoCkIBQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qNwBghDu-vjQ7yCDNxzlZ9H0ziS4WbOZcnVR5fg7b3tV2ueVFy-cEFfAfJfobSM-fraEPp6Td06yIzbid87dclpVcagQeI_5JqqYeML-FpINpm_UrBiKvdgdPeilowctDCnLoruJVazROUITf-Fskq4uVT5hQMAGw"]}.<span id="6179366817138447675297" data-dv-view="6179366817138447675297"><script src="https:/

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	158523
Entropy (8bit):	4.738576772152906
Encrypted:	false
SSDEEP:	192:UcHuJCbF67N3+D5BCxSBsBm99KgLIF0E9jhcqEwG83C34Oj4nke54e:UcHE3hcqEwG83C34Oj4nke54e
MD5:	114A88FB0947B8F436312BA6DB238418
SHA1:	83FBB778E7FE7746AE1BB12049B514CD0BAD8D0E
SHA-256:	EC077DBF12525B5A230F0E5ED54F6B686647763687EA23317C77543277B4F413
SHA-512:	9B6089E2EB2AC6F59BCBD1CAB20AF145C4F3B1C647AEF2DA8D4FA8B8C0E9E237C6830DDC23B46520C1A3FAC3F3AD0AA778E40B81E1A230F516CD1728CE9151D0
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/audio-app-download-50297e52380b36c9a9c7998bb4d9e70b.svg
Preview:	<?xml version="1.0" standalone="yes"?>..<svg xmlns="http://www.w3.org/2000/svg" version="1.1" width="400" height="400">.. <rect x="0" y="0" width="400" height="400" style="fill:#ffffff;shape-rendering:crispEdges;"/>.. <rect x="0" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/>.. <rect x="8.88888888888889" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/>.. <rect x="17.77777777777778" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/>.. <rect x="26.666666666666668" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/>.. <rect x="35.55555555555556" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/>.. <rect x="44.44444444444444" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13569)
Category:	downloaded
Size (bytes):	187895
Entropy (8bit):	5.572784835820514
Encrypted:	false
SSDEEP:	3072:6dZAlCjWYb1jrYypDWMjMELhA9DfFWkRv4n:6fjHJohELhA9DfYsC
MD5:	6E43EF19D3234A4694B36C9C25C38838
SHA1:	3F1532FA2873687C3F109DE9746BFF55F509BF47
SHA-256:	9AC143CF04B634CE4DB9355BE7B9B73B032851AAFBE3DE8B2DB92F513C449EC4
SHA-512:	CD1F9E5D25EC6C279E1B96C53112F0B0962832A98EAF7FF069C731A79452D67980037D7228581798B1871C07DB84AC6CD87DEDA00E4B1689EA4143AAD4EE0656
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-N5P6T9S&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"66",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__r"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"subscription.step"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"","vtp_name":"subscription.flow"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":["macro",4],"vtp_name":"purchaseFlow.flow"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"","vtp_name":"subscription.bundle_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"","vtp_name":"subscription.bundle_t

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3148
Entropy (8bit):	7.897874617462756
Encrypted:	false
SSDEEP:	96:OO4ad/TJdG9IDtzJtykUECZGhQDYCoxVrqRL:Ld/TJdCMJlRCZGIYCoXK
MD5:	319373AAF4524D94D38AA599C56B8655
SHA1:	D9893A1A34AF84A010386059A11B6AAB6255F433
SHA-256:	68D17FE3B579E967803B3BFA086047106EB7C67BA2D64149F606457E2DF5437C
SHA-512:	8BB666DCC22DF686ED6198F4AC10824363D7C689B8DD00E5FEE6296FB406DD11A75091E4D66DF9D20B9E619A7A79F323832B7D2C4E17FD18E15583EA300D46AC
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/apple-touch-icon-28865b72953380a40aa43318108876cb.png
Preview:	.PNG........IHDR.............h$u.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..O._..w.-.....ZP..c..b..0..%1j..Q..Z./..-.BA#XHL....#kg#..vj..[....n.wf...........3..s....-.....V?..].......c`l&...?..V...cc`.....10........cc`l........Ln..bQ.Q......F&'.......#..,.k.....e......e.....W(.=..........Ql......K..........O.>..Z[[...Ci=0+..~.r.......%...!.....7o..s../2.S.N..G.t..X.>F ..n...v.....+A....x./jXg..i.Ey.g...W.l.W.qU..T...mS...u."5..P..,D$....y...7......[E..!...g.;...GZdf_a.g.ed.%.E7.......0z..w..cP...7.r2.....(t.T.O.....35.1:0......a.........:r.\L.eD..S....r....;?...7..v......0.V...08...G.".Mvvv.....{'.,.....C...0.MB[333...../^..O`J....;w..ov.YPm..3.H]H.x.R.>{..dT4.0..y...#.vy........M.k.Bk.3wFX..<.G:.,..\|.r!/.%r.%0Y^.RW.F..yVX..7M.Y.xV.9L...cH.....:..V....ay.0$.......:AC...U.L.....4Yj..MYs.....9.@....vi.....yp.L.,[`....Wu..........$r.YVVV.=....../Z4.T..q.}a.......$.s`.!x.r...w.3.u..Y.L. ...vvv...Z..Q>....&.K..Z`.~.....N.......%...V.. U

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21041)
Category:	downloaded
Size (bytes):	21128
Entropy (8bit):	5.348008945864297
Encrypted:	false
SSDEEP:	384:5LauVcPP3ikVPNh3eybm6UrdDKHgfOhoN4SK:5ini8PNh3JSnOhoO
MD5:	34DA22EDFF8C2FCF0BC998311790F858
SHA1:	505C2E94B3E1C0690266D29B9054DB441B905C03
SHA-256:	D0B934F774C6AC251C7076CBDA2C426508F50FDDE55A0DB11F544DE5A43E16D8
SHA-512:	CD6C9D10D01A48F5CD4E2F574EB20C2090949FB78744638A39AC1586DF00861D83709E51F0DDBE39912212BBD2DC321F239900139F1D9E71EDED7FF087A793C8
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/182-fce11dfd2749a3f8ba8b.js?_sw-precache=34da22edff8c2fcf0bc998311790f858
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[182],{"+3M4":function(e,t,n){"use strict";n.d(t,"f",(function(){return l})),n.d(t,"g",(function(){return g})),n.d(t,"a",(function(){return m})),n.d(t,"e",(function(){return f})),n.d(t,"d",(function(){return p})),n.d(t,"c",(function(){return b})),n.d(t,"b",(function(){return h}));var r,a,o,s,i,u,c=n("lSNA"),d=n.n(c),l=(r={},d()(r,"google","google"),d()(r,"facebook","facebook"),d()(r,"apple","apple"),r),g=["facebook"],m=(a={},d()(a,"NYT_EMAIL_PASSWORD","NYT_EMAIL_PASSWORD"),d()(a,"FACEBOOK_SSO","FACEBOOK_SSO"),d()(a,"GOOGLE_SSO","GOOGLE_SSO"),d()(a,"APPLE_SSO","APPLE_SSO"),a),f=(o={},d()(o,"OPT_OUT","OPT_OUT"),d()(o,"OPT_IN","OPT_IN"),o),p=(s={},d()(s,"ACTIVE","ACTIVE"),d()(s,"DORMANT","DORMANT"),d()(s,"FREE_TRIAL","FREE_TRIAL"),s),b=(i={},d()(i,"SUSPENDED","SUSPENDED"),d()(i,"DELAYED","DELAYED"),d()(i,"DELIVERED","DELIVERED"),i),h=(u={},d()(u,"STANDARD","STANDARD"),d()(u,"MAIL","MAIL"),u)},"2P7h":function(e,t,n){"use strict";n.d(t,"b"

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	120188
Entropy (8bit):	7.998452630543028
Encrypted:	true
SSDEEP:	3072:njkbJnlnTF/HTtDQvCWXGGZSr9G6v8yhTBnQS8HY:nwVnlnlztDQq80hGo84VPh
MD5:	DB4D06F8979FF9918A145BF1EAE1FD4C
SHA1:	12E5E75B6B32440BC239E901BCB33AE2C192D641
SHA-256:	FA25A2D818E6083BD02FBEA4DF1C1CCF7BCF6E2EB08334B43A32FD731FF14B1C
SHA-512:	B1E561AE7F208BD1FE031AB419CFCD92A7EE6F6CA9BDD02C0DF1301FEF8E4CC4A2853C941D22A4FB488EF6AEF74FBED5AAA541B96605E0307AE7381F1DAD4047
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-khan-younis-01-wqvc/04israel-hamas-khan-younis-01-wqvc-jumbo.jpg?quality=75&auto=webp
Preview:	RIFFt...WEBPVP8 h...p........>.<.H...,V..P..M.T.I.m.Nh^..r...>s......YBOg....cv.K.^r....}\|.......N...........g.:......o.\|../\..w....\|...._=...o}..v...7.......}....z....'.G.#.o.....^...............................Q...k....g...=@?..wp.y..7.O..5..........-.w.vE......R...s.......................0{../.....>....k.......w.....?....I.....O._..........;....x.......+.g......o/...>&.......)........;n.s..../....-.......t..,....m......I.2.....).s..(.;n.s..$...!.Z.........%b...SU.Fv.5C...m...1..a._-...I..G......JV...L..%wT.Z..DS..iE9.v.S.xYy.J.....D?..0...f'.D.]..y\..2M..W......b.j....rnjs.P.!.@mo..h.U_....Yp..).....:....m.)xF._.*.Hs.F...Zt..B.\.a.R...W..U;h.9rva.Qk..........g...&.. g.x.cs9D.P.......i.....)....... .PTc...Q......@..OO!.x..N0Ch.2.k.....s....!.qt..y1.?x..,.UM`...o......6tk.q .../...b. ..M.3.....=...g...Ts..Z.%...w=.....9.>..[.......17.R.5..(..P.....6-.5t.#.>...wO.X.B....EcY..f.5.Zj.y....=...9....`..#.[.S.>f@g...d...V6.?VMj.]A.#E.......

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1731), with no line terminators
Category:	downloaded
Size (bytes):	1731
Entropy (8bit):	5.73340235715381
Encrypted:	false
SSDEEP:	24:C2BqwbsP1JTopFGwpzhFtzrRzN12BqbX/1a0o1NZaM/KfYCSiFf1DKH11S27S5fL:C2BqDkndRz2Bqhybj/5CS8gS5gq
MD5:	F6587BD5E2817E9770A335B81FC5CA4C
SHA1:	26E3880912A0A755C65E52733A46D3B2D929F4F1
SHA-256:	CCB246F9C1403CC5F6B67852073C8F39218D886E00CF8C6471BD3DBD6E286E8C
SHA-512:	4B196849BF59A3198C1542BA185CD301C0A1C6BCBFDB6B2473646FDBA57FED5556071CACD87A0338416C412CA3D1AA0E77D025A2CEE74E39E2DE8F3F1C319951
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69976975&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=QNPFsclET9WxvgoxPK0jMw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5c

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x687, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	63088
Entropy (8bit):	7.996916211774294
Encrypted:	true
SSDEEP:	1536:HE1sJkKmXMZ6LOg7GoAMSwDcoyYBzwry1mHJVPbOVeue:HpHmXMQLN7GoAMBtnB0gmpVTOje
MD5:	25890301756A69C0543D7E3B4D4F3D53
SHA1:	92B8B807E14450E64EBF3B10B187BD792665AA1A
SHA-256:	E0A7DFE9333B20686C96C7D2D1AE9959FDC07DADD01A0D8C8E4A290B11F9F4A4
SHA-512:	69B8E49EED01046572D6714C901683A4FE18014D3BDB2724CBCB99F3ECA39EEABE27BE387DAEACFB0CEA3146D3C345BEB55EBF1A237B74AF3BB317FE8271AE9C
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-who-health-ctlq/05israel-hamas-who-health-ctlq-jumbo.jpg?quality=75&auto=webp
Preview:	RIFFh...WEBPVP8 \...p........>.B.J...'&.....gmzFiz...&l..Ca..]..).)..k...].Y.yl........A.:.S.....{....k.s.......?......^"/.w......?P../l.............{..~...p.6....p..f. ..'...W.Z. ...............'F.b...........$2,0I......N...o.....#...?...Z..9..3\H.....f...hJ......&./..4..s.w[...$].Z<.......e.."j.^....O....X?.kRO.aI.('...j..........U..w..i............G........;.......rKx...A.LD...7......p......'.....[..GNS.>.zi.g......{.Sm...T .>.z5.z....t....&#.?..!..3.x1.....S...Re.W...2..Y)..~..g...S...TzCP.R$.y...C...u)t......5tu..=.-N...n.u...8..-..FB......s=yz...6.... .{3.Lu.....y....s`.H.v.k@.>S...\96.7.B.4g.#.'.(.V....pWx.v.{.`..._.#F....W..K%._o.....BN...q...e......_).)/B.&.P... Fxq.7......Y.~.c..U......z...A2...l..#..Q.../.k........B....E..9.. zU...Z.xA....p..J.....8[[.qk C.)..l:;7-0..cy..)#.M.y.oy...z.+.R.43.....?...Y.;0V9.sQ.6..a...."4..(.kl.....K.........#)..y.d.... ..~.....\|.m./A..D....M...j..&..{.?..8..D..CB..y....Nv...C.Vw..0...w;..7=..

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.233913935506896
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsLEwK4LzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4L994xYqJmWeV4IQL
MD5:	66D1BB3159B83CB2BE9ED066165E4C38
SHA1:	FF0D58E13E55067882F7BFFED31A1D8970FD6401
SHA-256:	3FDF2EE487005F6505D00CC9D7A3757A1942D56BCAEA69929CBD5BA110494390
SHA-512:	F55E4F9C1CEA37771D93B79F5B50295C0D25B93E7E41DBCECAD0795A96673793723A2A08DCFE5023972C5EF047FBB5FC11F4F3AB88F1018C14990590DF187B31
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=a9us&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright the Rubicon Project 2020 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3190
Entropy (8bit):	5.295678994058645
Encrypted:	false
SSDEEP:	96:IfIkKFprSOmFjOcV5tVOI4S8lyTs6AsJX:cIkKPXdEOI4GQAJX
MD5:	DCDA8651F2FD6410A0BAC2A0625874AA
SHA1:	E5955CE07E274D096B99D11A71219822C5A21C62
SHA-256:	75F781A1BC9A89AE2F3814DFB5E3DAB712C6EDD2B35A10E43A646DAA338B2F5F
SHA-512:	16508EC2C4FA149C852424936C38C2BD64201C895320D095E54D8CE151C5653E9C90EE09E2A66846903C963C6F82BA2180DFE5A33E7640F43C2ED378B919DF76
Malicious:	false
Reputation:	low
URL:	https://nyt-dti-prd-staticjs.storage.googleapis.com/analytics/et2/eventtracker-snippet.js
Preview:	!function(a){var s,c,p,_,d,l,u=[],f={pv_id:"",ctx_id:"",intra:!1,force_xhr:!1,store_last_response:!1.},g="object"==typeof a.navigator&&"string"==typeof a.navigator.userAgent&&/iP(ad\|hone\|od)/.test(.a.navigator.userAgent),y="object"==typeof a.navigator&&a.navigator.sendBeacon,.v=y?g?"xhr_ios":"beacon":"xhr";function h(){var e,t,n=a.crypto\|\|a.msCrypto;if(n)t=n.getRandomValues(.new Uint8Array(18));else for(t=[];t.length<18;)t.push(256*Math.random()^255&(e=e\|\|+new Date)),.e=Math.floor(e/256);return btoa(String.fromCharCode.apply(String,t)).replace(/\+/g,"-").replace(./\//g,"_")}if(a.nyt_et)try{console.warn("et2 snippet should only load once per page")}catch(e.){}else a.nyt_et=function(){var e,t,n,o=arguments;function r(e){var t,n,o,r,i;u.length&&(t=s+"track".,n=JSON.stringify(u),e=e,o=f.force_xhr,r=f.store_last_response,!o&&("beacon"===v\|\|y&&e)?(.o=a.navigator.sendBeacon(t,n),r&&(l=o)):((.i="undefined"!=typeof XMLHttpRequest?new XMLHttpRequest:new ActiveXObject("Microsoft.XMLHTTP").).open(

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
Category:	dropped
Size (bytes):	79900
Entropy (8bit):	7.958791727879114
Encrypted:	false
SSDEEP:	1536:dzPaU9UvZVHey0LGTaBjkTTMSOt8TRtsR7VqEDvNSTbCMttLdxhxRlt3La:dzPXU7ey06TaBjkTT1OKTRtsfDcTtNfg
MD5:	64C48E41D2C5815EF74B6F317235B45D
SHA1:	9B528146308A41A3931A7B16ECB0928B1A0D0CA4
SHA-256:	CB35938DFDA7941E11FE03FC05FF7919312A452998F840E2795676DB1A1FC1B2
SHA-512:	D0D19136D71B3811E78DC56269645AB77B18233159A5D51687F1DB2385BDBEBF2C4B9309C160EE45E5A90F0A3FA9B2C40083EE3FFC189080EB748387C028F2E9
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................C......................!..1AQ.."aq...2...#B...R...3br...$4S.%Ccs................................7.....................!..1AQaq.."..2.BR......#..3CSbr.............?...(...#...$..........p8.U....kf.P...!.n.U.GZ..R2i..(.......Q._.[.cB....@]...G.X(.

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	CSV text
Category:	downloaded
Size (bytes):	5656
Entropy (8bit):	5.066815750935662
Encrypted:	false
SSDEEP:	96:e2KfhUzhaPPxSPdnOVwe/j8R+3/+Uxr5Dz/j8GXB5dTgS:el2APx/99p5PjFPdTX
MD5:	E74F8B7C668251280CF3E52E20455A1C
SHA1:	2A79F61602370FCCF7026924C286B27196550367
SHA-256:	57BC281BE64FF5EC8E3C2258640DF6097A32F08AC5A2C346F214300EB430F176
SHA-512:	566A3EDF3C0D899E4188DA2E3F7B1736A5E6A14023C371AB0EA2F9626C886C5B6649713ECFF663360B77671BEB8667C049994EA8B5A323EFAC72CB31CE556949
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/global-f449cfd9976ad673ef2b7ab5098b85be.css
Preview:	html,.body,.div,.span,.applet,.object,.iframe,.h1,.h2,.h3,.h4,.h5,.h6,.p,.blockquote,.pre,.a,.abbr,.acronym,.address,.big,.cite,.code,.del,.dfn,.em,.img,.ins,.kbd,.q,.s,.samp,.small,.strike,.strong,.sub,.sup,.tt,.var,.b,.u,.i,.center,.dl,.dt,.dd,.ol,.ul,.li,.fieldset,.form,.label,.legend,.table,.caption,.tbody,.tfoot,.thead,.tr,.th,.td,.article,.aside,.canvas,.details,.embed,.figure,.figcaption,.footer,.header,.hgroup,.menu,.nav,.output,.ruby,.section,.summary,.time,.mark,.audio,.video {. margin: 0;. padding: 0;. border: 0;. font-size: 100%;. /* Prevent font scaling in landscape while allowing user zoom /. -ms-text-size-adjust: 100%;. -moz-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%;. text-size-adjust: 100%;. font: inherit;. vertical-align: baseline;.}../ HTML5 display-role reset for older browsers */.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.menu,.nav,.section,.summary,.main {. display: block;.}..body {. line-height: 1;.}..ol,.ul {

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27260, version 0.0
Category:	downloaded
Size (bytes):	27260
Entropy (8bit):	7.992113195075543
Encrypted:	true
SSDEEP:	768:lKucdNIHI+0AuTWbNft7WwSqJV0Y42kWhrub:DcsH8Wj7tSqv0YlKb
MD5:	7EA91EBD036309E1FE756EE3AAB272DA
SHA1:	4C565C71B74F671523AF832A06456C6687A85D55
SHA-256:	E444FDAA833E612D239CF21A335B8322AD8CB7C7BA697EC978BDB454F5059519
SHA-512:	61B2A34146B9FE29A45602C788B9BCE21522B44E42E820461E7D4147D57935DF047BE1663483A7A695B91B8742BC843D09AF2EA1C6685D649A5583446D6966FB
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/cheltenham/cheltenham-normal-300.7ea91ebd036309e1fe756ee3aab272da.woff2
Preview:	wOF2......j\|.......X..j................................`..d.,..s........V.6.$........ .....+..v.....6-........F"t;.....`..(gg...OINdh..!Y..s.f.....e."U...;d.r...X.[...YX...I.L....};v.,...I....6..I..s..do.......p.I."......9\|a..........].Y.......K.PD.I2.H..S....qu:...Y................."R.I..1G...Fd..C.Q..+@g6mT..Z.kO..........TB.1.f..%f@...;9.."........\!m..].<(7!....~.8rW\|....%.9.....h.....b.. ....+..i+L..L....'....`Ae..&..xZ.t...Pf.i.0..hj.>.rb.z....G=w...$Bn.5<...7..21...95......C...AE.B...0kuwf......s+..ET..U%.kI..7......&.rh..#.zb....-.. ..".2d...D.cl..(...+.>.f.T...........?....[?.kj-..G......=.\|....O'u.t..5.N......<m%..<.].h..h........;.).u....\v.(...W..r..Z.s..Sl.W./j_H... .....\....F,....bAl....N\|.jE.....%...>..h.\.@......&.....ff..H....Y.....<.6.e(ST...h...YI3.yE.../.-.....a.{1...P>..r....p...2m..E..W...6.R....t.*@....f..5.....Z..#..S..e..f.....Iy...0.:%........%..<....\."...a.S,:n.S.).K.....K..\.f.}..,G.O...&9.>..qe....m..

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27204, version 1.0
Category:	downloaded
Size (bytes):	27204
Entropy (8bit):	7.9907465984105635
Encrypted:	true
SSDEEP:	768:IqFnEPuawOGiYQtThwVwXAkV11rj0LqgOQ88m+Ugy:IqGuJ4jNhywQ61l0G5Tz
MD5:	996D951F04D92FEAC357036AFA5DA0BC
SHA1:	A73C00AF647A44FF21C6CBC61EB8323499100921
SHA-256:	36E359A6710A1B1DC4F1E42A5FB30425B1AF509B2721B2200F16199BB73566AD
SHA-512:	3AFEC9F7B54C6B2D1BF8FA6488DBAA91CB54C441201B1F596794E82095F17A52B596E61276432BE205CB640B28AB175FFD41ECECC4C328B9E514488AB66BC402
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/imperial/imperial-italic-700.996d951f04d92feac357036afa5da0bc.woff2
Preview:	wOF2......jD......)...i.............................J.`..v.F..b.....T..0.6.$........ ..3......[..Q.v..d7...y.....hp`y..w;J..zs.....d.4.... ..?.M.Ml.tp.nj)..;v.+.s...p\V..... ..&.0....x.l.x."w\....J..e..+.~..9.3J........%..4..7...1....nT._.....m........\..N.J.............6...@........0.....\$.v.JW.5.4.T`l.....n..-.%,..dcct..#RQ.............#......+{........r.B........X..&...pn......M..p.:.k.]..I....V..( ..7..a..l.<?k.a.d.t..~.....%.cR.@(......%...n.t.g.N.!.d..$$!.1.R.(..cyUs......W.!.~..I..<........>.(.4C^...l....(\|+..5]5l...i....ao.$[..p......Gz..M.\|..q{\|..?.k.Rd.K.6..R;e.)..#.^^........D.:..R,..Iu..V.t&.....R.t..:...9./H....y....m-<.....&q...$.Z-@.,.<.5...Z...O.9.Ob.Bv.4..F.........U.vO..t.2.*..:WW]WA...........=....)b.3..+.....n@...u....M...j..f........O...........n.._V...D.4.<..........._....b.....m..M.J.o.$(...Rk...;.Y.\....G........7..w.5....0..!..."%..h..h...Hc.5......hn...z.y.nt.G..g\|.]]~>L../.........Q.c.n.)#...!A(=.F....!.v...

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17990)
Category:	downloaded
Size (bytes):	18065
Entropy (8bit):	4.296949366369255
Encrypted:	false
SSDEEP:	384:PhAPIuIH5stheWiiKjQMCvECSq8nuJqlKxPK:5ABnrETLq8cC
MD5:	E5EF7CC08B56313D98540823FBF010CC
SHA1:	345D1F36B492A5AC4AFAF4720FD1F8D9680F649C
SHA-256:	E225C231F21ED2D5C78CE3C01C9CDFD2951990373C2E94F6353757E0D36D9ED3
SHA-512:	2CA4EBB59EE3D56CE34DBC1482B9A78A5EBF9511A10C2DB4D11F4AF91CCA1352591A2EFA251BC19307FB29D4AF1792ABED4DF1A19BDF40195D8A5CE04B05CADF
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/SportsFromTheAthleticLogo-e587aa02e1b6ef4fde30.js?_sw-precache=e5ef7cc08b56313d98540823fbf010cc
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[33],{zb9G:function(C,V,H){"use strict";H.r(V);var l,a,M,Z,t,i,p,c,d,h,f,b,L,e,k,s,o,r,n,w,v,u,m,g,N,x,P=H("gcR/"),S=H.n(P),y=(H("q1tI"),H("KhZS")),A=function(C){var V=C.className;return S()("svg",{width:"318",height:"41",viewBox:"0 0 318 41",fill:"none",xmlns:"http://www.w3.org/2000/svg",className:V},void 0,l\|\|(l=S()("path",{d:"M7.304 30.152V32H0.88V21.044H7.304C7.304 24.564 9.812 26.06 11.616 26.06C13.2 26.06 14.52 24.872 14.52 23.464C14.52 22.408 13.728 21.44 12.32 20.78L6.908 18.228C3.916 16.82 1.584 14.048 1.584 10.088C1.584 4.676 5.808 0.583998 11.352 0.583998C13.464 0.583998 15.532 1.024 18.26 2.212V1.156H24.64V10.616H18.216C18.216 7.932 16.94 6.26 14.916 6.26C13.376 6.26 12.276 7.184 12.276 8.46C12.276 9.472 12.892 10.264 14.124 10.88L20.328 13.96C23.804 15.676 26.18 19.064 26.18 22.892C26.18 28.084 22.484 32.572 15.4 32.572C12.584 32.572 11.22 32.176 7.304 30.152ZM27.3017 34.288H29.0617V16.6H27.3017V10.88H39.0057V12.86C41.557

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156011&s=165626&predirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dpubmatic.com%26id%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32034)
Category:	downloaded
Size (bytes):	105675
Entropy (8bit):	5.312511280510823
Encrypted:	false
SSDEEP:	768:K30tgx0FBmyvISJJKbWGezXp2ySBosUsNHz45mzxSbzmYeIRoPVG9O7oi4nhOmI0:20ZAyvI8akjt
MD5:	04E0B9556A78CE5CEDF86A34E5483036
SHA1:	50EFA6779FD97FC1017A8B8555FE5AAC60C9D518
SHA-256:	FE8D5A6F12533884B6896DD290E422C830E86E0228D45DBE97AC03C6E86A5B5A
SHA-512:	536418F7E371A7109779EF2CF4328A90D98A824BFE191FF0F0152795BAEAF9E4BDF761C7BD5D61DC7B4DAE6834062E847B2D62ADA9AFFC30C780C25A70E3B417
Malicious:	false
Reputation:	low
URL:	https://a1.nyt.com/analytics/comscore-streaming.js
Preview:	!function(a,b){"use strict";"function"==typeof define&&define.amd?(b(a.ns_=a.ns_\|\|{}),define('nyt_comscore_streaming',[],function(){return a.ns_})):"object"==typeof module&&module.exports?module.exports=b({}):b(a.ns_=a.ns_\|\|{})}(this,function(a){"use strict";a.ns_=a;var b=b\|\|{};b.indexOf=function(a,b){var c=-1;return this.forEach(b,function(b,d){b==a&&(c=d)}),c},b.forEach=function(a,b,c){try{if("function"==typeof b)if(c="undefined"!=typeof c?c:null,"number"!=typeof a.length\|\|"undefined"==typeof a[0]){var d="undefined"!=typeof a.__proto__;for(var e in a)a.hasOwnProperty(e)&&(!d\|\|d&&"undefined"==typeof a.__proto__[e])&&"function"!=typeof a[e]&&b.call(c,a[e],e)}else for(var f=0,g=a.length;f<g;f++)b.call(c,a[f],f)}catch(h){}};var b=b\|\|{};b.parseBoolean=function(a,b){return b=b\|\|!1,a?"0"!=a:b},b.parseInteger=function(a,b){return null==a\|\|isNaN(a)?b\|\|0:parseInt(a)},b.parseLong=function(a,b){var c=Number(a);return null==a\|\|isNaN(c)?b\|\|0:c},b.toString=function(a){if("undefined"==typeof a)retur

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	98888
Entropy (8bit):	7.997768966254605
Encrypted:	true
SSDEEP:	3072:TIiCXAZqtzSnFK+g6D7IrIK3Q++IXxnnMeG:T2XA0tzSFKCD8R+6nMH
MD5:	DCC838D98AF1BDDFCB2E8840F048A853
SHA1:	64591F3998F41D94664B8DFF5CF1EED1D7CFD6C6
SHA-256:	31811FA0978DECA1933CE23773E0C659EA2FE3146834C141BF0F76FC63CF7C3B
SHA-512:	2DEC6A8BD98855E3C64CA4647770F112A046574360C0FD865E1338B19CC417A238E1E5E673395AC35EF92EFECEBB2F39CBEE407924F04DCE711DFA24D745947A
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-miller-01-tjqm/04israel-hamas-miller-01-tjqm-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF@...WEBPVP8 4...P........>.>.I.."(..\|....emW.~.O.i....D.......M....c..h.........W..c..?x=..........;.....k.G..W?.....?.z........9......q.......Sz..~......./..D.q.G\|?....?....q....y..k....\|..............w..\O...<..._:.w......................C.....}a...............v.i..n..M.....~..E2...js.A....\|...B.W..=tT...;.&d.gi..F..Y6Y..8.>m..]r].g/sM....IP.....C[/q..DSR^sj.......1.h....7.=xN.W~`B8./..&B..}DO....RR....r4.MV.&..B.?...8.`;h..t..n.......SG....,)K.9....k.~n....f..t..o.P.......5.E\..)x..D<[h..)..{..l..x...h.h.x.l.0.L..T....T...."<......TA.5e6..4]TF.b....q.1.......T.........W.Pot..Q...+...l1..)..=..<....5C......c\|%....{D..j`..p...Z;...r..G..$N.A....Y}.q....8R...d...{....#s.f.[....[..o..>............L..]..'q.......^...0.K..s...Fy......O.Ey.7..{i.f.Q......>..........F?...}.d..C..{......)....X..\.q.`>.j......!,.........I..ZX~.q...0zt3..g.'..v."t.........rA=..>.u..7.'.N.QW.+..CY....z..z]J.G.o.....]...$.">.v..!.toZ.....-....VI...K.k.....h.

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x738, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	54928
Entropy (8bit):	7.996698976325529
Encrypted:	true
SSDEEP:	1536:VJSlmJ/yxGsdmJw3asA2o09agWuVDpPsP:VJy4/yxGsdmJw3HApg5PsP
MD5:	2C1D5C032FECD30B684499D337C779C9
SHA1:	B5A9FD0381678BC09BB873D3E63F484D30FF4DF2
SHA-256:	E83B45DE429E3ACF16BA49DB28258A5512186A4DBF5B96951FB73D1683E7BFD3
SHA-512:	518950135F68DCBA41D835668FA03FBC622C76F3AB972B67064CB20D98B3162561799ED18D31B4D56A9C89B984651D88BA3EEFAB23B23DD2EB98CE150F8E8B91
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/04/multimedia/04israel-hamas-precision-cmpb/04israel-hamas-precision-cmpb-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF....WEBPVP8 \|............>.@.K%..,...!...gn..U...~..a........{a..t-........".....o........w./.M.............d?....5....^.....K>5......?.............N."nQ....0}.....F.^/5s3...P.g)._J...6?.;.UHs.m....~Y.....xX=.ju~8.){<4....-...2..S..&......x.x.R.M.@.....p......k...!..J.....L.6..-...g......-oz....e...&..pn.T....>e.....1.?N...C...1.}NAp..4jcD.<.a/3.z.w...!..ZSK37..(....K....+....2Q'$..B....5........m...U..c..d..;j.N...../.J..95.!._X.........H....i0.*.2....B!...Yd..d.m0@ c-+a.!.$.6@O..yO}..&u<..c_........[...u2d....I....7.{....._...7...:.....S.x.n+%3^'.`B..&..(....5...A......&&_zH.5.m..0...V...f.....o=7_...R"j{!.../...{.U...5%.f..4j<Dn...m..\|8....%S..D..5.....e\.rv.X.!Uz:.U.42!?......p.3..nff:.(..}.$..~....f8....FM..)..n'e.(.jCP..x.n....W....P....AsX...7.M3\|...Z..-.'3...h2...S..G..`...>.'U..R%e.`.K.W~\..\|.3..9.1C...:b... G..%L.3i..K.....6...tQW..%.XOe.A).u.f%3wY/.U....o.~.`....q.X\.g..QWhP_c..Z.$%....].{.u...t..X.Wo.h@3,.5....Q...+...[..

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37403)
Category:	downloaded
Size (bytes):	37561
Entropy (8bit):	5.258682290711616
Encrypted:	false
SSDEEP:	384:g5swntbkp8KZOKSwRTwzlN5AuaqZShTIL8j0iZMWSZYV5eVNsva4xZ8RvLsIPs3p:hp1oSYlL6Tg8oihZ5eV2v8RvYIP+9
MD5:	1BF7CF9B566FF27E7B0B5585D81425DB
SHA1:	F2555B77E2B20B2E05A14431494D91833BCBAB77
SHA-256:	773A74009BFB89DF9E0ACC5BC10769E7AC733224B70D7CC98906352C12546F3B
SHA-512:	B74F8A8C16D0A3B23FCC5D3B737B6F6DD985361B1F78F5E884882FB6C43A8E1204FFF92AAFA8F86751873CC4DF32C4052A723E86D4035797FA02F9DBC186E12B
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/25-4442bfdc00564bf7dbda.js?_sw-precache=1bf7cf9b566ff27e7b0b5585d81425db
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"+3M4":function(e,n,t){"use strict";t.d(n,"f",(function(){return s})),t.d(n,"g",(function(){return p})),t.d(n,"a",(function(){return b})),t.d(n,"e",(function(){return y})),t.d(n,"d",(function(){return f})),t.d(n,"c",(function(){return m})),t.d(n,"b",(function(){return v}));var r,o,a,i,u,c,l=t("lSNA"),d=t.n(l),s=(r={},d()(r,"google","google"),d()(r,"facebook","facebook"),d()(r,"apple","apple"),r),p=["facebook"],b=(o={},d()(o,"NYT_EMAIL_PASSWORD","NYT_EMAIL_PASSWORD"),d()(o,"FACEBOOK_SSO","FACEBOOK_SSO"),d()(o,"GOOGLE_SSO","GOOGLE_SSO"),d()(o,"APPLE_SSO","APPLE_SSO"),o),y=(a={},d()(a,"OPT_OUT","OPT_OUT"),d()(a,"OPT_IN","OPT_IN"),a),f=(i={},d()(i,"ACTIVE","ACTIVE"),d()(i,"DORMANT","DORMANT"),d()(i,"FREE_TRIAL","FREE_TRIAL"),i),m=(u={},d()(u,"SUSPENDED","SUSPENDED"),d()(u,"DELAYED","DELAYED"),d()(u,"DELIVERED","DELIVERED"),u),v=(c={},d()(c,"STANDARD","STANDARD"),d()(c,"MAIL","MAIL"),c)},"0ZkC":function(e,n,t){"use strict";t.r(n),t.d

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 960x541, components 3
Category:	downloaded
Size (bytes):	264486
Entropy (8bit):	7.890550422986743
Encrypted:	false
SSDEEP:	6144:vgoqy/LqY3Vyno8dLy8Ct/Qw/hjtKtkjs:vFqkqYono8dL19wZjEtko
MD5:	360A34E4914AF70D7B6E2F236A797BF0
SHA1:	DFCE051959F9C07BBB00565E6242F74ADC9D0A06
SHA-256:	50456D79BB4AC577CF7FA9909061C408D67DA8740A032E7888F0D39E45F607CC
SHA-512:	01347CE10E01720BDEFAD7801BBCA46B75B4A7A20432BFBCB5974BB8E3C28D175007178274DD4D2701491EB466180E8A2474B226E2119B07FE669B333C82277B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/4546887627644252440?
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K...$.<7E......%;$.....7..$.P..O..........k.F......t9}..9B...L..q...SP.....s.J.U...ly....8.x.w..>...d#d.....Buz.'7\|...?{..:......".J..............?.sT...m.e_..N..2D.$`...q..4..}......s...N2......8..YF.k.O"..?R.i......y..?.n...?........y..`C.T.....p9.....G<...q]..ZA....'..+:......[K....VU...z..........d._.....nCzs......5.9.i;.oM.F.7..5........Xgp.o..z~.B.

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (515)
Category:	downloaded
Size (bytes):	534
Entropy (8bit):	5.267336683080207
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THY70DbvbUfNGxRw5Y2P/NM0vxTERjfCYKO+kFl+O:WDlf8EgYYDbT8N0k/yRBKO+kFlF
MD5:	D11D8E92228DAFC57F69BBD2BA930991
SHA1:	71D5DB80F05BDB1306AE80B4D489C10535456963
SHA-256:	488914BF869646A2FAD4992DC4E6F3526FEF7663176C8D944DB302578868AEFF
SHA-512:	262CA7F1C33C53158A1FDF4332DA8BF38E02FAA180A7A7B294294BBD4354BABF20D748DEEFD4CA5F861C6D39A584B627F2118858E8A9E2DEFF92F12D0C889305
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=3&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-2%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-2_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JEcBTejcqRpDRsNaxxkMATIAAAGMOy_jXgEAAAvWAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICChMyi8","size":"728x90","crid":"403207838","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"story-ad-2","amznp":"19hks1s","mediaType":"d","amznbid":"1dfwzr4"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"3"})

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	681
Entropy (8bit):	5.481331483660789
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3naXPHhW0a6UcmDQzhNRmJT:2ddATLf3EPBWrMVNRmJ
MD5:	AC79F9CF6AA8BD6F20FC5BC3A629E040
SHA1:	2C47E61CDA58E569675F08C9B519195F45A067B5
SHA-256:	8658FC44CA45CF40EE56D54BCCB269E8CBCA4AD85F1EA1BFBBC5FAF127A7DEC3
SHA-512:	E6794A513AD903FB5194AFE11FE568EEAB6B0E59D71A6D80A69C5EDFD2CEA1FECAFE21B2C8DF3F6BF9C88F952BF2C182A6F64814C0CD7D1A4C928E75877A169F
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/play.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 40 40" style="enable-background:new 0 0 40 40;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}.</style>.<path class="st0" d="M20,0.5L20,0.5c10.8,0,19.5,8.7,19.5,19.5l0,0c0,10.7-8.7,19.5-19.5,19.5H20C9.2,39.4,0.5,30.7,0.5,20l0,0..C0.5,9.2,9.2,0.5,20,0.5z"/>.<path class="st1" d="M15,26V14l12,6L15,26z"/>.</svg>.

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1046
Entropy (8bit):	5.398389340003655
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3n6/PHh3rAT+XTJ0SsEEP1lpp1rwNfdE8FJqcgHldokR:2ddATLf3yB3a+XTdEzCfdECocgHIM
MD5:	346F9807DD0B6FEB5E3B3DCB6313C24B
SHA1:	5867FC61780F97264A02D0D1A33859B0E9F14292
SHA-256:	E44027EE643A87C2B6EE2CBD3E738302BE02274940DEDE3F3AA13D0BD15AAE57
SHA-512:	EBF330E49D505B1886D1D856B6C883B1214544A639AADCE9970B2C2315F99A6ECF15AE53375B5C7D7A343948D072C4034518D84086E15CC270F9C302E29B13F3
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/audio-on.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26 26" style="enable-background:new 0 0 26 26;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st2{fill:none;stroke:#FEFEFE;stroke-linecap:round;}.</style>.<path class="st0" d="M13,25.5c6.9,0,12.5-5.6,12.5-12.5c0-6.9-5.6-12.5-12.5-12.5C6.1,0.5,0.5,6.1,0.5,13C0.5,19.9,6.1,25.5,13,25.5..z"/>.<path class="st1" d="M12,15.7v-2.4v0v0v0V11v-0.8V8.5h-0.7l-2.7,2.7H6.5c-0.4,0-0.7,0.3-0.7,0.7v2.7c0,0.4,0.3,0.7,0.7,0.7h2.1..l2.7,2.7H12v-1.7V15.7z"/>.<path class="st2" d="M17.3,8.2c1.5,1.1,2.6,3,2.6,5.3c0,2.3-1,4.2-2.6,5.3"/>.<path class="st2" d="M15.3,9.5c1.2,0.8,1.9,2.3,1.9,4c0,1.7-0.8,3.2-2,4"/>.<path class="st2" d="M13.7,10.9c0.7

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 276x200, components 3
Category:	downloaded
Size (bytes):	66603
Entropy (8bit):	7.986425195792428
Encrypted:	false
SSDEEP:	1536:UD+KdUtByUXBX3Ojhp9rEGIHuw6PxZc7+ZukwSS:ewtBX3O9nYjuweZzZwH
MD5:	3CE72D7BB5F29941A77DC5DC9250F178
SHA1:	152025938F6816B0B21FC6748E387F0B1E9004A2
SHA-256:	66A3D69C79E8438D3E3037F5BCEB89637487070B9F9B413AABF2FA8C0892FE36
SHA-512:	E6179997633226EC97FB3CEB6382D71198F3F16C120F67A9FDB844B00309FAEAB630C00757E4BE732F13C209E29E44CE2E6FBA027DCA39B21D812E014E63BC0E
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/cookiepolicy_thumbnail-49fcb5b064ab3c5f6497417dcdf6042e.jpg
Preview:	......Exif..II*.................Ducky.......d.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:773B3386DD4D11E9967487B2FD1F3FAA" xmpMM:DocumentID="xmp.did:773B3387DD4D11E9967487B2FD1F3FAA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:474D9D7FDD4D11E9967487B2FD1F3FAA" stRef:documentID="xmp.did:474D9D80DD4D11E9967487B2FD1F3FAA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2189)
Category:	downloaded
Size (bytes):	2250
Entropy (8bit):	5.158434842884001
Encrypted:	false
SSDEEP:	24:lD58em3oBOrqgQDTByILSyxFT8mIX8oHoMmKL+8X7vBTc4t3xYOQCj2/ys:lD58JZdQDTByst8mVoHUq+UBTcWYhSo9
MD5:	61162E268A23C7E8E9374127020F7AB5
SHA1:	6CB823656662EA2ACD6EB8464100484F5C63BFC4
SHA-256:	A34DFAB9EBDC1B1E6702368C907EC8AA071B7FBB362C6731DEDB3645F53A3906
SHA-512:	C0FB8A86E0F6F5F4F83E9C23987BA833FBDC2365646E8B6FE448D8D2FC0B2549DA061A6493BCC8F753C04590F1F32601BBE7B310CEBBB3EFCBE66D50B8C288E3
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/book-review-0d11a69e2206485e972a.js?_sw-precache=61162e268a23c7e8e9374127020f7ab5
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[53],{Y6Zy:function(t,n,e){"use strict";e.r(n),e.d(n,"bookReviewQuery",(function(){return a})),e.d(n,"getInitialQuery",(function(){return d}));var r,o=e("VkAN"),i=e.n(o),c=(e("q1tI"),e("eFc+")),u=e.n(c),l=e("jt2X"),a=u()(r\|\|(r=i()(["\n query BookReviewCollection($collectionId: String!) {\n legacyCollection(id: $collectionId) {\n id\n stream(first: 10) {\n edges {\n node {\n ... on Linkable {\n id\n url\n }\n ... on Article {\n id\n firstPublished\n }\n }\n }\n }\n }\n }\n"]))),s=function(t,n){n.statusCode=302,n.redirectUrl=t};function d(){return{query:a,variables:{collectionId:"https://www.nytimes.com/column/book-review-podcast"}}}n.default=function(t){var n=t.location,e=t.staticContext;return function(t,n){return!(!t\|\|"/bookreviewpodcast"!==t.pathname)&&(s("/column/book-review-podcast"

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x738, components 3
Category:	dropped
Size (bytes):	85165
Entropy (8bit):	7.973677764164909
Encrypted:	false
SSDEEP:	1536:dzPLjqzkB//u54mTlHS66DDWG8hIMIf6+od2juEvqcPwM9590FnBQwPMniMLE+zj:dzzjqz2uxlxoWGsIMISSvqzMb6Fn6wUl
MD5:	89075996C5D55E831C00922804588A58
SHA1:	8B72FFE080356470B42BC6308FA3583907F983FB
SHA-256:	761E7EF8690169D9142EACAD08F69D869B9C74B1D89770A5072F1DC49B5D4660
SHA-512:	F5437878B06672BC81009BA14C9FC3AE57DEE9EBDEF18DD3C148569B56E1A7963E96CE25FB168CA77B9C46CEB404838319B3659F95DB7BAD2CE6F92B0F73E905
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................F........................!1.AQa."q.2.......#BR.3br....$CS..4c..%E.Ts...............................0.....................!1.A.Qa."q..2..B....CR...............?....Gw \|.@. "8....4........:...Y.q.Tm.O.mv.D..h)..)....FPJ.-a.OE`...(.]H. .*.L..r..

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	89362
Entropy (8bit):	7.997930138789596
Encrypted:	true
SSDEEP:	1536:1RJNQ3cGB73tuMOH+1zDfOtjxamSIVKP/+7DUMTzBJjWDWFzfWdMOIn8GwzPa:Vq3rtto44xaj8dpJqszfjO887Pa
MD5:	E025CB875BA2EC8602B06C25DF5EFD93
SHA1:	D9D1EF2259CD280CC6959CFB23A148D55970F78E
SHA-256:	1C8A6D5DF1852B1D91897BFE28D0152BE3B47FC9E322B882EBCD33CCB0EB0450
SHA-512:	13ECDB246ECB4E0025591BE5AB3EC4E2E55DB31B3EC5312686CAD40D39641F6151F167FF96E49311749F595102594333CDD5A41D757803F9B3CDC8385E3224D6
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/10/17/multimedia/05israel-hamas-hostages-men-new/17israelgaza-photos-03-gfml-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF.]..WEBPVP8 .\..0_...*....>.@.J%..)'S.. ..gjY......K..E.p7JS6.jI...0.....<T.K..N..=....E.M.\.Z.{[.~\..U.W..\|...4.x......F...b..}.~.z.........c........g.M..t.;.!.^..C...^.....?..?.....z..;.?........ ;c.>....K........././C?.x.~k...w...>.~..p. ..............j....=.k.......k....).?....n..j%p....I...Xvc.b...Y.).O.py[..'!...+S..a.y.,?..-.A.Q.....P. ...Ii.t...M.-N...!.YV...r._...c......~i..b.......I..%?#.g.......0...d........rj8N......#..x... .)...X..l3...#eG.:ec..n.$...6....%Q2#....b....9..P..D,.(..!....)7...,$.i.1s..+....hgH`...W....~..z.4P..j.m-i..C.K.,....~.'.5q..86.Y\|.e.>......lR Y./....g...]b4..M.a...<I.......m.q..T4....e.........aG.......?oLc;.&J.?l:.....JF.?(JO&k%.v.i..U.6....@g.HW..M.G&IU}...F....D0......l.....q........Oy.h..1.....p..2...X[.M..O..gb...3{^.@+L.Z...r.j..2....W8~j....{P.0/.......=..^>.eO..[j..[I..]..rS.d]~3.....I...`.!...w.A........hT.Iq.8vM]...S.....B..v.,.A.?..u.8.tq'.==..-.e..fgd".&u>..nW.4f.1...S..Z.L...p..L.....

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1623584
Entropy (8bit):	5.418432220582484
Encrypted:	false
SSDEEP:	12288:iF015rnCxBFgbMRwamDELWT8zdym0qBj5JfjgHJ720l7v007XVKBJkb4qo2WgzYY:iF013M9rkvCj4prbzTkjMs9jOLx
MD5:	2BBA9A1DA81113C80B660C5BCB50F43E
SHA1:	8FFFB5D648B7CB0CC5F7C32EA2DB556601DE1008
SHA-256:	4D2DB18E262AA44AB22EB79A42407F97EC5AACA032C40FB89C741253C393E537
SHA-512:	052F248FB6B37AAFDABB329142A660CBDD0F6AB77FE8CF0C7F801D8CA795357E7C2DC0F89A7E4BC29897E8683790E52CC2E7FEDE0D80E8032777784E0FE160A0
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/collections-aedf777198c1ff056882.js?_sw-precache=2bba9a1da81113c80b660c5bcb50f43e
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[63,5,8,11,17,18,20,60,81,145,150,159,163,164],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return j})),n.d(t,"a",(function(){return S}));var a=n("ygvk"),i=n("8iTF"),r=n("7WMn"),o=n("XWHH"),l=n.n(o),s=n("LgWu"),c=n("a9ya"),d=function(e,t){var n,i=null;switch(e.type){case a.a.GET_ARTICLE_REQUEST:n=function(e,t){return"".concat(t,"/rest/articles/article_").concat(e.articleId)}(e.meta,t);break;case a.a.GET_COMMENT_LIST_REQUEST:n=function(e,t){if(e.nextUrl)return e.nextUrl;var n=Object(s.parse)("".concat(t,"/rest/comments")),a={"filter[articleId]":e.articleId,"filter[isAccepted]":!0,include:"replyTo"};switch((e.sortType\|\|c.c.NEWEST)===c.c.OLDEST?a.sort="sourceCreatedAt":a.sort="-sourceCreatedAt",e.listId){case c.a.HIGHLIGHTED:a["filter[isHighlighted]"]=!0;break;case c.a.RECOMMENDED:a.sort="-recommendedCount,".concat(a.sort)}return n.query=a,Object(s.format)(n)}(e.meta,t);break;case a.a.GET_C

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
Category:	dropped
Size (bytes):	138372
Entropy (8bit):	7.973610371958283
Encrypted:	false
SSDEEP:	3072:dzRRrn1GnBiFxVTB26lAPtsoBy0Oh7v9cNqTlLWMGNh3+pwGQUkGg:dzRJnonCbM6lAPtsO3Oh7BlLWHhcwGQT
MD5:	22342A0B78A8C5EF3BFBD6E33A2F4188
SHA1:	2BE619FB59E597DED3BF658AE6B753C59CB40CFA
SHA-256:	EE97BCB811A57E4EA4D400EFC7717D0C9DEEB0E52A82B5B7EA95F1DAF78F5729
SHA-512:	5251D23C66DCCBDB42C90DED6224B1BED5A268244D65683960121056BB2249F5CFC667E18D0B83772B69C949957C4F7DE5FA9328CEC15F66285F7B06BDCD1E30
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................S........................!.1AQ.."a.q.#2....BR.$br...%34CSs..ct.....5DTd&..6e..u...................................B.......................!.1AQ.aq"2....#3BRr..b..$.4S.....s5Cc.D..............?..(Z~..8z..........U..\|J.......x]d.9.....x.1.P....

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 37, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3159
Entropy (8bit):	7.892180873029145
Encrypted:	false
SSDEEP:	48:9ZMt/aUY+PrxKmMkzTFlBCRmpuce7Q7WJhIOlI6cxEwYnIIb0FGR2G/yNUh5ePmi:9+CutTpw4whXi6eEwYIIb0xUOv
MD5:	E6BDD14A70854781578BD0E2D6B1C7D3
SHA1:	19A5DE61CD868D4E3BFF21F2A87027D887C3951A
SHA-256:	8ACE62372953ABA1F03C8D4CBF7158355D6AC7D0DA8D255DEC532991E2D1AE23
SHA-512:	95266DD17801D2CE32ADC6C1F41188A26881881FED0EC78D7DDDFD1E64EFE59723C39C91B1B13C63FD6444E121086D9980F5AC0EE220A0EBD206405493F63E6B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/5760787514123188114?
Preview:	.PNG........IHDR.......%......zG.....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx..\.u......ol...`..l+....?.".6.." ....P.`........HG.Ei...j...A....`?j......3....7..M.q...4b.%.j...I.......Mz.f....~..z+..L..8.&h.FY..../.._p..-..a..fhm5.7.w.vl3_....,..LbeNa......4.r=........F.#...3.<..#....u....y.a]3.p.$.Y..XG..6.sxe..;..I.v......4.c....ME7.m#z..?..!u...C...7S........rN.r..+..=.......],R.O...v..r.s..l..<..tq..v.Gk.......:.~8..U....O,{z.<.g..9Q..p.`!......(V.M..K.q\|...vh*.W.=....^...P.....#K/_q....1,........;:..(...!:....Z..'7.a.q\|8.[...2Qu....u...)Lp...G.1.....=.&x9.0U.W].5....J.b....+G...O.....O ...g.......]wx...y...#Nc4.u....y8..........N........7o.... \(........a{..:.`...c...027p=....lr.x..!"...g....a.~C::.k....+._....th..\..~...8?.......I....+...1.1:......'.we>.......v..M.....G..".P........y!~...sx.\|lp.....k<.J....}uu.x..,.u../..vs...~...<.~yI.v..6L':.]g~....q.a../o.$...9.\E]........#...G...4..A.......v.......V.i...Y.e.R..f.v.

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	4.967024605682494
Encrypted:	false
SSDEEP:	12:YADKkbwojDLYJ/H3BvPUTauXLFW9/qYExPt8vXCNtO4W9Nu/eHLtBMCuQ:YAlbwojI/fg6Y2vwO4W9EWpOCuQ
MD5:	861F479EC60C86661A859AA1A20B9275
SHA1:	D1B913128BAC91514A008BCE6DB4944105CDDCC4
SHA-256:	AD7AF3F5E03901E19EA30B1464E578E7CB496175036A864305D811FDDEEBE2AD
SHA-512:	D590700B243E0205F415B20CA4865B81C768315510AC015C3F09171431455F3900D66097C91DE433B67E450C288254B72A6178AE583ABCC966BE6522163E1FC9
Malicious:	false
Reputation:	low
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800044447,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-4ljf7","asset":{"wordCount":0,"url":"http://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html","derivedDesk":"international_desk"},"ip":{"

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemPM:8WiIUemPM
MD5:	39FC3D21236E89707A548E7FF802C026
SHA1:	7409F920C8A197C7327B89334B5D1977F0636CEF
SHA-256:	89B4AA9E9BF8516C2AB7B5134F65D47B02071637259A14C9F60DCCC207E05CE4
SHA-512:	346A467F6FEAF83F272092AEB56F756364E0BFB38095549E9847E77770B46ED18A97E22BD756342D3356CE7F8F7CBD060656FD17EF5F94841E485B62BEF5A85A
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cb":"1"})

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	53619
Entropy (8bit):	5.7962478457292
Encrypted:	false
SSDEEP:	1536:WobEDtw1zrrOUeuFN7cr3Vr37r3Er3sr3Hs9rm1E/Lcpm0EUCol:WXDaprOUe1RfckMw1E/g5
MD5:	5A54500677C591870F69AD1832630358
SHA1:	FA0DA433908AFFAFD8CBCF7D30F0E499CF1FDFF0
SHA-256:	48606A8BD67A9464E3E30CF4AB26D9E88845B15F33ACE8C46F3B11CFAB8FC807
SHA-512:	6177F4C681BBCC6030A9994F18FF6083D669FD4FB173037C21A44935900EBDB3E9CD2FAE0BAC95CC3B69F8C1C40AEDB6C4BF1A0BA5F6D6486070A75AE9B4FC02
Malicious:	false
Reputation:	low
Preview:	{"/29390238/nyt/world/africa":["html",1,0,null,1,0,0,0,0,"height",null,1,1,null,[138456585253],[6407248690],[33107678],[3265058107],null,null,[304637],[10081118],null,null,null,0,[676982996],null,null,null,null,null,"AOrYGsn5Z0qt2sBjxryHYwbkFUTo6HryT7LQ9av_kUZBf-WrWPGPzk0r4rh0vzsWN9tGVlhpgpD3lzMBEBHTEY8jauROKjAq8xyEA3GWv52Yye7ZiCleE04","CIfPjJnz-IIDFfq80QQdDe8HrQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qNN1lk45XUGgvOLa3YKXAdFBqBs-6-Tjr9_McwtWvACNsttXYpR83soz4ZTdDir_JDA3y1TXn8ZbcnaKGAziZ6uN_5LYBw1DUwJiR8WiGsxCk_yD1Ube-CL8uPeU9nu8IpJEGEz6r0TIDw02kbi"]}.<!DOCTYPE html><span id="6407248690138456585253" data-dv-view="6407248690138456585253"><div class="GoogleActiveViewInnerContainer"style="left:0px;top:0px;width:100%;height:100%;position:fixed;pointer-events:none;z-index:-9999;"></div><style>\n\n@import url('https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,700&display=swap');\n\n\n

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news?
Preview:	<html></html>

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4395)
Category:	downloaded
Size (bytes):	4470
Entropy (8bit):	5.400673907848125
Encrypted:	false
SSDEEP:	96:ICVr/o1rFgwfh6vyCSolcRSbtQl4ZiH50qvuIQYI7pgyTJnWhTyHnzg:TVTxwf0qCSolmSbt64Z+eqvXYtBTJnWZ
MD5:	FB38989D44BFBC4344E8BBBAA8802710
SHA1:	5404702462563003D6B671E7E43B8D3F560AD348
SHA-256:	3120332C4C800234B549AA12D7CEC152194D01012BC58E74A1716706A06F2782
SHA-512:	19594E1A2602A79276E7FBF426FA90EB57EED90AA2357FD9589DA65E4576BEC527F9ECA3FAA18E9E5B408BA031EFCE6AD36D1720DD85C5513758397C226FF81B
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/accessCodeLPAllAccess-331bb86cf1a4f5301fbd.js?_sw-precache=fb38989d44bfbc4344e8bbbaa8802710
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"V6G+":function(e,t,c){"use strict";(function(e){c.d(t,"a",(function(){return p}));var n=c("TxU7"),r=c("r538"),a=c("hEyz"),s=c("zJ6h"),o=c("XWHH"),i=c.n(o),u=c("iVi/"),d=c.n(u),l=c("fTxn"),f=function(){if(!("prd"===vi.env.ENVIRONMENT)){var t,c,n=new URLSearchParams(null===(t=e)\|\|void 0===t\|\|null===(c=t.location)\|\|void 0===c?void 0:c.search);if(n.has("AUTH_HOST_OVERRIDE"))return n.get("AUTH_HOST_OVERRIDE");var r=d.a.parse(document.cookie),a=r.ACAC_BFF_HOST_OVERRIDE;if(a)return a;var s=r.AUTH_HOST_OVERRIDE;if(s)return s}return"sbx"===vi.env.ENVIRONMENT?"https://myaccount.stg.nytimes.com":vi.env.AUTH_HOST},p=function(){return new n.ApolloClient({link:r.ApolloLink.from([Object(a.createHttpLink)({uri:"".concat(f(),"/svc/activate-access/query"),fetch:i.a,fetchOptions:{credentials:"include"},headers:{"x-pageview-id":Object(l.n)(),"x-plid":l.o}})]),cache:new s.InMemoryCache})}}).call(this,c("oDJU"))},mLsP:function(e,t,c){"use strict";va

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.8698728513422216
Encrypted:	false
SSDEEP:	48:W46cFmEuBg+at1Z5RrntZRMlc1pmSjO1raWpm47n1GN/:UXBgDJ3jt3Sc1tjMrn0h
MD5:	C459746C056EF2A44D991C94C6A4F8A6
SHA1:	11B156B5B5D352EE825F26F8B4D60E082CD2A13B
SHA-256:	7756C0D16CA94BB7014AAA1A066402562E56C7D353D0F5F6CD621BB27CB2A4C5
SHA-512:	4BBFC0D40A79662B46EE486FC5004384D7B76D87F58BE056AC12F1E0945DA51D50F07C3E98C6E006717DE137104E52F9EDCB9D5BF4254330C7895F83A5419AEC
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/live-favicon-29072d699076b4150ceb4d77a33c448e.ico
Preview:	...... .... .........(... ...@..... .........%...%...................................................@ ..:%.`9%.;%..:%..:%..:%..:%..;%..9%.:%.`@ ..........................................................................8(. 9%.:%..:%..:%..:%..:%..:%..:%..:%..:%..:%..:%..:%..:#.8 . ............................................................:%.:%..:%..:%..k\..................................k\..:%..:%..:%..:%.@ ..............................................8(. :&..:%..:%...w...................................................w..:%..:%..9%..8 . ....................................5%.0:&..:%..S@......................MMM. .........///.MMM.....................S@..:%..9%..5%.0............................8(. :&..:%..wi..............jjj.........................................MMM..............w..:%..9%..8 . ....................@ ..:&..:%...v..............!!!................................................. .............xi..:%..9%......................:%.:%..S@........................

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (640)
Category:	downloaded
Size (bytes):	706
Entropy (8bit):	5.369973008419169
Encrypted:	false
SSDEEP:	12:lD71AZemTP4ciGDwmhHeXQvgM5oWifJykEcBdAmw5DNPpAneuVzpL:lD58em7Jimhh32DEcBdTAD/AL5
MD5:	F1A5BB9A49BF98FE97D02ACB229B7E39
SHA1:	632621983F74E9325321AC4B76A16687CA02B47F
SHA-256:	AD1C8E1E46C67A6C5C660FFDE1C18389620717B4178ED7162C9267E8F8E7A25B
SHA-512:	CAEDF684AD3BBB4E2305C861971DDDF37A1160D0C57E6F6C735D50BA0EA1DE8DB9538D960F92D266A4775BBBDC6029DE6685B1ECF221AF790BFCB4B295F969BF
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/brandLandingPage-7b61278485ff97a6aad2.js?_sw-precache=f1a5bb9a49bf98fe97d02acb229b7e39
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[54],{Acva:function(e,n,t){"use strict";t.r(n);var a,r=t("gcR/"),i=t.n(r),u=(t("q1tI"),t("xZye")),d=t.n(u),c=t("K5H2"),l=t("qs2k");function o(){return i()(c.ViMessagingContextProvider,{client:c.clients.landingPageBrand,performanceMeasureCallback:l.d},void 0,a\|\|(a=i()(d.a,{})))}o.displayName="Brand",n.default=o},xZye:function(e,n,t){"use strict";var a=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(n,"__esModule",{value:!0});var r=a(t("q1tI"));n.default=function(){return r.default.createElement("h1",null,"Brand Landing Page")}}}]);.//# sourceMappingURL=brandLandingPage-7b61278485ff97a6aad2.js.map

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1500x1001, components 3
Category:	dropped
Size (bytes):	130521
Entropy (8bit):	7.940688684483107
Encrypted:	false
SSDEEP:	3072:AnB4emHfK6ipzbf2cJsTCbZajeLfrRtP6mF/q6dZpxgcaz0H4DdRBp1Ns63mU:MEK6Yzbf2cJszjeLb6mF/NZ/gZc4DrV1
MD5:	CCDBB150813CB6F5A9E0381FE4EE34B1
SHA1:	29FB18EC77142F24690D9C2A059C8F83E17EB25F
SHA-256:	45038939A4DD22D2F8975D73DCE132CD23543528E1BDEB58EDD4EDD7CA27CCAB
SHA-512:	5B369803FB59BB430BC6D2FD698DAD65AA5556F9EEA919C6B4DBD6BE9B5491A8163ACD045D9B8C500BC21EE0015479B5E390B47D313812B780C4900E711EC2C0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc...C......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc...................................................A......................!..1.AQ."a2q.B...#R.3b...$r..CS..4.%..5s...............................(.....................!1..A"Q..2aqB.3R#............?....@ H...D.........@....... ............@ ..........@ ..)...@....................@ .4...Atf.].kQEE...[...8..Y6..J..-......@Z..$..@.........h...P$..@ .$....@......@ .$...@......)"%..X..YhR.TE.......xAM.!.X...C..P.@...P .%.....J...j2.U.Ph...DU. .........F....)....r..~.~.$....W......@..h..-@..w@Z..@.5D{.EG......@....X..E.".....@ ..... `.+...h....H..@"....@ h.....@.....h...P...J........@.....@....@ h... h.D.$...R.'6..%....9.a...L5.CD... -.........H....@....."....@ .$.(D.....@.........P.....*...@.....)V..e......P$...8j".P.ED.D".\|..H.......$...p6...5.P.m.^.N...#%.sm..!.4.....4xM\:..0..........B@...... h....\.....$....A...$.At!..

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x715, components 3
Category:	dropped
Size (bytes):	95709
Entropy (8bit):	7.975310855846628
Encrypted:	false
SSDEEP:	1536:dz9E1XqzWK7hyQxLMxn9eyZAU15YP0Ja9Bne9EGT/FGZvmxAnuKHtzyskgYS:dz97zWK7bZQ9X3YP59de98ZvmGu0yspz
MD5:	1AEF77D9285D2BA0398EEF7D85F18E87
SHA1:	36FBFA14F205558D8D54314D643215504F9A2955
SHA-256:	F00E4FD071CF5461496BC489A45E4CC236EE695B44DB2DCFC339E2ABE80208DA
SHA-512:	67E4B6A6118499773E1ABBF34CDC5E4C7F401CF5C7A1323CEDB8B9EE1CC00198032EFE755EDEC8DE88E16EF36417FEB28D09DBB72D80D2FE96A6AD75EAF88A09
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................F......................!..1AQaq.."...2....B....#Rb.r3$C..4S...%.5Dcs.................................=.....................!..1.AQ.a."q..2....#3BRb.CSr....$.4c..............?....n~h........;d.7>A.......>s.m..Iv....a&C.....c....X.:}.j.u.<......

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	5.143049113812332
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3ezJLM4KCezocKqD:J0+oxBeRmR9etdzRxy17ez1T
MD5:	18FFB59B61525F781CF9251045BE575D
SHA1:	BD7318B00B15B7A1C8A48524419FA2E5C27A5B6D
SHA-256:	B6682CAB65D3243B5B75EFB7279DBF49491957484780F2BA0A87632CC0E25642
SHA-512:	A032F853ABD9492232E1183D1CB1D14110B623F2E9DEC56B7B64DD576A0317DDA8D51125763E11D6642433C5364B2BD10A994EE4F1514629A4950BBAB3ABA499
Malicious:	false
Reputation:	low
URL:	http://nope.theworkpc.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /favicon.ico was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZW9oTgAEu8UX8gBU&_test=ZW9oTgAEu8UX8gBU
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 38373
Category:	downloaded
Size (bytes):	14806
Entropy (8bit):	7.9840461043702
Encrypted:	false
SSDEEP:	384:G3e9s8I7zGZWOprIaVL9ep18Z2fXMVrBMJcmj30LQPirc4w:+eKD7zMzprIaEs2KLmDUcV
MD5:	39C286BCCB26E1DA6C75345B6F3972DE
SHA1:	4BEDB42A0388E315820C63D7FA0A0E1BAAF818DB
SHA-256:	263A8BE2B9EEC45BC3E9B3E468581D14D32E22B3AF7F29FEC0094FE228495ED1
SHA-512:	F8EE7A1EF4AB3533D94B40DBF5F1C6CBFD1779F9044D34F6A2A967BEA1047A87DD493B04298BCC822B22AAFEB805F770A43950F7D7630760BDD8DBE7B4910D7C
Malicious:	false
Reputation:	low
URL:	https://myaccount.nytimes.com/unified_lire/js/standalone-client.bundle.js
Preview:	...........}.v....<....@..$K6i.....b....-..).....d..^..9.5.07.s5.7i....3xp9Iw............Gs4..U.g~.\_.E#..o{....Ep....8.....Y....4/...W.E.u.-.I........mO.T.A<...~7.C{....D.-..Z.Q.f.A...0..0.1....2..yy.>.T.a2J..U.O......lv....$..qRu......N{..7...C..UW.$.5...O....mU.aU...M<^[[..b...:.%].y>.M..6.W..$..._k..p+g..37......U....k......\|..be.H.Z[..Z.'........E.W...&...a...+.^..V/.M/.[q9.........E..Q^....i..._.6.nc.......i....<.4\|....Y#..s..fm........`.+.........%j.j..E^..Y\...4XJ, ..i...Er2K./.za.........?.C......Z&....zI+..O'..C....n{..YZ....F^8...O..b....mmmyaU.Y9..$..^1>..v.P...p\$W.:..........x.$..U.`.....0.\$.^K.D6......-......p......K...6.V.....^.=.?......?y...;;;...+...Q...?Y...o.O.`..l..T.;.'...[\|.=.N...}...o..O...+O...`w..]..'..5..........v....d..a....2....x.....no.,?./..3.........{..).......;;A...........BO.x.o..@\|]..e.bP.P.Q[]}..`.}Cbe....D]}.3u...+.nV77..jM.l\..}..E........n...>$W%h\... 8.:..GY.......1...b..Ue.kN..eC..

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 1200x538, components 3
Category:	dropped
Size (bytes):	302372
Entropy (8bit):	7.915461283488376
Encrypted:	false
SSDEEP:	6144:ydd5WRbfscvjWalB9anzUSBMGRNO0F0ljuHD+xODNiS9GpFcbLDchr:aM5vj/90926o9lSDCGSrhr
MD5:	D0C49C3C7BD6560D3564AE6C08A6463B
SHA1:	4B41A780045436A1353B9C6C5A899F02B4A9091D
SHA-256:	AA905A73A35A33D9F1E2121EBB71A08979162B022CE89E79E1C0732C66752CAC
SHA-512:	3447752A5922D78850C32BB47C7B16B86FDA7A661E13F55CC44AB666AE6A9B10E74E2E35C97FED4F4E9B03829487A9070AFAD66F632018488DF862334DCDC847
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(......(...

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25944)
Category:	downloaded
Size (bytes):	26001
Entropy (8bit):	5.315126991101402
Encrypted:	false
SSDEEP:	768:9KHVljpQSkc94NweKypNP/2WmxqyiID03ZxsirvLd370FIBsdNKf:9KHVljpQSkc9cEXKf
MD5:	E4506AA7DA56F4C7D46B6FACEEDDB4A4
SHA1:	6E8442C021882B30CF7EC083E72D88B5E0BDB08F
SHA-256:	7F3267C86069CC9B599FE1E4A9B44246008B098254F7C6503EC6B1F29BA8C0BA
SHA-512:	7F7B6F58853DB4F1B025D7BEA9C6BF4F007915F4A0D1514D93B6EC700CD9DBBB75ECE406CFD773C3CAE4CF626BE309C2575FA1B62A802980F4915DCAD479B732
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/4-24263788fe90843adf10.js?_sw-precache=e4506aa7da56f4c7d46b6faceeddb4a4
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{"+yCz":function(n,e,t){"use strict";t.d(e,"a",(function(){return p}));var r,i,u,o,a,c,l,s=t("gcR/"),f=t.n(s),d=(t("q1tI"),t("MShG")),m=t("/Efl"),v=t("2i44"),E=t("5lfh"),y=Object(E.d)("div",{target:"eddpkc80"})("position:fixed;top:",d.hb[7],";left:auto;right:",d.hb[2],";z-index:",d.S.modalContainer,";",d.P["02dp"]," max-width:calc(100% - ",d.hb[4],");max-height:calc(100vh - ",d.hb[2]," - ",d.hb[7],");padding:",d.hb[2],";overflow-y:auto;background-color:",d.O.background.primary,";border-radius:3px;"),S=Object(E.d)("div",{target:"eddpkc81"})("max-width:","244px",";overflow-x:hidden;& .display-name{overflow-x:hidden;text-overflow:ellipsis;white-space:nowrap;}"),g=Object(E.d)("div",{target:"eddpkc82"})("display:grid;justify-content:center;"),I=t("xIq5"),p=function(n){return f()(y,{innerRef:n.rootElementRef},void 0,f()(S,{},void 0,f()(d.m,{typeStyle:d.Z.title1,className:"display-name"},void 0,n.displayName),r\|\|(r=f()(d.H,{space:"1"})),

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452), with no line terminators
Category:	downloaded
Size (bytes):	84222
Entropy (8bit):	5.274622921495753
Encrypted:	false
SSDEEP:	768:6cae2g5WhipES5eemfvk9X3oJH/Kxh0Tfn74/wYNINZaeLW1/gdJV:baG5yxkZoJH/Kj0wImINZpRv
MD5:	6E77CC0D194CFA617DCB9CEA0A0CC5DB
SHA1:	348035D23B43D3BDABF1E90EF0121F05C12A6CA3
SHA-256:	55110628AD7EDEAF4E3D3AA2EE26DA2E104BF39606262777791F100180A82E8B
SHA-512:	4B3DC82DC3958905BA942F847A7D86FCEF2AD23816AE8EFFF63E007359F7B943BBED152E6E4384C146DB3EB7D02A2FB6E132C01882EE7D8E8261248D90EBBEF0
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/178-402d852444b5149d85e8.js?_sw-precache=6e77cc0d194cfa617dcb9cea0a0cc5db
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[178],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return j})),n.d(t,"c",(function(){return H})),n.d(t,"a",(function(){return I}));var r,o,a=n("gcR/"),i=n.n(a),s=n("J4zp"),u=n.n(s),c=n("q1tI"),d=n.n(c),l=n("MShG"),p=n("5Aio"),b=n("WDoI"),f=n("qkuN"),y=n("4+a0"),v=n("kc0S"),m=n("EOa1"),S=n("+yCz"),g=n("hgSA"),D=n("DRvx"),h=n("xIq5"),O=n("dZ3W"),j=d.a.createContext({setPersistentFooter:function(e){}}),H=d.a.createContext({setUserProfile:function(e){}}),C=function(e){var t=e.pageContentMaxWidth,n=e.children,a=Object(c.useContext)(p.b),s=Object(c.useState)(null),d=u()(s,2),b=d[0],y=d[1],C=Object(c.useState)(null),I=u()(C,2),N=I[0],E=I[1];Object(c.useEffect)((function(){var e;Object(f.f)(),Object(v.c)(null!=N&&null!==(e=N.subscriptions)&&void 0!==e&&e.length?"sub":"regi","")}),[]);var T=Object(c.useMemo)((function(){return N?Object(D.a)(N):[]}),[N]),w={setPersistentFooter:function(e){y(e)}},x={setUserProfile:function(e){E(e)}

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	27635
Entropy (8bit):	5.503650520570665
Encrypted:	false
SSDEEP:	384:+0OJySsC9fn8SBOEzFsB9mnNV/O2pXsn9YnXTIO9G+s29jng+lO4HBsF96nBTijn:OZLt5i
MD5:	3E3F262B81699CFF226DDFD43E81C0BF
SHA1:	60F993B3A4D1F6F31C191E981951D0117F15600E
SHA-256:	B13D4BA577F8A1E50CA84576732BD47C5608583931791B476D06BF7BED513585
SHA-512:	A8CDBC98272AC3F50F069D9FF162B4F0E47DB39F1352CC78FE9C6EBF54267697405AA99E1A7F629E5D61E2BE7649AB6FF0C05A6C4317B3204DE0FB87D580F9E5
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1000, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	44110
Entropy (8bit):	7.99510490698255
Encrypted:	true
SSDEEP:	768:0H2sPX54lZYxv+WteRq6zte0KAJny6XX50cy4IM6MWsqMQsu8CBMs0k2:0HxkZYxHtent5ny6XqNVrMeh8CSdR
MD5:	29F0BE8C6695657214C94D9CBE5F7CEE
SHA1:	479EA475F71615B5F3DCB2BBF3DBA90257D8D1F5
SHA-256:	527F34E008B04F5BBAA36980E2C8CC137FB438EA04776B6B122989AE7C343E3F
SHA-512:	CAB5E25E5EED3F0817D8354CEFA2C8569BABA350B90D654C75D364C44DDF5BC6AD797388927E6C1B3E297766C1641B16F91189A18656A330E91E72316A0131AF
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/world/middleeast/Khan-Younis-Hospital/Khan-Younis-Hospital-threeByTwoMediumAt2X.jpg?quality=75&auto=webp
Preview:	RIFFF...WEBPVP8 :...P........>.F.J'.;0(..`..gn.&..kk<T.8.`g.=.`.wi.D...?.wO.......>...g...6..M....'Go.,........h....G.&.....C_ .+....6...{..k/..G..y......=J.....o..........^....W.!.t..}M.E..O/..k@;"X..#.xg...!.....8.a....7.....1.....q ..O..".......amO...g2^?...&.c...Y.0mz....}....0..6Oz.).....;.V..h...#.}..#...5{.K.V}.!'.......P\|.....M....Nk8?G.i$. @.....l1m...(.$.....\|R\|0..n.V...{....PF....n.k..gV..5.\|......z..N.J.;.....KG.....e.U...eO.4$y......'.......7;....x{...s.@].A.].R.......c..Hb...S..\...6.........0...>9>.Gm..K].*q.9\......Ews.d.....G.K..N.......D....S.....G.v....@feb...........s..C......c..}ukB.-.l.(K^`../\|:{..q....n.cLv...%.(.....t6e...rw... ....&....\|.[/....u..h%..,.M...=.d...\|.Z.......t5..i...:.OL.r...v`..f...I...2..r...#{=...M..C....-.h.K.jJ.....1V.r..s.....\.......s...".<J>4.........t.f0-7....Q.M.......PfF$...&.T..........;..r.F=.Z1r..X..x....7......\..E....X.iW....Y+..}}..L......IiP{'.Q.4.ps.cQ6......e......T._;.N.v..

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20875)
Category:	downloaded
Size (bytes):	20964
Entropy (8bit):	5.310999777051259
Encrypted:	false
SSDEEP:	192:liufM5j7f4csFyuTKzTHXxybip+J6VXeIQZBcFFljYuYNDYjROYaYQy+7mB2MTkd:lRMas8Kzts6VOIo18tBJoMqOY7JaD14
MD5:	19CD6E7FB911F3682635A2D5278917B2
SHA1:	0B927841ABC74E9DE99F65E8F96417CA875CBADD
SHA-256:	B1857D1C2594A1B60F444715B5B0A49FC583F2748259F3354B126E417F3BB328
SHA-512:	2390EA96EB2CC3DC9288C8B868BC70E354A20985BDF2FB1552B2BC229F10313A6DDADF4B3C2641C9BD5EF647A3D299F2812ECA5D8A579528E91B23EAB55D7996
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/179-9ce786c57ce144531cbf.js?_sw-precache=19cd6e7fb911f3682635a2d5278917b2
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[179],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return w})),n.d(t,"c",(function(){return C})),n.d(t,"a",(function(){return j}));var o,r,a=n("gcR/"),i=n.n(a),c=n("J4zp"),u=n.n(c),l=n("q1tI"),d=n.n(l),s=n("MShG"),b=n("5Aio"),m=n("WDoI"),g=n("qkuN"),f=n("4+a0"),p=n("kc0S"),v=n("EOa1"),h=n("+yCz"),y=n("hgSA"),A=n("DRvx"),E=n("xIq5"),k=n("dZ3W"),w=d.a.createContext({setPersistentFooter:function(e){}}),C=d.a.createContext({setUserProfile:function(e){}}),O=function(e){var t=e.pageContentMaxWidth,n=e.children,a=Object(l.useContext)(b.b),c=Object(l.useState)(null),d=u()(c,2),m=d[0],f=d[1],O=Object(l.useState)(null),j=u()(O,2),N=j[0],x=j[1];Object(l.useEffect)((function(){var e;Object(g.f)(),Object(p.c)(null!=N&&null!==(e=N.subscriptions)&&void 0!==e&&e.length?"sub":"regi","")}),[]);var T=Object(l.useMemo)((function(){return N?Object(A.a)(N):[]}),[N]),I={setPersistentFooter:function(e){f(e)}},P={setUserProfile:function(e){x(e)}

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16286
Entropy (8bit):	6.017556020770507
Encrypted:	false
SSDEEP:	384:O4hqAiVBKc8Y/X2IQh8BzXdgYKKW0i9BfIt/+O3oCvVzjnmbHAVMW:fUdVBB/Qh8BzGYyBgUfETq3W
MD5:	898712BFDFCF6C4C2D9D90031AB54065
SHA1:	91AA337D955B7E668BADB12DF1A37748AEC0948F
SHA-256:	6E85ED06140A670036EE3E9423C98B6FBE1DC0232E3409379144099F31305454
SHA-512:	88A3B9D102F2B4C5D6563A6589697DCB08D3A38A122004D799623B33D73436327BF8FC08BFD7FEACE388C0AD76965E8A82B0C56D2025C251B42F3A3E35DCFDBD
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"b2hvZeTgH5mDqMwP2NiN6Aw","injector_basename":"sodar2","bg_hash_basename":"Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow","bg_binary":"CYyYlct1Dm3Fpk2vR+pPoXCbe5D4cQIlyKacmn1+aJhX2gVN8a3JRtOyr/Q4yIGSaOLMpBrCfWlSjKWgnxgeD7BFZf2CRiNpmoF2XF6RH0xARCAC95b0a1u3Ix/lfvBlm2Swd0I49DO5c2J4kJqrFCTPjtdPvWZ6YczqSpM8e9bgnUHyfzlPCMGHj3lcHATjsfgrj9yd67Va1ipWw2z7OBZrjGvIVuFnFcnCOhMhQhKYi8ebtcXierP4guaqEvHsJUGWaCBNhKjHsHyYGtRr7EJeCdbj5mlJPA9tfYzdztFcLTPy57udE/4TpeK5tVV99tn3DW+Ea31QqT1VEk0HbsooE09jqHOUI45vY8SZVPchwOTo0CVDSZ+VGrlNKC3HEH9ja2FKvtGphO/1//mnS7x9VcZy5MzBEIa75O0F2P8PUZMoTP5kO6zLO+5Xj+AJc6FjS7u73lOQRBCnI8LzQWh0s14Q8wl27kT732ef5Al1m5rKGcrHsKL6ehwv5fNZ64IR20S9ZyedW5K+iEcXU+is9yv7ahgRTjGJR4Qipq4aU5rk50Bh91E5ObxlfYKek1OL6aJKPg5aeOik98ev5MfPiOYoDAoA8gtgBZ6kU8UFRN5aIf2VL4QLGNLHJ4eICY/zQOwgHTu3jeIXXbZsltJscVbAmnjtAlawubnSwpYZEm8AbwEAsB758d9CCQbN4SsPsVBObJPiM4DxJYeEsrB9k0hGOrreHxBhrDIggfZIniFJS7J6na38ZTXYHN8x8sCN2fpwS3J/yOZjw89nDPupZzOCAj6IAtrJtPvdDKbKklBk8D5CFlNg0YLlcw8zi5BwqkNKlMZ72AB5j

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	64512
Entropy (8bit):	5.988126370445999
Encrypted:	false
SSDEEP:	1536:1aoP41sMwHjBD13TDk4aoP4lztK2S38sBZXV67wzVXo24Ec:1aSJMCZ1jvaSCvSssBD6UOJ
MD5:	7933CD83FC5D1A674695DE51A1D0B466
SHA1:	AA7D71E65927D4CB0C34668B12D259FBD45E123F
SHA-256:	B69C23EB4D19184157F0603AF9D2AF9B9198A2ECFB2AB74BC54717B6B5201C00
SHA-512:	B5FAB67888405B3C31014E04EADABDD0CB5BE4EF36BD4B0EB41A905C099DB90C34DA433720C8D693C4B80541FDB2463A5AE49DF2F590F0D2B0E8A6F6D6BC72C3
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/cooking-29cb7395e87deb6385764b7ca34bd313.svg
Preview:	<svg width="61" height="61" viewBox="0 0 61 61" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<g clip-path="url(#clip0_486_12097)">.<rect width="61" height="61" rx="4.35714" fill="url(#pattern0)"/>.<rect width="61" height="61" rx="4.35714" fill="url(#pattern1)"/>.</g>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0_486_12097" transform="scale(0.00195312)"/>.</pattern>.<pattern id="pattern1" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image1_486_12097" transform="scale(0.00195312)"/>.</pattern>.<clipPath id="clip0_486_12097">.<rect width="61" height="61" rx="12" fill="white"/>.</clipPath>.<image id="image0_486_12097" width="512" height="512" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAIAAAB7GkOtAAAMbWlDQ1BJQ0MgUHJvZmlsZQAASImVVwdYU8kWnluSkJDQAghICb0jUgNICaEFkF4EGyEJJJQYE4KKvSwquHYRxYquiii2lWYBsSuLYu+LBRVlXdTFhsqbkIC

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14284)
Category:	downloaded
Size (bytes):	14443
Entropy (8bit):	5.441427978103021
Encrypted:	false
SSDEEP:	192:pHIpvHICLn9tDr3HjJxnpUMcYTcf06Ax2LiwJJhd/uGIrWKKfbMD0U9K:pq1n9xznNTmUxoVHL/uGxKKjqz9K
MD5:	A36FB3D5183169E4046876A7C799A984
SHA1:	88DF7151FAEBF6AF584F51EBD97B5B1E93579FF4
SHA-256:	2AF4B1FB066DE4DA4960940FCB990E1EAB05732FE95480FFA7CF5F29F422218F
SHA-512:	BF73FAFDD645D783F1F2BAC4B37FED7C65E599B3C9CDC7A22275FE33241023A889FA54930661D3433A295348A7FEB820F19541ECCABE55E6805158EA123FF38D
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/vendors~account~byline~capsule~clientSideCapsule~collections~explainer~getstarted~liveAsset~newslett~64426ae5-506798ca96de1ea2e924.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"2ePO":function(e,t,r){"use strict";var n=r("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=n(r("lSNA"));function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function u(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){(0,i.default)(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}var a=function(e){return Array.isArray(e)&&(null==e?void 0:e.reduce((function(e,t){var r=t.productCode,n=t.isFreeTrial,o=t.freeTrialSignupTime;return u(u({},e),{},(0,i.default)({},r,{isFreeTrial:n,freeTrialSignupTime:o}

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6189)
Category:	downloaded
Size (bytes):	6339
Entropy (8bit):	5.129795135818078
Encrypted:	false
SSDEEP:	96:+hGWcr1MiLt3gZ9yXs3o1y90f58VE2WURi/RLsSFDLfb7yZcUnC0XW:+YWcr1MiLt3gbyuE2jRWYej7yZc2C0XW
MD5:	48D7BC42424B90F82FE53092046A7323
SHA1:	1E994E03FFCFA59EA05058DB3D751125D7707D34
SHA-256:	4CA19D6048F811DE9EC0459C8484D91835F14C1383BF6329CDE52A19A004CE97
SHA-512:	7C08C00D1B75D752D4FC89F6B46CD0BAB6BE7F77F5EAD4A68AD4EAE4F24CB24EB3E214FA10A6CEDA67805F0E9949EF5733C4CECF2532D0B0FCD84ABAD3A7409D
Malicious:	false
Reputation:	low
URL:	http://nope.theworkpc.com/rss_content/css/rss_blog.min.css
Preview:	/!. Copyright 2013-2019 Start Bootstrap. * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-clean-blog/blob/master/LICENSE). */body{font-size:20px;color:#212529;font-family:Lora,'Times New Roman',serif}p{line-height:1.5;margin:30px 0}p a{text-decoration:underline}h1,h2,h3,h4,h5,h6{font-weight:800;font-family:'Open Sans','Helvetica Neue',Helvetica,Arial,sans-serif}a{color:#212529;transition:all .2s}a:focus,a:hover{color:#0085a1}blockquote{font-style:italic;color:#868e96}.section-heading{font-size:36px;font-weight:700;margin-top:60px}.caption{font-size:14px;font-style:italic;display:block;margin:0;padding:10px;text-align:center;border-bottom-right-radius:5px;border-bottom-left-radius:5px}::-moz-selection{color:#fff;background:#0085a1;text-shadow:none}::selection{color:#fff;background:#0085a1;text-shadow:none}img::-moz-selection{color:#fff;background:0 0}img::selection{color:#fff;background:0 0}img::-moz-selection{color:#fff;background:0 0}#mainNav{position:absolu

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64640), with no line terminators
Category:	downloaded
Size (bytes):	220922
Entropy (8bit):	5.616490176565576
Encrypted:	false
SSDEEP:	3072:8Di/1yDzuIhzGhZMreIsCSK22bxJL9OFdK1LKQWNUCutue+g:8Dn+puCh6bLCe5
MD5:	EAC36A426218FFA99DCA9B60E575B58F
SHA1:	39345D56F11CD93656D26C95A90A565C2FBC3FFA
SHA-256:	9B1A5A94782D648867891BF6C4FC2FD590FDE78B585EB1640C07DC5934FF6E4B
SHA-512:	AB9A3FE7802CBCC586FD5FF8BCD85FB3E0F9CC0B59C035D49054B56FBC028EA6310A73365A90496446958E89D75C33303AF6AFC3D00DDD4A159D883C3D803EE4
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/vendors~accessCodeLPAllAccess~accessCodeLPCooking~accessCodeLPGames~accessCodeLPNews~activateaccess~~16fc2915-b5fb63b7557620588d95.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+mQe":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0})},"+s34":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=t.allowedSpace=t.allowedMargin=void 0;var l=r("aEAV"),n=r("uHop");const a=["padding","paddingRight","paddingLeft","paddingTop","paddingBottom","margin","marginRight","marginLeft","marginTop","marginBottom"],o=[["marginX",["marginLeft","marginRight"]],["marginY",["marginTop","marginBottom"]],["paddingX",["paddingLeft","paddingRight"]],["paddingY",["paddingTop","paddingBottom"]]],c={p:"padding",pr:"paddingRight",pl:"paddingLeft",pt:"paddingTop",pb:"paddingBottom",m:"margin",mr:"marginRight",ml:"marginLeft",mt:"marginTop",mb:"marginBottom",mx:"marginX",my:"marginY",px:"paddingX",py:"paddingY"},u=a.reduce((e,t)=>(e[t]=(e,t,r,a)=>(0,n.responsiveProp)(e,t,r,a,l.getSpace),e),{});o.forEach(e=>{let[t,r]=e;u[t]=(e,t,a,o)=>(r.forEach(t=>{(0,n.responsiveProp)(e,t,

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (44372)
Category:	downloaded
Size (bytes):	44433
Entropy (8bit):	5.356281231701382
Encrypted:	false
SSDEEP:	768:5oGnFnXfJFLvni/XDHex+EpjUoORmdoBTrzC6H+/De6hed8EkDy3Q7iZcNWMJTKS:5Dp/7SX2+Y5EqoBTrzC6UDe/Ti7hNbqs
MD5:	78A8FB0DE49431BB85499463A6652B9C
SHA1:	81F3CAA095083D148937E91503FF0FFBCA26653D
SHA-256:	A6311D189C8A7F4D09D3F1B4D8C2CA9598432849B4D9F7A61A77461E504D6D35
SHA-512:	3C2D1111B23AB1CD9FC119FA600CB1B1AB3905FA546E8A5AC326A5F8C68EDFCB645901851C8999C5536CDD26A7E2B6055E3AE4F44A25DF97F6A34626B3720201
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/comments-3f4cc7ef7c26c8dabbd6.js?_sw-precache=78a8fb0de49431bb85499463a6652b9c
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[64],{EcvJ:function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return c})),n.d(t,"c",(function(){return s}));var o=n("Jqp9"),i=n("wXC7"),a=n.n(i),r=Object(o.css)("background-color:",a.a.color.gray50,";border-radius:50%;height:","26px",";width:","26px",";max-width:unset;object-fit:cover;"),c=Object(o.css)("min-width:","26px",";width:","26px",";line-height:0;"),s=Object(o.css)("background:none;border:none;color:",a.a.color.linkColor,";font-family:",a.a.font.franklinBase,";font-size:0.5625rem;font-weight:",a.a.font.weight.medium,";letter-spacing:0.013em;line-height:normal;padding-top:3px;text-align:center;text-decoration:none;text-transform:uppercase;width:100%;&:hover{text-decoration:underline;cursor:pointer;}")},GUXu:function(e,t,n){"use strict";n.d(t,"a",(function(){return v}));var o={};n.r(o),n.d(o,"actionClass",(function(){return f})),n.d(o,"secondaryClass",(function(){return b})),n.d(o,"defaultClass

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x683, components 3
Category:	dropped
Size (bytes):	150185
Entropy (8bit):	7.949466374457719
Encrypted:	false
SSDEEP:	3072:dztDfRK8tJhxo9/0u27Ashcnu5XsfJN8xzphQc37VQUoi8+7d2OVsiu1:dzpZK8tJQt0u27Aznudsff8xTQc37Vgn
MD5:	CB717C081E342F7F54B3FC890916C5CE
SHA1:	7C7C73FD10D8AD267001EE3842C1E865D5904F1C
SHA-256:	25116195F7AA8610552D81DAE5DAA0AA6F37B9AF54C7EE7E574ADBD97E2A8F92
SHA-512:	D9BD13ED6909CE59CEA7BBDD9C1273D413CC9142758C062FF279E1D8224B1768EDC469375198FCD4E4E3EEDA5AC3D5BD08056DD90724CC0DE488F1E9A846E138
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......C.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."........................................U.......................!..1A."Qa..2q...#....$BR..3CSTbr...%4Ds....5cd..t..EU....e..................................F......................!..1A.Qa"q...2BR....#Sb....3rC..$4c....Ts.................?..(P..P.B.!B............!..(P.(P.B..B..B...!..(P.

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (396)
Category:	downloaded
Size (bytes):	475
Entropy (8bit):	5.368385990965331
Encrypted:	false
SSDEEP:	12:lD71AZeVAzgVZyK3Hv+QUgMugoHoWA2Rp/6hFV:lD58eyYy083h3IWV
MD5:	3B8BAEB92BD38E0A67E78AA8BA801FAF
SHA1:	B2D4FD8DE8694B82C4532C0351E867EA41397B04
SHA-256:	9CF114354FF6335AEF147F5C812CC005CDF58DDA35E02F2F5DECEF2DDB5D8525
SHA-512:	533989CBCCB1A53626B6222B8D405B04214B973CF9C2A2B878755D7572241536387EC94ADBEC2E3BECDCBDF2FB1C6D27B04BABC58757EA0B3A3220336C18E913
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/cookingAppDownloadLandingPage-15402b0b17005c3dc5a6.js?_sw-precache=3b8baeb92bd38e0a67e78aa8ba801faf
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[66],{"rN/5":function(n,o,a){"use strict";a.r(o);var e,i=a("gcR/"),p=a.n(i),r=(a("q1tI"),a("uHPx")),s=a.n(r),t=a("K5H2"),c=a("qs2k");function d(){return p()(t.ViMessagingContextProvider,{client:t.clients.landingPageCookingAppDownload,performanceMeasureCallback:c.d},void 0,e\|\|(e=p()(s.a,{})))}d.displayName="CookingAppDownload",o.default=d}}]);.//# sourceMappingURL=cookingAppDownloadLandingPage-15402b0b17005c3dc5a6.js.map

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1940 x 500, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4099
Entropy (8bit):	7.596712717160207
Encrypted:	false
SSDEEP:	96:xsWIxifq6ZF9B9UrFZD6iyTApHBJjQ4NfeXlm1SUuqX/6lcl:xbIgfpF9B9UrFZD6iyTAd0QfeXA1SUuS
MD5:	EC2B661EB03183076A01053AA1F158C2
SHA1:	BE2E6AE19F212CDA48AA07DBFF715B233EFF3C5B
SHA-256:	AE4487B40E2D161CB8DB6CCFDA5061EF72576F6AA71BEB3AAA8A7E3C12283807
SHA-512:	216AC9614DB038DD74A39A69D144BE2DCBB08430B137AAB98AA6CD6A36AE9FB8A1A75E488E119EB0751F760C794A73DDF074633EAC20C642E8AEEB804DEBD27D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................*....PLTE.........h.8.....IDATx^.Aj.H..%....D../....E-........\|.9..n.....7.b....,.~/.0........g._?.O...O.....G...~}.h9y...(....a;at?g...d......F'(_g......].....E=y.z....O....3'..7.......-..W........_......./\|..'...O.(&......A0..?)....-...Q\<)....[.................8)W.(.....:#...x....O..Q.../.(......;.h.......n.?......7...]..P......W5o.y.u..\|]..........<g....Jp.......NvBp^.....H.......K 8/8ZBp.^g....-.rStf......Q.g.'.uU.?..]`\|.p].st..-.S......p........3..-.w..."87...].s.... 8..[?.V...B./8.p..L...h.0..'.7.3.s........i.n...$8.r..g...>0............`./^.p.$8.....g.\.e..,^.p..?.j.-&8.p..../=@y..u......$.]$Q.........+...Kp...%B.X...<......(^.p....-.\...ppD!.,^.p..G.-V.xY...-,..Op.p.....`..<...)i..C.g..Mp.........Kp."8....vPHI.G..L.3...(.st%8W.(..k..#!.3....T.-.D..=.Ip&.Y,..e..x...a31.......GpFp...7Xp.+W<..L5.t.V...y...l..<.........:#..\\......Kpn..@..P........([.$.. 8...R.$."..)...+W..l&v0H._...+.)i.DpFp......'.7..$8.W..D...p#8#8UCL.

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62038), with no line terminators
Category:	downloaded
Size (bytes):	62040
Entropy (8bit):	5.348070318382293
Encrypted:	false
SSDEEP:	768:fMyiBmo+QZd3WMRYRVpzK7IVb/Kv2NHSaJLq28:UDx/NWh97SULq28
MD5:	F16C464CDFA9AB5F3A158439C645C9D8
SHA1:	2FF18AF01226B15C7880AB0ACAABB972061B4E1F
SHA-256:	57A129332831BAC4BC609878EB72B03B18F3915BA29231E33A1127540DBD8E07
SHA-512:	2AD16ABCAFEE26427B2E8D12A3B389E14315B57114395F12E649BE946CFC9BA70C983ABE0C6F5D4F8EC355FFD1A98624993498BB90233EDC9BD38F966FE27356
Malicious:	false
Reputation:	low
URL:	https://cdn.brandmetrics.com/scripts/bundle/65568.js?sid=4486dfe2-780e-4dfa-a60a-2a948887658f&toploc=www.nytimes.com
Preview:	"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function(){return c&&c.isInitiated},e.prototype.hasConsent=function(){return!0},e.prototype.addEventListener=function(e){"ready"===e.event&&this.isReady()?e.handler({api:this}):m.on(e)},e.prototype.triggerSurvey=function(o){var a,n=this,s=!1;void 0!==(null==o?void 0:o.timeout)&&0<o.timeout&&(a=setTimeout(function(){d(!(s=!(b=!1))),m.emit("survey_loaded",{available:!1,showed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtName:o.dtName},e=!1,t=[];if("none"!==f.storage&&y){var r=y.state(),i=0,c=0;for(var v in r)if(r.hasOwnProperty(v)){var l=r[v];if(!0!==u.isTest&&

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1014
Entropy (8bit):	4.935968596618073
Encrypted:	false
SSDEEP:	12:YADKkb1DjDLYJ/H3BvPUTauXLFW9/qYExPtlXC0iQhYs0eHLtBMCuQ:YAlb1DjI/fg6YrqunnpOCuQ
MD5:	165E6D62231A898F3FA474D7D2FFEAB4
SHA1:	51FF43208B0C7303A73895B73E2FF0A326419F77
SHA-256:	46420C74E744F5AFAADAAD838088D5613973B2C88EAD5DD9A9E26AF46E47EB69
SHA-512:	9F669704E5468FD4AE5AB37029968A27195B10DBBA2586AE7E20621BFFC18FA867F3C61B70C321CC51746639A96288688AF8BC81A2222425E04BD41D5DB592B2
Malicious:	false
Reputation:	low
URL:	https://a.nytimes.com/svc/nyt/data-layer?sourceApp=nyt-lire&referrer=https%3A%2F%2Fwww.nytimes.com%2F&assetUrl=https%3A%2F%2Fmyaccount.nytimes.com%2Fauth%2Fiframe%2Fenter-email%3Fresponse_type%3Dcookie%26client_id%3Dfreex%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252Fsubscription%252Fonboarding-offer%253FcampaignId%253D7JFJX%2526redirect_uri%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%2526EXIT_URI%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%26display%3Dregiwall_lire%26asset%3DRegiWall%26application%3DFree_Experience%26preloaded%3Dtrue%23lire-ui-261522
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800027903,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-8hvxr","asset":{"wordCount":0,"url":"https://myaccount.nytimes.com/auth/iframe/enter-email","derivedDesk":""},"ip":{"corp":null,"edu":null},"session":{"isLogg

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 600x400, components 3
Category:	downloaded
Size (bytes):	37706
Entropy (8bit):	7.900625087101519
Encrypted:	false
SSDEEP:	768:CYyoFoP/kcuDvJllF5+fOCCEmln99TRsnfe8iUMMzToZ:CUw/kLjJV5+XCEmh7Rsnfe8iU3zT6
MD5:	76EE634356A08AC2AE5402073F0CD456
SHA1:	94582ED841D0E6FCB339D7297BB0E639E6DC58BF
SHA-256:	908690A960BB1ACE47997EDD7B5CCD2AA3E1145B4BB41EDE1E96D56D2C87B905
SHA-512:	FD453A6AB8A217050F89D83CB1B15FB51CC4422E86235274047E62CB59D8705B56E5005FE79DA3F77130013547C5791E731342960B44DFB53C2C4095DAB4DEFF
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/11/05/multimedia/e74dd56e303bd96f9f37/e74dd56e303bd96f9f37-articleLarge-v11.jpg
Preview:	......JFIF.....d.d.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28276, version 0.0
Category:	downloaded
Size (bytes):	28276
Entropy (8bit):	7.993388312805753
Encrypted:	true
SSDEEP:	768:GMP0fWICV9rBNW7oCWLbtswmmNuwiYFITh/:jP0fWIga7oCW9sxGIT1
MD5:	530CFB72378419EEDB60DA7E266AD5F1
SHA1:	F14F263092982F1720E47283E34A8F6841ACBC2E
SHA-256:	564385E5DD8A1058FD759445C33B2C554D409528496B9D91533EEB079F6415DE
SHA-512:	700940772944A6D646ACF46A477DB61EBE48CF7B61BEF93D0A2A367B9BA3AFBD4D2D13FE22AD70338A9C49432FA489D542FA12B8FFE1E91934AA9732576EE756
Malicious:	false
Reputation:	low
URL:	https://g1.nyt.com/fonts/family/cheltenham/cheltenham-normal-700.530cfb72378419eedb60da7e266ad5f1.woff2
Preview:	wOF2......nt..........n................................`..`..B.:..s.....X....6.$........ .....+..l...G.n...\|.....S.P..$_n.....F....B.......yI#..._r....q.....0.........8R)4.\|[..G.".T..TNE...k.:.9l.]f.[.y.........EE....np.....Z...`3\|:U.j+..).e.C.~9...f5..."j..Nb.....!...,8...S+>#.....2..........6...u.Y.Y..-\|.z}.....~,..lD...3(.0z.0..#ch....4...a...>...Wy...E.B..q.T..u".FN.,kR.o.nf....UX..A........f..>...K%.6r0.....Ck...j\|...e{/d`..,.$....8..... 0....b..V..U..m..#7.$...V....*T.E...0..................1q.. ...u.b.bE.!...b=.7!A,...7!A,....6....F....l.6.C....$P..B..b..M...u...k:..rR.=.u.p..p.=.f".r Kj.....D.:....9.bX.d+p.y.h.Ng..'.b5g......[..o...B....5.....d..".../.x.[N.@p..mf...d....p....O.j.....P....T.....o;@....&....9.........Tzt.T....X....}...$.e...g1h{.....T.^y....8_...".Y...x........&.$....}.....k..=. [.:Q+G.O..T...t.{;aU!........$..zb#bc......-...!U.0H.....EG.X...qS......F#.X9.`S.c$0.7Ep..I{..M.tQ..:....H.T.6v,../.....4.3.H3....e.u...M..

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7412
Entropy (8bit):	5.489474976258169
Encrypted:	false
SSDEEP:	96:BOEaSxOEazFZMOEalOEaQkOEaDOEaoVc+o4OEaeNBOxMaZxOxMakFZMOxMaGOxM+:OS+n6QL0SujZ0m/YtylkCLbPWyuzPLC
MD5:	FFD6687A0B2FC6D3667C7C2447049EC1
SHA1:	BC43ADE0B40DCFDEDB22EF2C61024581F0A9DBBE
SHA-256:	ECFC48AB5315E179E1948BE2AECC95B3AFC29AE1413A2024ABB9B1706DF9FF0F
SHA-512:	D1791C04F77AD5843C9F088CC7E272BFD508E1B8378D99F330D523EE5FA44C424C6004CB3C486358565954BB00F462C2E4497288B9CFF8C39FCF0C83B64F33A4
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-st

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4384)
Category:	downloaded
Size (bytes):	4454
Entropy (8bit):	5.404014649552971
Encrypted:	false
SSDEEP:	96:tTgQCVr/o1rFgYrh6vyCSolcmSZtQl4ZI5Ekf2YQYY7pgyTJfWhFyA4:tTgbVTxYr0qCSolRSZt64ZIOkfvotBT5
MD5:	4E7707BB284E0C9628A7D180424E4EEF
SHA1:	8EA09A6CFA0EBECD9F4A3D5D016C0C96EE2E27C0
SHA-256:	E9E9AB8F2FFFF40729863766C09E1B8796A836A345728BDC6A6D3758AAFDE0EC
SHA-512:	C098AB11B8B3CCAA3AB4F7D97A7FE1C5ADAD91DBBE5347B62012EA108DA164A63F4F3F07350275932F0BAECCE85A6ADA7FAA531CCEFC0189E9F32DA3759D9A96
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/accessCodeLPNews-c4ce21c894f39cd01056.js?_sw-precache=4e7707bb284e0c9628a7d180424e4eef
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[40],{TZ06:function(e,t,c){"use strict";c.r(t);var n,r=c("gcR/"),a=c.n(r),s=(c("q1tI"),c("mLsP")),o=function(){return n\|\|(n=a()(s.a,{useCase:"news"}))};o.displayName="AccessCodeNewsRedeemLP",t.default=o},"V6G+":function(e,t,c){"use strict";(function(e){c.d(t,"a",(function(){return p}));var n=c("TxU7"),r=c("r538"),a=c("hEyz"),s=c("zJ6h"),o=c("XWHH"),i=c.n(o),u=c("iVi/"),d=c.n(u),l=c("fTxn"),f=function(){if(!("prd"===vi.env.ENVIRONMENT)){var t,c,n=new URLSearchParams(null===(t=e)\|\|void 0===t\|\|null===(c=t.location)\|\|void 0===c?void 0:c.search);if(n.has("AUTH_HOST_OVERRIDE"))return n.get("AUTH_HOST_OVERRIDE");var r=d.a.parse(document.cookie),a=r.ACAC_BFF_HOST_OVERRIDE;if(a)return a;var s=r.AUTH_HOST_OVERRIDE;if(s)return s}return"sbx"===vi.env.ENVIRONMENT?"https://myaccount.stg.nytimes.com":vi.env.AUTH_HOST},p=function(){return new n.ApolloClient({link:r.ApolloLink.from([Object(a.createHttpLink)({uri:"".concat(f(),"/svc/activate-access/que

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://nytimes-d.openx.net/w/1.0/pd
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3355&partner_device_id=LPSNS9TX-1-BT82
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=COfBwJjz-IIDFfbNKAUd6k0OZg;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	1832057
Entropy (8bit):	5.516331296584648
Encrypted:	false
SSDEEP:	24576:t/r5DrlQIpByK8mjZkGVRZ7c6SzeWxzfk:t/r5eIpnjZ/VPQ6SzRzfk
MD5:	407BFDED1413ABEC72EA831173567B82
SHA1:	A0CE3216B6A5758F2BB2818F36660AC5A70EC064
SHA-256:	953192B9E145DCBCA57F6CA6B4FCB6D09DDEF65BFE957B4859D7AC4946381E42
SHA-512:	5C1F0CAD3A7D6BF767A94597A2F4F8FF4C12C44BCE65CAD7F2EC81164273200DC7D471B276F13D7473B61FDBD316E9538920E135367B1FB50C8DDF062A49308F
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/main-5bad2df7824d8ab68c7b.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[102],{"+4HN":function(e,t,n){"use strict";var r=n("pVnL"),o=n.n(r),i=n("QILm"),a=n.n(i),l=n("q1tI"),s=n.n(l),u=n("LgWu"),c=n.n(u),d=["url","returnUrl","children"],f=s.a.forwardRef((function(e,t){var n=e.url,r=e.returnUrl,i=e.children,l=a()(e,d);return s.a.createElement("a",o()({href:n},l,{onClick:function(e){e.preventDefault(),l.onClick&&l.onClick(e),window.location.href=function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:window.location.href,n=encodeURIComponent(t),r=c.a.parse(e,!0),o=r.query;return o.redirect_uri?r.href:Object.keys(o).length&&!o.redirect_uri?"".concat(r.href,"&redirect_uri=").concat(n):"".concat(r.href,"?redirect_uri=").concat(n)}(n,r)},ref:t}),i)}));f.defaultProps={returnUrl:void 0,children:null},f.displayName="ExitLink",t.a=f},"+ClL":function(e,t,n){"use strict";n.d(t,"a",(function(){return i}));var r=n("lSNA"),o=n.n(r);function i(e,t){var n,r,i,a;null===(n=window)\|\|void 0===n\|\|null===(r=n.Se

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CNvg15jz-IIDFUvnKAUdpPUMZA;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&vxii_pid=12&vxii_pid1=10067&vxii_rcid=ebe308dd-d709-4689-8b60-d83ca68d342e
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1051
Entropy (8bit):	4.978323404851119
Encrypted:	false
SSDEEP:	12:YADKkb0c9jDLYJ/H3BvPUTauXLFW9/qYExPtKZXCfPsSAPytNu/eHLtBMCuQ:YAlbfjI/fg6YWyioEWpOCuQ
MD5:	A0E1130E2B92B7467F959870E651CFAB
SHA1:	25695476E0F1F0DA9A711132161575C3CA862505
SHA-256:	FEA5F9041CBE9B82FA47392F98FA9311331F8592C03A5A47C29A8A4F1E31296D
SHA-512:	917B3829D1AD4970F0BF6C3DD2AB99BEE9CEF8BF3944F80EF1EE458847FAFD984D97A8C898588D11C92E08A415C74354E6740D9EA9E13B6CF536D1C6DC41D454
Malicious:	false
Reputation:	low
Preview:	{"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800009804,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"formerCoreSubscriber":false,"formerHDSubscriber":false,"formerEduSubscriber":false,"marketingOptIn":false,"formerCrosswordSubscriber":false,"formerCookingSubscriber":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":"v3-1-106.jkidd-api-578bd76498-xq4h8","asset":{"wordCount":0,"url":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news","derivedDesk":"international_desk"},"ip":{"corp

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 5760x3840, components 3
Category:	downloaded
Size (bytes):	2087884
Entropy (8bit):	7.943663674336997
Encrypted:	false
SSDEEP:	49152:0CUjfJfLyg0Ss64vAhorHSBrwGAI1K7u3fQ5:fwhfhoAyHS2+UuM
MD5:	2BA2E927841A3790FE7B80DEE746DAF6
SHA1:	73579142F41AA3CB46133BBF5DC163005546A919
SHA-256:	F91ED9FE50F53140C822A79E2002CBDCF59ED1EB433D5F88AE9758C7CBA6FE06
SHA-512:	696C21E0023C11B230F3BD49BAC49F1D45B9A19A43AC18E79EC5EB1F1CD0CBE6860B859E9CA5F13446E7B0DDAF452353A7CA34EFC6E8D8B375568B4090742B32
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-hamas-early-lead-002-hvwq-threeByTwoLargeAt2X.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x731, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	91956
Entropy (8bit):	7.997948075848794
Encrypted:	true
SSDEEP:	1536:Y8eiK4dCQjaNmxQVRJ2opAaQU5qiyiw950+XYxfje84cmXjteyzhan5Q:05oCNNPVKk5LMube84L1
MD5:	79DE69B195EBAAE864519AD46C616F8B
SHA1:	6AD13E55BA3C14BB2F2D8CDEDC6EAF9DA841014E
SHA-256:	E76C4A9C4CFD2234D4EF0850E1E9646F8F99376838324FF3A11741485014A5D7
SHA-512:	2D1B149AACBB69D5723A40DB4192E110A1E914D9A6D01B02D067C2D664DCDE3EB20678772C172506CE692BB544B12349C82E169DD24F95E19667C9ADDB6B02D6
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-jumbo.jpg?quality=75&auto=webp
Preview:	RIFF,g..WEBPVP8 g..0".......>.@.I...$.....gn....:\|...k_...i...>.."d.....3S..8..:.......G..+......^3_.._..{..{....q.._..............O.q......?...U._.=......a.s...W....m.....U..~..}@...9.....o..?........}...,5..8.-..H...0;.&.g/..1(.v[>EZ.9..x.C)p>....<...........i.}.......O.....jh;..#k).O..~d;....#......n.t...V..i...j.."G.}`=(:q...F...V..)....J.%..7.@.y.Tj.m.i.......2E..p^B....^..U.H.X...=.......am#..Q.A,$.A'....xg..h.vd.....6:.u.I...1..........c...!+&t..4S...8..7i..Cn.;....l...L.3..F.kw+.....)/a.[........=''.~..+t.......l.836n>.U\|.....?F..E........y...x.A...)....~!.r.S}.....96gE.l.....#.0..jeH<...R'.L..a6..z..yY.".T..v:l.q=.J...".Nz.4'.lU.=V.._....].......dF.._6J...V.O......qjT.8..\r....a...).........K...a..........f8...L".6[...(..3.#.SWt.....B\ .\|.:....D..(+G.\|c.7...#i...Y1..Q..HL.*/...>.,..i..su..M:..)_.XI...$...t.6......u...R.C2.......o.,)... ......i.L\....8.....{...x.I.u%........AR....A..;R.@....+....n..Bv.G{.....a..I@mS.+P4i.B.n.

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	5.410289972832761
Encrypted:	false
SSDEEP:	12:TMHdPNxNi/nzVJ/KYf3nsRHhzfHaopGZGEUGas6d67:2ddATLf3qBGoKU59I7
MD5:	67652DA3A119C795C417355D9E1AC31A
SHA1:	32BAE02FDCAC9FBB2A1C00682053CF8815BC8344
SHA-256:	C9FB083529541E219AD17A00CB201B3DBA9DABCDCC01EAE4EB9AC04B8CB72216
SHA-512:	5169390A5E13E6B96BF865C4D04370B57A7A01A268576205DB0F319821691B7460D5A1CEDAF6281F8FE5B40CD30855174BFECF1ADB000684E4C70E9AA4E4F399
Malicious:	false
Reputation:	low
URL:	https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/pause.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 25 25" style="enable-background:new 0 0 25 25;" xml:space="preserve">.<style type="text/css">...st0{fill-opacity:0.5;stroke:#FFFFFF;}...st1{fill:#FFFFFF;}.</style>.<path class="st0" d="M12.5,0.5L12.5,0.5c6.6,0,12,5.4,12,12l0,0c0,6.6-5.4,12-12,12l0,0c-6.6,0-12-5.4-12-12l0,0..C0.5,5.9,5.9,0.5,12.5,0.5z"/>.<rect x="13.7" y="7" class="st1" width="3.3" height="11"/>.<rect x="8" y="7" class="st1" width="3.3" height="11"/>.</svg>.

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34765)
Category:	downloaded
Size (bytes):	34818
Entropy (8bit):	5.3250300165669096
Encrypted:	false
SSDEEP:	384:tnHd7aowKXCZP7OhqWolIYPl0/WIoAUeAWNIOtoS:p9aowvaqWoSeONz
MD5:	A75698F6C043E733AAC7440D50652918
SHA1:	922B054B111286D926CEEA7A1D9191E0DAF64B86
SHA-256:	823305F3B10FA2E8E5EA6FE739E21F3C275A4A49A0FC85851DCBF608A282F5CA
SHA-512:	893BE2FC8A2B337E3CA15126161C968063A9AEA4DC0FB4B2CB88E39AE674E095F6857FCFD78FC997253A17AB6B319812D4DA3B1CC36F55428A494B7E1A6671C6
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/188-340a3336cbd15c2795ac.js?_sw-precache=a75698f6c043e733aac7440d50652918
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[188],{DikY:function(e,t,a){"use strict";a.r(t),a.d(t,"changeDeliveryAddressHDSub",(function(){return i})),a.d(t,"availabilityDisclaimerHDSub",(function(){return d})),a.d(t,"currentAddressHDSub",(function(){return o})),a.d(t,"addressHDSub",(function(){return s})),a.d(t,"addressHDSubPlaceholder",(function(){return c})),a.d(t,"addressOptionalHDSub",(function(){return u})),a.d(t,"addressOptionalHDSubPlaceholder",(function(){return l})),a.d(t,"addressCityHDSub",(function(){return p})),a.d(t,"addressCityHDSubPlaceholder",(function(){return y})),a.d(t,"addressStateHDSub",(function(){return b})),a.d(t,"addressStateHDSubPlaceholder",(function(){return f})),a.d(t,"addressZipHDSub",(function(){return m})),a.d(t,"addressZipHDSubPlaceholder",(function(){return v})),a.d(t,"changeDateHDSub",(function(){return g})),a.d(t,"changeDateInfoHDSub",(function(){return h})),a.d(t,"addressDateHDSubPlaceholder",(function(){return D})),a.d(t,"addressPhoneHDSub

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	553
Entropy (8bit):	5.1551469295005194
Encrypted:	false
SSDEEP:	12:Ydc+oku7tLFs4N0gKfms4k6S+JHz/ikMl:Ydc+oku7tZs4N0gKfms4k6lJHz/ip
MD5:	DB80E262AFCA7E96682E2262DA7BCC82
SHA1:	934F661ED95A3942E183EDF5739471554517CDA8
SHA-256:	E5CE8C6F86F9DF71F04CCA42192C4D4680BDD5504F13D66486E9EB32BDA4CF8D
SHA-512:	C8665FCE89535F52C03D7D6EE4622C176CBAAB25A7718A53D0B67798CF6FD079640B81A8DDF2490D736A06D75AEEBEA5447D9118BAE00EDA132A739246310E2E
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=878389057636863&correlator=1454723853388112&eid=31077978%2C31079784%2C44782503%2C31079527%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202311290101&ptt=17&impl=fif&iu_parts=29390238%2Cnyt%2Cworld%2Cmiddleeast&enc_prev_ius=%2F0%2F1%2F2%2F3&prev_iu_szs=150x50&ifi=2&sfv=1-0-40&sc=1&cookie_enabled=1&abxe=1&dt=1701800024699&lmt=1701800019&adxs=-12245933&adys=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&bz=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&vis=1&psz=150x-1&msz=0x-1&fws=644&ohw=1280&ga_vid=245187411.1701800025&ga_sid=1701800025&ga_hid=2138761322&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yOTM5MDIzOC9ueXQvd29ybGQvbWlkZGxlZWFzdCIsW11dXV1d&dlt=1701800019118&idt=5249&prev_scp=div%3Dsponsor%26pos%3Dsponsor%26request_time%3D5405&cust_params=als_test_clientside%3Dweb_none_low_20231205181340%26mktg%3Dtype_anon%252Clogf%252Cabf%26bt%3D%26sub%3Danon%26edn%3Dus%26test%3Dprojectvi%26ver%3Dvi%26template%3Darticle%26hasVideo%3Dfalse%26vp%3Dlarge%26als_test%3D1701795752097%26prop%3Dnyt%26plat%3Dweb%26brandsensitive%3Dtrue%26per%3Dguterresantonio%252Cgriffithsmartin%26org%3Dunitednations%26geo%3Dafghanistan%252Cgazastrip%252Cukraine%26des%3Dinternationalrelations%252Cisraelgazawar2023%252Chumanitarianaid%252Cpoliticsandgovernment%252Crefugeesanddisplacedpersons%26auth%3Dfarnazfassihi%26coll%3Dworldnews%252Cmiddleeast%26artlen%3Dlong%26ledemedsz%3Dnone%26typ%3Dart%26section%3Dworld%26si_section%3Dworld%26id%3D100000009197910%26pt%3Dnt10%252Cnt12%252Cnt13%252Cnt14%252Cnt15%252Cnt16%252Cnt18%252Cnt2%252Cnt3%252Cnt4%252Cnt6%252Cnt8%252Cpt17%252Cpt20%252Cpt5%252Cpt7%26gscat%3Dneg_ibmtest%252Cneg_ibm%252Cneg_ihw%252Cneg_citi_aa%252Cneg_gg1%252Cneg_chan2%252Cneg_chanel%252Cneg_capitalone%252Cneg_gg2%252Cneg_hms%252Cneg_bp%252Cneg_mastercard%252Cneg_ms_safe%252Cneg_bofa%252Cneg_google%252Cneg_mtb%252Cneg_debeer%252Cneg_orep%252Cneg_rchmt%252Cpolitics_sentiment%252Cneg_hearts%252Cneg_ubs%252Cneg_rmw%252Cneg_aramco%252Cneg_fcli%252Cgs_science%252Cneg_kaypemg%252Cgb_death_injury_high_med%252Cgb_death_injury_high_med_low%252Cgb_death_injury_news-ent%252Cneg_amerex%252Cneg_chan3%252Cneg_kvue%252Cneg_sub0%252Cneg_racism%252Cgs_politics%252Cneg_newyorkp%252Cgs_science_geography%252Cneg_enerca%252Cneg_amex%252Cneg_cathay%252Cneg_mktg_safe_q4_2019%252Cgs_busfin%252Cneg_rolex%252Cneg_sabic%252Cneg_weather%252Cneg_am%252Cneg_mttl%252Cneg_ts%252Cgv_death_injury%252Cgv_military%252Cneg_samsung%252Cgs_politics_issues_policy%252Cneg_sia%252Cgs_politics_misc%252Cneg_rms%252Cgs_health_misc%252Cneg_msft%252Cneg_cme%252Cgs_busfin_economy%252Ccc_tech_society%252Cneg_victims%252Cgs_t%26is_viral%3Dlow%26tt%3D43%252C63%252C73%26mt%3DMT9%26abra_dfp%3Ddfp_prebid_0723_3_index_pubmatic%252Cdfp_als_home_1_als%26sov%3D2%26page_view_id%3Dy4BaNoaK-J9dzZ8sn6p8pfb-%26purr%3Dfull%26uap%3Dbrowser%26typ_materials%3D%2523news%2523%26slug%3Daid%26cookie%3Dfalse&adks=2494806347&frm=20
Preview:	{"/29390238/nyt/world/middleeast":["html",0,0,null,0,0,0,1,0,null,null,null,null,[["ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw",1735496026,"/","nytimes.com",1],["UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw",1735496026,"/","nytimes.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,[676982996],null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CNS515Dz-IIDFdESoQodpu0OpA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2"]}..

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x683, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	61806
Entropy (8bit):	7.996726258171283
Encrypted:	true
SSDEEP:	1536:5FMRmPGDlM8hGxAUspR3r3dAuSQ2liQ/wnbq5g:5umPGM8e5odNAu/a1e+K
MD5:	11807F891C0B8C1DC9B03EB6A3218DD3
SHA1:	B4D1733AFC1776058BC7A7FD8CBFA5A6F2D5DFA0
SHA-256:	FAF443857E95489B1BB647B9256CEA101C661ED39B335EAEABD831509D2D5892
SHA-512:	CF8F4881D7833740CEAB3AC2436BAD17E3F9203FA127D7E37226B59BF552E1B5C7C6153FB933B7958191DC933759F380C85886AD1B9BDA2CC7E7213C0C02CE7A
Malicious:	false
Reputation:	low
URL:	https://static01.nyt.com/images/2023/12/05/multimedia/05nat-collegepresidents-ktzm/05nat-collegepresidents-ktzm-jumbo.jpg?quality=75&auto=webp
Preview:	RIFFf...WEBPVP8 Z....p.......>.D.K%...%...@..gnc]..3..ftBr...-...&..._.;.zT....?.....[....u....@?..n.......^T.u._......7........<...O...../...=..O........g.<.?S...@............}a?............_....\|.........O.o....-..P..s..6....4.F........+....fB1.9..MM..m.......{....\?.....f...../.r......Q...m.E.N....5L....V..X..#.ISXr.&..i.........Un)..55 ..Z.U.T.ts.z.SP.LboA..d...oy.....3.o+..zD.F...9.~V..O......>..<!rR...<vb+...2d.......B$..~.1.KX..F.E.0.s...O..,.._4..n........bP.'.....6.....ZQ.6L.X^....{r.oF.GJ...z.,...Y..I!.A.a%...W.....R.a.{.}.=j-6...-.pZ.{8..k".dT}j.....]v.:..{...9..9..{..{....mV.....c...`.l....o...lp_U.O.......<...;.".\ ..\>12b.....d..?.^]..(X.r...\|....G...M..%g...D&.....az.mJ..>..y..*...S..S../.9.!..../..V....1...g.8u..wD....C...-dK.z.......v.._...O`+._.... =.I%.5..t5x......+..G>.Pk..\|=J..Wr&...@.k...1..K]/.K....Q3....@......c`S..3-.x6........i....UO.i.. X&9..1..+/..UE.W....t.1$.c.Y..`..h....{..FG.N..[.+...]...v.

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvr49flSFFRkDONVNSY5x3kuj6htIySDYWHUyLzUrnxSoDBrgPswuK7iK_8sHBzi3ZWgRmlT43KVWXpynCP2ga2OTI7NKm1Zv_eZIfbgjlT57abbgmzGee2xljVITQ0tFTW1NjQ5ExrSQ&sai=AMfl-YQbp4yMfCOnMmXfURCX6GggODbnCxzSvwrVywMDkcu2eHxYTCA&sig=Cg0ArKJSzDtfDI1uhvO8EAE&id=lidar2&mcvt=1040&p=149,0,419,1280&mtos=1040,1040,1040,1040,1040&tos=1040,0,0,0,0&v=20231204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=7&adk=2311091294&rs=4&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&rst=1701800026824&rpt=2385&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	216266
Entropy (8bit):	5.333743948135964
Encrypted:	false
SSDEEP:	3072:doLKS5dCMh4R6+lg3eTqmemsWZgJG4a+nKE:domfSzPJG4a+nKE
MD5:	44F23B962029C4019DF81CED6EF1D33B
SHA1:	0BC29CDA25D05ABB742730ECB05703806373A307
SHA-256:	DD4E84921BD8147C6630057858D1FD77F8FE4DE0CFC57ABF28E2860C03CD3936
SHA-512:	7453A1DDA126C440F83B702FDDF92661F4A4C9396DFF98FC324D1537C128130DA48C8BF158A766A2800EA541D60D10D1EAB1E1691D33D76A18FB296772B57195
Malicious:	false
Reputation:	low
URL:	https://www.nytimes.com/vi-assets/static-assets/activateaccess-e88e470913eaaf28b000.js?_sw-precache=44f23b962029c4019df81ced6ef1d33b
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"0zuH":function(e,t,i){"use strict";i.r(t);var n=i("gcR/"),a=i.n(n),r=i("q1tI"),o=i.n(r),s=i("QS0n"),c=i("Kxyt"),d=i("V6G+"),u=o.a.createContext(null),l=i("PgO9"),m=i("Jqp9"),p=i("wXC7"),f=i.n(p),g="4px",b="8px",v="12px",y=Object(m.styled)("header",{target:"ep8icam0"})("position:relative;border-bottom:1px solid ",f.a.color.gray60,";padding:12px;"),h=Object(m.css)("margin:0 auto;padding:23px 0 48px;width:",f.a.breakpoint.mobileFullWidth,";max-width:",f.a.breakpoint.maxMobileContentWidth,"px;",f.a.breakpoint.mediumLarge,"{padding:48px 0;}"),k=Object(m.styled)("h2",{target:"ep8icam1"})("color:",f.a.color.gray10,";font-family:",f.a.font.franklinBase,";font-weight:",f.a.font.weight.medium,";font-size:",f.a.font.size(24),";line-height:",f.a.font.size(36),";padding-bottom:32px;"),_=Object(m.styled)("p",{target:"ep8icam2"})("color:",f.a.color.gray10,";font-family:",f.a.font.franklinBase,";font-weight:",f.a.font.weight.medium,";font-size

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (779), with no line terminators
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	5.593122437365712
Encrypted:	false
SSDEEP:	24:hMiRO9neUSBRE5YBSJnO8KnR8G9x6JnOf8:NOcBBRtsJnJuGG9wJn08
MD5:	95C04C5F5AA3A4F7F205A25E094CEF69
SHA1:	502B88502D0F8DB9173105C3DF6350C6D2CA11BB
SHA-256:	3E1A006FC3B64269A06547AF527397199667BD6184C0C8A63E4329D47344A60D
SHA-512:	0A22C2CF0DC7A00FA06254F1920458397EE157B086B41210F5FC26E54B723C0C5C096B9829CD2684FE39F08B6B1643890146487D413E62091DC279DEC712D6FB
Malicious:	false
Reputation:	low
URL:	https://5290727.fls.doubleclick.net/activityi;dc_pre=CMOT7Jjz-IIDFXf9KAUddlEBiw;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMOT7Jjz-IIDFXf9KAUddlEBiw;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html"/></body></html>

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 5, 2023 19:12:50.625834942 CET	192.168.2.4	1.1.1.1	0x5079	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.679481030 CET	192.168.2.4	1.1.1.1	0x1d36	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Dec 5, 2023 19:12:50.680375099 CET	192.168.2.4	1.1.1.1	0x7688	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.680730104 CET	192.168.2.4	1.1.1.1	0xa507	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Dec 5, 2023 19:12:51.741564989 CET	192.168.2.4	1.1.1.1	0x39ef	Standard query (0)	nope.theworkpc.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:51.743823051 CET	192.168.2.4	1.1.1.1	0x9f70	Standard query (0)	nope.theworkpc.com	65	IN (0x0001)	false
Dec 5, 2023 19:12:54.346829891 CET	192.168.2.4	1.1.1.1	0xa0b8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.350760937 CET	192.168.2.4	1.1.1.1	0xa94a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:00.810731888 CET	192.168.2.4	1.1.1.1	0x2ab4	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:00.811167002 CET	192.168.2.4	1.1.1.1	0x60fd	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:01.839267015 CET	192.168.2.4	1.1.1.1	0x32dd	Standard query (0)	bostonglobe-prod.cdn.arcpublishing.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:01.839601040 CET	192.168.2.4	1.1.1.1	0x8966	Standard query (0)	bostonglobe-prod.cdn.arcpublishing.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:03.958514929 CET	192.168.2.4	1.1.1.1	0x630e	Standard query (0)	bostonglobe-prod.cdn.arcpublishing.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:03.958894968 CET	192.168.2.4	1.1.1.1	0x9ed1	Standard query (0)	bostonglobe-prod.cdn.arcpublishing.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:23.011457920 CET	192.168.2.4	1.1.1.1	0xc189	Standard query (0)	www.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.016393900 CET	192.168.2.4	1.1.1.1	0xc8fa	Standard query (0)	www.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:23.701383114 CET	192.168.2.4	1.1.1.1	0xba8b	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.701908112 CET	192.168.2.4	1.1.1.1	0x3893	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:23.703046083 CET	192.168.2.4	1.1.1.1	0xbcdc	Standard query (0)	g1.nyt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.703526020 CET	192.168.2.4	1.1.1.1	0x64de	Standard query (0)	g1.nyt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:23.816947937 CET	192.168.2.4	1.1.1.1	0x3dbf	Standard query (0)	static01.nyt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.817251921 CET	192.168.2.4	1.1.1.1	0x94a0	Standard query (0)	static01.nyt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:24.620973110 CET	192.168.2.4	1.1.1.1	0xbff6	Standard query (0)	static01.nyt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.621579885 CET	192.168.2.4	1.1.1.1	0xf9fa	Standard query (0)	static01.nyt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:24.681279898 CET	192.168.2.4	1.1.1.1	0x7d0	Standard query (0)	a.et.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.681596994 CET	192.168.2.4	1.1.1.1	0x9c04	Standard query (0)	a.et.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:24.691984892 CET	192.168.2.4	1.1.1.1	0x25ec	Standard query (0)	samizdat-graphql.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.692295074 CET	192.168.2.4	1.1.1.1	0xa6db	Standard query (0)	samizdat-graphql.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:24.818676949 CET	192.168.2.4	1.1.1.1	0x43d2	Standard query (0)	als-svc.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.150451899 CET	192.168.2.4	1.1.1.1	0xa283	Standard query (0)	als-svc.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:25.161457062 CET	192.168.2.4	1.1.1.1	0x51f3	Standard query (0)	rumcdn.geoedge.be	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.161951065 CET	192.168.2.4	1.1.1.1	0x60d3	Standard query (0)	rumcdn.geoedge.be	65	IN (0x0001)	false
Dec 5, 2023 19:13:25.162556887 CET	192.168.2.4	1.1.1.1	0x11d5	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.163147926 CET	192.168.2.4	1.1.1.1	0x6ed3	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:25.213244915 CET	192.168.2.4	1.1.1.1	0x6299	Standard query (0)	static01.nyt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.213629007 CET	192.168.2.4	1.1.1.1	0x7cb5	Standard query (0)	static01.nyt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.696044922 CET	192.168.2.4	1.1.1.1	0x6546	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.696291924 CET	192.168.2.4	1.1.1.1	0xbf0f	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.697043896 CET	192.168.2.4	1.1.1.1	0x3f91	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.697282076 CET	192.168.2.4	1.1.1.1	0x19f8	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.697871923 CET	192.168.2.4	1.1.1.1	0x59e	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.698098898 CET	192.168.2.4	1.1.1.1	0xbf27	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.698633909 CET	192.168.2.4	1.1.1.1	0xc94d	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.698852062 CET	192.168.2.4	1.1.1.1	0xd070	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.699532986 CET	192.168.2.4	1.1.1.1	0xbdbc	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.699752092 CET	192.168.2.4	1.1.1.1	0xb910	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.701589108 CET	192.168.2.4	1.1.1.1	0xfe6d	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.701822042 CET	192.168.2.4	1.1.1.1	0x67a	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.773535013 CET	192.168.2.4	1.1.1.1	0x1717	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.773833036 CET	192.168.2.4	1.1.1.1	0x46b7	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:26.786009073 CET	192.168.2.4	1.1.1.1	0x246c	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.786308050 CET	192.168.2.4	1.1.1.1	0x48a7	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.016422033 CET	192.168.2.4	1.1.1.1	0xa121	Standard query (0)	als-svc.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.016801119 CET	192.168.2.4	1.1.1.1	0xe290	Standard query (0)	als-svc.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.018239975 CET	192.168.2.4	1.1.1.1	0x3217	Standard query (0)	samizdat-graphql.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.018481970 CET	192.168.2.4	1.1.1.1	0xe2c7	Standard query (0)	samizdat-graphql.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.496649981 CET	192.168.2.4	1.1.1.1	0x5cdb	Standard query (0)	dd.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.496932983 CET	192.168.2.4	1.1.1.1	0xc4a5	Standard query (0)	dd.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.497404099 CET	192.168.2.4	1.1.1.1	0x4e3b	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.497667074 CET	192.168.2.4	1.1.1.1	0xd54	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.612139940 CET	192.168.2.4	1.1.1.1	0xe1fb	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.612410069 CET	192.168.2.4	1.1.1.1	0x914b	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.613060951 CET	192.168.2.4	1.1.1.1	0x321e	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.613348961 CET	192.168.2.4	1.1.1.1	0xcb95	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.639635086 CET	192.168.2.4	1.1.1.1	0xd2c4	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.639851093 CET	192.168.2.4	1.1.1.1	0x73a2	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.641653061 CET	192.168.2.4	1.1.1.1	0xaf7f	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.641992092 CET	192.168.2.4	1.1.1.1	0xf61c	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.644388914 CET	192.168.2.4	1.1.1.1	0x7c3d	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.644663095 CET	192.168.2.4	1.1.1.1	0xc712	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:27.786283970 CET	192.168.2.4	1.1.1.1	0xb5d	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.786864042 CET	192.168.2.4	1.1.1.1	0x5f39	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:28.609549046 CET	192.168.2.4	1.1.1.1	0xf040	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.609925985 CET	192.168.2.4	1.1.1.1	0x3e6f	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:28.781590939 CET	192.168.2.4	1.1.1.1	0xc964	Standard query (0)	purr.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.781825066 CET	192.168.2.4	1.1.1.1	0x5b9b	Standard query (0)	purr.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:28.782560110 CET	192.168.2.4	1.1.1.1	0xa7b3	Standard query (0)	a.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.782798052 CET	192.168.2.4	1.1.1.1	0xcb0b	Standard query (0)	a.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.355674028 CET	192.168.2.4	1.1.1.1	0x5107	Standard query (0)	purr.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.356025934 CET	192.168.2.4	1.1.1.1	0xb6ef	Standard query (0)	purr.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.364197016 CET	192.168.2.4	1.1.1.1	0xb0c5	Standard query (0)	a.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.364515066 CET	192.168.2.4	1.1.1.1	0x58f0	Standard query (0)	a.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.596848965 CET	192.168.2.4	1.1.1.1	0xb142	Standard query (0)	vp.nyt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.597156048 CET	192.168.2.4	1.1.1.1	0x2b9e	Standard query (0)	vp.nyt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.796475887 CET	192.168.2.4	1.1.1.1	0x8790	Standard query (0)	5290727.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.796634912 CET	192.168.2.4	1.1.1.1	0xd85d	Standard query (0)	5290727.fls.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.799069881 CET	192.168.2.4	1.1.1.1	0x42fd	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.799449921 CET	192.168.2.4	1.1.1.1	0xf8d7	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.800179005 CET	192.168.2.4	1.1.1.1	0x6f09	Standard query (0)	static.chartbeat.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.800508022 CET	192.168.2.4	1.1.1.1	0x7acd	Standard query (0)	static.chartbeat.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.801175117 CET	192.168.2.4	1.1.1.1	0x8262	Standard query (0)	a1.nyt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.801490068 CET	192.168.2.4	1.1.1.1	0xa066	Standard query (0)	a1.nyt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.802628994 CET	192.168.2.4	1.1.1.1	0x2c56	Standard query (0)	cdn.brandmetrics.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.802931070 CET	192.168.2.4	1.1.1.1	0xd9aa	Standard query (0)	cdn.brandmetrics.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.803551912 CET	192.168.2.4	1.1.1.1	0x88ca	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.803818941 CET	192.168.2.4	1.1.1.1	0xcedc	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:29.804330111 CET	192.168.2.4	1.1.1.1	0xe6af	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.804757118 CET	192.168.2.4	1.1.1.1	0xcb3a	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Dec 5, 2023 19:13:30.204824924 CET	192.168.2.4	1.1.1.1	0x5f9d	Standard query (0)	mwcm.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.205352068 CET	192.168.2.4	1.1.1.1	0x77fd	Standard query (0)	mwcm.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:30.354902983 CET	192.168.2.4	1.1.1.1	0x83d1	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.355230093 CET	192.168.2.4	1.1.1.1	0x6cc8	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:30.475231886 CET	192.168.2.4	1.1.1.1	0x3374	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.475548983 CET	192.168.2.4	1.1.1.1	0x2a45	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:30.535054922 CET	192.168.2.4	1.1.1.1	0x11d7	Standard query (0)	pnytimes.chartbeat.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.535347939 CET	192.168.2.4	1.1.1.1	0x7b9f	Standard query (0)	pnytimes.chartbeat.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:31.186243057 CET	192.168.2.4	1.1.1.1	0xbead	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:31.186433077 CET	192.168.2.4	1.1.1.1	0xe082	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.516953945 CET	192.168.2.4	1.1.1.1	0xea21	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.518016100 CET	192.168.2.4	1.1.1.1	0x606b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.542016983 CET	192.168.2.4	1.1.1.1	0xb027	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.542314053 CET	192.168.2.4	1.1.1.1	0x7390	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.574934006 CET	192.168.2.4	1.1.1.1	0xea	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.575700045 CET	192.168.2.4	1.1.1.1	0xf518	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.577089071 CET	192.168.2.4	1.1.1.1	0x6234	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.577617884 CET	192.168.2.4	1.1.1.1	0xe44b	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.578706980 CET	192.168.2.4	1.1.1.1	0xca98	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.579217911 CET	192.168.2.4	1.1.1.1	0xac84	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.581010103 CET	192.168.2.4	1.1.1.1	0x1738	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.582171917 CET	192.168.2.4	1.1.1.1	0x238b	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.582959890 CET	192.168.2.4	1.1.1.1	0x62c9	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.583313942 CET	192.168.2.4	1.1.1.1	0xf639	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.584105015 CET	192.168.2.4	1.1.1.1	0x453f	Standard query (0)	nytimes-d.openx.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.584558964 CET	192.168.2.4	1.1.1.1	0xa9de	Standard query (0)	nytimes-d.openx.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.585731983 CET	192.168.2.4	1.1.1.1	0xfc68	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.586209059 CET	192.168.2.4	1.1.1.1	0xd2ab	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.587307930 CET	192.168.2.4	1.1.1.1	0x9929	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.587939024 CET	192.168.2.4	1.1.1.1	0x7536	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.635835886 CET	192.168.2.4	1.1.1.1	0x3f9b	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.636076927 CET	192.168.2.4	1.1.1.1	0xa26c	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:32.659550905 CET	192.168.2.4	1.1.1.1	0xec72	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.659743071 CET	192.168.2.4	1.1.1.1	0x9f88	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.124983072 CET	192.168.2.4	1.1.1.1	0xdaae	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.125302076 CET	192.168.2.4	1.1.1.1	0xf932	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.127047062 CET	192.168.2.4	1.1.1.1	0xe759	Standard query (0)	dd.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.127950907 CET	192.168.2.4	1.1.1.1	0x7962	Standard query (0)	dd.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.193969965 CET	192.168.2.4	1.1.1.1	0x5fa0	Standard query (0)	mwcm.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.194170952 CET	192.168.2.4	1.1.1.1	0xfc0f	Standard query (0)	mwcm.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.195223093 CET	192.168.2.4	1.1.1.1	0x4c33	Standard query (0)	pnytimes.chartbeat.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.195934057 CET	192.168.2.4	1.1.1.1	0x8424	Standard query (0)	pnytimes.chartbeat.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.202088118 CET	192.168.2.4	1.1.1.1	0xd7aa	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.202583075 CET	192.168.2.4	1.1.1.1	0x9095	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.250138044 CET	192.168.2.4	1.1.1.1	0x6e6c	Standard query (0)	collector.brandmetrics.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.250658989 CET	192.168.2.4	1.1.1.1	0x902f	Standard query (0)	collector.brandmetrics.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.264309883 CET	192.168.2.4	1.1.1.1	0xcd46	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.264682055 CET	192.168.2.4	1.1.1.1	0x71f3	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.265774965 CET	192.168.2.4	1.1.1.1	0xfe9f	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.266020060 CET	192.168.2.4	1.1.1.1	0xa73d	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.528297901 CET	192.168.2.4	1.1.1.1	0x622b	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.528662920 CET	192.168.2.4	1.1.1.1	0x29dc	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.758938074 CET	192.168.2.4	1.1.1.1	0x3b89	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.759413958 CET	192.168.2.4	1.1.1.1	0x3245	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.836740017 CET	192.168.2.4	1.1.1.1	0x88a1	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.837336063 CET	192.168.2.4	1.1.1.1	0x4f05	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:33.854654074 CET	192.168.2.4	1.1.1.1	0x8320	Standard query (0)	nytimes-d.openx.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.855071068 CET	192.168.2.4	1.1.1.1	0x6edc	Standard query (0)	nytimes-d.openx.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:34.575294018 CET	192.168.2.4	1.1.1.1	0xb9a6	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:34.575848103 CET	192.168.2.4	1.1.1.1	0x8e8f	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:34.591412067 CET	192.168.2.4	1.1.1.1	0x1349	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:34.591659069 CET	192.168.2.4	1.1.1.1	0xd9d6	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:36.208275080 CET	192.168.2.4	1.1.1.1	0x7a13	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.209050894 CET	192.168.2.4	1.1.1.1	0xd62	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:36.210972071 CET	192.168.2.4	1.1.1.1	0x69ba	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.211416006 CET	192.168.2.4	1.1.1.1	0xdc26	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:36.351279974 CET	192.168.2.4	1.1.1.1	0xefaa	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.351509094 CET	192.168.2.4	1.1.1.1	0xdea0	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:36.763143063 CET	192.168.2.4	1.1.1.1	0xc3ac	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.763523102 CET	192.168.2.4	1.1.1.1	0x3ce1	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:36.958714962 CET	192.168.2.4	1.1.1.1	0x1da2	Standard query (0)	platform.iteratehq.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.959026098 CET	192.168.2.4	1.1.1.1	0x8171	Standard query (0)	platform.iteratehq.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:36.970590115 CET	192.168.2.4	1.1.1.1	0xc748	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.971645117 CET	192.168.2.4	1.1.1.1	0xbfa9	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:38.125835896 CET	192.168.2.4	1.1.1.1	0xe9bb	Standard query (0)	a.et.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.126116991 CET	192.168.2.4	1.1.1.1	0x2fa0	Standard query (0)	a.et.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:38.126861095 CET	192.168.2.4	1.1.1.1	0x38e0	Standard query (0)	www.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.127666950 CET	192.168.2.4	1.1.1.1	0xaccd	Standard query (0)	www.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:38.633060932 CET	192.168.2.4	1.1.1.1	0x7bd0	Standard query (0)	iteratehq.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.633405924 CET	192.168.2.4	1.1.1.1	0x40aa	Standard query (0)	iteratehq.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:39.664742947 CET	192.168.2.4	1.1.1.1	0x8135	Standard query (0)	iteratehq.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:39.664927006 CET	192.168.2.4	1.1.1.1	0xf36c	Standard query (0)	iteratehq.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:40.243273973 CET	192.168.2.4	1.1.1.1	0xae6	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.243448973 CET	192.168.2.4	1.1.1.1	0xe16	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:40.289347887 CET	192.168.2.4	1.1.1.1	0x506c	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.289788961 CET	192.168.2.4	1.1.1.1	0xa64e	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:40.290601015 CET	192.168.2.4	1.1.1.1	0x8ea2	Standard query (0)	myaccount.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.290911913 CET	192.168.2.4	1.1.1.1	0x87c9	Standard query (0)	myaccount.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:40.489799976 CET	192.168.2.4	1.1.1.1	0x8e26	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.490128994 CET	192.168.2.4	1.1.1.1	0xc7fa	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:41.222475052 CET	192.168.2.4	1.1.1.1	0x676c	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:41.222897053 CET	192.168.2.4	1.1.1.1	0x585b	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:41.245847940 CET	192.168.2.4	1.1.1.1	0xafd	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:41.246165037 CET	192.168.2.4	1.1.1.1	0xcd9f	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.851721048 CET	192.168.2.4	1.1.1.1	0x3260	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.852108002 CET	192.168.2.4	1.1.1.1	0x444e	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.852946997 CET	192.168.2.4	1.1.1.1	0xee1a	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.853296041 CET	192.168.2.4	1.1.1.1	0x3baf	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.855123997 CET	192.168.2.4	1.1.1.1	0x12ad	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.855777979 CET	192.168.2.4	1.1.1.1	0xb7b9	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.856470108 CET	192.168.2.4	1.1.1.1	0x4dbd	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.859069109 CET	192.168.2.4	1.1.1.1	0x2899	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.875005007 CET	192.168.2.4	1.1.1.1	0x7cbb	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.875133991 CET	192.168.2.4	1.1.1.1	0xeda1	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.875848055 CET	192.168.2.4	1.1.1.1	0x637	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.876178980 CET	192.168.2.4	1.1.1.1	0xab98	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.876841068 CET	192.168.2.4	1.1.1.1	0x2b2c	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.877104044 CET	192.168.2.4	1.1.1.1	0x64b7	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:42.879113913 CET	192.168.2.4	1.1.1.1	0x3c9e	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.879702091 CET	192.168.2.4	1.1.1.1	0x522e	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.270976067 CET	192.168.2.4	1.1.1.1	0x2d77	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.271255970 CET	192.168.2.4	1.1.1.1	0x8978	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.365510941 CET	192.168.2.4	1.1.1.1	0x2ebb	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.366286039 CET	192.168.2.4	1.1.1.1	0x9a47	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.366983891 CET	192.168.2.4	1.1.1.1	0xb035	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.367396116 CET	192.168.2.4	1.1.1.1	0x985b	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.368324041 CET	192.168.2.4	1.1.1.1	0xe240	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.368674040 CET	192.168.2.4	1.1.1.1	0x1933	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.370388031 CET	192.168.2.4	1.1.1.1	0x6fa7	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.370954990 CET	192.168.2.4	1.1.1.1	0x6c3d	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.371532917 CET	192.168.2.4	1.1.1.1	0xebbe	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.371793985 CET	192.168.2.4	1.1.1.1	0xaf01	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.372432947 CET	192.168.2.4	1.1.1.1	0xfbd9	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.372880936 CET	192.168.2.4	1.1.1.1	0xda86	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:44.375315905 CET	192.168.2.4	1.1.1.1	0x1055	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.375886917 CET	192.168.2.4	1.1.1.1	0x1cf7	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:45.443603992 CET	192.168.2.4	1.1.1.1	0x309a	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:45.443921089 CET	192.168.2.4	1.1.1.1	0x1642	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.263016939 CET	192.168.2.4	1.1.1.1	0xb3f5	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.263297081 CET	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.266633987 CET	192.168.2.4	1.1.1.1	0x1986	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.266855001 CET	192.168.2.4	1.1.1.1	0xe3f2	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.270198107 CET	192.168.2.4	1.1.1.1	0x31d	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.270458937 CET	192.168.2.4	1.1.1.1	0xbfa5	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.272247076 CET	192.168.2.4	1.1.1.1	0x15cf	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.272732973 CET	192.168.2.4	1.1.1.1	0x2800	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.292829037 CET	192.168.2.4	1.1.1.1	0x575	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.293039083 CET	192.168.2.4	1.1.1.1	0x40e5	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.678863049 CET	192.168.2.4	1.1.1.1	0xbd0e	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.679405928 CET	192.168.2.4	1.1.1.1	0x2622	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.813817978 CET	192.168.2.4	1.1.1.1	0xf0b9	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.814218998 CET	192.168.2.4	1.1.1.1	0x5d61	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:46.847347975 CET	192.168.2.4	1.1.1.1	0x8b02	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.848038912 CET	192.168.2.4	1.1.1.1	0x67d	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:47.088342905 CET	192.168.2.4	1.1.1.1	0xfc62	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:47.119318008 CET	192.168.2.4	1.1.1.1	0x73dd	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:47.547734976 CET	192.168.2.4	1.1.1.1	0xa5e3	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:47.548135042 CET	192.168.2.4	1.1.1.1	0xcfb9	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.161209106 CET	192.168.2.4	1.1.1.1	0x3c12	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.161485910 CET	192.168.2.4	1.1.1.1	0xd755	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.180542946 CET	192.168.2.4	1.1.1.1	0xa283	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.180835962 CET	192.168.2.4	1.1.1.1	0x7f80	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.181230068 CET	192.168.2.4	1.1.1.1	0xfe67	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.181425095 CET	192.168.2.4	1.1.1.1	0x35b5	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.189522028 CET	192.168.2.4	1.1.1.1	0x337d	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.189949036 CET	192.168.2.4	1.1.1.1	0xe828	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.226409912 CET	192.168.2.4	1.1.1.1	0x3082	Standard query (0)	csp.dev.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.226672888 CET	192.168.2.4	1.1.1.1	0xbe41	Standard query (0)	csp.dev.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.239959002 CET	192.168.2.4	1.1.1.1	0xd0a	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.240411043 CET	192.168.2.4	1.1.1.1	0x14e0	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.243038893 CET	192.168.2.4	1.1.1.1	0xdeee	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.243228912 CET	192.168.2.4	1.1.1.1	0xf9d0	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.243946075 CET	192.168.2.4	1.1.1.1	0xc9cd	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.244385004 CET	192.168.2.4	1.1.1.1	0x75dd	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.246170998 CET	192.168.2.4	1.1.1.1	0xde8c	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.246366978 CET	192.168.2.4	1.1.1.1	0xbadb	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.257863998 CET	192.168.2.4	1.1.1.1	0x223c	Standard query (0)	static01.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.258061886 CET	192.168.2.4	1.1.1.1	0xc383	Standard query (0)	static01.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.258793116 CET	192.168.2.4	1.1.1.1	0xa144	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.259004116 CET	192.168.2.4	1.1.1.1	0xee76	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.722733021 CET	192.168.2.4	1.1.1.1	0xa060	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.723098040 CET	192.168.2.4	1.1.1.1	0x37f9	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:48.844156027 CET	192.168.2.4	1.1.1.1	0x4f6a	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.844379902 CET	192.168.2.4	1.1.1.1	0x8cb0	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:49.342413902 CET	192.168.2.4	1.1.1.1	0x57bf	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.342699051 CET	192.168.2.4	1.1.1.1	0x3e62	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:49.403383970 CET	192.168.2.4	1.1.1.1	0xd586	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.403733969 CET	192.168.2.4	1.1.1.1	0x5bb2	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:49.404252052 CET	192.168.2.4	1.1.1.1	0x65e6	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.404504061 CET	192.168.2.4	1.1.1.1	0x7298	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:49.473315001 CET	192.168.2.4	1.1.1.1	0x891	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.473510027 CET	192.168.2.4	1.1.1.1	0xa274	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:49.681611061 CET	192.168.2.4	1.1.1.1	0xab3f	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.681880951 CET	192.168.2.4	1.1.1.1	0x73d2	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Dec 5, 2023 19:13:49.881851912 CET	192.168.2.4	1.1.1.1	0xbcc0	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.882700920 CET	192.168.2.4	1.1.1.1	0xc78f	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.010982990 CET	192.168.2.4	1.1.1.1	0x5168	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.011238098 CET	192.168.2.4	1.1.1.1	0xabc	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.168884993 CET	192.168.2.4	1.1.1.1	0x8d94	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.169092894 CET	192.168.2.4	1.1.1.1	0xa383	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.171077967 CET	192.168.2.4	1.1.1.1	0xbf5a	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.171376944 CET	192.168.2.4	1.1.1.1	0x443d	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.180008888 CET	192.168.2.4	1.1.1.1	0x49c7	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.184818029 CET	192.168.2.4	1.1.1.1	0x2670	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.241643906 CET	192.168.2.4	1.1.1.1	0x2125	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.242065907 CET	192.168.2.4	1.1.1.1	0xbb1e	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.249767065 CET	192.168.2.4	1.1.1.1	0x976d	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.250099897 CET	192.168.2.4	1.1.1.1	0x1b4f	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.434604883 CET	192.168.2.4	1.1.1.1	0xfa4e	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.434792995 CET	192.168.2.4	1.1.1.1	0x4f62	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.438268900 CET	192.168.2.4	1.1.1.1	0x9b9b	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.438502073 CET	192.168.2.4	1.1.1.1	0xabae	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.751389980 CET	192.168.2.4	1.1.1.1	0x480a	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.751638889 CET	192.168.2.4	1.1.1.1	0x3b4	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.763514996 CET	192.168.2.4	1.1.1.1	0x19bf	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.763756037 CET	192.168.2.4	1.1.1.1	0x8433	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.765127897 CET	192.168.2.4	1.1.1.1	0x958	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.765311003 CET	192.168.2.4	1.1.1.1	0x7edc	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.774765968 CET	192.168.2.4	1.1.1.1	0xadde	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.774959087 CET	192.168.2.4	1.1.1.1	0xd417	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.777249098 CET	192.168.2.4	1.1.1.1	0x3a0d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.777451038 CET	192.168.2.4	1.1.1.1	0xe9b9	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:50.895287991 CET	192.168.2.4	1.1.1.1	0x8ab4	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.895440102 CET	192.168.2.4	1.1.1.1	0x70c8	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:51.134649992 CET	192.168.2.4	1.1.1.1	0x7f1a	Standard query (0)	a.et.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.134896994 CET	192.168.2.4	1.1.1.1	0x2d0b	Standard query (0)	a.et.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:51.228441954 CET	192.168.2.4	1.1.1.1	0x2e7c	Standard query (0)	vp.nyt.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.228601933 CET	192.168.2.4	1.1.1.1	0x5e96	Standard query (0)	vp.nyt.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:51.233309031 CET	192.168.2.4	1.1.1.1	0xbac9	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.233309031 CET	192.168.2.4	1.1.1.1	0xcc1b	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:52.002535105 CET	192.168.2.4	1.1.1.1	0x190c	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.002782106 CET	192.168.2.4	1.1.1.1	0x4bde	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:52.911681890 CET	192.168.2.4	1.1.1.1	0x6887	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.912311077 CET	192.168.2.4	1.1.1.1	0xe83	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.076849937 CET	192.168.2.4	1.1.1.1	0x38c7	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.077127934 CET	192.168.2.4	1.1.1.1	0x3f14	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.084445953 CET	192.168.2.4	1.1.1.1	0x4b1b	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.084748983 CET	192.168.2.4	1.1.1.1	0x2146	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.086339951 CET	192.168.2.4	1.1.1.1	0x9b0f	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.086639881 CET	192.168.2.4	1.1.1.1	0x42cc	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.091634989 CET	192.168.2.4	1.1.1.1	0xffeb	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.091937065 CET	192.168.2.4	1.1.1.1	0xd105	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.099944115 CET	192.168.2.4	1.1.1.1	0x1787	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.100223064 CET	192.168.2.4	1.1.1.1	0x5f83	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.104135990 CET	192.168.2.4	1.1.1.1	0x4526	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.104892015 CET	192.168.2.4	1.1.1.1	0xa91c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.106731892 CET	192.168.2.4	1.1.1.1	0x3e70	Standard query (0)	static01.nytimes.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.106986046 CET	192.168.2.4	1.1.1.1	0x71d8	Standard query (0)	static01.nytimes.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.111088991 CET	192.168.2.4	1.1.1.1	0x439d	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.111566067 CET	192.168.2.4	1.1.1.1	0x9b53	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.113552094 CET	192.168.2.4	1.1.1.1	0xa42d	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.113785982 CET	192.168.2.4	1.1.1.1	0xa62	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.651973009 CET	192.168.2.4	1.1.1.1	0x1a43	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.652682066 CET	192.168.2.4	1.1.1.1	0xe3ef	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.658023119 CET	192.168.2.4	1.1.1.1	0xa18f	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.658468962 CET	192.168.2.4	1.1.1.1	0xf5fe	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.661417961 CET	192.168.2.4	1.1.1.1	0x15d1	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.661618948 CET	192.168.2.4	1.1.1.1	0x35fd	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:53.662358046 CET	192.168.2.4	1.1.1.1	0xb1cf	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.662659883 CET	192.168.2.4	1.1.1.1	0x3a37	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 5, 2023 19:13:55.781539917 CET	192.168.2.4	1.1.1.1	0x6ae2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:55.781725883 CET	192.168.2.4	1.1.1.1	0x68b5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 5, 2023 19:14:02.441816092 CET	192.168.2.4	1.1.1.1	0x7f1a	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.442128897 CET	192.168.2.4	1.1.1.1	0xe00c	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:02.442943096 CET	192.168.2.4	1.1.1.1	0x4d51	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.443155050 CET	192.168.2.4	1.1.1.1	0xb75c	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:02.444236994 CET	192.168.2.4	1.1.1.1	0x5abe	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.444459915 CET	192.168.2.4	1.1.1.1	0x6345	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Dec 5, 2023 19:14:03.394783020 CET	192.168.2.4	1.1.1.1	0x14fa	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.395232916 CET	192.168.2.4	1.1.1.1	0xfbce	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:03.514635086 CET	192.168.2.4	1.1.1.1	0xe0d9	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.515896082 CET	192.168.2.4	1.1.1.1	0xb111	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:03.846976995 CET	192.168.2.4	1.1.1.1	0x3b5b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.847246885 CET	192.168.2.4	1.1.1.1	0xdf6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:03.891653061 CET	192.168.2.4	1.1.1.1	0x714	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.891864061 CET	192.168.2.4	1.1.1.1	0x5934	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:04.865144014 CET	192.168.2.4	1.1.1.1	0x6f8f	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:04.865500927 CET	192.168.2.4	1.1.1.1	0xa42d	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:05.665622950 CET	192.168.2.4	1.1.1.1	0xb8aa	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.665842056 CET	192.168.2.4	1.1.1.1	0xe7ba	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Dec 5, 2023 19:14:05.741209030 CET	192.168.2.4	1.1.1.1	0x470d	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.741413116 CET	192.168.2.4	1.1.1.1	0x8112	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Dec 5, 2023 19:14:06.593411922 CET	192.168.2.4	1.1.1.1	0xf4a5	Standard query (0)	173bf110.akstat.io	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:06.594032049 CET	192.168.2.4	1.1.1.1	0x56c1	Standard query (0)	173bf110.akstat.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 5, 2023 19:12:50.720617056 CET	1.1.1.1	192.168.2.4	0x5079	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:12:50.720617056 CET	1.1.1.1	192.168.2.4	0x5079	No error (0)	clients.l.google.com		142.251.16.138	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.720617056 CET	1.1.1.1	192.168.2.4	0x5079	No error (0)	clients.l.google.com		142.251.16.100	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.720617056 CET	1.1.1.1	192.168.2.4	0x5079	No error (0)	clients.l.google.com		142.251.16.102	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.720617056 CET	1.1.1.1	192.168.2.4	0x5079	No error (0)	clients.l.google.com		142.251.16.139	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.720617056 CET	1.1.1.1	192.168.2.4	0x5079	No error (0)	clients.l.google.com		142.251.16.113	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.720617056 CET	1.1.1.1	192.168.2.4	0x5079	No error (0)	clients.l.google.com		142.251.16.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:50.774399042 CET	1.1.1.1	192.168.2.4	0x1d36	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:12:50.775755882 CET	1.1.1.1	192.168.2.4	0x7688	No error (0)	accounts.google.com		172.253.62.84	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:51.872818947 CET	1.1.1.1	192.168.2.4	0x39ef	No error (0)	nope.theworkpc.com		216.9.224.57	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.441499949 CET	1.1.1.1	192.168.2.4	0xa0b8	No error (0)	www.google.com		142.251.16.147	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.441499949 CET	1.1.1.1	192.168.2.4	0xa0b8	No error (0)	www.google.com		142.251.16.104	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.441499949 CET	1.1.1.1	192.168.2.4	0xa0b8	No error (0)	www.google.com		142.251.16.99	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.441499949 CET	1.1.1.1	192.168.2.4	0xa0b8	No error (0)	www.google.com		142.251.16.105	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.441499949 CET	1.1.1.1	192.168.2.4	0xa0b8	No error (0)	www.google.com		142.251.16.103	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.441499949 CET	1.1.1.1	192.168.2.4	0xa0b8	No error (0)	www.google.com		142.251.16.106	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:12:54.445501089 CET	1.1.1.1	192.168.2.4	0xa94a	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:00.905755997 CET	1.1.1.1	192.168.2.4	0x2ab4	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:00.905755997 CET	1.1.1.1	192.168.2.4	0x2ab4	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:00.906105995 CET	1.1.1.1	192.168.2.4	0x60fd	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:01.937738895 CET	1.1.1.1	192.168.2.4	0x32dd	No error (0)	bostonglobe-prod.cdn.arcpublishing.com	50487.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:01.945378065 CET	1.1.1.1	192.168.2.4	0x8966	No error (0)	bostonglobe-prod.cdn.arcpublishing.com	50487.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:04.055382013 CET	1.1.1.1	192.168.2.4	0x630e	No error (0)	bostonglobe-prod.cdn.arcpublishing.com	50487.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:04.070085049 CET	1.1.1.1	192.168.2.4	0x9ed1	No error (0)	bostonglobe-prod.cdn.arcpublishing.com	50487.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.106473923 CET	1.1.1.1	192.168.2.4	0xc189	No error (0)	www.nytimes.com	www.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.106473923 CET	1.1.1.1	192.168.2.4	0xc189	No error (0)	www.prd.map.nytimes.com	www.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.106473923 CET	1.1.1.1	192.168.2.4	0xc189	No error (0)	www.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.106473923 CET	1.1.1.1	192.168.2.4	0xc189	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.106473923 CET	1.1.1.1	192.168.2.4	0xc189	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.106473923 CET	1.1.1.1	192.168.2.4	0xc189	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.106473923 CET	1.1.1.1	192.168.2.4	0xc189	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.111897945 CET	1.1.1.1	192.168.2.4	0xc8fa	No error (0)	www.nytimes.com	www.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.111897945 CET	1.1.1.1	192.168.2.4	0xc8fa	No error (0)	www.prd.map.nytimes.com	www.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.111897945 CET	1.1.1.1	192.168.2.4	0xc8fa	No error (0)	www.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.796156883 CET	1.1.1.1	192.168.2.4	0xba8b	No error (0)	www.datadoghq-browser-agent.com		13.32.195.219	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.799628973 CET	1.1.1.1	192.168.2.4	0xbcdc	No error (0)	g1.nyt.com	nyt5-assets.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.799628973 CET	1.1.1.1	192.168.2.4	0xbcdc	No error (0)	nyt5-assets.prd.map.nytimes.com	nyt5-assets.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.799628973 CET	1.1.1.1	192.168.2.4	0xbcdc	No error (0)	nyt5-assets.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.799628973 CET	1.1.1.1	192.168.2.4	0xbcdc	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.799628973 CET	1.1.1.1	192.168.2.4	0xbcdc	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.799628973 CET	1.1.1.1	192.168.2.4	0xbcdc	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.799628973 CET	1.1.1.1	192.168.2.4	0xbcdc	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.800432920 CET	1.1.1.1	192.168.2.4	0x64de	No error (0)	g1.nyt.com	nyt5-assets.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.800432920 CET	1.1.1.1	192.168.2.4	0x64de	No error (0)	nyt5-assets.prd.map.nytimes.com	nyt5-assets.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.800432920 CET	1.1.1.1	192.168.2.4	0x64de	No error (0)	nyt5-assets.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912811995 CET	1.1.1.1	192.168.2.4	0x94a0	No error (0)	static01.nyt.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912811995 CET	1.1.1.1	192.168.2.4	0x94a0	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912811995 CET	1.1.1.1	192.168.2.4	0x94a0	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912898064 CET	1.1.1.1	192.168.2.4	0x3dbf	No error (0)	static01.nyt.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912898064 CET	1.1.1.1	192.168.2.4	0x3dbf	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912898064 CET	1.1.1.1	192.168.2.4	0x3dbf	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912898064 CET	1.1.1.1	192.168.2.4	0x3dbf	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912898064 CET	1.1.1.1	192.168.2.4	0x3dbf	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912898064 CET	1.1.1.1	192.168.2.4	0x3dbf	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:23.912898064 CET	1.1.1.1	192.168.2.4	0x3dbf	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.716964006 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	static01.nyt.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.716964006 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.716964006 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.716964006 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.716964006 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.716964006 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.716964006 CET	1.1.1.1	192.168.2.4	0xbff6	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.717222929 CET	1.1.1.1	192.168.2.4	0xf9fa	No error (0)	static01.nyt.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.717222929 CET	1.1.1.1	192.168.2.4	0xf9fa	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.717222929 CET	1.1.1.1	192.168.2.4	0xf9fa	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.776552916 CET	1.1.1.1	192.168.2.4	0x9c04	No error (0)	a.et.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.776825905 CET	1.1.1.1	192.168.2.4	0x7d0	No error (0)	a.et.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.776825905 CET	1.1.1.1	192.168.2.4	0x7d0	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.776825905 CET	1.1.1.1	192.168.2.4	0x7d0	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.776825905 CET	1.1.1.1	192.168.2.4	0x7d0	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787197113 CET	1.1.1.1	192.168.2.4	0xa6db	No error (0)	samizdat-graphql.nytimes.com	samizdat-graphql.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787197113 CET	1.1.1.1	192.168.2.4	0xa6db	No error (0)	samizdat-graphql.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787844896 CET	1.1.1.1	192.168.2.4	0x25ec	No error (0)	samizdat-graphql.nytimes.com	samizdat-graphql.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787844896 CET	1.1.1.1	192.168.2.4	0x25ec	No error (0)	samizdat-graphql.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787844896 CET	1.1.1.1	192.168.2.4	0x25ec	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787844896 CET	1.1.1.1	192.168.2.4	0x25ec	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787844896 CET	1.1.1.1	192.168.2.4	0x25ec	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.787844896 CET	1.1.1.1	192.168.2.4	0x25ec	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.914808989 CET	1.1.1.1	192.168.2.4	0x43d2	No error (0)	als-svc.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:24.914808989 CET	1.1.1.1	192.168.2.4	0x43d2	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.914808989 CET	1.1.1.1	192.168.2.4	0x43d2	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:24.914808989 CET	1.1.1.1	192.168.2.4	0x43d2	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.245302916 CET	1.1.1.1	192.168.2.4	0xa283	No error (0)	als-svc.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257065058 CET	1.1.1.1	192.168.2.4	0x51f3	No error (0)	rumcdn.geoedge.be	d1bqktvj79b0wh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257065058 CET	1.1.1.1	192.168.2.4	0x51f3	No error (0)	d1bqktvj79b0wh.cloudfront.net		13.32.151.58	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257065058 CET	1.1.1.1	192.168.2.4	0x51f3	No error (0)	d1bqktvj79b0wh.cloudfront.net		13.32.151.67	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257065058 CET	1.1.1.1	192.168.2.4	0x51f3	No error (0)	d1bqktvj79b0wh.cloudfront.net		13.32.151.120	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257065058 CET	1.1.1.1	192.168.2.4	0x51f3	No error (0)	d1bqktvj79b0wh.cloudfront.net		13.32.151.74	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257752895 CET	1.1.1.1	192.168.2.4	0x60d3	No error (0)	rumcdn.geoedge.be	d1bqktvj79b0wh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257936001 CET	1.1.1.1	192.168.2.4	0x6ed3	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257977962 CET	1.1.1.1	192.168.2.4	0x11d5	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.257977962 CET	1.1.1.1	192.168.2.4	0x11d5	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.160.53.102	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.309045076 CET	1.1.1.1	192.168.2.4	0x6299	No error (0)	static01.nyt.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.309045076 CET	1.1.1.1	192.168.2.4	0x6299	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.309045076 CET	1.1.1.1	192.168.2.4	0x6299	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.309045076 CET	1.1.1.1	192.168.2.4	0x6299	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.309045076 CET	1.1.1.1	192.168.2.4	0x6299	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.309045076 CET	1.1.1.1	192.168.2.4	0x6299	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.309045076 CET	1.1.1.1	192.168.2.4	0x6299	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:25.310857058 CET	1.1.1.1	192.168.2.4	0x7cb5	No error (0)	static01.nyt.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.310857058 CET	1.1.1.1	192.168.2.4	0x7cb5	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:25.310857058 CET	1.1.1.1	192.168.2.4	0x7cb5	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.791104078 CET	1.1.1.1	192.168.2.4	0xbf0f	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:26.791233063 CET	1.1.1.1	192.168.2.4	0x6546	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.791233063 CET	1.1.1.1	192.168.2.4	0x6546	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792109966 CET	1.1.1.1	192.168.2.4	0x3f91	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.792287111 CET	1.1.1.1	192.168.2.4	0x59e	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794025898 CET	1.1.1.1	192.168.2.4	0xd070	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		44.198.213.90	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		3.213.144.60	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		18.211.57.19	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		18.214.71.147	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		3.209.112.180	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		44.206.100.248	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		34.238.221.75	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794083118 CET	1.1.1.1	192.168.2.4	0xc94d	No error (0)	us-east-tlx.3lift.com		3.211.99.138	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794574022 CET	1.1.1.1	192.168.2.4	0xbdbc	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.794574022 CET	1.1.1.1	192.168.2.4	0xbdbc	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.796055079 CET	1.1.1.1	192.168.2.4	0xfe6d	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.796055079 CET	1.1.1.1	192.168.2.4	0xfe6d	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.796055079 CET	1.1.1.1	192.168.2.4	0xfe6d	No error (0)	gob-njr3.pubmnet.com		104.36.115.111	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.796597004 CET	1.1.1.1	192.168.2.4	0x67a	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.796597004 CET	1.1.1.1	192.168.2.4	0x67a	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.868469954 CET	1.1.1.1	192.168.2.4	0x1717	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.869443893 CET	1.1.1.1	192.168.2.4	0x46b7	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:26.880947113 CET	1.1.1.1	192.168.2.4	0x246c	No error (0)	config.aps.amazon-adsystem.com		18.173.132.21	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.880947113 CET	1.1.1.1	192.168.2.4	0x246c	No error (0)	config.aps.amazon-adsystem.com		18.173.132.67	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.880947113 CET	1.1.1.1	192.168.2.4	0x246c	No error (0)	config.aps.amazon-adsystem.com		18.173.132.105	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:26.880947113 CET	1.1.1.1	192.168.2.4	0x246c	No error (0)	config.aps.amazon-adsystem.com		18.173.132.10	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.112113953 CET	1.1.1.1	192.168.2.4	0xa121	No error (0)	als-svc.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.112113953 CET	1.1.1.1	192.168.2.4	0xa121	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.112113953 CET	1.1.1.1	192.168.2.4	0xa121	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.112113953 CET	1.1.1.1	192.168.2.4	0xa121	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.112987041 CET	1.1.1.1	192.168.2.4	0xe290	No error (0)	als-svc.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.114495039 CET	1.1.1.1	192.168.2.4	0xe2c7	No error (0)	samizdat-graphql.nytimes.com	samizdat-graphql.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.114495039 CET	1.1.1.1	192.168.2.4	0xe2c7	No error (0)	samizdat-graphql.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.122349024 CET	1.1.1.1	192.168.2.4	0x3217	No error (0)	samizdat-graphql.nytimes.com	samizdat-graphql.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.122349024 CET	1.1.1.1	192.168.2.4	0x3217	No error (0)	samizdat-graphql.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.122349024 CET	1.1.1.1	192.168.2.4	0x3217	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.122349024 CET	1.1.1.1	192.168.2.4	0x3217	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.122349024 CET	1.1.1.1	192.168.2.4	0x3217	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.122349024 CET	1.1.1.1	192.168.2.4	0x3217	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592242956 CET	1.1.1.1	192.168.2.4	0x5cdb	No error (0)	dd.nytimes.com	sslgen-nyt.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592242956 CET	1.1.1.1	192.168.2.4	0x5cdb	No error (0)	sslgen-nyt.datadome.co	dd.nytimes.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592242956 CET	1.1.1.1	192.168.2.4	0x5cdb	No error (0)	dd.nytimes.com.first-party-js.datadome.co	detpi4b5pore2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592242956 CET	1.1.1.1	192.168.2.4	0x5cdb	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.51	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592242956 CET	1.1.1.1	192.168.2.4	0x5cdb	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.34	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592242956 CET	1.1.1.1	192.168.2.4	0x5cdb	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.113	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592242956 CET	1.1.1.1	192.168.2.4	0x5cdb	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.26	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592261076 CET	1.1.1.1	192.168.2.4	0x4e3b	No error (0)	sb.scorecardresearch.com		18.165.98.49	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592261076 CET	1.1.1.1	192.168.2.4	0x4e3b	No error (0)	sb.scorecardresearch.com		18.165.98.90	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592261076 CET	1.1.1.1	192.168.2.4	0x4e3b	No error (0)	sb.scorecardresearch.com		18.165.98.9	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.592261076 CET	1.1.1.1	192.168.2.4	0x4e3b	No error (0)	sb.scorecardresearch.com		18.165.98.41	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.593569994 CET	1.1.1.1	192.168.2.4	0xc4a5	No error (0)	dd.nytimes.com	sslgen-nyt.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.593569994 CET	1.1.1.1	192.168.2.4	0xc4a5	No error (0)	sslgen-nyt.datadome.co	dd.nytimes.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.593569994 CET	1.1.1.1	192.168.2.4	0xc4a5	No error (0)	dd.nytimes.com.first-party-js.datadome.co	detpi4b5pore2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707134008 CET	1.1.1.1	192.168.2.4	0x914b	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		44.215.149.250	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		34.230.221.219	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		35.172.27.27	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		52.200.67.209	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		3.232.174.50	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		52.1.188.169	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		54.166.224.47	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.707174063 CET	1.1.1.1	192.168.2.4	0xe1fb	No error (0)	us-east-tlx.3lift.com		52.7.180.11	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.708071947 CET	1.1.1.1	192.168.2.4	0x321e	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.735057116 CET	1.1.1.1	192.168.2.4	0xd2c4	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.735057116 CET	1.1.1.1	192.168.2.4	0xd2c4	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.736382008 CET	1.1.1.1	192.168.2.4	0xaf7f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.736382008 CET	1.1.1.1	192.168.2.4	0xaf7f	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.160.53.102	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.736664057 CET	1.1.1.1	192.168.2.4	0xf61c	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.737380981 CET	1.1.1.1	192.168.2.4	0x73a2	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:27.739362955 CET	1.1.1.1	192.168.2.4	0x7c3d	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.739362955 CET	1.1.1.1	192.168.2.4	0x7c3d	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:27.880731106 CET	1.1.1.1	192.168.2.4	0xb5d	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:27.882714033 CET	1.1.1.1	192.168.2.4	0x5f39	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.704339981 CET	1.1.1.1	192.168.2.4	0xf040	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877568007 CET	1.1.1.1	192.168.2.4	0x5b9b	No error (0)	purr.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877849102 CET	1.1.1.1	192.168.2.4	0xc964	No error (0)	purr.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877849102 CET	1.1.1.1	192.168.2.4	0xc964	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877849102 CET	1.1.1.1	192.168.2.4	0xc964	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877849102 CET	1.1.1.1	192.168.2.4	0xc964	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877923965 CET	1.1.1.1	192.168.2.4	0xa7b3	No error (0)	a.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877923965 CET	1.1.1.1	192.168.2.4	0xa7b3	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877923965 CET	1.1.1.1	192.168.2.4	0xa7b3	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.877923965 CET	1.1.1.1	192.168.2.4	0xa7b3	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:28.879571915 CET	1.1.1.1	192.168.2.4	0xcb0b	No error (0)	a.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.451911926 CET	1.1.1.1	192.168.2.4	0xb6ef	No error (0)	purr.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.452138901 CET	1.1.1.1	192.168.2.4	0x5107	No error (0)	purr.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.452138901 CET	1.1.1.1	192.168.2.4	0x5107	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.452138901 CET	1.1.1.1	192.168.2.4	0x5107	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.452138901 CET	1.1.1.1	192.168.2.4	0x5107	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.459146023 CET	1.1.1.1	192.168.2.4	0xb0c5	No error (0)	a.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.459146023 CET	1.1.1.1	192.168.2.4	0xb0c5	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.459146023 CET	1.1.1.1	192.168.2.4	0xb0c5	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.459146023 CET	1.1.1.1	192.168.2.4	0xb0c5	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.459326982 CET	1.1.1.1	192.168.2.4	0x58f0	No error (0)	a.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.692507029 CET	1.1.1.1	192.168.2.4	0x2b9e	No error (0)	vp.nyt.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.692980051 CET	1.1.1.1	192.168.2.4	0xb142	No error (0)	vp.nyt.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.692980051 CET	1.1.1.1	192.168.2.4	0xb142	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.692980051 CET	1.1.1.1	192.168.2.4	0xb142	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.692980051 CET	1.1.1.1	192.168.2.4	0xb142	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.692980051 CET	1.1.1.1	192.168.2.4	0xb142	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.891339064 CET	1.1.1.1	192.168.2.4	0x8790	No error (0)	5290727.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.891339064 CET	1.1.1.1	192.168.2.4	0x8790	No error (0)	dart.l.doubleclick.net		142.251.111.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.891339064 CET	1.1.1.1	192.168.2.4	0x8790	No error (0)	dart.l.doubleclick.net		142.251.111.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.892115116 CET	1.1.1.1	192.168.2.4	0xd85d	No error (0)	5290727.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.893744946 CET	1.1.1.1	192.168.2.4	0x42fd	No error (0)	td.doubleclick.net		142.251.111.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.893744946 CET	1.1.1.1	192.168.2.4	0x42fd	No error (0)	td.doubleclick.net		142.251.111.154	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.894890070 CET	1.1.1.1	192.168.2.4	0x6f09	No error (0)	static.chartbeat.com	d3f7zc5bbfci5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.894890070 CET	1.1.1.1	192.168.2.4	0x6f09	No error (0)	d3f7zc5bbfci5.cloudfront.net		18.160.55.166	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897089005 CET	1.1.1.1	192.168.2.4	0x7acd	No error (0)	static.chartbeat.com	d3f7zc5bbfci5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897269964 CET	1.1.1.1	192.168.2.4	0x8262	No error (0)	a1.nyt.com	nyt5-assets.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897269964 CET	1.1.1.1	192.168.2.4	0x8262	No error (0)	nyt5-assets.prd.map.nytimes.com	nyt5-assets.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897269964 CET	1.1.1.1	192.168.2.4	0x8262	No error (0)	nyt5-assets.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897269964 CET	1.1.1.1	192.168.2.4	0x8262	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897269964 CET	1.1.1.1	192.168.2.4	0x8262	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897269964 CET	1.1.1.1	192.168.2.4	0x8262	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897269964 CET	1.1.1.1	192.168.2.4	0x8262	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897413015 CET	1.1.1.1	192.168.2.4	0xd9aa	No error (0)	cdn.brandmetrics.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:29.897504091 CET	1.1.1.1	192.168.2.4	0x2c56	No error (0)	cdn.brandmetrics.com		104.26.12.18	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897504091 CET	1.1.1.1	192.168.2.4	0x2c56	No error (0)	cdn.brandmetrics.com		104.26.13.18	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897504091 CET	1.1.1.1	192.168.2.4	0x2c56	No error (0)	cdn.brandmetrics.com		172.67.72.66	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897833109 CET	1.1.1.1	192.168.2.4	0xa066	No error (0)	a1.nyt.com	nyt5-assets.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897833109 CET	1.1.1.1	192.168.2.4	0xa066	No error (0)	nyt5-assets.prd.map.nytimes.com	nyt5-assets.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.897833109 CET	1.1.1.1	192.168.2.4	0xa066	No error (0)	nyt5-assets.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:29.898511887 CET	1.1.1.1	192.168.2.4	0x88ca	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.898511887 CET	1.1.1.1	192.168.2.4	0x88ca	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.898787975 CET	1.1.1.1	192.168.2.4	0xcedc	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:13:29.899104118 CET	1.1.1.1	192.168.2.4	0xe6af	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.899104118 CET	1.1.1.1	192.168.2.4	0xe6af	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.899104118 CET	1.1.1.1	192.168.2.4	0xe6af	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:29.899104118 CET	1.1.1.1	192.168.2.4	0xe6af	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.301254034 CET	1.1.1.1	192.168.2.4	0x77fd	No error (0)	mwcm.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:30.301326990 CET	1.1.1.1	192.168.2.4	0x5f9d	No error (0)	mwcm.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:30.301326990 CET	1.1.1.1	192.168.2.4	0x5f9d	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.301326990 CET	1.1.1.1	192.168.2.4	0x5f9d	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.301326990 CET	1.1.1.1	192.168.2.4	0x5f9d	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.301326990 CET	1.1.1.1	192.168.2.4	0x5f9d	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.449959040 CET	1.1.1.1	192.168.2.4	0x83d1	No error (0)	cm.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.449959040 CET	1.1.1.1	192.168.2.4	0x83d1	No error (0)	cm.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.571029902 CET	1.1.1.1	192.168.2.4	0x3374	No error (0)	ad.doubleclick.net		172.253.122.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.571029902 CET	1.1.1.1	192.168.2.4	0x3374	No error (0)	ad.doubleclick.net		172.253.122.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.571077108 CET	1.1.1.1	192.168.2.4	0x2a45	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		34.227.121.59	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		3.215.250.170	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		35.173.148.186	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		44.197.48.196	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		23.23.164.244	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		52.1.243.22	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		34.201.248.140	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:30.648293018 CET	1.1.1.1	192.168.2.4	0x11d7	No error (0)	pnytimes.chartbeat.net		44.206.168.53	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:31.281558990 CET	1.1.1.1	192.168.2.4	0xbead	No error (0)	adservice.google.com		142.251.16.157	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:31.281558990 CET	1.1.1.1	192.168.2.4	0xbead	No error (0)	adservice.google.com		142.251.16.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:31.281603098 CET	1.1.1.1	192.168.2.4	0xe082	No error (0)	adservice.google.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:32.612979889 CET	1.1.1.1	192.168.2.4	0xea21	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.612979889 CET	1.1.1.1	192.168.2.4	0xea21	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.628707886 CET	1.1.1.1	192.168.2.4	0x606b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:13:32.637481928 CET	1.1.1.1	192.168.2.4	0xb027	No error (0)	ad.doubleclick.net		172.253.115.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.637481928 CET	1.1.1.1	192.168.2.4	0xb027	No error (0)	ad.doubleclick.net		172.253.115.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.637501955 CET	1.1.1.1	192.168.2.4	0x7390	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:13:32.669790030 CET	1.1.1.1	192.168.2.4	0xea	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.669790030 CET	1.1.1.1	192.168.2.4	0xea	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.669790030 CET	1.1.1.1	192.168.2.4	0xea	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.669790030 CET	1.1.1.1	192.168.2.4	0xea	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.673099041 CET	1.1.1.1	192.168.2.4	0xe44b	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:32.673480988 CET	1.1.1.1	192.168.2.4	0xca98	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.673480988 CET	1.1.1.1	192.168.2.4	0xca98	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.673480988 CET	1.1.1.1	192.168.2.4	0xca98	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.673480988 CET	1.1.1.1	192.168.2.4	0xca98	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.674236059 CET	1.1.1.1	192.168.2.4	0xac84	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.674236059 CET	1.1.1.1	192.168.2.4	0xac84	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		54.163.159.203	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		54.221.60.142	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		52.73.178.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		52.73.29.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		54.161.26.122	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		52.70.230.140	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		54.210.168.168	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.676762104 CET	1.1.1.1	192.168.2.4	0x1738	No error (0)	cdn.w55c.net		52.54.58.81	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.677305937 CET	1.1.1.1	192.168.2.4	0x238b	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.678114891 CET	1.1.1.1	192.168.2.4	0xf639	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.678114891 CET	1.1.1.1	192.168.2.4	0xf639	No error (0)	image8-v2.pubmnet.com	imgsync-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.678404093 CET	1.1.1.1	192.168.2.4	0x62c9	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.678404093 CET	1.1.1.1	192.168.2.4	0x62c9	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.678404093 CET	1.1.1.1	192.168.2.4	0x62c9	No error (0)	imagesync-vac.pubmnet.com		8.28.7.82	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.679908991 CET	1.1.1.1	192.168.2.4	0x453f	No error (0)	nytimes-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.679908991 CET	1.1.1.1	192.168.2.4	0x453f	No error (0)	nytimes-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.681900024 CET	1.1.1.1	192.168.2.4	0x9929	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.681900024 CET	1.1.1.1	192.168.2.4	0x9929	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.682010889 CET	1.1.1.1	192.168.2.4	0xfc68	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.683001995 CET	1.1.1.1	192.168.2.4	0x7536	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.689418077 CET	1.1.1.1	192.168.2.4	0x6234	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.689418077 CET	1.1.1.1	192.168.2.4	0x6234	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.690371990 CET	1.1.1.1	192.168.2.4	0xd2ab	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.730612993 CET	1.1.1.1	192.168.2.4	0xa26c	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.730787992 CET	1.1.1.1	192.168.2.4	0x3f9b	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:32.730787992 CET	1.1.1.1	192.168.2.4	0x3f9b	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:32.757399082 CET	1.1.1.1	192.168.2.4	0xec72	No error (0)	cs.media.net		23.46.192.28	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.220145941 CET	1.1.1.1	192.168.2.4	0xdaae	No error (0)	ad.doubleclick.net		172.253.122.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.220145941 CET	1.1.1.1	192.168.2.4	0xdaae	No error (0)	ad.doubleclick.net		172.253.122.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.220169067 CET	1.1.1.1	192.168.2.4	0xf932	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:13:33.223066092 CET	1.1.1.1	192.168.2.4	0xe759	No error (0)	dd.nytimes.com	sslgen-nyt.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.223066092 CET	1.1.1.1	192.168.2.4	0xe759	No error (0)	sslgen-nyt.datadome.co	dd.nytimes.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.223066092 CET	1.1.1.1	192.168.2.4	0xe759	No error (0)	dd.nytimes.com.first-party-js.datadome.co	detpi4b5pore2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.223066092 CET	1.1.1.1	192.168.2.4	0xe759	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.51	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.223066092 CET	1.1.1.1	192.168.2.4	0xe759	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.113	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.223066092 CET	1.1.1.1	192.168.2.4	0xe759	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.26	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.223066092 CET	1.1.1.1	192.168.2.4	0xe759	No error (0)	detpi4b5pore2.cloudfront.net		18.67.65.34	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.244376898 CET	1.1.1.1	192.168.2.4	0x7962	No error (0)	dd.nytimes.com	sslgen-nyt.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.244376898 CET	1.1.1.1	192.168.2.4	0x7962	No error (0)	sslgen-nyt.datadome.co	dd.nytimes.com.first-party-js.datadome.co		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.244376898 CET	1.1.1.1	192.168.2.4	0x7962	No error (0)	dd.nytimes.com.first-party-js.datadome.co	detpi4b5pore2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.288927078 CET	1.1.1.1	192.168.2.4	0x5fa0	No error (0)	mwcm.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.288927078 CET	1.1.1.1	192.168.2.4	0x5fa0	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.288927078 CET	1.1.1.1	192.168.2.4	0x5fa0	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.288927078 CET	1.1.1.1	192.168.2.4	0x5fa0	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.288927078 CET	1.1.1.1	192.168.2.4	0x5fa0	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.291558981 CET	1.1.1.1	192.168.2.4	0xfc0f	No error (0)	mwcm.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		34.227.121.59	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		52.205.101.11	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		18.209.131.184	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		52.1.243.22	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		44.206.111.52	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		54.86.28.227	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		34.232.33.120	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.292444944 CET	1.1.1.1	192.168.2.4	0x4c33	No error (0)	pnytimes.chartbeat.net		44.206.78.90	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.296895981 CET	1.1.1.1	192.168.2.4	0xd7aa	No error (0)	adservice.google.com		172.253.122.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.296895981 CET	1.1.1.1	192.168.2.4	0xd7aa	No error (0)	adservice.google.com		172.253.122.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.297797918 CET	1.1.1.1	192.168.2.4	0x9095	No error (0)	adservice.google.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:33.347263098 CET	1.1.1.1	192.168.2.4	0x902f	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.347263098 CET	1.1.1.1	192.168.2.4	0x902f	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.347263098 CET	1.1.1.1	192.168.2.4	0x902f	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.353090048 CET	1.1.1.1	192.168.2.4	0x6e6c	No error (0)	collector.brandmetrics.com	bmcollector-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.353090048 CET	1.1.1.1	192.168.2.4	0x6e6c	No error (0)	boulder-collector-linux-v3-us.azurewebsites.net	waws-prod-dm1-179.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.353090048 CET	1.1.1.1	192.168.2.4	0x6e6c	No error (0)	waws-prod-dm1-179.sip.azurewebsites.windows.net	waws-prod-dm1-179-pork.centralus.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360033989 CET	1.1.1.1	192.168.2.4	0xcd46	No error (0)	contextual.media.net		23.56.8.25	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360929012 CET	1.1.1.1	192.168.2.4	0xa73d	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360929012 CET	1.1.1.1	192.168.2.4	0xa73d	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360929012 CET	1.1.1.1	192.168.2.4	0xa73d	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360944986 CET	1.1.1.1	192.168.2.4	0xfe9f	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360944986 CET	1.1.1.1	192.168.2.4	0xfe9f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360944986 CET	1.1.1.1	192.168.2.4	0xfe9f	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360944986 CET	1.1.1.1	192.168.2.4	0xfe9f	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.360944986 CET	1.1.1.1	192.168.2.4	0xfe9f	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.623017073 CET	1.1.1.1	192.168.2.4	0x622b	No error (0)	cs.media.net		23.222.200.28	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.854774952 CET	1.1.1.1	192.168.2.4	0x3245	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.854774952 CET	1.1.1.1	192.168.2.4	0x3245	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.854774952 CET	1.1.1.1	192.168.2.4	0x3245	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.854871988 CET	1.1.1.1	192.168.2.4	0x3b89	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.854871988 CET	1.1.1.1	192.168.2.4	0x3b89	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.854871988 CET	1.1.1.1	192.168.2.4	0x3b89	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:33.932555914 CET	1.1.1.1	192.168.2.4	0x88a1	No error (0)	inv-nets.admixer.net		216.219.92.22	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.950150967 CET	1.1.1.1	192.168.2.4	0x8320	No error (0)	nytimes-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:33.950150967 CET	1.1.1.1	192.168.2.4	0x8320	No error (0)	nytimes-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:34.674047947 CET	1.1.1.1	192.168.2.4	0xb9a6	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:34.674047947 CET	1.1.1.1	192.168.2.4	0xb9a6	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:34.674047947 CET	1.1.1.1	192.168.2.4	0xb9a6	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:34.674634933 CET	1.1.1.1	192.168.2.4	0x8e8f	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:34.674634933 CET	1.1.1.1	192.168.2.4	0x8e8f	No error (0)	image2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:34.690013885 CET	1.1.1.1	192.168.2.4	0x1349	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:34.690013885 CET	1.1.1.1	192.168.2.4	0x1349	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:34.690013885 CET	1.1.1.1	192.168.2.4	0x1349	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:34.690013885 CET	1.1.1.1	192.168.2.4	0x1349	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:34.690149069 CET	1.1.1.1	192.168.2.4	0xd9d6	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:34.690149069 CET	1.1.1.1	192.168.2.4	0xd9d6	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:36.305129051 CET	1.1.1.1	192.168.2.4	0x7a13	No error (0)	hb.yahoo.net		23.218.218.72	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.305129051 CET	1.1.1.1	192.168.2.4	0x7a13	No error (0)	hb.yahoo.net		23.218.218.83	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.305829048 CET	1.1.1.1	192.168.2.4	0x69ba	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.305829048 CET	1.1.1.1	192.168.2.4	0x69ba	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.306070089 CET	1.1.1.1	192.168.2.4	0xdc26	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:36.446422100 CET	1.1.1.1	192.168.2.4	0xefaa	No error (0)	contextual.media.net		23.55.204.22	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.859066963 CET	1.1.1.1	192.168.2.4	0xc3ac	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.859066963 CET	1.1.1.1	192.168.2.4	0xc3ac	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:36.859695911 CET	1.1.1.1	192.168.2.4	0x3ce1	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:37.054411888 CET	1.1.1.1	192.168.2.4	0x1da2	No error (0)	platform.iteratehq.com		104.26.6.229	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:37.054411888 CET	1.1.1.1	192.168.2.4	0x1da2	No error (0)	platform.iteratehq.com		172.67.71.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:37.054411888 CET	1.1.1.1	192.168.2.4	0x1da2	No error (0)	platform.iteratehq.com		104.26.7.229	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:37.054457903 CET	1.1.1.1	192.168.2.4	0x8171	No error (0)	platform.iteratehq.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:37.066745996 CET	1.1.1.1	192.168.2.4	0xc748	No error (0)	hb.yahoo.net		23.218.218.72	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:37.066745996 CET	1.1.1.1	192.168.2.4	0xc748	No error (0)	hb.yahoo.net		23.218.218.83	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.221223116 CET	1.1.1.1	192.168.2.4	0xe9bb	No error (0)	a.et.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.221223116 CET	1.1.1.1	192.168.2.4	0xe9bb	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.221223116 CET	1.1.1.1	192.168.2.4	0xe9bb	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.221223116 CET	1.1.1.1	192.168.2.4	0xe9bb	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.221267939 CET	1.1.1.1	192.168.2.4	0x2fa0	No error (0)	a.et.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.222810984 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	www.nytimes.com	www.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.222810984 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	www.prd.map.nytimes.com	www.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.222810984 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	www.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.222810984 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.222810984 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.222810984 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.222810984 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.223382950 CET	1.1.1.1	192.168.2.4	0xaccd	No error (0)	www.nytimes.com	www.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.223382950 CET	1.1.1.1	192.168.2.4	0xaccd	No error (0)	www.prd.map.nytimes.com	www.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.223382950 CET	1.1.1.1	192.168.2.4	0xaccd	No error (0)	www.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:38.728548050 CET	1.1.1.1	192.168.2.4	0x40aa	No error (0)	iteratehq.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:38.756836891 CET	1.1.1.1	192.168.2.4	0x7bd0	No error (0)	iteratehq.com		104.26.6.229	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.756836891 CET	1.1.1.1	192.168.2.4	0x7bd0	No error (0)	iteratehq.com		172.67.71.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:38.756836891 CET	1.1.1.1	192.168.2.4	0x7bd0	No error (0)	iteratehq.com		104.26.7.229	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:39.759438992 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	iteratehq.com		104.26.7.229	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:39.759438992 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	iteratehq.com		172.67.71.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:39.759438992 CET	1.1.1.1	192.168.2.4	0x8135	No error (0)	iteratehq.com		104.26.6.229	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:39.759804010 CET	1.1.1.1	192.168.2.4	0xf36c	No error (0)	iteratehq.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:40.338625908 CET	1.1.1.1	192.168.2.4	0xae6	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.384685040 CET	1.1.1.1	192.168.2.4	0x506c	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.384685040 CET	1.1.1.1	192.168.2.4	0x506c	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.384685040 CET	1.1.1.1	192.168.2.4	0x506c	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.384860992 CET	1.1.1.1	192.168.2.4	0xa64e	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.386111021 CET	1.1.1.1	192.168.2.4	0x87c9	No error (0)	myaccount.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.386404991 CET	1.1.1.1	192.168.2.4	0x8ea2	No error (0)	myaccount.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.386404991 CET	1.1.1.1	192.168.2.4	0x8ea2	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.386404991 CET	1.1.1.1	192.168.2.4	0x8ea2	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.386404991 CET	1.1.1.1	192.168.2.4	0x8ea2	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.386404991 CET	1.1.1.1	192.168.2.4	0x8ea2	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.584688902 CET	1.1.1.1	192.168.2.4	0x8e26	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.584688902 CET	1.1.1.1	192.168.2.4	0x8e26	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.584688902 CET	1.1.1.1	192.168.2.4	0x8e26	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.584688902 CET	1.1.1.1	192.168.2.4	0x8e26	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		3.162.114.30	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:40.585010052 CET	1.1.1.1	192.168.2.4	0xc7fa	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.585010052 CET	1.1.1.1	192.168.2.4	0xc7fa	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:40.585010052 CET	1.1.1.1	192.168.2.4	0xc7fa	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:41.319526911 CET	1.1.1.1	192.168.2.4	0x676c	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:41.340437889 CET	1.1.1.1	192.168.2.4	0xafd	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:41.340437889 CET	1.1.1.1	192.168.2.4	0xafd	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:41.340437889 CET	1.1.1.1	192.168.2.4	0xafd	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:41.340437889 CET	1.1.1.1	192.168.2.4	0xafd	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.160.1.134	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:41.340986967 CET	1.1.1.1	192.168.2.4	0xcd9f	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:41.340986967 CET	1.1.1.1	192.168.2.4	0xcd9f	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:41.340986967 CET	1.1.1.1	192.168.2.4	0xcd9f	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.948081970 CET	1.1.1.1	192.168.2.4	0xee1a	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.948081970 CET	1.1.1.1	192.168.2.4	0xee1a	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.949542046 CET	1.1.1.1	192.168.2.4	0x3260	No error (0)	cs.media.net		23.46.192.28	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.949666977 CET	1.1.1.1	192.168.2.4	0x3baf	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:42.950160027 CET	1.1.1.1	192.168.2.4	0x12ad	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.951080084 CET	1.1.1.1	192.168.2.4	0xb7b9	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.951311111 CET	1.1.1.1	192.168.2.4	0x4dbd	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.954375029 CET	1.1.1.1	192.168.2.4	0x2899	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.970706940 CET	1.1.1.1	192.168.2.4	0x7cbb	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.970706940 CET	1.1.1.1	192.168.2.4	0x7cbb	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.970706940 CET	1.1.1.1	192.168.2.4	0x7cbb	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.970706940 CET	1.1.1.1	192.168.2.4	0x7cbb	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.970706940 CET	1.1.1.1	192.168.2.4	0x7cbb	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.970757961 CET	1.1.1.1	192.168.2.4	0x637	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.970757961 CET	1.1.1.1	192.168.2.4	0x637	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.971415997 CET	1.1.1.1	192.168.2.4	0xeda1	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.971415997 CET	1.1.1.1	192.168.2.4	0xeda1	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.971415997 CET	1.1.1.1	192.168.2.4	0xeda1	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.974014997 CET	1.1.1.1	192.168.2.4	0x3c9e	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.974014997 CET	1.1.1.1	192.168.2.4	0x3c9e	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.974014997 CET	1.1.1.1	192.168.2.4	0x3c9e	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.974014997 CET	1.1.1.1	192.168.2.4	0x3c9e	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.974931002 CET	1.1.1.1	192.168.2.4	0x522e	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.974931002 CET	1.1.1.1	192.168.2.4	0x522e	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:42.976429939 CET	1.1.1.1	192.168.2.4	0x2b2c	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.365783930 CET	1.1.1.1	192.168.2.4	0x2d77	No error (0)	cm.g.doubleclick.net		142.251.111.154	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.365783930 CET	1.1.1.1	192.168.2.4	0x2d77	No error (0)	cm.g.doubleclick.net		142.251.111.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		50.17.66.232	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		34.193.112.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		52.202.8.176	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		44.215.169.187	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		3.93.203.79	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		54.82.8.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		52.22.32.84	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.460484982 CET	1.1.1.1	192.168.2.4	0x2ebb	No error (0)	idaas-ext.cph.liveintent.com		18.209.219.124	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.462038040 CET	1.1.1.1	192.168.2.4	0xb035	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.462038040 CET	1.1.1.1	192.168.2.4	0xb035	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.462038040 CET	1.1.1.1	192.168.2.4	0xb035	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.462038040 CET	1.1.1.1	192.168.2.4	0xb035	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.462383986 CET	1.1.1.1	192.168.2.4	0x9a47	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.463098049 CET	1.1.1.1	192.168.2.4	0xe240	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.464459896 CET	1.1.1.1	192.168.2.4	0x1933	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:44.464459896 CET	1.1.1.1	192.168.2.4	0x1933	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466180086 CET	1.1.1.1	192.168.2.4	0x6fa7	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		54.198.207.123	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		54.205.205.150	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		54.209.112.6	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		54.144.205.34	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		52.86.3.95	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		54.172.57.125	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		52.86.219.183	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.466326952 CET	1.1.1.1	192.168.2.4	0xebbe	No error (0)	sync.srv.stackadapt.com		54.227.196.231	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.470541000 CET	1.1.1.1	192.168.2.4	0x1055	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:44.470541000 CET	1.1.1.1	192.168.2.4	0x1055	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.73.239.53	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.470541000 CET	1.1.1.1	192.168.2.4	0x1055	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.0.52.210	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.470541000 CET	1.1.1.1	192.168.2.4	0x1055	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.217.25.234	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.470541000 CET	1.1.1.1	192.168.2.4	0x1055	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.223.74.122	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:44.470879078 CET	1.1.1.1	192.168.2.4	0x1cf7	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:45.538131952 CET	1.1.1.1	192.168.2.4	0x309a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:45.538131952 CET	1.1.1.1	192.168.2.4	0x309a	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:45.538131952 CET	1.1.1.1	192.168.2.4	0x309a	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:45.539447069 CET	1.1.1.1	192.168.2.4	0x1642	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.278496981 CET	1.1.1.1	192.168.2.4	0xb624	No error (0)	pagead-googlehosted.l.google.com		142.251.16.132	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.357837915 CET	1.1.1.1	192.168.2.4	0xb3f5	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.357837915 CET	1.1.1.1	192.168.2.4	0xb3f5	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.358392000 CET	1.1.1.1	192.168.2.4	0x975d	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:46.361758947 CET	1.1.1.1	192.168.2.4	0x1986	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.361758947 CET	1.1.1.1	192.168.2.4	0x1986	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.365312099 CET	1.1.1.1	192.168.2.4	0x31d	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.365601063 CET	1.1.1.1	192.168.2.4	0xbfa5	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.367820978 CET	1.1.1.1	192.168.2.4	0x2800	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.367820978 CET	1.1.1.1	192.168.2.4	0x2800	No error (0)	image6v2.pubmnet.com	pugm88000nfc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.374716997 CET	1.1.1.1	192.168.2.4	0x15cf	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.374716997 CET	1.1.1.1	192.168.2.4	0x15cf	No error (0)	image6v2.pubmnet.com	pugm88000nfc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.374716997 CET	1.1.1.1	192.168.2.4	0x15cf	No error (0)	pugm88000nfc.pubmnet.com		104.36.115.113	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.388159037 CET	1.1.1.1	192.168.2.4	0x575	No error (0)	ad.doubleclick.net		172.253.122.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.388159037 CET	1.1.1.1	192.168.2.4	0x575	No error (0)	ad.doubleclick.net		172.253.122.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.388453007 CET	1.1.1.1	192.168.2.4	0x40e5	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:13:46.773977995 CET	1.1.1.1	192.168.2.4	0x2622	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.774210930 CET	1.1.1.1	192.168.2.4	0xbd0e	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.909010887 CET	1.1.1.1	192.168.2.4	0xf0b9	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.909010887 CET	1.1.1.1	192.168.2.4	0xf0b9	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:46.909770012 CET	1.1.1.1	192.168.2.4	0x5d61	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:46.943742037 CET	1.1.1.1	192.168.2.4	0x8b02	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:47.183793068 CET	1.1.1.1	192.168.2.4	0xfc62	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:47.218163967 CET	1.1.1.1	192.168.2.4	0x73dd	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:47.643117905 CET	1.1.1.1	192.168.2.4	0xa5e3	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:47.643368959 CET	1.1.1.1	192.168.2.4	0xcfb9	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.256196976 CET	1.1.1.1	192.168.2.4	0x3c12	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.257692099 CET	1.1.1.1	192.168.2.4	0xd755	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.276921988 CET	1.1.1.1	192.168.2.4	0xa283	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.276921988 CET	1.1.1.1	192.168.2.4	0xa283	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.202.221.201	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.276921988 CET	1.1.1.1	192.168.2.4	0xa283	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.207.153.119	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.276921988 CET	1.1.1.1	192.168.2.4	0xa283	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.233.75.175	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.276921988 CET	1.1.1.1	192.168.2.4	0xa283	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.217.25.234	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.277020931 CET	1.1.1.1	192.168.2.4	0x7f80	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.278759003 CET	1.1.1.1	192.168.2.4	0xfe67	No error (0)	cm.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.278759003 CET	1.1.1.1	192.168.2.4	0xfe67	No error (0)	cm.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.278759003 CET	1.1.1.1	192.168.2.4	0xfe67	No error (0)	cm.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.278759003 CET	1.1.1.1	192.168.2.4	0xfe67	No error (0)	cm.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.288589954 CET	1.1.1.1	192.168.2.4	0x337d	No error (0)	aax-eu.amazon-adsystem.com		52.95.125.22	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.323316097 CET	1.1.1.1	192.168.2.4	0x3082	No error (0)	csp.dev.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.323316097 CET	1.1.1.1	192.168.2.4	0x3082	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.323316097 CET	1.1.1.1	192.168.2.4	0x3082	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.323316097 CET	1.1.1.1	192.168.2.4	0x3082	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.323316097 CET	1.1.1.1	192.168.2.4	0x3082	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.324835062 CET	1.1.1.1	192.168.2.4	0xbe41	No error (0)	csp.dev.nytimes.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.335108995 CET	1.1.1.1	192.168.2.4	0xd0a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.336071968 CET	1.1.1.1	192.168.2.4	0x14e0	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.341624975 CET	1.1.1.1	192.168.2.4	0xc9cd	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.341639042 CET	1.1.1.1	192.168.2.4	0xdeee	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.341650963 CET	1.1.1.1	192.168.2.4	0xde8c	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.341650963 CET	1.1.1.1	192.168.2.4	0xde8c	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.341650963 CET	1.1.1.1	192.168.2.4	0xde8c	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356075048 CET	1.1.1.1	192.168.2.4	0x223c	No error (0)	static01.nytimes.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356075048 CET	1.1.1.1	192.168.2.4	0x223c	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356075048 CET	1.1.1.1	192.168.2.4	0x223c	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356075048 CET	1.1.1.1	192.168.2.4	0x223c	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356075048 CET	1.1.1.1	192.168.2.4	0x223c	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356075048 CET	1.1.1.1	192.168.2.4	0x223c	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356075048 CET	1.1.1.1	192.168.2.4	0x223c	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356692076 CET	1.1.1.1	192.168.2.4	0xc383	No error (0)	static01.nytimes.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356692076 CET	1.1.1.1	192.168.2.4	0xc383	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.356692076 CET	1.1.1.1	192.168.2.4	0xc383	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.357424974 CET	1.1.1.1	192.168.2.4	0xa144	No error (0)	www.googletagservices.com		172.253.122.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.357424974 CET	1.1.1.1	192.168.2.4	0xa144	No error (0)	www.googletagservices.com		172.253.122.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.817943096 CET	1.1.1.1	192.168.2.4	0xa060	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.818010092 CET	1.1.1.1	192.168.2.4	0x37f9	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939450026 CET	1.1.1.1	192.168.2.4	0x4f6a	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939450026 CET	1.1.1.1	192.168.2.4	0x4f6a	No error (0)	idaas6.cph.liveintent.com		54.86.106.102	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939450026 CET	1.1.1.1	192.168.2.4	0x4f6a	No error (0)	idaas6.cph.liveintent.com		3.212.12.109	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939450026 CET	1.1.1.1	192.168.2.4	0x4f6a	No error (0)	idaas6.cph.liveintent.com		52.207.159.210	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939450026 CET	1.1.1.1	192.168.2.4	0x4f6a	No error (0)	idaas6.cph.liveintent.com		174.129.198.138	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939450026 CET	1.1.1.1	192.168.2.4	0x4f6a	No error (0)	idaas6.cph.liveintent.com		34.200.1.30	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939450026 CET	1.1.1.1	192.168.2.4	0x4f6a	No error (0)	idaas6.cph.liveintent.com		44.194.60.79	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:48.939909935 CET	1.1.1.1	192.168.2.4	0x8cb0	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.436887980 CET	1.1.1.1	192.168.2.4	0x57bf	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.436887980 CET	1.1.1.1	192.168.2.4	0x57bf	No error (0)	image4-v2.pubmnet.com	spug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.436887980 CET	1.1.1.1	192.168.2.4	0x57bf	No error (0)	spug-njrpb.pubmnet.com		162.248.18.34	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.437598944 CET	1.1.1.1	192.168.2.4	0x3e62	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.437598944 CET	1.1.1.1	192.168.2.4	0x3e62	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.498557091 CET	1.1.1.1	192.168.2.4	0x5bb2	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.498557091 CET	1.1.1.1	192.168.2.4	0x5bb2	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.498641968 CET	1.1.1.1	192.168.2.4	0xd586	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.498641968 CET	1.1.1.1	192.168.2.4	0xd586	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.499593019 CET	1.1.1.1	192.168.2.4	0x7298	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.499593019 CET	1.1.1.1	192.168.2.4	0x7298	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.500528097 CET	1.1.1.1	192.168.2.4	0x65e6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.500528097 CET	1.1.1.1	192.168.2.4	0x65e6	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.500528097 CET	1.1.1.1	192.168.2.4	0x65e6	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.569215059 CET	1.1.1.1	192.168.2.4	0x891	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.569215059 CET	1.1.1.1	192.168.2.4	0x891	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.569215059 CET	1.1.1.1	192.168.2.4	0x891	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.569377899 CET	1.1.1.1	192.168.2.4	0xa274	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.569377899 CET	1.1.1.1	192.168.2.4	0xa274	No error (0)	image2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		54.157.75.191	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		54.156.123.241	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		52.87.8.197	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		52.7.115.91	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		54.164.228.62	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		54.158.231.117	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		52.73.40.218	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.777334929 CET	1.1.1.1	192.168.2.4	0xab3f	No error (0)	match.prod.bidr.io		54.162.57.130	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		52.5.231.5	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		54.161.205.127	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		54.144.184.12	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		52.4.98.207	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		54.146.33.131	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		52.70.253.77	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		54.165.74.222	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:49.976905107 CET	1.1.1.1	192.168.2.4	0xbcc0	No error (0)	sync.ipredictive.com		54.159.72.222	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.106082916 CET	1.1.1.1	192.168.2.4	0x5168	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.106082916 CET	1.1.1.1	192.168.2.4	0x5168	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.106082916 CET	1.1.1.1	192.168.2.4	0x5168	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.263746023 CET	1.1.1.1	192.168.2.4	0x8d94	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.263746023 CET	1.1.1.1	192.168.2.4	0x8d94	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.263746023 CET	1.1.1.1	192.168.2.4	0x8d94	No error (0)	imagesync-vac.pubmnet.com		8.28.7.82	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.264307022 CET	1.1.1.1	192.168.2.4	0xa383	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.264307022 CET	1.1.1.1	192.168.2.4	0xa383	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.265875101 CET	1.1.1.1	192.168.2.4	0x443d	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.266009092 CET	1.1.1.1	192.168.2.4	0xbf5a	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.275289059 CET	1.1.1.1	192.168.2.4	0x49c7	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.275289059 CET	1.1.1.1	192.168.2.4	0x49c7	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.275289059 CET	1.1.1.1	192.168.2.4	0x49c7	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.279592991 CET	1.1.1.1	192.168.2.4	0x2670	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.279592991 CET	1.1.1.1	192.168.2.4	0x2670	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.336494923 CET	1.1.1.1	192.168.2.4	0x2125	No error (0)	thrtle.com		44.218.177.189	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.336494923 CET	1.1.1.1	192.168.2.4	0x2125	No error (0)	thrtle.com		107.23.192.123	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.336494923 CET	1.1.1.1	192.168.2.4	0x2125	No error (0)	thrtle.com		3.91.115.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.336494923 CET	1.1.1.1	192.168.2.4	0x2125	No error (0)	thrtle.com		54.224.111.178	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.336494923 CET	1.1.1.1	192.168.2.4	0x2125	No error (0)	thrtle.com		3.232.123.49	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.336494923 CET	1.1.1.1	192.168.2.4	0x2125	No error (0)	thrtle.com		52.70.29.196	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.345869064 CET	1.1.1.1	192.168.2.4	0x976d	No error (0)	crb.kargo.com		44.217.198.78	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.345869064 CET	1.1.1.1	192.168.2.4	0x976d	No error (0)	crb.kargo.com		3.225.187.193	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.345869064 CET	1.1.1.1	192.168.2.4	0x976d	No error (0)	crb.kargo.com		44.194.252.189	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.345869064 CET	1.1.1.1	192.168.2.4	0x976d	No error (0)	crb.kargo.com		34.224.153.9	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.345869064 CET	1.1.1.1	192.168.2.4	0x976d	No error (0)	crb.kargo.com		18.232.190.152	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.345869064 CET	1.1.1.1	192.168.2.4	0x976d	No error (0)	crb.kargo.com		44.198.25.64	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.529383898 CET	1.1.1.1	192.168.2.4	0xfa4e	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.529383898 CET	1.1.1.1	192.168.2.4	0xfa4e	No error (0)	ny5-prebid.a-mx.net		147.75.198.144	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.529383898 CET	1.1.1.1	192.168.2.4	0xfa4e	No error (0)	ny5-prebid.a-mx.net		147.75.195.77	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.529383898 CET	1.1.1.1	192.168.2.4	0xfa4e	No error (0)	ny5-prebid.a-mx.net		147.75.195.55	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.529442072 CET	1.1.1.1	192.168.2.4	0x4f62	No error (0)	prebid.a-mo.net	dc13-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.45.125.152	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.191.112	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.109.181	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.18.3	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.3.119.146	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.71.247.238	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.186.203	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.532845974 CET	1.1.1.1	192.168.2.4	0x9b9b	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.44.250.119	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.534420967 CET	1.1.1.1	192.168.2.4	0xabae	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.846344948 CET	1.1.1.1	192.168.2.4	0x480a	No error (0)	hb.yahoo.net		104.97.85.167	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.846344948 CET	1.1.1.1	192.168.2.4	0x480a	No error (0)	hb.yahoo.net		104.97.85.189	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.846344948 CET	1.1.1.1	192.168.2.4	0x480a	No error (0)	hb.yahoo.net		104.97.85.173	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.846344948 CET	1.1.1.1	192.168.2.4	0x480a	No error (0)	hb.yahoo.net		104.97.85.174	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.858568907 CET	1.1.1.1	192.168.2.4	0x19bf	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.858568907 CET	1.1.1.1	192.168.2.4	0x19bf	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.861006975 CET	1.1.1.1	192.168.2.4	0x958	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.861006975 CET	1.1.1.1	192.168.2.4	0x958	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.861543894 CET	1.1.1.1	192.168.2.4	0x7edc	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 5, 2023 19:13:50.869867086 CET	1.1.1.1	192.168.2.4	0xd417	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.870476961 CET	1.1.1.1	192.168.2.4	0xadde	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.872066975 CET	1.1.1.1	192.168.2.4	0xe9b9	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.872400999 CET	1.1.1.1	192.168.2.4	0x3a0d	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.872400999 CET	1.1.1.1	192.168.2.4	0x3a0d	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.872400999 CET	1.1.1.1	192.168.2.4	0x3a0d	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	nava.vap.lijit.com		23.92.190.68	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	nava.vap.lijit.com		63.251.114.182	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	nava.vap.lijit.com		23.92.190.74	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	nava.vap.lijit.com		63.251.114.137	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	nava.vap.lijit.com		63.251.114.136	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	nava.vap.lijit.com		23.92.190.69	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990104914 CET	1.1.1.1	192.168.2.4	0x8ab4	No error (0)	nava.vap.lijit.com		72.251.238.254	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990161896 CET	1.1.1.1	192.168.2.4	0x70c8	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990161896 CET	1.1.1.1	192.168.2.4	0x70c8	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:50.990161896 CET	1.1.1.1	192.168.2.4	0x70c8	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:51.231590986 CET	1.1.1.1	192.168.2.4	0x2d0b	No error (0)	a.et.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:51.231920958 CET	1.1.1.1	192.168.2.4	0x7f1a	No error (0)	a.et.nytimes.com	region-selector.nyti.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:51.231920958 CET	1.1.1.1	192.168.2.4	0x7f1a	No error (0)	region-selector.nyti.nytimes.com		44.211.112.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.231920958 CET	1.1.1.1	192.168.2.4	0x7f1a	No error (0)	region-selector.nyti.nytimes.com		52.3.42.214	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.231920958 CET	1.1.1.1	192.168.2.4	0x7f1a	No error (0)	region-selector.nyti.nytimes.com		52.54.49.121	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.323878050 CET	1.1.1.1	192.168.2.4	0x2e7c	No error (0)	vp.nyt.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:51.323878050 CET	1.1.1.1	192.168.2.4	0x2e7c	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.323878050 CET	1.1.1.1	192.168.2.4	0x2e7c	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.323878050 CET	1.1.1.1	192.168.2.4	0x2e7c	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.323878050 CET	1.1.1.1	192.168.2.4	0x2e7c	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:51.324336052 CET	1.1.1.1	192.168.2.4	0x5e96	No error (0)	vp.nyt.com	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:51.328794956 CET	1.1.1.1	192.168.2.4	0xbac9	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:51.330384016 CET	1.1.1.1	192.168.2.4	0xcc1b	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		52.4.98.207	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		52.3.98.252	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		52.3.113.141	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		54.165.74.222	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		54.144.184.12	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		52.45.83.84	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		54.146.33.131	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:52.097549915 CET	1.1.1.1	192.168.2.4	0x190c	No error (0)	sync.ipredictive.com		54.161.205.127	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.006659985 CET	1.1.1.1	192.168.2.4	0x6887	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.006659985 CET	1.1.1.1	192.168.2.4	0x6887	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.006659985 CET	1.1.1.1	192.168.2.4	0x6887	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.007992983 CET	1.1.1.1	192.168.2.4	0xe83	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.007992983 CET	1.1.1.1	192.168.2.4	0xe83	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.172363997 CET	1.1.1.1	192.168.2.4	0x38c7	No error (0)	aax-eu.amazon-adsystem.com		52.94.220.185	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.179584980 CET	1.1.1.1	192.168.2.4	0x4b1b	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.179584980 CET	1.1.1.1	192.168.2.4	0x4b1b	No error (0)	idaas6.cph.liveintent.com		54.86.106.102	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.179584980 CET	1.1.1.1	192.168.2.4	0x4b1b	No error (0)	idaas6.cph.liveintent.com		34.200.1.30	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.179584980 CET	1.1.1.1	192.168.2.4	0x4b1b	No error (0)	idaas6.cph.liveintent.com		3.212.12.109	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.179584980 CET	1.1.1.1	192.168.2.4	0x4b1b	No error (0)	idaas6.cph.liveintent.com		174.129.198.138	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.179584980 CET	1.1.1.1	192.168.2.4	0x4b1b	No error (0)	idaas6.cph.liveintent.com		44.194.60.79	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.179584980 CET	1.1.1.1	192.168.2.4	0x4b1b	No error (0)	idaas6.cph.liveintent.com		52.207.159.210	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.180510998 CET	1.1.1.1	192.168.2.4	0x2146	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.181802034 CET	1.1.1.1	192.168.2.4	0x9b0f	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.182077885 CET	1.1.1.1	192.168.2.4	0x42cc	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.187386990 CET	1.1.1.1	192.168.2.4	0xffeb	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.189064026 CET	1.1.1.1	192.168.2.4	0xd105	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.195539951 CET	1.1.1.1	192.168.2.4	0x1787	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.195539951 CET	1.1.1.1	192.168.2.4	0x1787	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.195539951 CET	1.1.1.1	192.168.2.4	0x1787	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.195812941 CET	1.1.1.1	192.168.2.4	0x5f83	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.195812941 CET	1.1.1.1	192.168.2.4	0x5f83	No error (0)	image4-v2.pubmnet.com	spug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.198605061 CET	1.1.1.1	192.168.2.4	0x4526	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.198605061 CET	1.1.1.1	192.168.2.4	0x4526	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.199539900 CET	1.1.1.1	192.168.2.4	0xa91c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.199539900 CET	1.1.1.1	192.168.2.4	0xa91c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.202594995 CET	1.1.1.1	192.168.2.4	0x3e70	No error (0)	static01.nytimes.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.202594995 CET	1.1.1.1	192.168.2.4	0x3e70	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.202594995 CET	1.1.1.1	192.168.2.4	0x3e70	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.202594995 CET	1.1.1.1	192.168.2.4	0x3e70	No error (0)	nytimes.map.fastly.net		151.101.1.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.202594995 CET	1.1.1.1	192.168.2.4	0x3e70	No error (0)	nytimes.map.fastly.net		151.101.65.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.202594995 CET	1.1.1.1	192.168.2.4	0x3e70	No error (0)	nytimes.map.fastly.net		151.101.193.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.202594995 CET	1.1.1.1	192.168.2.4	0x3e70	No error (0)	nytimes.map.fastly.net		151.101.129.164	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.203458071 CET	1.1.1.1	192.168.2.4	0x71d8	No error (0)	static01.nytimes.com	static.prd.map.nytimes.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.203458071 CET	1.1.1.1	192.168.2.4	0x71d8	No error (0)	static.prd.map.nytimes.com	static.prd.map.nytimes.xovr.nyt.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.203458071 CET	1.1.1.1	192.168.2.4	0x71d8	No error (0)	static.prd.map.nytimes.xovr.nyt.net	nytimes.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.205735922 CET	1.1.1.1	192.168.2.4	0x439d	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.206557035 CET	1.1.1.1	192.168.2.4	0x9b53	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.208184958 CET	1.1.1.1	192.168.2.4	0xa42d	No error (0)	crb.kargo.com		44.217.198.78	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.208184958 CET	1.1.1.1	192.168.2.4	0xa42d	No error (0)	crb.kargo.com		44.194.252.189	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.208184958 CET	1.1.1.1	192.168.2.4	0xa42d	No error (0)	crb.kargo.com		44.198.25.64	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.208184958 CET	1.1.1.1	192.168.2.4	0xa42d	No error (0)	crb.kargo.com		3.225.187.193	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.208184958 CET	1.1.1.1	192.168.2.4	0xa42d	No error (0)	crb.kargo.com		18.232.190.152	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.208184958 CET	1.1.1.1	192.168.2.4	0xa42d	No error (0)	crb.kargo.com		34.224.153.9	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.746637106 CET	1.1.1.1	192.168.2.4	0x1a43	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.752938032 CET	1.1.1.1	192.168.2.4	0xa18f	No error (0)	thrtle.com		3.232.123.49	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.752938032 CET	1.1.1.1	192.168.2.4	0xa18f	No error (0)	thrtle.com		44.218.177.189	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.752938032 CET	1.1.1.1	192.168.2.4	0xa18f	No error (0)	thrtle.com		52.70.29.196	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.752938032 CET	1.1.1.1	192.168.2.4	0xa18f	No error (0)	thrtle.com		54.224.111.178	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.752938032 CET	1.1.1.1	192.168.2.4	0xa18f	No error (0)	thrtle.com		107.23.192.123	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.752938032 CET	1.1.1.1	192.168.2.4	0xa18f	No error (0)	thrtle.com		3.91.115.71	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756320953 CET	1.1.1.1	192.168.2.4	0x15d1	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756679058 CET	1.1.1.1	192.168.2.4	0x35fd	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	nava.vap.lijit.com		23.92.190.74	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	nava.vap.lijit.com		23.92.190.69	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	nava.vap.lijit.com		72.251.238.254	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	nava.vap.lijit.com		63.251.114.182	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	nava.vap.lijit.com		63.251.114.137	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	nava.vap.lijit.com		63.251.114.136	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.756937027 CET	1.1.1.1	192.168.2.4	0xb1cf	No error (0)	nava.vap.lijit.com		23.92.190.68	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:53.757917881 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.757917881 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:53.757917881 CET	1.1.1.1	192.168.2.4	0x3a37	No error (0)	vap.lijit.com	nava.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:13:55.876600981 CET	1.1.1.1	192.168.2.4	0x6ae2	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:55.876600981 CET	1.1.1.1	192.168.2.4	0x6ae2	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:55.876600981 CET	1.1.1.1	192.168.2.4	0x6ae2	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:55.876600981 CET	1.1.1.1	192.168.2.4	0x6ae2	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:55.876600981 CET	1.1.1.1	192.168.2.4	0x6ae2	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:55.876600981 CET	1.1.1.1	192.168.2.4	0x6ae2	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:13:55.876616001 CET	1.1.1.1	192.168.2.4	0x68b5	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 5, 2023 19:14:00.458074093 CET	1.1.1.1	192.168.2.4	0x7de9	No error (0)	pagead-googlehosted.l.google.com		142.251.16.132	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.539529085 CET	1.1.1.1	192.168.2.4	0x7f1a	No error (0)	googleads4.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.539529085 CET	1.1.1.1	192.168.2.4	0x7f1a	No error (0)	googleads4.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.539951086 CET	1.1.1.1	192.168.2.4	0x4d51	No error (0)	s0.2mdn.net		172.253.122.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.539951086 CET	1.1.1.1	192.168.2.4	0x4d51	No error (0)	s0.2mdn.net		172.253.122.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.540978909 CET	1.1.1.1	192.168.2.4	0x5abe	No error (0)	www.googletagservices.com		172.253.63.154	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:02.540978909 CET	1.1.1.1	192.168.2.4	0x5abe	No error (0)	www.googletagservices.com		172.253.63.155	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.490488052 CET	1.1.1.1	192.168.2.4	0xfbce	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:14:03.490509033 CET	1.1.1.1	192.168.2.4	0x14fa	No error (0)	ad.doubleclick.net		142.251.163.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.490509033 CET	1.1.1.1	192.168.2.4	0x14fa	No error (0)	ad.doubleclick.net		142.251.163.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.609803915 CET	1.1.1.1	192.168.2.4	0xe0d9	No error (0)	s0.2mdn.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.609803915 CET	1.1.1.1	192.168.2.4	0xe0d9	No error (0)	s0.2mdn.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.942112923 CET	1.1.1.1	192.168.2.4	0x3b5b	No error (0)	ad.doubleclick.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.942112923 CET	1.1.1.1	192.168.2.4	0x3b5b	No error (0)	ad.doubleclick.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.942365885 CET	1.1.1.1	192.168.2.4	0xdf6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:14:03.989368916 CET	1.1.1.1	192.168.2.4	0x714	No error (0)	ad.doubleclick.net		142.251.111.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.989368916 CET	1.1.1.1	192.168.2.4	0x714	No error (0)	ad.doubleclick.net		142.251.111.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:03.989516020 CET	1.1.1.1	192.168.2.4	0x5934	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 5, 2023 19:14:04.961024046 CET	1.1.1.1	192.168.2.4	0x6f8f	No error (0)	googleads4.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:04.961024046 CET	1.1.1.1	192.168.2.4	0x6f8f	No error (0)	googleads4.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.760572910 CET	1.1.1.1	192.168.2.4	0xb8aa	No error (0)	s0.2mdn.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.760572910 CET	1.1.1.1	192.168.2.4	0xb8aa	No error (0)	s0.2mdn.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		54.175.39.171	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		3.81.188.147	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		107.23.119.165	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		35.175.93.117	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		34.235.189.242	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		34.193.64.48	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		3.228.144.86	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:05.837213993 CET	1.1.1.1	192.168.2.4	0x470d	No error (0)	rtb.adentifi.com		3.228.157.65	A (IP address)	IN (0x0001)	false
Dec 5, 2023 19:14:06.690004110 CET	1.1.1.1	192.168.2.4	0x56c1	No error (0)	173bf110.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 5, 2023 19:14:06.692471981 CET	1.1.1.1	192.168.2.4	0xf4a5	No error (0)	173bf110.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	142.251.16.138	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:12:50 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:12:51 UTC	732	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 6e 6f 6e 63 65 2d 42 44 4a 39 69 66 69 4b 34 43 46 78 61 44 63 76 4c 6a 70 37 64 77 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 63 6c 69 65 6e 74 75 70 64 61 74 65 2d 61 75 73 2f 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Security-Policy: script-src 'report-sample' 'nonce-BDJ9ifiK4CFxaDcvLjp7dw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1Cache-Control
2023-12-05 18:12:51 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 38 32 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 36 37 37 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6182" elapsed_seconds="36771"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-12-05 18:12:51 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-12-05 18:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	172.253.62.84	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:12:50 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:12:50 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-12-05 18:12:51 UTC	1627	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json; charset=utf-8Access-Control-Allow-Origin: https://www.google.comAccess-Control-Allow-Credentials: trueX-Content-Type-Options: nosniffCache-Control: no-cache, no-store, max-age=0, must-revalidatePr
2023-12-05 18:12:51 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-12-05 18:12:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	23.51.54.94	443

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:12:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-05 18:12:55 UTC	436	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 2e 6a 73 6f 6e 3b 20 66 69 6c 65 6e 61 6d 65 2a 3d 55 54 46 2d 38 27 27 63 6f 6e 66 69 67 2e 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 Data Ascii: HTTP/1.1 200 OKApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.jsonContent-Type: application/octet-streamETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"Last-Modi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	23.51.54.94	443

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:12:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-05 18:12:56 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 2e 6a 73 6f 6e 3b 20 66 69 6c 65 6e 61 6d 65 2a 3d 55 54 46 2d 38 27 27 63 6f 6e 66 69 67 2e 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 Data Ascii: HTTP/1.1 200 OKApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.jsonContent-Type: application/octet-streamETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"Last-Modi
2023-12-05 18:12:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	104.17.25.14	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:01 UTC	590	OUT	GET /ajax/libs/twitter-bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://nope.theworkpc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:01 UTC	948	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 30 36 37 32 30 30 30 0d 0a 45 54 61 67 3a 20 57 2f 22 35 65 62 30 34 30 31 30 2d 32 36 30 36 65 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:01 GMTContent-Type: text/css; charset=utf-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000ETag: W/"5eb04010-2606e"Last-Modified: M
2023-12-05 18:13:01 UTC	421	IN	Data Raw: 37 62 66 64 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7bfd/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 Data Ascii: ark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c Data Ascii: otted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c Data Ascii: s{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 Data Ascii: splay:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 Data Ascii: {margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kb
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 Data Ascii: ol-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-aut
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d Data Ascii: x:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;order:3}
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 Data Ascii: 3.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;flex:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	104.17.25.14	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:01 UTC	580	OUT	GET /ajax/libs/font-awesome/5.10.2/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://nope.theworkpc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:01 UTC	945	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 30 36 37 32 30 30 30 0d 0a 45 54 61 67 3a 20 57 2f 22 35 65 62 30 33 65 36 30 2d 64 63 63 35 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:01 GMTContent-Type: text/css; charset=utf-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000ETag: W/"5eb03e60-dcc5"Last-Modified: Mo
2023-12-05 18:13:01 UTC	424	IN	Data Raw: 33 39 63 32 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 30 2e 32 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b Data Ascii: 39c2/! Font Awesome Free 5.10.2 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 36 36 37 65 6d 7d 2e 66 61 2d 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 2e 66 61 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d Data Ascii: 5em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 31 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 Data Ascii: oft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"p
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 39 22 7d 2e 66 61 2d 61 63 71 75 69 73 69 74 69 6f 6e 73 2d 69 6e 63 6f 72 70 6f 72 61 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 66 22 7d 2e 66 61 2d 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 31 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 62 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 7d 2e 66 61 2d 61 64 6f 62 65 3a 62 Data Ascii: content:"\f369"}.fa-acquisitions-incorporated:before{content:"\f6af"}.fa-ad:before{content:"\f641"}.fa-address-book:before{content:"\f2b9"}.fa-address-card:before{content:"\f2bb"}.fa-adjust:before{content:"\f042"}.fa-adn:before{content:"\f170"}.fa-adobe:b
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 2e 66 61 2d 61 6e 67 72 79 63 72 65 61 74 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 65 22 7d 2e 66 61 2d 61 6e 67 75 6c 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 30 22 7d 2e 66 61 2d 61 6e 6b 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 34 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 66 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 2d 69 6f 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 30 22 7d 2e 66 61 2d 61 70 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 31 22 7d 2e 66 61 2d 61 70 70 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 39 22 7d 2e 66 61 Data Ascii: .fa-angrycreative:before{content:"\f36e"}.fa-angular:before{content:"\f420"}.fa-ankh:before{content:"\f644"}.fa-app-store:before{content:"\f36f"}.fa-app-store-ios:before{content:"\f370"}.fa-apper:before{content:"\f371"}.fa-apple:before{content:"\f179"}.fa
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 37 33 22 7d 2e 66 61 2d 61 75 64 69 6f 2d 64 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 65 22 7d 2e 66 61 2d 61 75 74 6f 70 72 65 66 69 78 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 31 63 22 7d 2e 66 61 2d 61 76 69 61 6e 65 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 34 22 7d 2e 66 61 2d 61 76 69 61 74 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 31 22 7d 2e 66 61 2d 61 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 39 22 7d 2e 66 61 2d 61 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 35 22 7d 2e 66 61 2d 62 61 62 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 63 22 7d 2e Data Ascii: 73"}.fa-audio-description:before{content:"\f29e"}.fa-autoprefixer:before{content:"\f41c"}.fa-avianex:before{content:"\f374"}.fa-aviato:before{content:"\f421"}.fa-award:before{content:"\f559"}.fa-aws:before{content:"\f375"}.fa-baby:before{content:"\f77c"}.
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 36 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 61 22 7d 2e 66 61 2d 62 69 6d 6f 62 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 38 22 7d 2e 66 61 2d 62 69 6e 6f 63 75 6c 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 35 22 7d 2e 66 61 2d 62 69 6f 68 61 7a 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 38 30 22 7d 2e 66 61 2d 62 69 72 74 68 64 61 79 2d 63 61 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 64 22 7d 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 31 22 7d 2e 66 61 2d 62 69 74 63 6f Data Ascii: efore{content:"\f206"}.fa-biking:before{content:"\f84a"}.fa-bimobject:before{content:"\f378"}.fa-binoculars:before{content:"\f1e5"}.fa-biohazard:before{content:"\f780"}.fa-birthday-cake:before{content:"\f1fd"}.fa-bitbucket:before{content:"\f171"}.fa-bitco
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 31 22 7d 2e 66 61 2d 62 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 63 22 7d 2e 66 61 2d 62 72 65 61 64 2d 73 6c 69 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 63 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 31 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 39 22 7d 2e 66 61 2d 62 72 6f 61 64 63 61 73 74 2d 74 6f 77 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 39 22 7d 2e 66 61 2d 62 72 6f 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 61 22 7d 2e 66 61 2d 62 72 75 Data Ascii: e{content:"\f2a1"}.fa-brain:before{content:"\f5dc"}.fa-bread-slice:before{content:"\f7ec"}.fa-briefcase:before{content:"\f0b1"}.fa-briefcase-medical:before{content:"\f469"}.fa-broadcast-tower:before{content:"\f519"}.fa-broom:before{content:"\f51a"}.fa-bru
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 66 61 2d 63 61 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 65 22 7d 2e 66 61 2d 63 61 72 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 66 22 7d 2e 66 61 2d 63 61 72 2d 63 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 31 22 7d 2e 66 61 2d 63 61 72 2d 73 69 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 34 22 7d 2e 66 61 2d 63 61 72 65 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 37 22 7d 2e 66 61 2d 63 61 72 65 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 39 22 7d 2e 66 61 2d 63 61 72 65 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: fa-car-alt:before{content:"\f5de"}.fa-car-battery:before{content:"\f5df"}.fa-car-crash:before{content:"\f5e1"}.fa-car-side:before{content:"\f5e4"}.fa-caret-down:before{content:"\f0d7"}.fa-caret-left:before{content:"\f0d9"}.fa-caret-right:before{content:"\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	104.17.25.14	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:01 UTC	557	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://nope.theworkpc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:01 UTC	959	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 30 36 37 32 30 30 30 0d 0a 45 54 61 67 3a 20 57 2f 22 35 65 62 30 33 65 63 34 2d 31 35 38 35 31 22 0d 0a 4c 61 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:01 GMTContent-Type: application/javascript; charset=utf-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000ETag: W/"5eb03ec4-15851"La
2023-12-05 18:13:01 UTC	410	IN	Data Raw: 37 62 66 32 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bf2/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a Data Ascii: ct.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 Data Ascii: h,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;f
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 Data Ascii: ){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 Data Ascii: RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: .length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 Data Ascii: tNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d Data Ascii: nunload",oe)),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElem
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e Data Ascii: ction(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	104.17.25.14	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:01 UTC	581	OUT	GET /ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://nope.theworkpc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:01 UTC	963	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 30 36 37 32 30 30 30 0d 0a 45 54 61 67 3a 20 57 2f 22 35 65 62 30 34 30 31 30 2d 31 33 33 32 62 22 0d 0a 4c 61 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:01 GMTContent-Type: application/javascript; charset=utf-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000ETag: W/"5eb04010-1332b"La
2023-12-05 18:13:01 UTC	406	IN	Data Raw: 37 62 65 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bee/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 70 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 Data Ascii: ],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,function(t,p){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 29 2c 6e 3d 70 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 22 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 3b 72 65 74 75 72 6e 20 69 7c 7c 6f 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 70 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 Data Ascii: ),n=p(t).css("transition-delay"),i=parseFloat(e),o=parseFloat(n);return i\|\|o?(e=e.split(",")[0],n=n.split(",")[0],1e3*(parseFloat(e)+parseFloat(n))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){p(t).trigger(e)},supportsTra
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 72 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 3d Data Ascii: this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){p.removeData(this._element,r),this._element=null},t._getRootElement=function(t){var e=m.getSelectorFromElement(t),n=
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 2c 49 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 2c 41 3d 22 2e 61 63 74 69 76 65 22 2c 4f 3d 22 2e 62 74 6e 22 2c 4e 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 79 2b 45 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 22 66 6f 63 75 73 22 2b 79 2b 45 2b 22 20 62 6c 75 72 22 2b 79 2b 45 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 65 3d 21 30 2c 6e 3d 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 Data Ascii: ,I='input:not([type="hidden"])',A=".active",O=".btn",N={CLICK_DATA_API:"click"+y+E,FOCUS_BLUR_DATA_API:"focus"+y+E+" blur"+y+E},k=function(){function n(t){this._element=t}var t=n.prototype;return t.toggle=function(){var t=!0,e=!0,n=p(this._element).closes
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 66 6e 5b 5f 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 6b 2c 70 2e 66 6e 5b 5f 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 66 6e 5b 5f 5d 3d 62 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 4c 3d 22 63 61 72 6f 75 73 65 6c 22 2c 78 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 50 3d 22 2e 22 2b 78 2c 48 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 6a 3d 70 2e 66 6e 5b 4c 5d 2c 52 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 2c 74 6f 75 63 68 3a 21 30 7d 2c 46 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 Data Ascii: fn[_].Constructor=k,p.fn[_].noConflict=function(){return p.fn[_]=b,k._jQueryInterface};var L="carousel",x="bs.carousel",P="."+x,H=".data-api",j=p.fn[L],R={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0,touch:!0},F={interval:"(number\|boolean)",key
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 28 69 74 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 72 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 Data Ascii: Selector(it),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPointerEvent),this._addEventListeners()}var t=r.prototype;return t.next=function(){this._isSli
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 52 2c 74 29 2c 6d 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 4c 2c 74 2c 46 29 2c 74 7d 2c 74 2e 5f 68 61 6e 64 6c 65 53 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 Data Ascii: ._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},t._getConfig=function(t){return t=l({},R,t),m.typeCheckConfig(L,t,F),t},t._handleSwipe=function(){var t=Math.abs(this.touchD
2023-12-05 18:13:01 UTC	1369	IN	Data Raw: 6f 6e 28 71 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 71 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 24 29 29 3a 28 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 71 2e 54 4f 55 43 48 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 71 2e 54 4f 55 43 48 4d 4f 56 45 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 28 65 3d 74 29 2e 6f 72 69 67 69 6e Data Ascii: on(q.POINTERDOWN,function(t){return e(t)}),p(this._element).on(q.POINTERUP,function(t){return i(t)}),this._element.classList.add($)):(p(this._element).on(q.TOUCHSTART,function(t){return e(t)}),p(this._element).on(q.TOUCHMOVE,function(t){var e;(e=t).origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	104.17.25.14	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:03 UTC	656	OUT	GET /ajax/libs/font-awesome/5.10.2/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://nope.theworkpc.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:03 UTC	968	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 35 34 30 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 30 36 37 32 30 30 30 0d 0a 45 54 61 67 3a 20 22 35 65 62 30 33 65 36 30 2d 31 32 36 39 30 22 0d 0a 4c 61 73 74 2d 4d 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:03 GMTContent-Type: application/octet-stream; charset=utf-8Content-Length: 75408Connection: closeAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000ETag: "5eb03e60-12690"Last-Mo
2023-12-05 18:13:03 UTC	401	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 26 90 00 0d 00 00 00 02 ed 58 00 01 26 34 01 4a 3d f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 96 72 11 08 0a 8a 9c 0c 88 85 63 01 36 02 24 03 9d 7c 0b 9e 00 00 04 20 05 8a 2b 07 dd 34 5b 4b 52 92 80 c2 ee 23 54 54 74 de b6 15 c9 0b 2c a5 34 e1 c6 d0 eb bc a9 4a e1 02 9b 4e 15 ec 98 11 6e 07 08 a4 5c 8d 66 ff ff ff ff 6f 4a 16 32 b6 ff 63 dc d8 b6 3d 22 60 20 18 54 6a 6a 95 a2 50 48 62 4f dd 04 f1 4d f4 92 14 9b 5c 4a 10 63 2c 92 5b 89 41 92 34 ca 1f 54 a7 28 47 18 a4 1f c6 21 25 15 00 15 01 15 01 15 01 e5 94 ba b7 71 4a 33 e8 c5 1f e1 59 2d 66 c3 b0 aa 0b c8 8a 80 8a 80 8a 80 f2 be c5 9c fb e2 24 18 c3 34 ab 11 ec 8a 80 8a 80 8a 80 ea 23 b5 53 3e 8c 30 eb 4f 34 9f 7b 33 b3 Data Ascii: wOF2&X&4J=?FFTM`rc6$\| +4[KR#TTt,4JNn\foJ2c="` TjjPHbOM\Jc,[A4T(G!%qJ3Y-f$4#S>0O4{3
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: cc ee 93 ef 4f be c9 26 92 68 f3 a6 1e 89 91 d0 e8 9f 52 28 95 c6 21 54 0e c9 ae ff 95 53 df df 35 14 00 9c f0 b5 c4 eb a4 c4 70 6a e7 2b 0c a7 92 5c 20 5c c9 e1 12 5d 91 54 a0 93 c0 82 db 76 af 1c 51 0c 01 05 c2 6b 80 37 34 ba 11 30 3c 3f b7 de f2 ff 65 b0 01 1b 83 8d d1 83 0d 5a f7 57 44 6d 03 46 2a 1b b5 21 a2 a4 80 b9 99 0c 03 50 0c b0 c0 28 f0 0e 2c 0c f4 40 fb 4e 3c 3d a3 31 ee f4 f4 c2 b8 30 2e 19 b3 ab a2 1b ae c8 e4 9e 36 66 f8 5f f1 cb e6 ca 16 40 c5 44 76 09 83 7a 6f 62 4d 76 47 8b 94 4a a6 35 92 e8 ab f8 36 4c 5b 20 00 e0 7f 02 04 cc 98 a8 b3 e4 b7 5f b6 bd 80 f6 05 a8 4c 56 81 50 b6 36 4b 2d bb be 18 b6 a0 82 22 cf f3 d0 e3 0f 4e 91 14 29 35 ef 8c bb 3f 33 a0 ff cd 65 24 1f e4 bc 67 54 d3 b4 36 04 85 c3 10 cd ed 9f 1a fd 23 37 42 6f 0c a3 67 Data Ascii: O&hR(!TS5pj+\ \]TvQk740<?eZWDmF*!P(,@N<=10.6f_@DvzobMvGJ56L[ _LVP6K-"N)5?3e$gT6#7Bog
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: ff a7 b4 b9 a4 4d 76 28 1f b3 a8 50 ae 5e 6f 4a 9f 8c a5 72 a5 de 70 b6 7b fb fc 40 95 35 95 28 71 12 a8 69 9c 5d dd bd 81 60 18 9a 40 a2 32 05 52 b9 c6 64 85 20 d0 44 0a 5b 65 b0 bb 79 30 d9 0a aa ba 94 71 ff fe b3 f2 4b ea 1a 5b bb fa 56 b6 42 95 9a 75 ea a5 1a 36 69 de ba 5d 73 85 cf bb 54 51 5d d3 c2 de c5 d3 8b 77 5f 42 22 12 d2 8a aa 9a 7a 06 46 e6 96 36 f6 4e fe 89 29 6b e8 99 98 59 b9 78 78 f3 21 aa a0 a4 a2 a6 a1 a5 6f 62 6e 69 e7 ec c7 6f 97 3a 7b e2 d3 b2 0a cb 5b 3b 3a 77 ef 1b 16 19 97 94 93 57 d6 d0 12 18 1a 99 98 9c 99 9b 5f 5c 51 dd dc de d5 23 18 16 1d 9f 98 9c 5d 5e db d0 dc bb fa fa a9 e3 39 7f d1 33 e7 ce 3f f0 b0 a7 9e fa 67 78 6c ed e0 e6 e1 75 64 6e 25 e5 7f 2c ab d5 96 31 36 f0 b7 37 77 ee 31 78 bd bc b8 11 30 0a fa e6 dc 05 6b f7 Data Ascii: Mv(P^oJrp{@5(qi]`@2Rd D[ey0qK[VBu6i]sTQ]w_B"zF6N)kYxx!obnio:{[;:wW_\Q#]^93?gxludn%,167w1x0k
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: 2a 82 09 40 3c 39 00 59 36 f8 cd ab 7a fe 93 3c 05 4c 9e 6f 0a 3a 8c 96 ac 1d 17 0c 73 46 ec cc 38 38 4e be ae d6 de 8f e3 a5 95 fa 91 97 2a 65 0d c8 16 2f e0 35 7e 01 2e 9a 8b 1b 20 74 c0 e4 a2 ac f6 f5 ce 4d 70 41 2a e0 02 2f 1c 04 7b 41 64 c3 10 f8 66 c8 32 ad 33 7b 7b 84 80 3e 9d bb 73 ea 05 a0 82 33 bb 5d 9f e8 00 58 ab 6f 2d aa b5 00 f0 e9 33 1c d1 4d 37 db 2b 11 e5 7b 01 88 aa d2 33 97 f9 1c c1 f5 23 28 75 d4 59 2f cf 1f 3b d9 89 1c 05 2f d9 6a d3 08 f0 d6 eb 20 45 94 ed 2c 4c 62 06 73 3a 20 61 6e 0a aa 4c 57 9d 66 96 49 52 f0 7e 11 d0 9e e8 f9 b5 8a a4 04 82 de bf 03 7a 2d 00 13 f3 92 70 3a a3 45 61 9f 4d 5e 58 64 19 e4 f1 29 80 18 e5 14 2b 40 d6 77 7d ae 30 ff 80 af 77 1b 33 3c c3 19 e0 9d 6d af 63 cf 80 20 81 b5 30 1a 8d 2e cd 6a 04 2a 29 50 e5 Data Ascii: @<9Y6z<Lo:sF88Ne/5~. tMpA/{Adf23{{>s3]Xo-3M7+{3#(uY/;/j E,Lbs: anLWfIR~z-p:EaM^Xd)+@w}0w3<mc 0.j)P
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: 71 0a 61 73 7a b2 58 f6 e8 8a e7 33 0d 17 75 41 92 d6 7d 3f cc b2 19 74 12 b9 e1 36 f3 e2 d5 59 d8 93 3d 2a f5 2a 45 6d 02 0c 52 2b c0 e2 54 69 33 3b 12 10 d7 fd 7a b5 2b 33 ed 86 b9 a6 22 53 fc c9 3d 56 f5 6d 76 59 cb ec a4 b5 4d 63 ab f9 19 8b ac 80 64 8e ce 97 8a a2 0c 40 54 9b 78 b0 5c e2 65 7c 80 d8 7f 1f 89 9a f9 07 ea fa a0 5e 06 98 33 98 8b 42 78 72 00 bb 1f fc a7 16 9f 9f 30 cf 15 6d 1e 2e ab bb d9 74 49 01 c3 69 b7 2a dd d7 0f 46 2a e3 1a 96 67 c5 be e5 a6 05 68 ae 4e 3b 01 e0 11 00 9d c3 e7 65 7c 58 0d 03 b1 5b ce 65 05 45 40 c4 86 95 d6 2c 17 e7 e7 a8 aa 88 33 a0 20 e2 6d 6c 9c 27 19 0e 6d db 5c e1 ca 30 94 d5 59 f5 69 75 e9 21 f8 a0 95 d2 a7 99 6a 74 57 c9 dd 63 9e af 89 9e 53 ca 2a fc 20 83 20 f6 d4 9c 1f fb c9 e9 15 96 f9 5c cd 35 69 48 e5 Data Ascii: qaszX3uA}?t6Y=*EmR+Ti3;z+3"S=VmvYMcd@Tx\e\|^3Bxr0m.tIiFghN;e\|X[eE@,3 ml'm\0Yiu!jtWcS \5iH
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: 3c ad 7f 32 4f b0 43 19 f6 d6 23 39 91 3d 9a 95 66 df d9 92 7a 2d c3 b0 b6 3d 94 9e 9e 12 1d b5 07 31 35 b4 02 ae 8e 17 fd d9 dc 9f aa 77 a8 1c 6d 5c a6 95 89 93 1a f2 6d fa dc 5b 5c 18 25 4b 7e 95 fb c6 9e 3d 36 95 36 f4 19 b0 49 3c 8f af 4f 2e 3e dd 7b b0 65 97 fb d1 58 6a dc 3d 6f 06 95 95 b8 f9 c0 28 d9 05 03 90 cb a4 ef 89 9f d8 d8 91 82 1b ef 1a d7 ed da 17 6c cf 74 49 8c 30 5d cb 41 c4 35 0e c0 98 72 5d 21 25 6a 60 40 9a c0 16 9a 8f 32 a7 2d cd 45 05 c9 b9 a8 d2 b2 89 58 a1 b4 29 82 48 ba af 31 81 41 ee 08 cf 61 16 27 b4 bb 40 0e 79 b6 b5 0b 9e 91 9b cd 7f e2 b5 74 bf 97 9b 98 84 5c f8 b0 9e 2e b2 eb db 64 84 44 aa 3b a3 bf bc cb 58 2c d5 02 cc 70 58 c7 81 18 37 16 1b a8 6b 9c 31 8d e8 d2 99 1e 0a fb c2 c5 cc 8d 4a 8f 2f 96 af 91 c2 31 a2 d3 01 4a Data Ascii: <2OC#9=fz-=15wm\m[\%K~=66I<O.>{eXj=o(ltI0]A5r]!%j`@2-EX)H1Aa'@yt\.dD;X,pX7k1J/1J
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: 1e e2 f7 24 32 22 57 90 c8 26 be 77 13 93 3a 2b dd 3c 0c 63 f7 9b 68 36 91 21 01 4c 21 d8 85 1a 1b d4 81 43 42 11 28 15 4c 9d 8d 19 a1 a2 47 9a 50 93 20 5d 23 61 e9 ca 56 ad 93 32 34 63 92 61 ea 31 c7 b6 9a 5d dd 58 d1 08 fb 5c c3 3e 66 a6 59 70 b7 f9 db ad 02 ca 1d 3b d7 5c 11 9a f8 01 ff 3f f0 08 0d c2 18 de 20 96 20 66 60 95 58 c9 7c 84 29 cc cc 48 38 fe 4e e6 aa 49 a4 6a 22 71 c7 16 d6 c8 a4 a6 2e c4 a1 01 d7 47 c0 e7 77 4f ab 0e 4f c4 54 8f 9f bd ad 06 62 ec a6 6e 89 64 42 b7 c5 ad 51 1d b2 3b e7 b0 cf e2 49 ec b2 33 f7 30 80 e1 1b d0 04 a8 3b 7d ba 94 73 96 c0 69 dc 22 61 91 98 f4 e9 73 bf 5e 85 62 d2 ea 52 ad a5 14 50 3b 98 57 a7 52 f7 b9 78 8d 66 3c b7 41 95 76 e2 5e ef 53 81 7c 54 c0 f5 1a 4d e9 e5 6c 61 59 98 99 01 66 b8 20 ac a2 58 94 c7 69 f8 Data Ascii: $2"W&w:+<ch6!L!CB(LGP ]#aV24ca1]X\>fYp;\? f`X\|)H8NIj"q.GwOOTbndBQ;I30;}si"as^bRP;WRxf<Av^S\|TMlaYf Xi
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: a6 c0 76 85 09 a6 52 09 6f e3 b2 97 1e 02 22 3e 53 0f 5a e6 19 6e c5 d5 05 81 95 27 a4 27 30 bc cd cf fd 41 ea eb fc 02 e9 ae a6 b2 39 b5 40 42 30 f5 48 54 20 ed 9c c7 95 28 70 7d 4b f8 4f 57 d4 01 8c ba bc 8f 81 b5 b8 78 55 41 5a a7 97 cc 88 75 96 bb 15 43 8c 55 53 7a 8e 88 b1 47 56 74 0c 60 8c cd 9a cf 51 c7 6e 5e 24 6f 66 02 7c 26 9e 0e 2e ea 5a 7c 09 18 7b cb 64 46 0d 62 68 90 2c f5 d7 fc 0d ae c7 0d 48 3d e7 00 ca 0d c2 e3 dc ce cc 4b c1 8f 7b ac e6 18 1d c6 69 1a 1b 55 d2 05 4b 31 e2 3f f1 b2 12 b6 19 ea 6c d5 16 28 75 32 d5 ce e4 99 3c 6d 76 35 fd 43 6d 1d 4e 23 0e 5b 19 07 e9 68 99 d3 15 bc c1 31 b7 86 b7 22 27 83 a1 e1 21 32 ea 4b f3 6c c9 46 43 6c 42 bb aa 28 c5 27 87 e2 58 ee 38 09 e0 de aa aa 4d e3 a7 43 a8 69 ea 73 1a b5 56 7a ea 4a 28 96 b2 Data Ascii: vRo">SZn''0A9@B0HT (p}KOWxUAZuCUSzGVt`Qn^$of\|&.Z\|{dFbh,H=K{iUK1?l(u2<mv5CmN#[h1"'!2KlFClB('X8MCisVzJ(
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: bb 07 e7 b4 6b 4a 8e 29 94 34 76 e6 ce 66 6f 02 e6 be 1d 12 c4 5c 7d 7d 44 16 34 f0 f4 8e 3d 33 ef db 0f 6d 70 25 e3 68 98 b8 b3 fc c5 f9 73 e6 99 13 d4 f6 da 5a 97 d9 41 69 7f cd 4d 05 dc e4 2a 34 25 f6 79 91 42 d1 3e 4d c2 e1 f0 40 65 b7 74 bc f1 42 7c a4 8d 8b f3 46 49 cb 4d 98 73 23 a4 3a 08 3b d8 e1 92 46 5c e6 01 d3 17 93 e2 ec ba d6 31 3a 7c 46 81 ec c7 6c 8c 5a 5d 7e ec 78 ac 41 1f 3e e3 92 a3 cd ea 94 51 5e d5 5d ad 47 b2 54 60 3c b2 fa 02 d6 79 d0 5d a3 ae df bd 36 cc 29 97 77 6a 81 e2 cd 3b 11 37 54 41 0c a0 5c 55 61 f2 6d bb 75 aa 95 29 fe 62 72 75 9a a6 25 71 05 91 70 9a 7a fa 1a 50 7b 0f 51 34 9d a5 94 e9 ca 99 52 b7 6e 35 a5 ea 9b fb f5 8c 55 93 46 9c 7a 45 d5 ed 5e fe c6 e8 7f f6 2b 2e f0 4c ae f5 76 e6 d5 65 ae d7 d7 33 6f 4e 1d 6f 52 b7 Data Ascii: kJ)4vfo\}}D4=3mp%hsZAiM*4%yB>M@etB\|FIMs#:;F\1:\|FlZ]~xA>Q^]GT`<y]6)wj;7TA\Uamu)bru%qpzP{Q4Rn5UFzE^+.Lve3oNoR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	104.17.25.14	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:03 UTC	657	OUT	GET /ajax/libs/font-awesome/5.10.2/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://nope.theworkpc.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.2/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:03 UTC	962	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 34 35 32 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 30 36 37 32 30 30 30 0d 0a 45 54 61 67 3a 20 22 35 65 62 30 33 65 36 30 2d 31 32 33 31 63 22 0d 0a 4c 61 73 74 2d 4d 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:03 GMTContent-Type: application/octet-stream; charset=utf-8Content-Length: 74524Connection: closeAccess-Control-Allow-Origin: *Cache-Control: public, max-age=30672000ETag: "5eb03e60-1231c"Last-Mo
2023-12-05 18:13:03 UTC	407	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 23 1c 00 0d 00 00 00 01 f9 04 00 01 22 c0 01 4a 3d f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 0a 11 08 0a 87 9b 3c 85 d2 7c 01 36 02 24 03 8d 3c 0b 86 60 00 04 20 05 8b 05 07 a8 19 5b 7b 90 71 c3 68 b7 fb 42 50 77 55 14 ff 3f f8 fe 30 33 13 21 6c 1c b0 31 34 ef 28 3a 13 ba 1d 40 a2 a8 5b 23 fb ff ff cf 4f f0 45 8c fb 9d 29 6f ef ba 0a 7d 7e 00 a0 33 81 cb 92 5a a4 d6 52 88 cc 20 85 18 5a 16 82 8a 1b 27 99 6d 8b ed 6e dc 2f 2d f9 33 08 06 c1 20 18 e2 d0 f6 31 50 3b 1c bb d4 12 75 f9 97 d5 20 18 04 83 60 90 e1 78 6a e7 a1 cb c5 1d b6 ab 20 70 bd 45 3b eb 1d 3d c9 90 72 92 4c 5d 24 23 b7 26 1f be 5c 03 87 a5 fb 8e fe 2e 7e bd ba 6b ba 21 90 46 3c 03 b7 06 af 7a 33 45 27 c5 Data Ascii: wOF2#"J=?FFTM`<\|6$<` [{qhBPwU?03!l14(:@[#OE)o}~3ZR Z'mn/-3 1P;u `xj pE;=rL]$#&\.~k!F<z3E'
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: d5 76 85 52 f5 0e ba 58 28 4d 24 0a 52 ad a0 28 82 06 03 96 1e 63 c3 96 e4 55 6c 49 34 c6 56 62 b4 a7 69 1e d3 ba 69 cd e1 f9 b9 f5 fe 2a ff 22 d9 58 13 a3 c6 82 c8 25 91 1b 23 22 25 d2 a4 05 4c c2 c2 02 a3 1a f3 8c ac 33 fa d4 2b 1d a6 77 dc 49 ab 06 d9 ca a9 09 c1 65 e9 6e 8d e5 db f0 4c 00 71 91 ec 7e 1a dd a5 01 8e 7e be 5a e9 57 c4 fc 5b c4 ce 2d 20 ab aa 41 b2 32 2b 0b 44 b6 1b 84 96 41 6c a0 04 cb 7d 91 dc 6f 46 4b 70 b8 54 5e 33 df de 02 0a 1a 04 55 dc ad 96 a5 26 30 7e d9 92 2c cc ac 5c 38 ed ec 7d 97 ff ff 38 68 e7 6e 33 3b 7d e3 38 d2 38 4b 42 c9 b2 28 e7 e7 9b a9 d5 57 8d 6d 4a 72 e8 e9 4d e9 1f 6e fc 21 df ae 10 f9 2c 61 4c 01 5c 10 74 5b 63 f5 63 bf bd 6b 5f 90 10 09 99 21 91 de c7 3c 44 22 d1 23 33 8b 34 6f 54 d1 64 4d ec 90 c4 30 9d 28 1a Data Ascii: vRX(M$R(cUlI4Vbii*"X%#"%L3+wIenLq~~ZW[- A2+DAl}oFKpT^3U&0~,\8}8hn3;}88KB(WmJrMn!,aL\t[cck_!<D"#34oTdM0(
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: ac dc c2 48 79 8a 69 ed 8d 9c 65 d7 98 49 93 59 de ba 7d cc b3 1d b0 98 da 63 e1 f9 e2 09 a7 e8 7a f6 16 af 22 8f 0e d5 9e d0 3f 4b 9b 0c 6c 3d 7b e2 13 ff 09 3f d7 ce 74 b4 b5 34 55 55 94 64 02 2e 87 c5 24 60 80 3a d4 ab 51 ad 44 01 1f af 78 97 ce 6d 14 72 89 c8 4e 9f ca 9d ff b7 ff fc ed 37 7e ed 17 be eb 5d 6f 3b a5 5f 38 0b 33 23 bd 10 c1 82 04 f0 e7 c7 97 8e 86 9a 37 4f 1e dc 28 b9 72 a1 20 27 26 24 c0 c3 c5 c1 fe bf fc 70 8c af 97 bd f4 a9 dd eb dd de ea eb bd dc a6 49 dd 1a d5 62 23 c2 aa a8 ac e0 02 f7 64 ef ee e9 4d 57 1b be dc 94 83 47 25 4d 8a ea 42 f3 7f 5f f7 7a cf ee fe 5d bb 3f ee e4 1d ba 83 57 79 15 07 cf d6 b5 ce 74 b7 70 7b b6 9f cc 78 8f b6 f4 ee f3 d9 6b 3f 69 bc 5d d1 1b d5 1f bc 7c f0 fa 68 ed 67 32 ff d7 c2 ed 3e 7f e5 0f 60 e3 7d Data Ascii: HyieIY}cz"?Kl={?t4UUd.$`:QDxmrN7~]o;_83#7O(r '&$pIb#dMWG%MB_z]?Wytp{xk?i]\|hg2>`}
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: 1e 2d ee 33 76 2e d7 24 38 e3 3e 4f 8d a1 db b7 0e 72 bd e9 f2 dd bc dc 51 a7 07 77 04 c4 06 51 87 18 51 b2 4b 0c 00 1c ee 5d ee 97 d9 e4 4f 52 10 1a ad b4 31 4a 03 56 e5 17 f5 9f 2c d7 7c 16 1e 8a 76 d6 06 9f 47 d4 3a 27 98 97 26 3a 58 d7 e1 ec a4 be af bf bc a5 a8 e5 d6 7b ce 8f 0e 00 c4 98 7d bf 5b 25 0b 40 de 1c 17 8c 98 ea b4 57 e5 e3 0e ae 98 36 b9 a8 ea bc 0b 2c 0f 47 cd 9e c7 2e ae 77 7a ae a1 62 0f 80 43 c9 5e 13 1b f6 a5 01 60 bf e9 d4 6b f0 21 04 3f a0 da 90 58 bc 15 b9 cc f0 e1 74 84 37 1c 97 f3 42 c3 2d 6b 8a d5 cd 8c b4 78 3f 20 88 25 a3 f7 51 03 71 da b6 07 da ce 36 9f ff 7f 57 1c aa fc 3b e6 e1 fb fe 4f 04 dd 7c f7 2d 1f ea 95 53 21 04 a2 14 18 b0 a4 5f 67 da 43 9a 37 b4 39 dc ac 7c 0a a8 b7 97 54 bf 3a d7 d8 a3 8b ce 8d eb ae ce 41 c2 95 Data Ascii: -3v.$8>OrQwQQK]OR1JV,\|vG:'&:X{}[%@W6,G.wzbC^`k!?Xt7B-kx? %Qq6W;O\|-S!_gC79\|T:A
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: da 14 7f 1a 40 e8 a7 22 92 66 fa 07 e2 d3 4b 87 c0 a8 86 e6 f8 20 8d 75 57 1a 84 73 30 e4 af f8 d6 0f 99 22 7d ae 03 55 ae 45 76 42 31 22 79 1b 8c 03 87 3a e4 92 27 b7 ae 42 ba 28 4e 7a 6b 8b 33 a5 59 71 ad 1e a7 d4 b6 e4 a6 5c be b9 16 5c 84 48 6d fd 27 56 47 84 b4 df f7 90 2d 4d 2d 96 79 67 bc f0 b7 09 10 20 c3 f6 31 9c 7e d3 11 12 91 20 2e b9 8e 52 ab 93 19 6e 4e 43 52 54 fc 56 e1 fb a1 e5 1a 6a d2 ea 4b 8a d7 8e 3d 9b bb 2c 44 30 17 5a 3f ab ee ae c4 44 76 59 e8 ee 92 e4 68 b9 92 ab a5 15 99 86 25 46 69 dd aa 38 0e 5b 5d 91 54 03 05 df 82 16 f8 38 5a dc 49 80 08 cd 0a e9 4e 91 25 06 eb a8 84 10 32 9b 79 89 da 0d 93 f3 39 66 04 cd 00 3a c6 d2 5c e3 93 ce b8 ac 17 3b e5 89 52 2f df da 24 a8 59 da 19 5d 1e 41 0a c4 0c 7e 0f f7 8e 49 ab 52 43 45 90 66 59 Data Ascii: @"fK uWs0"}UEvB1"y:'B(Nzk3Yq\\Hm'VG-M-yg 1~ .RnNCRTVjK=,D0Z?DvYh%Fi8[]T8ZIN%2y9f:\;R/$Y]A~IRCEfY
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: f2 46 d6 7b 78 35 0c ad 90 3e 3e af b7 78 35 be 4c 71 eb 0e 5b 0e 2a e2 a7 82 5b 50 2b 65 d0 14 40 0c d7 b8 07 cd 8a 29 0c 8a f1 46 96 10 9f 23 6e db 0e ca e6 96 b6 73 dd bf 4f fa e7 96 a1 7d 13 5b dd 07 a3 57 db e1 3c a2 e0 dc c3 47 66 fb 5e bf 7c 10 4c ac ce 93 b4 95 1c b6 27 2c 0d 6e 9f bb ae 83 a5 16 30 82 85 65 31 33 00 db 4b ce ff 5e b8 21 a3 55 cc e1 85 be 6f c7 d9 de c5 ed cb 50 ad 44 c8 3e 60 65 7c e7 c2 35 51 a1 70 73 62 45 55 1e f3 22 21 80 67 70 80 40 a3 4b 88 43 8b 90 25 21 16 f5 cd 74 5a 6d 37 ac 33 56 42 ec 97 11 bb a1 40 8e 1c de b9 fd 82 5d 9d b1 74 87 31 bc 36 92 71 53 15 32 8b c3 4e 48 ee 71 6a 8b 5a 69 dc 12 4d 49 98 1c 9b a3 59 af 2c e8 6e 29 1d f4 a2 b5 b7 10 6f 7a 5f 40 2c 17 cd 30 cd 4d 59 42 e9 ad f3 5c 47 8f 5f 2e 59 3a 1d 95 d9 Data Ascii: F{x5>>x5Lq[*[P+e@)F#nsO}[W<Gf^\|L',n0e13K^!UoPD>`e\|5QpsbEU"!gp@KC%!tZm73VB@]t16qS2NHqjZiMIY,n)oz_@,0MYB\G_.Y:
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: f8 0d 21 07 c6 32 cf 54 a4 eb ff 70 25 d6 d9 1f f4 c6 4d 44 f7 c7 ee 86 ef 5c 22 11 09 39 b6 89 80 dd 11 9b 2d a6 14 3c 6f e0 73 67 09 10 cb a4 12 a7 df a3 ae 0d 88 c8 53 4d a1 25 84 ec c8 8e 6a 52 56 4d fe b8 ab 24 ad 35 3b a0 36 6f 4b bb 42 fd 36 a1 b7 d1 69 4a 1c 92 09 42 73 9f 5a f0 02 f4 4d 7f b3 2b 11 78 6a 28 30 c2 01 40 1c ac b0 06 92 81 cc 30 c3 16 80 2d 2e 91 d2 32 3c f6 00 df 2a 55 10 c0 32 c3 23 3e 2b 9e fa 5e ae fb 37 5b fa 95 0d b1 ae ff 29 84 70 5a bb f9 f8 12 57 e8 2e 49 26 79 24 74 18 0d 53 e4 be 87 bd 33 d1 22 5d c5 53 6a ea ef 80 5a 9b 62 1d d0 21 bf b6 56 6d 03 40 b6 b4 53 13 61 d5 6b a1 34 13 3d e0 01 8c a7 0d 34 f1 17 41 0e 07 7d 1f 2b 08 25 58 72 5b 10 04 91 9c 04 67 48 87 a0 54 b0 88 34 09 64 cd 4c 29 74 1a ad cd 2a 23 63 5f 95 47 Data Ascii: !2Tp%MD\"9-<osgSM%jRVM$5;6oKB6iJBsZM+xj(0@0-.2<U2#>+^7[)pZW.I&y$tS3"]SjZb!Vm@Sak4=4A}+%Xr[gHT4dL)t#c_G
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: ed 33 d0 10 7c 90 b1 84 bc a6 c1 b2 b0 d6 0f 52 97 42 6d 23 6a 16 76 4b 62 a4 ee 02 b0 71 4f ce 4d ab 02 24 e4 8c 26 31 2a b6 ee 3e ff 87 81 a2 28 99 94 4c 7b 48 80 ef 67 24 79 7e b3 25 6e c8 e2 7c f9 02 06 27 4d cc 53 48 a5 ac 52 f3 b2 8d b1 38 cd 7e 67 b4 77 a0 55 65 94 97 f0 fb 6c 9a 66 59 92 90 62 1e 80 d3 4e 34 d1 b1 b7 a6 69 6a 42 5b a3 18 a5 3a 52 cf a1 a9 18 5d 28 c4 13 86 22 40 b4 54 81 83 a2 a4 db 1f 76 dc 95 2d 70 a5 4b 51 f9 7d 18 34 2d 32 bc c0 a4 8c 80 ab b7 46 aa 24 87 2e 5e 56 68 36 aa 79 b6 f0 17 59 f5 e8 5d 21 cc 7d 1e ad c5 32 b1 7c 04 af 35 72 40 1c 58 cd a0 df b3 de af bd f4 31 60 3f 20 34 cb 24 58 9c 17 7f 4b a1 5c c3 4e 5b 05 13 0e 58 85 95 cc 73 84 6b 53 04 d8 6d ac f3 ab 48 46 74 90 8e 13 27 6d 28 6f 9a c0 88 81 99 33 28 17 ee 99 Data Ascii: 3\|RBm#jvKbqOM$&1*>(L{Hg$y~%n\|'MSHR8~gwUelfYbN4ijB[:R]("@Tv-pKQ}4-2F$.^Vh6yY]!}2\|5r@X1`? 4$XK\N[XskSmHFt'm(o3(
2023-12-05 18:13:03 UTC	1369	IN	Data Raw: 62 8b b7 6e 53 f3 31 60 15 65 76 61 b3 5a 0d fa 29 48 3a a5 a2 f5 ce cd 97 af f5 30 cb e8 fb 31 01 a5 79 91 69 02 94 67 bd 7a 40 b1 3a b3 b8 4d 8e 66 81 da 8f 89 9b 9b f7 d2 b1 c5 85 fd 42 b2 70 4e 1f ac 56 ad 7e 40 47 69 fc c4 7b 27 97 f5 2b 9c d0 51 f3 c2 dd b2 4a 62 64 ed 6e 04 69 c5 4d d7 78 e2 73 42 db a0 01 04 32 03 6c 3c 92 73 09 8d 37 52 c0 cd 40 fb c0 c6 8a 0f 40 6f d1 d0 76 39 c0 95 f9 e5 0a ca 92 41 64 64 84 96 8b 7c 36 5a 7e 7a 80 a5 82 a0 0c 5e 2e 74 78 aa 7f e4 51 a4 41 c3 04 7c 09 f6 61 6c fa eb f9 a6 a0 23 e0 b2 ce 0a 98 91 79 d4 43 80 b6 a2 10 1b 96 fa 6a 6f 4c 28 e1 25 18 78 ee b5 d4 45 23 8f db e3 6d 15 7c c8 97 46 ec c6 83 65 c3 56 2c 26 6c 38 c6 aa b5 d9 eb cf 8b 1d 08 e5 cd d8 b8 4b 93 e4 8d de b0 2c 69 1f bd a7 ae 61 93 69 1f ce 6b Data Ascii: bnS1`evaZ)H:01yigz@:MfBpNV~@Gi{'+QJbdniMxsB2l<s7R@@ov9Add\|6Z~z^.txQA\|al#yCjoL(%xE#m\|FeV,&l8K,iaik

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:07 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gksXOnsw8XCS2Ux&MD=UvcwRhXS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-05 18:13:07 UTC	560	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 30 30 30 31 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 58 41 6f 70 61 7a 56 30 30 58 44 57 6e 4a 43 77 6b 6d 45 57 52 76 36 4a 6b 62 6a 52 41 39 51 53 53 5a 32 2b 65 2f 33 4d 7a 45 6b 3d 5f 32 38 38 30 22 0d 0a 4d 53 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 38 35 62 66 30 66 66 64 2d 35 30 37 32 2d 34 39 34 65 2d Data Ascii: HTTP/1.1 200 OKCache-Control: no-cachePragma: no-cacheContent-Type: application/octet-streamExpires: -1Last-Modified: Mon, 01 Jan 0001 00:00:00 GMTETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880"MS-CorrelationId: 85bf0ffd-5072-494e-
2023-12-05 18:13:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-12-05 18:13:07 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49762	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:23 UTC	686	OUT	GET /live/2023/12/05/world/israel-hamas-war-gaza-news HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:23 UTC	1324	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 39 31 37 31 36 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 62 33 2d 74 72 61 63 65 69 64 3a 20 33 34 37 66 38 39 33 65 66 37 63 33 34 33 63 63 39 65 64 36 36 36 65 63 31 63 34 32 36 30 34 36 0d 0a 78 2d 6e 79 74 2d 64 61 74 61 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 30 39 3a 34 38 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1191716Server: nginxContent-Type: text/html; charset=utf-8x-b3-traceid: 347f893ef7c343cc9ed666ec1c426046x-nyt-data-last-modified: Tue, 05 Dec 2023 18:09:48 GMTLast-Modified: Tue, 05 Dec 2023 18
2023-12-05 18:13:23 UTC	1391	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 75 73 3d 31 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 36 20 44 65 63 20 32 30 32 33 20 30 30 3a 31 33 3a 32 33 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 67 65 6f 3d 55 53 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 36 20 44 65 63 20 32 30 32 33 20 30 30 3a 31 33 3a 32 33 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 44 45 4e 59 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2e 65 74 2e 64 64 3d 69 76 3d 33 35 46 31 42 38 31 32 37 33 37 43 34 39 37 43 41 44 41 32 45 32 39 36 33 Data Ascii: Set-Cookie: nyt-us=1; Expires=Wed, 06 Dec 2023 00:13:23 GMT; Path=/; Domain=.nytimes.comSet-Cookie: nyt-geo=US; Expires=Wed, 06 Dec 2023 00:13:23 GMT; Path=/; Domain=.nytimes.comX-Frame-Options: DENYSet-Cookie: nyt.et.dd=iv=35F1B812737C497CADA2E2963
2023-12-05 18:13:23 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 62 33 2d 74 72 61 63 65 69 64 3d 34 63 61 61 63 61 38 34 65 61 63 34 34 39 35 62 39 65 38 63 65 61 35 39 37 39 62 30 30 32 35 35 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 48 49 54 0d 0a 0d 0a Data Ascii: Set-Cookie: nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; Path=/; Domain=.nytimes.com; SameSite=none; Securex-nyt-edge-cache: HIT
2023-12-05 18:13:23 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 3e 49 73 72 61 65 6c 2d 48 61 6d 61 73 20 57 61 72 20 4e 65 77 73 3a 20 4c 61 74 65 73 74 20 55 70 64 61 74 65 73 20 2d 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e Data Ascii: <!DOCTYPE html><html lang="en" xmlns:og="http://opengraphprotocol.org/schema/"> <head> <meta charset="utf-8" /> <title data-rh="true">Israel-Hamas War News: Latest Updates - The New York Times</title> <meta data-rh="true" name="robots" con
2023-12-05 18:13:23 UTC	16384	IN	Data Raw: 61 67 65 4f 62 6a 65 63 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 30 35 2f 6d 75 6c 74 69 6d 65 64 69 61 2f 30 35 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 68 6f 2d 68 65 61 6c 74 68 2d 66 62 67 77 2f 30 35 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 68 6f 2d 68 65 61 6c 74 68 2d 66 62 67 77 2d 73 75 70 65 72 4a 75 6d 62 6f 2e 6a 70 67 22 2c 22 68 65 69 67 68 74 22 3a 31 33 36 35 2c 22 77 69 64 74 68 22 3a 32 30 34 38 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 30 35 2f 6d 75 6c 74 69 6d 65 64 69 61 2f 30 35 69 73 72 61 65 6c 2d 68 Data Ascii: ageObject","url":"https://static01.nyt.com/images/2023/12/05/multimedia/05israel-hamas-who-health-fbgw/05israel-hamas-who-health-fbgw-superJumbo.jpg","height":1365,"width":2048,"contentUrl":"https://static01.nyt.com/images/2023/12/05/multimedia/05israel-h
2023-12-05 18:13:23 UTC	16384	IN	Data Raw: 20 69 6d 70 72 6f 76 65 6d 65 6e 74 20 6f 6e 20 77 68 61 74 e2 80 99 73 20 68 61 70 70 65 6e 65 64 20 62 65 66 6f 72 65 2e e2 80 9d 42 75 74 20 74 68 65 20 65 76 61 63 75 61 74 69 6f 6e 20 6f 72 64 65 72 73 20 68 61 76 65 20 63 6f 6e 66 75 73 65 64 20 47 61 7a 61 6e 73 2c 20 6d 61 6e 79 20 6f 66 20 77 68 6f 6d 20 63 61 6e 6e 6f 74 20 61 63 63 65 73 73 20 74 68 65 20 6d 61 70 20 6f 72 20 49 73 72 61 65 6c e2 80 99 73 20 70 6f 73 74 65 64 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 62 65 63 61 75 73 65 20 74 68 65 79 20 68 61 76 65 20 6e 6f 20 65 6c 65 63 74 72 69 63 69 74 79 20 61 6e 64 20 70 6f 6f 72 20 74 6f 20 6e 6f 6e 65 78 69 73 74 65 6e 74 20 69 6e 74 65 72 6e 65 74 20 61 6e 64 20 63 65 6c 6c 70 68 6f 6e 65 20 73 65 72 76 69 63 65 2e 20 53 6f 6d 65 20 Data Ascii: improvement on whats happened before.But the evacuation orders have confused Gazans, many of whom cannot access the map or Israels posted instructions because they have no electricity and poor to nonexistent internet and cellphone service. Some
2023-12-05 18:13:23 UTC	16384	IN	Data Raw: 20 74 65 61 63 68 69 6e 67 20 61 6e 64 20 72 65 73 65 61 72 63 68 20 65 66 66 6f 72 74 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 74 6f 6c 65 72 61 74 65 64 3b 20 61 6e 64 20 77 68 65 72 65 20 74 68 65 73 65 20 6c 69 6e 65 73 20 68 61 76 65 20 62 65 65 6e 20 63 72 6f 73 73 65 64 2c 20 77 65 20 68 61 76 65 20 74 61 6b 65 6e 20 61 63 74 69 6f 6e 2e e2 80 9d 54 68 65 20 63 6f 6d 6d 69 74 74 65 65 20 73 69 67 6e 61 6c 65 64 20 66 72 6f 6d 20 74 68 65 20 6f 75 74 73 65 74 20 74 68 61 74 20 74 68 65 20 68 65 61 72 69 6e 67 20 77 6f 75 6c 64 20 62 65 20 63 6f 6d 62 61 74 69 76 65 2c 20 73 65 6e 64 69 6e 67 20 6f 75 74 20 61 20 6e 65 77 73 20 72 65 6c 65 61 73 65 20 75 6e 64 65 72 20 74 68 65 20 68 65 61 64 6c 69 6e 65 2c 20 e2 80 9c 43 6f 6c 6c 65 67 65 20 50 72 Data Ascii: teaching and research efforts will not be tolerated; and where these lines have been crossed, we have taken action.The committee signaled from the outset that the hearing would be combative, sending out a news release under the headline, College Pr
2023-12-05 18:13:23 UTC	16384	IN	Data Raw: 69 70 73 2c 20 61 6e 64 20 6f 66 66 20 74 68 65 20 63 6f 61 73 74 20 6f 66 20 53 6f 6d 61 6c 69 61 2c 20 77 68 65 72 65 20 70 69 72 61 74 65 73 20 68 61 76 65 20 70 72 65 79 65 64 20 6f 6e 20 70 72 69 76 61 74 65 20 76 65 73 73 65 6c 73 20 69 6e 20 74 68 65 20 70 61 73 74 2e e2 80 9c 57 65 20 61 72 65 20 69 6e 20 74 61 6c 6b 73 20 77 69 74 68 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 20 61 62 6f 75 74 20 61 20 6d 61 72 69 74 69 6d 65 20 74 61 73 6b 20 66 6f 72 63 65 20 6f 66 20 73 6f 72 74 73 20 69 6e 76 6f 6c 76 69 6e 67 20 74 68 65 20 73 68 69 70 73 20 66 72 6f 6d 20 70 61 72 74 6e 65 72 20 6e 61 74 69 6f 6e 73 20 61 6c 6f 6e 67 73 69 64 65 20 74 68 65 20 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 69 6e 20 65 6e 73 75 72 69 6e 67 20 73 61 66 65 20 Data Ascii: ips, and off the coast of Somalia, where pirates have preyed on private vessels in the past.We are in talks with other countries about a maritime task force of sorts involving the ships from partner nations alongside the United States in ensuring safe
2023-12-05 18:13:23 UTC	16384	IN	Data Raw: 31 2e 35 72 65 6d 20 61 75 74 6f 20 32 72 65 6d 3b 7d 7d 2e 63 73 73 2d 31 37 69 68 38 64 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 7d 2e 63 73 73 2d 6e 74 32 61 7a 6e 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 61 75 74 6f 20 32 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 7d 2e 63 73 73 2d 6e 74 32 61 7a 6e 20 61 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 65 6e 74 2d 70 72 69 6d 61 72 79 2c 23 31 32 31 32 31 32 29 3b 7d 2e 6e 6f 44 61 72 6b 4d 6f 64 65 49 6e 73 65 74 43 6c 61 73 73 20 2e 63 73 73 2d 6e 74 32 61 7a 6e 20 61 7b 63 6f 6c 6f 72 3a 23 31 32 31 32 31 32 3b 7d 2e 63 73 73 2d 31 36 34 Data Ascii: 1.5rem auto 2rem;}}.css-17ih8de{box-sizing:border-box;vertical-align:top;}.css-nt2azn{margin:10px auto 20px;max-width:100%;line-height:0;}.css-nt2azn a{color:var(--color-content-primary,#121212);}.noDarkModeInsetClass .css-nt2azn a{color:#121212;}.css-164
2023-12-05 18:13:23 UTC	16384	IN	Data Raw: 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 34 30 70 78 29 7b 2e 63 73 73 2d 77 74 6b 64 67 69 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 2e 37 35 72 65 6d 3b 7d 7d 2e 63 73 73 2d 31 69 38 64 75 77 6d 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 30 70 78 29 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 63 73 73 2d 31 69 38 64 75 77 6d 7b 77 69 64 74 68 3a 36 30 30 70 78 3b 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 63 73 73 2d 31 69 38 Data Ascii: tica,arial,sans-serif;font-size:14px;}@media (min-width:740px){.css-wtkdgi{margin-top:3.75rem;}}.css-1i8duwm{width:calc(100% - 40px);max-width:600px;margin-bottom:20px;}@media (min-width:1024px){.css-1i8duwm{width:600px;}}@media (min-width:600px){.css-1i8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:23 UTC	1200	OUT	GET /vi-assets/static-assets/global-f449cfd9976ad673ef2b7ab5098b85be.css HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:23 UTC	1336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 36 35 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 63 50 2d 50 66 4a 50 79 42 42 30 62 78 2d 50 73 32 5a 75 53 57 2d 39 4b 4e 6d 71 30 35 2d 74 78 4e 6c 6e 5a 48 7a 70 51 6c 68 51 37 67 63 53 64 57 51 2d 65 4a 41 53 58 79 31 68 34 42 45 6d 42 63 50 34 5f 4c 65 64 50 49 52 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 36 36 30 32 38 31 32 30 35 34 39 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 5656X-GUploader-UploadID: ABPtcPqcP-PfJPyBB0bx-Ps2ZuSW-9KNmq05-txNlnZHzpQlhQ7gcSdWQ-eJASXy1h4BEmBcP4_LedPIRQx-goog-generation: 1701660281205490x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:23 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:23 UTC	1379	IN	Data Raw: 68 74 6d 6c 2c 0a 62 6f 64 79 2c 0a 64 69 76 2c 0a 73 70 61 6e 2c 0a 61 70 70 6c 65 74 2c 0a 6f 62 6a 65 63 74 2c 0a 69 66 72 61 6d 65 2c 0a 68 31 2c 0a 68 32 2c 0a 68 33 2c 0a 68 34 2c 0a 68 35 2c 0a 68 36 2c 0a 70 2c 0a 62 6c 6f 63 6b 71 75 6f 74 65 2c 0a 70 72 65 2c 0a 61 2c 0a 61 62 62 72 2c 0a 61 63 72 6f 6e 79 6d 2c 0a 61 64 64 72 65 73 73 2c 0a 62 69 67 2c 0a 63 69 74 65 2c 0a 63 6f 64 65 2c 0a 64 65 6c 2c 0a 64 66 6e 2c 0a 65 6d 2c 0a 69 6d 67 2c 0a 69 6e 73 2c 0a 6b 62 64 2c 0a 71 2c 0a 73 2c 0a 73 61 6d 70 2c 0a 73 6d 61 6c 6c 2c 0a 73 74 72 69 6b 65 2c 0a 73 74 72 6f 6e 67 2c 0a 73 75 62 2c 0a 73 75 70 2c 0a 74 74 2c 0a 76 61 72 2c 0a 62 2c 0a 75 2c 0a 69 2c 0a 63 65 6e 74 65 72 2c 0a 64 6c 2c 0a 64 74 2c 0a 64 64 2c 0a 6f 6c 2c 0a 75 6c 2c 0a Data Ascii: html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,
2023-12-05 18:13:23 UTC	1379	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 64 65 65 70 70 69 6e 6b 3b 0a 7d 0a 0a 61 75 64 69 6f 2c 0a 63 61 6e 76 61 73 2c 0a 76 69 64 65 6f 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 20 70 72 65 76 65 6e 74 73 20 6d 6f 64 65 72 6e 20 62 72 6f 77 73 65 72 73 20 66 72 6f 6d 20 64 69 73 70 6c 61 79 69 6e 67 20 27 61 75 64 69 6f 27 20 77 69 74 68 6f 75 74 20 63 6f 6e 74 72 6f 6c 73 20 2a 2f 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 74 61 62 6c 65 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 7d 0a 0a 66 69 67 Data Ascii: ackground-color: deeppink;}audio,canvas,video { display: inline-block;}/* prevents modern browsers from displaying 'audio' without controls */audio:not([controls]) { display: none;}table { width: 100%; border-collapse: collapse;}fig
2023-12-05 18:13:23 UTC	1379	IN	Data Raw: 6e 67 3a 20 36 70 78 20 31 30 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 20 2f 2a 20 72 65 6d 6f 76 65 20 76 65 72 74 69 63 61 6c 20 73 63 72 6f 6c 6c 62 61 72 20 69 6e 20 69 65 36 2d 39 20 2a 2f 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 20 2f 2a 20 72 65 61 64 61 62 69 6c 69 74 79 20 61 6e 64 20 61 6c 69 67 6e 6d 65 6e 74 20 63 72 6f 73 73 2d 62 72 6f 77 73 65 72 20 2a 2f 0a 7d 0a 0a 69 6e 70 75 74 5b 74 79 70 65 3d 27 74 65 78 74 27 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 27 70 61 73 73 77 6f 72 64 27 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 27 65 6d 61 69 6c 27 5d 2c 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 Data Ascii: ng: 6px 10px; overflow: auto; /* remove vertical scrollbar in ie6-9 / vertical-align: top; / readability and alignment cross-browser */}input[type='text'],input[type='password'],input[type='email'],textarea { border-radius: 3px; box-sizing
2023-12-05 18:13:23 UTC	1379	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 70 2c 0a 20 20 68 32 2c 0a 20 20 68 33 20 7b 0a 20 20 20 20 6f 72 70 68 61 6e 73 3a 20 33 3b 0a 20 20 20 20 77 69 64 6f 77 73 3a 20 33 3b 0a 20 20 7d 0a 0a 20 20 68 32 2c 0a 20 20 68 33 20 7b 0a 20 20 20 20 70 61 67 65 2d 62 72 65 61 6b 2d 61 66 74 65 72 3a 20 61 76 6f 69 64 3b 0a 20 20 7d 0a 0a 20 20 61 2c 0a 20 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7d 0a 0a 20 20 61 62 62 72 5b 74 69 74 6c 65 5d 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 20 28 27 20 61 74 74 72 28 74 69 74 6c 65 29 20 27 29 27 3b 0a 20 20 7d 0a 0a 20 20 61 5b 68 72 65 66 5e 3d 27 23 27 5d 3a Data Ascii: portant; } p, h2, h3 { orphans: 3; widows: 3; } h2, h3 { page-break-after: avoid; } a, a:visited { text-decoration: none !important; } abbr[title]::after { content: ' (' attr(title) ')'; } a[href^='#']:
2023-12-05 18:13:23 UTC	140	IN	Data Raw: 3d 27 31 30 27 5d 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 7d 0a 0a 2e 49 4f 53 5b 64 61 74 61 2d 62 61 73 65 2d 66 6f 6e 74 2d 73 69 7a 65 3d 27 31 31 27 5d 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 7d 0a 0a 2e 49 4f 53 5b 64 61 74 61 2d 62 61 73 65 2d 66 6f 6e 74 2d 73 69 7a 65 3d 27 31 32 27 5d 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 33 70 78 3b 0a 7d 0a Data Ascii: ='10'] { font-size: 28px;}.IOS[data-base-font-size='11'] { font-size: 30px;}.IOS[data-base-font-size='12'] { font-size: 33px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49764	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:24 UTC	1138	OUT	GET /ads/parakeet.min.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:24 UTC	1365	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 32 35 31 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 4e 41 77 4a 49 4a 79 6b 76 71 5f 73 32 55 6f 2d 75 45 58 48 64 30 34 30 50 69 33 38 37 76 58 58 32 4d 69 66 7a 5f 42 48 75 69 41 42 56 75 51 4b 62 58 59 52 33 72 57 5f 39 66 6e 36 2d 38 45 4c 38 34 4a 37 6b 50 79 39 4c 45 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 22511X-GUploader-UploadID: ABPtcPoNAwJIJykvq_s2Uo-uEXHd040Pi387vXX2Mifz_BHuiABVuQKbXYR3rW_9fn6-8EL84J7kPy9LEQCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicEx
2023-12-05 18:13:24 UTC	600	IN	Data Raw: 78 2d 6e 79 74 2d 72 6f 75 74 65 3a 20 61 64 73 2d 73 74 61 74 69 63 2d 61 73 73 65 74 73 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 Data Ascii: x-nyt-route: ads-static-assetsContent-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data:
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 61 72 61 6b 65 65 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 22 2e 2f 6c 69 62 2f 41 64 49 6e 74 65 72 65 73 74 73 2e 74 73 22 3a 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 3d 3e 7b 65 76 61 6c 28 27 5c 6e 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 28 7b 20 76 61 6c 75 65 3a 20 74 72 75 65 20 7d 29 29 3b 5c 6e 65 78 70 6f 72 74 73 2e Data Ascii: /! For license information please see parakeet.min.js.LICENSE.txt /(()=>{"use strict";var __webpack_modules__={"./lib/AdInterests.ts":(__unused_webpack_module,exports)=>{eval('\nObject.defineProperty(exports, "__esModule", ({ value: true }));\nexports.
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 79 70 65 2e 72 65 61 64 65 72 73 20 3d 20 5b 5d 3b 5c 6e 5c 6e 5c 6e 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 77 65 62 70 61 63 6b 3a 2f 2f 2f 2e 2f 6c 69 62 2f 41 64 49 6e 74 65 72 65 73 74 73 2e 74 73 3f 27 29 7d 2c 22 2e 2f 6c 69 62 2f 41 64 50 72 6f 70 65 72 74 69 65 73 2e 74 73 22 3a 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 3d 3e 7b 65 76 61 6c 28 27 5c 6e 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 28 7b 20 76 61 6c 75 65 3a 20 74 72 75 65 20 7d 29 29 3b 5c 6e 65 78 70 6f 72 74 73 2e 41 64 50 72 6f 70 65 72 74 69 65 73 20 3d 20 76 6f 69 64 20 30 3b 5c 6e 63 6c 61 73 73 20 41 64 50 72 6f 70 65 72 74 69 Data Ascii: ype.readers = [];\n\n\n//# sourceURL=webpack:///./lib/AdInterests.ts?')},"./lib/AdProperties.ts":(__unused_webpack_module,exports)=>{eval('\nObject.defineProperty(exports, "__esModule", ({ value: true }));\nexports.AdProperties = void 0;\nclass AdProperti
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 43 6f 6e 66 69 67 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 6f 74 68 65 72 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 74 68 69 73 2e 6a 6f 69 6e 65 64 47 72 6f 75 70 73 20 3d 20 7b 7d 3b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 6f 74 68 65 72 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 72 6f 78 69 65 64 41 6e 6f 6e 79 6d 69 7a 69 6e 67 4f 72 69 67 69 6e 20 3d 20 6f 74 68 65 72 2e 70 72 6f 78 69 65 64 41 6e 6f 6e 79 6d 69 7a 69 6e 67 4f 72 69 67 69 6e 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 64 50 72 6f 70 65 72 74 69 65 73 20 3d 20 6e 65 77 20 41 64 50 72 6f 70 65 72 74 69 65 73 5f 31 2e 41 64 50 72 6f 70 65 72 74 69 65 73 28 6f 74 68 65 72 2e 61 64 50 72 6f 70 65 72 74 69 65 73 29 3b 5c 6e 20 Data Ascii: Config {\n constructor(other) {\n this.joinedGroups = {};\n if (other) {\n this.proxiedAnonymizingOrigin = other.proxiedAnonymizingOrigin;\n this.adProperties = new AdProperties_1.AdProperties(other.adProperties);\n
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 69 66 79 28 74 68 69 73 29 3b 5c 6e 20 20 20 20 7d 5c 6e 7d 5c 6e 65 78 70 6f 72 74 73 2e 41 64 52 65 71 75 65 73 74 43 6f 6e 66 69 67 20 3d 20 41 64 52 65 71 75 65 73 74 43 6f 6e 66 69 67 3b 5c 6e 41 64 52 65 71 75 65 73 74 43 6f 6e 66 69 67 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 78 69 65 64 41 6e 6f 6e 79 6d 69 7a 69 6e 67 4f 72 69 67 69 6e 20 3d 20 22 22 3b 5c 6e 41 64 52 65 71 75 65 73 74 43 6f 6e 66 69 67 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 50 72 6f 70 65 72 74 69 65 73 20 3d 20 41 64 50 72 6f 70 65 72 74 69 65 73 5f 31 2e 41 64 50 72 6f 70 65 72 74 69 65 73 2e 70 72 6f 74 6f 74 79 70 65 3b 5c 6e 41 64 52 65 71 75 65 73 74 43 6f 6e 66 69 67 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 62 6c 69 73 68 65 72 43 6f 64 65 20 3d 20 22 22 3b 5c 6e 41 64 52 Data Ascii: ify(this);\n }\n}\nexports.AdRequestConfig = AdRequestConfig;\nAdRequestConfig.prototype.proxiedAnonymizingOrigin = "";\nAdRequestConfig.prototype.adProperties = AdProperties_1.AdProperties.prototype;\nAdRequestConfig.prototype.publisherCode = "";\nAdR
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 3d 3e 7b 65 76 61 6c 28 27 5c 6e 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 28 7b 20 76 61 6c 75 65 3a 20 74 72 75 65 20 7d 29 29 3b 5c 6e 65 78 70 6f 72 74 73 2e 47 65 6f 20 3d 20 76 6f 69 64 20 30 3b 5c 6e 63 6c 61 73 73 20 47 65 6f 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 6f 74 68 65 72 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 6f 74 68 65 72 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6c 61 74 20 3d 20 6f 74 68 65 72 2e 6c 61 74 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6c 6f 6e 20 3d 20 6f 74 68 65 72 2e 6c 6f 6e 3b 5c 6e 20 20 20 20 20 20 20 20 Data Ascii: _module,exports)=>{eval('\nObject.defineProperty(exports, "__esModule", ({ value: true }));\nexports.Geo = void 0;\nclass Geo {\n constructor(other) {\n if (other) {\n this.lat = other.lat;\n this.lon = other.lon;\n
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 20 7b 7d 3b 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 70 61 72 73 65 64 49 6e 74 65 72 65 73 74 73 2e 69 6e 74 65 72 65 73 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 6e 74 65 72 65 73 74 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 21 73 74 6f 72 65 64 49 6e 74 65 72 65 73 74 73 5b 73 65 63 75 72 65 4f 72 69 67 69 6e 5d 5b 22 69 6e 74 65 72 65 73 74 73 22 5d 5b 69 6e 74 65 72 65 73 74 5d 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 74 6f 72 65 64 49 6e 74 65 72 65 73 74 73 5b 73 65 63 75 72 65 4f 72 69 67 69 6e 5d 5b 22 69 6e 74 65 72 65 73 74 73 22 5d 5b 69 6e 74 65 72 65 73 74 5d 20 3d 20 7b 7d 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 73 74 6f 72 65 64 49 6e 74 65 72 65 73 74 73 5b 73 65 63 75 Data Ascii: {};\n }\n parsedInterests.interests.forEach(function (interest) {\n if (!storedInterests[secureOrigin]["interests"][interest]) {\n storedInterests[secureOrigin]["interests"][interest] = {};\n }\n storedInterests[secu
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 28 6e 61 6d 65 73 70 61 63 65 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 74 6f 72 65 64 49 6e 74 65 72 65 73 74 73 5b 6e 61 6d 65 73 70 61 63 65 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 5d 5b 22 69 6e 74 65 72 65 73 74 73 22 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 6e 74 65 72 65 73 74 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 6f 72 65 64 49 6e 74 65 72 65 73 74 73 5b 6e 61 6d 65 73 70 61 63 65 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 5d 5b 22 69 6e 74 65 72 65 73 74 73 22 5d 5b 69 6e 74 65 72 65 73 74 5d 2e 65 78 70 69 72 61 74 69 6f 6e 20 3e 20 63 75 72 72 65 6e 74 54 69 6d 65 49 6e 53 65 63 6f 6e Data Ascii: function (namespacedInterestGroup) {\n Object.keys(storedInterests[namespacedInterestGroup]["interests"]).forEach(function (interest) {\n if (storedInterests[namespacedInterestGroup]["interests"][interest].expiration > currentTimeInSecon
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 3d 3e 7b 65 76 61 6c 28 27 5c 6e 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 28 7b 20 76 61 6c 75 65 3a 20 74 72 75 65 20 7d 29 29 3b 5c 6e 65 78 70 6f 72 74 73 2e 52 65 6d 6f 74 65 6c 79 53 74 6f 72 65 49 6e 74 65 72 65 73 74 47 72 6f 75 70 20 3d 20 65 78 70 6f 72 74 73 2e 52 65 6d 6f 74 65 6c 79 52 65 71 75 65 73 74 41 64 20 3d 20 65 78 70 6f 72 74 73 2e 50 61 72 61 6b 65 65 74 20 3d 20 65 78 70 6f 72 74 73 2e 53 68 6f 75 6c 64 52 65 74 75 72 6e 42 6c 6f 62 20 3d 20 65 78 70 6f 72 74 73 2e 48 61 73 53 74 6f 72 61 67 65 4f 72 69 67 69 6e 20 3d 20 65 78 70 6f 72 74 73 2e 53 Data Ascii: le,exports,__webpack_require__)=>{eval('\nObject.defineProperty(exports, "__esModule", ({ value: true }));\nexports.RemotelyStoreInterestGroup = exports.RemotelyRequestAd = exports.Parakeet = exports.ShouldReturnBlob = exports.HasStorageOrigin = exports.S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49765	13.32.195.219	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:24 UTC	551	OUT	GET /us1/v4/datadog-rum.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:24 UTC	589	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 33 31 35 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 39 20 4f 63 74 20 32 30 32 33 20 30 39 3a 32 34 3a 35 37 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 73 65 72 76 65 72 2d 73 69 64 65 2d 65 6e 63 72 79 70 74 69 6f 6e 3a 20 41 45 53 32 35 36 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 53 65 72 76 65 72 3a 20 41 6d 61 7a 6f 6e 53 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 35 20 47 Data Ascii: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 153156Connection: closeLast-Modified: Mon, 09 Oct 2023 09:24:57 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date: Tue, 05 Dec 2023 18:13:25 G
2023-12-05 18:13:24 UTC	15795	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 73 73 53 69 74 65 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 2c 74 2e 74 72 61 63 6b 53 65 73 73 69 6f 6e 41 63 72 6f 73 73 53 75 62 64 6f 6d 61 69 6e 73 26 26 28 65 2e 64 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 74 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 64 64 5f 73 69 74 65 5f 74 65 73 74 5f 22 2e 63 6f 6e 63 61 74 28 53 74 28 29 29 2c 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 3d 65 2e 70 6f 70 28 29 3b 65 2e 6c 65 6e 67 74 68 26 26 21 78 74 28 74 29 3b 29 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2e 70 6f 70 28 29 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 6e 29 2c 6b 74 28 74 2c 22 74 65 73 74 22 2c 61 74 2c 7b 64 6f 6d 61 69 6e 3a 6e 7d 29 Data Ascii: ssSiteSessionCookie,t.trackSessionAcrossSubdomains&&(e.domain=function(){if(void 0===ot){for(var t="dd_site_test_".concat(St()),e=window.location.hostname.split("."),n=e.pop();e.length&&!xt(t);)n="".concat(e.pop(),".").concat(n),kt(t,"test",at,{domain:n})
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 63 6f 6e 22 5d 2c 74 29 7c 7c 6e 75 6c 6c 21 3d 3d 2f 5c 2e 28 67 69 66 7c 6a 70 67 7c 6a 70 65 67 7c 74 69 66 66 7c 70 6e 67 7c 73 76 67 7c 69 63 6f 29 24 2f 69 2e 65 78 65 63 28 65 29 7d 5d 2c 5b 22 66 6f 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 2f 5c 2e 28 77 6f 66 66 7c 65 6f 74 7c 77 6f 66 66 32 7c 74 74 66 29 24 2f 69 2e 65 78 65 63 28 65 29 7d 5d 2c 5b 22 6d 65 64 69 61 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 70 28 5b 22 61 75 64 69 6f 22 2c 22 76 69 64 65 6f 22 5d 2c 74 29 7c 7c 6e 75 6c 6c 21 3d 3d 2f 5c 2e 28 6d 70 33 7c 6d 70 34 29 24 2f 69 2e 65 78 65 63 28 65 29 7d 5d 5d 3b 66 75 6e 63 74 69 6f 6e 20 7a 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6e 61 6d 65 3b 69 Data Ascii: con"],t)\|\|null!==/\.(gif\|jpg\|jpeg\|tiff\|png\|svg\|ico)$/i.exec(e)}],["font",function(t,e){return null!==/\.(woff\|eot\|woff2\|ttf)$/i.exec(e)}],["media",function(t,e){return p(["audio","video"],t)\|\|null!==/\.(mp3\|mp4)$/i.exec(e)}]];function zn(t){var e=t.name;i
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 6e 64 3a 76 74 28 29 7d 29 7d 29 29 2c 6e 29 3a 76 6f 69 64 20 30 2c 73 3d 74 2e 73 75 62 73 63 72 69 62 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 73 42 75 73 79 3b 41 28 6f 29 2c 41 28 72 29 3b 76 61 72 20 6e 3d 76 74 28 29 3b 65 7c 7c 28 72 3d 43 28 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 7b 68 61 64 41 63 74 69 76 69 74 79 3a 21 30 2c 65 6e 64 3a 6e 7d 29 7d 29 29 2c 56 72 29 29 7d 29 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 21 30 2c 41 28 6f 29 2c 41 28 72 29 2c 41 28 61 29 2c 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 69 7c 7c 28 75 28 29 2c 65 28 74 29 29 7d 72 65 74 75 72 6e 7b 73 74 6f 70 3a 75 7d 7d 28 6f 2c 72 2c 69 29 7d 66 75 Data Ascii: nd:vt()})})),n):void 0,s=t.subscribe((function(t){var e=t.isBusy;A(o),A(r);var n=vt();e\|\|(r=C(l((function(){return c({hadActivity:!0,end:n})})),Vr))})),u=function(){i=!0,A(o),A(r),A(a),s.unsubscribe()};function c(t){i\|\|(u(),e(t))}return{stop:u}}(o,r,i)}fu
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 5d 2c 6f 3d 74 5b 72 2b 31 5d 3b 69 66 28 22 61 63 74 69 76 65 22 3d 3d 3d 69 2e 73 74 61 74 65 29 7b 76 61 72 20 61 3d 69 2e 73 74 61 72 74 3e 3d 30 3f 69 2e 73 74 61 72 74 3a 30 2c 73 3d 6f 3f 6f 2e 73 74 61 72 74 3a 66 74 28 65 29 3b 6e 2e 70 75 73 68 28 7b 73 74 61 72 74 3a 61 2c 64 75 72 61 74 69 6f 6e 3a 73 2d 61 7d 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 5a 69 3d 31 30 2a 73 74 3b 76 61 72 20 4b 69 2c 57 69 3d 31 30 2a 73 74 3b 66 75 6e 63 74 69 6f 6e 20 58 69 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 73 74 6f 70 3a 74 2e 73 75 62 73 63 72 69 62 65 28 30 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 Data Ascii: ],o=t[r+1];if("active"===i.state){var a=i.start>=0?i.start:0,s=o?o.start:ft(e);n.push({start:a,duration:s-a})}}return n}var Zi=10st;var Ki,Wi=10st;function Xi(t,e,n,r){var i,o,a,s={},u=function(t,e){return{stop:t.subscribe(0,(function(t){for(var n=0,r=t
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 3d 73 74 2c 4f 6f 3d 61 74 3b 66 75 6e 63 74 69 6f 6e 20 4e 6f 28 74 2c 65 2c 6e 2c 72 2c 69 29 7b 30 3d 3d 3d 65 2e 74 72 61 6e 73 70 6f 72 74 53 74 61 74 75 73 26 26 30 3d 3d 3d 65 2e 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 2e 73 69 7a 65 28 29 26 26 65 2e 62 61 6e 64 77 69 64 74 68 4d 6f 6e 69 74 6f 72 2e 63 61 6e 48 61 6e 64 6c 65 28 74 29 3f 4d 6f 28 74 2c 65 2c 6e 2c 7b 6f 6e 53 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 6f 28 30 2c 65 2c 6e 2c 72 2c 69 29 7d 2c 6f 6e 46 61 69 6c 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 2e 65 6e 71 75 65 75 65 28 74 29 2c 4c 6f 28 65 2c 6e 2c 72 2c 69 29 7d 7d 29 3a 65 2e 71 75 65 75 65 64 50 61 79 6c 6f 61 64 73 2e 65 6e 71 75 Data Ascii: =st,Oo=at;function No(t,e,n,r,i){0===e.transportStatus&&0===e.queuedPayloads.size()&&e.bandwidthMonitor.canHandle(t)?Mo(t,e,n,{onSuccess:function(){return Uo(0,e,n,r,i)},onFailure:function(){e.queuedPayloads.enqueue(t),Lo(e,n,r,i)}}):e.queuedPayloads.enqu
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 65 64 26 26 43 6e 28 22 6d 6f 75 73 65 2f 74 6f 75 63 68 20 65 76 65 6e 74 20 77 69 74 68 6f 75 74 20 78 2f 79 22 29 7d 76 61 72 20 6f 73 2c 61 73 3d 31 30 30 3b 76 61 72 20 73 73 3d 28 28 6f 73 3d 7b 7d 29 2e 70 6f 69 6e 74 65 72 75 70 3d 6c 61 2e 4d 6f 75 73 65 55 70 2c 6f 73 2e 6d 6f 75 73 65 64 6f 77 6e 3d 6c 61 2e 4d 6f 75 73 65 44 6f 77 6e 2c 6f 73 2e 63 6c 69 63 6b 3d 6c 61 2e 43 6c 69 63 6b 2c 6f 73 2e 63 6f 6e 74 65 78 74 6d 65 6e 75 3d 6c 61 2e 43 6f 6e 74 65 78 74 4d 65 6e 75 2c 6f 73 2e 64 62 6c 63 6c 69 63 6b 3d 6c 61 2e 44 62 6c 43 6c 69 63 6b 2c 6f 73 2e 66 6f 63 75 73 3d 6c 61 2e 46 6f 63 75 73 2c 6f 73 2e 62 6c 75 72 3d 6c 61 2e 42 6c 75 72 2c 6f 73 2e 74 6f 75 63 68 73 74 61 72 74 3d 6c 61 2e 54 6f 75 63 68 53 74 61 72 74 2c 6f 73 2e 74 Data Ascii: ed&&Cn("mouse/touch event without x/y")}var os,as=100;var ss=((os={}).pointerup=la.MouseUp,os.mousedown=la.MouseDown,os.click=la.Click,os.contextmenu=la.ContextMenu,os.dblclick=la.DblClick,os.focus=la.Focus,os.blur=la.Blur,os.touchstart=la.TouchStart,os.t
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 61 29 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 7a 28 74 2c 61 5b 32 2a 65 5d 2c 61 5b 32 2a 65 2b 31 5d 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 61 3d 30 3b 64 6f 7b 61 7c 3d 31 26 74 2c 74 3e 3e 3e 3d 31 2c 61 3c 3c 3d 31 7d 77 68 69 6c 65 28 2d 2d 65 3e 30 29 3b 72 65 74 75 72 6e 20 61 3e 3e 3e 31 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 76 61 72 20 6e 2c 72 2c 73 3d 6e 65 77 20 41 72 72 61 79 28 31 36 29 2c 5f 3d 30 3b 66 6f 72 28 6e 3d 31 3b 6e 3c 3d 69 3b 6e 2b 2b 29 73 5b 6e 5d 3d 5f 3d 5f 2b 61 5b 6e 2d 31 5d 3c 3c 31 3b 66 6f 72 28 72 3d 30 3b 72 3c 3d 65 3b 72 2b 2b 29 7b 76 61 72 20 68 3d 74 5b 32 2a 72 2b 31 5d 3b 30 21 3d 3d 68 26 26 28 74 5b 32 2a 72 5d 3d 41 28 73 5b 68 5d 2b Data Ascii: a)},x=function(t,e,a){z(t,a[2e],a[2e+1])},A=function(t,e){var a=0;do{a\|=1&t,t>>>=1,a<<=1}while(--e>0);return a>>>1},E=function(t,e,a){var n,r,s=new Array(16),_=0;for(n=1;n<=i;n++)s[n]=_=_+a[n-1]<<1;for(r=0;r<=e;r++){var h=t[2r+1];0!==h&&(t[2r]=A(s[h]+
2023-12-05 18:13:24 UTC	16384	IN	Data Raw: 26 26 72 2e 70 65 6e 64 69 6e 67 3e 61 26 26 28 74 2e 61 64 6c 65 72 3d 4d 28 74 2e 61 64 6c 65 72 2c 72 2e 70 65 6e 64 69 6e 67 5f 62 75 66 2c 72 2e 70 65 6e 64 69 6e 67 2d 61 2c 61 29 29 2c 6b 74 28 74 29 2c 61 3d 72 2e 70 65 6e 64 69 6e 67 2c 72 2e 70 65 6e 64 69 6e 67 21 3d 3d 72 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5f 73 69 7a 65 29 29 3b 29 78 74 28 72 2c 32 35 35 26 72 2e 67 7a 68 65 61 64 2e 65 78 74 72 61 5b 72 2e 67 7a 69 6e 64 65 78 5d 29 2c 72 2e 67 7a 69 6e 64 65 78 2b 2b 3b 72 2e 67 7a 68 65 61 64 2e 68 63 72 63 26 26 72 2e 70 65 6e 64 69 6e 67 3e 61 26 26 28 74 2e 61 64 6c 65 72 3d 4d 28 74 2e 61 64 6c 65 72 2c 72 2e 70 65 6e 64 69 6e 67 5f 62 75 66 2c 72 2e 70 65 6e 64 69 6e 67 2d 61 2c 61 29 29 2c 72 2e 67 7a 69 6e 64 65 78 3d 3d 3d 72 2e Data Ascii: &&r.pending>a&&(t.adler=M(t.adler,r.pending_buf,r.pending-a,a)),kt(t),a=r.pending,r.pending!==r.pending_buf_size));)xt(r,255&r.gzhead.extra[r.gzindex]),r.gzindex++;r.gzhead.hcrc&&r.pending>a&&(t.adler=M(t.adler,r.pending_buf,r.pending-a,a)),r.gzindex===r.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49766	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:24 UTC	587	OUT	GET /fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:24 UTC	1225	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 31 35 35 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 4a 72 73 52 45 6e 5f 67 47 68 4a 70 48 77 2d 5f 34 33 73 57 39 35 67 58 2d 34 37 34 62 56 47 51 6c 65 62 59 65 66 32 7a 45 57 58 5a 33 48 55 62 76 52 2d 68 61 74 56 71 35 51 43 75 32 67 6b 6b 5f 32 66 58 2d 6e 5f 6b 62 65 4d 37 38 49 7a 53 47 35 49 78 35 49 47 6e 55 55 79 70 76 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 33 30 20 4f 63 74 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 61556X-GUploader-UploadID: ABPtcPrJrsREn_gGhJpHw-_43sW95gX-474bVGQlebYef2zEWXZ3HUbvR-hatVq5QCu2gkk_2fX-n_kbeM78IzSG5Ix5IGnUUypvCache-Control: public,max-age=31536000,immutableExpires: Wed, 30 Oct 2
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6e 79 74 2d 63 68 65 6c 74 65 6e 68 61 6d 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 69 74 61 6c 69 63 2d 32 30 30 2e 36 34 64 64 33 63 66 63 32 30 39 62 63 37 33 66 62 33 32 37 39 62 61 31 36 64 64 33 64 30 39 66 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 69 74 61 6c 69 63 2d 32 30 30 2e 61 39 65 33 37 32 63 62 34 63 35 30 38 36 65 33 39 32 34 65 32 33 62 39 64 61 64 39 34 66 66 36 2e Data Ascii: @font-face { font-family: 'nyt-cheltenham'; src: url('/fonts/family/cheltenham/cheltenham-italic-200.64dd3cfc209bc73fb3279ba16dd3d09f.woff2') format('woff2'), url('/fonts/family/cheltenham/cheltenham-italic-200.a9e372cb4c5086e3924e23b9dad94ff6.
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 20 73 77 61 70 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6e 79 74 2d 63 68 65 6c 74 65 6e 68 61 6d 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 69 74 61 6c 69 63 2d 35 30 30 2e 63 31 34 39 61 38 35 61 33 64 62 33 63 63 63 33 63 64 39 65 31 65 32 31 37 61 31 65 38 65 34 63 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 69 74 61 6c 69 63 2d 35 30 30 2e 62 30 61 39 66 33 31 65 66 32 61 62 38 62 33 66 30 36 30 32 34 38 34 Data Ascii: swap;}@font-face { font-family: 'nyt-cheltenham'; src: url('/fonts/family/cheltenham/cheltenham-italic-500.c149a85a3db3ccc3cd9e1e217a1e8e4c.woff2') format('woff2'), url('/fonts/family/cheltenham/cheltenham-italic-500.b0a9f31ef2ab8b3f0602484
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6e 79 74 2d 63 68 65 6c 74 65 6e 68 61 6d 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 6e 6f 72 6d 61 6c 2d 32 30 30 2e 34 30 63 63 66 65 32 63 63 36 31 61 37 31 65 36 36 31 37 65 35 36 31 36 32 64 34 39 62 38 39 36 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 6e 6f 72 6d 61 6c 2d 32 30 30 2e 39 32 31 34 63 63 62 62 33 66 65 33 30 Data Ascii: t-display: swap;}@font-face { font-family: 'nyt-cheltenham'; src: url('/fonts/family/cheltenham/cheltenham-normal-200.40ccfe2cc61a71e6617e56162d49b896.woff2') format('woff2'), url('/fonts/family/cheltenham/cheltenham-normal-200.9214ccbb3fe30
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6e 79 74 2d 63 68 65 6c 74 65 6e 68 61 6d 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 6e 6f 72 6d 61 6c 2d 35 30 30 2e 61 32 32 61 65 33 65 64 31 65 37 37 35 63 65 39 30 63 65 64 31 36 66 31 38 32 32 66 34 64 64 63 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 6e 6f 72 6d 61 6c 2d 35 30 30 2e 32 32 39 Data Ascii: 400; font-display: swap;}@font-face { font-family: 'nyt-cheltenham'; src: url('/fonts/family/cheltenham/cheltenham-normal-500.a22ae3ed1e775ce90ced16f1822f4ddc.woff2') format('woff2'), url('/fonts/family/cheltenham/cheltenham-normal-500.229
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 20 38 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6e 79 74 2d 63 68 65 6c 74 65 6e 68 61 6d 2d 63 6f 6e 64 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 63 6f 6e 64 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 63 6f 6e 64 2d 6e 6f 72 6d 61 6c 2d 33 30 30 2e 32 63 62 32 36 64 33 32 39 31 31 30 36 37 30 63 38 34 65 65 39 61 32 64 64 36 62 37 63 36 62 35 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2d Data Ascii: t-weight: 800; font-display: swap;}@font-face { font-family: 'nyt-cheltenham-cond'; src: url('/fonts/family/cheltenham-cond/cheltenham-cond-normal-300.2cb26d329110670c84ee9a2dd6b7c6b5.woff2') format('woff2'), url('/fonts/family/cheltenham-
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 64 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 63 6f 6e 64 2d 6e 6f 72 6d 61 6c 2d 37 30 30 2e 37 65 37 36 39 39 32 66 34 36 34 65 63 36 62 64 37 36 39 37 35 36 34 38 35 37 38 37 34 32 37 37 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6e 79 74 2d 63 68 65 6c 74 65 6e 68 61 6d 2d 73 63 61 70 73 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 73 63 61 70 73 2f 63 68 65 6c 74 Data Ascii: d/cheltenham-cond-normal-700.7e76992f464ec6bd7697564857874277.ttf') format('truetype'); font-style: normal; font-weight: 700; font-display: swap;}@font-face { font-family: 'nyt-cheltenham-scaps'; src: url('/fonts/family/cheltenham-scaps/chelt
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 68 61 6d 2d 73 6d 61 6c 6c 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 73 6d 61 6c 6c 2d 69 74 61 6c 69 63 2d 37 30 30 2e 61 66 32 61 30 63 66 65 39 62 39 32 39 37 63 65 34 61 36 64 30 32 33 31 64 32 65 63 38 35 66 31 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 73 6d 61 6c 6c 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 73 6d 61 6c 6c 2d 69 74 61 6c 69 63 2d 37 30 30 2e 34 37 63 30 61 35 65 66 36 36 30 33 34 32 34 37 37 61 66 64 62 61 66 30 38 33 62 39 33 63 61 66 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 66 6f 6e 74 2d 77 65 Data Ascii: ham-small/cheltenham-small-italic-700.af2a0cfe9b9297ce4a6d0231d2ec85f1.woff') format('woff'), url('/fonts/family/cheltenham-small/cheltenham-small-italic-700.47c0a5ef660342477afdbaf083b93caf.ttf') format('truetype'); font-style: italic; font-we
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 74 65 78 74 2d 63 6f 6e 64 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 74 65 78 74 2d 63 6f 6e 64 2d 6e 6f 72 6d 61 6c 2d 37 30 30 2e 37 65 37 38 66 39 65 37 65 36 63 32 65 30 32 64 38 32 35 39 32 63 34 34 36 36 39 32 39 66 61 33 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 74 65 78 74 2d 63 6f 6e 64 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 74 65 78 74 2d 63 6f 6e 64 2d 6e 6f 72 6d 61 6c 2d 37 30 30 2e 31 32 39 64 38 30 62 61 31 63 65 39 33 32 34 63 32 39 66 36 61 62 35 30 39 33 65 63 36 39 32 38 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 Data Ascii: ily/cheltenham-text-cond/cheltenham-text-cond-normal-700.7e78f9e7e6c2e02d82592c4466929fa3.woff2') format('woff2'), url('/fonts/family/cheltenham-text-cond/cheltenham-text-cond-normal-700.129d80ba1ce9324c29f6ab5093ec6928.woff') format('woff'),
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 65 27 29 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6e 79 74 2d 63 68 65 6c 74 65 6e 68 61 6d 2d 78 63 6f 6e 64 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 66 6f 6e 74 73 2f 66 61 6d 69 6c 79 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 78 63 6f 6e 64 2f 63 68 65 6c 74 65 6e 68 61 6d 2d 78 63 6f 6e 64 2d 6e 6f 72 6d 61 6c 2d 37 30 30 2e 62 66 66 62 38 64 32 32 34 65 32 33 39 31 65 36 32 33 38 64 61 32 66 31 64 36 36 33 64 37 37 63 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 Data Ascii: e'); font-style: normal; font-weight: 400; font-display: swap;}@font-face { font-family: 'nyt-cheltenham-xcond'; src: url('/fonts/family/cheltenham-xcond/cheltenham-xcond-normal-700.bffb8d224e2391e6238da2f1d663d77c.woff2') format('woff2'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:24 UTC	666	OUT	GET /images/2023/11/05/multimedia/e74dd56e303bd96f9f37/e74dd56e303bd96f9f37-articleLarge-v11.jpg HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:24 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 37 30 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 31 37 45 5a 78 32 54 43 7a 44 74 4f 71 5a 33 72 4e 6a 58 30 36 4d 69 4c 4a 35 63 42 4a 66 67 5f 73 63 68 6d 6b 34 56 73 76 54 52 56 43 66 49 4b 6f 42 62 43 48 51 72 70 31 66 62 7a 52 53 34 54 45 4b 63 48 33 41 41 72 57 4b 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 37706X-GUploader-UploadID: ABPtcPp17EZx2TCzDtOqZ3rNjX06MiLJ5cBJfg_schmk4VsvTRVCfIKoBbCHQrp1fbzRS4TEKcH3AArWKACache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicEx
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFddXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c Data Ascii: fr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 Data Ascii: L$hBd@iG&vV8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655679<?
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 8f 68 60 48 dc 38 c7 bf a5 13 51 dd 40 2c ad a3 06 da 35 65 55 08 a4 f2 4e 79 27 fa 51 75 1b d6 5e 1d c0 92 42 91 01 f6 76 85 19 18 ef 9a 1a 89 c6 21 49 19 1c 82 7b 8d c8 06 05 34 9e 16 c9 04 12 c4 c8 f1 23 23 0c 1f 84 76 a1 db 1d 2d 12 f2 3f 14 69 f7 8b 19 97 1f a1 94 a0 fd 28 f3 07 fe b1 fd 47 3e b5 9c bb 79 bd 47 07 e9 dd cf 4e cf 83 0f ee a3 fe 41 59 39 8f 06 1f dd 47 fc 82 81 e0 c3 fb a8 ff 00 90 50 57 15 bc 2c a5 cc 69 f1 1c f6 14 12 fa bc 43 b2 20 1f c0 0d 00 db 5b 95 0a d0 44 c0 76 ca 0a 08 0b 1b 4f 38 23 20 76 05 45 05 8b 04 0a a1 56 08 80 1c 00 10 50 67 c1 8b f7 51 ff 00 20 a0 f3 36 ff 00 a8 4f e1 1f 95 77 39 13 a0 50 28 14 0a 05 02 81 46 34 a3 12 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 Data Ascii: h`H8Q@,5eUNy'Qu^Bv!I{4##v-?i(G>yGNAY9GPW,iC [DvO8# vEVPgQ 6Ow9P(F4@P(@P(@P(@P(
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: e3 c2 03 ac 7a 97 fe 5b d2 75 3b fb 1e 9f d1 a5 bf f1 1c c9 a8 dd 3a 45 1a 71 e1 a8 8c 03 2b c8 e0 ee da 07 c2 3b f3 c5 3b 66 cf d5 cb b6 5b a9 b7 a9 fa 35 ea 8b 9e a2 e9 7b 6d 5a 38 fe ab f5 a3 22 cf 1c 72 12 37 46 ed 19 da c4 03 82 57 23 20 1c 11 9a 96 6a b6 71 67 df 8e de 9e 51 0a a9 f0 d5 b7 b0 da ce 07 97 73 9f 32 6a 36 35 6e 61 12 4a ad 16 17 8c aa 93 d8 50 49 de 4b 56 68 24 3d 87 c5 b7 07 83 e7 ec 68 31 0c 51 aa 99 3e 11 f0 61 4e 77 7e 3f 95 05 f1 e8 f3 5c ce 24 8a 44 58 31 96 24 e3 9f 4f 5a 09 dc 42 60 8e 04 85 da 50 08 63 e1 92 02 9f 43 ef 41 b1 68 4c 77 03 2f 84 0b bb 1b b2 d9 3e 7f 31 41 b3 2c d2 47 6a 1e da 63 20 0d b4 90 7e 2e c7 cc f9 50 6f e8 af 1d cd bc 77 04 93 22 0d ac 31 8e 7d 71 ef c5 06 7c 35 9e 09 22 9e 7f 17 92 c8 76 80 c3 14 1c 4f Data Ascii: z[u;:Eq+;;f[5{mZ8"r7FW# jqgQs2j65naJPIKVh$=h1Q>aNw~?\$DX1$OZB`PcCAhLw/>1A,Gjc ~.Pow"1}q\|5"vO
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: ed ae 72 65 f4 eb e7 6e ee 9f d6 b6 d7 ba 76 9d 74 b6 93 a4 f7 ba ab 69 7f 54 6d be 24 53 23 38 93 79 ed 84 11 b3 1f 6c 7a d6 3d ad b3 96 59 2f e7 4f 59 6f 70 63 2c a2 47 31 13 b5 80 19 c0 f5 e6 a3 6b 6d 21 16 c5 64 bb 39 59 13 72 c4 ad f1 31 3d 81 f4 14 16 d9 68 93 48 88 ea 81 55 a4 c3 ab 70 ca be e7 fb 50 74 2e f4 78 ed a2 79 ed 8c 98 8c e5 a3 cf db 1e c4 50 57 0c 2f 79 73 fa 60 b0 f8 a7 88 f0 73 81 41 25 d3 e3 47 77 84 12 a4 82 58 8c f2 38 ec 3f b5 13 4d cb 7b 59 92 64 99 b0 43 00 a5 a3 c8 38 f7 06 8a ea 50 28 35 a4 90 43 2a 00 84 a2 e1 78 1d 89 a2 32 d0 19 25 73 2b 03 1e 46 17 14 56 c5 02 81 6f 01 bc d4 62 b3 32 3c 51 94 69 24 64 e1 98 02 06 d0 7c b3 9e fe 95 64 db 9f a8 e5 bc 78 f8 7a 5b 4b 68 2d 20 58 2d e2 58 a3 5e ca a3 fa fc eb 63 cb b6 db ba b6 Data Ascii: renvtiTm$S#8ylz=Y/OYopc,G1km!d9Yr1=hHUpPt.xyPW/ys`sA%GwX8?M{YdC8P(5C*x2%s+FVob2<Qi$d\|dxz[Kh- X-X^c
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 4d cc d7 51 1b ab a5 66 de c9 0c 6c 49 2d e5 9e df 7f b0 a9 29 a5 13 25 86 9b a9 6b 30 dc 69 e5 a2 b5 b7 0d a6 59 88 1a 44 70 c8 cf 23 28 e4 16 2f c1 f3 00 0e c2 a9 e9 8d 07 4b 82 ea f3 a7 6d 24 46 9a 0b 1d 29 a6 9e 42 1b 6c 92 c8 c0 6d 3f e6 c1 de 70 68 46 9e 9a f2 0d 3b 4b dd b2 df 4d 9a f6 f2 5b 88 e5 85 da 28 9c b7 e8 62 75 18 21 71 93 8f b3 9c 66 84 6d e9 91 5a d9 eb 31 5b 5f 19 ee 34 df 01 ee 2d 55 ed 98 47 34 ef 29 de 16 3c 1c 00 a0 05 53 e4 c4 8e f9 a1 1a fa 1d 94 77 f6 5d 37 6a d0 c9 89 2e ae 75 0b 90 37 a8 8c 0c e2 22 78 c7 2c 83 1f f4 d0 8e ff 00 45 c7 12 5c 6b a6 18 fc 04 6d 49 c2 40 14 a8 45 45 08 08 1d 86 e2 0b 71 df 8a 95 63 d0 d4 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 02 71 41 44 d2 ed 1d 89 27 b0 1d cd 4c b2 98 cd d6 ce 3e Data Ascii: MQflI-)%k0iYDp#(/Km$F)Blm?phF;KM[(bu!qfmZ1[_4-UG4)<Sw]7j.u7"x,E\kmI@EEqc@P(@P(qAD'L>
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 68 2d e5 b6 7b 98 e5 25 58 94 5c 72 c8 0e e5 dd b8 6d 07 be 71 c1 a6 8d b6 a0 d6 1d b5 5b 6d 3a 7d 36 e2 de 5b 98 5e 64 2d 22 36 d4 5c 67 78 07 e1 39 2a 31 cf 7e fc 53 43 ab 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 01 38 a4 1a f3 ca 15 4f fa 54 cb 39 8c dd 6c e2 e2 cb 97 2e dc 50 85 59 d0 36 0a ee 1c 93 f6 b1 e9 ed 5c 19 e7 73 af a0 e9 fa 7c 78 71 d4 41 16 30 f2 40 be 20 6c 0c be 3b 1f 23 9a c1 d0 95 8a 4b 12 98 a4 dc 40 fb 24 d0 5a d1 23 48 1d 97 25 79 5c f9 1f 51 41 24 6d c5 80 c0 2a 7d 68 35 16 17 8d a4 72 55 a3 6e 7c 23 e4 68 39 77 5e 25 d4 52 24 8c c2 48 d8 b2 00 37 67 27 85 f7 ed 41 9b 82 d6 b0 24 77 2a bb f6 0f 85 78 dc 73 eb ed 41 a5 7a f2 24 08 15 f7 42 7e 30 54 e0 36 7b e7 1c f7 f5 a0 d3 b7 b7 46 8d 9a 59 1e 19 01 21 4f Data Ascii: h-{%X\rmq[m:}6[^d-"6\gx91~SCP(@P(@P(8OT9l.PY6\s\|xqA0@ l;#K@$Z#H%y\QA$m}h5rUn\|#h9w^%R$H7g'A$w*xsAz$B~0T6{FY!O
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: d0 42 ca 0f 7e 51 7c bf d2 83 ab 63 2d b3 42 a9 03 86 55 50 4f a8 cf ad 04 da e6 d9 53 79 9e 2d bd b2 18 1c 9f ba 89 b9 1b 36 76 17 5a 88 cf e9 2d 6d 4f 77 23 12 49 fc 20 fd 91 ee 7e e1 59 4c 5c 9c dd 54 9e 31 7a 2b 68 a1 b7 89 6d e0 55 44 41 85 51 e5 59 bc eb 77 77 56 64 67 19 19 a0 cd 02 81 41 82 70 09 f4 a0 a5 e7 f8 82 c7 86 21 80 6f 6a 0b bc b3 41 52 3b 85 2f 28 00 1f b2 a3 bd 5b a4 9b f9 4e 35 23 2c df 69 bb fb 7b 54 54 e8 14 0a 05 06 30 3d 28 21 27 db 8c 7f d5 9f c0 1a 0b 28 14 0a 05 02 83 ca db fe a2 3f e0 1f 95 77 38 53 a2 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 30 48 02 82 89 1a 46 46 31 c5 2c a1 71 9f 0d 0b 11 9f 61 53 2c a6 33 6d 9c 78 77 e5 af 4a 63 17 52 48 d0 a5 95 c9 98 12 Data Ascii: B~Q\|c-BUPOSy-6vZ-mOw#I ~YL\T1z+hmUDAQYwwVdgAp!ojAR;/([N5#,i{TT0=(!'(?w8S@P(@P(@P(@P(0HFF1,qaS,3mxwJcRH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49768	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:24 UTC	697	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-hamas-early-lead-002-hvwq-threeByTwoLargeAt2X.jpg HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:24 UTC	1080	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 38 37 38 38 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 59 4f 45 42 71 32 69 57 44 2d 4b 39 42 4d 7a 44 4b 57 59 6b 4b 75 54 44 37 73 2d 4d 6c 66 67 35 64 57 44 46 51 51 41 79 32 6c 4b 49 70 57 6e 5a 51 67 79 30 66 34 46 48 63 78 45 72 66 35 42 6f 33 74 42 59 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 2087884X-GUploader-UploadID: ABPtcPqYOEBq2iWD-K9BMzDKWYkKuTD7s-Mlfg5dWDFQQAy2lKIpWnZQgy0f4FHcxErf5Bo3tBYCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpires
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c Data Ascii: fr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 Data Ascii: L$hBd@iG&vV8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655679<?
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 2c 86 2c 80 ec 81 8b d8 a0 51 25 03 ec 80 17 40 01 28 11 b1 41 19 d9 04 a3 b2 09 20 89 90 80 f7 41 21 02 e8 23 12 81 5f e4 81 8b 0e e8 00 41 3d d0 33 74 0b 56 a0 5a fc d6 83 ba c8 44 e5 40 03 19 90 24 12 6f 31 41 7d 03 04 29 23 ab 41 f9 69 86 ed d1 65 d2 8d 94 ea 86 88 0e 59 c6 e2 d8 4e 7b 89 b3 91 34 83 da 75 d5 30 aa b7 54 e7 8c cb 41 0a d3 a3 bd d0 2f 3c 4c 0b a1 a1 d8 8b 65 28 9a a4 62 08 7d d1 34 3b 11 2d 10 eb 94 34 3b 15 67 02 e5 71 35 5b b1 03 52 ee a9 89 aa ce 24 96 c6 c5 30 d4 1d 5e 03 a5 c9 86 83 89 93 67 59 30 ec 89 c4 90 7d 4a cc 13 28 3b 14 45 b2 a6 26 a0 ec 43 89 84 c4 d2 35 c9 12 ae 1a 89 ad 2d b3 90 47 cd 3f c5 74 08 d4 25 b2 81 79 bd 50 22 f9 ba 04 e7 cd ca 00 3b 95 02 9d d0 46 7a a0 44 ee 80 b9 40 d0 2b a0 00 72 06 5a e4 30 64 20 d9 4d Data Ascii: ,,Q%@(A A!#_A=3tVZD@$o1A})#AieYN{4u0TA/<Le(b}4;-4;gq5[R$0^gY0}J(;E&C5-G?t%yP";FzD@+rZ0d M
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 80 10 82 e6 14 1a 28 8b ca cc b5 56 81 01 47 40 e7 06 b6 d6 44 56 5d 74 11 0e 24 59 04 87 fa 75 41 22 6f 67 20 9c da 03 96 65 52 0d 25 04 da 24 fa 6c 8b 83 2c 7e 48 a9 06 d9 40 65 df ba 15 31 64 2a 60 b9 b9 91 a3 74 91 77 23 32 8d f6 40 f2 98 87 5d 64 44 88 5a 08 36 42 00 8b 4a 0c f5 45 d5 19 ea b6 4d 95 ac b3 8a 85 0a 84 c3 56 b4 f6 ed 29 0c 3d 4d d3 6a d4 f1 59 2a 74 1c dd 53 ba 7b 76 86 8a 6c 82 21 62 64 ac 34 b1 c1 a3 fa 28 d9 b8 82 63 d4 8c e2 05 d7 92 8d 07 38 73 73 7b 23 24 04 6a 82 42 4e 64 12 92 2e 50 45 ce 24 77 40 4c eb a2 04 49 36 36 08 62 33 1f 25 49 04 ec 77 50 46 42 a0 de 10 06 f6 40 b4 f6 46 48 98 d1 0d 0e 80 95 11 20 6c b4 20 e2 e1 a3 50 31 60 88 40 9f e1 45 58 cd d0 23 ba 09 02 72 df 45 90 5d 0c 32 24 a1 24 e6 ca 08 bc 00 b4 2b 24 04 49 Data Ascii: (VG@DV]t$YuA"og eR%$l,~H@e1d`tw#2@]dDZ6BJEMV)=MjYtS{vl!bd4(c8ss{#$jBNd.PE$w@LI66b3%IwPFB@FH l P1`@EX#rE]2$$+$I
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 03 5a 1a e8 75 bb 26 1a 81 c4 46 8e 4c 67 51 75 63 33 9a 13 0d 44 d7 27 e2 b2 d6 26 91 ab 74 54 5d 50 e9 9a e8 23 e6 19 40 0a 96 ec 82 39 ac 81 67 40 17 1d 90 22 50 13 dd 02 91 b2 00 91 f4 40 a6 e8 04 04 15 90 c0 27 45 74 05 87 44 d5 c3 6d 37 a8 bd 52 14 6a 1d 1a 87 5b 26 30 d5 7f 85 34 e8 9b 30 55 9c 63 22 9a 45 56 d3 e1 95 dc 3d 10 9d 9a f6 da 19 c1 2b bb e1 d5 67 b3 55 e3 5e ce 01 58 e8 c7 4a 76 6b db ab 4d 3f 0e 54 26 32 de 26 ea 4d 93 a5 5b 28 78 55 e4 80 e6 39 da 59 36 c4 45 5b a9 78 3d e1 c0 86 b7 2c 49 e6 0a 4c d9 bf 8c 34 b3 c2 4c b3 b2 48 3f ca b1 3d bf b3 53 35 68 a3 e1 ac 35 33 19 7f f6 64 e9 77 19 e5 ac 37 d1 f0 f6 1a 99 e6 f2 cb 7a 8e 8b 5e d3 3e f3 4b 78 1e 0b 98 b5 cd b6 c5 b7 4a f1 13 cf 89 d2 e1 5c 3c 33 30 7d fa 65 5a 9e 2c 23 d5 d6 52 Data Ascii: Zu&FLgQuc3D'&tT]P#@9g@"P@'EtDm7Rj[&040Uc"EV=+gU^XJvkM?T&2&M[(xU9Y6E[x=,IL4LH?=S5h53dw7z^>KxJ\<30}eZ,#R
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 6f 03 29 06 72 a3 3a 1c 09 6c 0d ac 8a 1c 23 dd 01 01 d9 86 a8 27 97 72 df 9a 32 59 65 4d 0c b4 68 a2 e1 06 fc 91 51 2d bd ae ad 43 06 ee e5 f9 2a 15 a3 f8 50 41 d3 96 15 08 b4 7c d1 91 28 0d 0d db 74 11 7d b4 46 64 bd b5 44 22 0e bb 2d 28 3d 34 41 5b ae 81 c5 90 26 89 cc 82 d6 8d 82 06 ee a1 64 92 1a a0 46 26 da a3 49 4a 06 48 46 75 07 00 6e 82 b7 30 20 89 60 ca e5 a4 c4 72 8d 90 45 d0 8c 89 84 0a 27 44 44 a3 74 0c 4b b4 45 0c dd 65 2a b2 6c 8a 6c 03 28 96 a3 49 13 25 c8 92 89 27 64 55 7a 97 76 46 41 82 b4 11 68 41 13 1b a0 83 90 56 4c 20 60 f5 6a 0b 58 60 a0 be 4c 23 44 4d bd 28 20 5d d1 04 1c 65 02 92 3d 90 04 f4 46 42 04 82 60 ec 88 96 d0 8a 1a 21 01 60 81 3c da da 20 a1 c4 73 42 a2 b3 ba 22 42 62 c8 24 2f 65 15 6b 44 09 40 c7 54 42 de 4b 90 33 11 64 Data Ascii: o)r:l#'r2YeMhQ-CPA\|(t}FdD"-(=4A[&dF&IJHFun0 `rE'DDtKEell(I%'dUzvFAhAVL `jX`L#DM( ]e=FB`!`< sB"Bb$/ekD@TBK3d
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 8e 1c 66 c8 c6 8e d9 55 c6 63 92 d0 bd 8c a0 d3 66 36 ca e1 3c 86 ca b4 9a ff 00 43 67 ae b2 98 76 b3 43 31 ad 02 5c d6 8b 6b ba a4 4a 27 17 70 45 c1 46 75 17 63 2a ba cd 73 a3 fd 48 9f 68 79 b5 1c 1c 19 b7 5b 4a b8 83 ce c5 65 9f dd 86 f6 75 fe 89 86 94 d7 a9 ad 4f d1 30 ee 6e 6b a4 67 ab 93 ba 62 76 a9 b1 94 da 7f e6 b4 93 be 64 9a da 7e 88 e4 aa 41 d4 1a 7f 7b 55 b1 d0 39 23 8a cc 4f 35 43 f1 b8 36 54 71 2e 96 fd d6 a3 8a cc fb d5 51 88 e2 38 50 d7 64 f4 81 be a0 2c fb 78 47 26 fe 2c 58 8e 2d 84 a4 d0 e6 53 a4 7d dc 66 56 b2 b0 d4 c2 9a 7c 76 9f a8 50 92 6e 65 58 8a cb 13 2b ff 00 e3 d4 c3 03 9d e5 b4 74 d9 26 31 63 b4 ab af e2 2a 4e 73 f9 29 82 3a 36 35 50 9e cc b5 3c 41 50 df 74 fa 6a 38 ed 2c 95 bc 41 5b 4e 68 27 5b a9 dd bf 66 df c5 9e a7 18 c6 3a Data Ascii: fUcf6<CgvC1\kJ'pEFucsHhy[JeuO0nkgbvd~A{U9#O5C6Tq.Q8Pd,xG&,X-S}fV\|vPneX+t&1cNs):65P<APtj8,A[Nh'[f:
2023-12-05 18:13:24 UTC	1379	IN	Data Raw: 80 d4 a0 ad e7 a2 08 3b aa 08 6b aa 09 81 08 26 d0 82 c9 81 08 22 77 44 22 51 43 8c b6 10 44 14 01 37 ec 80 f8 50 13 d1 04 66 15 42 92 50 29 ba 04 5c 81 07 5e c8 9a 09 9d 51 4a 7a a0 8b 90 44 ee 95 65 1e eb 40 00 a0 90 ba 34 60 72 ca 09 47 64 08 ac 83 54 05 9b 64 64 b5 40 a7 ba 09 47 64 68 20 21 19 19 50 0e f4 a0 08 84 11 25 2a 22 2c b4 0c a5 00 81 94 08 a0 8c 9d 10 22 0a 02 3b 20 23 b2 09 20 81 40 11 0b 40 59 05 f6 5a 04 a0 73 dd 64 13 08 26 1c 80 ec 82 41 03 36 40 40 d1 65 a2 20 14 12 81 08 61 40 88 43 04 74 45 22 db a0 5a 22 0d 56 80 2e 50 38 ec 81 10 81 a0 51 28 c8 21 02 36 40 14 11 98 40 f5 41 07 75 40 c0 40 65 28 00 80 23 74 09 00 44 5d 00 b4 1a 08 91 08 0f 74 0d 00 80 40 20 10 45 04 90 29 e8 81 cf 74 0c 09 40 03 08 1d d6 42 36 40 20 46 e1 68 10 81 Data Ascii: ;k&"wD"QCD7PfBP)\^QJzDe@4`rGdTdd@Gdh !P%*","; # @@YZsd&A6@@e a@CtE"Z"V.P8Q(!6@@Au@@e(#tD]t@ E)t@B6@ Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49773	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	431	OUT	GET /images/2023/11/05/multimedia/e74dd56e303bd96f9f37/e74dd56e303bd96f9f37-articleLarge-v11.jpg HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 37 30 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 31 37 45 5a 78 32 54 43 7a 44 74 4f 71 5a 33 72 4e 6a 58 30 36 4d 69 4c 4a 35 63 42 4a 66 67 5f 73 63 68 6d 6b 34 56 73 76 54 52 56 43 66 49 4b 6f 42 62 43 48 51 72 70 31 66 62 7a 52 53 34 54 45 4b 63 48 33 41 41 72 57 4b 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 37706X-GUploader-UploadID: ABPtcPp17EZx2TCzDtOqZ3rNjX06MiLJ5cBJfg_schmk4VsvTRVCfIKoBbCHQrp1fbzRS4TEKcH3AArWKACache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicEx
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFddXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c Data Ascii: fr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 Data Ascii: L$hBd@iG&vV8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655679<?
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 8f 68 60 48 dc 38 c7 bf a5 13 51 dd 40 2c ad a3 06 da 35 65 55 08 a4 f2 4e 79 27 fa 51 75 1b d6 5e 1d c0 92 42 91 01 f6 76 85 19 18 ef 9a 1a 89 c6 21 49 19 1c 82 7b 8d c8 06 05 34 9e 16 c9 04 12 c4 c8 f1 23 23 0c 1f 84 76 a1 db 1d 2d 12 f2 3f 14 69 f7 8b 19 97 1f a1 94 a0 fd 28 f3 07 fe b1 fd 47 3e b5 9c bb 79 bd 47 07 e9 dd cf 4e cf 83 0f ee a3 fe 41 59 39 8f 06 1f dd 47 fc 82 81 e0 c3 fb a8 ff 00 90 50 57 15 bc 2c a5 cc 69 f1 1c f6 14 12 fa bc 43 b2 20 1f c0 0d 00 db 5b 95 0a d0 44 c0 76 ca 0a 08 0b 1b 4f 38 23 20 76 05 45 05 8b 04 0a a1 56 08 80 1c 00 10 50 67 c1 8b f7 51 ff 00 20 a0 f3 36 ff 00 a8 4f e1 1f 95 77 39 13 a0 50 28 14 0a 05 02 81 46 34 a3 12 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 Data Ascii: h`H8Q@,5eUNy'Qu^Bv!I{4##v-?i(G>yGNAY9GPW,iC [DvO8# vEVPgQ 6Ow9P(F4@P(@P(@P(@P(
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: e3 c2 03 ac 7a 97 fe 5b d2 75 3b fb 1e 9f d1 a5 bf f1 1c c9 a8 dd 3a 45 1a 71 e1 a8 8c 03 2b c8 e0 ee da 07 c2 3b f3 c5 3b 66 cf d5 cb b6 5b a9 b7 a9 fa 35 ea 8b 9e a2 e9 7b 6d 5a 38 fe ab f5 a3 22 cf 1c 72 12 37 46 ed 19 da c4 03 82 57 23 20 1c 11 9a 96 6a b6 71 67 df 8e de 9e 51 0a a9 f0 d5 b7 b0 da ce 07 97 73 9f 32 6a 36 35 6e 61 12 4a ad 16 17 8c aa 93 d8 50 49 de 4b 56 68 24 3d 87 c5 b7 07 83 e7 ec 68 31 0c 51 aa 99 3e 11 f0 61 4e 77 7e 3f 95 05 f1 e8 f3 5c ce 24 8a 44 58 31 96 24 e3 9f 4f 5a 09 dc 42 60 8e 04 85 da 50 08 63 e1 92 02 9f 43 ef 41 b1 68 4c 77 03 2f 84 0b bb 1b b2 d9 3e 7f 31 41 b3 2c d2 47 6a 1e da 63 20 0d b4 90 7e 2e c7 cc f9 50 6f e8 af 1d cd bc 77 04 93 22 0d ac 31 8e 7d 71 ef c5 06 7c 35 9e 09 22 9e 7f 17 92 c8 76 80 c3 14 1c 4f Data Ascii: z[u;:Eq+;;f[5{mZ8"r7FW# jqgQs2j65naJPIKVh$=h1Q>aNw~?\$DX1$OZB`PcCAhLw/>1A,Gjc ~.Pow"1}q\|5"vO
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: ed ae 72 65 f4 eb e7 6e ee 9f d6 b6 d7 ba 76 9d 74 b6 93 a4 f7 ba ab 69 7f 54 6d be 24 53 23 38 93 79 ed 84 11 b3 1f 6c 7a d6 3d ad b3 96 59 2f e7 4f 59 6f 70 63 2c a2 47 31 13 b5 80 19 c0 f5 e6 a3 6b 6d 21 16 c5 64 bb 39 59 13 72 c4 ad f1 31 3d 81 f4 14 16 d9 68 93 48 88 ea 81 55 a4 c3 ab 70 ca be e7 fb 50 74 2e f4 78 ed a2 79 ed 8c 98 8c e5 a3 cf db 1e c4 50 57 0c 2f 79 73 fa 60 b0 f8 a7 88 f0 73 81 41 25 d3 e3 47 77 84 12 a4 82 58 8c f2 38 ec 3f b5 13 4d cb 7b 59 92 64 99 b0 43 00 a5 a3 c8 38 f7 06 8a ea 50 28 35 a4 90 43 2a 00 84 a2 e1 78 1d 89 a2 32 d0 19 25 73 2b 03 1e 46 17 14 56 c5 02 81 6f 01 bc d4 62 b3 32 3c 51 94 69 24 64 e1 98 02 06 d0 7c b3 9e fe 95 64 db 9f a8 e5 bc 78 f8 7a 5b 4b 68 2d 20 58 2d e2 58 a3 5e ca a3 fa fc eb 63 cb b6 db ba b6 Data Ascii: renvtiTm$S#8ylz=Y/OYopc,G1km!d9Yr1=hHUpPt.xyPW/ys`sA%GwX8?M{YdC8P(5C*x2%s+FVob2<Qi$d\|dxz[Kh- X-X^c
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 4d cc d7 51 1b ab a5 66 de c9 0c 6c 49 2d e5 9e df 7f b0 a9 29 a5 13 25 86 9b a9 6b 30 dc 69 e5 a2 b5 b7 0d a6 59 88 1a 44 70 c8 cf 23 28 e4 16 2f c1 f3 00 0e c2 a9 e9 8d 07 4b 82 ea f3 a7 6d 24 46 9a 0b 1d 29 a6 9e 42 1b 6c 92 c8 c0 6d 3f e6 c1 de 70 68 46 9e 9a f2 0d 3b 4b dd b2 df 4d 9a f6 f2 5b 88 e5 85 da 28 9c b7 e8 62 75 18 21 71 93 8f b3 9c 66 84 6d e9 91 5a d9 eb 31 5b 5f 19 ee 34 df 01 ee 2d 55 ed 98 47 34 ef 29 de 16 3c 1c 00 a0 05 53 e4 c4 8e f9 a1 1a fa 1d 94 77 f6 5d 37 6a d0 c9 89 2e ae 75 0b 90 37 a8 8c 0c e2 22 78 c7 2c 83 1f f4 d0 8e ff 00 45 c7 12 5c 6b a6 18 fc 04 6d 49 c2 40 14 a8 45 45 08 08 1d 86 e2 0b 71 df 8a 95 63 d0 d4 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 02 71 41 44 d2 ed 1d 89 27 b0 1d cd 4c b2 98 cd d6 ce 3e Data Ascii: MQflI-)%k0iYDp#(/Km$F)Blm?phF;KM[(bu!qfmZ1[_4-UG4)<Sw]7j.u7"x,E\kmI@EEqc@P(@P(qAD'L>
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 68 2d e5 b6 7b 98 e5 25 58 94 5c 72 c8 0e e5 dd b8 6d 07 be 71 c1 a6 8d b6 a0 d6 1d b5 5b 6d 3a 7d 36 e2 de 5b 98 5e 64 2d 22 36 d4 5c 67 78 07 e1 39 2a 31 cf 7e fc 53 43 ab 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 01 38 a4 1a f3 ca 15 4f fa 54 cb 39 8c dd 6c e2 e2 cb 97 2e dc 50 85 59 d0 36 0a ee 1c 93 f6 b1 e9 ed 5c 19 e7 73 af a0 e9 fa 7c 78 71 d4 41 16 30 f2 40 be 20 6c 0c be 3b 1f 23 9a c1 d0 95 8a 4b 12 98 a4 dc 40 fb 24 d0 5a d1 23 48 1d 97 25 79 5c f9 1f 51 41 24 6d c5 80 c0 2a 7d 68 35 16 17 8d a4 72 55 a3 6e 7c 23 e4 68 39 77 5e 25 d4 52 24 8c c2 48 d8 b2 00 37 67 27 85 f7 ed 41 9b 82 d6 b0 24 77 2a bb f6 0f 85 78 dc 73 eb ed 41 a5 7a f2 24 08 15 f7 42 7e 30 54 e0 36 7b e7 1c f7 f5 a0 d3 b7 b7 46 8d 9a 59 1e 19 01 21 4f Data Ascii: h-{%X\rmq[m:}6[^d-"6\gx91~SCP(@P(@P(8OT9l.PY6\s\|xqA0@ l;#K@$Z#H%y\QA$m}h5rUn\|#h9w^%R$H7g'A$w*xsAz$B~0T6{FY!O
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: d0 42 ca 0f 7e 51 7c bf d2 83 ab 63 2d b3 42 a9 03 86 55 50 4f a8 cf ad 04 da e6 d9 53 79 9e 2d bd b2 18 1c 9f ba 89 b9 1b 36 76 17 5a 88 cf e9 2d 6d 4f 77 23 12 49 fc 20 fd 91 ee 7e e1 59 4c 5c 9c dd 54 9e 31 7a 2b 68 a1 b7 89 6d e0 55 44 41 85 51 e5 59 bc eb 77 77 56 64 67 19 19 a0 cd 02 81 41 82 70 09 f4 a0 a5 e7 f8 82 c7 86 21 80 6f 6a 0b bc b3 41 52 3b 85 2f 28 00 1f b2 a3 bd 5b a4 9b f9 4e 35 23 2c df 69 bb fb 7b 54 54 e8 14 0a 05 06 30 3d 28 21 27 db 8c 7f d5 9f c0 1a 0b 28 14 0a 05 02 83 ca db fe a2 3f e0 1f 95 77 38 53 a2 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 14 0a 05 02 81 40 a0 50 28 30 48 02 82 89 1a 46 46 31 c5 2c a1 71 9f 0d 0b 11 9f 61 53 2c a6 33 6d 9c 78 77 e5 af 4a 63 17 52 48 d0 a5 95 c9 98 12 Data Ascii: B~Q\|c-BUPOSy-6vZ-mOw#I ~YL\T1z+hmUDAQYwwVdgAp!ojAR;/([N5#,i{TT0=(!'(?w8S@P(@P(@P(@P(0HFF1,qaS,3mxwJcRH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49776	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	462	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-early-lead-002-hvwq/05israel-hamas-early-lead-002-hvwq-threeByTwoLargeAt2X.jpg HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1080	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 38 37 38 38 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 59 4f 45 42 71 32 69 57 44 2d 4b 39 42 4d 7a 44 4b 57 59 6b 4b 75 54 44 37 73 2d 4d 6c 66 67 35 64 57 44 46 51 51 41 79 32 6c 4b 49 70 57 6e 5a 51 67 79 30 66 34 46 48 63 78 45 72 66 35 42 6f 33 74 42 59 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 2087884X-GUploader-UploadID: ABPtcPqYOEBq2iWD-K9BMzDKWYkKuTD7s-Mlfg5dWDFQQAy2lKIpWnZQgy0f4FHcxErf5Bo3tBYCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpires
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c Data Ascii: fr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi*C\
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 Data Ascii: L$hBd@iG&vV8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655679<?
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 2c 86 2c 80 ec 81 8b d8 a0 51 25 03 ec 80 17 40 01 28 11 b1 41 19 d9 04 a3 b2 09 20 89 90 80 f7 41 21 02 e8 23 12 81 5f e4 81 8b 0e e8 00 41 3d d0 33 74 0b 56 a0 5a fc d6 83 ba c8 44 e5 40 03 19 90 24 12 6f 31 41 7d 03 04 29 23 ab 41 f9 69 86 ed d1 65 d2 8d 94 ea 86 88 0e 59 c6 e2 d8 4e 7b 89 b3 91 34 83 da 75 d5 30 aa b7 54 e7 8c cb 41 0a d3 a3 bd d0 2f 3c 4c 0b a1 a1 d8 8b 65 28 9a a4 62 08 7d d1 34 3b 11 2d 10 eb 94 34 3b 15 67 02 e5 71 35 5b b1 03 52 ee a9 89 aa ce 24 96 c6 c5 30 d4 1d 5e 03 a5 c9 86 83 89 93 67 59 30 ec 89 c4 90 7d 4a cc 13 28 3b 14 45 b2 a6 26 a0 ec 43 89 84 c4 d2 35 c9 12 ae 1a 89 ad 2d b3 90 47 cd 3f c5 74 08 d4 25 b2 81 79 bd 50 22 f9 ba 04 e7 cd ca 00 3b 95 02 9d d0 46 7a a0 44 ee 80 b9 40 d0 2b a0 00 72 06 5a e4 30 64 20 d9 4d Data Ascii: ,,Q%@(A A!#_A=3tVZD@$o1A})#AieYN{4u0TA/<Le(b}4;-4;gq5[R$0^gY0}J(;E&C5-G?t%yP";FzD@+rZ0d M
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 80 10 82 e6 14 1a 28 8b ca cc b5 56 81 01 47 40 e7 06 b6 d6 44 56 5d 74 11 0e 24 59 04 87 fa 75 41 22 6f 67 20 9c da 03 96 65 52 0d 25 04 da 24 fa 6c 8b 83 2c 7e 48 a9 06 d9 40 65 df ba 15 31 64 2a 60 b9 b9 91 a3 74 91 77 23 32 8d f6 40 f2 98 87 5d 64 44 88 5a 08 36 42 00 8b 4a 0c f5 45 d5 19 ea b6 4d 95 ac b3 8a 85 0a 84 c3 56 b4 f6 ed 29 0c 3d 4d d3 6a d4 f1 59 2a 74 1c dd 53 ba 7b 76 86 8a 6c 82 21 62 64 ac 34 b1 c1 a3 fa 28 d9 b8 82 63 d4 8c e2 05 d7 92 8d 07 38 73 73 7b 23 24 04 6a 82 42 4e 64 12 92 2e 50 45 ce 24 77 40 4c eb a2 04 49 36 36 08 62 33 1f 25 49 04 ec 77 50 46 42 a0 de 10 06 f6 40 b4 f6 46 48 98 d1 0d 0e 80 95 11 20 6c b4 20 e2 e1 a3 50 31 60 88 40 9f e1 45 58 cd d0 23 ba 09 02 72 df 45 90 5d 0c 32 24 a1 24 e6 ca 08 bc 00 b4 2b 24 04 49 Data Ascii: (VG@DV]t$YuA"og eR%$l,~H@e1d`tw#2@]dDZ6BJEMV)=MjYtS{vl!bd4(c8ss{#$jBNd.PE$w@LI66b3%IwPFB@FH l P1`@EX#rE]2$$+$I
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 03 5a 1a e8 75 bb 26 1a 81 c4 46 8e 4c 67 51 75 63 33 9a 13 0d 44 d7 27 e2 b2 d6 26 91 ab 74 54 5d 50 e9 9a e8 23 e6 19 40 0a 96 ec 82 39 ac 81 67 40 17 1d 90 22 50 13 dd 02 91 b2 00 91 f4 40 a6 e8 04 04 15 90 c0 27 45 74 05 87 44 d5 c3 6d 37 a8 bd 52 14 6a 1d 1a 87 5b 26 30 d5 7f 85 34 e8 9b 30 55 9c 63 22 9a 45 56 d3 e1 95 dc 3d 10 9d 9a f6 da 19 c1 2b bb e1 d5 67 b3 55 e3 5e ce 01 58 e8 c7 4a 76 6b db ab 4d 3f 0e 54 26 32 de 26 ea 4d 93 a5 5b 28 78 55 e4 80 e6 39 da 59 36 c4 45 5b a9 78 3d e1 c0 86 b7 2c 49 e6 0a 4c d9 bf 8c 34 b3 c2 4c b3 b2 48 3f ca b1 3d bf b3 53 35 68 a3 e1 ac 35 33 19 7f f6 64 e9 77 19 e5 ac 37 d1 f0 f6 1a 99 e6 f2 cb 7a 8e 8b 5e d3 3e f3 4b 78 1e 0b 98 b5 cd b6 c5 b7 4a f1 13 cf 89 d2 e1 5c 3c 33 30 7d fa 65 5a 9e 2c 23 d5 d6 52 Data Ascii: Zu&FLgQuc3D'&tT]P#@9g@"P@'EtDm7Rj[&040Uc"EV=+gU^XJvkM?T&2&M[(xU9Y6E[x=,IL4LH?=S5h53dw7z^>KxJ\<30}eZ,#R
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6f 03 29 06 72 a3 3a 1c 09 6c 0d ac 8a 1c 23 dd 01 01 d9 86 a8 27 97 72 df 9a 32 59 65 4d 0c b4 68 a2 e1 06 fc 91 51 2d bd ae ad 43 06 ee e5 f9 2a 15 a3 f8 50 41 d3 96 15 08 b4 7c d1 91 28 0d 0d db 74 11 7d b4 46 64 bd b5 44 22 0e bb 2d 28 3d 34 41 5b ae 81 c5 90 26 89 cc 82 d6 8d 82 06 ee a1 64 92 1a a0 46 26 da a3 49 4a 06 48 46 75 07 00 6e 82 b7 30 20 89 60 ca e5 a4 c4 72 8d 90 45 d0 8c 89 84 0a 27 44 44 a3 74 0c 4b b4 45 0c dd 65 2a b2 6c 8a 6c 03 28 96 a3 49 13 25 c8 92 89 27 64 55 7a 97 76 46 41 82 b4 11 68 41 13 1b a0 83 90 56 4c 20 60 f5 6a 0b 58 60 a0 be 4c 23 44 4d bd 28 20 5d d1 04 1c 65 02 92 3d 90 04 f4 46 42 04 82 60 ec 88 96 d0 8a 1a 21 01 60 81 3c da da 20 a1 c4 73 42 a2 b3 ba 22 42 62 c8 24 2f 65 15 6b 44 09 40 c7 54 42 de 4b 90 33 11 64 Data Ascii: o)r:l#'r2YeMhQ-CPA\|(t}FdD"-(=4A[&dF&IJHFun0 `rE'DDtKEell(I%'dUzvFAhAVL `jX`L#DM( ]e=FB`!`< sB"Bb$/ekD@TBK3d
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 8e 1c 66 c8 c6 8e d9 55 c6 63 92 d0 bd 8c a0 d3 66 36 ca e1 3c 86 ca b4 9a ff 00 43 67 ae b2 98 76 b3 43 31 ad 02 5c d6 8b 6b ba a4 4a 27 17 70 45 c1 46 75 17 63 2a ba cd 73 a3 fd 48 9f 68 79 b5 1c 1c 19 b7 5b 4a b8 83 ce c5 65 9f dd 86 f6 75 fe 89 86 94 d7 a9 ad 4f d1 30 ee 6e 6b a4 67 ab 93 ba 62 76 a9 b1 94 da 7f e6 b4 93 be 64 9a da 7e 88 e4 aa 41 d4 1a 7f 7b 55 b1 d0 39 23 8a cc 4f 35 43 f1 b8 36 54 71 2e 96 fd d6 a3 8a cc fb d5 51 88 e2 38 50 d7 64 f4 81 be a0 2c fb 78 47 26 fe 2c 58 8e 2d 84 a4 d0 e6 53 a4 7d dc 66 56 b2 b0 d4 c2 9a 7c 76 9f a8 50 92 6e 65 58 8a cb 13 2b ff 00 e3 d4 c3 03 9d e5 b4 74 d9 26 31 63 b4 ab af e2 2a 4e 73 f9 29 82 3a 36 35 50 9e cc b5 3c 41 50 df 74 fa 6a 38 ed 2c 95 bc 41 5b 4e 68 27 5b a9 dd bf 66 df c5 9e a7 18 c6 3a Data Ascii: fUcf6<CgvC1\kJ'pEFucsHhy[JeuO0nkgbvd~A{U9#O5C6Tq.Q8Pd,xG&,X-S}fV\|vPneX+t&1cNs):65P<APtj8,A[Nh'[f:
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 80 d4 a0 ad e7 a2 08 3b aa 08 6b aa 09 81 08 26 d0 82 c9 81 08 22 77 44 22 51 43 8c b6 10 44 14 01 37 ec 80 f8 50 13 d1 04 66 15 42 92 50 29 ba 04 5c 81 07 5e c8 9a 09 9d 51 4a 7a a0 8b 90 44 ee 95 65 1e eb 40 00 a0 90 ba 34 60 72 ca 09 47 64 08 ac 83 54 05 9b 64 64 b5 40 a7 ba 09 47 64 68 20 21 19 19 50 0e f4 a0 08 84 11 25 2a 22 2c b4 0c a5 00 81 94 08 a0 8c 9d 10 22 0a 02 3b 20 23 b2 09 20 81 40 11 0b 40 59 05 f6 5a 04 a0 73 dd 64 13 08 26 1c 80 ec 82 41 03 36 40 40 d1 65 a2 20 14 12 81 08 61 40 88 43 04 74 45 22 db a0 5a 22 0d 56 80 2e 50 38 ec 81 10 81 a0 51 28 c8 21 02 36 40 14 11 98 40 f5 41 07 75 40 c0 40 65 28 00 80 23 74 09 00 44 5d 00 b4 1a 08 91 08 0f 74 0d 00 80 40 20 10 45 04 90 29 e8 81 cf 74 0c 09 40 03 08 1d d6 42 36 40 20 46 e1 68 10 81 Data Ascii: ;k&"wD"QCD7PfBP)\^QJzDe@4`rGdTdd@Gdh !P%*","; # @@YZsd&A6@@e a@CtE"Z"V.P8Q(!6@@Au@@e(#tD]t@ E)t@B6@ Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49769	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	1173	OUT	GET /vi-assets/static-assets/adslot-c02e009c82341062ec30.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:25 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 32 39 39 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 42 52 32 75 4a 39 38 36 64 6e 44 5a 35 5f 35 51 6d 62 64 41 2d 76 56 49 35 52 53 6e 64 50 4a 56 7a 57 49 63 37 37 6e 77 6b 68 6f 64 4a 65 49 31 37 2d 41 70 42 65 43 6c 6f 45 42 43 37 4a 4d 52 31 70 38 36 79 51 5a 56 2d 50 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 31 36 39 32 32 37 33 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 22998X-GUploader-UploadID: ABPtcPpBR2uJ986dnDZ5_5QmbdA-vVI5RSndPJVzWIc77nwkhodJeI17-ApBeCloEBC7JMR1p86yQZV-PQx-goog-generation: 1701718516922736x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:25 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 5d 2c 7b 22 31 69 79 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 6e 28 22 52 7a 71 47 22 29 7d 2c 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 22 31 69 79 4a 22 29 7d 2c 52 7a 71 47 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[44],{"1iyJ":function(e,t,n){"use strict";n.r(t);n("RzqG")},2:function(e,t,n){e.exports=n("1iyJ")},RzqG:function(e,t){!function(){"use strict";function e(e,t,n){return t in e?Object.defineProperty(e,t,{v
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 28 65 3d 65 2e 73 63 6f 70 65 29 3f 22 70 61 67 65 22 3a 65 3b 72 5b 6e 5d 7c 7c 28 72 5b 6e 5d 3d 7b 7d 29 2c 72 5b 6e 5d 5b 61 5d 7c 7c 28 72 5b 6e 5d 5b 61 5d 3d 5b 5d 29 3b 76 61 72 20 64 3d 72 5b 6e 5d 5b 61 5d 2e 70 75 73 68 28 69 29 2d 31 3b 72 65 74 75 72 6e 20 6f 5b 6e 5d 26 26 6f 5b 6e 5d 5b 61 5d 26 26 6f 5b 6e 5d 5b 61 5d 2e 6c 65 6e 67 74 68 26 26 6f 5b 6e 5d 5b 61 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 28 65 29 7d 29 29 2c 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 5d 5b 61 5d 2e 73 70 6c 69 63 65 28 64 2c 31 29 7d 7d 7d 2c 75 6e 73 75 62 73 63 72 69 62 65 54 6f 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 Data Ascii: oid 0===(e=e.scope)?"page":e;r[n]\|\|(r[n]={}),r[n][a]\|\|(r[n][a]=[]);var d=r[n][a].push(i)-1;return o[n]&&o[n][a]&&o[n][a].length&&o[n][a].forEach((function(e){i(e)})),{remove:function(){return r[n][a].splice(d,1)}}},unsubscribeToAll:function(e){Object.keys
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 72 6e 69 61 4e 6f 74 69 63 65 73 55 49 3a 38 2c 50 55 52 52 5f 45 6d 61 69 6c 4d 61 72 6b 65 74 69 6e 67 4f 70 74 49 6e 55 49 3a 39 2c 50 55 52 52 5f 44 65 6c 65 74 65 49 50 41 64 64 72 65 73 73 3a 31 30 2c 50 55 52 52 5f 41 64 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 5f 76 33 3a 31 31 2c 50 55 52 52 5f 4c 69 6d 69 74 53 65 6e 73 69 74 69 76 65 50 49 3a 31 32 2c 50 55 52 52 5f 45 6d 61 69 6c 4d 61 72 6b 65 74 69 6e 67 4f 70 74 49 6e 55 49 5f 76 32 3a 31 33 2c 50 55 52 52 5f 41 64 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 5f 76 34 3a 31 34 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 32 3d 3d 3d 28 65 3d 22 3b 20 22 2e 63 6f 6e 63 61 74 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 73 70 6c 69 74 28 22 3b 20 22 2e 63 6f 6e 63 61 Data Ascii: rniaNoticesUI:8,PURR_EmailMarketingOptInUI:9,PURR_DeleteIPAddress:10,PURR_AdConfiguration_v3:11,PURR_LimitSensitivePI:12,PURR_EmailMarketingOptInUI_v2:13,PURR_AdConfiguration_v4:14},n=function(e){return 2===(e="; ".concat(document.cookie).split("; ".conca
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 5f 76 32 7d 76 61 72 20 76 3d 22 6d 65 73 73 61 67 65 22 2c 66 3d 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 67 3d 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 6d 3d 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 68 3d 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 62 3d 22 75 6e 6c 6f 61 64 22 2c 77 3d 22 73 6c 6f 74 52 65 71 75 65 73 74 65 64 22 2c 79 3d 22 73 6c 6f 74 52 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 2c 52 3d 22 73 6c 6f 74 52 65 6e 64 65 72 45 6e 64 65 64 22 2c 41 3d 22 73 6c 6f 74 4f 6e 6c 6f 61 64 22 2c 50 3d 22 69 6d 70 72 65 73 73 69 6f 6e 56 69 65 77 61 62 6c 65 22 2c 5f 3d 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 22 2c 4f 3d 22 74 69 6d 65 44 65 66 69 6e 65 64 22 2c 55 3d 22 74 69 6d 65 43 61 6c 6c 65 64 22 2c 49 3d Data Ascii: _v2}var v="message",f="visibilitychange",g="mouseenter",m="mouseleave",h="readystatechange",b="unload",w="slotRequested",y="slotResponseReceived",R="slotRenderEnded",A="slotOnload",P="impressionViewable",_="responseStart",O="timeDefined",U="timeCalled",I=
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 3a 22 68 22 2c 22 61 6c 6c 6f 77 2d 6f 70 74 2d 6f 75 74 22 3a 22 6f 22 2c 22 61 6c 6c 6f 77 2d 6f 70 74 2d 69 6e 22 3a 22 69 22 2c 22 61 6c 6c 6f 77 2d 6f 70 74 2d 69 6e 2d 6f 72 2d 6f 75 74 22 3a 22 61 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 50 55 52 52 5f 44 61 74 61 53 61 6c 65 4f 70 74 4f 75 74 55 49 5f 76 32 22 2c 76 61 6c 75 65 4d 61 70 70 69 6e 67 3a 7b 68 69 64 65 3a 22 68 22 2c 73 68 6f 77 3a 22 73 22 2c 22 73 68 6f 77 2d 6f 70 74 65 64 2d 6f 75 74 22 3a 22 6f 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 50 55 52 52 5f 43 61 6c 69 66 6f 72 6e 69 61 4e 6f 74 69 63 65 73 55 49 22 2c 76 61 6c 75 65 4d 61 70 70 69 6e 67 3a 7b 68 69 64 65 3a 22 68 22 2c 73 68 6f 77 3a 22 73 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 50 55 52 52 5f 45 6d 61 69 6c 4d 61 72 6b 65 74 69 6e 67 4f 70 Data Ascii: :"h","allow-opt-out":"o","allow-opt-in":"i","allow-opt-in-or-out":"a"}},{name:"PURR_DataSaleOptOutUI_v2",valueMapping:{hide:"h",show:"s","show-opted-out":"o"}},{name:"PURR_CaliforniaNoticesUI",valueMapping:{hide:"h",show:"s"}},{name:"PURR_EmailMarketingOp
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6f 67 6c 65 74 61 67 7c 7c 7b 7d 2c 65 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 3d 65 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 7c 7c 5b 5d 2c 65 2e 67 6f 6f 67 6c 65 74 61 67 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 65 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 3f 65 65 28 29 2e 63 6d 64 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 65 28 29 2e 5f 6c 6f 61 64 53 74 61 72 74 65 64 5f 7c 7c 61 2e 70 75 62 6c 69 73 68 28 7b 6e 61 6d 65 3a 43 2c 76 61 6c 75 65 3a 7b 74 79 70 65 3a 22 41 64 42 6c 6f 63 6b 4f 6e 22 7d 7d 29 7d 29 29 3a 61 2e 70 75 62 6c 69 73 68 28 7b 6e 61 6d 65 3a 43 2c 76 61 6c 75 65 3a 7b 74 79 70 65 3a 47 7d 7d 29 7d 2c 6f 3d 70 28 29 3d 3d 3d 59 3f Data Ascii: ogletag\|\|{},e.googletag.cmd=e.googletag.cmd\|\|[],e.googletag};function te(){var e,t,n,i=function(){window.googletag?ee().cmd.push((function(){ee()._loadStarted_\|\|a.publish({name:C,value:{type:"AdBlockOn"}})})):a.publish({name:C,value:{type:G}})},o=p()===Y?
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 61 72 20 6e 3d 65 2e 64 69 73 70 6c 61 79 65 64 2c 69 3d 65 2e 73 6c 6f 74 3b 74 2e 69 73 52 65 66 72 65 73 68 26 26 6e 3f 28 6f 65 28 5b 69 5d 2c 74 2e 63 68 61 6e 67 65 43 6f 72 72 65 6c 61 74 6f 72 3f 6e 75 6c 6c 3a 7b 63 68 61 6e 67 65 43 6f 72 72 65 6c 61 74 6f 72 3a 21 31 7d 29 2c 74 2e 63 68 61 6e 67 65 43 6f 72 72 65 6c 61 74 6f 72 3d 21 31 29 3a 28 69 65 28 65 29 2c 65 2e 64 69 73 70 6c 61 79 65 64 3d 21 30 29 7d 76 61 72 20 61 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 74 26 26 74 2e 75 6e 6f 62 73 65 72 76 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 75 6e 6f 62 73 65 72 76 65 29 26 26 28 74 2e 75 6e 6f 62 73 65 72 76 65 28 65 29 2c 21 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 Data Ascii: ar n=e.displayed,i=e.slot;t.isRefresh&&n?(oe([i],t.changeCorrelator?null:{changeCorrelator:!1}),t.changeCorrelator=!1):(ie(e),e.displayed=!0)}var ae=function(e,t){return!!(e&&t&&t.unobserve&&"function"==typeof t.unobserve)&&(t.unobserve(e),!0)};function d
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 74 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 5b 30 5d 2c 6e 28 65 2c 74 29 7d 29 2c 74 29 3b 72 65 74 75 72 6e 20 65 26 26 74 2e 6f 62 73 65 72 76 65 28 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 2c 74 29 7b 61 2e 70 75 62 6c 69 73 68 28 7b 6e 61 6d 65 3a 74 2c 73 63 6f 70 65 3a 65 2e 69 64 2c 76 61 6c 75 65 3a 7b 69 64 3a 65 2e 69 64 2c 70 6f 73 69 74 69 6f 6e 3a 65 2e 70 6f 73 69 74 69 6f 6e 2c 63 72 65 61 74 69 76 65 49 64 3a 65 2e 63 72 65 61 74 69 76 65 49 64 2c 6c 69 6e 65 Data Ascii: nts.length&&void 0!==arguments[2]?arguments[2]:function(){};t=new IntersectionObserver((function(e,t){e=e[0],n(e,t)}),t);return e&&t.observe(e),t}function ce(e,t){a.publish({name:t,scope:e.id,value:{id:e.id,position:e.position,creativeId:e.creativeId,line

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	1173	OUT	GET /vi-assets/static-assets/vendor-7799bfe3d9a78d57c093.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:25 UTC	1325	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 37 36 38 38 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 47 2d 54 78 59 77 57 6c 64 65 46 44 7a 6a 62 4c 51 30 48 38 41 79 74 4f 36 43 63 77 4d 68 32 62 44 57 44 4d 30 61 4c 47 31 58 50 55 4b 37 69 79 4e 4b 63 75 78 31 6b 74 73 52 32 49 55 42 63 45 69 4c 73 64 73 4b 6a 68 62 64 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 36 39 39 34 36 34 38 36 31 33 34 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 176881X-GUploader-UploadID: ABPtcPpG-TxYwWldeFDzjbLQ0H8AytO6CcwMh2bDWDM0aLG1XPUK7iyNKcux1ktsR2IUBcEiLsdsKjhbdgx-goog-generation: 1701699464861349x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:25 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 22 2b 5a 4d 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 2c 6f 3d 6e 28 22 4a 46 79 48 22 29 2c 69 3d 28 72 3d 6f 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 69 2e 64 65 66 61 75 6c 74 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{"+ZMC":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var r,o=n("JFyH"),i=(r=o)&&r.__esModule?r:{default:r};t.default=i.default,e.exports=t.default},"
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 20 69 6e 20 65 29 61 20 69 6e 20 74 3f 69 2e 6c 65 6e 67 74 68 26 26 28 6f 5b 61 5d 3d 69 2c 69 3d 5b 5d 29 3a 69 2e 70 75 73 68 28 61 29 3b 76 61 72 20 75 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 74 29 7b 69 66 28 6f 5b 73 5d 29 66 6f 72 28 72 3d 30 3b 72 3c 6f 5b 73 5d 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6c 3d 6f 5b 73 5d 5b 72 5d 3b 75 5b 6f 5b 73 5d 5b 72 5d 5d 3d 6e 28 6c 29 7d 75 5b 73 5d 3d 6e 28 73 29 7d 66 6f 72 28 72 3d 30 3b 72 3c 69 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 75 5b 69 5b 72 5d 5d 3d 6e 28 69 5b 72 5d 29 3b 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6e 5b 74 5d 3f 6e 5b 74 5d 3a 65 2e 70 72 6f 70 73 5b 74 5d 7d 7d 2c 22 2b 70 35 55 22 Data Ascii: in e)a in t?i.length&&(o[a]=i,i=[]):i.push(a);var u={};for(var s in t){if(o[s])for(r=0;r<o[s].length;r++){var l=o[s][r];u[o[s][r]]=n(l)}u[s]=n(s)}for(r=0;r<i.length;r++)u[i[r]]=n(i[r]);return u}function a(e,t,n){return null!=n[t]?n[t]:e.props[t]}},"+p5U"
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 2e 35 3f 31 36 2a 65 2a 65 2a 65 2a 65 2a 65 3a 31 2b 31 36 2a 2d 2d 65 2a 65 2a 65 2a 65 2a 65 7d 7d 7d 2c 22 2f 62 38 75 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 53 54 41 45 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 26 26 21 53 79 6d 62 6f 6c 2e 73 68 61 6d 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 7d 2c 22 30 42 4b 32 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 22 30 44 6b 79 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b Data Ascii: ,easeInOutQuint:function(e){return e<.5?16eeeee:1+16--eeeee}}},"/b8u":function(e,t,n){var r=n("STAE");e.exports=r&&!Symbol.sham&&"symbol"==typeof Symbol.iterator},"0BK2":function(e,t){e.exports={}},"0Dky":function(e,t){e.exports=function(e){try{
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 72 65 70 6c 61 63 65 52 65 73 75 6c 74 54 72 61 6e 73 66 6f 72 6d 65 72 20 72 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 20 32 20 61 72 67 75 6d 65 6e 74 73 2e 22 29 3b 72 65 74 75 72 6e 20 6e 2e 72 65 70 6c 61 63 65 28 65 2c 74 29 7d 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 32 2f 50 59 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 75 28 6e 28 22 70 49 50 78 22 29 29 2c 6f 3d 75 28 6e 28 22 42 43 58 71 22 Data Ascii: (null==e\|\|null==t)throw new Error("replaceResultTransformer requires at least 2 arguments.");return n.replace(e,t)}}},e.exports=t.default},"2/PY":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r=u(n("pIPx")),o=u(n("BCXq"
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 69 74 20 62 79 2e 22 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 69 6e 63 6c 75 64 65 73 28 65 29 26 26 28 74 3d 74 2e 73 70 6c 69 74 28 65 29 29 2c 74 7d 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 32 48 45 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 3b 6f 3d 5b 74 2c 65 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 35 65 33 2c 72 3d 22 63 61 6c 6c 62 61 63 6b 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 22 6a 73 6f 6e 70 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 Data Ascii: it by.");return"string"==typeof t&&t.includes(e)&&(t=t.split(e)),t}}},e.exports=t.default},"2HEe":function(e,t,n){var r,o,i;o=[t,e],void 0===(i="function"==typeof(r=function(e,t){"use strict";var n=5e3,r="callback";function o(){return"jsonp_"+Date.now()+"
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 74 2c 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 61 3d 6f 7c 7c 69 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 5b 30 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 5b 30 5d 2c 6e 5b 31 5d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 2c 6e 5b 30 5d 2c 6e 5b 31 5d 2c 6e 5b 32 5d 29 7d Data Ascii: t,i="object"==typeof self&&self&&self.Object===Object&&self,a=o\|\|i\|\|Function("return this")();function u(e,t,n){switch(n.length){case 0:return e.call(t);case 1:return e.call(t,n[0]);case 2:return e.call(t,n[0],n[1]);case 3:return e.call(t,n[0],n[1],n[2])}
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 3d 4d 61 74 68 2e 6d 61 78 2c 52 3d 57 28 61 2c 22 4d 61 70 22 29 2c 6b 3d 57 28 4f 62 6a 65 63 74 2c 22 63 72 65 61 74 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 65 29 7b 76 61 72 20 74 3d 2d 31 2c 6e 3d 65 3f 65 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 2b 2b 74 3c 6e 3b 29 7b 76 61 72 20 72 3d 65 5b 74 5d 3b 74 68 69 73 2e 73 65 74 28 72 5b 30 5d 2c 72 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 76 61 72 20 74 3d 2d 31 2c 6e 3d 65 3f 65 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 2b 2b 74 3c 6e 3b 29 7b 76 61 72 20 72 3d 65 5b 74 5d 3b 74 68 69 73 2e 73 65 74 28 72 5b 30 5d 2c 72 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 76 61 72 20 74 3d 2d Data Ascii: =Math.max,R=W(a,"Map"),k=W(Object,"create");function I(e){var t=-1,n=e?e.length:0;for(this.clear();++t<n;){var r=e[t];this.set(r[0],r[1])}}function L(e){var t=-1,n=e?e.length:0;for(this.clear();++t<n;){var r=e[t];this.set(r[0],r[1])}}function N(e){var t=-
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 28 72 3d 74 79 70 65 6f 66 28 6e 3d 74 29 29 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 72 7c 7c 22 73 79 6d 62 6f 6c 22 3d 3d 72 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 72 3f 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 6e 3a 6e 75 6c 6c 3d 3d 3d 6e 29 3f 6f 5b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 22 73 74 72 69 6e 67 22 3a 22 68 61 73 68 22 5d 3a 6f 2e 6d 61 70 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 7d 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 55 28 6e 29 3f 6e 3a 76 6f 69 64 20 30 7d 49 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f Data Ascii: urn("string"==(r=typeof(n=t))\|\|"number"==r\|\|"symbol"==r\|\|"boolean"==r?"__proto__"!==n:null===n)?o["string"==typeof t?"string":"hash"]:o.map}function W(e,t){var n=function(e,t){return null==e?void 0:e[t]}(e,t);return U(n)?n:void 0}I.prototype.clear=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	1176	OUT	GET /vi-assets/static-assets/liveAsset-14d9fdd01d7a65e76eb5.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:25 UTC	1322	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 38 32 32 30 36 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 4f 61 55 51 49 71 74 63 44 4f 41 69 4d 4f 66 77 31 41 52 4a 45 56 51 76 74 69 38 79 56 6f 33 78 78 54 6c 6c 52 47 78 5a 45 67 6a 76 48 4b 66 77 78 75 54 73 6a 50 7a 59 43 30 30 4c 47 45 4a 30 49 4a 57 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 39 36 35 38 36 34 33 39 31 37 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1822062X-GUploader-UploadID: ABPtcPpOaUQIqtcDOAiMOfw1ARJEVQvti8yVo3xxTllRGxZEgjvHKfwxuTsjPzYC00LGEJ0IJWwx-goog-generation: 1701796586439171x-goog-metageneration: 1x-goog-stored-content-encoding:
2023-12-05 18:13:25 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 2c 35 2c 38 2c 31 37 2c 32 30 2c 32 31 2c 32 33 2c 36 30 2c 38 31 2c 31 34 34 2c 31 34 35 2c 31 36 33 5d 2c 7b 22 2b 35 41 57 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 79 67 76 6b 22 29 2c 69 3d 6e 28 22 38 69 54 46 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[98,5,8,17,20,21,23,60,81,144,145,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return j}));var a=n("ygvk"),i=n("8iTF
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 73 2e 70 61 72 73 65 29 28 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 73 76 63 2f 62 69 74 6c 79 2f 73 68 6f 72 74 65 6e 2e 6a 73 6f 6e 22 29 29 3b 72 65 74 75 72 6e 20 6e 2e 71 75 65 72 79 3d 7b 75 72 6c 3a 65 2e 75 72 6c 7d 2c 4f 62 6a 65 63 74 28 73 2e 66 6f 72 6d 61 74 29 28 6e 29 7d 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6c 28 29 28 6e 2c 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 7d 29 7d 2c 66 3d 6e 28 22 79 58 50 55 22 29 2c 70 3d 6e 2e 6e 28 66 29 2c 6d 3d 6e 28 22 6f 30 6f 31 22 29 2c 67 3d 6e 2e 6e 28 6d 29 2c 76 3d 6e 28 22 32 48 45 65 22 29 2c 68 3d 6e 2e 6e 28 76 29 3b 66 75 6e 63 74 69 6f 6e 20 62 Data Ascii: (e,t){var n=Object(s.parse)("".concat(t,"/svc/bitly/shorten.json"));return n.query={url:e.url},Object(s.format)(n)}(e.meta,t);break;default:return null}return l()(n,{method:"GET"})},f=n("yXPU"),p=n.n(f),m=n("o0o1"),g=n.n(m),v=n("2HEe"),h=n.n(v);function b
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 76 61 72 20 6e 3b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 53 55 4d 4d 41 52 59 5f 52 45 51 55 45 53 54 3a 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 41 52 54 49 43 4c 45 5f 52 45 51 55 45 53 54 3a 6e 3d 77 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 43 4f 4d 4d 45 4e 54 5f 4c 49 53 54 5f 52 45 51 55 45 53 54 3a 6e 3d 4f 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 43 4f 4d 4d 45 4e 54 53 5f 52 45 51 55 45 53 54 3a 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 72 74 69 63 6c 65 49 64 2c 61 3d 65 2e 63 6f 6d 6d 65 6e 74 49 64 2c 69 3d 7b 75 72 6c 3a 6e 2c 6d 65 74 68 6f 64 3a 22 67 65 74 22 2c 63 6d Data Ascii: var n;switch(e.type){case a.a.GET_SUMMARY_REQUEST:case a.a.GET_ARTICLE_REQUEST:n=w(e.meta,t);break;case a.a.GET_COMMENT_LIST_REQUEST:n=O(e.meta,t);break;case a.a.GET_COMMENTS_REQUEST:n=function(e,t){var n=e.articleId,a=e.commentId,i={url:n,method:"get",cm
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 61 2e 55 50 44 41 54 45 5f 50 52 4f 46 49 4c 45 5f 52 45 51 55 45 53 54 3a 69 2e 6d 65 74 68 6f 64 3d 22 50 55 54 22 2c 69 2e 68 65 61 64 65 72 73 3d 6e 65 77 20 48 65 61 64 65 72 73 28 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 7d 29 2c 69 2e 62 6f 64 79 3d 4f 62 6a 65 63 74 28 6b 2e 73 74 72 69 6e 67 69 66 79 29 28 65 2e 6d 65 74 61 2e 76 61 6c 75 65 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 61 2e 55 50 44 41 54 45 5f 41 56 41 54 41 52 5f 52 45 51 55 45 53 54 3a 69 2e 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 2c 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 76 31 2f 63 75 72 72 65 6e 74 2f 61 76 61 Data Ascii: ;break;case a.a.UPDATE_PROFILE_REQUEST:i.method="PUT",i.headers=new Headers({"Content-Type":"application/x-www-form-urlencoded"}),i.body=Object(k.stringify)(e.meta.values);break;case a.a.UPDATE_AVATAR_REQUEST:i.method="POST",n="".concat(t,"/v1/current/ava
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 73 2e 63 6f 6d 22 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 7d 2c 22 2b 49 4d 6a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 61 26 26 28 61 3d 6e 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 6e 29 3b 69 26 26 21 28 22 67 65 74 22 69 6e 20 69 3f 21 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3a 69 2e 77 72 69 74 61 62 6c 65 7c 7c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7c 7c 28 69 Data Ascii: s.com");default:return null}}},"+IMj":function(e,t,n){"use strict";var a=this&&this.__createBinding\|\|(Object.create?function(e,t,n,a){void 0===a&&(a=n);var i=Object.getOwnPropertyDescriptor(t,n);i&&!("get"in i?!t.__esModule:i.writable\|\|i.configurable)\|\|(i
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 65 6e 74 20 66 6f 72 20 79 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 22 29 2c 6c 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 73 2e 63 78 29 28 75 2e 73 75 62 48 65 61 64 65 72 2c 28 74 3d 7b 7d 2c 74 5b 75 2e 73 6d 61 6c 6c 53 75 62 48 65 61 64 65 72 5d 3d 6f 2c 74 29 29 7d 2c 6e 75 6c 6c 3d 3d 3d 28 61 3d 72 2e 63 6f 6e 74 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 74 65 6e 74 54 65 78 74 29 29 2c 6c 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 2e 62 75 74 74 6f 6e 2c 68 72 65 66 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 72 2e 63 6f 6e 74 65 6e 74 29 7c 7c 76 6f Data Ascii: ent for your subscription."),l.default.createElement("p",{className:(0,s.cx)(u.subHeader,(t={},t[u.smallSubHeader]=o,t))},null===(a=r.content)\|\|void 0===a?void 0:a.contentText)),l.default.createElement("a",{className:u.button,href:null===(i=r.content)\|\|vo
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 22 25 63 22 2e 63 6f 6e 63 61 74 28 65 29 2c 22 25 63 20 2d 20 65 76 65 6e 74 4e 61 6d 65 3a 20 22 2c 22 25 63 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 2e 6d 65 64 69 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 65 76 65 6e 74 4e 61 6d 65 29 29 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 43 6f 75 72 69 65 72 3b 22 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 22 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 43 6f 75 72 69 65 72 3b 22 2c 22 66 Data Ascii: ("%c".concat(e),"%c - eventName: ","%c".concat(null==t\|\|null===(n=t.media)\|\|void 0===n?void 0:n.eventName)),"font-weight: normal; font-size: 13px; font-family: Courier;","font-weight: bold;","font-weight: normal; font-size: 13px; font-family: Courier;","f
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 30 70 78 29 22 2c 73 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 63 6f 6c 6f 72 3a 22 2c 72 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 34 30 2c 22 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 72 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 22 29 2c 64 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 22 Data Ascii: media (max-width: 420px)",s=Object(a.css)("color:",r.a.color.gray40,";display:flex;flex-shrink:0;font-family:",r.a.font.franklinBase,";font-size:17px;margin-bottom:5px;@media print{display:none;}"),d=Object(a.css)("padding:0;margin-left:0;margin-right:0;"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49771	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	1171	OUT	GET /vi-assets/static-assets/main-5bad2df7824d8ab68c7b.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:25 UTC	1325	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 38 33 32 30 35 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 4a 58 41 6d 73 39 6d 43 54 38 63 37 54 6b 61 75 53 74 45 48 4b 30 76 4e 34 76 4d 72 49 79 53 76 58 39 69 39 32 62 42 6b 4f 6a 37 4b 45 57 5f 72 54 6c 59 58 34 37 6c 76 47 36 65 6e 4e 38 74 5f 4b 6d 31 4d 45 59 2d 68 4d 67 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 31 39 30 36 34 39 32 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1832057X-GUploader-UploadID: ABPtcPoJXAms9mCT8c7TkauStEHK0vN4vMrIySvX9i92bBkOj7KEW_rTlYX47lvG6enN8t_Km1MEY-hMgAx-goog-generation: 1701718519064929x-goog-metageneration: 1x-goog-stored-content-enc
2023-12-05 18:13:25 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 32 5d 2c 7b 22 2b 34 48 4e 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 70 56 6e 4c 22 29 2c 6f 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 22 51 49 4c 6d 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 6c 3d 6e 28 22 71 31 74 49 22 29 2c 73 3d 6e 2e 6e 28 6c 29 2c 75 3d 6e 28 22 4c 67 57 75 22 29 2c 63 3d 6e 2e 6e 28 75 29 2c 64 3d 5b 22 75 72 6c 22 2c 22 72 65 74 75 72 6e 55 72 6c 22 2c 22 63 68 69 6c 64 72 65 6e 22 5d 2c 66 3d 73 2e 61 2e 66 6f 72 77 61 72 64 52 65 66 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[102],{"+4HN":function(e,t,n){"use strict";var r=n("pVnL"),o=n.n(r),i=n("QILm"),a=n.n(i),l=n("q1tI"),s=n.n(l),u=n("LgWu"),c=n.n(u),d=["url","returnUrl","children"],f=s.a.forwardRef((function(e,t){var n=e
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 4c 3a 22 4d 4d 2f 44 44 2f 59 59 59 59 22 2c 4c 4c 3a 22 4d 4d 4d 4d 20 44 2c 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 4d 4d 4d 4d 20 44 2c 20 59 59 59 59 20 68 3a 6d 6d 20 41 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 2c 20 4d 4d 4d 4d 20 44 2c 20 59 59 59 59 20 68 3a 6d 6d 20 41 22 7d 2c 74 3d 2f 28 5c 5b 5b 5e 5b 5d 2a 5c 5d 29 7c 28 5b 2d 5f 3a 2f 2e 2c 28 29 5c 73 5d 2b 29 7c 28 41 7c 61 7c 59 59 59 59 7c 59 59 3f 7c 4d 4d 3f 4d 3f 4d 3f 7c 44 6f 7c 44 44 3f 7c 68 68 3f 7c 48 48 3f 7c 6d 6d 3f 7c 73 73 3f 7c 53 7b 31 2c 33 7d 7c 7a 7c 5a 5a 3f 29 2f 67 2c 6e 3d 2f 5c 64 5c 64 2f 2c 72 3d 2f 5c 64 5c 64 3f 2f 2c 6f 3d 2f 5c 64 2a 5b 5e 2d 5f 3a 2f 2c 28 29 5c 73 5c 64 5d 2b 2f 2c 69 3d 7b 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 3d Data Ascii: L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},t=/(\[[^[]\])\|([-_:/.,()\s]+)\|(A\|a\|YYYY\|YY?\|MM?M?M?\|Do\|DD?\|hh?\|HH?\|mm?\|ss?\|S{1,3}\|z\|ZZ?)/g,n=/\d\d/,r=/\d\d?/,o=/\d[^-_:/,()\s\d]+/,i={},a=function(e){return(e=
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 30 2c 33 29 7d 29 29 29 2e 69 6e 64 65 78 4f 66 28 65 29 2b 31 3b 69 66 28 6e 3c 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 3b 74 68 69 73 2e 6d 6f 6e 74 68 3d 6e 25 31 32 7c 7c 6e 7d 5d 2c 4d 4d 4d 4d 3a 5b 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 75 28 22 6d 6f 6e 74 68 73 22 29 2e 69 6e 64 65 78 4f 66 28 65 29 2b 31 3b 69 66 28 74 3c 31 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 3b 74 68 69 73 2e 6d 6f 6e 74 68 3d 74 25 31 32 7c 7c 74 7d 5d 2c 59 3a 5b 2f 5b 2b 2d 5d 3f 5c 64 2b 2f 2c 6c 28 22 79 65 61 72 22 29 5d 2c 59 59 3a 5b 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 79 65 61 72 3d 61 28 65 29 7d 5d 2c 59 59 59 59 3a 5b 2f Data Ascii: function(e){return e.slice(0,3)}))).indexOf(e)+1;if(n<1)throw new Error;this.month=n%12\|\|n}],MMMM:[o,function(e){var t=u("months").indexOf(e)+1;if(t<1)throw new Error;this.month=t%12\|\|t}],Y:[/[+-]?\d+/,l("year")],YY:[n,function(e){this.year=a(e)}],YYYY:[/
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 61 72 20 72 3d 66 28 74 29 28 65 29 2c 6f 3d 72 2e 79 65 61 72 2c 69 3d 72 2e 6d 6f 6e 74 68 2c 61 3d 72 2e 64 61 79 2c 6c 3d 72 2e 68 6f 75 72 73 2c 73 3d 72 2e 6d 69 6e 75 74 65 73 2c 75 3d 72 2e 73 65 63 6f 6e 64 73 2c 63 3d 72 2e 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 64 3d 72 2e 7a 6f 6e 65 2c 70 3d 6e 65 77 20 44 61 74 65 2c 68 3d 61 7c 7c 28 6f 7c 7c 69 3f 31 3a 70 2e 67 65 74 44 61 74 65 28 29 29 2c 6d 3d 6f 7c 7c 70 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 76 3d 30 3b 6f 26 26 21 69 7c 7c 28 76 3d 69 3e 30 3f 69 2d 31 3a 70 2e 67 65 74 4d 6f 6e 74 68 28 29 29 3b 76 61 72 20 79 3d 6c 7c 7c 30 2c 67 3d 73 7c 7c 30 2c 62 3d 75 7c 7c 30 2c 77 3d 63 7c 7c 30 3b 72 65 74 75 72 6e 20 64 3f 6e 65 77 20 44 61 74 65 28 44 61 74 65 2e 55 54 43 28 6d 2c Data Ascii: ar r=f(t)(e),o=r.year,i=r.month,a=r.day,l=r.hours,s=r.minutes,u=r.seconds,c=r.milliseconds,d=r.zone,p=new Date,h=a\|\|(o\|\|i?1:p.getDate()),m=o\|\|p.getFullYear(),v=0;o&&!i\|\|(v=i>0?i-1:p.getMonth());var y=l\|\|0,g=s\|\|0,b=u\|\|0,w=c\|\|0;return d?new Date(Date.UTC(m,
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 65 2c 74 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 72 3d 69 28 6e 28 22 53 54 7a 6e 22 29 29 2c 6f 3d 69 28 6e 28 Data Ascii: tion(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){return function(){return 1===arguments.length?(0,r.default)(e,t).apply(void 0,arguments):(0,o.default)(e).apply(void 0,arguments)}};var r=i(n("STzn")),o=i(n(
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3d 72 28 6e 28 22 71 31 74 49 22 29 29 3b 6e 28 22 31 37 78 39 22 29 3b 76 61 72 20 69 3d 6e 28 22 4a 52 4a 4e 22 29 3b 6e 28 22 61 51 6b 65 22 29 3b 76 61 72 20 61 3d 72 28 6e 28 22 5a 59 44 79 22 29 29 2c 6c 3d 72 28 6e 28 22 6e 56 30 46 22 29 29 2c 73 3d 72 28 6e 28 22 76 52 47 4a 22 29 29 3b 6e 28 22 6b 76 56 7a 22 29 3b 76 61 72 20 75 3d 72 28 6e 28 22 32 6d 71 6c 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 28 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d Data Ascii: ,"__esModule",{value:!0});var o=r(n("q1tI"));n("17x9");var i=n("JRJN");n("aQke");var a=r(n("ZYDy")),l=r(n("nV0F")),s=r(n("vRGJ"));n("kvVz");var u=r(n("2mql"));function c(){return(c=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=argum
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 73 2e 73 74 61 74 65 2e 6c 6f 63 61 74 69 6f 6e 2c 6d 61 74 63 68 3a 74 2e 63 6f 6d 70 75 74 65 52 6f 6f 74 4d 61 74 63 68 28 74 68 69 73 2e 73 74 61 74 65 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 2c 73 74 61 74 69 63 43 6f 6e 74 65 78 74 3a 74 68 69 73 2e 70 72 6f 70 73 2e 73 74 61 74 69 63 43 6f 6e 74 65 78 74 7d 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 2e 50 72 6f 76 69 64 65 72 2c 7b 63 68 69 6c 64 72 65 6e 3a 74 68 69 73 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 7c 7c 6e 75 6c 6c 2c 76 61 6c 75 65 3a 74 68 69 73 2e 70 72 6f 70 73 2e 68 69 73 74 6f 72 79 7d 29 29 7d 2c 74 7d 28 6f 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 66 6f 72 28 76 61 72 Data Ascii: s.state.location,match:t.computeRootMatch(this.state.location.pathname),staticContext:this.props.staticContext}},o.createElement(m.Provider,{children:this.props.children\|\|null,value:this.props.history}))},t}(o.Component),g=function(e){function t(){for(var
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 21 6e 26 26 22 22 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 22 2b 74 2e 65 6e 64 2b 74 2e 73 74 72 69 63 74 2b 74 2e 73 65 6e 73 69 74 69 76 65 2c 72 3d 54 5b 6e 5d 7c 7c 28 54 5b 6e 5d 3d 7b 7d 29 3b 69 66 28 72 5b 65 5d 29 72 65 74 75 72 6e 20 72 5b 65 5d 3b 76 61 72 20 6f 3d 5b 5d 2c 69 3d 7b 72 65 67 65 78 70 3a 73 28 65 2c 6f 2c 74 29 2c 6b 65 79 73 3a 6f 7d 3b 72 65 74 75 72 6e 20 45 3c 31 65 34 26 26 28 72 5b 65 5d 3d 69 2c 45 2b 2b 29 2c 69 7d 28 6e 2c 7b 65 6e 64 3a 69 2c 73 74 72 69 63 74 3a 6c 2c 73 65 6e 73 69 74 69 76 65 3a 63 7d 29 2c 6f 3d 72 2e 72 65 67 Data Ascii: ((function(t,n){if(!n&&""!==n)return null;if(t)return t;var r=function(e,t){var n=""+t.end+t.strict+t.sensitive,r=T[n]\|\|(T[n]={});if(r[e])return r[e];var o=[],i={regexp:s(e,o,t),keys:o};return E<1e4&&(r[e]=i,E++),i}(n,{end:i,strict:l,sensitive:c}),o=r.reg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49788	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	676	OUT	GET /fonts/family/franklin/franklin-normal-700.91eaf6b5642463af4091160b4bbfdfcb.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1113	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 32 37 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 73 4c 73 6e 41 54 42 30 4c 57 76 65 71 79 73 62 4a 34 74 64 69 51 6c 7a 6a 75 57 31 73 6a 4f 34 2d 65 70 53 31 36 6e 41 4e 6c 51 46 30 58 67 41 7a 57 67 42 71 73 52 43 62 74 74 68 32 4f 30 68 75 56 5f 59 31 5f 44 37 75 53 61 55 76 6b 7a 71 5a 72 39 75 44 64 59 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 33 30 20 44 65 63 20 32 30 32 33 20 30 37 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 20276X-GUploader-UploadID: ADPycdsLsnATB0LWveqysbJ4tdiQlzjuW1sjO4-epS16nANlQF0XgAzWgBqsRCbtth2O0huV_Y1_D7uSaUvkzqZr9uDdYACache-Control: public,max-age=31536000,immutableExpires: Sat, 30 Dec 2023 07
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4f 34 00 10 00 00 00 00 d3 9c 00 00 4e d3 00 01 00 c5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b d8 38 1c 81 06 06 60 00 8c 1e 08 3a 09 82 73 11 0c 0a 82 9e 60 81 ff 64 01 36 02 24 03 87 74 0b 83 7c 00 04 20 05 85 44 07 85 5e 0c 84 24 1b 0c c1 07 64 9b ce 82 7e b7 83 37 5e b5 fd ee 01 77 0c 36 0e 68 c0 a3 15 52 c0 8e bd 00 1b 07 98 85 fc ad b2 ff ff 13 92 93 31 0a 66 0f 9b 9a 5a dd 43 a6 ac 3e 26 4a 77 5f 7d df 03 8b ea 14 3a 1f ea 1b 67 49 0b 0f 27 56 34 2b 4a c3 43 90 c9 ec 4c c8 92 60 68 ee aa 12 ce 40 25 6f 4b e6 e9 bb bb 34 44 ef 6b 54 1a 3d 71 3b 94 5a 3f 85 56 dc d5 b0 86 74 91 f9 b4 fd 62 5d f5 cd 68 9d 96 97 1e c8 37 16 25 32 94 30 d8 d4 e9 83 c9 e1 89 df 39 4c 09 6d 4c e8 41 9a 6e b6 1d 2a 94 7a Data Ascii: wOF2O4N8`:s`d6$t\| D^$d~7^w6hR1fZC>&Jw_}:gI'V4+JCL`h@%oK4DkT=q;Z?Vtb]h7%209LmLAn*z
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: e0 28 c8 85 64 b6 52 3b 29 19 b0 25 70 4b b4 08 00 63 43 74 c0 f4 81 eb ba d0 f5 04 40 12 40 04 48 01 a4 01 32 00 72 60 06 9c b1 96 a1 60 84 a2 a1 18 28 16 8a 83 5a b4 43 80 56 53 7a 6a a5 59 44 dc c0 80 64 40 a5 ae d0 35 37 c2 38 f4 4f 51 a2 ab 30 c2 26 ae 8e e9 7a b2 c0 59 c1 d6 6e 8f f3 70 ce 76 37 25 4f ca c7 9f 02 f9 41 cf 43 f1 70 6c 60 69 af fd 77 28 09 75 24 ea 91 24 51 4a 5a 26 df 65 b0 67 df 81 43 47 ee e7 0f 28 3d f4 c8 e3 bc 02 57 55 53 d7 d0 d4 d2 d6 d1 d5 bb d5 69 aa ff 22 4d 8b 64 18 91 d3 ba 8d f2 98 39 76 d5 4c e6 ba b1 d2 b7 4b 5f 07 c5 09 34 37 14 93 9a 9e 42 ba 52 7c ad b8 d0 2d 67 bc 08 6b 85 e3 26 27 db f6 84 07 fd be f2 00 4c d0 fb 43 20 37 f3 c3 47 fa 23 c5 5b ed df 61 1e 8d c7 42 40 4a 30 48 82 28 25 2d d3 9e 45 da 2d de b3 ef c0 Data Ascii: (dR;)%pKcCt@@H2r``(ZCVSzjYDd@578OQ0&zYnpv7%OACpl`iw(u$$QJZ&egCG(=WUSi"Md9vLK_47BR\|-gk&'LC 7G#[aB@J0H(%-E-
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 80 18 32 61 c2 84 21 1c c7 71 f2 f2 7c 89 a2 1f 88 65 4d 59 93 90 9f f9 04 f1 dc 72 1a 82 01 60 01 38 84 e9 16 d0 e2 f1 78 32 59 96 c9 89 d9 2d f0 10 42 a1 50 28 14 7a c6 27 08 82 20 08 04 e0 61 98 84 c7 03 3c 0c 9b 71 1d f0 30 0c e3 c9 64 32 99 ec c8 6c 6a 22 35 51 33 56 4c a2 28 25 8a 12 d4 f2 bf 18 4f f5 28 26 27 80 4d 8e 5d 00 5e 8f a0 22 1c 5b 17 89 3a e3 5d 90 99 1c 27 4c 4a 1a 51 4a 5a a6 72 78 28 8a a2 28 8a fa eb af bf 1d a4 72 49 d5 a2 86 a5 48 a4 5e 71 1f 17 86 28 72 c4 ce bc 8e f6 79 5d 0f c6 c3 6c 2e 97 cd e5 02 d8 63 53 18 04 d6 28 0e 6d ba 1f 7c 68 2c 0b 93 b5 36 9b 9b 4b 2b a1 55 04 9f 87 83 e1 2c b9 c2 cd da 63 21 21 a4 23 81 35 a1 5c fe 00 ee 8c 3f 74 74 f0 49 bd d3 a3 78 96 80 76 1d 36 73 b9 5c 2e 97 cb 45 43 d9 e1 0c a0 c6 aa a0 72 1e Data Ascii: 2a!q\|eMYr`8x2Y-BP(z' a<q0d2lj"5Q3VL(%O(&'M]^"[:]'LJQJZrx((rIH^q(ry]l.cS(m\|h,6K+U,c!!#5\?ttIxv6s\.ECr
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: e5 23 90 5d 54 44 10 a0 4f 4b 4c 01 b6 57 4b ee 8a ea 26 74 0a fe dd f9 44 80 dc e5 63 44 5b ab db b7 d2 f8 0d 75 9f 3f 51 0f a2 22 cc 17 7c ca a7 11 c4 dd 28 22 92 00 60 ab 91 e3 17 1c ee 64 5d 1f 00 7a f7 b1 85 fc c3 ab cb 00 5e 86 a1 f5 de 45 1f 5e 34 8f eb 74 f3 78 b0 61 78 03 fe 53 21 f5 9f 48 56 1f 27 1b e4 10 00 80 47 29 02 a0 41 01 b0 f9 4c 5c 6e 7e f1 86 dd 9a 00 f2 0f 62 69 21 a3 fe 4d 3f a7 b0 ff a2 f8 0f 90 e2 d0 5c 86 c7 67 05 42 91 58 22 d5 93 c9 15 4a 7d 03 43 95 5a 63 64 6c 62 6a a6 35 77 c1 c2 d2 9e 7d 07 0e 75 56 d6 8e 1c db b8 68 eb c4 a9 33 e7 2e b9 ec 8a ab ae d9 b9 ee 86 9b ee 70 a7 bb dc ed 1e f7 ba cf fd 1e f0 a0 6e 50 f8 f1 47 45 43 c7 c0 c4 c2 16 20 50 90 60 1c 21 42 85 01 58 7a f4 39 e4 88 e3 4e 39 6d c6 ac b3 ce 38 e7 82 8b e6 Data Ascii: #]TDOKLWK&tDcD[u?Q"\|("`d]z^E^4txaxS!HV'G)AL\n~bi!M?\gBX"J}CZcdlbj5w}uVh3.pnPGEC P`!BXz9N9m8
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: bb 5a 3b 4b 79 18 fb d2 5b d0 62 9b c5 13 41 ed 29 49 66 4a 37 c7 d8 9a 40 3c e6 d4 99 91 64 2a a5 32 50 b1 75 bf ea 0d 79 83 75 ed 0b b0 22 87 d1 38 5a 8d 2b 7d 63 ce 3a 14 d1 26 82 1c 43 d3 83 66 63 7f 4e 3f 6a 37 4f 7f 29 b5 9b fc b8 62 91 05 a1 88 3a 67 b1 43 a5 f3 a2 ca f8 9b 9b ef dc 48 94 c8 87 3a 3b 96 6e e4 e5 40 96 ee 92 d6 6b d2 f6 91 4b 2a d3 34 42 f8 17 b5 ec 50 9d 0e 02 29 76 8a 28 26 5b 34 8e dd c0 1e f7 11 5f c7 dc 56 fb bb fc a2 ff 98 97 b0 5c 92 7e 8e 0a db a6 e4 f8 6e 4b 50 9d 0c fc c3 39 ff 7f 53 c5 40 01 9f 45 5d 3b 72 fb ae cb a6 e5 1c 97 0e 55 45 6f 45 c7 9b be 19 51 5f 26 23 74 3a 9f 03 8d 16 c8 45 f2 b4 b0 dd 84 4d 95 40 84 dc 77 41 a0 ec a2 06 2e 2f a1 0f bc d9 ee 13 34 9b 00 6e 53 75 98 b9 ee 28 e5 6f 50 fc 9e 83 26 1e f3 1f 5f Data Ascii: Z;Ky[bA)IfJ7@<d2Puyu"8Z+}c:&CfcN?j7O)b:gCH:;n@kK4BP)v(&[4_V\~nKP9S@E];rUEoEQ_&#t:EM@wA./4nSu(oP&_
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: f1 42 ad 27 8a 69 19 b8 94 cf 0f 36 8b d2 aa c1 73 76 1e 75 62 ca 81 72 24 af f8 b1 f2 ef eb a6 2a 3b c5 9c d6 8d 5d 6b c9 64 a8 5c bb 66 fe a7 23 a8 7e b3 ed 1a ae e6 67 d4 8e 99 3c 78 74 bc 22 a5 52 e2 dc 92 77 a9 1c c7 90 c4 e7 e8 e1 39 65 9c e6 cc d3 f6 ac cf d4 9a c0 40 a2 b2 f1 55 07 bd 7e 89 8e 50 0d 04 72 75 4e a8 1d 5e 2d 87 bd 29 5d 83 e8 e4 8a 2c e7 6a eb 26 39 ca 9b 6f 56 1c c5 ab ef e1 8e df fd 6f a8 b2 c8 64 20 78 69 76 5a 6e e0 68 3a 78 34 cf 85 80 93 6b f3 55 96 df 7b 83 cd 33 94 37 9f e5 16 82 44 49 75 4b de 33 45 32 8e 60 ba a7 11 af 8c 95 20 58 eb 54 d7 70 a2 ee 89 87 c6 74 d3 8e 89 01 8e 11 df 11 b4 cf 75 5d c9 3f 33 94 fa 60 cc b6 b7 c7 d2 82 e5 70 02 f1 4d 41 bb 93 13 34 35 1d 4e 4f 4d 48 b8 c3 73 30 d4 1d df 96 7b e6 3f 34 61 10 e2 Data Ascii: B'i6svubr$*;]kd\f#~g<xt"Rw9e@U~PruN^-)],j&9oVod xivZnh:x4kU{37DIuK3E2` XTptu]?3`pMA45NOMHs0{?4a
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 39 fb a9 7e e8 c2 4f 3b ae 45 ff 37 2b f7 d7 2a ba 29 a6 f1 e5 d2 c0 92 ab 91 c4 2c 1c 4e ad fa 5c c9 4e 15 b5 ff 1b ef ab a9 89 78 ec ea ee 54 9f b7 53 d9 6a 15 8d 5d e0 8c d7 f3 65 00 d8 22 07 cb ac 29 16 64 1f d6 8f 4b 40 b4 21 96 ea 49 44 0a 7c 0d f3 d5 d1 e6 b3 8a e7 80 a5 09 48 34 32 10 7f 2d cd 69 32 06 3c 5a 48 ca 8d fc dc 6f 8f 67 b3 99 0a 81 ce de 5d 6c af cc d6 b9 d6 1d dd f8 73 ec 54 2f 03 96 7e e1 95 66 4c b1 82 8f b6 7e 12 b8 6c d2 73 e1 73 b8 85 14 e7 f6 2b 96 6d 22 db 3c 6b 07 51 e0 0c cd cf 75 b6 42 d6 05 cd 9d 23 36 b9 3b 68 3e 50 b4 09 30 1b 21 3a 61 29 8e 10 3f d3 05 17 2f db 63 54 0a 3a d0 d5 86 e5 f6 c2 ae 55 a2 df 2a 09 12 31 17 a2 99 20 7d a6 04 30 49 73 ec 94 11 b8 5d 7e 5e a7 d5 3f d5 12 e8 d5 fe 71 69 10 16 34 00 e0 12 21 d9 a7 Data Ascii: 9~O;E7+),N\NxTSj]e")dK@!ID\|H42-i2<ZHog]lsT/~fL~lss+m"<kQuB#6;h>P0!:a)?/cT:U1 }0Is]~^?qi4!
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 1b 65 4f 48 e3 c6 d4 0d 18 45 31 fd df 1b 07 20 15 86 d6 4a a7 e5 c6 bb f3 9a 4c a6 3f c9 18 a5 25 c1 39 3c be 01 19 82 a4 c2 3d 52 f2 03 8c a2 2d 82 5b fc 1a de 5f 78 90 71 dc 39 54 9c 6b 65 60 72 bf b0 dc 09 0d f5 b4 26 4b 85 28 1f 50 33 c0 f6 38 a7 bf a1 d0 18 54 5f 46 80 8f 77 40 80 2f 95 c9 d8 25 68 de fd fb 56 e7 31 58 32 1a 9e e0 75 e1 25 0c 60 10 61 06 68 cf de f0 e4 d0 dc 60 03 02 44 51 c0 d7 91 06 02 2d 80 e6 e2 2f 16 5f 08 ba 26 40 20 e5 60 d1 e8 44 b6 29 45 a7 48 9a f6 94 0b 41 9b 62 0f 5e c8 4b fd 3e 4a 1d f5 5a 79 52 3a 6c 6f 46 23 91 92 70 dd 86 af 23 63 4f d9 42 dc bc 63 8a ef df b7 9a f5 42 e1 90 d0 40 5b 87 57 b0 59 22 9a 84 b6 e6 a2 c8 2f 61 40 70 17 3d a8 93 16 c9 2d 13 00 99 b4 90 c1 d0 58 6e 72 b0 01 41 46 45 d0 24 5d 1a 0a eb 85 b6 Data Ascii: eOHE1 JL?%9<=R-[_xq9Tke`r&K(P38T_Fw@/%hV1X2u%`ah`DQ-/_&@ `D)EHAb^K>JZyR:loF#p#cOBcB@[WY"/a@p=-XnrAFE$]
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: c9 61 9e 7c c6 d0 88 84 d3 13 eb 17 2d 4c 77 2d 4a 7a d4 4c 28 5d 48 4e e7 5c a0 13 08 b7 a7 38 bc 1d 8e 7c 41 56 9e 8e 02 2d e1 62 ef c0 04 38 93 30 f8 61 fb 45 df 18 39 dc ff f4 b9 61 3e 81 ee c3 64 b3 5c 2d d2 5a f4 7a 81 4a 56 73 9b 9f 53 60 c6 6e c9 c8 7e 87 75 ae 31 2a 4a aa c3 6d 7f b6 4f 87 97 95 bd 15 a9 c3 3b 15 e8 d2 f1 d5 23 8a f6 0e dc 03 bf 32 51 69 1b d7 19 e5 19 51 17 89 c5 39 38 c4 a3 0a 56 47 4f 26 0e 3b f0 ac cb 66 60 b9 76 8e 48 a2 9d b9 de e8 f4 28 b2 0a 1e 2f 89 f2 e6 d6 09 f1 58 5b c7 04 54 de f3 e3 33 19 bd 0e 7c 9b 8a 53 9a 79 36 08 77 bc ad a9 41 d0 77 0c e1 a2 2b c5 de da 96 68 7c c5 7b d5 de d7 c1 da 92 00 2e d6 4a 2b df fa bd d5 b4 f5 73 0b 86 4c a6 1d 36 84 d6 9e cb c8 f3 af 45 5a 3f 82 54 04 f2 e0 2d e7 00 15 0e d4 86 c3 3d Data Ascii: a\|-Lw-JzL(]HN\8\|AV-b80aE9a>d\-ZzJVsS`n~u1*JmO;#2QiQ98VGO&;f`vH(/X[T3\|Sy6wAw+h\|{.J+sL6EZ?T-=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49787	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	676	OUT	GET /fonts/family/franklin/franklin-normal-500.0f4aea3d462cdb64748629efcbbf36bc.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1117	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 38 31 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 58 32 43 62 49 57 62 4a 48 68 41 4b 6c 4a 41 77 34 68 39 44 43 42 74 74 6d 64 55 48 62 63 37 63 38 63 41 49 66 30 76 53 6d 57 38 69 31 73 67 61 6b 34 6b 6a 62 47 54 68 6c 56 49 6d 69 4d 64 39 6b 68 70 33 6c 53 6a 78 59 73 37 6f 31 59 64 5f 32 48 44 61 74 74 69 4b 68 4e 6b 45 69 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 37 20 4a 75 6e 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 19816X-GUploader-UploadID: ADPycdvX2CbIWbJHhAKlJAw4h9DCBttmdUHbc7c8cAIf0vSmW8i1sgak4kjbGThlVImiMd9khp3lSjxYs7o1Yd_2HDattiKhNkEiCache-Control: public,max-age=31536000,immutableExpires: Fri, 07 Jun 2
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4d 68 00 10 00 00 00 00 d2 70 00 00 4d 08 00 01 00 c5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b d9 74 1c 81 06 06 60 00 8b 76 08 32 09 82 73 11 0c 0a 82 9b 2c 81 fd 6c 01 36 02 24 03 88 08 0b 84 06 00 04 20 05 85 44 07 86 1a 0c 83 44 1b 90 c0 17 d0 db 76 85 70 b7 aa 2a b6 00 91 19 1d 88 3d 0e 32 a0 df ba 09 37 86 1b 36 ce 18 3f b0 8e cd fe ff 3f 27 b9 18 b2 e0 6c 80 6a 2b db ea 1f 32 24 98 54 88 24 ab 48 8c 40 ec 6e 76 34 c2 89 24 6b 2a 6b 68 3c d1 61 51 54 9d 2a 4f 95 43 f5 52 19 35 08 af 62 94 ef 16 2d 29 bb e3 c3 86 e1 c2 86 d9 70 a7 89 90 eb 39 85 25 f4 7a 3e 5c 2d 1e d5 28 2e ba 8d 4d 82 c3 5f b2 39 b4 2c 8c 6e ec 4e eb c7 5e cd a2 93 c3 29 76 7d a9 7e 41 07 49 7b 0e a3 bf f9 8f 4e c2 2d f3 c5 bf 4e Data Ascii: wOF2MhpMt`v2s,l6$ DDvp=276??'lj+2$T$H@nv4$kkh<aQT*OCR5b-)p9%z>\-(.M_9,nN^)v}~AI{N-N
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 24 c2 db 27 5b 09 e8 01 e4 01 35 02 c0 70 9f 19 8c ff cd 1d c6 0e e3 00 09 80 24 40 0a 20 0d 90 01 90 82 f6 90 bd 5b 7b 72 06 28 06 ca 08 c5 42 71 50 cb 9e 88 41 49 84 1f 7c f2 e0 0d c4 92 44 a2 90 e8 ed 39 a4 0b 48 97 b6 86 c3 cb 40 cc 89 f1 84 3d e1 3e 37 bf b5 c0 59 e1 6c 70 fc 52 80 73 c0 b9 80 dc 5b ef d6 b7 f5 9f 05 b6 c1 65 68 fb 70 bb 6a f3 0a 28 7a 6a 62 9f 8b 57 9a 58 26 a5 a4 65 9a 4d a4 ad d8 b6 63 d7 9e 77 e9 7b a0 0f 3e fa 94 d6 e1 1a 9a 5a da ba 7a fa 06 86 46 4f 7f b0 3d 42 62 78 39 31 03 8a 84 cb 34 b7 ab bf f3 d6 5d 4d 9c 47 2b 7e d9 de 00 5e 12 40 d7 5d 7e 7a 97 3d 54 ef b2 7f c9 75 a2 fe 05 ec e4 7d 73 f3 03 7e e5 ce a8 f7 d6 0f 13 a8 b7 17 04 bb 7d 16 da 3d b8 0c bf e7 09 e9 b3 e5 f3 26 0a 16 bb 6b e2 48 09 24 a5 a4 65 26 66 51 36 2f Data Ascii: $'[5p$@ [{r(BqPAI\|D9H@=>7YlpRs[ehpj(zjbWX&eMcw{>ZzFO=Bbx914]MG+~^@]~z=Tu}s~}=&kH$e&fQ6/
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 7e f7 df 6b 3a ec 7c 88 61 fa 6e b8 e1 86 3e 49 92 24 43 de b5 5c 25 5f c0 3e b4 24 94 84 e4 b2 24 a3 a8 f7 d7 32 12 f7 21 0b 39 33 8f 1e 01 26 95 4a d5 ea a4 d6 52 4b 1b 91 22 e4 72 b9 5c 2e f7 a3 8c a2 28 8a a2 10 40 0a a1 4a 2a 05 52 08 17 e5 00 29 84 50 aa 56 ab d5 6a f5 59 8a 95 c5 0c b4 cb 5a 34 31 87 e3 40 1c a7 d8 99 97 f4 b7 43 9a 29 30 c0 f9 a5 13 c0 53 11 48 84 66 d7 3d 98 87 e9 1d e0 cc 94 f4 cc e5 91 94 92 96 29 c3 20 8e e3 38 8e e3 5e 66 f8 e8 d3 c4 da 55 63 6c 4e c1 88 91 62 ac 38 9a 6e fe 97 fc 48 05 0d 3b 37 71 58 fb e7 ba a9 40 2c 16 88 c5 00 f6 fa 34 23 02 6b 1a 87 31 ff 63 59 d4 be c5 8d f5 33 b6 b2 d0 ac 4d d6 09 61 0d bb c2 b1 73 86 4b 95 db 67 22 58 16 fe 6b 82 c7 32 02 e2 45 1f 3b f7 dd 3d f7 ea 30 b2 1f fd 8f 18 26 a0 98 23 16 8b Data Ascii: ~k:\|an>I$C\%_>$$2!93&JRK"r\.(@J*R)PVjYZ41@C)0SHf=) 8^fUclNb8nH;7qX@,4#k1cY3MasKg"Xk2E;=0&#
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 68 57 65 a6 09 7d d2 5c 74 15 df 59 b7 d5 fb e5 87 36 7f fc 22 40 60 80 35 97 7a 67 4a 4a 33 1f 7c cc 91 d1 0c 40 fe e4 53 53 d2 01 55 b1 f0 8d a1 12 b3 31 8a 34 ab 44 d0 26 51 35 b3 25 c1 91 29 9f 3c 93 ea 7e 90 34 c2 77 92 46 93 a4 4b 4a 9c 08 91 08 19 4a 12 d1 a5 0a 90 cb 8e f1 99 0c 39 e8 cc 81 21 48 3b 3e df 13 ba 4f 70 12 70 73 ec 95 f0 d0 a6 20 7b 55 86 6c 31 77 0b 10 bc 84 fe 65 d9 59 3d bb e8 e8 22 92 db 74 40 62 04 80 32 bc 11 82 e9 24 41 06 19 f2 2a 12 80 c9 a4 10 c4 9f 64 e3 5d 80 e9 9e 92 c0 c4 7f 80 fc 0d a8 81 8a 66 58 8e 17 89 25 52 99 20 57 18 28 55 6a 8d a1 91 b1 56 67 62 6a 66 6e a1 b7 b4 b2 b6 b1 75 65 e7 da de c1 d1 c9 d9 8d 5b fa c1 9e 03 47 4e 9c b9 70 e5 c6 1d 9c 07 04 4f 48 5e 50 d0 30 b0 70 f0 bc 11 10 f9 f0 e5 87 84 cc 1f 45 80 Data Ascii: hWe}\tY6"@`5zgJJ3\|@SSU14D&Q5%)<~4wFKJJ9!H;>Opps {Ul1weY="t@b2$A*d]fX%R W(UjVgbjfnue[GNpOH^P0pE
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 7c ab e5 28 49 4f 98 ef 4d 64 80 2d fd c7 56 80 7d e1 20 bc 44 13 63 4c 2d 50 43 70 ee 21 9c c8 61 23 d4 a5 a8 60 5a a6 59 a2 88 41 3a e8 4a a1 5c 72 da d0 e5 b8 d8 05 52 38 86 e3 9d 9d 94 26 2b a8 a8 cc 5e eb 89 37 bb a3 c2 98 cc 1a 90 13 2a dd 10 73 4a 94 61 08 e0 6d a6 bf 31 3f 2f cb 93 c2 3c a7 33 6d 52 9d 38 3a 83 66 26 54 9c ba 69 7b 43 2c 5e 28 a5 6c df 7c 0c 40 07 dd 9c 60 4a e5 94 ef 3c 6f c1 a3 30 26 d7 17 88 7c f4 8d ab e4 76 89 a3 61 41 cf 70 84 21 73 ea 74 b3 9e 8a 01 bf d5 13 fe eb a5 40 32 e0 d4 32 48 59 bd 62 a2 e3 2c 32 a0 86 d8 ed 6a ba 8f 97 7a 24 52 eb c9 19 a5 90 20 12 49 76 1b e3 8f da 08 f5 cd 0e a1 64 e8 10 6e db 2a 90 70 44 6e 1e e4 3e 40 31 fd e9 3e 2d ac e7 a1 d2 75 b1 51 77 97 26 35 e4 fb bb 28 01 20 59 b6 8c 86 2a 87 01 f4 87 Data Ascii: \|(IOMd-V} DcL-PCp!a#`ZYA:J\rR8&+^7sJam1?/<3mR8:f&Ti{C,^(l\|@`J<o0&\|vaAp!st@22HYb,2jz$R IvdnpDn>@1>-uQw&5( Y*
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: e8 f9 57 ae 2d a7 dc d9 14 50 cf 90 ae 4d dd 88 29 95 7b 26 fe cf a3 66 a6 ba 2f 52 7a 44 58 29 37 55 4f 08 cf 99 50 90 06 e2 98 81 79 5f 84 bc 14 d1 e6 56 e5 0b f5 25 eb b4 3a 63 e6 c1 4b 28 be ee 2a 9a d9 a2 f1 3d 83 ae ee 75 fa fd dd 7e c8 0b b3 9f 1d d3 68 2e 5e 1e 27 8d df 94 34 a4 f7 6c cd 8b 05 8c 0b 71 f8 20 31 b9 91 7c 8c 60 69 65 26 8c 8f d5 70 7e f0 a1 72 15 e4 e5 8a e9 ad 24 3d d0 43 79 4d 38 e6 55 86 c3 97 b4 5a 88 ea ee c9 47 89 a3 90 c7 2d 6d da 3f 49 d3 75 b4 98 c1 6c a0 68 8a e0 dd ba 0d 0d 56 99 e8 2d cc d2 91 58 1c a1 79 09 b4 27 3c 94 e8 6f 0d ac 2f f0 0d 3e 1c ee 7f 7f 64 de c5 1a 0d 52 da 94 12 cd 53 cb 3d c5 f3 30 91 da d2 e7 f6 fd ac 1d 90 36 73 32 96 08 7b 1a 60 33 0c 3f 67 cd 08 79 a7 7b 14 d0 8a 12 57 6a d1 3e 6e 19 9b b3 da 4d Data Ascii: W-PM){&f/RzDX)7UOPy_V%:cK(*=u~h.^'4lq 1\|`ie&p~r$=CyM8UZG-m?IulhV-Xy'<o/>dRS=06s2{`3?gy{Wj>nM
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: f2 7e f3 3d f6 da fb db bd 1e 0f 31 5e 7d 59 7a 3f 0f c8 90 d8 71 0a 38 c4 71 f2 97 78 a2 c8 18 a9 b4 2c 10 0b 5c 25 c2 b1 84 e8 d9 1c 9a cb 9d 02 54 de f2 17 9f d8 d8 30 73 ea fa e6 cb 36 37 c3 6c 0b 0a 97 13 e8 59 6f 87 b3 88 11 d6 60 d0 9c 23 96 54 af 3b fd 36 09 ce e9 d5 45 b9 19 5d 42 b5 8a 11 63 a3 79 e0 b6 d6 9d 1b 1b 9b 1b 81 a8 4b 2c b3 31 86 f6 70 a1 47 2e 73 be cb da 8d 10 e2 bb 3f 1a 1f d9 e8 4d 4a 2b 9b a9 7f 2f c7 9a 25 14 23 4d 52 a0 cd ed 8d 66 47 64 d0 9a 30 ba 69 cd d9 80 6b bf 12 ad 64 63 6f be a7 3a e7 d1 ac b3 3e da 15 d8 e9 d2 72 6d 0d 5c 2a c3 8e 9d 76 68 b2 33 d2 44 c9 da d2 0e 8c e1 bd 82 58 5e 87 18 d6 da ae 7e ae 8b 54 5a 40 1c c6 31 35 e0 ea a1 41 a1 6e a6 70 b1 72 40 85 37 30 a5 3b 2b dc 93 1e 26 be 37 c6 71 9a fa 5c 69 30 70 Data Ascii: ~=1^}Yz?q8qx,\%T0s67lYo`#T;6E]BcyK,1pG.s?MJ+/%#MRfGd0ikdco:>rm\*vh3DX^~TZ@15Anpr@70;+&7q\i0p
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: a1 72 fe 25 95 ba 74 87 e6 7f 4f ce 98 93 95 88 3b b6 3a 16 28 fd 66 2b 79 b1 ac a0 32 a9 f4 cf e4 f7 9d 17 0d 29 ee 21 09 21 3a 48 3d 7b 9c ad 9d 0f 87 a2 ef 63 81 e7 f9 b6 3e 5a 39 41 6c 30 d7 86 17 9a 6a 4b ff e9 15 52 09 1e e1 2e a9 d2 04 90 d3 23 0b 4a 77 40 ed 2d 76 7a 06 93 99 99 13 c5 ca c8 63 32 d3 d3 ce b8 35 2f 2f 4f 5d 0c 0d 48 4e 8a 68 8d 4b 96 14 03 0d 15 eb ef f4 67 d5 c6 54 44 9c 77 97 a7 b3 55 8d 14 15 27 14 c5 55 2b d3 2b 58 d5 4d 45 6b 1c 34 7e 33 32 c1 d4 05 12 21 83 ae 35 c4 4b ab b9 51 ec a9 f8 c9 aa 95 a9 15 72 6c 47 5e c7 39 07 9d 99 6b 24 15 49 5d 0b 4a a7 d8 aa 0e d5 26 d8 9c 2d 19 92 d7 af 8b 57 fd 08 09 1c df 16 0e 57 76 dc 20 fc fb 94 d4 1e 6b 21 2d 56 1c 6b fb d0 95 59 1a 55 16 a1 4f 79 d7 93 56 41 2f 0e 3b af 0d 62 36 b7 8d Data Ascii: r%tO;:(f+y2)!!:H={c>Z9Al0jKR.#Jw@-vzc25//O]HNhKgTDwU'U++XMEk4~32!5KQrlG^9k$I]J&-WWv k!-VkYUOyVA/;b6
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 48 f5 51 8b b2 9e ba ea ea cf 3d c3 84 53 5d 03 67 a3 32 c6 cf 79 fd 9b 77 9c ed 1a ee 16 78 3c 21 ab e0 24 dd 79 3a 43 62 fb d6 d4 31 94 78 69 1e 8a 31 a3 6b 04 fb c9 72 82 fb f1 c5 ad ea 1e 3b 0d 52 60 7f 95 46 d9 3e 93 b6 b3 ed 66 6f 3c db 30 74 58 fd 93 6b a2 9d 32 3a ca 97 7f 93 fc 66 42 f9 a1 dc fa c2 1d d8 71 95 95 e4 ab 75 fb 45 03 6a 59 5d e0 5e 4c 51 a8 c2 2e 73 5f 78 29 e8 59 63 e2 72 12 f8 73 96 3a fb 69 01 fc 99 6b 65 04 be f4 5c 72 5a a6 d8 df 1f 31 d1 46 61 f6 44 2b 65 b4 f7 41 65 3c 23 17 e3 46 55 30 06 f5 e4 be ed 4f f7 1b 8e fb 45 06 66 15 54 8b 18 21 e9 cd 65 69 de 86 cd f2 a4 ba b8 42 05 05 45 24 a8 d5 28 10 d7 e6 42 0f 29 0d 3d ec 82 a6 8b ad 30 92 f1 70 4c 89 37 3f 8e 9f 3d 96 5d 1c 57 8c 21 94 db c7 ff b1 c7 2c 93 8f b6 59 5d cc 2e Data Ascii: HQ=S]g2ywx<!$y:Cb1xi1kr;R`F>fo<0tXk2:fBquEjY]^LQ.s_x)Ycrs:ike\rZ1FaD+eAe<#FU0OEfT!eiBE$(B)=0pL7?=]W!,Y].

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49784	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	696	OUT	GET /ads/tpc-check.html HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1095	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 37 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 54 4f 4c 4a 45 50 59 4e 41 6a 4c 77 4d 4f 64 65 42 46 69 67 77 42 61 71 5f 30 47 4d 6e 2d 69 42 32 31 66 50 4a 2d 73 49 6a 78 78 64 2d 59 59 53 71 39 73 4c 64 50 6d 78 57 52 55 6e 31 6d 78 67 68 70 62 73 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 72 65 73 3a 20 46 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1371X-GUploader-UploadID: ABPtcPrTOLJEPYNAjLwMOdeBFigwBaq_0GMn-iB21fPJ-sIjxxd-YYSq9sLdPmxWRUn1mxghpbsCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpires: F
2023-12-05 18:13:25 UTC	1371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 43 6f 6f 6b 69 65 28 6e 61 6d 65 2c 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 78 70 69 72 65 73 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 64 61 74 65 2e 73 65 74 54 69 6d 65 28 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 33 30 30 30 30 30 29 3b 0a 20 20 20 20 20 20 20 20 65 78 70 69 72 65 73 20 3d 20 22 3b 20 65 78 70 69 72 65 73 3d 22 20 2b 20 64 61 74 65 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 Data Ascii: <!DOCTYPE html><html> <head></head> <body> <script> function setCookie(name,value) { var expires = ""; var date = new Date(); date.setTime(date.getTime() + 300000); expires = "; expires=" + date.toUTCString()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49790	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	676	OUT	GET /fonts/family/franklin/franklin-normal-600.75739ac267f076931c6da9740386ee6b.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1112	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 31 39 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 4c 79 45 61 71 43 76 44 4b 5f 2d 4b 77 4a 5f 39 62 4a 72 6b 6e 30 36 39 4f 4a 44 74 65 45 59 47 76 4c 42 49 67 6a 52 46 68 31 39 4a 50 51 43 63 69 33 36 38 6b 32 43 61 38 35 31 7a 54 6c 77 56 4f 61 79 31 42 70 79 6c 78 37 48 31 64 32 5f 54 73 6a 55 4d 6e 33 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 20196X-GUploader-UploadID: ADPycdvLyEaqCvDK_-KwJ_9bJrkn069OJDteEYGvLBIgjRFh19JPQCci368k2Ca851zTlwVOay1Bpylx7H1d2_TsjUMn3ACache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4e e4 00 10 00 00 00 00 d2 74 00 00 4e 83 00 01 00 c5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b d9 1a 1c 81 06 06 60 00 8b 76 08 3a 09 82 73 11 0c 0a 82 9b 0c 81 fc 21 01 36 02 24 03 88 08 0b 84 06 00 04 20 05 85 44 07 86 1d 0c 84 34 1b e6 bf 35 6c 9b 36 3d bb 5b 55 15 18 08 bc 03 ee b0 db 49 a4 82 a1 61 c1 38 36 09 e8 0e fe a4 45 4a d5 d9 ff ff 39 41 c6 18 fb 8d bc 3d 28 59 2a 18 04 83 24 12 4d a7 71 14 8a cc 98 35 99 5d 67 6a 5d d9 e8 97 9b 85 fb 62 6f ec c2 07 47 32 d0 49 2e b9 ed 1e fe e1 28 2c 38 8a da ac 6a 69 7b f9 bf b4 e1 ae ab 4e e9 ae 65 56 b0 0c e3 9f 47 a6 fe f7 53 ad cb b4 bc 91 68 07 b3 eb ee e1 77 78 1e f7 fc c8 66 ec d5 68 22 f1 e7 e0 c4 2f f7 ab 38 8a a3 ac 02 ca b1 39 35 92 95 93 27 5f Data Ascii: wOF2NtN`v:s!6$ D45l6=[UIa86EJ9A=(Y*$Mq5]gj]boG2I.(,8ji{NeVGShwxfh"/895'_
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 83 e2 a1 16 3c 15 81 1a 12 6a f4 69 a3 d7 11 09 12 89 42 a2 d3 e7 91 2e 22 e9 d3 86 2e 5f 06 62 8a d8 22 ae 88 ef 90 31 6d 81 b3 c2 d9 e0 84 84 08 e7 80 73 01 b9 d3 de b4 2f ed 2f 0d a4 83 89 fb e9 47 e9 a9 3a 44 e5 35 d0 7a ae 44 3a 14 b5 88 51 5c 42 52 aa ce 20 6d d8 b4 65 db 8e f7 f5 07 a0 8f 3e f9 5c d7 e0 ea 1a 9a 5a da 3a ba 7a fa 76 5f 7e 94 1e 06 37 c8 c3 f4 10 75 8e 01 15 96 ba 4c 72 bb 7a fa 8a ab 95 f3 50 07 6f 9e a8 07 27 88 ac de 59 45 71 94 46 39 5f 75 b1 e9 99 81 bf 58 09 07 c5 a2 99 49 4f 48 ba 31 ed cd fa 61 02 f6 d5 82 60 77 4a ef 67 1e 56 85 da f0 14 f5 f3 c4 8b b2 0e 16 d9 57 a2 48 31 88 4b 48 4a 8d a6 51 32 55 1b 36 6d d9 b6 e3 7d fd a1 f2 a3 4f 3e 7f 74 36 4f ca 1e d5 fe 4c fe 6a 3e 0a 01 43 d1 29 7d d6 d0 15 a6 8c 05 6e 9a 2f 31 56 Data Ascii: <jiB."._b"1ms//G:D5zD:Q\BR me>\Z:zv_~7uLrzPo'YEqF9_uXIOH1a`wJgVWH1KHJQ2U6m}O>t6OLj>C)}n/1V
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 50 63 01 38 00 1e c1 58 0e ac 4f 6c 24 d6 ce 5a 8f 40 07 8b 25 cf 2d 97 20 14 0a 85 42 a1 f0 bd 94 24 49 92 24 11 40 02 a1 5a 22 01 12 08 cf ba 06 24 10 42 89 56 ab d5 6a 4f 6e 2f 5f de 50 d5 59 23 33 38 0e c4 71 92 5e fb 80 c5 f4 98 66 12 03 38 59 39 01 3c 16 01 c6 7d df ed 0f e3 d2 bc 15 98 b5 0a 0b 66 5a 8a 4b 48 4a 75 c2 87 e3 38 8e e3 b8 0f 3e f8 d0 60 b4 5a 5d 0f 1b 2b 20 ca 6e 95 84 47 6e 91 e5 17 9f eb d0 e8 d5 74 47 1b e5 09 85 3c a1 10 c0 3e 9b c6 22 70 26 f1 18 c6 5e e5 a1 77 2d 52 ac 1d b0 99 d9 b2 1c 59 41 88 69 d8 25 1c 4b ce 70 49 76 33 25 82 35 e4 bf 35 58 98 1f 20 3c eb 2b 87 fe b9 87 5e 77 34 9c bb 1e 44 30 22 62 96 50 28 14 0a 85 42 0c 52 6d a9 00 e9 dd 9a 74 32 c2 ad 98 88 88 b7 28 b7 62 58 e5 62 9b 58 2b 1b fb 1a b2 2c ec 44 e8 5d 1d Data Ascii: Pc8XOl$Z@%- B$I$@Z"$BVjOn/_PY#38q^f8Y9<}fZKHJu8>`Z]+ nGntG<>"p&^w-RYAi%KpIv3%55X <+^w4D0"bP(BRmt2(bXbX+,D]
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 87 46 ef 46 50 58 50 70 e1 d5 0e c9 50 22 da 5c 17 cd 39 0a c8 bd 17 8f 32 f9 b2 d8 04 ce 07 be 12 f0 c6 f6 74 0f 86 9a 9d 56 45 11 60 f6 32 fa 6f 8a ae 34 5b 29 ba 26 e4 74 5b 1e 04 16 00 d0 16 1c 78 00 cb 13 44 a1 a8 3f 10 00 4b 13 12 c4 2f 88 c6 67 00 96 f7 94 80 54 5f d3 f8 07 50 15 24 45 73 18 2e cb e3 0b 84 22 b1 44 2a 93 2b 94 2a 1d 5d b5 46 4f df 40 6b 68 64 6c 62 cf d4 cc be b9 85 03 4b 2b 6b 1b 5b 87 8e 1c 3b 71 4a 57 b8 70 75 80 1b 18 77 1e e0 10 90 50 d0 30 b0 70 f0 3c 79 f1 e6 c3 97 1f 7f 01 08 88 02 91 04 09 16 22 54 98 70 11 22 91 45 89 06 78 54 8f 3e 03 c6 1c 75 cc 09 0b 16 9d 72 d2 69 67 9c b5 ec 9c f3 56 5c b0 ea a2 4b ae b8 ec aa eb ae 59 77 d3 2d 1b 18 6a e4 2b 50 2c 4d a3 e3 aa 94 e2 68 50 e2 af 5e d3 76 d4 fa 17 5c 01 f0 4b 80 5f 7b Data Ascii: FFPXPpP"\92tVE`2o4[)&t[xD?K/gT_P$Es."D+]FO@khdlbK+k[;qJWpuwP0p<y"Tp"ExT>urigV\KYw-j+P,MhP^v\K_{
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 9b 09 8f 82 b2 41 09 75 d4 95 79 3c cd 96 ab 02 4d fc ee d5 cf 5e b5 28 92 ba 93 57 2d 7b b6 97 05 82 8c 3c ad 91 97 3b 1b 5c 5a a8 7e c2 67 34 d1 e2 05 48 20 8b ec 3a 0a 97 eb ba 84 1c 28 48 04 9f 25 59 73 e7 5a b4 ee bf b7 9c 8e ed 22 9d 75 2a 33 63 49 86 09 9a 59 b9 62 0e f0 f7 ff 5b ea bf 4f d1 14 0e 4c ed 8a 5e 5d 50 0e 9c e1 10 51 17 fd f6 76 e8 76 8b c5 18 ad d9 cf 5c 1c 4f 80 18 09 11 31 6c f0 35 52 60 88 02 bf 00 82 f6 ea 07 f8 fb 6f 48 83 60 e9 01 d6 86 77 3d b1 03 40 63 8b f3 b7 de c7 60 89 86 60 e4 f6 4a 49 02 fd a2 c7 c3 b5 f5 a5 65 64 1e 4f 1f 20 eb 31 69 46 69 8d b7 15 65 a3 ea cc 98 40 9e 26 8d b5 ba f9 35 5e 89 be 20 a0 b5 e9 64 ac ba ca 27 19 e8 59 d2 36 ff 00 5c 97 46 d6 1a 3e 7a 5d 89 95 15 3d 53 51 84 c0 6c 53 b1 f9 50 80 8d 78 8e f8 Data Ascii: Auy<M^(W-{<;\Z~g4H :(H%YsZ"u*3cIYb[OL^]PQvv\O1l5R`oH`w=@c``JIedO 1iFie@&5^ d'Y6\F>z]=SQlSPx
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 21 37 83 d5 c7 de 1c c8 f4 38 31 e2 04 f4 cc 95 eb 01 9b a9 d9 c9 4a 4d 7b 7c 74 4f 65 74 e8 37 5d 22 b1 4b d0 ad 60 64 df 25 e4 e5 65 7a e3 be 11 30 fc b9 62 56 fd ae 5c 59 6b 4b 6f 16 bf 60 c8 3b b7 e1 19 a7 72 63 aa ce ab e5 b1 d9 39 3c 58 44 98 4f c5 07 df 1b 99 d5 6e ed a1 2c 4c a6 8c 7e e0 c8 ac 9d 9c 3f f2 e0 ce 68 50 a6 4a fa 8a d3 34 d2 7c 9a c3 0d 5a 9b 51 c6 a3 f1 c6 71 ce e7 f9 f9 6c 8d f7 70 ee 8d fb 17 7d da e3 72 1d ea 54 a9 96 70 a0 01 df 5a fc 5e b6 a6 dc 11 9f 29 8b eb 30 c9 ec 41 7d 89 23 f8 60 41 a0 f3 b0 c8 fa dd ca 7c 6e f7 de 05 0d 0f 6b 88 a4 c8 14 2a 81 8c 8a 9d e4 b8 cf 3a 1c 90 e4 26 32 72 e3 45 66 e9 1c 81 4e e2 76 ae 94 54 dc 51 89 53 e7 0c e9 61 e2 cd 14 4e 5d 3c 26 1b 2f b0 49 72 bd 12 98 88 86 77 ff d5 4c 5b 51 3b 99 7b 4a Data Ascii: !781JM{\|tOet7]"K`d%ez0bV\YkKo`;rc9<XDOn,L~?hPJ4\|ZQqlp}rTpZ^)0A}#`A\|nk*:&2rEfNvTQSaN]<&/IrwL[Q;{J
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: f9 9d 6b 69 39 a5 87 8b b2 6a 2b 59 9b 7a 26 55 fe a6 ae a2 8e fb 4f fd c7 2a 2e 45 6b be bd ec fe 1e 4f af df 71 41 02 79 2e 88 bf 77 7a e2 8c 10 1b 77 e6 c6 e6 5c 4b f2 3e 83 38 24 31 23 97 05 01 48 fc a9 f9 1d 23 fd fd a9 d5 1f f1 7b 19 65 55 58 5c 94 40 39 8e b0 c6 98 48 00 78 f9 75 a1 2c 87 e3 41 11 4b 17 fe 1d 07 24 8b f0 64 7a 74 48 05 1b 5c fa d8 c1 f8 8c d8 2a 48 b8 57 5e 41 3e 08 7d 31 d9 6a 8e a1 7b a4 00 9d 47 7d de 67 0b f7 0b f7 93 a6 7a 90 ba 03 f0 9c c6 93 cd 5f 95 e2 16 09 79 18 08 4d a7 66 ba c9 a9 5c dc 4b 4d f7 ad 61 d9 19 d4 bd ff 93 8d ff d2 6e be 0a b1 48 a1 43 b3 f6 9d 0a 1d 21 a9 79 8e c6 07 ea 42 17 4f 79 74 b8 19 83 d1 12 36 91 26 63 78 37 df b0 03 26 21 16 3f 0e f8 38 2e 90 82 bd a8 70 7b 1a f6 92 b5 21 4f ab 8d a7 90 95 ff 21 Data Ascii: ki9j+Yz&UO.EkOqAy.wzw\K>8$1#H#{eUX\@9Hxu,AK$dztH\HW^A>}1j{G}gz_yMf\KManHC!yBOyt6&cx7&!?8.p{!O!
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: eb 51 f7 0b 32 0d b1 86 a1 22 c9 a8 3d 43 be 64 17 06 6c 28 7d a7 8c a4 44 b2 68 7e 7c e2 ac b9 bf 5c 5c c1 8e 8a e9 13 8a 8d d4 94 e8 28 37 b7 4e e1 d8 de 6f e1 d2 34 68 18 33 46 1b a7 e7 ec 63 ef 42 c9 08 d6 89 b4 24 d6 04 34 bd 5c bd 4c ed b3 b7 a4 e6 59 68 ee bd e3 36 62 71 76 44 fb 48 a1 40 d9 91 6a 23 af 3e 5c f1 a3 30 1a 3d 2c 84 11 1f 12 12 9b 10 1c 4e a3 2d b9 a7 af ad 7d 5c c6 e3 62 c2 bd 0b c3 35 3f ed 00 22 74 47 47 a0 37 ab 86 56 18 a2 87 f3 93 8c 66 a8 2a 81 40 bb a0 8f 55 8f bf 3c c6 81 95 40 10 6f 5d b6 b7 77 b6 39 4a 8b 25 f2 62 ee 60 90 a0 94 35 de ca c7 de d7 1a 61 7a 28 76 48 44 ea e7 a1 13 c8 51 6a 38 5d 1f be 31 fe f1 b8 28 ee 3e d7 6c b5 84 1d d0 db 2e c1 43 d9 65 d4 4a 2a 98 f4 b1 37 ab 8a 92 1d ae 85 16 93 63 18 6d 7c bc 88 72 8f Data Ascii: Q2"=Cdl(}Dh~\|\\(7No4h3FcB$4\LYh6bqvDH@j#>\0=,N-}\b5?"tGG7Vf@U<@o]w9J%b`5az(vHDQj8]1(>l.CeJ7cm\|r
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 0d ab 78 75 4c 8c 13 a3 61 10 3e f8 e6 dd 20 ed ef 07 87 de fe 68 0d be 7d 07 c0 07 b9 a7 2a 4e a9 96 40 b8 a7 b2 6f 01 a7 54 4d 39 65 79 d2 d9 cc cc 00 c3 e7 25 62 2f 40 86 8e a6 39 e2 d9 71 d9 81 16 68 1d 30 cb 59 d1 e8 7d a2 33 94 27 b7 18 2a 65 96 68 e6 98 68 26 6f 16 0c 5e 2c 08 93 0e 93 e6 04 64 c7 93 13 33 fd 06 a5 ec 02 23 3d 63 2a c9 20 1b 90 5d 25 59 39 fe fc 0f d5 f3 3d dd 13 ec 94 c2 b4 d5 a1 20 fb c0 5b 47 97 d3 e6 83 3d f0 6e 5e 47 48 89 f7 a4 ad f6 fe db c3 ee a4 cc 84 b9 79 bb e1 26 c8 89 45 4b 4c af b6 a0 63 b8 8d cb a5 b1 37 87 78 94 cd ea b2 d8 3b 90 ba 0c 8f d7 81 54 3a 2f ad 9a b5 70 5a aa fc a6 c8 b0 a4 b9 fc 79 71 a1 51 5e 5e de 18 5a 2a 7b d8 48 27 67 76 b6 0e f4 ae ea dd 3c f8 81 f4 e6 d2 1d c3 d3 6a 6b 55 6b ed 72 47 66 c0 85 9b Data Ascii: xuLa> h}N@oTM9ey%b/@9qh0Y}3'ehh&o^,d3#=c* ]%Y9= [G=n^GHy&EKLc7x;T:/pZyqQ^^Z*{H'gv<jkUkrGf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49780	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	1137	OUT	GET /ads/prebid8.1.0.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:25 UTC	1359	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 38 38 34 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 79 63 2d 4a 6e 6b 50 48 55 56 78 44 63 47 52 75 46 61 61 46 51 74 57 68 68 69 7a 44 33 49 63 46 44 2d 76 59 47 39 4a 32 4d 30 61 7a 6e 67 4f 48 70 32 50 42 71 47 4d 64 49 75 44 32 30 70 62 44 47 41 5f 77 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 72 65 73 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 308841X-GUploader-UploadID: ABPtcPoyc-JnkPHUVxDcGRuFaaFQtWhhizD3IcFD-vYG9J2M0azngOHp2PBqGMdIuD20pbDGA_wCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpires:
2023-12-05 18:13:25 UTC	600	IN	Data Raw: 78 2d 6e 79 74 2d 72 6f 75 74 65 3a 20 61 64 73 2d 73 74 61 74 69 63 2d 61 73 73 65 74 73 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 Data Ascii: x-nyt-route: ads-static-assetsContent-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data:
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 31 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 33 2d 30 36 2d 32 33 0a 4d 6f 64 75 6c 65 73 3a 20 61 70 70 6e 65 78 75 73 42 69 64 41 64 61 70 74 65 72 2c 20 69 78 42 69 64 41 64 61 70 74 65 72 2c 20 6d 65 64 69 61 6e 65 74 42 69 64 41 64 61 70 74 65 72 2c 20 6f 70 65 6e 78 42 69 64 41 64 61 70 74 65 72 2c 20 70 75 62 6d 61 74 69 63 42 69 64 41 64 61 70 74 65 72 2c 20 72 75 62 69 63 6f 6e 42 69 64 41 64 61 70 74 65 72 2c 20 74 72 69 70 6c 65 6c 69 66 74 42 69 64 41 64 61 70 74 65 72 2c 20 65 6e 72 69 63 68 6d 65 6e 74 46 70 64 4d 6f 64 75 6c 65 2c 20 67 70 74 50 72 65 41 75 63 74 69 6f 6e 2c 20 73 69 7a 65 4d 61 70 70 69 6e 67 56 32 20 2a 2f 0a 69 66 28 77 69 6e 64 6f 77 2e 70 62 6a 73 26 26 77 69 6e 64 6f Data Ascii: /* prebid.js v8.1.0Updated: 2023-06-23Modules: appnexusBidAdapter, ixBidAdapter, medianetBidAdapter, openxBidAdapter, pubmaticBidAdapter, rubiconBidAdapter, tripleliftBidAdapter, enrichmentFpdModule, gptPreAuction, sizeMappingV2 */if(window.pbjs&&windo
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 66 3f 6f 28 29 3a 28 74 68 69 73 2e 63 6d 64 2e 75 6e 73 68 69 66 74 28 6f 29 2c 28 30 2c 72 2e 42 29 28 74 2c 63 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 43 6f 6e 74 65 78 74 29 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 65 2e 75 72 6c 26 26 21 65 2e 72 65 6e 64 65 72 4e 6f 77 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 3b 65 2e 63 6f 6e 66 69 67 26 26 65 2e 63 6f 6e 66 69 67 2e 64 6f 63 75 6d 65 6e 74 52 65 73 6f 6c 76 65 72 26 26 28 72 3d 65 2e 63 6f 6e 66 69 67 2e 64 6f 63 75 6d 65 6e 74 52 65 73 6f 6c 76 65 72 28 6e 2c 64 6f 63 75 6d 65 6e 74 2c 74 29 29 2c 72 7c 7c 28 72 3d 64 6f 63 Data Ascii: f?o():(this.cmd.unshift(o),(0,r.B)(t,c,this.callback,this.documentContext))}.bind(this)}function d(e){return!(!e\|\|!e.url&&!e.renderNow)}function f(e,n,t){var r=null;e.config&&e.config.documentResolver&&(r=e.config.documentResolver(n,document,t)),r\|\|(r=doc
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 55 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 67 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 6f 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 78 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 72 3d 22 61 63 63 65 73 73 44 65 76 69 63 65 22 2c 69 3d 22 73 79 6e 63 55 73 65 72 22 2c 6f 3d 22 65 6e 72 69 63 68 55 66 70 64 22 2c 61 3d 22 65 6e 72 69 63 68 45 69 64 73 22 2c 75 3d 22 66 65 74 63 68 42 69 64 73 22 2c 63 3d 22 72 65 70 6f 72 74 41 6e 61 6c 79 74 69 63 73 22 2c 73 3d 22 74 72 61 6e 73 6d 69 74 45 69 64 73 22 2c 64 3d 22 74 Data Ascii: on(){return o},UE:function(){return u},e:function(){return s},g0:function(){return f},oK:function(){return d},x$:function(){return c}});var r="accessDevice",i="syncUser",o="enrichUfpd",a="enrichEids",u="fetchBids",c="reportAnalytics",s="transmitEids",d="t
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 72 65 74 75 72 6e 20 6c 7d 2c 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 68 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 2c 6a 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 7d 29 3b 76 61 72 20 72 3d 74 28 37 31 30 30 32 29 2c 69 3d 74 28 39 33 33 32 34 29 2c 6f 3d 74 28 32 30 32 36 35 29 2c 61 3d 74 28 33 31 39 33 29 2c 75 3d 74 28 35 30 35 37 31 29 2c 63 3d 74 28 37 34 39 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 74 29 7b 69 66 28 41 72 72 61 79 2e 69 Data Ascii: return l},a:function(){return m},hb:function(){return E},js:function(){return b}});var r=t(71002),i=t(93324),o=t(20265),a=t(3193),u=t(50571),c=t(74947);function s(e,n){var t="undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(!t){if(Array.i
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6e 28 29 7b 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 74 5b 72 5d 3b 69 66 28 6d 28 6f 29 26 26 69 28 29 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 67 65 74 28 6f 29 3b 76 6f 69 64 20 30 3d 3d 3d 61 3f 64 65 6c 65 74 65 20 74 5b 72 5d 3a 74 5b 72 5d 3d 61 7d 7d 7d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 61 74 68 73 3d 65 2e 70 61 74 68 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 74 3d 6e 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 5b 6e 2e 6c 65 6e 67 74 68 3e 30 3f 6e 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6e 75 6c 6c 2c 74 5d Data Ascii: n(){},run:function(e,n,t,r,i){var o=t&&t[r];if(m(o)&&i()){var a=this.get(o);void 0===a?delete t[r]:t[r]=a}}},e)}function v(e){return e.forEach((function(e){e.paths=e.paths.map((function(e){var n=e.split("."),t=n.pop();return[n.length>0?n.join("."):null,t]
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 3b 72 65 74 75 72 6e 5b 7b 6e 61 6d 65 3a 63 2e 6f 4b 2c 70 61 74 68 73 3a 66 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 6f 4b 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 65 2c 70 61 74 68 73 3a 6c 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 65 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 67 30 2c 70 61 74 68 73 3a 67 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 67 30 2c 65 29 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 28 65 2b 4e 75 6d 62 65 72 2e 45 50 53 49 4c 4f 4e 29 29 2f 31 30 30 7d 7d 2c 7b 6e 61 6d 65 3a 63 2e 4a 74 2c 70 61 74 68 73 3a 5b 22 73 6f 75 72 63 65 2e 74 69 64 22 5d 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 4a 74 2c 65 29 7d 5d 2e 6d 61 70 28 70 29 7d 76 61 72 20 45 3d 66 75 6e 63 74 69 6f Data Ascii: ;return[{name:c.oK,paths:f,applies:b(c.oK,e)},{name:c.e,paths:l,applies:b(c.e,e)},{name:c.g0,paths:g,applies:b(c.g0,e),get:function(e){return Math.round(100*(e+Number.EPSILON))/100}},{name:c.Jt,paths:["source.tid"],applies:b(c.Jt,e)}].map(p)}var E=functio
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 6f 2c 61 3d 21 30 2c 63 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 74 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 61 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 61 7c 7c 6e 75 6c 6c 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 Data Ascii: o be iterable, non-array objects must have a [Symbol.iterator]() method.")}var o,a=!0,c=!1;return{s:function(){t=t.call(e)},n:function(){var e=t.next();return a=e.done,e},e:function(e){c=!0,o=e},f:function(){try{a\|\|null==t.return\|\|t.return()}finally{if(c)
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 72 28 73 2e 73 28 29 3b 21 28 63 3d 73 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 66 3d 28 30 2c 72 2e 5a 29 28 63 2e 76 61 6c 75 65 2c 33 29 2c 6c 3d 66 5b 30 5d 2c 67 3d 66 5b 31 5d 2c 70 3d 66 5b 32 5d 3b 69 66 28 69 21 3d 3d 6c 26 26 6f 29 62 72 65 61 6b 3b 69 3d 6c 3b 76 61 72 20 76 3d 75 28 65 2c 67 2c 70 2c 6e 29 3b 69 66 28 76 29 7b 69 66 28 21 76 2e 61 6c 6c 6f 77 29 72 65 74 75 72 6e 20 64 28 76 29 2c 21 31 3b 6f 3d 76 7d 7d 7d 63 61 74 63 68 28 65 29 7b 73 2e 65 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 73 2e 66 28 29 7d 72 65 74 75 72 6e 20 6f 26 26 64 28 6f 29 2c 21 30 7d 5d 7d 28 29 2c 73 3d 28 30 2c 72 2e 5a 29 28 63 2c 32 29 2c 64 3d 73 5b 30 5d 2c 66 3d 73 5b 31 5d 7d 2c 38 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e Data Ascii: r(s.s();!(c=s.n()).done;){var f=(0,r.Z)(c.value,3),l=f[0],g=f[1],p=f[2];if(i!==l&&o)break;i=l;var v=u(e,g,p,n);if(v){if(!v.allow)return d(v),!1;o=v}}}catch(e){s.e(e)}finally{s.f()}return o&&d(o),!0}]}(),s=(0,r.Z)(c,2),d=s[0],f=s[1]},875:function(e,n,t){t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49786	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	680	OUT	GET /fonts/family/cheltenham/cheltenham-normal-700.530cfb72378419eedb60da7e266ad5f1.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1113	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 32 37 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 35 64 42 62 63 59 68 50 44 75 58 78 6f 59 50 74 48 4c 62 6b 6f 35 70 4b 68 71 36 65 71 4b 6b 6a 2d 39 68 39 45 44 69 34 63 4a 74 51 63 33 4e 77 47 41 7a 33 55 47 2d 72 58 7a 41 2d 69 4c 75 71 41 32 5a 53 71 61 6d 37 31 78 45 65 63 34 33 76 54 62 36 56 4e 33 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 28276X-GUploader-UploadID: ADPycdv5dBbcYhPDuXxoYPtHLbko5pKhq6eqKkj-9h9EDi4cJtQc3NwGAz3UG-rXzA-iLuqA2ZSqam71xEec43vTb6VN3ACache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6e 74 00 11 00 00 00 01 10 f0 00 00 6e 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b b7 04 1c 81 06 06 60 16 8b 60 00 89 42 08 3a 09 82 73 11 10 0a 83 b0 58 82 ec 14 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 85 10 07 86 2b 0c 84 6c 1b 81 eb 47 c2 6e bb 91 97 7c ea 0d 9c ed ed b5 53 97 50 01 e7 24 5f 6e 07 d7 b1 82 7f b7 46 06 82 8d 03 42 1e f6 ca d9 ff ff ff 79 49 23 0e bd e4 5f 72 f7 80 ea e8 ba 71 89 da 91 89 95 91 30 cc ec cc d2 1c b6 15 8e b1 38 52 29 34 ae 7c 5b f7 01 47 c8 22 1e 54 a2 d2 54 4e 45 be f6 0b 6b 2a 8a 3a a5 39 6c a2 5d 66 b6 5b df 8b 79 8a 96 bd c7 8f f8 fd c0 81 be 45 45 a5 10 13 13 6e 70 1a cc eb f8 80 5a 96 ee a3 e9 60 33 7c 3a 55 b7 6a 2b fe db 29 bb 65 db 43 ea 7e 39 b1 Data Ascii: wOF2ntn``B:sX6$ +lGn\|SP$_nFByI#_rq08R)4\|[G"TTNEk*:9l]f[yEEnpZ`3\|:Uj+)eC~9
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: cf bf 91 0e 53 ab ce 04 57 fa 58 ec ad 9e 6f bc 23 eb 0d d6 41 59 5d dd bd fd ea 57 64 c3 02 5a 1e 7a 1f e6 65 2d c0 90 b0 48 d8 13 f8 19 44 33 b2 07 b9 07 05 40 85 a2 d0 28 2a 2a 1e 95 8e ea 41 6d 45 bd 43 fd 42 03 d0 7c b4 1d 3d 15 3d 0f dd eb 51 fc 22 0c 11 58 87 0d 6c 07 75 51 0f f7 f1 c1 8e 85 87 00 35 1c 05 67 e8 b3 34 a6 78 57 f8 50 d0 d0 d7 84 1b c2 fd f0 5c 52 9f c2 af 28 29 6a 8a ba a2 29 0c 14 43 85 0a 42 a9 85 51 d2 e8 57 55 ae 84 bc 1a 7d 05 40 5e 8f be 76 91 2f 50 c1 23 c2 d3 85 a7 0f cf 10 de 62 eb fd 12 1e 60 02 77 41 1f 1c 4d 35 4e b0 93 c2 74 70 27 85 d3 02 86 09 a8 a3 f5 f4 6d d6 00 ef 08 6e c1 23 78 79 5a f0 61 3f 2e e1 1a ae e3 3e fb 0b 1c e0 21 56 39 86 26 f0 ad 90 de 45 79 79 e0 34 ad e4 7a df 45 f6 30 10 e5 f9 89 51 d6 b9 f0 cd 80 Data Ascii: SWXo#AY]WdZze-HD3@(**AmECB\|==Q"XluQ5g4xWP\R()j)CBQWU}@^v/P#b`wAM5Ntp'mn#xyZa?.>!V9&Eyy4zE0Q
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 92 a4 28 25 49 a3 4c d4 2c 9b 53 30 7c 33 2b e2 c4 bc 48 d0 4f 24 49 d2 bc c2 58 94 39 b7 c5 f2 df 57 41 8d aa 33 43 d4 03 a3 3f d1 5f a4 01 35 9c c3 6d 2b 5e ca d6 9d 67 b3 39 e3 79 3e 5b 9d 4e 2f ae 72 75 0f 54 58 5c ca 93 2a ea 9e 4e 34 82 a0 0b bd 4b df 41 0d a6 10 95 d7 05 cc 5d e6 78 6f af f6 21 d4 11 3b 3a 1c ab d5 14 d2 fb f4 6a ff 53 2f b6 de bd 49 dc cf 7f da d4 64 f3 41 16 7b d9 52 90 e5 20 9f b5 5e 3a b8 4c 17 cb f6 61 5f 44 f6 55 64 df 44 ba 80 5f d5 2d 54 bf 50 7f 47 36 02 04 b7 18 16 1d dc cf 0d ae 24 9f b8 e8 5b ae 37 02 0a 76 b3 05 70 5b 3b ea 57 46 30 e4 82 8c 63 fc c7 b6 ea 43 c5 bc 7b fa 30 ca 44 5d d5 3c d5 79 3f 72 35 d9 30 bb ea ea ee 65 1e a3 a3 5a fd 5c 01 2e f5 96 bb 9d ca 71 1a a6 8d fe 9b fd b5 c0 ca c6 31 49 fa 15 f0 3f 28 24 Data Ascii: (%IL,S0\|3+HO$IX9WA3C?_5m+^g9y>[N/ruTX\*N4KA]xo!;:jS/IdA{R ^:La_DUdD_-TPG6$[7vp[;WF0cC{0D]<y?r50eZ\.q1I?($
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: f4 5f 8f 0d 4c 0c 4d 8d 3a 33 7e 35 37 b1 30 b5 34 d3 95 3c 85 97 6b 02 da 58 a2 ad 15 db 21 bc d8 13 d0 c1 16 41 3b 86 10 9e 63 02 22 20 3a 86 d8 09 c2 b3 53 02 3a 73 8c ce 9d b0 0b 84 a7 97 04 74 e5 1c 5d bb 60 37 08 4f 6e 09 e8 ce 35 ba 77 c3 1e 10 1e 3f 12 d0 93 7b f4 ec 81 bd 20 3c 7a 25 e8 de d0 bb 67 f6 d1 0a 0f db 51 39 01 55 a0 04 55 2a 65 55 08 e2 1d d5 04 54 a3 02 d5 aa 64 75 08 eb 57 f5 04 d4 a0 06 35 aa 65 4d 08 eb 17 cd 04 f4 57 03 fa a7 91 fd 47 58 47 4c 04 24 e2 a6 1f 60 5e 94 38 a9 93 93 1a 8a 9d bc bc e9 b2 54 0f d0 e9 81 43 00 c0 1c 6e 96 3a e5 9a 17 30 a2 02 ff 89 a4 13 bd 22 3a 62 23 21 96 c6 ce cc ce 07 f9 28 3f e6 e7 ba 79 5e 05 07 bc 08 82 23 86 14 32 10 38 7f c1 83 95 d8 38 ae e6 0e ee e5 41 9e e3 5a 3e 39 7a f4 4a fa 95 eb 57 b2 Data Ascii: _LM:3~5704<kX!A;c" :S:st]`7On5w?{ <z%gQ9UU*eUTduW5eMWGXGL$`^8TCn:0":b#!(?y^#288AZ>9zJW
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 79 b1 8e 2a f0 42 dc 22 19 e0 49 7d c0 04 02 94 41 05 33 a2 09 09 33 23 6f 9c 3b 27 f0 fc b3 d8 d1 d3 db 20 59 e9 8e 84 4d 38 05 bf ff 4d 29 0a 19 41 0c 46 f4 f7 65 de de 83 37 dc 7b 4e 8c c6 75 ee ea 83 07 20 b9 8f ff 71 0a a6 ca 74 4d 72 57 77 15 72 03 e1 69 0c 3d d7 c4 bc b9 61 d0 69 34 c3 e1 af ef 21 ce 92 b3 28 d5 a2 28 b3 a7 77 b8 eb 59 1e fc a2 45 50 01 4f c2 0f 2f 1c 6a f1 54 6f 25 bb ab 50 ed db 5b e1 26 92 85 cc f2 91 70 c9 f7 d7 f6 8d 2b ca e6 9a 7e 14 db 71 8d 93 7b 7c ba 04 7d e4 e3 86 0f 9e 74 c1 02 88 f6 48 7f 7b 57 2c db 1d da 67 ee e4 f1 f3 5e c1 c4 72 27 4f ae 68 4c 83 ad da 40 86 88 39 a6 49 4e c9 b1 8b a5 00 97 c3 fc 89 36 54 98 41 7c 81 35 2a 56 e3 19 57 09 22 a9 99 b6 d0 fd 8a 2b 53 2e 1e 1e a3 bb e4 45 d4 9e 77 d5 b1 24 5b a2 56 47 Data Ascii: yB"I}A33#o;' YM8M)AFe7{Nu qtMrWwri=ai4!((wYEPO/jTo%P[&p+~q{\|}tH{W,g^r'OhL@9IN6TA\|5VW"+S.Ew$[VG
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 05 16 c8 83 99 c2 8a cf fa ce 06 13 77 7a c3 8e 98 98 73 c7 44 0c 79 f3 78 17 34 9a 2c 1f 5f 2b 5e a8 fb 1d 6d e6 92 b7 a5 ef c6 e8 05 99 3d c8 f7 a8 7a e2 da fd 82 6e 23 9a 06 27 4c c8 03 b4 b2 db 44 7d 49 37 d8 9a b0 21 a8 c2 6d cc 8a 83 9e 53 a3 7a 49 13 ae a5 16 be d0 50 5e df 9a 3a cf ec 58 91 a0 58 8f 95 02 4c 98 eb a6 01 75 43 01 3e ec 6f f2 f1 c9 60 44 45 4f a3 d0 4e db 45 ea 52 ce 70 37 fd c9 2c 84 22 a5 86 d9 1e 51 6a 18 52 80 c6 00 be 86 99 80 ef 92 0b 9d 9a 27 85 b3 b7 0a c5 fb 6a 49 c8 82 a2 54 0f 4e 66 89 3a 1a e5 ef 71 e7 1c 7c 8c 06 f1 47 30 f7 38 20 19 84 2d 57 28 5c ea 3e f3 50 52 ac 48 38 37 bb 16 d9 b3 11 bb c3 df 5d df 76 4e ed 05 4c 3a a5 53 fe a2 93 90 bd ba dd 3e 6f 63 3a 23 fb 5a 80 f0 fa b3 55 26 6e 0a ea b4 ba b2 7c 2a ef f5 79 Data Ascii: wzsDyx4,_+^m=zn#'LD}I7!mSzIP^:XXLuC>o`DEONERp7,"QjR'jITNf:q\|G08 -W(\>PRH87]vNL:S>oc:#ZU&n\|*y
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 2d e8 36 f9 e6 aa da 75 c9 bc dc 18 e7 82 cd 5a af ae 52 08 1d cf d3 74 51 38 07 f4 9e f3 e5 e0 dd 7c 7d 05 42 d5 34 4e 4d c2 ca 28 7a e4 73 6d 2c e9 b5 ff 0d d0 b0 b0 34 82 64 30 f0 9f 89 6e 19 89 6a 95 a6 2b 91 f0 68 de d8 31 69 07 43 56 c9 47 7a 21 d0 04 aa e6 8d b5 36 37 1d b9 72 4a 3c fa 6a 1b b8 fb 73 ee 8b 0e 00 4c b0 11 b5 6c 3c 6e 78 df 01 44 74 30 59 c2 65 31 4d 40 9e 5d 85 ba a4 f1 c8 f0 90 4f 9b 49 ed 18 43 9a a6 f6 bd 58 aa 0b ed ef e0 05 67 5a 1d 38 6b 6c 60 15 21 18 9f 98 5e 37 6f d3 d8 e8 2f 74 bc 25 69 b4 40 35 d7 df 3e 02 79 51 d9 31 73 bb 8c 9c 32 de 50 a0 b1 d4 ef a2 bc 94 1c 59 bd 60 bd e6 2b 14 a4 bb 0c 4a 24 e4 c1 57 d0 f7 47 17 30 66 c0 fb 05 93 03 39 c3 cb 23 03 ed 6c fd c3 e4 cd 0c 80 62 2d 60 1e 83 0a 66 62 a3 75 b8 8d a7 74 cd Data Ascii: -6uZRtQ8\|}B4NM(zsm,4d0nj+h1iCVGz!67rJ<jsLl<nxDt0Ye1M@]OICXgZ8kl`!^7o/t%i@5>yQ1s2PY`+J$WG0f9#lb-`fbut
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 0b 30 11 eb 1b 81 48 ca 2b cf 1b 45 f0 17 bf aa 96 69 8c ab 65 8d 12 26 08 0e a6 e2 20 12 67 fb 26 8f ec 68 4f 80 f4 d1 fd f4 85 6b 4e 80 41 ef 22 70 fc a3 35 79 f1 16 ab ce 1e 6a 0c ed ef f9 99 b5 5b 86 f9 97 f2 06 94 fd 5e b3 e4 fa 57 79 46 8d 7f a1 32 6b 0a 37 b1 83 d3 5c 7f c4 8a 47 5a d1 1e 58 de 0a d3 46 e4 16 9b b2 74 21 ca 07 86 34 1b 9d de e0 3b 22 47 b5 22 e1 ac b3 4b 22 08 dc bf b5 c8 1a c7 10 3e b7 72 dc 93 6d b4 71 f3 b8 d3 0a 2e b4 cd 15 8c 73 db ef 5b f7 1f a4 a1 0b 16 ce ff 34 1d 67 2e 6b f6 e9 e3 c7 ef 53 b8 20 dc 9d 66 69 8b 4c 37 36 10 d3 24 7c 3d 03 09 fc f4 06 4b fd ba 7f 3b 14 5c 10 b6 af 10 2b 4b e2 b3 11 23 95 09 38 6f 05 dc 19 2b d1 22 93 58 92 88 ec 54 cd 44 86 4c 5b 82 d1 71 8c 04 1c f6 f7 3c 84 e8 61 b8 3f 06 51 37 15 1e 6a 38 Data Ascii: 0H+Eie& g&hOkNA"p5yj[^WyF2k7\GZXFt!4;"G"K">rmq.s[4g.kS fiL76$\|=K;\+K#8o+"XTDL[q<a?Q7j8
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 27 c6 87 4d 74 1a 2b 22 f5 5c 17 c6 ff c6 57 8a 66 9c f7 5f 28 ec 27 6f b5 88 c4 c2 14 91 12 af 9a a5 26 e3 d8 7a c4 e9 14 1f c9 21 7c ae e1 54 51 f2 fe 0b ca 29 aa 3a 33 64 d9 42 23 50 55 b0 b2 6e e0 6a 89 f5 ac 5c 5f 72 2c ac 2a ac 9a 35 7e ee 3c 96 77 d8 44 da c4 d2 e3 3c 8f 78 99 19 a2 ac 53 4e 19 b8 50 98 7c 53 9e 50 7a 1c a9 b1 bc e7 cd bd 92 3e ac 3a ac aa f4 98 4c 7f a7 d8 3a 70 f5 e0 e3 d8 08 e4 c5 52 9a 80 6b 77 0e 57 e1 fd bb ff fe 4c 7f da fa ea f2 a3 2f 6b 29 be ba 71 ef 27 98 e3 42 41 b0 e7 97 1f ab e0 21 b2 47 6f 19 28 90 21 3b 11 71 31 cc d7 84 f8 b8 ed dc dd 61 3f e4 0f b0 eb 42 0c 2c e1 e1 83 8f 30 d0 86 ab c7 cf 87 1e 28 b4 a6 1e c5 61 8f da ac 75 a7 6f 6e 79 fc 7e 24 04 f6 f1 e1 83 04 18 a6 9b 00 fe 69 e7 37 7c f7 dc b6 8f 01 ca 90 90 Data Ascii: 'Mt+"\Wf_('o&z!\|TQ):3dB#PUnj\_r,*5~<wD<xSNP\|SPz>:L:pRkwWL/k)q'BA!Go(!;q1a?B,0(auony~$i7\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49789	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	680	OUT	GET /fonts/family/cheltenham/cheltenham-normal-400.a3ed7afe3eaa0a873f3fbd379f8c491b.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1115	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 30 37 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 4b 79 58 4b 4f 68 7a 64 6b 63 56 78 54 4f 6c 42 67 73 64 39 4d 5f 31 32 71 57 54 5f 57 2d 76 4e 76 71 4b 78 37 37 64 53 66 50 5a 45 4f 70 56 4d 54 48 62 4a 6a 78 47 4f 55 51 43 59 67 4b 31 6a 46 73 41 36 38 6a 75 47 38 75 47 69 54 62 5f 30 44 68 4b 30 4a 4a 6e 31 79 52 4b 71 4f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 31 20 41 70 72 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 29076X-GUploader-UploadID: ADPycduKyXKOhzdkcVxTOlBgsd9M_12qWT_W-vNvqKx77dSfPZEOpVMTHbJjxGOUQCYgK1jFsA68juG8uGiTb_0DhK0JJn1yRKqOCache-Control: public,max-age=31536000,immutableExpires: Thu, 11 Apr 2
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 71 94 00 10 00 00 00 01 1e 90 00 00 71 35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b b2 2e 1c 66 06 60 00 86 78 08 46 09 97 62 11 08 0a 83 ce 1c 83 9a 7d 01 36 02 24 03 87 38 0b 83 5e 00 04 20 05 86 67 07 85 30 0c 81 18 5b f9 01 51 c3 76 3d 83 db 81 57 7b ec f6 b4 d9 81 d6 ed a0 a2 14 b0 2f 4a 81 dc 74 56 a0 3b 70 98 27 56 b6 b2 ff ff 94 e4 64 0c 07 1a 1b 66 95 af ff 5c a1 14 96 6d 8f a8 b0 6c d8 cb 9a d3 c3 b8 a7 8e c2 13 1c 87 8b f9 9a 13 6e 38 92 2e b5 5e 95 cc a2 0a 61 8a 7c 62 27 f5 84 7a 9c ab 9b 9a 6e b6 da 2f d1 29 fa e2 89 8a 57 ea f3 7c 15 13 33 14 c2 c4 1f 0a 25 28 2c be fa bc 17 5d b9 d9 51 2d a2 8f f8 97 d4 59 ff ad 68 80 31 37 b7 0c 8c 5d 06 25 da 88 15 27 f7 0e 4f db fc 77 c7 99 Data Ascii: wOF2qq5.f`xFb}6$8^ g0[Qv=W{/JtV;p'Vdf\mln8.^a\|b'zn/)W\|3%(,]Q-Yh17]%'Ow
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 50 68 8d 35 ca 19 18 a0 8c f6 e1 38 e4 90 0a dd ba 55 ea 35 a4 ca 08 33 9e 09 93 84 8e 3b 41 ec 94 33 a4 a6 5c a4 70 cd 6d 2d 2c a6 e9 d9 0a 8d 90 62 69 31 72 d6 48 c4 14 19 8d 99 63 30 cf f7 04 6f 09 f3 92 9f e1 0c 33 c9 e6 c2 20 b6 40 3a e4 74 8e 4e 93 88 2c 05 86 df 5d 34 25 98 21 9f ad ca f2 2f 15 1e ce 9c d0 3c 2a b4 2c 93 42 69 69 e9 50 c6 23 f2 ae 25 b9 ca 08 3b 96 e7 a1 54 75 4f 35 c6 40 2f 7d 32 77 99 d4 94 38 2f cb 3a 67 05 17 8d 3d bc 18 7e 34 70 99 e1 d3 60 cc d9 5d 8a c1 9a d7 ec f8 f1 69 e4 e4 93 fd 41 86 46 ab 9e 5d 80 98 bd c3 25 8e b1 a3 6e 57 0e 82 38 1b 57 70 65 cf 16 f2 ca f2 fe 05 9f 70 84 66 37 35 27 ef cc 97 d7 6e af c2 59 83 61 a8 13 4c 53 66 77 a0 5e 4e 51 53 ea 48 e7 cd 10 cb 2e 98 24 5e af c2 33 45 9b 24 52 aa 49 2d 94 9a 93 d6 Data Ascii: Ph58U53;A3\pm-,bi1rHc0o3 @:tN,]4%!/<*,BiiP#%;TuO5@/}2w8/:g=~4p`]iAF]%nW8Wpepf75'nYaLSfw^NQSH.$^3E$RI-
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: ca d8 18 69 ea c7 e6 ac 16 97 55 09 ea 02 9a 3b 69 15 75 35 a6 a7 6d 2d 4a 1b ed 1f af a3 64 86 16 32 be bf 75 07 7a 53 fa 3e 13 02 22 1e 8f 9c 80 9d 4a e5 fc 00 7b 83 60 57 0a ce b1 7b 07 4d 64 78 3c de e5 9c 8c 4c 3f df aa c2 9d 83 99 52 65 61 1c a9 4c da 44 2d 7b 73 35 0a ab e0 9f aa 7c 61 6d e0 40 c9 95 b8 f5 e2 1c e1 8e 5b 67 b6 78 55 9a 18 ac d3 32 fe da ab cc 97 05 2b 87 bd 5c 58 79 b0 2a 75 6a 84 d3 24 4a b3 44 ab 71 6d c6 b5 15 37 d9 47 13 25 33 74 72 bf 12 91 23 06 9a 86 5b 64 da 31 64 4b 96 d7 e0 37 2c 53 0b 67 98 1f 03 86 57 05 c5 06 0b 61 ed fe e0 98 87 53 6d 6a ae 2f ac 41 47 15 b2 13 12 ee 96 ca d8 63 1b 54 dd 3b 13 4c 47 0c 66 f9 57 bc ca e8 fd 44 96 a9 15 a3 55 28 13 d0 29 a4 38 96 96 8b 9f 4b 00 84 88 10 23 b1 d2 0a c9 90 a3 40 89 1a 0d Data Ascii: iU;iu5m-Jd2uzS>"J{`W{Mdx<L?ReaLD-{s5\|am@[gxU2+\Xy*uj$JDqm7G%3tr#[d1dK7,SgWaSmj/AGcT;LGfWDU()8K#@
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: b8 18 a6 65 3b ae e7 f3 16 80 ff 27 1b eb 7d 4e 16 1e 91 4f 6d 01 ac 9e 36 c5 c0 ff f7 72 d7 ff 08 2b 4b a6 da 27 28 33 fd 7f dd 5f 04 20 da c8 e2 75 30 11 f0 21 f6 26 f2 f4 1f 32 ef a7 18 9f 4f 91 4d 63 5c 69 23 f9 c3 8b d0 e9 bf a2 03 cd 4b 5d 38 ef 41 0a 6e b4 9b 41 42 0a 15 34 da 73 53 21 4c 56 c2 97 74 34 ff 69 1e 87 8d 7e d9 63 54 d1 23 d5 de 7c 8e 5e bd cb f7 27 6f ae e8 89 cb 09 87 97 e5 87 32 29 84 2d d3 8a b1 2b 1e f1 6f dc 42 5a 10 91 2f c3 64 23 f9 f3 78 13 db 9a 3c a9 dd 2e d9 2f dc 8e ec 3e 13 24 33 73 b0 30 53 f0 26 ae cd 2a a4 49 2f 68 3a ad 04 1d af 22 ba 0b 18 2e 38 ef 0d 0e 15 9a a9 57 2f ab a2 4f 41 ce 51 5a 9b 9b 1c 1f 7c 88 41 b5 20 73 9f 78 e2 90 dc fe fe c9 45 59 6c 03 34 ff 3a a6 57 6e 7a 63 51 cd 9b 10 3f 91 49 4e 2d 71 6a 9e ad Data Ascii: e;'}NOm6r+K'(3_ u0!&2OMc\i#K]8AnAB4sS!LVt4i~cT#\|^'o2)-+oBZ/d#x<./>$3s0S&*I/h:".8W/OAQZ\|A sxEYl4:WnzcQ?IN-qj
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: d0 e4 a0 fb f3 ac 86 4b 4e 28 47 4b ce 51 2a 90 30 d5 88 22 59 f5 bc 73 21 88 ab a0 18 45 d1 1f 22 81 90 e1 d6 cd 92 b3 db a3 ae 93 ec 01 88 94 88 32 b8 0f 1d db 70 73 66 c5 3d b0 a7 c7 7a 7c 55 9f 0d c8 ba 3b 60 61 f3 6d 98 4e ee de e7 dd ac 64 95 00 a6 dc 1c 17 1b 49 61 ab f4 7a 80 18 6b e7 f1 ef 01 51 9e 4e 8a a3 cb fa 60 64 9f 6d db 88 69 02 8e e5 50 fb 0e 07 7a 00 90 96 94 81 21 ca 8a 89 24 c0 96 47 24 05 20 4a c2 d5 8c 18 b1 8a 3b c4 c9 01 08 20 0a 37 90 54 0f 30 50 83 47 76 42 6e bd a2 f4 cd 56 e1 8e cc 05 a4 c9 ba 05 fb ed 7e b5 4b 25 c8 95 c1 84 d8 cb 79 30 d0 99 a8 8e eb d3 1c ab e9 38 64 79 d6 cf 51 a4 84 9a 21 c8 80 1e d6 37 97 73 d1 f6 c3 bd 7f 84 dc 42 61 db 94 63 d5 41 15 df 5b 0f cc 4c 5a 69 40 87 48 c5 4e 5f aa d2 61 0a b1 4a a4 04 62 45 Data Ascii: KN(GKQ*0"Ys!E"2psf=z\|U;`amNdIazkQN`dmiPz!$G$ J; 7T0PGvBnV~K%y08dyQ!7sBacA[LZi@HN_aJbE
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 36 e4 fc 58 9e 64 76 d2 52 f6 e3 4b e0 a6 60 4d f3 5e 0d 3f 5f ec 41 7c 02 f5 fa ba 5e fa ba bc 6f 92 3b d9 2c 29 25 33 34 6f 0f 7f 7c 31 59 3c 1f 85 56 68 d5 61 a7 9d 6a c8 cf 75 f6 84 72 07 86 50 7c 66 6d 96 d7 85 c6 a1 60 34 ef b6 e9 44 e9 ae d2 f8 b2 6f e9 52 b6 29 e1 1c 28 60 8d 2c 56 2d 2b 7a 17 9f 78 a9 21 a9 92 40 b6 38 e1 2c 7e aa 00 38 ae 7c 7a b0 d6 11 68 56 6d 79 dd 11 90 ca 4a 79 99 23 e3 00 16 7e 54 0e 2f 34 2c 32 3e 08 4a ef 59 f9 45 e9 fa 98 e2 f8 c6 cd a1 bf de ee 8d 2f 78 97 c7 bb 29 ca c6 1c 38 d5 9c ac e4 98 40 b6 da 81 d9 07 38 54 89 4a bf cb c6 72 d8 21 51 37 d6 7c 8a 19 c5 a3 da 83 93 60 ab b9 e9 68 8f 79 ee dd 0a a6 0f 50 23 76 95 6b 91 58 76 38 27 33 05 a2 aa fc a1 6f ad 71 d1 a6 4d 46 42 8b a8 d8 75 2b 1a 27 4d 46 73 e7 4c 87 59 Data Ascii: 6XdvRK`M^?_A\|^o;,)%34o\|1Y<VhajurP\|fm`4DoR)(`,V-+zx!@8,~8\|zhVmyJy#~T/4,2>JYE/x)8@8TJr!Q7\|`hyP#vkXv8'3oqMFBu+'MFsLY
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 5d d8 21 a6 53 4e cd fc 11 4e 18 a5 f2 4e a4 b9 36 24 45 fd f1 17 c5 e5 36 70 57 f5 66 e0 9c e5 37 0f c1 ac 04 da c6 6e 72 27 cb 30 e9 f6 7c c4 4e 76 e3 51 72 f7 80 48 06 33 aa 55 0d 3c c0 02 2e 48 36 c9 40 3f f2 51 d2 f0 e8 24 82 7d 7a 9a 5e 50 f8 1c ed d8 bf 56 8b b4 e1 c7 23 bc aa 8e 50 36 0a 86 e2 05 b6 31 60 83 a8 bd 16 ac 62 51 e3 f8 44 b8 26 71 f6 43 9b cb f0 54 24 2e 22 92 10 00 73 ef cd 9f 0b 5d 9e a0 cc 00 6b 58 c7 68 b6 8c 2b a5 df 2e 54 25 e5 aa 86 26 a5 07 e1 8c e9 52 19 db e7 17 a8 56 57 25 0c 3c 93 b1 52 8a 39 10 b6 6f 1a e5 5a d7 a6 51 1e b1 da 9c 00 1a c4 f7 00 62 a2 81 1b 66 e8 28 e1 a2 0c 9e 2e 2e aa c6 a2 1e 1f 23 4a 60 ef 93 b1 51 2d ac c9 8d 35 0e 0c 4e be 61 5a 7e d1 2e 11 a0 16 30 a0 9a b0 e3 0b 50 58 b0 1e d9 ab 67 63 27 da c6 d2 Data Ascii: ]!SNNN6$E6pWf7nr'0\|NvQrH3U<.H6@?Q$}z^PV#P61`bQD&qCT$."s]kXh+.T%&RVW%<R9oZQbf(..#J`Q-5NaZ~.0PXgc'
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 05 d2 01 0e c4 78 18 a8 5b 9f dd 0e 8f 78 c6 b7 58 39 4b 85 85 cf 37 1c 2c 8e c1 ba 2b f1 fe 23 76 29 0b 91 58 95 da 03 1b 8f d3 f0 8e c7 c7 dd e4 c5 a9 61 63 a9 3d 89 d5 08 56 69 0b 27 0f 33 23 a5 07 3e 1e 3b ce e5 f8 d8 5f 79 b1 6a f8 58 ca 2a 2a 0f cf ff 84 44 a3 03 e6 3d 6d fd c1 00 3f a0 a7 d2 cd b0 03 16 c9 0a 77 23 03 1a 8b 2e 50 a1 a5 d1 4d cd 26 7e 8b 9b 10 c0 5f 49 ee 5e 24 b4 6a fa fd e9 d9 fb 46 02 1e ae c4 64 c5 a9 e7 36 c5 1d a1 2c 70 32 f8 ca 8c 5c 62 4a a4 0a 6d d4 9b 14 99 6b de 5f 73 a4 a3 82 df b5 bd d5 ca 5f 59 d5 b0 de 58 12 95 50 10 d3 32 6f 4a 54 eb e6 d4 b0 f1 55 ca bf 61 52 a1 86 42 20 a8 48 93 4b b4 f5 f3 58 8f 4e 6c 99 2c 12 9b ec cc 5a ad 85 df 5f 16 18 ce 71 46 d5 17 d4 96 44 0c f2 1c 66 bc 3b 5b a1 96 12 93 17 46 73 d2 89 b9 Data Ascii: x[xX9K7,+#v)Xac=Vi'3#>;_yjX**D=m?w#.PM&~_I^$jFd6,p2\bJmk_s_YXP2oJTUaRB HKXNl,Z_qFDf;[Fs
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: cf 95 07 b9 00 67 b4 a4 0e 6b 57 32 fd 52 b5 b4 b4 c2 30 20 d1 a1 40 79 0c ad 81 1e d4 e7 50 2a 2d ba 7a 42 6e ca 06 4e 31 ca 44 b3 7d 5c 86 3e a1 5a 19 f2 18 55 7e 81 ac 0c 39 94 9b 83 0c 49 ac 25 34 c3 93 05 1f d6 74 1e 91 fd 3d b4 d1 0e df f4 cd 4f bd a3 d6 0e 4c 9e 80 68 24 0a 94 4a 36 9f ad 60 15 1e 57 c4 33 e5 bd ca aa 71 f5 1f e1 7b e5 ca e9 92 06 cf 1a 59 75 9d 78 4d be 5f 7d a0 ab ef 80 b5 17 bc bb 47 60 b6 70 f9 4b 0d 01 cf 68 e1 73 5d dc 21 e7 18 2b e7 a2 38 46 eb 3e 7c 5f 7d 29 78 d4 be fc 42 f2 b3 4e 5b ef 67 e3 8a 8f 6f f5 d3 bd 7d 37 2e b0 0f 03 6d e7 68 3d c9 3d 4a 65 bb 68 c9 b3 f5 6d 0e 72 b7 4c ea 97 5f e3 c0 8c c9 47 b6 01 6a 71 1e a7 49 c3 4c b7 53 4c 32 4b 81 48 a5 6f c9 ae 4d ac a7 47 ad 81 42 8f 44 85 17 d2 ee cb 3b ff 60 79 31 a6 Data Ascii: gkW2R0 @yP*-zBnN1D}\>ZU~9I%4t=OLh$J6`W3q{YuxM_}G`pKhs]!+8F>\|_})xBN[go}7.mh==JehmrL_GjqILSL2KHoMGBD;`y1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49785	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	676	OUT	GET /fonts/family/imperial/imperial-normal-400.6131cd77b6e216c7693ed925f4309ffc.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	1119	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 35 30 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 73 37 63 63 38 2d 30 44 43 4f 4d 56 65 36 33 39 66 6f 78 4d 66 47 4a 74 61 34 39 4e 33 4f 72 59 6b 67 75 39 55 7a 69 4a 4e 6b 4e 31 30 30 70 53 74 31 4c 6f 6f 71 30 4b 35 31 49 30 58 78 73 68 48 6b 75 56 4a 6b 69 31 55 4e 55 77 44 43 65 62 63 5a 62 52 63 38 32 71 32 4b 5a 5f 45 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 32 20 53 65 70 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 26504X-GUploader-UploadID: ADPycdvs7cc8-0DCOMVe639foxMfGJta49N3OrYkgu9UziJNkN100pSt1Looq0K51I0XxshHkuVJki1UNUwDCebcZbRc82q2KZ_ECache-Control: public,max-age=31536000,immutableExpires: Thu, 12 Sep 2
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 67 88 00 10 00 00 00 01 15 ac 00 00 67 29 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 10 1b ca 6e 06 60 00 85 7e 08 46 09 97 62 11 08 0a 83 a7 4c 82 e9 78 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 83 1b 07 86 06 0c 81 18 1b ba f3 07 c4 db 47 84 db 01 0e 69 d1 07 a8 18 db ac e0 41 77 70 8d ea 48 15 2a e0 c6 38 bb 9d c4 f6 76 fa c9 d9 ff ff 79 47 45 c6 4c 03 49 bb b1 09 2a ea 39 41 ce 98 70 56 0b 72 37 4d b6 c1 d9 b7 b8 ad a6 de c6 1c 2d 24 93 96 97 98 21 36 f0 30 49 49 fb c8 58 f4 40 67 b3 86 f0 c4 ab 90 c4 46 23 36 92 78 c9 9b ee 74 9c 33 c9 9e e5 f0 f1 b7 30 1b 3a 1a 3b e6 be a1 f7 27 c6 40 3b 93 b5 f1 fb c3 a3 91 23 2a 5e e4 eb a5 ff d1 0e 8e 5e 67 e2 f7 6a e8 f0 d8 43 4f 3c 69 8f 19 84 12 2c Data Ascii: wOF2gg)n`~FbLx6$ GiAwpH8vyGELI9ApVr7M-$!60IIX@gF#6xt30:;'@;#*^^gjCO<i,
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 46 9d 4e 1b a6 cf 65 b4 c7 50 ec bb 8c bf 98 5b 99 bb 66 b4 8f 39 c8 3c c7 1c e9 8f 95 c5 2a 66 f5 d4 da d3 11 80 54 35 5d 72 81 05 c0 f0 0c d9 1e f6 29 f6 85 e4 ee b2 3d 4e 6c 18 12 ae f1 3a de c8 3b 1f a9 95 6f 88 61 02 7b cd 02 10 02 34 90 b3 3f d3 31 08 ae 0e 0c 22 94 66 5a 6f 91 78 9f c1 6d 3e 14 67 f7 69 f6 9c 3e 97 e6 92 91 e5 77 4d 4e d0 97 31 78 d8 d7 be 15 f1 7b e3 b7 fc 97 dc db f2 06 bd 63 d8 a2 2b 96 63 f0 9f ad db f4 8b c3 c1 7f 77 cb 1d 7f b8 d7 f8 6f 4f 1a ff e3 ff c6 ff 7a 11 fd 7f ce 43 41 dc 76 f0 df 3f ef 88 22 99 ce 83 e4 a4 14 00 25 29 15 29 35 82 06 e5 22 40 9b 74 28 fa 6c c8 c6 6c 41 b1 c2 d9 e0 ec 28 0e 14 77 f6 66 7f 0e c0 85 40 61 50 04 14 05 c5 4f 24 41 d9 2a 87 52 88 c5 58 8a e5 58 89 d5 d8 03 1a 01 8c 02 c6 00 e3 00 39 04 85 Data Ascii: FNeP[f9<fT5]r)=Nl:;oa{4?1"fZoxm>gi>wMN1x{c+cwoOzCAv?"%))5"@t(llA(wf@aPO$ARXX9
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: aa 76 ef 78 7b a8 dd ad 6e 84 d6 18 f6 62 e4 9d e8 4b b1 3e 8d b7 09 02 f7 f3 9b a7 e0 d2 a0 4c c8 c6 0f bf 32 5c ab 73 30 85 af 8a a1 a4 ac a2 fa d3 6a 6f 4c b5 d3 cd 4c a8 9e 4f 9c 2b 0c cd 6e a0 72 0c 9a bf 0f 82 63 38 00 68 9a 61 4d 31 2c 69 6a 35 ee 12 f9 1e 61 da da 78 e6 de 98 64 07 92 55 38 61 fe 25 8f 17 76 a8 a2 90 bb 23 53 34 c5 42 3b be fc d3 83 2b 49 ba cc 99 33 67 ce 5c 7b 4e b8 20 3c 89 07 2d f6 d0 d7 b6 95 4b 14 6f a5 db e5 53 94 b6 62 82 d0 11 75 58 00 c0 f9 46 bc 9c 76 37 d9 4a 96 ae 24 53 e5 c0 8f 79 ab 5f 1b 92 91 f9 9b 5b 27 07 8c 73 70 45 74 f7 e8 29 5e be 45 7f 1f 58 82 6b 0a 55 69 9e 23 29 ca 28 46 ce 9b 17 7e 5a 12 70 6c 0a 64 c4 4e 3c 6c cd 9c f9 17 f5 a5 d7 fa f4 1b 30 68 38 4e 69 73 ba 55 58 08 d8 79 bb d8 2f ed 9a e5 f5 4a 0e Data Ascii: vx{nbK>L2\s0joLLO+nrc8haM1,ij5axdU8a%v#S4B;+I3g\{N <-KoSbuXFv7J$Sy_['spEt)^EXkUi#)(F~ZpldN<l0h8NisUXy/J
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 98 03 5a cb 1f bf fa d4 7e e9 df 0c ff 77 95 ed 05 a3 0b 06 b6 b5 16 cf e9 b0 d0 3d 28 38 50 a2 89 c1 84 6d 3c 4b db cd 0b 69 36 09 30 71 da 41 9c 73 29 2b 75 b0 7f 1a 80 41 47 cc d2 c0 c1 5d 35 b9 50 ed 09 22 5a f3 7c a2 20 ef 49 c9 a8 19 25 a2 68 4b c5 c2 3e 16 ad a4 ac a2 fa 5c ad c3 c6 3b c3 89 f7 c9 92 04 cf 3b 66 77 d9 7d 73 29 e1 1b d6 f2 f6 f9 93 a1 1d bd 19 7c f9 b4 73 e9 20 90 18 68 f1 56 bc 3e 28 26 96 5f 0b 95 4d fc bc b8 44 7f e5 f7 83 ca 0b 52 ce dd 5b 10 26 88 17 08 04 e2 f5 b7 23 20 10 26 ef 0e a0 63 6a 79 fc b7 24 af e4 ed e7 b3 ff 40 20 f9 0c 7c 01 20 90 40 4c 6d 36 b9 e2 91 4f fe 37 86 f8 4c 4b 5a de 26 af 6d 4b ee 6c e7 bb df c3 6b d0 31 26 8e 49 66 d2 99 00 93 cb 94 31 c3 99 16 e6 0e 16 c0 ca 06 42 00 1c 40 06 e8 80 03 c8 05 8a 38 eb Data Ascii: Z~w=(8Pm<Ki60qAs)+uAG]5P"Z\| I%hK>\;;fw}s)\|s hV>(&_MDR[&# &cjy$@ \| @Lm6O7LKZ&mKlk1&If1B@8
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 94 51 45 d5 3c 10 fc 16 4a b0 81 f4 79 96 60 b3 59 06 f2 29 c7 1e b8 85 a8 68 f0 96 52 6d 03 bd 22 9a 76 85 9d 33 5d 61 4f 76 52 3d 54 0f d4 26 df 64 ee 3f f9 24 0f ea 01 0c a0 1b 4b ab 57 46 48 3e cf 84 45 4d 94 85 9e af 4b 3f 47 69 f7 32 74 6d 04 6c c2 0d 3f d1 d2 3f b1 07 6a e3 f2 86 3a 50 de e5 89 18 df 39 62 0b 85 9a 60 86 cb f5 71 75 59 82 dc f9 2f e5 ad 62 05 25 6e 9a a1 89 9f 46 f9 94 f5 4a 71 e7 bb 3c c5 f3 9e 09 2f a4 7b 5c f6 ad 8a 61 4b 19 ca cc 54 c2 b2 8e 42 83 bd a4 ae f7 08 7b c1 30 de 79 36 b0 a1 7b da 08 33 81 98 71 8a 77 ac 91 a3 4b 0f 83 18 83 04 f4 19 9e fe 79 ce 5a df 22 c3 61 d8 da 7c eb 65 81 23 21 52 7c 54 46 27 cf c0 3c 98 73 9b 52 c6 5a 3d d4 ec 51 08 86 b9 b3 a6 b9 d4 75 bd 89 2b 56 f2 25 2f 43 85 6b 17 e6 e3 23 05 9a ed b8 7b Data Ascii: QE<Jy`Y)hRm"v3]aOvR=T&d?$KWFH>EMK?Gi2tml??j:P9b`quY/b%nFJq</{\aKTB{0y6{3qwKyZ"a\|e#!R\|TF'<sRZ=Qu+V%/Ck#{
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 83 d7 27 a0 9b f5 72 26 07 5a a5 c1 fc 46 bf 1c 68 b6 11 3d 95 ea b8 db 82 9d b3 fd 44 fc 0d c9 07 41 e1 33 31 09 64 a0 01 e1 58 85 a0 a0 c1 6c 8c ec 4e 0b 04 ec b9 19 f6 dd 8b 3c 2a 28 7c 8a f3 9f 16 93 13 99 1d 69 cf 61 e4 90 bc 74 28 e3 3b 57 c1 e2 63 e7 dc 39 82 08 e7 53 e2 b6 f5 1e d8 14 c0 a1 03 28 75 4b de 7e 70 d2 7f b5 03 09 55 3b 2f b7 e3 bf 93 3b ba 9a 03 90 91 2a 26 ea 28 cb 14 2d b2 d6 d5 c0 33 ec 93 e3 26 eb 55 47 17 c3 5d 84 91 8a d0 ef ea fa 5f e4 18 1d 7c 16 23 06 30 b9 a8 77 f1 ad de ba e1 5b 67 57 d9 3c 45 b4 38 e5 b3 4a ac 82 f2 0a 53 41 15 dc 58 b3 1c ab 2a b1 a2 b3 53 12 fb 35 9c 62 38 a4 20 86 56 31 5c b8 70 50 e3 d3 a4 79 4b e4 7d 17 05 d0 e6 29 b6 41 0f 28 dc 97 33 e7 8a 20 2b 0d ba 30 e4 46 59 2e 09 a6 b7 8f 21 7c e5 27 04 12 32 Data Ascii: 'r&ZFh=DA31dXlN<(\|iat(;Wc9S(uK~pU;/;&(-3&UG]_\|#0w[gW<E8JSAX*S5b8 V1\pPyK})A(3 +0FY.!\|'2
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 55 9f 00 22 fb cb 3f 18 e9 6c 02 3a 3b 68 32 3e 99 7b 8e 79 bb ea 27 57 7b 60 29 cb 66 c4 67 87 d3 32 25 7b 53 47 3e 95 7b 2d 38 13 8f 84 fc 2d 6c f9 01 21 ab 56 be 8b ab fa 9f ef e9 d7 3f 83 90 85 fe 67 75 65 4d 75 63 50 a3 5a 03 63 76 87 0b 93 fd e3 40 7c 36 44 7e 49 86 0b 53 f2 6c c0 e0 c3 44 b6 02 3b 3b 40 0c cd 4b 98 34 15 e2 d4 de 43 ab 99 af 54 e9 a3 b2 79 cc 86 e6 a1 5f c3 9f 62 7e 21 95 ef 2b d5 cb 1c 1f 61 21 97 44 55 8e 49 91 b7 a9 53 6c 31 7a bf c3 b5 cd fd 5d 72 4c 6b 6f 97 e3 7a e1 50 12 0e bb 7f 03 cd f2 aa 47 a3 37 06 17 cc ab c9 1e 34 38 ed 69 26 89 11 43 4a 7a c2 e6 e4 aa 5c 98 32 1f 95 73 53 c8 c5 8f 2a a5 6d 06 52 ba db 95 b8 2d a7 04 d9 a0 b8 c9 ec a1 3a af c6 34 9e ed 0e 1a 40 bf 63 4a a7 9e fe ce 1c da ac 7f a8 ad 1b 74 be e9 ee 4f Data Ascii: U"?l:;h2>{y'W{`)fg2%{SG>{-8-l!V?gueMucPZcv@\|6D~ISlD;;@K4CTy_b~!+a!DUISl1z]rLkozPG748i&CJz\2sS*mR-:4@cJtO
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: cd 22 74 5c 5d 50 47 ae db 77 e4 08 1a c1 7c ee ef c4 c1 e4 1d 8a 27 3b 17 b2 f2 d8 fb 9b 31 8a ab 5e d1 d5 d6 1a 24 ba 2d b6 de 5e df f1 67 a5 a1 87 02 07 b6 68 53 b8 37 07 22 21 6a 3d ef 82 42 ff f5 36 7b e3 9b 9d 0b 66 02 b9 a4 d8 b6 3a 2f 17 07 18 0c f6 39 dd 7c 97 08 f3 4c cb ff e0 5c 65 86 93 dc 1e e6 72 3b 5d de 3a f2 fa a6 f0 89 60 ec 7f 6b 08 61 ba 8c 3f e3 b4 e0 51 c2 1e c9 25 05 0e 1f 49 e8 cb b3 2e 52 20 ab a1 aa 36 a8 dc db c6 be 56 21 af b3 ef 85 40 a7 28 4f 48 33 90 25 bf 45 a2 d5 43 db bc f2 0b 9e fc ae e0 d5 55 77 d9 6d 82 18 36 f9 05 cf e0 a1 a6 3b 8b 15 92 50 49 12 f5 f9 bf 82 89 37 31 b1 b2 9f fb 5a c0 9f ae a9 ac d4 7b 0d 1d 63 8b 24 40 42 2b 7e 82 e3 e7 b2 ba 95 ac 99 5e 8c 2c c5 16 b0 a1 32 1e 9f a7 9e af a4 be 48 42 ad a0 1a 68 90 Data Ascii: "t\]PGw\|';1^$-^ghS7"!j=B6{f:/9\|L\er;]:`ka?Q%I.R 6V!@(OH3%ECUwm6;PI71Z{c$@B+~^,2HBh
2023-12-05 18:13:25 UTC	1379	IN	Data Raw: 98 de 07 ee 45 b5 67 2e 98 73 d3 4c e5 25 64 4f 29 2d e5 15 e4 ac 79 c4 a0 ce 51 39 0b 8c 13 35 a4 a0 a3 f9 75 91 27 27 d1 f9 09 cf 04 dc bc 93 b7 09 6d b0 e4 b2 95 d8 2c 82 f1 2d c3 cd 4f d3 55 f1 1c d7 44 8f 4e 72 08 7f cc 75 3d dc 2d 60 d9 7a 13 a9 32 69 2c 69 01 c3 c8 95 9b b3 e3 38 76 89 2a 56 cd 65 98 12 9d 54 01 df 4a 14 de 07 74 ae 14 59 82 d0 9c 99 2f 55 9a 2c ca 50 5b a4 30 d4 10 1f cb fa 26 76 05 64 52 67 f4 ff 98 91 60 04 85 e9 34 ad db a9 d7 26 98 04 77 ea eb 8d d0 86 b1 f9 1f cf a9 72 b1 f5 25 a5 df f2 3b a4 bc ba 9c 35 8f e8 d4 39 91 c1 fd 82 26 39 eb 3e fc e4 35 42 17 90 f1 4f 45 f8 a0 ac 8e e7 7e 6b 8e 51 6a fc fe 58 62 a3 75 f6 ec e8 e9 83 e5 55 8d 1a 46 ff 02 0d 20 8f f9 a7 58 1f 8a 39 97 5b 1d f6 f6 79 78 44 5e 48 7a 8c a7 3a 6c 3d 21 Data Ascii: Eg.sL%dO)-yQ95u''m,-OUDNru=-`z2i,i8v*VeTJtY/U,P[0&vdRg`4&wr%;59&9>5BOE~kQjXbuUF X9[yxD^Hz:l=!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	1030	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 590 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:25 UTC	590	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 30 33 39 31 33 2c 22 64 61 74 61 22 3a 7b 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"iXJ6FxtFrBe04OARGjkskMIq","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"page","how":"beacon","client_ts":1701800003913,"data":{"canonicalUrl":"https://w
2023-12-05 18:13:26 UTC	1396	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:26 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49781	18.160.53.102	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	534	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:26 UTC	651	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 32 39 35 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 30 31 3a 34 34 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 31 33 20 4e 6f 76 20 32 30 32 33 20 32 30 3a 31 38 3a 34 35 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 73 65 72 76 65 72 2d 73 69 64 65 2d 65 6e 63 72 79 70 74 69 6f 6e 3a 20 41 45 53 32 35 36 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 41 63 63 65 70 74 2d Data Ascii: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 272953Connection: closeDate: Tue, 05 Dec 2023 18:01:44 GMTLast-Modified: Mon, 13 Nov 2023 20:18:45 GMTx-amz-server-side-encryption: AES256Cache-Control: max-age=3600Accept-
2023-12-05 18:13:26 UTC	15733	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 33 2e 31 31 30 38 2e 32 33 35 30 20 2d 20 32 30 32 33 2d 31 31 2d 30 38 20 32 33 3a 35 30 3a 31 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v23.1108.2350 - 2023-11-08 23:50:14 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n i
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 2e 73 65 74 28 6e 2c 73 29 2c 6e 65 77 20 74 68 69 73 28 6e 29 7d 2c 74 7d 28 29 2c 44 3d 22 5f 73 79 73 74 65 6d 22 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 2c 44 2c 74 2c 6e 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 6e 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 Data Ascii: .set(n,s),new this(n)},t}(),D="_system",A=function(e){function n(t,n){return e.call(this,D,t,n)\|\|this}return function(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function o()
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 6c 65 74 65 28 67 2c 7b 70 65 72 73 69 73 74 3a 21 30 7d 29 2c 5b 32 2c 6f 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 29 29 7d 29 29 7d 5d 2c 5b 74 74 2e 64 65 62 75 67 5f 70 72 65 70 65 6e 64 5f 72 65 6d 6f 76 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6e 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 75 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 69 2c 61 2c 75 2c 73 3b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 76 6f 69 64 20 30 Data Ascii: nction(){return c(this,(function(t){return e.delete(g,{persist:!0}),[2,o.completed]}))}))}],[tt.debug_prepend_remove,function(t){var e=t.account,n=t.customEvent;return u(void 0,void 0,void 0,(function(){var t,r,i,a,u,s;return c(this,(function(c){if(void 0
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 2e 73 65 74 28 72 2c 69 29 7d 29 29 7d 29 29 7d 28 6e 2c 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 73 74 6f 72 65 2e 73 65 74 28 67 74 2c 65 29 7d 28 74 2c 6e 29 7d 28 65 2c 61 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 61 64 53 65 72 76 65 72 2c 6f 3d 65 2e 69 74 65 6d 49 64 73 3b 74 2e 72 65 63 6f 72 64 28 6a 74 2e 61 64 5f 74 61 72 67 65 74 69 6e 67 5f 61 74 74 61 63 68 2c 7b 69 74 65 6d 49 64 73 3a 6f 2c 61 64 53 65 72 76 65 72 3a 6e 7d 29 7d 3b 74 2e 75 70 64 61 74 65 28 5f 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 29 7d 28 65 29 2c 5b 32 2c 6f 2e 63 6f 6d 70 6c 65 74 65 64 5d 7d 7d 29 29 7d 29 29 7d 5d 2c 5b 6a 74 2e 61 64 5f 74 Data Ascii: .set(r,i)}))}))}(n,e),function(t,e){t.store.set(gt,e)}(t,n)}(e,a),function(t){var e=function(e){var n=e.adServer,o=e.itemIds;t.record(jt.ad_targeting_attach,{itemIds:o,adServer:n})};t.update(_t,(function(){return e}))}(e),[2,o.completed]}}))}))}],[jt.ad_t
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 7d 7d 29 29 7d 29 29 7d 5d 2c 5b 73 65 2e 63 75 73 74 6f 6d 50 6c 61 63 65 6d 65 6e 74 5f 68 69 6e 74 5f 64 65 66 69 6e 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6e 3d 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 3b 72 65 74 75 72 6e 20 75 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 69 2c 61 2c 75 3b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 75 3d 6e 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 69 64 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 48 69 6e 74 20 60 69 64 60 20 6d Data Ascii: }}))}))}],[se.customPlacement_hint_define,function(t){var e=t.account,n=t.customEvent;return u(void 0,void 0,void 0,(function(){var t,r,i,a,u;return c(this,(function(c){if(void 0===(null===(u=n.detail)\|\|void 0===u?void 0:u.id))throw new Error("Hint `id` m
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 54 28 7b 5f 74 79 70 65 3a 22 66 65 61 74 75 72 65 55 73 61 67 65 22 2c 70 3a 74 2c 75 3a 4f 62 6a 65 63 74 28 73 2e 67 29 28 77 69 6e 64 6f 77 29 7d 29 7d 29 29 2c 67 3d 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 68 7c 7c 28 68 3d 21 30 2c 79 3d 73 65 74 54 69 6d 65 6f 75 74 28 4f 2c 32 65 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 6f 2e 61 2e 67 65 74 53 74 61 74 65 28 29 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 73 68 6f 75 6c 64 53 61 6d 70 6c 65 46 65 61 74 75 72 65 73 26 26 28 76 6f 69 64 20 30 21 3d 3d 6d 5b 74 5d 26 26 21 4f 62 6a 65 63 74 28 61 2e 68 29 28 6d 5b 74 5d 2c 65 29 26 26 28 6d 5b 74 5d 2e 70 75 73 68 28 65 29 2c 67 2e 70 75 73 68 28 7b Data Ascii: h((function(t){T({_type:"featureUsage",p:t,u:Object(s.g)(window)})})),g=[]}function v(){h\|\|(h=!0,y=setTimeout(O,2e3))}function j(t,e){try{return!!o.a.getState().experiments.shouldSampleFeatures&&(void 0!==m[t]&&!Object(a.h)(m[t],e)&&(m[t].push(e),g.push({
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 66 29 26 26 28 6e 3d 70 61 72 73 65 49 6e 74 28 6f 2e 61 2e 67 65 74 44 65 66 61 75 6c 74 28 29 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 61 2e 66 29 2c 31 30 29 29 2c 28 69 73 4e 61 4e 28 6e 29 7c 7c 6e 3e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 26 26 28 6e 3d 32 30 30 29 2c 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 23 65 61 65 64 65 64 22 2c 66 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 66 2e 73 74 79 6c 65 2e 62 6f 74 74 6f 6d 3d 22 30 22 2c 66 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 22 2c 66 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 22 2c 66 2e Data Ascii: f)&&(n=parseInt(o.a.getDefault().localStorage.getItem(a.f),10)),(isNaN(n)\|\|n>window.innerHeight)&&(n=200),f.style.background="#eaeded",f.style.zIndex="2147483647",f.style.bottom="0",f.style.position="fixed !important",f.style.display="block !important",f.
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 22 3d 3d 3d 65 3f 5b 65 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 68 6f 73 74 29 5d 3a 4f 62 6a 65 63 74 28 61 2e 6b 29 28 74 2e 62 69 64 43 6f 6e 66 69 67 2c 65 29 26 26 4f 62 6a 65 63 74 28 61 2e 69 29 28 74 2e 62 69 64 43 6f 6e 66 69 67 5b 65 5d 29 3f 5b 65 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 62 69 64 43 6f 6e 66 69 67 5b 65 5d 2e 6a 6f 69 6e 28 22 2c 22 29 29 5d 3a 4f 62 6a 65 63 74 28 61 2e 6b 29 28 74 2e 62 69 64 43 6f 6e 66 69 67 2c 65 29 3f 5b 65 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 62 69 64 43 6f 6e 66 69 67 5b 65 5d 29 5d 3a 5b 65 2c 22 22 5d 7d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 74 3d 77 28 74 2c 32 29 29 5b 30 5d 3b Data Ascii: "===e?[e,encodeURIComponent(t.host)]:Object(a.k)(t.bidConfig,e)&&Object(a.i)(t.bidConfig[e])?[e,encodeURIComponent(t.bidConfig[e].join(","))]:Object(a.k)(t.bidConfig,e)?[e,encodeURIComponent(t.bidConfig[e])]:[e,""]})).map((function(t){var e=(t=w(t,2))[0];
2023-12-05 18:13:26 UTC	16384	IN	Data Raw: 69 62 6c 65 54 6f 41 6c 6c 55 73 65 72 73 3a 21 30 7d 29 2c 6e 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 63 3d 33 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 22 61 70 69 22 2c 75 3d 28 75 3d 34 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 34 5d 3a 76 6f 69 64 20 30 29 7c 7c 64 2e 61 2e 67 65 74 53 74 61 74 65 28 29 2e 63 6f 6e 66 69 67 2e 70 75 62 49 44 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 28 6e 3d 21 30 29 3b 74 72 Data Ascii: ibleToAllUsers:!0}),n()}}function T(t,e,n){var i,c=3<arguments.length&&void 0!==arguments[3]?arguments[3]:"api",u=(u=4<arguments.length?arguments[4]:void 0)\|\|d.a.getState().config.pubID;"function"!=typeof e&&(e=function(){}),"boolean"!=typeof n&&(n=!0);tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49778	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	561	OUT	OPTIONS /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,nyt-app-type,nyt-app-version,nyt-token Origin: https://www.nytimes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:26 UTC	1161	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 6e 79 74 2d 61 70 70 2d 74 79 70 65 2c 6e 79 74 2d 61 70 70 2d 76 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 0access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-allow-methods: GET,POSTaccess-control-allow-headers: content-type,nyt-app-type,nyt-app-ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49782	13.32.151.58	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	564	OUT	GET /b3960cc6-bfd2-4adc-910c-6e917e8a6a0e/grumi-ip.js HTTP/1.1 Host: rumcdn.geoedge.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:25 UTC	676	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 34 35 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 30 37 3a 34 39 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 61 74 2c 20 33 30 20 53 65 70 20 32 30 32 33 20 31 34 3a 35 36 3a 31 32 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 34 63 34 66 34 62 66 38 32 34 64 32 61 61 31 32 30 61 35 65 30 62 36 36 35 62 34 63 39 38 32 38 22 0d 0a 78 2d 61 6d 7a 2d 73 65 72 76 65 72 2d 73 69 64 65 2d 65 6e 63 72 79 70 74 69 6f 6e 3a 20 41 45 53 Data Ascii: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 15451Connection: closeDate: Tue, 05 Dec 2023 18:07:49 GMTLast-Modified: Sat, 30 Sep 2023 14:56:12 GMTETag: "4c4f4bf824d2aa120a5e0b665b4c9828"x-amz-server-side-encryption: AES
2023-12-05 18:13:25 UTC	15451	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 7c 7c 7b 7d 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2c 65 3d 28 61 2e 63 6d 64 3d 61 2e 63 6d 64 7c 7c 5b 5d 2c 77 69 6e 64 6f 77 2e 67 72 75 6d 69 29 2c 79 3d 77 69 6e 64 6f 77 2e 57 72 61 70 70 65 72 50 75 62 4b 65 79 7c 7c 65 2e 6b 65 79 2c 74 3d 65 26 26 65 2e 63 66 67 2c 45 3d 65 26 26 65 2e 6f 76 65 72 72 69 64 65 73 7c 7c 7b 7d 2c 49 3d 74 26 26 74 2e 66 72 6f 6d 47 72 75 6d 69 2c 48 3d 45 2e 61 64 55 6e 69 74 50 61 74 68 2c 54 3d 74 26 26 74 2e 61 64 76 73 2c 64 3d 74 26 26 74 2e 70 75 62 49 64 73 2c 63 3d 74 26 26 74 2e 65 78 63 6c 75 64 65 2c 73 3d 7b 61 63 30 33 38 65 37 31 3a 7b 31 Data Ascii: !function(){window.googletag=window.googletag\|\|{};var a=window.googletag,e=(a.cmd=a.cmd\|\|[],window.grumi),y=window.WrapperPubKey\|\|e.key,t=e&&e.cfg,E=e&&e.overrides\|\|{},I=t&&t.fromGrumi,H=E.adUnitPath,T=t&&t.advs,d=t&&t.pubIds,c=t&&t.exclude,s={ac038e71:{1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49779	52.3.42.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:25 UTC	1061	OUT	GET /als?uri=nyt%3A%2F%2Flegacycollection%2Ff82e3180-c7cf-5230-9381-bc17f573899a&typ=&prop=nyt&plat=web HTTP/1.1 Host: als-svc.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:26 UTC	770	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 44 4e 54 2c 20 58 2d 43 75 73 74 6f 6d 48 65 61 64 65 72 2c 20 4b 65 65 70 2d 41 6c 69 76 65 2c 20 55 73 65 72 2d 41 67 65 6e 74 2c 20 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 2c 20 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 2c 20 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 43 6f 6f 6b 69 65 2c 20 41 63 63 65 70 74 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 78 2d 61 70 69 2d 6b 65 79 2c 20 6e 79 74 2d 61 0d 0a 61 63 63 65 73 73 2d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: DNT, X-CustomHeader, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Cookie, Accept, x-requested-by, x-api-key, nyt-aaccess-
2023-12-05 18:13:26 UTC	1460	IN	Data Raw: 7b 22 61 6c 73 5f 74 65 73 74 5f 63 6c 69 65 6e 74 73 69 64 65 22 3a 22 77 65 62 5f 6e 6f 6e 65 5f 6d 65 64 69 75 6d 5f 32 30 32 33 31 32 30 35 31 38 31 33 32 35 22 2c 22 55 73 65 72 22 3a 7b 22 61 69 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 72 65 67 69 49 64 22 3a 22 30 22 2c 22 62 74 22 3a 22 22 2c 22 73 75 62 22 3a 22 61 6e 6f 6e 22 2c 22 69 73 4c 6f 67 67 65 64 49 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6d 6b 74 67 22 3a 22 74 79 70 65 5f 61 6e 6f 6e 2c 6c 6f 67 66 2c 61 62 66 22 7d 2c 22 41 73 73 65 74 22 3a 7b 22 69 73 5f 76 69 72 61 6c 22 3a 22 6d 65 64 69 75 6d 22 2c 22 67 73 63 61 74 22 3a 22 6e 65 67 5f 69 62 6d 74 65 73 74 2c 6e 65 67 5f 69 62 6d 2c Data Ascii: {"als_test_clientside":"web_none_medium_20231205181325","User":{"aid":"XbK7A_KO3s8XVA_FdXv5zD","userType":"anon","regiId":"0","bt":"","sub":"anon","isLoggedIn":"false","mktg":"type_anon,logf,abf"},"Asset":{"is_viral":"medium","gscat":"neg_ibmtest,neg_ibm,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49792	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:26 UTC	676	OUT	GET /fonts/family/franklin/franklin-italic-500.0fb05587186331cd0a9b0f1a30805e76.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:26 UTC	1111	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 34 39 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 74 55 77 5a 6a 5a 7a 43 61 31 42 6a 73 44 48 6e 32 67 4e 37 2d 4d 41 6e 46 4a 63 33 72 5a 6d 54 6e 6d 64 69 53 71 51 4a 77 6d 4a 49 4d 4e 63 61 49 7a 58 53 4f 4f 35 69 4d 76 36 42 71 44 6e 30 6d 51 55 72 63 79 75 52 72 56 61 2d 47 30 64 2d 59 53 53 70 57 59 45 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 20492X-GUploader-UploadID: ADPycdtUwZjZzCa1BjsDHn2gN7-MAnFJc3rZmTnmdiSqQJwmJIMNcaIzXSOO5iMv6BqDn0mQUrcyuRrVa-G0d-YSSpWYEgCache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 50 0c 00 10 00 00 00 00 de 24 00 00 4f ad 00 01 00 c5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b f2 40 1c 81 06 06 60 00 8b 2e 08 32 09 82 73 11 0c 0a 82 9b 68 81 fe 31 01 36 02 24 03 87 60 0b 83 72 00 04 20 05 85 44 07 85 4a 0c 83 44 1b 61 cc 35 6c 9b 16 31 bb 5b 55 2a 0a 36 a8 0e 8e eb 6e 07 52 2a 98 5e aa d9 88 d8 ed 40 a2 12 fa c8 ec ff ff 9a a0 86 5c ff b8 6a b6 41 e0 08 1c 82 41 d0 4c 4d 41 49 22 4d 0a 52 55 d1 34 e3 4e 90 11 04 32 32 11 02 30 34 91 42 cc 95 c5 11 74 f7 b3 0c f6 39 32 1d 8e c0 82 43 de c8 8a 92 b2 2d 0b fd a4 0d 2b 2a 96 54 95 eb c4 71 de 77 3f 98 5c 76 5c 30 fd 7d dd 37 9e f8 e5 8d dd 5b 27 a3 b3 05 c0 fc ba 74 a4 cc 93 8a a3 3b e6 36 19 b5 2e b2 0a 28 c7 e6 d4 48 d6 79 d2 cf 43 64 Data Ascii: wOF2P$O@`.2sh16$`r DJDa5l1[U6nR^@\jAALMAI"MRU4N2204Bt92C-+*Tqw?\v\0}7['t;6.(HyCd
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 44 a2 90 e8 cc 7d a4 87 48 8f 33 ea fc 27 64 98 22 b6 88 2b e2 bb a4 c9 e8 e0 e6 e0 f4 70 86 72 01 ce 04 67 21 63 cd d8 33 8e 8c b3 d4 95 71 97 6f 67 f6 32 a5 c6 db 77 f8 76 d9 df a5 40 46 d0 42 c2 22 a2 29 8e 74 e0 d0 91 63 27 3e a6 4f 64 3e fb e2 6b 2a c2 95 94 55 54 b5 b4 75 74 f5 9c 1f 2e 66 86 41 11 1f a6 1b a4 46 19 62 31 ce 6a e6 e7 d2 35 33 5d f3 c9 0e be 6f af 06 95 13 8e ae 4e 3e 45 b2 40 15 c9 c9 24 db a1 93 09 d0 29 26 4d b7 f5 0d a9 25 0a d6 ec b5 e7 9c 30 ae f7 e6 06 f9 af 74 3b bb 9b f4 74 e0 b9 d3 cb f2 57 ed 3e 10 7f fd 00 52 d0 42 c2 22 a2 bd 31 94 78 f2 c0 a1 23 c7 4e 7c 4c 9f 12 9f 7d f1 75 fa 44 fd 7e 4e ac fe 96 fa ee e9 60 10 14 9d 7e 9c 53 37 32 53 c6 82 1b e7 7b a7 a9 d8 26 f6 32 bf 84 7a a5 e4 ef 5d 22 6e 37 db 48 04 09 b2 86 a2 Data Ascii: D}H3'd"+prg!c3qog2wv@FB")tc'>Od>k*UTut.fAFb1j53]oN>E@$)&M%0t;tW>RB"1x#N\|L}uD~N`~S72S{&2z]"n7H
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 69 57 7c 55 45 c7 ce 4e 8a 9a c8 5b 1d f7 a3 05 82 a0 85 84 45 44 9f 78 ac 37 12 16 89 5e 7b 2a 96 ee 5d a6 38 7b c9 45 7e 55 88 52 2a df 50 29 5f 41 8c 10 9b fc 98 77 62 b1 78 db 77 17 e9 4b bb 72 bd 6c ad 1f 7c 53 be 42 5a 02 af bb b7 bb 57 21 ed a6 14 d5 e6 18 08 16 80 d3 ae 3c 82 a6 31 b8 26 d1 43 18 37 57 db 6a 5d 59 41 e3 a8 39 8d 25 08 85 42 a1 50 28 fc 24 a5 28 8a a2 28 04 38 32 59 72 5a 89 04 48 e8 d0 1c b9 09 0c 48 68 9a 96 68 b5 5a ad 5a 7d 61 ad 1f 56 04 39 73 64 1a c7 c9 70 9c 62 56 cc 30 99 19 d1 b4 52 d7 06 42 d2 0c 60 cb 70 39 b6 6b 37 ed c6 0b 92 7b c0 59 21 29 4c 0f 2c 24 2c 22 5a c9 3d 8e e3 38 8e e3 66 fa f8 e2 6b 4a 55 a6 65 64 e5 e4 15 ee 73 cf e5 56 b2 8d 8e ae 9e 73 17 2e 5d b9 d6 27 6e 5a 27 8d 2e 59 5f 5c ea fd 32 d9 0b 65 44 5f Data Ascii: iW\|UEN[EDx7^{]8{E~URP)_AwbxwKrl\|SBZW!<1&C7Wj]YA9%BP($((82YrZHHhhZZ}aV9sdpbV0RB`p9k7{Y!)L,$,"Z=8fkJUedsVs.]'nZ'.Y_\2eD_
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 84 cf f1 05 5f a5 fe 13 52 cc 4d 7a c3 74 fc 4f 31 dd 4d ba b1 3e 52 79 0f 09 62 47 aa 1d 54 ff 79 94 89 5c 55 6a 02 d5 6f 01 f9 1a 40 3d f1 af a1 d3 7d 73 fe 38 fc c5 ce 91 1a 10 da 51 fd b5 e6 e6 d6 d1 ce 49 e5 48 8f 74 e9 d1 3b 25 87 ab b5 47 07 99 85 11 42 18 91 5e f4 af 23 9f 7b 0a cb 85 ba ed a3 3b 45 e0 90 81 df 5c 57 a0 5a 4f e0 5f 79 b1 e6 16 33 2d b3 2c b2 4f 00 79 d2 3d 89 05 c2 05 a0 53 17 dc 2d 30 2e 00 c7 11 c2 30 34 81 af d5 c2 aa 25 f3 d7 0b 2e 88 3d b2 35 54 b7 ff 3c fe 79 68 23 6e 4b 77 96 a0 80 82 ef 2f 24 fa 7d e5 3f e5 a8 95 fc 4b ef c2 1c 6d 26 e5 68 e2 ac ab 22 ea f2 76 8d 75 b2 f2 65 ea 4d 06 de 6a 9c 87 76 dc a0 eb 3e d7 f7 c4 d1 fe 35 1c cd d7 61 43 1e 3c da 80 bc d6 3a 3f 06 f6 68 19 d5 5e 7f f6 ee 9f 68 66 bf 19 db 56 48 5d b5 Data Ascii: _RMztO1M>RybGTy\Ujo@=}s8QIHt;%GB^#{;E\WZO_y3-,Oy=S-0.04%.=5T<yh#nKw/$}?Km&h"vueMjv>5aC<:?h^hfVH]
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 4c 12 15 f9 db d4 34 d4 42 ec 18 31 97 a4 56 89 9f 0b 28 af 1b 1b 2d f1 30 6b 5f af 56 d3 11 e7 b2 68 0b 5d 4b 41 ad d5 92 6f 5e 23 8e 83 66 e1 93 ae d6 7e 2e e5 67 35 a5 0c 9e 36 de d2 bb d8 25 89 94 7d f9 27 16 73 49 43 c9 02 11 c7 4a b6 71 24 a7 6e c9 03 e9 09 97 ba 9c 3a 2b 91 85 bd 0d 1b 91 3f 8a 75 49 69 48 25 5d 97 71 6c c3 2c 0c a7 ad ab 63 7b a3 44 4c e8 a4 dc f3 39 e7 2a e5 f2 e2 6a ca eb 98 bf 7b 49 a9 0d 5c be 88 05 a5 ad 38 14 c7 98 d2 52 ca 95 b8 5f c0 a8 5a eb d1 dd f1 66 e1 44 82 a6 41 fc 8e b1 c0 a7 a4 09 e8 62 9a a6 a7 21 3d c9 85 0a 97 07 21 4e 96 66 a8 f5 b8 a2 af 0c 8e b9 a1 b9 d6 6e e0 d6 d2 6e 67 32 8f ca 8b 35 d2 5b 07 3f 04 e1 f5 8c 8e a5 9d 74 cb 6c a6 1c c1 e9 48 20 e8 70 a1 85 51 88 0e a2 cf 60 7f 03 89 ea 0f 8c dc 2f 41 a3 af Data Ascii: L4B1V(-0k_Vh]KAo^#f~.g56%}'sICJq$n:+?uIiH%]ql,c{DL9*j{I\8R_ZfDAb!=!Nfnng25[?tlH pQ`/A
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 11 41 74 3e 6a 3d 0f 01 9b fa 0d 35 68 13 58 e4 52 de 33 37 f8 1b 37 34 5b 65 b7 f7 54 b2 f5 59 53 4a d4 0a 11 c4 d3 c5 3e 82 7d 43 84 36 0c 94 84 36 b0 de ec 43 a3 b1 85 4d 04 99 71 a4 7f 0a bd 65 d1 54 f8 d2 cc 55 2e f4 bb 77 4d 6f e5 f0 7d f7 f2 37 ac b5 58 d0 dc cc b5 21 aa 1b 37 72 72 6f 29 38 07 fc 48 cb d0 2f e9 3c a1 d8 ec 2d a1 16 20 0b 45 5f d2 b7 90 3d f5 55 e0 bc 2a cd 04 c3 08 08 e3 2e b5 02 dc 09 88 4c ce 24 21 44 10 80 4b 64 dd 44 1e 5a 34 14 cd 03 da bb 3a 99 2f 85 33 68 51 10 2d a1 52 05 77 39 74 d5 55 01 52 b3 92 3f 3c 89 33 51 89 8c e0 a7 12 16 8c 32 e1 1e c3 1b c0 72 e8 26 7a 46 70 d7 87 13 e9 83 0d e0 59 27 39 e9 d2 29 6d 84 22 85 90 cd 10 9c 80 44 db b7 07 4e 76 f0 cb 78 00 9b 65 91 fa b3 32 88 6d 84 59 95 10 42 0d fa 69 c0 c3 03 33 Data Ascii: At>j=5hXR3774[eTYSJ>}C66CMqeTU.wMo}7X!7rro)8H/<- E_=U*.L$!DKdDZ4:/3hQ-Rw9tUR?<3Q2r&zFpY'9)m"DNvxe2mYBi3
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 26 9c 80 33 3e 43 45 16 ae d5 97 f7 5f ab 3e 52 31 29 52 5c 71 1e ba a0 b9 cd cf c8 6f 95 4b 2b 96 7a d1 82 d1 38 86 de a4 2b 1d 77 ed d9 32 f8 c4 5b 2b df 45 ff d3 dc b6 1c 3b b3 b1 6a d7 34 a4 39 57 78 4e 64 b7 97 8b 08 98 6a 53 1b 4e 9d 89 4e 59 ff 72 aa fb bb 1f ea d3 c5 1f a7 b6 8f ce 51 90 8a c9 2a 95 e1 ee 74 4d 66 fb a0 9a bf 40 4b 88 29 61 a8 83 5e a9 0d 8f 4f b2 9a 66 48 6e d9 35 8a bc a9 9f d7 42 97 fd 6d b7 c8 d5 8b fb e3 9d 73 16 e6 1f 7c b4 08 5c da 42 c8 6d 8c 64 88 34 46 7b fa 87 53 f5 f1 8d bd 79 a5 b7 bd f0 09 b1 d1 ae 2b 7d 1b 95 96 bf 06 4f 4b 67 39 62 2b 71 c5 d5 0f 13 99 4f 4e bd 1c 37 b1 f2 9f 53 df 9d ba 70 5c b7 7e b9 05 a7 c2 d5 8c 49 af 24 7e bd f0 ee bf f3 b5 9d bb 8f ce 5a e5 04 ca ba b2 4e 63 9f 1b d9 9b 19 86 0b b5 fc e5 c1 Data Ascii: &3>CE_>R1)R\qoK+z8+w2[+E;j49WxNdjSNNYrQ*tMf@K)a^OfHn5Bms\|\Bmd4F{Sy+}OKg9b+qON7Sp\~I$~ZNc
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: fc cf 27 22 01 61 78 a0 2d 9d 21 8c df 0d 45 db 13 24 ef 41 22 d7 23 bf 0a 1e c9 e4 45 ed ab 4d 20 ad 7f 48 e7 45 bd cb 9e 0e ce 6b 72 cc a6 e0 1d 6d f0 cd 6f a0 d8 e3 68 c7 a7 06 86 ee 83 83 c8 40 24 f4 82 21 5b af bb 8d 62 c5 6f ff a2 78 1b a2 fd 74 b3 66 65 1d fc a5 d3 ab 53 35 2b c8 92 f6 59 e0 fe 59 47 b8 68 ba d9 a5 f6 73 09 2a 53 6d 1f 21 ba 9a d7 ea 90 09 4d 7f 6b 99 e3 6e 9f 89 83 9c 03 e0 c8 32 58 d8 ca 1d df b4 c6 55 5d e5 15 de fd 22 8d f0 d3 2e 49 4a 42 46 b6 46 e8 ce 5c 42 c6 36 ee f3 a9 a3 26 c6 11 07 c0 d8 ee dc 04 4e 42 4a 66 67 78 9b cf 3b cd ca 33 4f ef 6a 62 53 34 c1 ff 90 50 c2 cc e6 4c 3f 36 65 4c 21 73 af 0e b7 dc ff d2 ed 6f 42 4f d4 93 b6 43 24 26 89 d0 5a 7e 77 26 b5 2e fc 17 8f 2e 9b 3c d1 b0 a2 61 f2 1a 0f 19 84 5d da de 38 b6 Data Ascii: '"ax-!E$A"#EM HEkrmoh@$![boxtfeS5+YYGhs*Sm!Mkn2XU]".IJBFF\B6&NBJfgx;3OjbS4PL?6eL!soBOC$&Z~w&..<a]8
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: ee 51 d2 be 0d a4 25 a3 29 98 de 83 19 43 ab 1d bf 1c f5 2c 4b be b5 23 99 1e 40 c3 0c 44 a3 f4 d5 23 7b b1 38 72 a7 7c be 94 21 ad b9 72 dd f4 fc 34 48 ba 86 12 7b f2 cd 08 36 22 90 84 6d d2 9c fe a0 7a cf f1 6c 23 49 a6 80 b5 eb a7 fa ea 26 cb f4 72 1d 30 aa e3 30 bc 9d 09 88 6b b2 91 76 13 9f 29 ab cf 07 7d f7 4c ed e1 3d 24 78 d6 38 30 c0 ef 95 1a 99 61 4c 74 cc 39 d7 2d 2d ea 08 c9 63 ef 36 fd c0 4d 2e 0f a2 37 4a 2a c6 7b 2b 8d be 43 3a 8c 7b ed 44 23 70 9f 8c 3b 0e 6e 1e 83 de b1 4d 9b e8 cb e5 14 d3 be 7a fa f0 e6 8c 83 92 bc df a9 5a da 7a ee 79 a5 1a 03 6f 3f 85 1d 9f c5 fe 6b 4e 84 0f 79 1c 30 cb d9 41 02 bf 98 18 9a 66 13 61 0e 1b 2c 81 e9 cb 2a e0 47 d9 41 6f 78 a5 19 c3 53 ad 3b fe 17 e8 0c d8 9a 1e 82 d6 b6 9f be d7 73 fc 5f 44 7f 59 99 08 Data Ascii: Q%)C,K#@D#{8r\|!r4H{6"mzl#I&r00kv)}L=$x80aLt9--c6M.7J{+C:{D#p;nMzZzyo?kNy0Afa,GAoxS;s_DY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49794	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:26 UTC	680	OUT	GET /fonts/family/cheltenham/cheltenham-italic-700.f99a0459024509f157a3352e5de4f873.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:26 UTC	1111	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 32 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 58 76 71 45 38 71 4c 35 32 6b 76 75 76 56 47 7a 78 61 62 46 51 6f 4b 46 37 79 56 6f 62 73 6a 59 35 38 58 6a 4c 38 77 71 6c 62 50 72 64 35 77 66 58 65 55 4c 7a 39 62 30 76 6c 31 35 63 34 69 75 66 6d 36 75 41 6f 57 42 50 32 44 58 67 51 4b 6d 4b 67 6b 75 4e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 3a 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 28620X-GUploader-UploadID: ADPycdvXvqE8qL52kvuvVGzxabFQoKF7yVobsjY58XjL8wqlbPrd5wfXeULz9b0vl15c4iufm6uAoWBP2DXgQKmKgkuNCache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02:0
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f cc 00 10 00 00 00 01 0d 00 00 00 6f 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b c9 40 1c 81 06 06 60 00 88 64 08 32 09 82 73 11 0c 0a 83 a3 40 82 f3 5b 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 85 10 07 86 2b 0c 84 34 1b 02 f2 07 d8 36 6d 9e 76 3b 60 2c 7f fa 9c 33 3a d0 c2 c6 61 d6 0c f8 6d 29 3a 90 bb 1d 04 55 9b 7b 77 f6 ff 7f 4a 72 31 86 71 d8 00 cb cc 5a fb 87 0c 09 09 4c ba b1 a7 f6 c0 d5 70 3d 86 23 f4 d2 1d e1 ec 49 35 22 cc 20 81 ae 81 d0 71 b8 f9 14 9b cb cc bb d9 5d 44 27 7d e8 57 54 a2 12 c4 c4 54 47 79 5c 4c 75 ad a1 9a cf 5f d7 76 f3 fe 80 f1 56 59 10 11 7d 44 cf fa 63 c2 b9 cd 3b e9 1f 7e 37 b1 a9 f4 0a 2a 69 f0 66 d7 57 45 25 0d 2b cc 50 ab da ff 1b 8e b2 88 e7 de 49 dc aa Data Ascii: wOF2ool@`d2s@[6$ +46mv;`,3:am):U{wJr1qZLp=#I5" q]D'}WTTGy\Lu_vVY}Dc;~7*ifWE%+PI
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 1f 76 46 27 13 69 12 8d 9a 94 2d 2a 16 d5 33 df e4 78 ea 8d d3 32 24 59 ab 80 ca 69 f2 ad b2 c2 da 28 04 5a 99 0a 95 c3 d5 1a b5 fb 0f 0f 7b 3b b4 09 d2 db 22 83 7a 3c bb 47 41 a9 c3 05 a0 b2 1b 55 9c aa a4 a8 2a 87 ab 37 da 71 4e f2 24 c4 8d 86 21 96 79 90 0d ba db 74 ef fd 43 4f 2b 85 1b 01 1c e1 ea dc 82 9a 5a df b3 e2 53 b8 ac e1 16 bb cd 5e f4 6d ea 6d 3d 7e 4e 11 e0 c5 64 ea 09 ea 83 c4 fb 8a ef b6 a5 32 63 9c 02 e5 da 52 f6 e8 ee 4f 8f 80 60 1a 98 d5 0b 9c 46 51 e0 e2 16 27 74 40 d2 2c 67 ef 71 b0 43 8a 88 ac 55 77 c7 ae 1b ed 7f 56 c1 02 0f 66 83 b9 37 c3 9c 08 9f e7 66 f7 fb da 1b 20 e2 86 b8 75 2d da 21 27 43 69 27 6d 2b 23 65 a2 64 e5 38 03 37 75 77 d1 03 33 6f 65 0e b4 49 f0 4f 3a 3c f3 21 3e 8b 2f 57 be 81 00 82 e9 b4 79 ba 6e 73 c1 26 34 81 Data Ascii: vF'i-3x2$Yi(Z{;"z<GAU7qN$!ytCO+ZS^mm=~Nd2cRO`FQ't@,gqCUwVf7f u-!'Ci'm+#ed87uw3oeIO:<!>/Wyns&4
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 46 1c b4 dc f3 70 fc 86 33 f5 ae 13 6e 5c f4 ac fa 73 16 03 81 80 e4 0c ff 56 6b ea 27 a6 09 96 c3 7f 62 04 88 18 6a 24 a3 09 ab fd 65 24 15 a5 fd d5 c1 8d 62 ff ad 07 2c a9 90 82 ab 90 70 5c b5 cc ee 64 5c 76 c6 ba 37 d3 5c bd a2 d1 05 dd 75 59 51 e7 6c 96 b0 e6 ec 9c 1b 3a 94 ed ef 3a 57 9d ef 13 6a 77 76 67 d2 a4 5c 0e ec d0 a2 0e dc ca 53 cd 91 08 88 50 4b a8 3c 5e 98 22 57 a2 80 92 76 56 bc a3 8a f0 77 4c 61 7c 3e e6 71 da 7e 89 7d 3a cb 8b d9 ee c4 df c0 35 70 53 f2 cc fa 63 10 35 f5 1a e5 2c 94 e2 ca 66 f2 c6 a9 2f db 3e ed 66 a3 59 63 3a 01 9d 10 00 b0 38 c5 ce 91 dd 29 f6 e4 e2 fe ec 00 b1 e9 a0 42 0a ce 42 c2 6f bd 7a b1 42 e0 6e f4 45 7c b0 98 2f 3c bf bf bf 9c 60 9e 80 dc 4c ee 60 dd fc fe 9e 45 60 7f 28 90 2f 04 5c 91 b2 05 17 96 2d 50 b2 7f Data Ascii: Fp3n\sVk'bj$e$b,p\d\v7\uYQl::Wjwvg\SPK<^"WvVwLa\|>q~}:5pSc5,f/>fYc:8)BBozBnE\|/<`L`E`(/\-P
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 74 25 a2 d9 e9 70 d5 80 6a 54 25 57 ad d0 b3 e8 79 ac d1 49 db 27 ed 9e 74 60 d2 11 d6 59 2e f3 8f e2 cf 1f a1 6b d4 56 47 dc f7 c0 a7 09 6a 44 c1 18 b2 f0 34 ef fe 78 8a bb b9 5e 28 ec 83 c3 50 0a a1 93 59 60 9f 96 e6 1c d9 b0 5c 24 3f 60 fd cf e9 4b a4 ce f9 37 f7 57 f3 7a 55 55 f7 40 25 b5 02 80 c1 a4 df d1 bf d3 cf 3f 3c de de fc 74 ef 8f a5 3f 06 7f b4 3e c4 3e 68 78 b0 94 c0 f7 83 1f 7e c5 00 3f dc fc ad f0 7e fc fd 84 3b a9 77 54 77 e4 77 44 77 e2 6f 7f ff fc 5b 78 8a 13 38 49 a9 6e c7 dc f3 11 04 e6 df 36 ff e3 73 76 50 ff f9 dd 68 73 77 8a 3c fd 75 e1 58 9b 8d 2f 02 ca 7f 16 9a 4c e0 c8 89 22 54 3f bc a7 3b 2d 22 8f 35 f7 c7 09 05 79 c7 01 59 af a2 ad b5 92 7b aa 2d f7 c0 55 0f 5d b2 83 1d 20 89 47 6e 01 1f 94 3d 06 a3 fa e2 93 cf 9e 70 e3 c0 55 Data Ascii: t%pjT%WyI't`Y.kVGjD4x^(PY`\$?`K7WzUU@%?<t?>>hx~?~;wTwwDwo[x8In6svPhsw<uX/L"T?;-"5yY{-U] Gn=pU
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: a2 52 b7 7c 28 3d cd 5b 58 0c 9e 32 40 62 bc 19 ad 8a 51 84 e8 4f 29 07 4b d4 84 ed 44 15 66 f2 c8 37 b2 dd 75 48 cf 6b 6d 86 e3 60 2e 35 23 92 1a 76 4c c2 ae 5d 76 76 da ba 73 53 38 8d a1 4d 0b 42 5a bb 03 c1 64 74 da 16 42 8a a1 c5 4b 5e 6f fa 2c 7b bc b1 64 97 f7 c2 58 38 bc 19 f2 4a f2 56 77 11 bb 98 67 8a aa 8a 3e f7 1e e9 ac 36 c5 30 79 ab bd ee 1d 3f 2e b8 57 30 4f ac fb 69 0a 96 05 50 e8 8e 74 df 65 59 7c aa ca e1 b1 7b 9b 70 1d d5 88 a7 b8 8a f7 9e a7 72 f0 a8 d7 c4 a1 69 c7 6f b2 62 a5 78 a7 e0 23 41 4a 51 a4 c9 ac e3 9e 62 91 b7 e8 d9 a0 da 7a 68 6f 43 14 0e b1 57 d2 51 aa a6 c1 67 28 70 13 2d 9c 81 c1 09 56 f8 08 47 c8 29 98 49 ef 1e 96 32 81 3e 26 58 8d 16 bd 95 bc a4 ba f6 fd 9a bb 3e af 85 af 73 5c ad 29 35 d5 a4 aa 26 aa 71 5d 2a 9d 59 86 Data Ascii: R\|(=[X2@bQO)KDf7uHkm`.5#vL]vvsS8MBZdtBK^o,{dX8JVwg>60y?.W0OiPteY\|{priobx#AJQbzhoCWQg(p-VG)I2>&X>s\)5&q]*Y
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 6a 64 b0 66 1c de c7 65 8c 6e dd 4f f1 a2 fa c0 e7 83 b5 fb 22 89 63 17 5b c2 5c 0c 59 d6 32 32 c5 55 d5 02 7a 80 72 53 ee 5e 12 32 a1 d5 f5 f7 e2 de 7d 2b 86 cb ce 21 1a f7 7b b6 7a 56 d1 1a 11 20 ef 36 5b b4 19 49 24 43 e9 fe 75 76 96 99 f4 84 36 ce 23 b7 18 a4 81 8d f1 40 29 c4 45 8a 6d 3d f4 b8 b4 5c f1 10 50 d6 56 03 08 d3 02 8e a0 45 46 9a 3d 62 df 72 40 ae 32 e8 97 37 7a 4b 89 f8 76 30 10 20 c1 8c 71 56 0e 53 c5 9a b7 62 84 fd 4f ad 39 88 cc 5b 78 ed da 3b 39 2c 1b ba 9d 71 01 55 98 4d c8 2b 79 cb d6 58 7f 4e d3 04 8f 4e ec 87 65 7d ae 3f 62 02 6b 2d 95 c2 1d 60 08 51 d7 4f 12 dd cf ec 92 91 80 41 22 43 77 f6 63 95 c9 b0 1b 02 8c d0 8c 6a 29 8b 59 ec d1 75 15 78 43 93 d2 a2 6d 98 c8 ca 81 ab 55 6c 7c b3 d5 9e 20 61 72 a5 92 2a 4b d4 67 31 e8 6b 41 Data Ascii: jdfenO"c[\Y22UzrS^2}+!{zV 6[I$Cuv6#@)Em=\PVEF=br@27zKv0 qVSbO9[x;9,qUM+yXNNe}?bk-`QOA"Cwcj)YuxCmUl\| ar*Kg1kA
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 82 79 b2 6c 88 78 cb 40 16 f4 52 a4 2a 51 1c 2c d7 1c 8c d0 4e c1 34 d6 05 72 f3 db 16 a3 0d 74 ee 2c e3 ba bf f5 0c 76 0c 9a 9b e6 ef 1c de 8a ff 42 b1 d8 fa d0 db 97 af b0 8b 75 c2 a5 66 4d 5b 04 e6 d1 6d 5a 2a 63 a9 9d 68 90 0c cb 50 c1 46 61 71 32 cc ce bb 4e d4 f4 4d fc 83 3c 28 51 3f 1c 4f cb 09 35 10 14 01 6c dc f2 d5 e9 b1 28 3d 30 db f6 d8 2a a4 b1 27 97 d3 c6 e8 f1 1c fb 21 68 0f 9e e1 94 12 cb 5c 55 10 0f f4 83 ac 74 d7 60 79 6d 2f 9f 7c 72 00 91 5f c9 98 94 13 dc fb 39 85 13 8e e7 e2 4a a5 8e a8 18 d9 f5 db 8f 2b b6 cf ee 21 40 2e f7 62 51 cb 8b f5 76 9c 81 8c 1d 25 dd b7 00 7e 50 a0 2d 4b e5 4a 57 98 2b 97 db 03 2f e4 3d ed 1c 98 f4 38 f7 39 71 b1 7a bd 7c 22 97 d7 8a bf b4 c4 b7 b5 cc 1e 79 2e 2f 13 b1 a6 e0 0e f8 18 b2 e8 4d 1e b9 86 ed 5f Data Ascii: ylx@RQ,N4rt,vBufM[mZchPFaq2NM<(Q?O5l(=0*'!h\Ut`ym/\|r_9J+!@.bQv%~P-KJW+/=89qz\|"y./M_
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 30 64 62 a6 06 3e 53 2c 1d b3 bc 40 56 66 7d a6 9b 6f 7c 84 9b c8 ae 23 15 2c 37 63 aa c8 63 04 a4 8c 59 40 93 1d 6e b2 3e 2d 45 e3 26 70 f4 2e 4d a6 0f 2f 35 94 6c 93 4d a0 61 21 5b d8 78 6f cf 04 77 98 e4 6d 7d 7d d9 4b 83 96 a7 65 ff 99 58 92 d1 cc 5b 41 5f 10 b8 74 a6 ec 47 56 0b 32 35 40 aa 34 5a ea 6b 67 03 8b 7c 57 ad a5 0d 2e 4f 2e 3e 21 9b 81 84 0e 83 3c 8f 1c 43 5f ff 6d 00 43 66 be 56 c1 68 bc d3 85 70 02 2c ee a8 b5 6c 40 4d 9f d9 a7 a8 7a dc dc 0d 07 09 8d 11 33 c1 6e b1 e8 9f a6 45 dd 65 f2 c9 b5 b6 cc ae 1d 99 ad fd 47 be 1c 99 f7 21 35 cd e6 39 5c a6 e4 2f e7 29 2e 27 62 39 21 66 d2 13 a6 82 e3 97 29 9e 6c 69 31 89 3f fc fb 40 9b 18 61 26 67 f2 4b d5 fb 07 fa 4f eb 9b 7d f7 68 e1 7b 37 68 ba 9d 3d 40 a8 c0 82 47 d5 79 b3 2d 68 20 09 c5 59 Data Ascii: 0db>S,@Vf}o\|#,7ccY@n>-E&p.M/5lMa![xowm}}KeX[A_tGV25@4Zkg\|W.O.>!<C_mCfVhp,l@Mz3nEeG!59\/).'b9!f)li1?@a&gKO}h{7h=@Gy-h Y
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 8c b6 d8 74 9e 95 ec 35 0b 5b 45 9f ca 6b bc b5 51 22 ff d3 0f c4 49 b6 b2 64 2f 07 e8 c5 87 5f 86 2d 26 7e 7f 7b 8e c4 1c 6e 46 25 71 42 a0 a5 b5 2d f4 e6 39 70 fe ae 82 a0 cc c0 36 ee 06 44 d5 69 2d 57 ae 0f 69 4a 51 f0 f2 a5 52 23 95 45 09 58 1d b5 9a d9 55 68 47 3f b3 f2 c2 59 13 07 f3 2b 52 db 8d ab fc aa 69 99 e1 7b 7d f7 21 8f 16 28 50 83 e4 69 94 82 d1 31 5f 69 fa 7a dd 89 b0 bb 8d 74 8f 4c 44 2d ad 53 30 a8 9a 15 2a 0b 95 4d 9d 32 cd d1 a8 4d 64 a5 3c e4 c3 57 f1 4f da 6f 6a 0a 43 65 f5 75 cd 8e 06 6d 6c f6 bd fc 0a 6b 7b d2 6a bf 6a 5a 56 f8 84 ef 3e d4 91 42 39 62 90 34 8d 52 b0 6d a6 9f 34 7d 43 d2 89 b0 7b 2c 29 a3 d5 7b 56 b1 81 e4 51 75 e7 9f a7 d5 67 97 fc dd ca 70 55 3c 7e f0 bd 1f 09 41 4d 2e 43 20 61 41 e7 b0 38 88 6a 0c b3 df dd 55 83 Data Ascii: t5[EkQ"Id/_-&~{nF%qB-9p6Di-WiJQR#EXUhG?Y+Ri{}!(Pi1_iztLD-S0*M2Md<WOojCeumlk{jjZV>B9b4Rm4}C{,){VQugpU<~AM.C aA8jU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49796	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:26 UTC	1491	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:26 UTC	703	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 55 73 65 72 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 20 20 20 71 75 65 72 79 20 55 73 65 72 51 75 65 72 79 20 7b 20 20 20 20 20 75 73 65 72 20 7b 20 20 20 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 20 20 20 20 20 20 20 70 72 6f 66 69 6c 65 20 7b 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 4e 61 6d 65 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 75 73 65 72 49 6e 66 6f 20 7b 20 20 20 20 20 20 20 20 20 72 65 67 69 49 64 20 20 20 20 20 20 20 20 20 65 6e 74 69 74 6c 65 6d 65 6e 74 73 20 20 20 20 20 20 20 20 20 64 65 6d 6f 67 72 61 70 68 69 63 73 20 7b 20 20 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 53 75 62 73 Data Ascii: {"operationName":"UserQuery","variables":{},"query":" query UserQuery { user { __typename profile { displayName email } userInfo { regiId entitlements demographics { emailSubs
2023-12-05 18:13:26 UTC	1315	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 39 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 149access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:13:26 UTC	215	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, Origin, Accept-EncodingTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:26 UTC	149	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 2c 22 70 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 75 73 65 72 49 6e 66 6f 22 3a 7b 22 72 65 67 69 49 64 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 6c 65 6d 65 6e 74 73 22 3a 6e 75 6c 6c 2c 22 64 65 6d 6f 67 72 61 70 68 69 63 73 22 3a 6e 75 6c 6c 7d 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 44 65 74 61 69 6c 73 22 3a 6e 75 6c 6c 7d 7d 7d 0a Data Ascii: {"data":{"user":{"__typename":"User","profile":null,"userInfo":{"regiId":null,"entitlements":null,"demographics":null},"subscriptionDetails":null}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49793	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:26 UTC	676	OUT	GET /fonts/family/franklin/franklin-normal-300.a6479a5200f9a6352bdb71589c27c9c3.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:26 UTC	1113	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 31 33 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 65 50 71 46 2d 6a 63 4d 35 74 65 64 7a 4e 70 57 75 55 4e 52 71 52 55 56 49 4c 45 5a 74 4c 67 43 6a 30 6b 4b 67 4b 38 53 57 72 4d 4e 42 6f 4f 51 73 52 44 65 47 49 37 46 65 75 59 56 35 59 62 35 4b 53 42 65 66 5f 2d 53 77 4f 56 31 74 6a 7a 7a 72 53 79 39 38 4f 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 20136X-GUploader-UploadID: ADPycdvePqF-jcM5tedzNpWuUNRqRUVILEZtLgCj0kKgK8SWrMNBoOQsRDeGI7FeuYV5Yb5KSBef_-SwOV1tjzzrSy98OACache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4e a8 00 10 00 00 00 00 d3 18 00 00 4e 49 00 01 00 c5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b d9 5a 1c 81 06 06 60 00 8b 76 08 2c 09 82 73 11 0c 0a 82 9d 44 81 ff 7f 01 36 02 24 03 88 00 0b 84 02 00 04 20 05 85 44 07 86 04 0c 83 16 1b 37 c1 07 f0 e6 31 b5 72 3b 00 cd aa 5f 8b 1b 89 d0 ed a4 12 83 fd a3 99 81 60 e3 00 4c 48 8e 9b fd ff 7f 4e 50 73 8c c7 75 00 66 5a 09 8a e2 44 58 a6 84 56 47 a2 39 ed 4e cd d5 55 5a a9 61 cf 4e 3a 6a 9d 4c 63 19 fe c4 2d 86 0b 6f 9f 18 08 8c 16 dc c7 3d b8 e0 61 18 1e 1e 46 ca 63 29 e1 d2 5e 84 de c2 85 f0 ef 67 45 e2 4c 0b 8d f1 43 18 36 19 6a b7 87 e7 1c e7 32 bc 7c a9 2b 9a 2e 79 31 ee 92 a4 01 f9 b4 f5 44 91 fe 3b b6 9d b3 ed df 86 60 a4 44 4b a6 fb e9 cc b0 f4 a1 47 Data Ascii: wOF2NNIZ`v,sD6$ D71r;_`LHNPsufZDXVG9NUZaN:jLc-o=aFc)^gELC6j2\|+.y1D;`DKG
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 62 c6 5e 1d 0e ea 70 13 11 47 22 51 48 74 ca 45 a4 cb 48 ca 14 55 ae ab 40 4c 01 75 01 b6 00 d7 61 9a 14 3d 8c 01 c6 08 63 8a b3 c0 d8 60 1c 40 ce 14 77 8a 27 c5 5b c4 97 e2 8f 0b a4 ec a4 46 cd 2a 2f 80 42 53 09 77 58 a4 eb 68 5c 4c 5c 42 b2 a4 91 32 96 95 93 57 f0 b6 7e 07 f4 de 07 1f eb 26 4c 4b 5b 47 57 4f df c0 d0 c8 38 1f a1 1e 47 40 14 ff 75 25 d9 54 a8 ba 0e a7 38 5d 1f b5 e5 3a 6f df bb d3 f7 e9 4a 70 1c 01 d4 2e fb 09 65 02 4a 28 0b 97 61 8d bc 70 29 66 28 09 5b 9e db 61 4a 70 3a db 9d e1 85 f2 f5 e5 f3 83 dd 2b 12 48 db 2e b3 d7 26 07 34 99 fa 49 dc d3 12 02 0b df 95 08 52 14 31 71 09 c9 de 14 4a ba 4c 46 56 4e 5e c1 db fa 5d a9 f7 3e f8 f8 ca c5 1c 93 8c a3 4a 7f 27 fc b3 5e 49 0c 86 a0 93 94 19 aa a7 30 c5 d4 60 ef ca 15 d2 94 08 cc b1 d3 e5 Data Ascii: b^pG"QHtEHU@Lua=c`@w'[F*/BSwXh\L\B2W~&LK[GWO8G@u%T8]:oJp.eJ(ap)f([aJp:+H.&4IR1qJLFVN^]>J'^I0`
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 60 48 a8 01 58 00 0e 41 d3 18 2c a1 50 a8 54 56 25 43 ec 6f 4c 88 90 48 24 12 89 c4 53 11 41 10 04 41 20 80 10 c3 e4 42 21 10 62 d8 9e f7 81 10 c3 30 a1 52 a9 54 2a 77 95 ae 0e 0a a2 da 33 b0 8c a2 40 14 25 a8 a9 bf 6c 4f 0d 69 da 54 80 dd 34 63 07 70 75 f8 1c 81 ec c2 ed 68 5a 9e 06 66 2a 63 9b e5 be c5 c4 25 24 db b4 87 a2 28 8a a2 a8 bf 0d 3e f8 d8 db 28 d7 8a 69 4f 80 28 e3 32 13 ae fb 13 2f cf f5 8c 3a dc 3b 4a d6 6d f2 30 87 cf e7 f0 f9 00 fa c6 34 35 02 eb 14 0e 43 d3 0f 3b 74 0d 7a 15 43 07 19 9b b9 6c 86 6c 11 96 6f 58 15 b6 9d 3d 1c ca 4e 9e 84 90 c6 bc e7 fb f3 ed 03 f8 7b fe 70 b8 e1 bb fa a2 8b 82 35 84 02 61 4c 0a 31 9b cf e7 f3 f9 7c 3e 06 aa ec 0a a0 ae a1 49 9b 44 34 2a 22 2c ec 35 ac 51 11 a4 6a 20 63 a4 af 5b d6 c9 f0 32 b0 13 9d b7 5e Data Ascii: `HXA,PTV%CoLH$SAA B!b0RTw3@%lOiT4cpuhZfc%$(>(iO(2/:;Jm045C;tzClloX=N{p5aL1\|>ID4*",5Qj c[2^
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 1b 8b 98 49 df 7d af 34 4c fe 93 1a 06 ff 56 54 53 06 cb b7 5d 61 95 c8 6d 7c 2b 22 b6 63 93 f3 87 72 d1 3f 15 27 f9 ae 38 95 a8 75 62 5e a3 42 25 11 e1 78 a2 c2 3a 79 80 ac 47 87 29 09 75 e1 c1 59 1f a0 9c f2 9e 33 7e 4f 54 01 78 e6 a0 8d 59 1f 3e 82 d6 45 7a c7 d1 db 79 35 40 7a a3 fe 8b 25 b7 9e 0f e3 e8 48 2e 2e 5b 4c 89 ac 01 a8 ab 8d 0f b0 45 a1 66 ca a6 fc 2b 7b 68 9d e1 33 23 fe 4c 32 be 8e 60 0f 4a a7 3e 57 f3 58 01 68 62 6a 66 c1 a2 25 cb 56 ac 92 03 76 80 3c 05 8a 94 28 53 a1 4a 8d 3a 0d 07 69 d2 a2 4d 87 2e 3d fa 0c 18 32 02 61 cc 84 29 33 e6 2c 58 b2 62 0d ca 86 2d 3b f6 1c 38 72 e2 cc 85 2b 37 ee 3c 78 82 f1 02 e7 cd 87 2f 3f fe 10 02 04 42 0a 82 12 0c 0d 23 04 56 28 1c 3c 82 30 e1 88 48 c8 28 a8 15 04 30 da 74 e8 72 dc 80 51 67 4c 98 34 6d Data Ascii: I}4LVTS]am\|+"cr?'8ub^B%x:yG)uY3~OTxY>Ezy5@z%H..[LEf+{h3#L2`J>WXhbjf%Vv<(SJ:iM.=2a)3,Xb-;8r+7<x/?B#V(<0H(0trQgL4m
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 5c 5a c0 48 ac 3c 91 d3 9c 0e a5 aa 99 d5 f5 88 1e 6e 52 c6 10 15 b4 23 21 6d b2 46 21 8b 34 8a 4d 88 02 98 3b aa d8 78 bc 16 b2 f5 d5 ce 16 de 57 4e 88 f1 d8 32 d4 42 86 43 a2 a2 21 c3 90 3c 2b c6 24 64 bd d2 17 d4 11 64 12 32 6d 7e 44 2f a9 ab 4d 91 78 f6 0d 34 c5 88 4b a9 09 26 af 16 fb 5c 2c 80 f5 14 75 64 e6 60 9f 94 ce be 12 58 d9 24 e2 a0 d0 2f 24 66 ab a2 1d d6 7f 69 19 be 8b 2d fc 75 da 4d 8c 01 8b 07 94 5d 5d 30 ed b5 c0 2d 9c 16 5c 56 64 37 fb dd 60 4c d8 d9 82 4c 37 40 02 48 64 d9 67 0e 03 84 a1 63 2c 79 83 76 93 73 73 75 85 e8 ea e5 dc 93 f5 53 02 43 aa 3f d0 5d 86 be 32 ec bc b9 77 6e 3c 18 f9 e9 55 d4 e0 4b 96 2d a2 a9 bd 4f 80 ef f9 1a 7b a2 6d 4a af 3d de 64 5c 34 e9 b7 b9 d0 5b 5f fd 2f cb 18 d3 56 00 54 7d b2 c1 66 2d 43 ce e5 00 53 f6 Data Ascii: \ZH<nR#!mF!4M;xWN2BC!<+$dd2m~D/Mx4K&\,ud`X$/$fi-uM]]0-\Vd7`LL7@Hdgc,yvssuSC?]2wn<UK-O{mJ=d\4[_/VT}f-CS
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: b9 cd 17 08 f8 f3 e0 b5 ee 55 8b 34 9b 19 8d ed 50 26 a2 91 71 b6 37 ae 26 c0 68 1d 9f 4c b9 51 eb d8 54 a8 bf fc 09 a9 7c 72 71 1b 9a d4 67 fc ff a3 21 d5 f9 7b c6 1a b7 7c e0 25 a6 ec 37 4c 01 99 59 b0 e0 f8 fd 45 bd b9 6b 83 37 f3 ff 2f 29 11 9a bf c9 c9 cf 06 50 44 a0 e1 51 77 30 bb 20 b2 bc e2 19 2d e6 6f 76 e4 6e 4c 80 a1 38 2f ba 7a fd 1b f8 12 f2 e3 9f e0 61 d1 85 07 af b9 bf cf 68 96 73 74 cb a8 92 6a 54 a4 5d 6a 44 83 14 04 62 dc dc 3a 75 d6 30 ec 58 dc c2 51 02 53 79 3d 4b 1d 49 0f f3 58 09 67 51 15 65 f5 75 ec 31 e5 96 18 a6 f6 aa 43 e3 96 ff bc 97 1d c5 55 21 fe b6 8d f6 19 5b 62 ba 46 ab 27 74 d1 ea c0 ee 5f b4 93 68 38 72 1c 2e 39 7c aa b6 9e 9e f4 8f d8 ef ae 2a f4 ac d1 8a 55 a4 de 72 bf a7 f6 db 0e 82 6d 79 69 60 f8 17 fb 98 ce 45 da 2c Data Ascii: U4P&q7&hLQT\|rqg!{\|%7LYEk7/)PDQw0 -ovnL8/zahstjT]jDb:u0XQSy=KIXgQeu1CU![bF't_h8r.9\|*Urmyi`E,
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 3d 96 dd fd ed 74 80 f2 cd a3 9b 4d e5 06 ba bc b1 6b 37 7f 94 63 03 fb 98 98 6e 0a fc dd 33 4d b8 1f 86 43 23 db 70 90 0e a7 3d a1 97 3c ad ac f3 ec f3 85 4d d5 f5 43 4b e0 8a 74 0d cd f9 7f 8f 20 e1 cf e9 c9 69 aa b7 04 c9 ac 97 aa d0 97 ed 92 4e 5f cc 37 32 c1 e1 c2 80 ab 43 5a 7f 30 2a a1 6c b0 e4 a5 48 f8 a0 5f b5 93 79 ac fa a1 ac 4a e5 63 62 fe 2a 26 87 2d 2b b7 92 96 fe 70 6c 41 ec 4b 5f 70 2e 39 4c 9b 94 8f b6 59 50 95 90 34 2b 0d c7 12 c2 b1 53 6e e5 10 3d b5 14 29 5b 86 e1 31 3c 3a 3e 0d 6d 95 e8 50 e4 86 76 df 0a cc 66 71 b0 ee e5 a1 03 46 5f f8 1a 3c 7e 71 fd a6 7d c5 66 b1 c6 17 be 54 11 f5 d5 97 2f 51 f6 5c e0 9d c6 75 9b 39 89 98 76 8c d5 b7 49 c3 d4 db 80 04 5f 21 aa cb da 22 1f 5a 8a 8e 2a 13 ba 0e 8e 0e b5 e4 d5 2e 0a ce 07 7a e3 cf 9c Data Ascii: =tMk7cn3MC#p=<MCKt iN_72CZ0lH_yJcb&-+plAK_p.9LYP4+Sn=)[1<:>mPvfqF_<~q}fT/Q\u9vI_!"Z*.z
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: bd f0 c9 21 ea 2f a1 de 36 e6 6e 54 8c a6 a7 39 8c 17 d4 78 fd d2 29 c7 42 63 23 50 36 44 c5 56 61 b0 87 85 f6 63 c2 4b c4 e0 a0 59 3b 1f 68 78 37 b3 71 33 b1 b4 34 3a ae ac 22 21 be ac 26 2e ba a4 68 dd 59 74 65 85 b7 95 12 97 cc 0b 69 c7 04 7b 2b f1 80 c6 e7 69 06 60 06 b1 71 31 95 34 81 a5 34 25 52 6e 57 56 96 27 9b 59 7e a6 e0 4c 00 38 45 d6 cb 4b 9b 5e 80 64 98 40 75 51 12 bd 71 2b cf 35 7d 49 2e 24 5a ae a5 a1 2d ab eb aa 0f 91 1d b6 ee 90 28 72 16 9e d9 94 47 ca 7d e1 2b 68 f7 9c 27 15 b6 b5 c5 db 61 45 24 44 c2 f9 18 b4 97 0a 7c 38 62 29 b1 31 fe 83 51 05 4a 3c 59 76 a3 9b af 90 9a 18 59 48 36 40 23 82 ba 69 c9 c4 c3 61 6a 9e 6e 52 b4 7a 7e 9d 38 21 c1 d7 1d 37 fe 28 06 57 cd 15 43 af 23 a8 c3 d3 e5 93 0c ed 31 ed ab 5f 0c 3e ec 7e d7 bf 74 f6 b7 Data Ascii: !/6nT9x)Bc#P6DVacKY;hx7q34:"!&.hYtei{+i`q144%RnWV'Y~L8EK^d@uQq+5}I.$Z-(rG}+h'aE$D\|8b)1QJ<YvYH6@#iajnRz~8!7(WC#1_>~t
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 11 4f aa 5b 8b 36 f2 9d 13 1c 12 d6 f2 0b 2f 7f 85 7c 78 b5 6b 7a b5 e8 6c be 53 ba 43 c2 7a 45 71 5a b7 ec 8d da bb 3a 73 5f c0 13 46 c2 16 a3 3a a8 cb 00 e8 12 45 c0 5b 5b 47 aa 3b 46 97 66 40 0a ba 1a 62 f2 84 4e d1 5d 42 b6 c7 f4 e4 34 c4 91 fe 89 6c ac 19 3b dc 5f b1 f7 15 fe d5 18 f8 b5 d4 a3 cd fb 86 8b ff 6d e1 b7 ea 40 03 7c 95 a4 54 8d 8b e1 b5 99 20 b3 02 a9 a8 86 b0 77 82 8a 7b 55 60 93 26 b9 c2 0f 19 9e 22 da 0c 2f ff fc a9 24 6e c1 e9 e0 30 f7 9c 02 14 43 34 31 43 35 a2 ad c7 64 5f 00 63 11 7b ea 80 b7 76 07 51 f8 fa f3 a5 b2 65 22 0e 1f 4a 74 1b 8c 60 15 0f 1f 2d 24 69 76 81 d1 43 d8 4e ec 1e 5f 43 c7 03 25 85 ed 43 ee 29 8c 1a 56 8b cb 17 5a 9a b1 8d 28 d6 2d 62 dc aa 1b db 2d 88 11 b4 61 5b cd 58 53 50 ac b8 a5 4d 41 e1 9b 63 96 3d 84 74 Data Ascii: O[6/\|xkzlSCzEqZ:s_F:E[[G;Ff@bN]B4l;_m@\|T w{U`&"/$n0C41C5d_c{vQe"Jt`-$ivCN_C%C)VZ(-b-a[XSPMAc=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49795	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:26 UTC	676	OUT	GET /fonts/family/imperial/imperial-italic-400.30d6073613e33e742de4c1325b31065c.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:26 UTC	1111	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 32 36 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 73 30 71 58 63 32 58 6d 5f 66 72 46 6d 31 4a 6e 30 39 76 6f 42 6d 51 45 5a 65 38 59 62 78 57 6c 70 68 42 4d 66 37 42 55 41 55 76 62 52 4e 73 4d 4e 79 78 39 36 43 50 63 77 5a 41 5a 44 50 68 44 73 38 38 66 33 32 35 65 37 4e 34 72 4f 52 59 36 45 48 72 43 6f 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 3a 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 27268X-GUploader-UploadID: ADPycds0qXc2Xm_frFm1Jn09voBmQEZe8YbxWlphBMf7BUAUvbRNsMNyx96CPcwZAZDPhDs88f325e7N4rORY6EHrCo2Cache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02:0
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6a 84 00 10 00 00 00 01 25 ec 00 00 6a 23 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 10 1b cc 62 06 60 00 85 7e 08 46 09 97 62 11 08 0a 83 c6 00 83 80 59 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 83 33 07 86 06 0c 81 18 5b 27 00 71 82 6d cb a2 19 de dd aa ea 15 14 40 be 60 1c 5b 01 36 0e 46 08 70 d4 84 db 62 7b 1c 12 16 17 65 ff ff 7f 62 52 91 31 93 0a 69 5b c6 50 90 79 91 93 0c 8f 08 cb c3 11 42 66 04 6a c1 92 6a de a8 79 26 d6 15 d5 cb 37 d6 b3 38 10 be 6e 15 70 c8 74 77 4b b2 5d 13 bd 0a 7b a0 a4 26 7b 8d 23 8e f2 e7 22 7e 9f 1e 3b 06 0a f5 f9 e3 6f ef 7d 39 ae a2 a4 ab 0a bf 86 c3 1a 6f 95 28 7a d2 ab 8b da 8c 76 4b 0d f7 27 ae 81 5f 13 35 ba 1e 7a 39 ef 05 37 d6 42 86 11 54 70 7c d2 bc 6e Data Ascii: wOF2j%j#b`~FbY6$ 3['qm@`[6Fpb{ebR1i[PyBfjjy&78nptwK]{&{#"~;o}9o(zvK'_5z97BTp\|n
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 4e ce 38 ce 74 ce ae 47 e2 32 b8 42 6e b0 a1 fd bd 8f 71 bf 3c 0c 8f cd f3 f1 76 7c a6 7c 3c 7f 0a 7f f1 a9 d6 f3 37 f3 87 f8 b7 f9 af f8 5f 04 70 01 57 65 c8 04 35 82 56 41 9f d0 c1 30 7f cb b8 e2 20 32 32 50 07 20 68 ca 65 ab 21 56 48 e2 88 26 27 61 e3 36 a7 99 b5 3b 7f aa 4e 17 d9 75 71 70 d2 b8 a2 36 d6 71 71 d3 7b 6d 63 a3 37 bc 85 f4 49 eb 51 5f 9f ea 18 8f 51 c7 5d 37 e6 aa 09 b5 f1 87 66 cc f9 c8 da c6 9f da b6 eb 33 df b5 7e 69 bf f5 2b f7 5b bf f6 70 f9 6f 34 42 41 b4 0e 61 d0 7f de a9 09 b0 42 8d 20 2e 36 1e 80 8f 4d 80 4d 88 20 22 76 18 20 09 49 89 c9 22 f2 88 22 a2 26 d6 0a d7 06 d7 4e ac 83 58 77 a4 37 a2 89 68 e1 f4 20 03 c8 08 22 41 e6 6a ac 20 67 8a 9b 98 37 f0 05 fe 20 10 04 83 50 30 00 ba 01 b8 09 b8 05 b8 0d e0 40 88 d1 aa 63 54 57 fa Data Ascii: N8tG2Bnq<v\|\|<7_pWe5VA0 22P he!VH&'a6;Nuqp6qq{mc7IQ_Q]7f3~i+[po4BAaB .6MM "v I""&NXw7h "Aj g7 P0@cTW
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: cc eb b0 5e 1c 43 5f 7d f1 36 53 3d ce 2d f6 13 8f ee 6f a6 51 8b f9 73 e8 05 8c 24 34 fa f2 40 05 ff 69 35 5c 4d 6f b0 32 b8 ca 64 1d f6 eb ae 92 a2 93 a5 c8 7b 42 51 54 eb ea 94 8f 88 d6 8a dd 5a dd 9d de 91 58 aa 7d 48 bf 87 81 df 6c ec 0a b2 3b 4c dd 64 ce b0 50 7a ac de 06 67 4f ef 28 70 6a 76 a5 c8 65 55 30 6f bc f1 66 24 41 a1 08 df fe 95 d1 5a 6c 25 de 4a fc 21 79 44 aa 96 7e d5 f8 ca 44 65 b2 36 55 50 94 89 24 8c 85 60 28 4e 30 4d a9 68 46 3f cd a0 d6 7a 34 6b 45 68 47 30 f8 3c 16 35 a3 d9 ef 46 9c ba 24 81 98 ad e2 46 c7 ec 50 8f 67 16 d8 22 3d c3 c6 32 32 64 4a 2d fa c4 f3 75 5d 09 4b d6 7b cf f2 99 5f 40 50 a8 8c 06 31 f1 0d 92 06 be 0a 8c f5 d5 d7 9b 8f 0a 16 db 65 27 df c3 e5 ea e8 08 42 9f a4 8f 11 04 70 fe 2b 66 45 ad 12 36 d1 94 68 f1 3a Data Ascii: ^C_}6S=-oQs$4@i5\Mo2d{BQTZX}Hl;LdPzgO(pjveU0of$AZl%J!yD~De6UP$`(N0MhF?z4kEhG0<5F$FPg"=22dJ-u]K{_@P1e'Bp+fE6h:
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 65 c4 a8 eb 6f cc 6a 8f 77 d2 28 c8 60 6f 70 d0 71 c5 7e e9 ad e5 b8 12 ce 2e 13 4b 15 97 95 00 10 b4 f6 61 d0 22 ea 1f 1d 1d 50 93 56 42 26 03 22 87 17 3e 7e 01 41 a1 a6 7c f3 db c1 de 77 60 7b b7 5a 0a 5b df c0 34 88 48 be 73 ea b6 56 c5 ce 68 04 6d 13 ab cf ab 42 5d 3d f3 fa c2 e5 64 7f 65 4f 42 c8 00 df 0e 7d 18 b6 46 b4 b3 7c 9b b9 3a ee ad c0 20 bb 3b 56 23 e2 bb 47 9d 6e df 6e e9 68 74 f0 20 4c 24 b4 16 7e fc e0 e3 eb 2b ff 85 f1 ff d7 30 c9 ec 9a ef 1a 55 8b 27 66 93 ca a1 74 03 e0 76 20 cb a6 92 f6 e5 4c 75 68 72 bd 69 61 47 7a 62 a6 39 65 28 68 6d 56 f0 35 ad cb d2 bd 3d 83 af 35 4c ca 26 3a 6e 2b dc d2 ed 09 a2 6a 99 31 cb 74 dc d0 e4 d2 48 dc 59 02 fd 66 5b 70 26 b9 dd 41 f2 6c 10 0d 7a b3 9a ad 68 57 b0 8e 0b 3e 68 bc d8 4e 14 69 bd 3b c0 80 Data Ascii: eojw(`opq~.Ka"PVB&">~A\|w`{Z[4HsVhmB]=deOB}F\|: ;V#Gnnht L$~+0U'ftv LuhriaGzb9e(hmV5=5L&:n+j1tHYf[p&AlzhW>hNi;
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: bf 56 37 6c 30 89 a6 75 6b 36 5a da d6 8e 76 b5 d0 9e f6 75 a0 43 25 4d 2c 43 5b 47 c9 ca f8 c4 ca 42 a7 73 de 55 23 36 3b be ec a7 e1 55 19 39 f9 cd 33 3c d7 00 33 20 68 68 de d5 60 68 3f 97 3b c3 c9 3a 1b ac 2c 25 d7 46 75 5c 31 c4 2b a6 9d ba e1 14 7b 59 89 4d b8 a9 aa b2 55 b3 80 e4 13 5c 3c 25 9e 18 d3 0c a6 7f 11 ff f8 e9 ef ea 6e dd 0c 76 c1 73 1b 5a cc 54 ed 23 17 e8 07 90 e7 8e e6 68 eb b9 5b 6c 90 c2 45 e9 f4 3d 55 49 79 1a 8d 8b 92 ee 19 51 f7 51 f9 d2 ac cf 34 23 ce dd a5 ea 74 1f a6 dd 70 8a 43 17 f4 5e 63 64 9a 06 81 66 d7 66 c0 8b ab b2 da 81 b6 8c 8f 3a ed 47 d0 d0 1b 34 3e 10 44 c1 97 c2 c4 aa f6 8e 3f d5 75 7b ed 7e aa b0 1d 5b 08 9d a3 3e 51 ba 84 61 1d db 79 0d 9b 20 4f e1 4b bc aa a8 a1 98 96 4a cd bc 24 ef ac 3b 3b cb 53 e8 b2 24 ef Data Ascii: V7l0uk6ZvuC%M,C[GBsU#6;U93<3 hh`h?;:,%Fu\1+{YMU\<%nvsZT#h[lE=UIyQQ4#tpC^cdff:G4>D?u{~[>Qay OKJ$;;S$
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 7e fe fc a2 cd 5f df d5 65 1d c1 9c 54 24 c1 19 52 dc 90 3a d6 8d fc 65 df 82 2b 55 45 17 7b 12 66 71 08 c0 78 42 ea 07 c8 b7 80 2e bb 33 32 42 e5 89 b1 d2 65 ad 39 8c f3 5a 10 1b 86 84 9c aa d5 1a a2 e2 38 f1 c8 34 87 d8 2f ef 43 bb 4b 47 84 86 c1 f2 d8 d6 27 53 d8 48 65 e6 3c 9d 7a 76 83 79 94 f1 7d c2 c3 91 fe 98 1e 83 f9 f0 70 11 95 24 fd b9 76 97 0a 6f d6 49 54 d2 00 68 7f f8 a2 0d ed 63 d0 60 ca 22 d9 31 99 4f 23 23 66 68 bb a0 b5 1e 08 ca c7 ce ef 7f 5a d3 89 37 51 f0 7f 22 13 b0 cc 43 ef 91 bd 29 5a 9e 6c 50 25 31 e7 6b bc 83 77 3e d0 87 b8 8d d6 96 5b 17 86 b0 cb 00 8a 44 81 bd 48 7c b9 3c db 20 5a f4 18 31 51 c6 5a 6e e9 1b eb 2e 12 51 a6 21 b0 82 5e b3 1d 3c 17 bd 4a a5 94 be 1e 3a 48 53 9e 0c b9 ab c4 c0 af 29 67 9f da c9 86 47 a7 0f c1 d4 00 Data Ascii: ~_eT$R:e+UE{fqxB.32Be9Z84/CKG'SHe<zvy}p$voIThc`"1O##fhZ7Q"C)ZlP%1kw>[DH\|< Z1QZn.Q!^<J:HS)gG
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: c6 8e 62 3c f2 80 d4 0d 6d c7 55 46 04 47 3d 51 eb 90 7b 9d d4 5e 05 0f 11 7b 03 99 88 a2 f9 a9 8a c8 23 a9 c8 d7 91 92 56 5c a9 79 61 3d 11 ac ba ba b5 36 c7 84 90 40 2a 0b 64 58 58 cd 60 fd 98 e2 59 7e a9 7a 1c 65 a5 dc 85 d7 5b 68 fb 0a 51 05 ca 1d c1 c9 89 c2 43 a5 0b 77 1e d5 fa 8f 79 12 70 0a dd 4b 83 66 5b 8e 43 10 33 7a 2d 14 13 69 52 fe b6 bb 28 62 da c8 e8 be 36 a1 5c 05 11 cf d4 84 3d df af bb 1e c6 a4 cf 9d 26 6b f6 34 3a f9 d8 f3 c5 63 87 ef 88 11 6e 00 c5 5c fa f8 09 59 c9 39 58 f1 e5 d3 98 dd a7 11 a4 25 f4 c4 22 8a 39 d3 dd da 5a 84 49 ad 5b 7d 19 95 7f b7 5e 65 5d f1 c3 17 5d 6b f7 4f 59 0d d7 4a de f8 c6 f1 19 03 b5 2f 5e 04 08 f6 38 42 c1 df 0a 3d 45 a7 3c dd b4 e8 d8 8a e3 de 9f 3d 90 de 3f 65 e3 58 78 75 b1 c8 9c fe c2 ee 56 aa 13 3e Data Ascii: b<mUFG=Q{^{#V\ya=6@*dXX`Y~ze[hQCwypKf[C3z-iR(b6\=&k4:cn\Y9X%"9ZI[}^e]]kOYJ/^8B=E<=?eXxuV>
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: 0b 42 22 0d 7d 1f f6 36 12 c6 ba f1 36 7d 47 6b 80 9e 69 46 77 73 ea 3a 3f 6e aa 2d 31 d4 0c ad 62 59 8d cf 14 b1 5f 17 ce d4 9a 76 9c e1 60 7d 5f 8d 74 64 20 63 59 9f 51 67 68 7f f9 4a d0 f2 30 76 57 6e 9e 77 45 ed a3 f5 1a c3 8d 0f 21 83 1a 0e 76 b7 bb 88 5b 5e b9 67 d6 70 d0 1c 57 7d eb c1 81 a5 7b 1d 00 fb a3 00 cb 74 5b 38 83 a5 db 14 61 1b 5b a6 2c c2 76 96 a2 d9 6f fb 5b 1e 69 ee 55 13 51 90 4e 4f ec 13 5b 07 b0 cf 4b 21 c1 51 fc 66 be a5 2a aa 75 37 f7 2d 65 52 30 bd a5 99 0b 27 f6 45 2d 98 d9 96 8c 0b 66 eb ac 3d 83 3d 24 b5 b1 6e d5 b1 82 12 39 32 a5 90 11 78 15 e2 91 72 89 63 c6 cf 5e 79 71 b1 36 68 69 0f ca 7a d2 15 3d 68 60 29 f6 e2 73 b0 1c 86 e2 33 7b 4b ea 8c 37 e9 00 bb c3 10 b6 ea 72 80 ed 7c c6 5a 43 52 5b c2 7e 9b 38 3e 36 f8 f4 16 ad Data Ascii: B"}66}GkiFws:?n-1bY_v`}_td cYQghJ0vWnwE!v[^gpW}{t[8a[,vo[iUQNO[K!Qf*u7-eR0'E-f==$n92xrc^yq6hiz=h`)s3{K7r\|ZCR[~8>6
2023-12-05 18:13:26 UTC	1379	IN	Data Raw: bb 3a 8b 2b 42 b2 a7 0f d9 ce 71 32 22 39 3a 38 cb 23 38 8c 30 d8 9b 8f 8e 2d 2c 7d da 7b 3b 05 dc 8f 41 4c 52 7e 5b 81 14 e5 cb 84 d1 19 f9 15 2e ec c2 eb b7 ae 23 91 eb f6 88 59 98 bd 77 65 01 7f ba 25 c5 5a 6e 36 99 8d 0a aa 06 6d 8d b3 23 c9 47 d9 ad 02 56 7c a5 db 25 49 a3 a6 ff 9e 7e 92 e8 e8 aa a8 42 97 a1 8a 43 b6 38 81 cb ac cd 8b d5 78 aa 1d 1a c6 27 3a f9 3e 01 59 dd 17 4e 80 c4 54 0a 84 cb 9a 8c 1c 63 be af 64 94 fa fe 76 82 c0 21 d7 5d 55 01 15 31 d1 79 48 5a 03 05 78 03 a8 2a ed ce 9c a6 02 cb 95 af 53 3d 33 19 72 18 a9 7f 61 e0 45 00 56 d9 88 b0 11 7a db 7f 4c b5 ec 17 d8 62 6c 7f f8 6f 0d 44 07 08 d2 03 b5 16 12 4b 6c 8f 25 31 dc d2 64 7e 85 d5 51 24 4a 48 ab 74 ea 00 3e 85 74 91 00 33 eb c7 8b 61 b8 c9 0c 77 de d4 26 53 b2 5b c9 b5 8a 82 Data Ascii: :+Bq2"9:8#80-,}{;ALR~[.#Ywe%Zn6m#GV\|%I~BC8x':>YNTcdv!]U1yHZx*S=3raEVzLbloDKl%1d~Q$JHt>t3aw&S[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49801	34.120.63.153	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	617	OUT	POST /rtb/prebid?cid=8CU4WQK98 HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 2457 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	2457	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 6c 69 76 65 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 6c 69 76 65 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: {"site":{"domain":"www.nytimes.com","page":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news","ref":"","topMostLocation":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news","isTop":true,"canonical_url":"https
2023-12-05 18:13:27 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 70 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 65 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 61 63 63 65 70 74 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 53 65 63 2d 43 48 2d 55 41 2d Data Ascii: HTTP/1.1 200 OKcache-control: max-age=0, no-cache, no-store, must-revalidatepragma: no-cacheexpires: Tue, 05 Dec 2023 18:13:27 GMTaccept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-
2023-12-05 18:13:27 UTC	589	IN	Data Raw: 35 33 65 0d 0a 7b 22 69 64 22 3a 22 35 36 35 32 31 61 31 65 35 37 35 62 39 38 62 34 38 65 32 34 33 33 65 30 65 39 37 65 30 33 32 61 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 67 64 70 72 5f 70 64 3d 31 22 7d Data Ascii: 53e{"id":"56521a1e575b98b48e2433e0e97e032a","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1"}
2023-12-05 18:13:27 UTC	765	IN	Data Raw: 64 69 61 6e 65 74 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 76 65 72 73 69 6f 6e 3d 31 26 6e 65 74 77 6f 72 6b 49 64 3d 35 37 37 33 34 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 73 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 38 25 32 36 74 79 70 65 25 33 44 63 6f 6e 25 32 36 6f 76 73 69 64 25 33 44 25 32 34 55 49 44 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6d 2e 77 35 35 63 2e 6e 65 74 2f 70 69 6e 67 5f 6d 61 74 63 68 2e 67 Data Ascii: dianet-match.dotomi.com/match/bounce/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2Fcs.media.net%2Fcksync.php%3Fcs%3D8%26type%3Dcon%26ovsid%3D%24UID"},{"type":"image","url":"https://pm.w55c.net/ping_match.g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49799	18.160.53.102	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	576	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	715	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 34 38 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 38 20 47 4d 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 4d 61 78 2d 41 67 65 3a 20 33 30 30 30 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 32 39 20 41 75 Data Ascii: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 6482Connection: closeDate: Tue, 05 Dec 2023 18:13:28 GMTAccess-Control-Allow-Origin: *Access-Control-Allow-Methods: GETAccess-Control-Max-Age: 3000Last-Modified: Tue, 29 Au
2023-12-05 18:13:27 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49803	35.186.253.211	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	607	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 1673 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	1673	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 66 70 2d 61 64 2d 74 6f 70 22 7d 2c 22 64 69 76 69 64 22 3a 22 64 66 70 2d 61 64 2d 74 6f 70 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 22 3a 7b 22 69 6e 76 43 6f 64 65 22 3a 22 6e 79 74 5f 77 6f 72 6c 64 5f 74 6f 70 22 7d 7d 2c 22 69 64 22 3a 22 32 36 37 34 36 38 65 30 61 33 30 34 39 33 39 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 31 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 35 34 34 31 31 32 30 36 30 7d 2c 7b 22 65 78 74 22 3a 7b 22 64 61 74 Data Ascii: {"imp":[{"ext":{"data":{"pbadslot":"dfp-ad-top"},"divid":"dfp-ad-top","customParams":{"invCode":"nyt_world_top"}},"id":"267468e0a304939","banner":{"topframe":1,"format":[{"w":728,"h":90},{"w":970,"h":90},{"w":970,"h":250}]},"tagid":544112060},{"ext":{"dat
2023-12-05 18:13:27 UTC	437	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 65 63 65 69 76 65 2d 63 6f 6f 6b 69 65 2d 64 65 70 72 65 63 61 74 69 6f 6e 3d 31 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 44 6f 6d 61 69 6e 3d 2e 6f 70 65 6e 78 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.nytimes.comContent-Type: text/plainSet-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None
2023-12-05 18:13:27 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 64 64 36 65 65 63 37 66 2d 63 30 37 65 2d 34 65 32 66 2d 38 65 37 65 2d 37 34 61 33 66 37 64 34 35 38 33 38 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"dd6eec7f-c07e-4e2f-8e7e-74a3f7d45838","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49798	18.160.53.102	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	605	OUT	GET /cdn/prod/config?src=3030&u=https%3A%2F%2Fwww.nytimes.com HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	352	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 32 31 35 35 30 2c 20 73 2d 6d 61 78 61 67 65 3d 32 31 36 30 30 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a 31 36 3a 34 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 58 2d 43 61 63 68 65 3a 20 48 69 74 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 65 64 63 34 34 30 64 66 64 64 34 64 63 63 62 36 33 38 65 61 64 38 30 35 63 37 66 34 64 62 66 65 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 28 43 6c 6f 75 64 46 72 6f 6e 74 29 0d 0a 58 2d 41 6d 7a 2d 43 66 2d 50 6f Data Ascii: HTTP/1.1 204 No ContentConnection: closeCache-Control: max-age=21550, s-maxage=21600Date: Tue, 05 Dec 2023 17:16:49 GMTServer: ServerX-Cache: Hit from cloudfrontVia: 1.1 edc440dfdd4dccb638ead805c7f4dbfe.cloudfront.net (CloudFront)X-Amz-Cf-Po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49800	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	618	OUT	POST /openrtb/pbjs?s=995821 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1787 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	1787	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 30 34 35 65 64 33 33 61 66 37 36 65 38 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 6c 69 76 65 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 7d 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 66 61 6c 73 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 35 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 Data Ascii: {"id":"1045ed33af76e8","site":{"page":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news","domain":"nytimes.com","publisher":{"domain":"nytimes.com"}},"ext":{"source":"prebid","ixdiag":{"ls":false,"mfu":0,"bu":5,"iu":0,"nu":0,"ou":0
2023-12-05 18:13:27 UTC	751	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 35 63 61 63 30 65 30 35 61 39 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:27 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeCF-Ray: 830e435cac0e05a9-IADCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: https://www.nytimes.comCache-Contro
2023-12-05 18:13:27 UTC	618	IN	Data Raw: 31 38 33 36 0d 0a 7b 22 69 64 22 3a 22 31 30 34 35 65 64 33 33 61 66 37 36 65 38 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 36 65 35 62 32 36 61 39 2d 32 65 32 39 2d 34 35 37 63 2d 61 62 66 64 2d 66 64 66 66 65 33 37 33 38 35 64 38 22 2c 22 69 6d 70 69 64 22 3a 22 34 62 31 33 35 32 33 65 31 34 63 32 35 34 22 2c 22 70 72 69 63 65 22 3a 37 30 2c 22 61 64 69 64 22 3a 22 31 33 31 36 36 34 32 38 22 2c 22 61 64 6d 22 3a 22 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 35 35 39 36 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 39 39 35 38 32 32 2f 38 35 2f 63 6c 6e 6d 67 68 71 37 6b 6c 65 63 6d 69 33 6d 6a 35 39 30 2f 36 65 35 62 32 36 61 39 2d 32 65 32 39 2d 34 Data Ascii: 1836{"id":"1045ed33af76e8","seatbid":[{"bid":[{"id":"6e5b26a9-2e29-457c-abfd-fdffe37385d8","impid":"4b13523e14c254","price":70,"adid":"13166428","adm":"<img src=\"https://a5596.casalemedia.com/impression/v2/995822/85/clnmghq7klecmi3mj590/6e5b26a9-2e29-4
2023-12-05 18:13:27 UTC	1369	IN	Data Raw: 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 6b 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 2c 63 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 5c 22 73 74 72 69 6e 67 5c 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 5c 22 73 74 72 69 6e 67 5c 22 21 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 31 21 3d 63 2e 6c 65 6e 67 74 68 3f 2d 31 3a 61 2e 69 6e 64 65 78 4f 66 28 63 2c 30 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 65 20 69 6e 20 Data Ascii: ache-2.0 */ var k=this\|\|self;var l=Array.prototype.indexOf?function(a,c){return Array.prototype.indexOf.call(a,c,void 0)}:function(a,c){if(\"string\"===typeof a)return\"string\"!==typeof c\|\|1!=c.length?-1:a.indexOf(c,0);for(var e=0;e<a.length;e++)if(e in
2023-12-05 18:13:27 UTC	1369	IN	Data Raw: 65 66 3b 65 3d 62 2e 64 6f 63 75 6d 65 6e 74 26 26 62 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 6e 75 6c 6c 7d 65 6c 73 65 20 67 3d 65 2c 65 3d 6e 75 6c 6c 3b 63 2e 70 75 73 68 28 6e 65 77 20 75 28 67 7c 7c 5c 22 5c 22 29 29 3b 74 72 79 7b 61 3d 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 68 29 7b 61 3d 6e 75 6c 6c 7d 7d 77 68 69 6c 65 28 61 26 26 62 21 3d 61 29 3b 62 3d 30 3b 66 6f 72 28 61 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 62 3c 3d 61 3b 2b 2b 62 29 63 5b 62 5d 2e 64 65 70 74 68 3d 61 2d 62 3b 62 3d 6b 3b 69 66 28 62 2e 6c 6f 63 61 74 69 6f 6e 26 26 62 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 62 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3d Data Ascii: ef;e=b.document&&b.document.referrer\|\|null}else g=e,e=null;c.push(new u(g\|\|\"\"));try{a=b.parent}catch(h){a=null}}while(a&&b!=a);b=0;for(a=c.length-1;b<=a;++b)c[b].depth=a-b;b=k;if(b.location&&b.location.ancestorOrigins&&b.location.ancestorOrigins.length=
2023-12-05 18:13:27 UTC	1369	IN	Data Raw: 70 74 5f 66 72 61 6d 65 5f 37 36 30 37 34 35 30 35 31 5c 22 74 69 74 6c 65 3d 5c 22 41 64 76 65 72 74 69 73 65 6d 65 6e 74 5c 22 73 63 72 6f 6c 6c 69 6e 67 3d 5c 22 6e 6f 5c 22 66 72 61 6d 65 62 6f 72 64 65 72 3d 5c 22 30 5c 22 6d 61 72 67 69 6e 77 69 64 74 68 3d 5c 22 30 5c 22 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 5c 22 30 5c 22 77 69 64 74 68 3d 5c 22 39 37 30 5c 22 68 65 69 67 68 74 3d 5c 22 32 35 30 5c 22 73 72 63 3d 5c 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 67 6f 6f 67 6c 65 5f 64 65 63 72 79 70 74 5f 66 72 61 6d 65 5f 37 36 30 37 34 35 30 35 31 27 29 2e 73 72 63 20 3d 20 5c 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 Data Ascii: pt_frame_760745051\"title=\"Advertisement\"scrolling=\"no\"frameborder=\"0\"marginwidth=\"0\"marginheight=\"0\"width=\"970\"height=\"250\"src=\"about:blank\"></iframe><script>document.getElementById('google_decrypt_frame_760745051').src = \"https://google
2023-12-05 18:13:27 UTC	1369	IN	Data Raw: 72 72 49 49 4f 69 58 72 4f 30 48 66 59 44 63 2d 39 36 4a 57 6c 47 70 2d 6e 76 6c 6d 50 55 52 5f 76 50 6a 4a 44 42 77 4a 5f 50 45 6e 77 37 4b 4d 51 63 7a 54 6f 2d 37 44 62 70 38 43 67 39 64 58 52 35 34 45 58 78 67 4d 4e 46 79 68 37 35 33 6f 71 58 43 39 75 73 72 4a 42 68 5a 30 46 70 31 6c 7a 4d 47 61 49 4d 5a 49 66 37 50 5a 50 57 39 45 77 62 4d 52 4c 50 31 49 6c 5f 63 63 71 68 36 4b 74 68 35 38 66 53 44 54 63 2d 33 4a 58 4f 74 76 58 79 31 36 72 73 38 2d 4b 45 35 50 2d 79 50 64 59 46 50 36 59 70 53 77 35 43 55 55 55 6d 74 6c 61 46 4c 73 39 50 65 57 6f 5a 66 30 52 75 66 41 37 57 41 53 6d 59 62 72 72 76 4d 37 48 76 39 39 64 58 4c 41 38 59 5f 4b 75 38 71 72 53 52 56 39 53 76 62 52 44 47 48 4b 79 45 46 48 43 55 6d 4e 53 39 47 52 58 6c 62 69 43 34 6f 6f 37 62 41 Data Ascii: rrIIOiXrO0HfYDc-96JWlGp-nvlmPUR_vPjJDBwJ_PEnw7KMQczTo-7Dbp8Cg9dXR54EXxgMNFyh753oqXC9usrJBhZ0Fp1lzMGaIMZIf7PZPW9EwbMRLP1Il_ccqh6Kth58fSDTc-3JXOtvXy16rs8-KE5P-yPdYFP6YpSw5CUUUmtlaFLs9PeWoZf0RufA7WASmYbrrvM7Hv99dXLA8Y_Ku8qrSRV9SvbRDGHKyEFHCUmNS9GRXlbiC4oo7bA
2023-12-05 18:13:27 UTC	112	IN	Data Raw: 42 6f 78 2e 63 6f 6d 22 7d 7d 5d 2c 22 73 65 61 74 22 3a 22 39 39 39 39 39 39 39 22 7d 5d 2c 22 63 75 72 22 3a 22 55 53 44 22 2c 22 65 78 74 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 70 62 6a 73 5f 65 6e 61 62 6c 65 5f 6d 75 6c 74 69 66 6f 72 6d 61 74 22 3a 7b 22 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 7d 7d 7d 7d 0d 0a Data Ascii: Box.com"}}],"seat":"9999999"}],"cur":"USD","ext":{"features":{"pbjs_enable_multiformat":{"activated":false}}}}
2023-12-05 18:13:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49804	44.198.213.90	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	734	OUT	POST /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&tmax=10000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 1256 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	1256	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4e 59 54 69 6d 65 73 5f 37 32 38 78 39 30 5f 39 37 30 5f 74 6f 70 5f 50 42 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 66 70 2d 61 64 2d 74 6f 70 22 7d 7d 7d 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 66 70 2d 61 64 2d 74 6f 70 22 7d 7d 7d 2c 7b 22 69 64 22 3a 31 2c 22 74 61 67 69 64 22 3a 22 4e 59 54 69 6d 65 73 5f 37 32 38 78 39 30 5f 39 37 Data Ascii: {"imp":[{"id":0,"tagid":"NYTimes_728x90_970_top_PB","banner":{"format":[{"w":728,"h":90},{"w":970,"h":90},{"w":970,"h":250}]},"fpd":{"context":{"data":{"pbadslot":"dfp-ad-top"}}},"ext":{"data":{"pbadslot":"dfp-ad-top"}}},{"id":1,"tagid":"NYTimes_728x90_97
2023-12-05 18:13:27 UTC	644	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 35 20 4f 63 74 20 31 39 39 32 20 32 30 3a 31 30 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 58 2d 58 53 53 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:27 GMTContent-Type: application/json; charset=utf-8Content-Length: 19Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 15 Oct 1992 20:10:00 GMTPragma: no-cacheX-XSS
2023-12-05 18:13:27 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49812	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	858	OUT	GET /als?uri=nyt%3A%2F%2Flegacycollection%2Ff82e3180-c7cf-5230-9381-bc17f573899a&typ=&prop=nyt&plat=web HTTP/1.1 Host: als-svc.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:27 UTC	435	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 34 36 30 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 32 37 0d 0a 73 74 72 69 63 74 2d 74 Data Ascii: HTTP/1.1 200 OKcache-control: private, no-store, no-cache, must-revalidate, max-age=0content-type: application/json; charset=utf-8date: Tue, 05 Dec 2023 18:13:27 GMTcontent-length: 1460via: 1.1 googlex-envoy-upstream-service-time: 27strict-t
2023-12-05 18:13:27 UTC	1460	IN	Data Raw: 7b 22 61 6c 73 5f 74 65 73 74 5f 63 6c 69 65 6e 74 73 69 64 65 22 3a 22 77 65 62 5f 6e 6f 6e 65 5f 6d 65 64 69 75 6d 5f 32 30 32 33 31 32 30 35 31 38 31 33 32 37 22 2c 22 55 73 65 72 22 3a 7b 22 61 69 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 72 65 67 69 49 64 22 3a 22 30 22 2c 22 62 74 22 3a 22 22 2c 22 73 75 62 22 3a 22 61 6e 6f 6e 22 2c 22 69 73 4c 6f 67 67 65 64 49 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6d 6b 74 67 22 3a 22 74 79 70 65 5f 61 6e 6f 6e 2c 6c 6f 67 66 2c 61 62 66 22 7d 2c 22 41 73 73 65 74 22 3a 7b 22 69 73 5f 76 69 72 61 6c 22 3a 22 6d 65 64 69 75 6d 22 2c 22 67 73 63 61 74 22 3a 22 6e 65 67 5f 69 62 6d 74 65 73 74 2c 6e 65 67 5f 69 62 6d 2c Data Ascii: {"als_test_clientside":"web_none_medium_20231205181327","User":{"aid":"XbK7A_KO3s8XVA_FdXv5zD","userType":"anon","regiId":"0","bt":"","sub":"anon","isLoggedIn":"false","mktg":"type_anon,logf,abf"},"Asset":{"is_viral":"medium","gscat":"neg_ibmtest,neg_ibm,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49805	104.36.115.111	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	630	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1622 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	1622	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 31 38 30 30 30 30 35 39 31 38 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 38 65 65 64 35 62 31 65 37 66 31 37 37 35 22 2c 22 74 61 67 69 64 22 3a 22 6e 79 74 69 6d 65 73 5f 74 6f 70 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 66 70 2d 61 64 2d 74 6f 70 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d Data Ascii: {"id":"1701800005918","at":1,"cur":["USD"],"imp":[{"id":"38eed5b1e7f1775","tagid":"nytimes_top","secure":1,"ext":{"data":{"pbadslot":"dfp-ad-top"}},"bidfloorcur":"USD","banner":{"w":728,"h":90,"format":[{"w":970,"h":90},{"w":970,"h":250}],"pos":0,"topfram
2023-12-05 18:13:27 UTC	229	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 204 No ContentAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.nytimes.comCache-Control: no-cache, no-store, must-revalidateDate: Tue, 05 Dec 2023 18:13:27 GMTConnection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49811	18.173.132.21	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	541	OUT	GET /configs/3030 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	389	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 30 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 43 6c 6f 75 64 46 72 6f 6e 74 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 30 37 3a 31 35 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 43 61 63 68 65 3a 20 48 69 74 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 64 37 33 36 35 65 33 33 31 65 32 66 33 61 61 30 38 35 61 36 35 30 31 63 61 63 34 32 62 62 37 32 2e 63 6c Data Ascii: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 505Connection: closeServer: CloudFrontDate: Tue, 05 Dec 2023 18:07:15 GMTCache-Control: max-age=3600X-Cache: Hit from cloudfrontVia: 1.1 d7365e331e2f3aa085a6501cac42bb72.cl
2023-12-05 18:13:27 UTC	505	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 33 30 33 30 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 2e 71 75 65 75 65 2e 70 75 73 68 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 6e 61 6d 65 Data Ascii: (function () {try {const accountId = "3030";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49802	68.67.179.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	601	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 2015 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	2015	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 38 65 66 32 64 66 35 65 30 32 66 66 32 66 22 2c 22 63 6f 64 65 22 3a 22 6e 79 74 5f 77 6f 72 6c 64 5f 74 6f 70 22 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":90},{"width":970,"height":250}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"8ef2df5e02ff2f","code":"nyt_world_top","allow_smaller_sizes":false,"use_pmt_rule":fal
2023-12-05 18:13:28 UTC	1164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 36 33 33 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 Data Ascii: HTTP/1.1 200 OKServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:13:27 GMTContent-Type: application/json; charset=utf-8Content-Length: 46331Connection: closeVary: Accept-EncodingCache-Control: no-store, no-cache, privatePragma: no-cacheExpir
2023-12-05 18:13:28 UTC	15220	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 31 30 39 32 39 37 64 31 62 66 34 32 65 34 33 22 2c 22 74 61 67 5f 69 64 22 3a 32 31 38 39 37 32 34 36 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 33 36 36 38 34 36 37 38 34 38 30 37 34 36 30 30 34 37 33 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 6d 31 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 6c 69 76 65 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 69 73 72 61 65 6c 2d 68 61 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"109297d1bf42e43","tag_id":21897246,"auction_id":"3668467848074600473","nobid":false,"no_ad_url":"https://nym1-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-ha
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 46 39 33 62 33 4a 73 5a 46 39 74 61 57 51 7a 69 67 4a 70 64 57 59 6f 4a 32 45 6e 4c 43 41 79 4e 54 4d 78 4d 54 55 31 4c 43 41 77 4b 54 73 42 46 43 78 70 4a 79 77 67 4f 54 49 31 4d 54 45 33 4d 79 77 52 46 43 78 6e 4a 79 77 67 4d 6a 4d 7a 4f 54 49 32 4d 44 51 56 46 51 42 7a 41 52 55 63 4f 54 45 35 4e 6a 59 31 4e 54 41 56 46 6a 42 79 4a 79 77 67 4e 44 63 33 4e 6a 63 7a 4d 6a 49 34 42 52 62 77 76 4a 49 43 69 51 38 68 4d 54 4e 4e 65 6c 52 33 61 6b 73 78 4c 54 68 69 52 55 6c 36 64 54 52 31 54 55 4a 48 51 55 46 6e 63 6d 4a 58 56 45 46 55 51 55 4a 50 51 55 4a 42 51 55 56 71 54 55 5a 57 52 45 56 33 54 47 64 4c 56 30 46 43 5a 31 39 66 58 31 39 66 64 7a 6c 76 51 55 68 42 51 6d 56 42 52 30 46 42 55 55 64 4a 51 56 46 48 55 55 46 52 52 31 6c 42 55 55 64 6e 51 56 46 4c Data Ascii: F93b3JsZF9taWQzigJpdWYoJ2EnLCAyNTMxMTU1LCAwKTsBFCxpJywgOTI1MTE3MywRFCxnJywgMjMzOTI2MDQVFQBzARUcOTE5NjY1NTAVFjByJywgNDc3NjczMjI4BRbwvJICiQ8hMTNNelR3aksxLThiRUl6dTR1TUJHQUFncmJXVEFUQUJPQUJBQUVqTUZWREV3TGdLV0FCZ19fX19fdzlvQUhBQmVBR0FBUUdJQVFHUUFRR1lBUUdnQVFL
2023-12-05 18:13:28 UTC	14727	IN	Data Raw: 4d 66 51 76 61 73 47 45 4c 69 47 67 59 36 45 6d 5f 76 71 64 52 67 41 4b 6a 59 4a 41 41 30 42 41 42 45 4e 43 43 67 41 47 51 41 41 41 45 41 7a 4d 78 64 41 49 52 45 53 41 43 6b 52 43 66 43 56 4d 51 41 41 41 4f 42 52 75 50 59 5f 4d 49 4c 42 75 41 6f 34 7a 52 78 41 7a 52 78 49 41 46 41 41 57 4b 32 31 6b 77 46 67 41 47 69 67 67 31 42 34 41 49 41 42 41 59 6f 42 41 4a 49 42 41 31 56 54 52 4a 67 42 32 41 57 67 41 56 71 6f 41 51 47 77 41 51 43 34 41 51 48 41 41 51 44 49 41 51 4c 51 41 51 44 59 41 51 44 67 41 51 44 77 41 51 44 36 41 52 42 75 65 58 52 66 64 32 39 79 62 47 52 66 59 6d 39 30 64 47 39 74 69 67 4a 70 64 57 59 6f 4a 32 45 6e 4c 43 41 79 4e 54 4d 78 4d 54 55 31 4c 43 41 77 4b 54 74 31 5a 69 67 6e 61 53 63 73 49 44 6b 79 4e 54 45 78 4e 7a 4d 73 49 44 41 70 Data Ascii: MfQvasGELiGgY6Em_vqdRgAKjYJAA0BABENCCgAGQAAAEAzMxdAIRESACkRCfCVMQAAAOBRuPY_MILBuAo4zRxAzRxIAFAAWK21kwFgAGigg1B4AIABAYoBAJIBA1VTRJgB2AWgAVqoAQGwAQC4AQHAAQDIAQLQAQDYAQDgAQDwAQD6ARBueXRfd29ybGRfYm90dG9tigJpdWYoJ2EnLCAyNTMxMTU1LCAwKTt1ZignaScsIDkyNTExNzMsIDAp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49797	13.32.151.58	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	561	OUT	GET /b3960cc6-bfd2-4adc-910c-6e917e8a6a0e/grumi.js HTTP/1.1 Host: rumcdn.geoedge.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	681	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 35 32 32 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 30 37 3a 32 33 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a 34 35 3a 34 32 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 30 36 35 63 66 66 61 37 33 30 34 30 36 39 62 36 38 37 62 61 38 63 31 31 38 38 64 39 31 38 30 38 22 0d 0a 78 2d 61 6d 7a 2d 73 65 72 76 65 72 2d 73 69 64 65 2d 65 6e 63 72 79 70 74 69 6f 6e 3a 20 41 45 53 32 35 36 0d 0a 43 Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascriptContent-Length: 235221Connection: closeDate: Tue, 05 Dec 2023 18:07:23 GMTLast-Modified: Tue, 05 Dec 2023 17:45:42 GMTETag: "065cffa7304069b687ba8c1188d91808"x-amz-server-side-encryption: AES256C
2023-12-05 18:13:27 UTC	15703	IN	Data Raw: 76 61 72 20 67 72 75 6d 69 49 6e 73 74 61 6e 63 65 20 3d 20 77 69 6e 64 6f 77 2e 67 72 75 6d 69 49 6e 73 74 61 6e 63 65 20 7c 7c 20 7b 20 71 3a 20 5b 5d 7d 3b 0a 28 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 49 6e 73 74 61 6e 63 65 20 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 29 20 7b 0a 09 21 66 75 6e 63 74 69 6f 6e 20 72 28 6f 2c 69 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 6e 2c 65 29 7b 69 66 28 21 69 5b 6e 5d 29 7b 69 66 28 21 6f 5b 6e 5d 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 74 29 72 65 74 75 72 6e 20 74 28 6e 2c 21 30 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 28 6e 2c 21 30 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 Data Ascii: var grumiInstance = window.grumiInstance \|\| { q: []};(function createInstance (window, document) {!function r(o,i,a){function s(n,e){if(!i[n]){if(!o[n]){var t="function"==typeof require&&require;if(!e&&t)return t(n,!0);if(c)return c(n,!0);throw new Err
2023-12-05 18:13:27 UTC	13079	IN	Data Raw: 6f 6c 62 64 61 6f 65 64 69 76 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 6d 6f 63 2e 79 61 62 79 61 6c 70 6f 67 2e 78 75 6c 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 6d 6f 63 2e 6e 65 73 6b 69 7a 2e 6f 6d 6f 72 70 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 6d 6f 63 2e 61 65 74 6f 6d 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 6d 6f 63 2e 66 62 2d 67 6e 69 6d 61 65 72 74 73 2e 6f 6d 6f 72 70 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 67 72 6f 2e 68 63 72 61 65 73 76 74 74 65 67 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 6d 6f 63 2e 6f 6b 6e 69 70 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 6d 6f 63 2e 64 65 74 69 6d 69 6c 6e 75 73 74 72 6f 70 73 65 76 69 6c 22 3a 22 31 23 31 3a 34 31 39 39 39 22 2c 22 6d 6f 63 2e 6e 67 6f 2d 65 6e 69 63 79 61 Data Ascii: olbdaoediv":"1#1:41999","moc.yabyalpog.xul":"1#1:41999","moc.neskiz.omorp":"1#1:41999","moc.aetom":"1#1:41999","moc.fb-gnimaerts.omorp":"1#1:41999","gro.hcraesvtteg":"1#1:41999","moc.oknip":"1#1:41999","moc.detimilnustropsevil":"1#1:41999","moc.ngo-enicya
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 34 30 39 35 32 30 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 31 36 38 39 35 31 38 35 38 39 35 32 37 38 35 32 30 30 33 30 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 31 34 34 35 35 39 33 31 39 38 36 37 37 30 36 36 33 35 39 34 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 35 33 36 32 32 33 35 37 30 37 35 32 38 32 37 35 37 36 32 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 35 33 34 36 36 32 36 35 38 38 39 34 38 32 38 37 31 34 32 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 31 34 30 30 30 34 34 39 39 32 30 30 37 35 30 32 33 37 34 30 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 39 39 32 30 33 30 33 38 31 32 39 34 36 38 31 32 30 35 35 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 31 39 34 35 31 36 32 35 36 34 31 30 36 35 37 33 30 35 34 22 Data Ascii: 409520":"1#1:42274","/16895185895278520030":"1#1:42274","/14455931986770663594":"1#1:42274","/5362235707528275762":"1#1:42274","/5346626588948287142":"1#1:42274","/14000449920075023740":"1#1:42274","/9920303812946812055":"1#1:42274","/1945162564106573054"
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 31 36 39 36 34 30 37 31 38 37 31 37 35 31 35 35 37 34 33 38 22 3a 22 31 23 31 39 3a 33 31 37 33 35 22 2c 22 2f 35 36 37 38 34 34 37 30 36 31 38 36 38 31 34 37 38 36 36 22 3a 22 31 23 31 39 3a 33 31 37 33 35 22 2c 22 2f 31 36 35 33 38 34 38 39 31 37 31 31 36 30 38 38 36 39 36 36 22 3a 22 31 23 31 39 3a 33 31 37 33 35 22 2c 22 2f 31 36 33 36 30 37 30 33 30 30 34 30 39 39 38 36 35 30 38 39 22 3a 22 30 23 32 34 3a 33 31 31 32 34 22 2c 22 2f 32 37 36 31 33 30 37 32 36 37 36 38 35 33 37 36 33 22 3a 22 30 23 32 34 3a 33 31 31 32 34 22 2c 22 2f 31 37 33 39 35 35 36 30 34 32 36 36 33 35 34 33 33 34 34 32 22 3a 22 30 23 32 34 3a 33 31 31 32 34 22 2c 22 2f 31 32 36 30 39 37 31 32 33 37 38 33 33 37 35 38 31 32 39 34 22 3a 22 30 23 32 34 3a 33 31 31 32 34 22 2c 22 2f Data Ascii: 16964071871751557438":"1#19:31735","/5678447061868147866":"1#19:31735","/16538489171160886966":"1#19:31735","/16360703004099865089":"0#24:31124","/27613072676853763":"0#24:31124","/17395560426635433442":"0#24:31124","/12609712378337581294":"0#24:31124","/
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 51 45 79 47 56 79 5a 68 30 48 6d 56 77 2a 69 6d 61 67 65 5f 36 32 37 5f 31 32 30 30 2a 31 36 39 34 38 31 31 32 30 34 37 35 39 2a 53 43 53 41 2d 2d 46 42 2d 4c 69 2d 35 31 6a 70 67 22 3a 22 31 23 31 39 3a 33 31 37 33 35 22 7d 2c 22 6d 6f 63 2e 67 6d 69 6e 69 61 72 62 74 75 6f 2e 73 65 67 61 6d 69 22 3a 7b 22 2f 74 72 61 6e 73 66 6f 72 6d 2f 76 33 2f 65 79 4a 70 64 53 49 36 49 6d 4d 31 4d 32 4a 69 59 7a 67 31 4f 54 6c 69 4e 7a 46 6d 5a 44 55 30 4d 32 4e 6a 4e 54 41 78 4d 54 55 34 4e 7a 59 31 59 7a 55 30 4e 7a 6b 34 59 6d 52 6d 59 6a 64 6b 5a 6d 4e 69 5a 44 49 31 59 6d 46 68 4d 44 67 34 5a 44 56 6c 4f 44 6b 33 4d 54 56 69 5a 47 4d 69 4c 43 4a 33 49 6a 6f 79 4e 6a 41 73 49 6d 67 69 4f 6a 49 77 4d 43 77 69 5a 43 49 36 4d 53 34 77 4c 43 4a 6a 63 79 49 36 4d 43 Data Ascii: QEyGVyZh0HmVwimage_627_12001694811204759*SCSA--FB-Li-51jpg":"1#19:31735"},"moc.gminiarbtuo.segami":{"/transform/v3/eyJpdSI6ImM1M2JiYzg1OTliNzFmZDU0M2NjNTAxMTU4NzY1YzU0Nzk4YmRmYjdkZmNiZDI1YmFhMDg4ZDVlODk3MTViZGMiLCJ3IjoyNjAsImgiOjIwMCwiZCI6MS4wLCJjcyI6MC
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 46 56 41 57 36 49 55 58 51 49 55 42 5a 41 41 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 4f 41 44 44 32 2e 37 33 35 33 30 39 33 31 37 39 35 38 33 5f 31 49 35 55 44 4e 30 57 35 46 51 58 58 50 46 47 58 48 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 4f 41 44 44 32 2e 38 32 34 36 33 38 37 39 34 31 34 36 38 5f 31 35 35 42 4a 44 49 46 5a 35 31 31 45 32 4b 35 5a 32 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 4f 41 44 44 32 2e 37 39 37 31 34 38 32 34 33 30 32 33 38 5f 31 4e 49 48 48 5a 5a 35 41 37 57 4a 4e 54 48 34 55 55 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 4f 41 44 44 32 2e 38 32 34 36 33 38 37 39 34 31 34 37 31 5f 31 53 56 57 48 35 56 4f 55 32 55 37 33 32 54 48 39 47 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 4f 41 44 44 32 2e 39 39 36 34 34 34 35 Data Ascii: FVAW6IUXQIUBZAA":"1#1:42274","OADD2.7353093179583_1I5UDN0W5FQXXPFGXH":"1#1:42274","OADD2.8246387941468_155BJDIFZ511E2K5Z2":"1#1:42274","OADD2.7971482430238_1NIHHZZ5A7WJNTH4UU":"1#1:42274","OADD2.8246387941471_1SVWH5VOU2U732TH9G":"1#1:42274","OADD2.9964445
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 64 6f 77 6e 6c 6f 61 64 2e 6e 65 74 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 64 6f 77 6e 6c 6f 61 64 69 6e 67 68 65 72 65 2e 63 6f 6d 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 74 61 73 6b 6d 61 6e 61 67 65 72 74 61 62 2e 63 6f 6d 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 6b 65 2e 6d 6f 76 66 61 6e 2e 63 6f 6d 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 63 6f 6e 74 65 6e 74 6c 69 73 74 73 2e 63 6f 6d 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 77 77 77 2e 62 68 67 2e 63 6f 6d 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 7a 75 73 74 69 6b 2e 63 6f 6d 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 6f 66 66 65 72 2d 70 75 6c 73 6c 65 72 2e 63 6f 6d 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 68 72 61 70 65 78 6d 6f 62 73 67 6c 2e 63 6f 6d 22 3a 22 Data Ascii: download.net":"1#1:42274","downloadinghere.com":"1#1:42274","taskmanagertab.com":"1#1:42274","ke.movfan.com":"1#1:42274","contentlists.com":"1#1:42274","www.bhg.com":"1#1:42274","zustik.com":"1#1:42274","offer-pulsler.com":"1#1:42274","hrapexmobsgl.com":"
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 62 63 65 31 39 34 64 39 36 39 39 33 37 34 64 38 38 64 61 37 32 62 63 5f 5f 73 63 76 31 5f 5f 33 30 30 78 31 37 35 2e 70 6e 67 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 63 36 61 34 32 32 64 37 35 31 32 35 39 66 30 63 64 30 65 37 66 36 66 30 39 31 64 38 37 62 36 64 5f 5f 73 63 76 31 5f 5f 33 30 30 78 31 37 35 2e 70 6e 67 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 38 37 64 30 34 38 64 35 64 30 63 37 35 66 30 65 37 30 63 65 65 62 61 39 61 35 37 33 39 32 34 30 5f 5f 73 63 76 31 5f 5f 33 30 30 78 31 37 35 2e 70 6e 67 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 65 30 32 34 61 63 62 65 38 35 33 39 31 39 65 32 34 35 64 61 34 34 35 30 39 32 35 38 38 38 36 34 5f 5f 73 63 76 31 5f 5f 33 30 30 78 31 37 35 2e 70 6e 67 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 Data Ascii: bce194d9699374d88da72bc__scv1__300x175.png":"1#1:42274","c6a422d751259f0cd0e7f6f091d87b6d__scv1__300x175.png":"1#1:42274","87d048d5d0c75f0e70ceeba9a5739240__scv1__300x175.png":"1#1:42274","e024acbe853919e245da445092588864__scv1__300x175.png":"1#1:42274","
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 6d 61 67 65 2f 30 30 2f 32 37 32 2f 32 30 31 2f 31 34 35 39 38 34 32 34 35 35 2e 6a 70 67 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 30 33 2f 30 31 36 2f 34 34 38 2f 32 32 30 33 32 33 31 31 33 31 2e 67 69 66 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 6e 61 74 69 76 65 2d 69 6d 61 67 65 2f 30 30 2f 32 37 32 2f 31 39 37 2f 37 32 37 37 32 35 30 33 37 33 2e 6a 70 67 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 30 33 2f 30 31 36 2f 34 35 32 2f 35 31 31 30 33 35 36 36 36 38 2e 67 69 66 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 6e 61 74 69 76 65 2d 69 6d 61 67 65 2f 30 30 2f 32 36 34 2f 38 37 35 2f 31 34 32 36 36 39 31 39 39 38 2e 6a 70 67 22 3a 22 31 23 31 3a 34 32 32 37 34 22 2c 22 2f 6e 61 74 69 76 65 2d 69 6d 61 67 65 2f 30 30 2f 32 36 34 Data Ascii: mage/00/272/201/1459842455.jpg":"1#1:42274","/03/016/448/2203231131.gif":"1#1:42274","/native-image/00/272/197/7277250373.jpg":"1#1:42274","/03/016/452/5110356668.gif":"1#1:42274","/native-image/00/264/875/1426691998.jpg":"1#1:42274","/native-image/00/264

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49813	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	779	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:27 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:27 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49774	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	1226	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 4055 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq
2023-12-05 18:13:27 UTC	4055	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 51 30 44 4c 75 6f 54 70 75 65 56 73 78 56 46 6c 78 64 43 56 59 57 63 44 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 61 62 5f 61 6c 6c 6f 63 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 30 36 36 37 35 2c 22 64 61 74 61 22 3a 7b 22 61 6c 6c 6f 63 73 22 3a 5b 7b 22 74 65 73 74 22 3a 22 53 55 Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"Q0DLuoTpueVsxVFlxdCVYWcD","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"ab_alloc","how":"beacon","client_ts":1701800006675,"data":{"allocs":[{"test":"SU
2023-12-05 18:13:27 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:27 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49816	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	1310	OUT	GET /vi-assets/static-assets/vendors~allAccessLandingPage~bestsellers~card~collections~cookingAppDownloadLandingPage~cookingLandi~3fc321fe-74ec4aa0b386b7ed501e.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:27 UTC	1133	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 38 33 33 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 36 6f 46 32 79 71 5a 77 35 64 38 72 52 4c 78 38 36 44 4d 57 73 32 54 58 51 38 59 41 68 67 73 52 61 6e 6c 39 63 6f 53 55 78 74 76 5a 6f 49 78 6d 6f 59 42 79 53 6e 64 2d 73 63 5a 43 2d 47 32 71 61 42 43 67 48 33 77 46 6f 6f 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 34 36 34 32 35 35 31 39 38 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 48339X-GUploader-UploadID: ABPtcPo6oF2yqZw5d8rRLx86DMWs2TXQ8YAhgsRanl9coSUxtvZoIxmoYBySnd-scZC-G2qaBCgH3wFoogx-goog-generation: 1701364642551983x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:27 UTC	862	IN	Data Raw: 6f 6e 69 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 6e 37 63 67 6d 66 74 73 68 61 7a 77 68 66 67 7a 6d 33 37 71 78 62 34 34 72 36 34 79 74 62 62 32 64 6a 33 78 36 32 64 32 6c 6c 6a 73 63 69 69 79 64 2e 6f 6e 69 6f 6e 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 7e 61 6c 6c 41 63 63 65 73 73 4c 61 6e 64 69 6e 67 50 61 67 65 7e 62 65 73 74 73 65 6c 6c 65 72 73 7e 63 61 72 64 7e 63 6f 6c 6c 65 63 74 69 6f 6e 73 7e 63 6f 6f 6b 69 6e 67 41 70 70 44 6f 77 6e 6c 6f 61 64 4c 61 6e 64 69 6e 67 50 61 67 65 7e 63 6f 6f 6b 69 6e 67 4c 61 6e 64 69 7e 33 66 63 33 32 31 66 65 2d 37 34 65 63 34 61 61 30 62 33 38 36 62 37 65 64 35 30 31 65 2e 6a 73 0d 0a 58 2d 41 50 49 Data Ascii: onion-location: https://www.nytimesn7cgmftshazwhfgzm37qxb44r64ytbb2dj3x62d2lljsciiyd.onion/vi-assets/static-assets/vendors~allAccessLandingPage~bestsellers~card~collections~cookingAppDownloadLandingPage~cookingLandi~3fc321fe-74ec4aa0b386b7ed501e.jsX-API
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 53 2b 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 6e 2e 63 6f 6e 74 65 6e 74 43 6c 61 73 73 3d 6e 2e 53 6e 61 63 6b 62 61 72 43 6f 6e 74 61 69 6e 65 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 74 28 22 4a 71 70 39 22 29 2c 6f 3d 69 28 74 28 22 77 58 43 37 22 29 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+S+O":function(e,n,t){"use strict";var i=t("TqRt");Object.defineProperty(n,"__esModule",{value:!0}),n.contentClass=n.SnackbarContainer=void 0;var a=t("Jqp9"),o=i(t("wXC7")),r=function(){return(0,a.
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 29 3b 76 61 72 20 61 3d 69 28 74 28 22 71 31 74 49 22 29 29 2c 6f 3d 69 28 74 28 22 31 37 78 39 22 29 29 2c 72 3d 74 28 22 4a 71 70 39 22 29 2c 73 3d 69 28 74 28 22 44 57 4a 74 22 29 29 2c 6c 3d 69 28 74 28 22 38 49 68 70 22 29 29 2c 64 3d 74 28 22 62 32 51 67 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 6e 2c 74 3d 65 2e 64 6f 63 6b 45 78 70 61 6e 64 65 64 2c 69 3d 65 2e 69 73 44 6f 63 6b 44 69 73 6d 69 73 73 69 62 6c 65 2c 6f 3d 65 2e 69 73 44 6f 63 6b 45 78 70 61 6e 64 61 62 6c 65 3b 72 65 74 75 72 6e 20 69 3f 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 2e 64 65 66 61 75 6c 74 2c 7b 66 69 6c 6c 3a 22 23 30 31 30 31 30 31 22 7d 29 3a 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 Data Ascii: );var a=i(t("q1tI")),o=i(t("17x9")),r=t("Jqp9"),s=i(t("DWJt")),l=i(t("8Ihp")),d=t("b2Qg");function c(e){var n,t=e.dockExpanded,i=e.isDockDismissible,o=e.isDockExpandable;return i?a.default.createElement(l.default,{fill:"#010101"}):a.default.createElement(
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 7d 29 3b 76 61 72 20 73 3d 6f 28 74 28 22 71 31 74 49 22 29 29 2c 6c 3d 74 28 22 58 36 6f 4c 22 29 2c 64 3d 72 28 74 28 22 35 55 49 68 22 29 29 2c 63 3d 6f 28 74 28 22 78 39 72 6f 22 29 29 2c 75 3d 72 28 74 28 22 35 55 2b 51 22 29 29 2c 66 3d 74 28 22 76 35 63 63 22 29 2c 70 3d 74 28 22 64 6a 4e 57 22 29 2c 6d 3d 74 28 22 32 79 78 4b 22 29 2c 67 3d 74 28 22 61 37 73 55 22 29 2c 68 3d 74 28 22 46 59 32 6c 22 29 3b 6e 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 75 6e 69 74 2c 74 3d 28 30 2c 6d 2e 75 73 65 4c 6f 67 29 28 29 2e 6c 6f 67 2c 69 3d 28 30 2c 6c 2e 75 73 65 54 72 61 63 6b 69 6e 67 29 28 29 2c 61 3d 22 2f 22 3d 3d 3d 28 30 2c 68 2e 67 65 74 50 61 74 68 4e 61 6d 65 29 28 29 3f 22 68 6f 6d 65 70 61 67 65 22 Data Ascii: });var s=o(t("q1tI")),l=t("X6oL"),d=r(t("5UIh")),c=o(t("x9ro")),u=r(t("5U+Q")),f=t("v5cc"),p=t("djNW"),m=t("2yxK"),g=t("a7sU"),h=t("FY2l");n.default=function(e){var n=e.unit,t=(0,m.useLog)().log,i=(0,l.useTracking)(),a="/"===(0,h.getPathName)()?"homepage"
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 63 2e 64 65 73 63 72 69 70 74 69 6f 6e 43 6c 61 73 73 7d 2c 22 42 79 20 63 6c 69 63 6b 69 6e 67 20 e2 80 98 61 63 63 65 70 74 2c e2 80 99 20 79 6f 75 20 63 6f 6e 73 65 6e 74 20 74 6f 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 79 6f 75 72 20 64 61 74 61 20 62 79 20 75 73 20 61 6e 64 20 74 68 69 72 64 20 70 61 72 74 69 65 73 20 75 73 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 6d 65 74 68 6f 64 73 2e 20 59 6f 75 20 63 61 6e 20 61 6c 77 61 79 73 20 63 68 61 6e 67 65 20 79 6f 75 72 20 74 72 61 63 6b 65 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 62 79 20 76 69 73 69 74 69 6e 67 20 6f 75 72 20 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 2e 22 29 29 2c 73 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c Data Ascii: t("p",{className:c.descriptionClass},"By clicking accept, you consent to the processing of your data by us and third parties using the above methods. You can always change your tracker preferences by visiting our Cookie Policy.")),s.default.createEl
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 7d 2c 74 79 70 65 3a 22 62 75 74 74 6f 6e 22 7d 2c 22 41 43 43 45 50 54 22 29 2c 73 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 75 74 74 6f 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 63 2e 63 6f 6f 6b 69 65 73 42 75 74 74 6f 6e 43 6c 61 73 73 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 78 28 21 30 29 2c 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 70 75 72 72 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 76 32 2f 70 72 65 66 65 72 65 6e 63 65 73 3f 67 64 70 72 5f 70 72 65 66 3d 6f 70 74 2d 6f 75 74 22 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 69 6e 63 6c 75 64 65 22 2c 68 65 61 64 65 72 73 3a 7b 41 63 63 65 70 74 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c Data Ascii: },type:"button"},"ACCEPT"),s.default.createElement("button",{className:c.cookiesButtonClass,onClick:function(){x(!0),fetch("https://purr.nytimes.com/v2/preferences?gdpr_pref=opt-out",{method:"POST",credentials:"include",headers:{Accept:"application/json",
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 6d 65 3a 22 22 2c 63 61 72 64 3a 6b 2c 63 6f 6e 74 65 6e 74 49 44 3a 22 4d 58 5f 43 4f 4d 50 4c 59 5f 47 44 50 52 5f 43 4f 4d 50 4c 49 41 4e 43 45 5f 32 33 35 22 2c 64 6f 63 6b 49 44 3a 22 65 78 70 61 6e 64 65 64 22 2c 68 65 61 64 65 72 3a 76 2c 69 73 44 6f 63 6b 44 69 73 6d 69 73 73 69 62 6c 65 3a 21 30 2c 69 73 44 6f 63 6b 45 78 70 61 6e 64 61 62 6c 65 3a 21 31 2c 6d 69 6e 69 6d 69 7a 65 64 3a 21 31 2c 6f 76 65 72 72 69 64 65 48 65 61 64 65 72 53 74 79 6c 65 73 3a 21 30 7d 29 7d 7d 2c 22 33 52 63 76 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 Data Ascii: me:"",card:k,contentID:"MX_COMPLY_GDPR_COMPLIANCE_235",dockID:"expanded",header:v,isDockDismissible:!0,isDockExpandable:!1,minimized:!1,overrideHeaderStyles:!0})}},"3Rcv":function(e,n,t){"use strict";var i=this&&this.__createBinding\|\|(Object.create?functi
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 73 53 74 79 6c 65 2c 43 3d 22 22 2e 63 6f 6e 63 61 74 28 61 2c 22 2d 64 6f 63 6b 2d 62 74 6e 2d 73 65 6c 65 63 74 6f 72 22 29 2c 76 3d 68 3f 75 2e 69 63 6f 6e 57 72 61 70 70 65 72 43 6c 61 73 73 43 65 6e 74 65 72 41 6c 69 67 6e 48 65 61 64 65 72 41 67 61 69 6e 73 74 50 61 67 65 57 69 64 74 68 3a 78 7c 7c 75 2e 69 63 6f 6e 57 72 61 70 70 65 72 43 6c 61 73 73 2c 6b 3d 28 30 2c 64 2e 63 78 29 28 76 2c 28 28 6e 3d 7b 7d 29 5b 75 2e 70 6f 69 6e 74 65 72 43 6c 61 73 73 5d 3d 6f 2c 6e 29 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 69 73 44 6f 63 6b 44 69 73 6d 69 73 73 69 62 6c 65 2c 74 3d 65 2e 64 6f 63 6b 45 78 70 61 6e 64 65 64 2c 69 3d 65 2e 68 65 61 64 65 72 43 6f 6c 6c 61 70 73 65 64 43 54 41 2c 61 3d 65 2e 68 65 61 64 65 72 45 Data Ascii: sStyle,C="".concat(a,"-dock-btn-selector"),v=h?u.iconWrapperClassCenterAlignHeaderAgainstPageWidth:x\|\|u.iconWrapperClass,k=(0,d.cx)(v,((n={})[u.pointerClass]=o,n)),w=function(e){var n=e.isDockDismissible,t=e.dockExpanded,i=e.headerCollapsedCTA,a=e.headerE
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 69 6e 67 2c 63 74 61 43 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 3a 6c 2e 64 65 66 61 75 6c 74 2e 73 74 72 69 6e 67 2c 63 74 61 41 63 74 69 6f 6e 54 65 78 74 43 6c 61 73 73 53 74 79 6c 65 3a 6c 2e 64 65 66 61 75 6c 74 2e 73 74 72 69 6e 67 7d 2c 66 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 63 6f 6e 74 65 6e 74 49 44 3a 22 22 2c 64 6f 63 6b 49 44 3a 22 73 74 61 6e 64 61 72 64 22 2c 64 6f 63 6b 45 78 70 61 6e 64 65 64 3a 21 31 2c 69 73 44 6f 63 6b 44 69 73 6d 69 73 73 69 62 6c 65 3a 76 6f 69 64 20 30 2c 69 73 44 6f 63 6b 45 78 70 61 6e 64 61 62 6c 65 3a 21 30 2c 68 65 61 64 65 72 45 78 70 61 6e 64 65 64 43 54 41 3a 22 22 2c 68 65 61 64 65 72 43 6f 6c 6c 61 70 73 65 64 43 54 41 3a 22 22 2c 6f 6e 44 6f 63 6b 43 54 41 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ing,ctaContainerStyle:l.default.string,ctaActionTextClassStyle:l.default.string},f.defaultProps={contentID:"",dockID:"standard",dockExpanded:!1,isDockDismissible:void 0,isDockExpandable:!0,headerExpandedCTA:"",headerCollapsedCTA:"",onDockCTAClick:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49818	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	811	OUT	GET /b?c1=2&c2=3005403&ns__t=1701800006685&ns_c=UTF-8&c8=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:27 UTC	713	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 62 32 3f 63 31 3d 32 26 63 32 3d 33 30 30 35 34 30 33 26 6e 73 5f 5f 74 3d 31 37 30 31 38 30 30 30 30 36 36 38 35 26 6e 73 5f 63 3d 55 54 46 2d 38 26 63 38 3d 49 73 72 61 65 6c 2d 48 61 6d 61 73 25 32 30 57 61 72 25 32 30 4e 65 77 73 25 33 41 25 32 30 4c 61 74 65 73 74 25 32 30 55 70 64 61 74 65 73 25 32 30 2d 25 32 30 54 68 65 25 32 30 4e 65 77 25 32 30 59 6f 72 6b 25 32 30 54 69 6d 65 73 26 63 37 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: HTTP/1.1 302 FoundContent-Length: 0Connection: closeDate: Tue, 05 Dec 2023 18:13:27 GMTLocation: /b2?c1=2&c2=3005403&ns__t=1701800006685&ns_c=UTF-8&c8=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&c7=https%3A%2F%2F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49814	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	1310	OUT	GET /vi-assets/static-assets/vendors~accessCodeLPAllAccess~accessCodeLPCooking~accessCodeLPGames~accessCodeLPNews~activateaccess~~16fc2915-b5fb63b7557620588d95.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:27 UTC	1135	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 32 30 39 32 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 75 6e 4e 57 44 65 49 69 32 79 76 79 77 56 34 6e 41 56 62 6b 7a 34 56 76 69 67 36 4e 34 6e 44 54 73 62 4c 6c 32 68 52 77 47 4b 72 66 5a 34 7a 4b 78 41 45 64 42 4f 53 65 71 74 64 63 39 76 6e 6b 36 37 4f 46 44 32 53 6d 65 65 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 34 30 32 34 31 38 32 36 35 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 220922X-GUploader-UploadID: ABPtcPrunNWDeIi2yvywV4nAVbkz4Vvig6N4nDTsbLl2hRwGKrfZ4zKxAEdBOSeqtdc9vnk67OFD2SmeeAx-goog-generation: 1701364024182653x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:27 UTC	862	IN	Data Raw: 6f 6e 69 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 6e 37 63 67 6d 66 74 73 68 61 7a 77 68 66 67 7a 6d 33 37 71 78 62 34 34 72 36 34 79 74 62 62 32 64 6a 33 78 36 32 64 32 6c 6c 6a 73 63 69 69 79 64 2e 6f 6e 69 6f 6e 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 7e 61 63 63 65 73 73 43 6f 64 65 4c 50 41 6c 6c 41 63 63 65 73 73 7e 61 63 63 65 73 73 43 6f 64 65 4c 50 43 6f 6f 6b 69 6e 67 7e 61 63 63 65 73 73 43 6f 64 65 4c 50 47 61 6d 65 73 7e 61 63 63 65 73 73 43 6f 64 65 4c 50 4e 65 77 73 7e 61 63 74 69 76 61 74 65 61 63 63 65 73 73 7e 7e 31 36 66 63 32 39 31 35 2d 62 35 66 62 36 33 62 37 35 35 37 36 32 30 35 38 38 64 39 35 2e 6a 73 0d 0a 58 2d 41 50 49 Data Ascii: onion-location: https://www.nytimesn7cgmftshazwhfgzm37qxb44r64ytbb2dj3x62d2lljsciiyd.onion/vi-assets/static-assets/vendors~accessCodeLPAllAccess~accessCodeLPCooking~accessCodeLPGames~accessCodeLPNews~activateaccess~~16fc2915-b5fb63b7557620588d95.jsX-API
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 7b 22 2b 6d 51 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 22 2b 73 33 34 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 74 2e 61 6c 6c 6f 77 65 64 53 70 61 63 65 3d 74 2e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+mQe":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0})},"+s34":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=t.allowedSpace=t.
2023-12-05 18:13:27 UTC	16384	IN	Data Raw: 73 65 54 70 6c 53 78 50 72 6f 70 29 28 68 29 3b 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 43 6f 6c 6f 72 42 65 68 61 76 69 6f 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 63 6f 6c 6f 72 42 65 68 61 76 69 6f 72 3a 62 7d 7d 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 2c 28 30 2c 6e 2e 64 65 66 61 75 6c 74 29 28 7b 72 65 66 3a 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 6f 2e 63 78 29 28 64 2e 6c 69 6e 6b 43 6c 61 73 73 2c 7b 5b 64 2e 73 75 62 74 6c 65 43 6c 61 73 73 5d 3a 6d 7d 2c 67 2c 6c 2c 45 29 2c 68 72 65 66 3a 70 7d 2c 76 29 2c 72 29 29 7d 29 3b 74 2e 4c 69 6e 6b 3d 73 7d 2c 22 34 50 5a 53 22 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: seTplSxProp)(h);return a.default.createElement(c.ColorBehaviorContext.Provider,{value:{colorBehavior:b}},a.default.createElement("a",(0,n.default)({ref:t,className:(0,o.cx)(d.linkClass,{[d.subtleClass]:m},g,l,E),href:p},v),r))});t.Link=s},"4PZS":function(
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 22 2c 22 e1 ba b4 22 3a 22 41 22 2c 22 e1 ba b8 22 3a 22 45 22 2c 22 e1 ba ba 22 3a 22 45 22 2c 22 e1 ba bc 22 3a 22 45 22 2c 22 e1 bb 80 22 3a 22 45 22 2c 22 e1 ba be 22 3a 22 45 22 2c 22 e1 bb 86 22 3a 22 45 22 2c 22 e1 bb 82 22 3a 22 45 22 2c 22 e1 bb 84 22 3a 22 45 22 2c 22 e1 bb 8a 22 3a 22 49 22 2c 22 e1 bb 88 22 3a 22 49 22 2c 22 c4 a8 22 3a 22 49 22 2c 22 e1 bb 8c 22 3a 22 4f 22 2c 22 e1 bb 8e 22 3a 22 4f 22 2c 22 e1 bb 92 22 3a 22 4f 22 2c 22 e1 bb 90 22 3a 22 4f 22 2c 22 e1 bb 98 22 3a 22 4f 22 2c 22 e1 bb 94 22 3a 22 4f 22 2c 22 e1 bb 96 22 3a 22 4f 22 2c 22 c6 a0 22 3a 22 4f 22 2c 22 e1 bb 9c 22 3a 22 4f 22 2c 22 e1 bb 9a 22 3a 22 4f 22 2c 22 e1 bb a2 22 3a 22 4f 22 2c 22 e1 bb 9e 22 3a 22 4f 22 2c 22 e1 bb a0 22 3a 22 4f 22 2c 22 e1 bb a4 22 Data Ascii: ","":"A","":"E","":"E","":"E","":"E","":"E","":"E","":"E","":"E","":"I","":"I","":"I","":"O","":"O","":"O","":"O","":"O","":"O","":"O","":"O","":"O","":"O","":"O","":"O","":"O",""
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 77 68 69 74 65 22 2c 64 3a 22 4d 31 35 2e 35 30 33 20 31 34 2e 36 30 33 20 31 35 2e 39 30 32 20 31 32 68 2d 32 2e 34 39 36 76 2d 31 2e 36 38 39 63 30 2d 2e 37 31 31 2e 33 34 38 2d 31 2e 34 30 36 20 31 2e 34 36 37 2d 31 2e 34 30 36 68 31 2e 31 33 35 56 36 2e 36 39 31 73 2d 31 2e 30 33 2d 2e 31 37 36 2d 32 2e 30 31 35 2d 2e 31 37 36 63 2d 32 2e 30 35 35 20 30 2d 33 2e 34 20 31 2e 32 34 36 2d 33 2e 34 20 33 2e 35 30 32 76 31 2e 39 38 34 48 38 2e 33 30 39 76 32 2e 36 30 32 68 32 2e 32 38 36 76 36 2e 32 38 39 61 39 2e 31 38 39 20 39 2e 31 38 39 20 30 20 30 20 30 20 32 2e 38 31 32 20 30 76 2d 36 2e 32 39 68 32 2e 30 39 37 5a 22 7d 29 29 29 7d 2c 76 3d 65 3d Data Ascii: efault.createElement("path",{fill:"white",d:"M15.503 14.603 15.902 12h-2.496v-1.689c0-.711.348-1.406 1.467-1.406h1.135V6.691s-1.03-.176-2.015-.176c-2.055 0-3.4 1.246-3.4 3.502v1.984H8.309v2.602h2.286v6.289a9.189 9.189 0 0 0 2.812 0v-6.29h2.097Z"})))},v=e=
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 35 2e 30 37 20 32 30 2e 33 31 34 61 2e 37 32 2e 37 32 20 30 20 30 20 30 20 31 2e 31 36 34 2e 38 34 37 6c 33 2e 39 35 2d 35 2e 34 33 37 61 2e 37 32 2e 37 32 20 30 20 31 20 30 2d 31 2e 31 36 35 2d 2e 38 34 36 6c 2d 33 2e 39 35 20 35 2e 34 33 36 5a 22 2c 6f 70 61 63 69 74 79 3a 22 2e 34 38 22 7d 29 2c 6f 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 32 2e 30 34 39 20 31 36 2e 30 32 32 61 2e 37 32 2e 37 32 20 30 20 30 20 30 20 2e 34 34 35 2d 31 2e 33 37 6c 2d 36 2e 33 39 31 2d 32 2e 30 37 36 61 2e 37 32 2e 37 32 20 30 20 31 20 30 2d 2e 34 34 35 20 31 2e 33 37 6c 36 2e 33 39 20 32 2e 30 37 36 5a 22 2c 6f 70 61 63 69 74 Data Ascii: .createElement("path",{d:"M5.07 20.314a.72.72 0 0 0 1.164.847l3.95-5.437a.72.72 0 1 0-1.165-.846l-3.95 5.436Z",opacity:".48"}),o.default.createElement("path",{d:"M22.049 16.022a.72.72 0 0 0 .445-1.37l-6.391-2.076a.72.72 0 1 0-.445 1.37l6.39 2.076Z",opacit
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 20 30 20 30 20 30 20 33 2e 33 33 38 20 31 30 61 36 2e 36 35 38 20 36 2e 36 35 38 20 30 20 30 20 30 20 36 2e 36 35 38 20 36 2e 36 36 37 63 33 2e 31 30 38 20 30 20 35 2e 37 2d 32 2e 31 32 35 20 36 2e 34 34 31 2d 35 68 2d 31 2e 37 33 33 41 34 2e 39 39 32 20 34 2e 39 39 32 20 30 20 30 20 31 20 39 2e 39 39 36 20 31 35 63 2d 32 2e 37 35 38 20 30 2d 35 2d 32 2e 32 34 32 2d 35 2d 35 73 32 2e 32 34 32 2d 35 20 35 2d 35 63 31 2e 33 38 33 20 30 20 32 2e 36 31 37 2e 35 37 35 20 33 2e 35 31 36 20 31 2e 34 38 33 4c 31 30 2e 38 33 20 39 2e 31 36 37 68 35 2e 38 33 34 56 33 2e 33 33 33 6c 2d 31 2e 39 35 39 20 31 2e 39 35 39 5a 22 7d 29 29 29 2c 32 34 3a 28 29 3d 3e 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 64 65 66 61 75 6c 74 2e 46 72 Data Ascii: 0 0 0 3.338 10a6.658 6.658 0 0 0 6.658 6.667c3.108 0 5.7-2.125 6.441-5h-1.733A4.992 4.992 0 0 1 9.996 15c-2.758 0-5-2.242-5-5s2.242-5 5-5c1.383 0 2.617.575 3.516 1.483L10.83 9.167h5.834V3.333l-1.959 1.959Z"}))),24:()=>i.default.createElement(i.default.Fr
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 29 28 65 29 7d 63 6f 6e 73 74 20 66 3d 28 30 2c 6f 2e 63 73 73 29 28 7b 6d 61 72 67 69 6e 3a 30 7d 29 3b 74 2e 74 65 78 74 42 61 73 65 43 6c 61 73 73 3d 66 3b 63 6f 6e 73 74 20 70 3d 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 28 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 75 2e 74 79 70 6f 67 72 61 70 68 79 29 2e 6d 61 70 28 65 3d 3e 7b 6c 65 74 5b 74 2c 72 5d 3d 65 3b 72 65 74 75 72 6e 5b 74 2c 28 30 2c 6f 2e 63 73 73 29 28 72 29 5d 7d 29 29 2c 6d 3d 28 30 2c 61 2e 66 6f 72 77 61 72 64 52 65 66 29 28 28 65 2c 74 29 3d 3e 7b 6c 65 74 20 72 2c 7b 61 73 3a 6c 3d 22 70 22 2c 76 61 72 69 61 6e 74 3a 75 2c 63 6f 6c 6f 72 3a 73 2c 63 68 69 6c 64 72 65 6e 3a 6d 2c 63 6c 61 73 73 4e 61 6d 65 3a 68 2c 63 6f 6c 6f 72 42 65 68 61 76 69 6f 72 3a 76 2c 73 Data Ascii: )(e)}const f=(0,o.css)({margin:0});t.textBaseClass=f;const p=Object.fromEntries(Object.entries(u.typography).map(e=>{let[t,r]=e;return[t,(0,o.css)(r)]})),m=(0,a.forwardRef)((e,t)=>{let r,{as:l="p",variant:u,color:s,children:m,className:h,colorBehavior:v,s
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 37 20 35 2e 38 48 37 76 35 2e 30 36 37 48 2e 36 36 37 56 35 2e 38 5a 22 7d 29 29 29 2c 63 7c 7c 28 63 3d 70 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 65 66 73 22 2c 6e 75 6c 6c 2c 70 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 6c 69 70 50 61 74 68 22 2c 7b 69 64 3a 22 61 22 7d 2c 70 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 30 20 30 48 31 35 2e 32 56 31 32 2e 36 36 37 48 30 7a 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 2e 36 36 37 20 32 29 22 7d 29 29 29 29 29 2c 32 30 3a 28 29 3d 3e 70 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: 7 5.8H7v5.067H.667V5.8Z"}))),c\|\|(c=p.default.createElement("defs",null,p.default.createElement("clipPath",{id:"a"},p.default.createElement("path",{fill:"currentColor",d:"M0 0H15.2V12.667H0z",transform:"translate(.667 2)"}))))),20:()=>p.default.createEleme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49819	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	936	OUT	GET /tags.js HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:28 UTC	655	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 30 37 34 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 32 39 20 4e 6f 76 20 32 30 32 33 20 31 33 3a 33 37 3a 30 36 20 47 4d 54 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascriptContent-Length: 150742Connection: closeServer: ApacheStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadLast-Modified: Wed, 29 Nov 2023 13:37:06 GMTAccept-Ranges: bytesAccess-
2023-12-05 18:13:28 UTC	15729	IN	Data Raw: 2f 2a 2a 20 44 61 74 61 44 6f 6d 65 20 69 73 20 61 20 63 79 62 65 72 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 62 6f 74 20 61 63 74 69 76 69 74 79 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 64 6f 6d 65 2e 63 6f 20 28 76 65 72 73 69 6f 6e 20 34 2e 31 39 2e 30 29 20 2a 2f 20 0a 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 72 2c 73 29 7b 69 66 28 21 6e 5b 72 5d 29 7b 69 66 28 21 74 5b 72 5d 29 7b 76 61 72 20 64 3d 27 5c 78 36 36 5c 78 37 35 5c 78 36 65 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 64 29 72 65 74 75 72 6e 20 64 28 72 2c 21 30 29 3b 69 66 28 61 29 Data Ascii: /** DataDome is a cybersecurity solution to detect bot activity https://datadome.co (version 4.19.0) */ !function e(t,n,o){function i(r,s){if(!n[r]){if(!t[r]){var d='\x66\x75\x6e\x63\x74\x69\x6f\x6e'==typeof require&&require;if(!s&&d)return d(r,!0);if(a)
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 74 2c 6e 29 3a 65 5b 27 5c 78 36 66 5c 78 36 65 27 2b 74 5d 3d 6e 3b 7d 2c 74 68 69 73 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 6f 29 7b 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 65 5c 78 37 34 5c 78 34 63 5c 78 36 39 5c 78 37 33 5c 78 37 34 5c 78 36 35 5c 78 36 65 5c 78 36 35 5c 78 37 32 27 5d 5d 3f 65 5b 5b 27 5c 78 37 32 5c 78 36 35 5c 78 36 64 5c 78 36 66 5c 78 37 36 5c 78 36 35 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c Data Ascii: t,n):e['\x6f\x6e'+t]=n;},this[['\x72\x65\x6d\x6f\x76\x65\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']]=function(e,t,n,o){e[['\x72\x65\x6d\x6f\x76\x65\x45\x76\x65\x6e\x74\x4c\x69\x73\x74\x65\x6e\x65\x72']]?e[['\x72\x65\x6d\x6f\x76\x65\x45\x76\x65\
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 61 5c 78 35 61 5c 78 35 33 27 2c 27 5c 78 34 31 5c 78 36 37 5c 78 36 65 5c 78 35 36 5c 78 34 34 5c 78 34 64 5c 78 37 32 5c 78 35 39 27 2c 27 5c 78 37 36 5c 78 33 32 5c 78 33 39 5c 78 35 39 5c 78 34 31 5c 78 33 32 5c 78 37 36 5c 78 35 39 5c 78 37 31 5c 78 33 32 5c 78 36 36 5c 78 33 31 5c 78 37 61 5c 78 33 32 5c 78 34 38 5c 78 33 30 5c 78 37 32 5c 78 37 38 5c 78 36 61 5c 78 35 39 5c 78 36 66 5c 78 34 39 5c 78 36 31 27 2c 27 5c 78 34 34 5c 78 34 64 5c 78 36 64 5c 78 35 38 27 2c 27 5c 78 34 32 5c 78 37 37 5c 78 36 36 5c 78 33 30 5c 78 37 39 5c 78 33 32 5c 78 34 37 27 2c 27 5c 78 34 34 5c 78 33 33 5c 78 36 65 5c 78 34 62 5c 78 37 39 5c 78 35 37 27 2c 27 5c 78 34 32 5c 78 37 37 5c 78 33 39 5c 78 34 39 27 2c 27 5c 78 37 61 5c 78 36 37 5c 78 37 32 5c 78 34 36 5c Data Ascii: a\x5a\x53','\x41\x67\x6e\x56\x44\x4d\x72\x59','\x76\x32\x39\x59\x41\x32\x76\x59\x71\x32\x66\x31\x7a\x32\x48\x30\x72\x78\x6a\x59\x6f\x49\x61','\x44\x4d\x6d\x58','\x42\x77\x66\x30\x79\x32\x47','\x44\x33\x6e\x4b\x79\x57','\x42\x77\x39\x49','\x7a\x67\x72\x46\
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 5c 78 33 64 5c 78 36 65 5c 78 32 65 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 35 30 5c 78 36 31 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 32 38 5c 78 37 32 5c 78 32 39 5c 78 32 63 5c 78 36 31 5c 78 32 65 5c 78 37 32 5c 78 36 34 5c 78 33 64 5c 78 36 65 5c 78 32 65 5c 78 36 37 5c 78 36 35 5c 78 37 34 5c 78 35 30 5c 78 36 31 5c 78 37 32 5c 78 36 31 5c 78 36 64 5c 78 36 35 5c 78 37 34 5c 78 36 35 5c 78 37 32 5c 78 32 38 5c 78 37 34 5c 78 32 39 5c 78 32 63 5c 78 37 33 5c 78 36 35 5c 78 36 63 5c 78 36 36 5c 78 32 65 5c 78 37 30 5c 78 36 66 5c 78 37 33 5c 78 37 34 5c 78 34 64 5c 78 36 35 5c 78 37 33 5c 78 37 33 5c 78 36 31 5c 78 36 37 5c 78 36 35 5c 78 32 38 5c 78 36 31 5c 78 32 39 5c 78 37 64 5c 78 36 33 5c 78 36 Data Ascii: \x3d\x6e\x2e\x67\x65\x74\x50\x61\x72\x61\x6d\x65\x74\x65\x72\x28\x72\x29\x2c\x61\x2e\x72\x64\x3d\x6e\x2e\x67\x65\x74\x50\x61\x72\x61\x6d\x65\x74\x65\x72\x28\x74\x29\x2c\x73\x65\x6c\x66\x2e\x70\x6f\x73\x74\x4d\x65\x73\x73\x61\x67\x65\x28\x61\x29\x7d\x63\x6
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 29 5d 3d 21 21 77 69 6e 64 6f 77 5b 6e 28 31 33 38 29 5d 3b 7d 2c 74 68 69 73 5b 74 28 32 34 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 3b 65 5b 6e 28 31 37 37 29 5d 3d 21 21 77 69 6e 64 6f 77 5b 6e 28 31 37 37 29 5d 3b 7d 2c 74 68 69 73 5b 27 5c 78 36 34 5c 78 36 34 5c 78 35 66 5c 78 34 38 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 5b 27 5c 78 36 34 5c 78 36 31 5c 78 37 34 27 5d 3d 27 5c 78 36 34 5c 78 36 66 5c 78 36 64 5c 78 34 31 5c 78 37 35 5c 78 37 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 27 69 6e 20 77 69 6e 64 6f 77 7c 7c 27 5c 78 36 34 5c 78 36 66 5c 78 36 64 5c 78 34 31 5c 78 37 35 5c 78 37 34 5c 78 36 66 5c 78 36 64 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 66 5c 78 36 65 Data Ascii: )]=!!window[n(138)];},this[t(241)]=function(){var n=t;e[n(177)]=!!window[n(177)];},this['\x64\x64\x5f\x48']=function(){e['\x64\x61\x74']='\x64\x6f\x6d\x41\x75\x74\x6f\x6d\x61\x74\x69\x6f\x6e'in window\|\|'\x64\x6f\x6d\x41\x75\x74\x6f\x6d\x61\x74\x69\x6f\x6e
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 2c 69 3d 30 3b 69 3c 6f 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 3b 69 2b 2b 29 69 66 28 28 6f 5b 69 5d 69 6e 20 77 69 6e 64 6f 77 7c 7c 6f 5b 69 5d 69 6e 20 64 6f 63 75 6d 65 6e 74 29 26 26 21 73 28 29 29 72 65 74 75 72 6e 20 65 5b 27 5c 78 37 33 5c 78 36 63 5c 78 36 31 5c 78 37 34 27 5d 3d 21 21 31 2c 64 28 27 5c 78 36 31 5c 78 37 33 5c 78 37 39 5c 78 36 65 5c 78 36 33 5c 78 34 33 5c 78 36 38 5c 78 36 31 5c 78 36 63 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 36 35 5c 78 34 36 5c 78 36 39 5c 78 36 65 5c 78 36 39 5c 78 37 33 5c 78 36 38 5c 78 36 35 5c 78 36 34 27 29 2c 76 6f 69 64 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 63 29 3b 69 66 28 27 5c 78 37 Data Ascii: on(){for(var t=n,i=0;i<o['\x6c\x65\x6e\x67\x74\x68'];i++)if((o[i]in window\|\|o[i]in document)&&!s())return e['\x73\x6c\x61\x74']=!!1,d('\x61\x73\x79\x6e\x63\x43\x68\x61\x6c\x6c\x65\x6e\x67\x65\x46\x69\x6e\x69\x73\x68\x65\x64'),void clearInterval(c);if('\x7
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 5d 3b 66 3e 77 5b 32 5d 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 27 5d 5d 26 26 28 77 5b 32 5d 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 27 5d 5d 3d 66 2c 77 5b 32 5d 5b 5b 27 5c 78 36 65 5c 78 36 31 5c 78 36 64 5c 78 36 35 27 5d 5d 3d 76 2c 77 5b 5b 27 5c 78 37 33 5c 78 36 66 5c 78 37 32 5c 78 37 34 27 5d 5d 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 27 5d 5d 2d 65 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 27 5d 5d 3b 7d 29 29 3b 7d 76 61 72 20 70 3d 21 31 3b 63 5b 5b 27 5c 78 36 63 5c 78 36 35 5c 78 36 65 5c 78 36 37 5c 78 37 34 5c 78 36 38 27 5d 5d 3e 32 34 30 30 30 26 26 28 70 3d 21 30 2c 6c 3d 27 5c 78 35 62 Data Ascii: x65\x6e\x67\x74\x68']];f>w[2][['\x6c\x65\x6e']]&&(w[2][['\x6c\x65\x6e']]=f,w[2][['\x6e\x61\x6d\x65']]=v,w[['\x73\x6f\x72\x74']](function(e,t){return t[['\x6c\x65\x6e']]-e[['\x6c\x65\x6e']];}));}var p=!1;c[['\x6c\x65\x6e\x67\x74\x68'...24000&&(p=!0,l='\x5b
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 5c 78 33 31 5c 78 32 65 5c 78 33 30 27 3b 76 61 72 20 68 3d 64 6f 63 75 6d 65 6e 74 5b 5b 27 5c 78 37 31 5c 78 37 35 5c 78 36 35 5c 78 37 32 5c 78 37 39 5c 78 35 33 5c 78 36 35 5c 78 36 63 5c 78 36 35 5c 78 36 33 5c 78 37 34 5c 78 36 66 5c 78 37 32 27 5d 5d 28 27 5c 78 36 38 5c 78 36 35 5c 78 36 31 5c 78 36 34 27 29 3b 6e 75 6c 6c 21 3d 68 26 26 68 5b 5b 27 5c 78 36 31 5c 78 37 30 5c 78 37 30 5c 78 36 35 5c 78 36 65 5c 78 36 34 5c 78 34 33 5c 78 36 38 5c 78 36 39 5c 78 36 63 5c 78 36 34 27 5d 5d 28 74 29 2c 77 69 6e 64 6f 77 5b 5b 27 5c 78 34 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 33 5c 78 36 31 5c 78 37 30 5c 78 37 34 5c 78 36 33 5c 78 36 38 5c 78 36 31 5c 78 34 34 5c 78 36 39 5c 78 37 33 5c 78 37 Data Ascii: \x31\x2e\x30';var h=document[['\x71\x75\x65\x72\x79\x53\x65\x6c\x65\x63\x74\x6f\x72']]('\x68\x65\x61\x64');null!=h&&h[['\x61\x70\x70\x65\x6e\x64\x43\x68\x69\x6c\x64']](t),window[['\x44\x61\x74\x61\x44\x6f\x6d\x65\x43\x61\x70\x74\x63\x68\x61\x44\x69\x73\x7
2023-12-05 18:13:28 UTC	16384	IN	Data Raw: 6f 6d 65 52 65 71 75 65 73 74 27 3a 35 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 65 28 27 5c 78 32 65 5c 78 32 66 5c 78 32 65 5c 78 32 65 5c 78 32 66 5c 78 36 36 5c 78 36 39 5c 78 36 65 5c 78 36 37 5c 78 36 35 5c 78 37 32 5c 78 37 30 5c 78 37 32 5c 78 36 39 5c 78 36 65 5c 78 37 34 5c 78 32 66 5c 78 34 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 36 35 5c 78 34 31 5c 78 36 65 5c 78 36 31 5c 78 36 63 5c 78 37 39 5c 78 37 61 5c 78 36 35 5c 78 37 32 27 29 2c 69 3d 65 28 27 5c 78 32 65 5c 78 32 66 5c 78 32 65 5c 78 32 65 5c 78 32 66 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 32 66 5c 78 34 34 5c 78 36 31 5c 78 37 34 5c 78 36 31 5c 78 34 34 5c 78 36 66 5c 78 36 64 5c 78 Data Ascii: omeRequest':5}],10:[function(e,t,n){var o=e('\x2e\x2f\x2e\x2e\x2f\x66\x69\x6e\x67\x65\x72\x70\x72\x69\x6e\x74\x2f\x44\x61\x74\x61\x44\x6f\x6d\x65\x41\x6e\x61\x6c\x79\x7a\x65\x72'),i=e('\x2e\x2f\x2e\x2e\x2f\x68\x74\x74\x70\x2f\x44\x61\x74\x61\x44\x6f\x6d\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49815	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	1310	OUT	GET /vi-assets/static-assets/vendors~account~byline~capsule~clientSideCapsule~collections~explainer~getstarted~liveAsset~newslett~64426ae5-506798ca96de1ea2e924.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:27 UTC	1376	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 34 34 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 71 50 4f 52 31 73 70 47 73 6f 52 52 4f 53 30 34 78 71 43 69 78 6d 4c 71 73 36 34 48 46 5f 54 75 79 43 65 43 4e 4d 70 59 78 45 6f 61 32 71 37 4a 41 5f 53 43 65 4a 4d 52 37 54 79 6f 48 64 66 4a 66 39 30 45 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 32 38 20 4e 6f 76 20 32 30 32 34 20 31 32 3a 34 36 3a 33 32 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 14443X-GUploader-UploadID: ABPtcPrqPOR1spGsoRROS04xqCixmLqs64HF_TuyCeCNMpYxEoa2q7JA_SCeJMR7TyoHdfJf90ECache-Control: public,max-age=31536000Expires: Thu, 28 Nov 2024 12:46:32 GMTLast-Modified: We
2023-12-05 18:13:27 UTC	612	IN	Data Raw: 58 2d 41 50 49 2d 56 65 72 73 69 6f 6e 3a 20 46 2d 58 0d 0a 78 2d 6e 79 74 2d 72 6f 75 74 65 3a 20 76 69 2d 61 73 73 65 74 73 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d Data Ascii: X-API-Version: F-Xx-nyt-route: vi-assetsContent-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; im
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 22 32 65 50 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 6e 28 72 28 22 6c 53 4e 41 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"2ePO":function(e,t,r){"use strict";var n=r("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=n(r("lSNA"));function o(e,t){var r=Object.keys(e);if(Object.getOwnProperty
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6e 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 6f 28 4f 62 6a 65 63 74 28 72 29 2c 21 30 29 Data Ascii: bject.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function u(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0)
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 61 47 72 61 70 68 71 6c 3d 22 5c 6e 20 20 71 75 65 72 79 20 4e 65 77 73 6c 65 74 74 65 72 50 72 6f 64 75 63 74 44 61 74 61 51 75 65 72 79 28 24 63 6f 64 65 3a 20 53 74 72 69 6e 67 29 20 7b 5c 6e 20 20 20 20 6e 65 77 73 6c 65 74 74 65 72 50 72 6f 64 75 63 74 44 61 74 61 28 63 6f 64 65 3a 20 24 63 6f 64 65 29 20 7b 5c 6e 20 20 20 20 20 20 63 6f 64 65 5c 6e 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 6e 65 77 73 6c 65 74 74 65 72 49 64 5c 6e 20 20 20 20 20 20 61 6c 6c 6f 77 65 64 45 6e 74 69 74 6c 65 6d 65 6e 74 5c 6e 20 20 20 20 20 20 69 73 4f 6e 73 69 74 65 46 72 65 65 54 72 69 61 6c 45 6e 61 62 6c 65 64 5c 6e 20 20 20 20 20 20 73 69 67 6e 75 70 4d 6f 64 75 6c 65 53 75 6d 6d 61 72 79 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 50 Data Ascii: aGraphql="\n query NewsletterProductDataQuery($code: String) {\n newsletterProductData(code: $code) {\n code\n name\n newsletterId\n allowedEntitlement\n isOnsiteFreeTrialEnabled\n signupModuleSummary\n subscriptionP
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 46 49 52 4d 41 54 49 4f 4e 5f 4d 53 47 3d 74 2e 46 52 45 45 5f 54 52 49 41 4c 5f 50 45 52 49 4f 44 5f 49 4e 5f 53 45 43 53 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 2c 6f 2c 75 2c 61 2c 73 3d 6e 28 72 28 22 6c 53 4e 41 22 29 29 3b 74 2e 56 49 45 57 5f 4e 41 4d 45 53 3d 7b 4c 4f 47 47 45 44 5f 4f 55 54 5f 4d 4f 44 41 4c 3a 22 6c 6f 67 67 65 64 4f 75 74 4d 6f 64 61 6c 22 2c 4c 4f 47 47 45 44 5f 4f 55 54 5f 49 4e 4c 49 4e 45 3a 22 6c 6f 67 67 65 64 4f 75 74 22 2c 41 4c 52 45 41 44 59 5f 53 49 47 4e 45 44 5f 55 50 3a 22 61 6c 72 65 61 64 79 53 75 62 73 63 72 69 62 65 64 22 2c 4c 4f 47 47 45 44 5f 49 4e 5f 53 49 47 4e 55 50 3a 22 6c 6f 67 67 65 64 49 6e 22 2c 43 4f 4e 46 49 52 4d 41 54 49 4f 4e 3a 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 7d 3b 74 2e 4d 4f 44 55 Data Ascii: FIRMATION_MSG=t.FREE_TRIAL_PERIOD_IN_SECS=void 0;var i,o,u,a,s=n(r("lSNA"));t.VIEW_NAMES={LOGGED_OUT_MODAL:"loggedOutModal",LOGGED_OUT_INLINE:"loggedOut",ALREADY_SIGNED_UP:"alreadySubscribed",LOGGED_IN_SIGNUP:"loggedIn",CONFIRMATION:"confirmation"};t.MODU
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 61 20 6c 6f 6f 6b 2e 22 29 2c 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 61 2c 6c 2e 53 55 42 53 43 52 49 42 45 52 2c 22 45 78 70 6c 6f 72 65 20 6d 6f 72 65 20 6e 65 77 73 6c 65 74 74 65 72 73 2e 22 29 2c 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 61 2c 6c 2e 46 52 45 45 5f 54 52 49 41 4c 2c 22 45 78 70 6c 6f 72 65 20 6d 6f 72 65 20 73 75 62 73 63 72 69 62 65 72 2d 6f 6e 6c 79 20 6e 65 77 73 6c 65 74 74 65 72 73 2e 22 29 2c 61 29 3b 74 2e 49 4e 5f 41 52 54 49 43 4c 45 5f 43 4f 4e 46 49 52 4d 41 54 49 4f 4e 5f 43 54 41 5f 54 45 58 54 3d 70 3b 74 2e 53 55 42 53 43 52 49 50 54 49 4f 4e 53 5f 53 50 4c 41 53 48 5f 50 41 47 45 5f 44 45 46 41 55 4c 54 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e Data Ascii: a look."),(0,s.default)(a,l.SUBSCRIBER,"Explore more newsletters."),(0,s.default)(a,l.FREE_TRIAL,"Explore more subscriber-only newsletters."),a);t.IN_ARTICLE_CONFIRMATION_CTA_TEXT=p;t.SUBSCRIPTIONS_SPLASH_PAGE_DEFAULT="https://www.nytimes.com/subscription
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 6c 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 5f 5f 70 72 65 6c 6f 61 64 65 64 44 61 74 61 29 7b 76 61 72 20 65 2c 74 3d 77 69 6e 64 6f 77 2e 5f 5f 70 72 65 6c 6f 61 64 65 64 44 61 74 61 2e 63 6f 6e 66 69 67 2c 72 3d 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6c 6f 63 61 74 69 6f 6e 29 2e 68 6f 73 74 6e 61 6d 65 3b 72 65 74 75 72 6e 20 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 68 6f 73 74 6e 61 6d 65 3a 72 7d 29 7d 72 65 74 75 72 6e 7b 7d 7d 28 29 2c 72 3d 74 2e 67 71 6c 55 72 6c 43 6c 69 65 6e 74 2c 6e 3d 74 2e 67 71 6c 52 65 71 75 65 73 74 48 65 Data Ascii: l(e){var t=function(){if("undefined"!=typeof window&&window.__preloadedData){var e,t=window.__preloadedData.config,r=(null===(e=window)\|\|void 0===e?void 0:e.location).hostname;return s(s({},t),{},{hostname:r})}return{}}(),r=t.gqlUrlClient,n=t.gqlRequestHe
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 30 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 69 3d 74 2e 70 72 6f 64 75 63 74 43 6f 64 65 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 6e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 72 2e 6e 65 77 73 6c 65 74 74 65 72 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 6f 64 75 63 74 43 6f 64 65 3d 3d 3d 69 7d 29 29 29 7c 7c 6e 75 6c 6c 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 54 32 35 47 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: 0;var n=function(e,t){var r,n,i=t.productCode;return(null==e\|\|null===(r=e.newsletterSubscriptions)\|\|void 0===r\|\|null===(n=r.newsletters)\|\|void 0===n?void 0:n.find((function(e){return e.productCode===i})))\|\|null};t.default=n},T25G:function(e,t,r){"use stri
2023-12-05 18:13:27 UTC	1379	IN	Data Raw: 53 43 52 49 50 54 49 4f 4e 3a 6e 2e 53 49 47 4e 55 50 5f 54 59 50 45 2e 44 45 46 41 55 4c 54 7d 3b 74 2e 67 65 74 53 69 67 6e 75 70 54 79 70 65 3d 6f 3b 74 2e 67 65 74 42 75 74 74 6f 6e 54 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 67 65 2c 72 3d 65 2e 6e 61 6d 65 2c 69 3d 65 2e 61 6c 6c 6f 77 65 64 45 6e 74 69 74 6c 65 6d 65 6e 74 2c 75 3d 65 2e 69 73 4f 6e 73 69 74 65 46 72 65 65 54 72 69 61 6c 45 6e 61 62 6c 65 64 2c 61 3d 65 2e 69 73 45 6c 69 67 69 62 6c 65 46 6f 72 4e 65 77 73 6c 65 74 74 65 72 2c 73 3d 65 2e 68 61 73 54 61 6b 65 6e 46 72 65 65 54 72 69 61 6c 2c 6c 3d 6f 28 7b 61 6c 6c 6f 77 65 64 45 6e 74 69 74 6c 65 6d 65 6e 74 3a 69 2c 69 73 4f 6e 73 69 74 65 46 72 65 65 54 72 69 61 6c 45 6e 61 62 6c 65 64 3a 75 Data Ascii: SCRIPTION:n.SIGNUP_TYPE.DEFAULT};t.getSignupType=o;t.getButtonText=function(e){var t=e.page,r=e.name,i=e.allowedEntitlement,u=e.isOnsiteFreeTrialEnabled,a=e.isEligibleForNewsletter,s=e.hasTakenFreeTrial,l=o({allowedEntitlement:i,isOnsiteFreeTrialEnabled:u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49822	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	365	OUT	GET /openrtb/pbjs?s=995821 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:28 UTC	612	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 36 32 63 66 33 33 33 39 62 32 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 Data Ascii: HTTP/1.1 204 No ContentDate: Tue, 05 Dec 2023 18:13:28 GMTContent-Type: application/jsonConnection: closeCF-Ray: 830e4362cf3339b2-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Pragma: no-cacheReport-To: {"endpoints":[{"url"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49820	34.120.63.153	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	364	OUT	GET /rtb/prebid?cid=8CU4WQK98 HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:28 UTC	397	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 37 20 47 4d 54 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 30 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 0d 0a 41 63 63 65 Data Ascii: HTTP/1.1 405 Method Not Allowedcontent-type: text/html;charset=utf-8content-language: endate: Tue, 05 Dec 2023 18:13:27 GMTx-envoy-upstream-service-time: 0vary: Accept-Encodingserver: envoyVia: 1.1 googleAccess-Control-Allow-Origin: Acce
2023-12-05 18:13:28 UTC	461	IN	Data Raw: 31 63 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 35 20 e2 80 93 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 Data Ascii: 1c1<!doctype html><html lang="en"><head><title>HTTP Status 405 Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49823	18.160.53.102	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:27 UTC	372	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:28 UTC	621	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 34 38 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 35 3a 35 32 3a 34 33 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 32 39 20 41 75 67 20 32 30 32 33 20 30 38 3a 33 30 3a 33 37 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 61 34 64 32 39 36 34 32 37 66 63 38 30 36 62 32 31 33 33 35 33 35 39 65 33 39 38 63 30 32 35 63 22 0d 0a 78 2d 61 6d 7a 2d 73 65 72 76 65 72 2d 73 69 64 65 2d 65 6e 63 72 79 70 74 69 6f 6e 3a 20 41 45 53 32 Data Ascii: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 6482Connection: closeDate: Tue, 05 Dec 2023 15:52:43 GMTLast-Modified: Tue, 29 Aug 2023 08:30:37 GMTETag: "a4d296427fc806b21335359e398c025c"x-amz-server-side-encryption: AES2
2023-12-05 18:13:28 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49821	44.215.149.250	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:28 UTC	519	OUT	GET /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&tmax=10000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:28 UTC	940	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 35 20 4f 63 74 20 31 39 39 32 20 32 30 3a 31 30 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 58 2d 58 53 53 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:28 GMTContent-Type: application/json; charset=utf-8Content-Length: 19Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 15 Oct 1992 20:10:00 GMTPragma: no-cacheX-XSS
2023-12-05 18:13:28 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49824	35.227.252.103	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:28 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:28 UTC	175	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:13:28 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49830	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:28 UTC	859	OUT	GET /b2?c1=2&c2=3005403&ns__t=1701800006685&ns_c=UTF-8&c8=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
2023-12-05 18:13:28 UTC	326	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 38 20 47 4d 54 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 55 41 2c 20 50 6c 61 74 66 6f 72 6d 2c 20 41 72 63 68 2c 20 4d 6f 64 65 6c 2c 20 4d 6f 62 69 6c 65 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 69 73 73 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 33 61 65 63 33 62 34 34 66 62 39 37 36 34 32 32 65 35 31 33 61 33 35 36 63 63 64 37 36 65 62 38 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 20 28 43 6c 6f 75 64 46 72 6f 6e 74 29 0d 0a 58 2d 41 6d 7a 2d 43 66 2d 50 6f 70 3a 20 49 41 44 35 35 2d 50 34 0d 0a 58 2d Data Ascii: HTTP/1.1 204 No ContentConnection: closeDate: Tue, 05 Dec 2023 18:13:28 GMTAccept-CH: UA, Platform, Arch, Model, MobileX-Cache: Miss from cloudfrontVia: 1.1 3aec3b44fb976422e513a356ccd76eb8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: IAD55-P4X-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49775	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:28 UTC	591	OUT	OPTIONS /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,nyt-app-type,nyt-app-version,nyt-token,x-nyt-internal-meter-override Origin: https://www.nytimes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:28 UTC	1191	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 6e 79 74 2d 61 70 70 2d 74 79 70 65 2c 6e 79 74 2d 61 70 70 2d 76 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 0access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-allow-methods: GET,POSTaccess-control-allow-headers: content-type,nyt-app-type,nyt-app-ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49833	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:28 UTC	543	OUT	GET /video-static/vhs3/vhs.min.js HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:29 UTC	1111	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 31 36 38 39 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 74 4a 75 71 55 49 4c 49 62 6b 6a 50 6a 35 50 51 42 4f 72 36 74 37 6e 4b 52 77 69 52 72 61 72 4f 34 69 72 6f 59 48 2d 5f 5f 56 37 52 67 71 32 6f 34 77 34 59 59 63 55 41 71 41 49 58 75 6e 32 71 66 43 34 4b 47 36 44 55 6c 41 77 74 35 44 4e 2d 46 6a 2d 66 72 71 66 43 4e 32 6b 73 63 46 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 36 30 2c 73 2d 6d 61 78 61 67 65 3d 36 30 34 38 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 30 20 4f 63 74 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 516892X-GUploader-UploadID: ADPycdtJuqUILIbkjPj5PQBOr6t7nKRwiRrarO4iroYH-__V7Rgq2o4w4YYcUAqAIXun2qfC4KG6DUlAwt5DN-Fj-frqfCN2kscFCache-Control: public,max-age=60,s-maxage=604800Expires: Fri, 20 Oct
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 56 48 53 3d 74 28 29 3a 65 2e 56 48 53 3d 74 28 29 7d 28 77 69 6e 64 6f 77 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 2c 6f 3d 74 5b Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.VHS=t():e.VHS=t()}(window,(function(){return function(e){function t(t){for(var n,i,o=t[
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 5f 41 44 5f 50 52 4f 47 52 45 53 53 3a 22 70 6c 61 79 65 72 2f 55 50 44 41 54 45 5f 41 44 5f 50 52 4f 47 52 45 53 53 22 2c 53 48 4f 55 4c 44 5f 50 4c 41 59 3a 22 70 6c 61 79 65 72 2f 53 48 4f 55 4c 44 5f 50 4c 41 59 22 2c 53 48 4f 55 4c 44 5f 50 41 55 53 45 3a 22 70 6c 61 79 65 72 2f 53 48 4f 55 4c 44 5f 50 41 55 53 45 22 2c 53 48 4f 55 4c 44 5f 53 45 45 4b 3a 22 70 6c 61 79 65 72 2f 53 48 4f 55 4c 44 5f 53 45 45 4b 22 2c 53 48 4f 55 4c 44 5f 4d 55 54 45 3a 22 70 6c 61 79 65 72 2f 53 48 4f 55 4c 44 5f 4d 55 54 45 22 2c 53 48 4f 55 4c 44 5f 55 4e 4d 55 54 45 3a 22 70 6c 61 79 65 72 2f 53 48 4f 55 4c 44 5f 55 4e 4d 55 54 45 22 2c 55 53 45 52 5f 44 49 44 5f 49 4e 54 45 52 41 43 54 3a 22 70 6c 61 79 65 72 2f 55 53 45 52 5f 44 49 44 5f 49 4e 54 45 52 41 43 54 Data Ascii: _AD_PROGRESS:"player/UPDATE_AD_PROGRESS",SHOULD_PLAY:"player/SHOULD_PLAY",SHOULD_PAUSE:"player/SHOULD_PAUSE",SHOULD_SEEK:"player/SHOULD_SEEK",SHOULD_MUTE:"player/SHOULD_MUTE",SHOULD_UNMUTE:"player/SHOULD_UNMUTE",USER_DID_INTERACT:"player/USER_DID_INTERACT
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 54 3d 6b 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 43 3d 53 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 4c 3d 6b 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 6f 28 65 29 29 7d 28 65 29 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 4c 2e 63 61 6c 6c 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 74 6f 53 74 72 69 6e 67 29 74 72 79 7b 74 Data Ascii: on.prototype.toString,T=k.hasOwnProperty,C=S.call(Object),L=k.toString;function D(e){if(!function(e){return!!e&&"object"==(void 0===e?"undefined":o(e))}(e)\|\|"[object Object]"!=L.call(e)\|\|function(e){var t=!1;if(null!=e&&"function"!=typeof e.toString)try{t
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 43 61 6e 63 65 6c 46 75 6c 6c 53 63 72 65 65 6e 22 2c 22 77 65 62 6b 69 74 66 75 6c 6c 73 63 72 65 65 6e 63 68 61 6e 67 65 22 2c 22 77 65 62 6b 69 74 66 75 6c 6c 73 63 72 65 65 6e 65 72 72 6f 72 22 5d 2c 5b 22 6d 6f 7a 52 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 22 2c 22 6d 6f 7a 43 61 6e 63 65 6c 46 75 6c 6c 53 63 72 65 65 6e 22 2c 22 6d 6f 7a 46 75 6c 6c 53 63 72 65 65 6e 45 6c 65 6d 65 6e 74 22 2c 22 6d 6f 7a 46 75 6c 6c 53 63 72 65 65 6e 45 6e 61 62 6c 65 64 22 2c 22 6d 6f 7a 66 75 6c 6c 73 63 72 65 65 6e 63 68 61 6e 67 65 22 2c 22 6d 6f 7a 66 75 6c 6c 73 63 72 65 65 6e 65 72 72 6f 72 22 5d 2c 5b 22 6d 73 52 65 71 75 65 73 74 46 75 6c 6c 73 63 72 65 65 6e 22 2c 22 6d 73 45 78 69 74 46 75 6c 6c 73 63 72 65 65 6e 22 2c 22 6d 73 46 75 6c 6c 73 63 Data Ascii: CancelFullScreen","webkitfullscreenchange","webkitfullscreenerror"],["mozRequestFullScreen","mozCancelFullScreen","mozFullScreenElement","mozFullScreenEnabled","mozfullscreenchange","mozfullscreenerror"],["msRequestFullscreen","msExitFullscreen","msFullsc
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 6e 63 65 6f 66 20 65 3f 65 2e 5f 69 73 50 72 65 66 69 78 41 6c 72 65 61 64 79 49 6e 55 73 65 28 74 29 3f 65 2e 5f 67 65 74 49 6e 73 74 61 6e 63 65 42 79 50 72 65 66 69 78 28 74 29 3a 28 74 68 69 73 2e 6f 70 74 73 3d 65 2e 5f 6e 6f 72 6d 61 6c 69 7a 65 4f 70 74 73 28 74 2c 6e 29 2c 74 68 69 73 2e 73 74 61 74 65 3d 65 2e 5f 67 65 74 49 6e 69 74 69 61 6c 53 74 61 74 65 28 74 68 69 73 2e 6f 70 74 73 29 2c 65 2e 5f 64 65 63 6f 72 61 74 65 4c 6f 67 67 65 72 4d 65 74 68 6f 64 73 28 74 68 69 73 29 2c 65 2e 5f 69 6e 73 74 61 6e 63 65 73 2e 70 75 73 68 28 74 68 69 73 29 2c 74 68 69 73 29 3a 6e 65 77 20 65 28 74 2c 6e 29 7d 72 65 74 75 72 6e 20 65 2e 74 72 61 6e 73 70 6f 72 74 73 3d 5b 5d 2c 65 2e 5f 69 6e 73 74 61 6e 63 65 73 3d 5b 5d 2c 65 2e 5f 70 72 65 66 69 78 Data Ascii: nceof e?e._isPrefixAlreadyInUse(t)?e._getInstanceByPrefix(t):(this.opts=e._normalizeOpts(t,n),this.state=e._getInitialState(this.opts),e._decorateLoggerMethods(this),e._instances.push(this),this):new e(t,n)}return e.transports=[],e._instances=[],e._prefix
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 20 61 6e 6f 6e 79 6d 6f 75 73 28 6c 6f 63 61 6c 73 2c 65 73 63 61 70 65 2c 69 6e 63 6c 75 64 65 2c 72 65 74 68 72 6f 77 29 7b 72 65 74 68 72 6f 77 3d 72 65 74 68 72 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 73 29 7b 76 61 72 20 69 3d 74 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 6f 3d 4d 61 74 68 2e 6d 61 78 28 73 2d 33 2c 30 29 2c 72 3d 4d 61 74 68 2e 6d 69 6e 28 69 2e 6c 65 6e 67 74 68 2c 73 2b 33 29 2c 61 3d 75 74 69 6c 73 2e 65 73 63 61 70 65 58 4d 4c 28 6e 29 2c 6c 3d 69 2e 73 6c 69 63 65 28 6f 2c 72 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 6f 2b 31 3b 72 65 74 75 72 6e 28 6e 3d 3d 73 3f 22 20 3e 3e 20 22 3a 22 20 20 20 20 22 29 2b 6e 2b 22 7c 20 22 2b 65 7d 29 29 Data Ascii: s=function anonymous(locals,escape,include,rethrow){rethrow=rethrow\|\|function(e,t,n,s){var i=t.split("\n"),o=Math.max(s-3,0),r=Math.min(i.length,s+3),a=utils.escapeXML(n),l=i.slice(o,r).map((function(e,t){var n=t+o+1;return(n==s?" >> ":" ")+n+"\| "+e}))
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 36 34 36 20 30 20 31 32 2e 32 32 33 20 30 20 39 2e 36 34 38 63 30 2d 32 2e 35 37 38 20 31 2e 30 30 33 2d 35 20 32 2e 38 32 35 2d 36 2e 38 32 33 53 37 2e 30 37 20 30 20 39 2e 36 34 37 20 30 73 35 20 31 2e 30 30 33 20 36 2e 38 32 20 32 2e 38 32 35 63 31 2e 38 32 33 20 31 2e 38 32 32 20 32 2e 38 32 36 20 34 2e 32 34 34 20 32 2e 38 32 36 20 36 2e 38 32 20 30 20 32 2e 35 37 38 2d 31 2e 30 30 33 20 35 2d 32 2e 38 32 35 20 36 2e 38 32 32 2d 31 2e 38 32 32 20 31 2e 38 32 33 2d 34 2e 32 34 35 20 32 2e 38 32 36 2d 36 2e 38 32 20 32 2e 38 32 36 7a 6d 30 2d 31 37 2e 35 34 35 63 2d 32 2e 31 31 20 30 2d 34 2e 30 39 34 2e 38 32 32 2d 35 2e 35 38 35 20 32 2e 33 31 34 53 31 2e 37 34 38 20 37 2e 35 33 37 20 31 2e 37 34 38 20 39 2e 36 34 37 73 2e 38 32 32 20 34 2e 30 39 33 Data Ascii: 646 0 12.223 0 9.648c0-2.578 1.003-5 2.825-6.823S7.07 0 9.647 0s5 1.003 6.82 2.825c1.823 1.822 2.826 4.244 2.826 6.82 0 2.578-1.003 5-2.825 6.822-1.822 1.823-4.245 2.826-6.82 2.826zm0-17.545c-2.11 0-4.094.822-5.585 2.314S1.748 7.537 1.748 9.647s.822 4.093
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 54 65 55 58 2d 31 43 20 7b 5c 6e 20 20 74 6f 70 3a 20 31 30 70 78 3b 5c 6e 20 20 72 69 67 68 74 3a 20 31 30 70 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 32 30 70 78 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 31 70 78 20 31 35 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 5c 6e 7d 5c 6e 5c 6e 2e 63 6f 75 6e 74 64 6f 77 6e 2d 31 51 4b 4e 74 4a 35 30 2e 6d 2d 62 36 56 45 55 45 45 37 20 7b 5c 6e 20 20 74 6f 70 3a 20 31 30 70 78 3b 5c 6e 20 20 72 69 67 68 74 3a 20 31 30 70 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 70 78 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 34 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 5c 6e 7d 5c 6e 5c 6e 2e 63 6f 75 6e 74 64 6f 77 6e 2d 31 51 4b 4e 74 4a 35 30 2e Data Ascii: TeUX-1C {\n top: 10px;\n right: 10px;\n width: 120px;\n padding: 11px 15px;\n font-size: 13px;\n}\n\n.countdown-1QKNtJ50.m-b6VEUEE7 {\n top: 10px;\n right: 10px;\n width: 100px;\n padding: 10px 14px;\n font-size: 11px;\n}\n\n.countdown-1QKNtJ50.
2023-12-05 18:13:29 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 29 2c 61 26 26 61 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 72 7d 2c 64 65 6c 65 74 65 20 6f 2e 69 6e 69 74 69 61 6c 69 7a 65 72 2c 64 65 6c 65 74 65 20 6f 2e 76 61 6c 75 65 2c 64 65 6c 65 74 65 20 6f 2e 77 72 69 74 61 62 6c 65 2c 6f 7d 7d 28 2e 2e 2e 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 2e 2e 2e 74 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 65 28 2e 2e 2e 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 29 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e Data Ascii: ction(){return t(e),a&&a.call(this)\|\|r},delete o.initializer,delete o.value,delete o.writable,o}}(...e)}},function(e,t){e.exports=function(e){function t(...t){const n=new e(...t);return Object.freeze(n)}return t.prototype=e.prototype,t}},function(e,t){fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49831	68.67.160.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	437	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChgIkbx3EAoYASABKAEwx9C9qwY4AUABSAEQx9C9qwYYAA..; uuid2=3114214532401325210
2023-12-05 18:13:29 UTC	934	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 35 20 4e 6f 76 20 32 30 30 38 20 31 36 3a 30 30 Data Ascii: HTTP/1.1 200 OKServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:13:29 GMTContent-Type: application/json; charset=utf-8Content-Length: 57Connection: closeCache-Control: no-store, no-cache, privatePragma: no-cacheExpires: Sat, 15 Nov 2008 16:00
2023-12-05 18:13:29 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49834	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	653	OUT	OPTIONS /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,nyt-app-type,nyt-app-version,nyt-token,x-nyt-entitlements,x-nyt-internal-meter-override,x-nyt-news-tenure,x-nyt-programming-abtest Origin: https://www.nytimes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:29 UTC	1253	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 6e 79 74 2d 61 70 70 2d 74 79 70 65 2c 6e 79 74 2d 61 70 70 2d 76 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 0access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-allow-methods: GET,POSTaccess-control-allow-headers: content-type,nyt-app-type,nyt-app-ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49832	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	1209	OUT	GET /vi-assets/static-assets/comments-3f4cc7ef7c26c8dabbd6.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; datadome=La6TACX_EemDCvuQo0WlpNe7dladYGlxTQCf3V7crlDMe9VlVFU4H6T2i3xU1hiMh96Ev4OveY8mYKHmGaSF0da_~2SrPktfxqT7vQEBLjkf0UKjDyNmQkx7~kmB6tU4; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:29 UTC	1326	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 34 33 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 30 45 43 33 66 62 4e 72 2d 43 64 44 57 41 59 34 74 59 50 69 4d 44 36 35 4c 38 66 52 50 53 48 62 46 39 41 77 4c 55 32 67 4b 43 2d 57 38 55 63 59 65 54 73 79 4f 31 72 39 70 47 38 69 7a 52 4e 52 37 55 4b 6d 4f 34 5a 58 47 54 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 39 33 32 30 33 32 37 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 44433X-GUploader-UploadID: ABPtcPp0EC3fbNr-CdDWAY4tYPiMD65L8fRPSHbF9AwLU2gKC-W8UcYeTsyO1r9pG8izRNR7UKmO4ZXGTwx-goog-generation: 1701370693203275x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:29 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 5d 2c 7b 45 63 76 4a 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 3b 76 61 72 20 6f 3d 6e 28 22 4a 71 70 39 22 29 2c 69 3d 6e 28 22 77 58 43 37 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 72 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 62 61 63 6b 67 72 6f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[64],{EcvJ:function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return c})),n.d(t,"c",(function(){return s}));var o=n("Jqp9"),i=n("wXC7"),a=n.n(i),r=Object(o.css)("backgro
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 66 3d 4f 62 6a 65 63 74 28 64 2e 63 73 73 29 28 22 62 75 74 74 6f 6e 26 2c 61 7b 22 2c 70 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 75 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 6d 65 64 69 75 6d 42 6f 6c 64 2c 22 3b 7d 22 29 2c 62 3d 4f 62 6a 65 63 74 28 64 2e 63 73 73 29 28 22 62 75 74 74 6f 6e 26 2c 61 7b 22 2c 70 2c 22 3b 7d 22 29 2c 68 3d 4f 62 6a 65 63 74 28 64 2e 63 73 73 29 28 22 62 75 74 74 6f 6e 26 2c 61 7b 22 2c 70 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 75 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 34 30 2c 22 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 7d 22 29 2c 67 3d 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 6f 6e 43 6c 69 63 6b 22 2c 22 74 68 65 6d 65 22 5d 2c 76 3d 7b 41 43 54 49 4f 4e 3a 22 61 63 74 69 6f 6e 22 2c 53 45 43 Data Ascii: f=Object(d.css)("button&,a{",p,";font-weight:",u.a.font.weight.mediumBold,";}"),b=Object(d.css)("button&,a{",p,";}"),h=Object(d.css)("button&,a{",p,";color:",u.a.color.gray40,";padding-bottom:4px;}"),g=["children","onClick","theme"],v={ACTION:"action",SEC
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 22 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 3a 31 34 70 78 20 30 20 31 30 70 78 3b 2e 22 2c 72 2e 62 2c 22 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 3b 7d 22 29 2c 6c 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 66 6c 65 78 2d 67 72 6f 77 3a 32 3b 22 29 2c 64 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 22 29 2c 6d 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 62 6f 6c 64 2c 22 3b 22 29 2c 75 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 63 6f 6c 6f 72 3a 22 2c 61 2e 61 2e Data Ascii: ;margin-bottom:5px;width:100%;"),s=Object(o.css)("margin:14px 0 10px;.",r.b,"{margin-right:15px;}"),l=Object(o.css)("flex-grow:2;"),d=Object(o.css)("margin-left:10px;"),m=Object(o.css)("font-weight:",a.a.font.weight.bold,";"),u=Object(o.css)("color:",a.a.
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 61 6d 69 6c 79 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 6d 65 64 69 75 6d 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 35 29 2c 22 3b 74 65 78 74 2d 77 72 61 70 3a 77 72 61 70 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 22 29 2c 76 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 Data Ascii: amily:",a.a.font.franklinBase,";font-weight:",a.a.font.weight.medium,";line-height:",a.a.font.size(15),";text-wrap:wrap;margin-top:-10px;background:white;box-shadow:0 0 10px rgba(0,0,0,0.15);a{text-decoration:underline;cursor:pointer;}"),v=Object(o.css)("
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 65 74 75 72 6e 28 65 3d 74 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 74 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 69 29 29 29 2e 73 74 61 74 65 3d 7b 6c 6f 63 61 6c 65 54 69 6d 65 73 74 61 6d 70 3a 6e 75 6c 6c 2c 64 61 74 65 54 69 6d 65 3a 4f 62 6a 65 63 74 28 67 2e 67 65 74 49 53 4f 46 72 6f 6d 55 6e 69 78 29 28 65 2e 70 72 6f 70 73 2e 75 6e 69 78 29 7d 2c 65 7d 72 65 74 75 72 6e 20 73 28 29 28 6e 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 6f 72 6d 61 74 54 69 6d 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 6f 3d 3d 3d 74 68 69 73 2e 70 Data Ascii: eturn(e=t.call.apply(t,[this].concat(i))).state={localeTimestamp:null,dateTime:Object(g.getISOFromUnix)(e.props.unix)},e}return s()(n,[{key:"componentDidMount",value:function(){this.formatTime()}},{key:"componentDidUpdate",value:function(e){e.iso===this.p
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 61 6c 65 54 69 6d 65 73 74 61 6d 70 29 3a 69 28 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 7d 2c 76 6f 69 64 20 30 2c 22 c2 a0 22 29 7d 7d 5d 29 2c 6e 7d 28 62 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 78 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 54 69 6d 65 73 74 61 6d 70 22 2c 78 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 75 6e 69 78 3a 76 6f 69 64 20 30 2c 69 73 6f 3a 76 6f 69 64 20 30 2c 63 6c 61 73 73 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 75 70 64 61 74 65 64 54 65 78 74 3a 21 31 2c 75 70 64 61 74 65 64 54 65 78 74 43 6c 61 73 73 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 68 65 6d 65 3a 76 6f 69 64 20 30 7d 2c 74 2e 61 3d 4f 62 6a 65 63 74 28 68 2e 77 69 74 68 54 68 65 6d 65 29 28 78 29 7d 2c 22 66 2b 32 56 22 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: aleTimestamp):i()("span",{className:t},void 0,"")}}]),n}(b.Component);x.displayName="Timestamp",x.defaultProps={unix:void 0,iso:void 0,className:void 0,updatedText:!1,updatedTextClassName:void 0,theme:void 0},t.a=Object(h.withTheme)(x)},"f+2V":function(
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 2e 63 78 29 28 6f 2c 7b 70 6c 61 63 65 68 6f 6c 64 65 72 3a 61 7d 29 2c 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 22 74 72 75 65 22 7d 2c 76 6f 69 64 20 30 2c 72 26 26 69 28 29 28 22 69 6d 67 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 2c 61 6c 74 3a 6e 2c 73 72 63 3a 72 7d 29 2c 21 72 26 26 69 28 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 7d 2c 76 6f 69 64 20 30 2c 6e 2e 73 75 62 73 74 72 28 30 2c 31 29 29 29 7d 68 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 55 73 65 72 48 65 61 64 65 72 22 2c 68 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 73 69 7a 65 3a 66 2c 74 69 74 6c 65 3a 22 22 2c 75 72 6c 3a 6e 75 6c 6c 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 21 31 7d 3b 76 61 72 20 67 2c 76 2c 79 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 68 29 2c 78 Data Ascii: .cx)(o,{placeholder:a}),"aria-hidden":"true"},void 0,r&&i()("img",{className:u,alt:n,src:r}),!r&&i()("span",{className:u},void 0,n.substr(0,1)))}h.displayName="UserHeader",h.defaultProps={size:f,title:"",url:null,placeholder:!1};var g,v,y=Object(l.a)(h),x
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 72 65 74 75 72 6e 20 73 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 76 61 72 20 6f 3d 6e 28 22 4a 71 70 39 22 29 2c 69 3d 6e 28 22 77 58 43 37 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 72 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 22 2c 61 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 36 30 2c 22 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 63 6f 6c 6f 72 3a 22 2c 61 2e 61 2e 63 6f 6c 6f 72 2e 62 6c 61 63 6b 2c 22 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 35 29 2c 22 3b 6c 69 6e Data Ascii: return s})),n.d(t,"b",(function(){return l}));var o=n("Jqp9"),i=n("wXC7"),a=n.n(i),r=Object(o.css)("border:1px solid ",a.a.color.gray60,";border-radius:3px;color:",a.a.color.black,";font-family:",a.a.font.franklinBase,";font-size:",a.a.font.size(15),";lin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49835	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	1533	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 265 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:29 UTC	265	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 52 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 75 72 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 6c 69 76 65 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 5d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 66 31 63 33 66 39 61 62 32 39 39 30 34 34 38 31 38 63 32 33 34 66 37 35 33 39 63 64 33 63 34 37 32 62 64 37 61 61 33 63 64 35 36 30 62 31 31 34 66 61 37 32 63 30 35 62 66 65 Data Ascii: {"operationName":"ReadingListStatusQuery","variables":{"url":["https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news"]},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"f1c3f9ab299044818c234f7539cd3c472bd7aa3cd560b114fa72c05bfe
2023-12-05 18:13:29 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 33 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 63access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:13:29 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:29 UTC	63	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 72 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 7d 7d 7d 0a Data Ascii: {"data":{"user":{"readingListStatus":[],"__typename":"User"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49837	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	1138	OUT	GET /svc/nyt/data-layer?assetUrl=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&caller_id=nyt-vi&jkcb=1701800008007&referrer=&sourceApp=nyt-vi HTTP/1.1 Host: a.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:29 UTC	1281	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-byaccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comcontent-type: applica
2023-12-05 18:13:29 UTC	141	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 30 39 32 38 32 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800009282,"activeDays":"[0,0,0,
2023-12-05 18:13:29 UTC	910	IN	Data Raw: 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 65 22 3a 22 61 6e 6f 6e 22 7d 2c 22 73 75 62 73 63 72 69 62 65 72 49 6e 66 6f 22 3a 7b 22 67 69 66 74 53 75 62 73 63 72 69 70 74 69 6f 6e 52 65 63 69 70 69 65 6e 74 22 3a 66 61 6c 73 65 2c 22 63 68 69 6c 64 53 75 62 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 62 32 62 53 75 62 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 63 6f 72 65 4f 6e 50 72 6f 6d 6f 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 6f 72 Data Ascii: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownType":"anon"},"subscriberInfo":{"giftSubscriptionRecipient":false,"childSubscription":false,"b2bSubscription":false,"coreOnPromotion":false,"for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49836	52.3.42.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	973	OUT	GET /v1/purr-cache HTTP/1.1 Host: purr.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:29 UTC	624	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 75 72 72 2d 63 61 63 68 65 3d 3c 4b 30 3c 72 3c 43 5f 3c 47 5f 3c 53 30 3c 61 30 3c 75 61 3c 54 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 34 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 35 33 3a 32 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-origin: https://www.nytimes.comset-cookie: purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; Path=/; Domain=nytimes.com; Expires=Sat, 04 Jan 2025 05:53:29 GMT; HttpOnly; Secure; SameSite=La

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49838	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	1533	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 266 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:29 UTC	266	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 4c 69 76 65 42 6c 6f 67 50 6f 6c 6c 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 63 6f 6c 6c 65 63 74 69 6f 6e 55 72 6c 22 3a 22 6e 79 74 3a 2f 2f 6c 65 67 61 63 79 63 6f 6c 6c 65 63 74 69 6f 6e 2f 66 38 32 65 33 31 38 30 2d 63 37 63 66 2d 35 32 33 30 2d 39 33 38 31 2d 62 63 31 37 66 35 37 33 38 39 39 61 22 2c 22 66 69 72 73 74 22 3a 31 30 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 39 35 61 61 61 63 64 34 61 66 33 34 31 39 37 61 33 38 35 35 34 31 61 36 63 63 35 32 65 34 66 65 36 63 66 39 62 37 61 61 38 33 30 34 62 62 31 37 64 36 31 32 35 37 38 32 39 Data Ascii: {"operationName":"LiveBlogPollQuery","variables":{"collectionUrl":"nyt://legacycollection/f82e3180-c7cf-5230-9381-bc17f573899a","first":10},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"95aaacd4af34197a385541a6cc52e4fe6cf9b7aa8304bb17d61257829
2023-12-05 18:13:29 UTC	1378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 31 36 31 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 7161access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:13:29 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6c 65 67 61 63 79 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 54 47 56 6e 59 57 4e 35 51 32 39 73 62 47 56 6a 64 47 6c 76 62 6a 70 75 65 58 51 36 4c 79 39 73 5a 57 64 68 59 33 6c 6a 62 32 78 73 5a 57 4e 30 61 57 39 75 4c 32 59 34 4d 6d 55 7a 4d 54 67 77 4c 57 4d 33 59 32 59 74 4e 54 49 7a 4d 43 30 35 4d 7a 67 78 4c 57 4a 6a 4d 54 64 6d 4e 54 63 7a 4f 44 6b 35 59 51 3d 3d 22 2c 22 67 72 6f 75 70 69 6e 67 73 22 3a 5b 7b 22 63 6f 6e 74 61 69 6e 65 72 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 73 75 70 70 6c 65 6d 65 6e 74 61 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 73 75 70 70 6c 65 6d 65 6e 74 61 6c 22 2c 22 72 65 6c 61 74 69 6f 6e 73 22 3a 5b 7b 22 61 73 73 65 74 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6e 74 Data Ascii: {"data":{"legacyCollection":{"id":"TGVnYWN5Q29sbGVjdGlvbjpueXQ6Ly9sZWdhY3ljb2xsZWN0aW9uL2Y4MmUzMTgwLWM3Y2YtNTIzMC05MzgxLWJjMTdmNTczODk5YQ==","groupings":[{"containers":[{"name":"supplemental","label":"supplemental","relations":[{"asset":{"__typename":"Int
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 7a 42 69 5a 41 3d 3d 22 2c 22 73 6c 75 67 22 3a 22 30 35 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 68 6f 73 74 61 67 65 73 2d 6d 65 6e 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 61 72 74 69 63 6c 65 2f 31 65 31 32 33 35 35 62 2d 31 32 61 62 2d 35 66 35 38 2d 61 64 64 36 2d 33 35 32 37 30 61 32 31 33 30 62 64 22 2c 22 66 69 72 73 74 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 33 2d 31 32 2d 30 35 54 31 36 3a 31 35 3a 32 32 2e 30 30 30 5a 22 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 65 67 61 63 79 43 6f 6c 6c 65 63 74 69 6f 6e 52 65 6c 61 74 69 6f 6e 22 7d 2c 7b 22 61 73 73 65 74 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 72 74 69 63 6c 65 22 2c 22 69 64 22 3a 22 51 58 4a 30 61 57 4e 73 5a 54 70 75 65 58 51 36 4c 79 39 68 63 6e 52 70 59 Data Ascii: zBiZA==","slug":"05israel-hamas-hostages-men","uri":"nyt://article/1e12355b-12ab-5f58-add6-35270a2130bd","firstPublished":"2023-12-05T16:15:22.000Z"},"__typename":"LegacyCollectionRelation"},{"asset":{"__typename":"Article","id":"QXJ0aWNsZTpueXQ6Ly9hcnRpY
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 6f 6e 52 65 6c 61 74 69 6f 6e 22 7d 2c 7b 22 61 73 73 65 74 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 72 74 69 63 6c 65 22 2c 22 69 64 22 3a 22 51 58 4a 30 61 57 4e 73 5a 54 70 75 65 58 51 36 4c 79 39 68 63 6e 52 70 59 32 78 6c 4c 7a 42 69 4d 6d 4d 77 4e 6d 55 77 4c 57 45 32 4d 32 55 74 4e 54 67 77 4d 69 30 35 4e 32 59 31 4c 54 63 79 5a 6d 56 6b 5a 47 49 32 4d 44 64 6a 4e 77 3d 3d 22 2c 22 73 6c 75 67 22 3a 22 30 35 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 73 65 74 74 6c 65 72 2d 76 69 73 61 2d 62 61 6e 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 61 72 74 69 63 6c 65 2f 30 62 32 63 30 36 65 30 2d 61 36 33 65 2d 35 38 30 32 2d 39 37 66 35 2d 37 32 66 65 64 64 62 36 30 37 63 37 22 2c 22 66 69 72 73 74 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 Data Ascii: onRelation"},{"asset":{"__typename":"Article","id":"QXJ0aWNsZTpueXQ6Ly9hcnRpY2xlLzBiMmMwNmUwLWE2M2UtNTgwMi05N2Y1LTcyZmVkZGI2MDdjNw==","slug":"05israel-hamas-settler-visa-ban","uri":"nyt://article/0b2c06e0-a63e-5802-97f5-72feddb607c7","firstPublished":"202
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 74 59 6a 41 34 59 32 59 32 4f 54 59 77 4d 54 4e 69 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 70 72 6f 6d 6f 2f 66 61 34 31 66 30 33 31 2d 31 36 38 64 2d 35 38 38 30 2d 61 31 30 32 2d 62 30 38 63 66 36 39 36 30 31 33 62 22 2c 22 66 69 72 73 74 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 33 2d 31 32 2d 30 35 54 30 37 3a 34 37 3a 34 35 2e 30 30 30 5a 22 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 65 67 61 63 79 43 6f 6c 6c 65 63 74 69 6f 6e 52 65 6c 61 74 69 6f 6e 22 7d 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 65 67 61 63 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 66 6f 6f 74 65 72 22 2c 22 6c 61 62 65 6c 22 3a 22 66 6f 6f 74 65 72 22 2c 22 72 65 6c 61 74 69 6f 6e 73 22 3a 5b 5d 2c 22 Data Ascii: tYjA4Y2Y2OTYwMTNi","uri":"nyt://promo/fa41f031-168d-5880-a102-b08cf696013b","firstPublished":"2023-12-05T07:47:45.000Z"},"__typename":"LegacyCollectionRelation"}],"__typename":"LegacyCollectionContainer"},{"name":"footer","label":"footer","relations":[],"
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 69 22 3a 22 6e 79 74 3a 2f 2f 61 72 74 69 63 6c 65 2f 61 31 38 38 65 31 33 30 2d 63 38 61 66 2d 35 34 66 38 2d 62 38 31 37 2d 30 32 38 61 33 38 30 31 38 66 32 36 22 2c 22 66 69 72 73 74 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 33 2d 31 32 2d 30 35 54 31 32 3a 30 38 3a 32 35 2e 30 30 30 5a 22 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 65 67 61 63 79 43 6f 6c 6c 65 63 74 69 6f 6e 52 65 6c 61 74 69 6f 6e 22 7d 2c 7b 22 61 73 73 65 74 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 72 74 69 63 6c 65 22 2c 22 69 64 22 3a 22 51 58 4a 30 61 57 4e 73 5a 54 70 75 65 58 51 36 4c 79 39 68 63 6e 52 70 59 32 78 6c 4c 32 4a 6d 4e 32 59 30 4d 57 45 7a 4c 54 6c 6d 59 7a 67 74 4e 57 46 68 4e 79 31 68 59 6d 49 34 4c 57 56 6c 59 7a 55 33 4e 6a 4d 35 4f 44 Data Ascii: i":"nyt://article/a188e130-c8af-54f8-b817-028a38018f26","firstPublished":"2023-12-05T12:08:25.000Z"},"__typename":"LegacyCollectionRelation"},{"asset":{"__typename":"Article","id":"QXJ0aWNsZTpueXQ6Ly9hcnRpY2xlL2JmN2Y0MWEzLTlmYzgtNWFhNy1hYmI4LWVlYzU3NjM5OD
2023-12-05 18:13:29 UTC	266	IN	Data Raw: 63 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 22 7d 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 65 67 61 63 79 43 6f 6c 6c 65 63 74 69 6f 6e 47 72 6f 75 70 69 6e 67 22 7d 5d 2c 22 73 74 72 65 61 6d 22 3a 7b 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 68 61 73 4e 65 78 74 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 50 72 65 76 69 6f 75 73 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 72 74 43 75 72 73 6f 72 22 3a 6e 75 6c 6c 2c 22 65 6e 64 43 75 72 73 6f 72 22 3a 6e 75 6c 6c 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 61 67 65 49 6e 66 6f 22 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 73 73 65 74 73 43 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 65 64 67 65 73 22 3a 5b 5d 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 65 67 61 63 79 43 6f 6c 6c Data Ascii: ctionContainer"}],"__typename":"LegacyCollectionGrouping"}],"stream":{"pageInfo":{"hasNextPage":false,"hasPreviousPage":false,"startCursor":null,"endCursor":null,"__typename":"PageInfo"},"__typename":"AssetsConnection","edges":[]},"__typename":"LegacyColl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49840	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	1596	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 6245 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 x-nyt-entitlements: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-nyt-programming-abtest: nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 x-nyt-news-tenure: x-nyt-internal-meter-override: sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:29 UTC	6245	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 71 75 65 72 79 20 67 65 74 4d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 28 24 64 61 74 61 3a 20 4d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 49 6e 70 75 74 21 29 20 7b 5c 6e 20 20 20 20 75 73 65 72 20 7b 5c 6e 20 20 20 20 20 20 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 28 64 61 74 61 3a 20 24 64 61 74 61 29 7b 5c 6e 20 20 20 20 20 20 20 20 75 6e 69 74 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 63 61 6e 53 68 6f 77 5c 6e 20 20 20 20 20 20 20 20 20 20 72 65 61 73 6f 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 61 75 64 69 65 6e 63 65 5c Data Ascii: {"query":"\n query getMessageSelection($data: MessageSelectionInput!) {\n user {\n messageSelection(data: $data){\n units {\n name\n canShow\n reason\n messages {\n name\n audience\
2023-12-05 18:13:29 UTC	1350	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 32 34 35 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 11245access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-regio
2023-12-05 18:13:29 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 22 3a 7b 22 75 6e 69 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 62 61 72 4f 6e 65 22 2c 22 63 61 6e 53 68 6f 77 22 3a 74 72 75 65 2c 22 72 65 61 73 6f 6e 22 3a 22 41 6c 6c 28 54 68 65 20 69 6e 70 75 74 2e 4e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 76 69 20 61 6e 64 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 76 69 2c 20 4e 6f 74 28 54 68 65 72 65 20 61 72 65 20 6e 65 69 74 68 65 72 20 4a 4b 49 44 44 20 49 50 2e 45 44 55 20 6e 6f 72 20 49 50 2e 43 6f 72 70 20 66 69 65 6c 64 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 45 44 55 20 61 6e 64 20 42 32 42 20 61 63 63 65 73 73 29 29 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 6e 61 6d Data Ascii: {"data":{"user":{"messageSelection":{"units":[{"name":"barOne","canShow":true,"reason":"All(The input.Name parameter is vi and is expected to be vi, Not(There are neither JKIDD IP.EDU nor IP.Corp fields representing EDU and B2B access))","messages":[{"nam
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 62 6c 65 3d 74 72 75 65 20 61 6e 64 20 47 61 74 65 77 61 79 45 78 65 6d 70 74 3d 66 61 6c 73 65 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 53 55 42 43 4f 4e 5f 43 4f 4e 56 5f 50 41 59 57 41 4c 4c 5f 4f 50 54 49 4d 49 5a 41 54 49 4f 4e 5f 54 45 53 54 5f 41 4e 4f 4e 5f 46 4f 43 55 53 5f 32 33 39 22 2c 22 61 75 64 69 65 6e 63 65 22 3a 22 43 6f 75 6e 74 72 79 55 6e 69 74 65 64 53 74 61 74 65 73 5f 36 4d 4f 5f 76 32 22 2c 22 63 61 6e 53 68 6f 77 22 3a 74 72 75 65 2c 22 72 65 61 73 6f 6e 22 3a 22 41 6c 6c 28 41 6c 6c 28 41 6c 6c 28 54 68 65 20 69 6e 70 75 74 2e 4e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 76 69 20 61 6e 64 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 76 69 2c 20 41 6c 6c 28 4e 6f 74 28 74 68 65 20 Data Ascii: ble=true and GatewayExempt=false","messages":[{"name":"SUBCON_CONV_PAYWALL_OPTIMIZATION_TEST_ANON_FOCUS_239","audience":"CountryUnitedStates_6MO_v2","canShow":true,"reason":"All(All(All(The input.Name parameter is vi and is expected to be vi, All(Not(the
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 74 28 46 41 49 4c 28 54 68 65 20 64 6f 77 6e 73 74 72 65 61 6d 2e 49 6e 70 75 74 2e 52 65 67 69 49 44 20 69 73 20 7a 65 72 6f 2e 29 29 2c 20 72 65 71 75 65 73 74 20 6c 6f 63 61 74 69 6f 6e 20 6d 61 74 63 68 65 73 20 4e 61 6d 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 43 6f 75 6e 74 72 79 4f 70 74 69 6f 6e 73 2c 20 61 62 72 61 3a 20 41 6c 6c 20 61 62 72 61 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 64 2c 20 4e 6f 74 28 41 6e 79 28 46 41 49 4c 28 54 68 65 72 65 20 55 52 4c 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 29 2c 20 46 41 49 4c 28 54 68 65 72 65 20 55 52 4c 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 29 2c 20 46 41 49 4c Data Ascii: t(FAIL(The downstream.Input.RegiID is zero.)), request location matches Name specified in CountryOptions, abra: All abra criteria matched, Not(Any(FAIL(There URL does not match the specified value), FAIL(There URL does not match the specified value), FAIL
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 6f 74 20 61 20 56 65 72 69 7a 6f 6e 20 41 64 6c 75 63 65 20 53 6f 63 72 61 74 65 73 20 75 73 65 72 2e 29 29 29 2c 20 4e 6f 74 28 46 41 49 4c 28 54 68 65 20 64 6f 77 6e 73 74 72 65 61 6d 2e 49 6e 70 75 74 2e 52 65 67 69 49 44 20 69 73 20 7a 65 72 6f 2e 29 29 2c 20 4e 6f 74 28 46 41 49 4c 28 54 68 65 20 63 61 6d 70 61 69 67 6e 49 64 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 29 29 29 20 53 65 6c 65 63 74 65 64 20 62 79 20 74 68 65 20 52 61 6e 64 6f 6d 20 73 65 6c 65 63 74 6f 72 20 66 75 6e 63 74 69 6f 6e 20 62 65 63 61 75 73 65 20 6e 6f 20 6f 74 68 65 72 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 22 2c 22 73 65 6c 65 63 Data Ascii: ot a Verizon Adluce Socrates user.))), Not(FAIL(The downstream.Input.RegiID is zero.)), Not(FAIL(The campaignId query parameter does not match the specified value))) Selected by the Random selector function because no other messages are available.","selec
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 69 29 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 5d 7d 5d 2c 22 69 6e 70 75 74 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 2c 22 64 65 62 75 67 22 3a 66 61 6c 73 65 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6e 61 6d 65 22 3a 22 76 69 22 2c 22 70 61 67 65 56 69 65 77 49 44 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 6c 69 76 65 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 2c 22 6e 6f 77 22 3a 22 32 30 32 33 2d 31 32 2d 30 35 54 31 38 3a 30 30 3a Data Ascii: i)","messages":[]}],"input":{"country":"US","continent":"NA","debug":false,"deviceType":"desktop","name":"vi","pageViewID":"iXJ6FxtFrBe04OARGjkskMIq","url":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news","now":"2023-12-05T18:00:
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 50 61 79 5f 43 54 41 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 30 5f 41 6c 6c 6f 77 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4f 4e 5f 73 74 6f 72 79 62 6c 6f 63 6b 5f 70 72 6f 64 75 63 74 5f 30 35 32 33 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 46 6f 72 6d 65 72 73 70 77 5f 44 75 6d 6d 79 74 65 73 74 5f 31 32 5f 32 33 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 Data Ascii: Pay_CTA","variant":"0_Allow","integration":"onsite-messaging-prd"},{"test":"ON_storyblock_product_0523","variant":"","integration":"onsite-messaging-prd"},{"test":"MKT_Formerspw_Dummytest_12_23","variant":"","integration":"onsite-messaging-prd"},{"test":"
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 65 74 5f 31 30 31 32 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 53 55 42 43 4f 4e 5f 52 45 53 5f 41 49 47 5f 53 55 52 56 45 59 5f 32 32 38 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 30 5f 43 6f 6e 74 72 6f 6c 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 58 5f 4e 65 77 41 72 63 68 69 74 65 63 74 75 72 65 5f 50 6f 73 74 4c 6f 67 69 6e 4f 66 66 65 72 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 Data Ascii: et_1012","variant":"","integration":"onsite-messaging-prd"},{"test":"SUBCON_RES_AIG_SURVEY_228","variant":"0_Control","integration":"onsite-messaging-prd"},{"test":"MX_NewArchitecture_PostLoginOffer","variant":"","integration":"onsite-messaging-prd"},{"te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49841	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	779	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255
2023-12-05 18:13:29 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 32 39 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:29 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49842	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	806	OUT	GET /v1/purr-cache HTTP/1.1 Host: purr.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0
2023-12-05 18:13:29 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 75 72 72 2d 63 61 63 68 65 3d 3c 4b 30 3c 72 3c 43 5f 3c 47 5f 3c 53 30 3c 61 30 3c 75 61 3c 54 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 34 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 35 33 3a 32 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 35 30 35 62 32 36 35 61 32 39 37 37 61 37 66 62 33 37 32 35 64 30 33 38 39 61 65 66 65 65 64 66 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 Data Ascii: HTTP/1.1 200 OKset-cookie: purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; Path=/; Domain=nytimes.com; Expires=Sat, 04 Jan 2025 05:53:29 GMT; HttpOnly; Secure; SameSite=Laxvary: Originx-cloud-trace-context: 505b265a2977a7fb3725d0389aefeedfdate: Tue, 05 Dec 20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49843	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	1410	OUT	GET /svc/nyt/data-layer?assetUrl=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&caller_id=nyt-vi&jkcb=1701800008007&referrer=&sourceApp=nyt-vi HTTP/1.1 Host: a.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-s=referrer=&landing=&start=1701800009282&isNew=1&pageIndex=1; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; nyt-jkidd=uid=0&lastRequest=1701800009282&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:29 UTC	867	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6a 6b 69 64 64 2d 73 3d 72 65 66 65 72 72 65 72 3d 26 6c 61 6e 64 69 6e 67 3d 26 73 74 61 72 74 3d 31 37 30 31 38 30 30 30 30 39 32 38 32 26 69 73 4e 65 77 3d 30 26 70 61 67 65 49 6e 64 65 78 3d 32 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6a 6b 69 64 64 2d 70 3d 70 72 65 76 50 61 67 65 3d 26 63 75 72 72 50 61 67 65 3d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d Data Ascii: HTTP/1.1 200 OKcontent-type: application/json; charset=UTF-8set-cookie: jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=2; Path=/; HttpOnlyset-cookie: jkidd-p=prevPage=&currPage=; Path=/; Max-Age=31536000; HttpOnlyset-cookie: nyt-
2023-12-05 18:13:29 UTC	1051	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 30 39 38 30 34 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800009804,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49844	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	727	OUT	GET /images/2023/12/05/world/middleeast/Khan-Younis-Hospital/Khan-Younis-Hospital-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:29 UTC	1324	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 31 31 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 45 78 70 6f 73 65 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 2c 20 44 61 74 65 2c 20 53 65 72 76 65 72 2c 20 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 2c 20 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 2c 20 58 2d 47 6f 6f 67 6c 65 2d 54 72 61 63 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 44110Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-TraceCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 52 49 46 46 46 ac 00 00 57 45 42 50 56 50 38 20 3a ac 00 00 50 a6 05 9d 01 2a dc 05 e8 03 3e 91 46 9b 4a 27 ba 3b 30 28 b2 e9 b3 60 12 09 67 6e d8 a1 26 ba ff 6b 6b 3c 54 d7 38 1d 60 67 c8 3d ee ba 60 82 77 69 ff 44 ff b9 cc 3f a2 77 4f fc d7 84 97 95 fa 97 7f 3e f1 c7 ef 67 f8 ff f5 36 fd f4 4d f1 c5 e8 ad fa 27 47 6f fc 2c c1 81 fa 82 08 cf 8b f8 e9 68 e1 a8 07 2a bd e7 47 bd 26 dd c0 97 fe cf 43 5f 20 ff 2b ff 9f fb bf 36 fd c4 ff 7b fb 0f 6b 2f fa b6 47 f2 bf f9 79 f9 fd 9f fc 0f ff 3d 4a 7f dd fb c9 eb 6f e4 1f e8 f2 83 7f f7 ae 05 fc f5 5e f3 b7 8b e7 ff fb 57 e3 21 cd b8 74 ef ff 7d 4d fe 45 ff c8 4f 2f cb b3 ab 6b 40 3b 22 58 8f c8 96 23 f0 90 78 67 b2 be de bf 21 fe e3 c2 b6 8a c6 38 d8 61 12 c6 c6 eb 37 92 1e 83 7f a9 31 8e f5 cf f1 ea b9 71 20 Data Ascii: RIFFFWEBPVP8 :P>FJ';0(`gn&kk<T8`g=`wiD?wO>g6M'Go,hG&C_ +6{k/Gy=Jo^W!t}MEO/k@;"X#xg!8a71q
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 48 cb e4 1e 30 30 88 57 f2 73 6c 2e ee 7f c3 a6 19 f8 96 bc 9d 04 72 ed bd a9 a2 55 ca f8 4b 93 a2 cc 88 b4 fe e4 24 0c a4 9a 6b 33 c9 98 2a 84 b3 77 aa 26 f4 d2 f4 ec 6e 8e 8d 73 fb 0c 4d 8e 83 cf 69 ff 24 a4 01 ef 9e f9 f4 13 59 c6 e0 c9 b8 e0 8d db d9 af 18 6b ac de e8 74 db ff d5 bf 19 6c cf 2b 50 c4 3a 41 8c 21 3a 57 99 29 d3 15 d1 5a 9e 45 16 53 4b 1a 43 2e 6b 6c 90 e6 cb 0f e2 d9 d7 b7 2c 51 d6 69 7a 30 90 07 46 c2 c9 69 15 ce 35 bf 01 aa c3 cc 8f 4a 51 ea 5a 30 9d 56 00 d3 20 eb fe c5 63 96 c9 28 1f 27 0b 96 c7 55 32 f6 24 e6 73 12 8f fd b5 0f 23 bf f2 a7 ec 89 95 52 f5 b4 92 34 e7 cb 73 49 0c 31 5c 78 16 30 89 be b5 be e0 15 f1 ee 8a b3 c3 c9 29 78 79 25 82 d8 47 1f 96 3e b4 6d 0c e7 fb 7d 96 47 d9 8a 51 3d 9b 4b c3 8f df 9a 07 75 5a af 4f 60 dd Data Ascii: H00Wsl.rUK$k3*w&nsMi$Yktl+P:A!:W)ZESKC.kl,Qiz0Fi5JQZ0V c('U2$s#R4sI1\x0)xy%G>m}GQ=KuZO`
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 38 9a 5d dd 38 74 4b 4f 11 99 29 7e 62 0d b6 ef a3 f7 f1 b9 cc 40 22 67 26 fd 25 57 8e a4 d1 39 d3 76 c8 23 75 04 c9 80 56 a3 3c ad b5 94 51 e0 ea da 94 45 8a 98 2d 8e 8d f6 ca 8b da aa 52 db 7c 6a c3 c9 9c 53 7b c1 53 9e cb 17 d6 a1 c6 97 5c f3 57 42 4d 00 49 1e 3e d4 2b c2 ef 1f ca de b0 35 67 79 33 f9 7e e8 9f 8a 9b cb 00 ea 26 dd a9 9d 85 32 54 6e 4c 86 a1 d2 e2 be f1 22 98 49 de 8d f4 6c 29 7f 06 9b fd 91 b7 d2 15 d3 20 41 13 28 8c 1e 8d 0c 3e f2 bc 4c 59 e9 ac 44 00 30 44 c6 a0 50 90 ff ce 48 50 48 54 7c 7b 21 e2 b3 31 69 71 84 ca 9e fb a8 ad de ad a3 7f 4d c7 36 3f 00 aa f0 c4 4d ca de 08 36 4d 6e b2 e4 ea 33 39 ba d8 23 bd 3b d8 8b 4b 6e 73 f7 29 3f a2 bc b4 42 3d 09 56 3b 4d 71 a8 27 ce 4d 6d 7f 6e 9a b0 39 85 b0 e2 49 6a 20 a1 ab 3e e2 57 8b 39 Data Ascii: 8]8tKO)~b@"g&%W9v#uV<QE-R\|jS{S\WBMI>+5gy3~&2TnL"Il) A(>LYD0DPHPHT\|{!1iqM6?M6Mn39#;Kns)?B=V;Mq'Mmn9Ij >W9
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 01 3b 9b e2 2f 0d c3 e1 47 c6 47 44 18 da 41 e5 1b 95 2e dc 46 5f 68 ea 91 59 6e a5 f5 76 1a 7f 5e 6f ac 3c d6 44 fc 7e 71 b5 5f 66 69 ce ab b7 85 5b c1 93 9f 2e 5f d4 23 15 64 4b 05 02 4d 26 f1 55 a5 a2 37 b4 a2 7d 29 58 c5 53 12 10 5d 9a 9e 8a e1 25 65 7b 78 77 5f fa da 9d f8 21 92 7b ff a2 a4 d9 7c 96 fb ed 97 bc d5 2d 3a 18 5c 62 fd 5a 1a 97 f2 bc 5b 13 79 0b 75 b7 76 5d c1 2b 5b 6a 91 ab c3 6f c6 8c d1 66 d7 b2 be 88 5e b9 ba fb b1 59 70 ed fa fe d8 39 0a 46 5e 66 ae e7 f5 f9 31 50 79 3b 5f fd 63 ba c0 ce dc a3 ea b5 07 3a 21 0e 8b ad 9c ec fb ed 93 05 40 ec 2b 3f 6a 68 07 34 a6 18 98 ed 9e 8c ca ff f9 90 c2 f6 42 6f f4 28 e2 74 21 49 c3 e2 07 d6 de 15 77 92 28 69 ee ff 4a ba 7b 3e 1e 83 7d 80 95 30 b9 dd ad c2 c4 0f b6 af 4f 16 27 7b d6 17 8b 1e b2 Data Ascii: ;/GGDA.F_hYnv^o<D~q_fi[._#dKM&U7})XS]%e{xw_!{\|-:\bZ[yuv]+[jof^Yp9F^f1Py;_c:!@+?jh4Bo(t!Iw(iJ{>}0O'{
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 9f c3 d9 fc e8 3d 9b 4c e9 67 a6 3a 69 7d 38 65 80 51 ca 79 84 0a 12 4f 79 9b 72 c3 8c e7 dc 97 14 7a 4c b4 dc d6 db 3e 8b 29 ea 56 7f b8 8c 12 d2 96 99 18 e0 38 1b f9 0d 4e 5e ad be a5 6e 85 ad 66 79 e6 d2 9d 15 48 e3 16 08 99 75 a6 ce 23 a4 e2 8d 7c f7 e5 d6 9b 8f 57 aa 9d 4a a3 2a aa 78 00 50 b8 c9 a4 6a 33 01 da dc e9 b1 55 ee a3 3b 27 43 df d9 cf 54 2f d6 27 12 50 cc de 19 85 3f bb 98 ab 47 e2 96 b2 e2 22 36 67 19 04 32 31 2c fc 76 dc ec eb b5 29 97 72 8c 31 e9 1c e2 2c 29 82 85 07 fc 1a c2 8a 87 87 78 db fd 09 ec ae 9d 8e ed a8 64 57 83 02 44 67 fd b4 4c 68 e8 06 4d 48 94 79 f8 12 52 aa 12 ba c8 3f 78 0c 18 b4 74 f6 d0 01 fa 57 72 d5 d8 cf 24 e5 ca 98 42 88 33 23 47 22 62 5d a1 20 bd 5d 63 62 43 d9 82 cb 89 f9 e1 b8 e0 7a 92 56 b9 a8 14 85 77 30 3e Data Ascii: =Lg:i}8eQyOyrzL>)V8N^nfyHu#\|WJ*xPj3U;'CT/'P?G"6g21,v)r1,)xdWDgLhMHyR?xtWr$B3#G"b] ]cbCzVw0>
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: a4 63 6b 60 f9 5f fb 94 3c 53 bb 04 f9 c5 6a 50 79 be 09 22 ab 83 6b 24 99 42 e2 30 5a 8c e2 72 90 23 39 75 0e a4 97 13 b9 f1 46 b3 41 fe cd c0 44 0c d4 32 08 7e d8 49 4d be 64 e2 0e 33 7b 48 17 86 de a7 02 48 07 a7 10 03 c1 39 b9 e1 de 15 5f 96 ad f2 e4 70 9e b7 f4 0a c4 69 bd 2a 92 06 d0 e6 65 67 77 b4 e3 30 90 a3 bc 57 c9 d1 7d fb 6d f3 19 1f 75 7a 82 e7 de bf f7 3f 9d aa 46 b3 03 a4 32 2d e7 5c 7d 1a 20 66 40 f4 cb b0 b8 dd 60 51 5a fe 52 b9 0e a9 0a bb 3a a3 24 f5 6f ef be dd 49 ec f3 42 10 a5 c7 84 93 1c f3 55 dd ba f0 c3 d5 66 15 e3 6e 2a 12 71 c6 c3 1d 06 aa df 97 e4 4e 18 cd e4 da c6 c3 85 b9 c7 8d 07 46 bd dc e6 e8 a4 26 5f 34 53 c8 71 7b 1c 77 4a 07 a6 55 5d 05 78 6c 77 5d c1 05 88 cd cf 2e 5c 53 76 4f cb f2 5a 21 41 ab 2a 0a bc 28 67 d7 bb 41 Data Ascii: ck`_<SjPy"k$B0Zr#9uFAD2~IMd3{HH9_piegw0W}muz?F2-\} f@`QZR:$oIBUfnqNF&_4Sq{wJU]xlw].\SvOZ!A*(gA
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: be 3c c4 47 f1 2b af 44 77 28 30 4d b3 cf 78 f9 de a6 f3 1c e0 76 ef 8d a0 20 0e 59 64 83 18 44 bc 87 fd 1a 38 5b 5c 31 b3 0a f4 38 2b 28 0a c3 97 e4 dd 80 1f 20 bd b1 7e d5 af 5e 60 81 0d 7f 2c 1e 74 62 be 42 b1 21 57 23 32 ea 4b d8 b5 5b 3b 67 cf d5 13 e9 12 58 5d 20 af 52 1e 10 64 03 4c 54 9c 55 94 ce 18 15 38 aa 2b ff 45 ac 54 3a 7a 1c 3c f0 15 e5 02 d8 21 eb 47 00 92 0f f9 16 e6 69 5c 44 96 e9 c6 bd f7 af 2b f6 ab d3 a7 70 78 e7 fd d2 c2 6b 14 16 ad cb aa 28 46 48 34 36 f3 da 75 16 3e c4 cf f0 81 e1 a0 f6 49 80 01 f0 b2 48 96 90 ec 03 62 af 5c bf 66 93 3e e7 3d aa b3 48 7e 67 a4 3d f1 0d 93 f0 fd 7c 1d 00 5f 1a 45 60 79 4a cd 68 bd 3f b8 82 36 db 8b 00 a6 d7 e3 f5 c2 c1 cd 3c 38 e0 de e4 d0 d1 57 8b 7f c7 83 7f 84 70 65 3c f7 73 cd 6f 33 80 b1 f2 8a Data Ascii: <G+Dw(0Mxv YdD8[\18+( ~^`,tbB!W#2K[;gX] RdLTU8+ET:z<!Gi\D+pxk(FH46u>IHb\f>=H~g=\|_E`yJh?6<8Wpe<so3
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: 49 60 9d aa 37 e9 ed d7 04 8f 1f f3 17 20 00 3c 4f 00 67 ec ec 95 7d 5c 48 3b 35 80 c7 11 c3 13 06 10 d9 40 30 b2 3e 00 3c e5 2e 1f 4c 57 de 92 54 77 51 61 0d 4b aa 3a c4 c3 1b f3 e2 5d 9d cd 0f cb 02 83 d6 26 dc 7e fd ed 4d b8 87 bc 36 a9 42 d7 4b c6 ba 25 d7 42 ad 1a 85 f7 67 20 d6 4d 94 0e 25 1a 44 ff 2d 7c 66 4d 26 18 7e ff ff 9c 56 b9 b6 52 e4 16 80 5f 96 9d 71 e5 2f fe 50 f5 ff e9 e1 3f 86 0a 1c 8b fa 48 2f 9f 2f e6 7e be a0 89 b0 17 72 96 84 bc 10 ef 79 6f d8 60 16 f6 d2 4f 9b 1e d8 37 01 d9 97 2e 47 4b d5 67 f4 21 7c cf fd 94 8f 73 83 c0 63 46 32 47 13 2b 7f 1b a2 4f 40 24 55 16 ca 98 55 c6 21 62 03 78 b1 fb c9 89 94 75 77 fa fc f7 e1 93 69 a7 3f b4 31 35 d5 40 fe 4e aa eb 0e c9 0d ec 67 b8 fa 3b 95 f8 cd 4f 7d ca 2c fe 87 25 84 7f 52 7a 02 6d f4 Data Ascii: I`7 <Og}\H;5@0><.LWTwQaK:]&~M6BK%Bg M%D-\|fM&~VR_q/P?H//~ryo`O7.GKg!\|scF2G+O@$UU!bxuwi?15@Ng;O},%Rzm
2023-12-05 18:13:29 UTC	1379	IN	Data Raw: ab 0e 42 28 05 54 52 44 66 14 fb 79 4e ab 22 5d 37 a6 4e b6 04 90 62 84 fe 8f e8 e8 7a 15 81 3c 8b 75 0e 34 ef 67 fd e6 c0 0c 74 fe ef de ba 76 4e cc 51 94 c6 a8 67 d4 56 f2 df 61 3f ca 1c ef 9a 7b 3e d5 bd 83 01 a1 f9 f2 4b 8c 23 7b a2 2e 16 b6 07 10 7e f6 48 81 89 b5 bb 53 e6 4f 06 ec 00 aa 03 88 89 80 c2 b5 0a 7e 37 ab 55 2b ac 8b a4 a0 d6 05 ad 9e 9a a3 f8 db ca a9 c9 88 d6 a9 a7 92 a3 c0 03 e8 04 26 1b 19 52 41 bc 45 c2 37 c2 9d 4f 4c 0c cf b7 e5 a6 94 cf 9d 24 13 0a 6f bd bf cd 4c 3d bb ff 3c 9e d0 93 40 44 46 fc c8 30 7a 14 ab 66 07 fe ff a1 38 b8 f9 cb 91 be 6c af a3 b1 67 c9 f8 09 5a de df 21 20 09 54 61 a5 f1 56 6a 91 c5 e0 db f9 86 3c bb c8 66 88 7f a8 b2 8b 0d 95 ad 36 1c 95 e3 23 b4 9f 86 8e 92 df 1b 44 8f f4 53 b9 71 e1 0d 07 0f c5 66 65 49 Data Ascii: B(TRDfyN"]7Nbz<u4gtvNQgVa?{>K#{.~HSO~7U+&RAE7OL$oL=<@DF0zf8lgZ! TaVj<f6#DSqfeI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49845	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	709	OUT	GET /images/2023/12/05/multimedia/05isrel-gaza-01-carousel-kcjw/05isrel-gaza-01-carousel-kcjw-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:29 UTC	1208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 38 36 39 34 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 4c 42 7a 52 49 33 79 4a 6c 77 67 48 55 61 36 36 45 33 45 71 39 2b 61 43 48 61 4d 77 43 44 47 38 62 2f 56 47 4b 54 48 46 73 65 45 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 33 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 98694Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "LBzRI3yJlwgHUa66E3Eq9+aCHaMwCDG8b/VGKTHFseE"Expires: Tue, 05 Dec 2023 13:
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 52 49 46 46 7e 81 01 00 57 45 42 50 56 50 38 20 72 81 01 00 90 4b 08 9d 01 2a dc 05 e9 03 3e 91 42 9c 4b 25 a3 af 2f 23 b0 db 49 e0 12 09 65 6e 2d 77 60 1e be 66 3b a9 34 da 4a 8f 5b fd 7f 9b 87 05 c6 48 2c 1d 51 8d af 4e ff 8d cc f3 9a 7f 92 f0 17 fa 6f 05 af 2d ff 75 ff 6f d8 8f 83 ef 6d 7d 57 bf c9 71 db 74 52 f4 2f fd 9b a3 9f fc 5e 51 7f 74 ff bb 83 a9 be 38 3a ec fd 3f 34 4e 4d f5 47 f7 ba 5a e5 33 d4 d9 f1 fc 07 7f 3f 4f bf e3 bd 4a ff c6 74 a3 f3 41 e6 97 ea 9b fa 8f 4f 87 ae 77 a3 cf 97 ff b5 a6 36 ef c7 ff f0 f9 bd f9 8f f8 5f b7 1e 4b f6 a5 da 6b 18 7e fb dd 53 f8 36 6f 7f e2 f2 47 ea 46 a8 3e ff e3 71 04 7d c2 34 d9 c8 87 ce 7f fb dd d4 fd 16 7a b5 ff cd df 91 ec 78 3c d2 ea 28 cf 49 a8 59 14 af 4f 49 a8 59 14 af 5f 43 b3 44 d8 a5 7a 71 17 8e Data Ascii: RIFF~WEBPVP8 rK*>BK%/#Ien-w`f;4J[H,QNo-uom}WqtR/^Qt8:?4NMGZ3?OJtAOw6_Kk~S6oGF>q}4zx<(IYOIY_CDzq
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: ea 23 5f 50 dc 25 91 75 90 c0 21 f2 c6 35 ce 0f 59 91 5f 53 7b c4 ce b1 23 7f 11 02 44 02 f8 75 2f de ec bf 4c ee 2c e1 30 3a ab f4 d3 c6 5a 9a f1 a9 20 cf a1 06 82 c5 4a fc 27 7f ef 50 5f 2e de 67 e3 3a d7 88 b3 da 55 fd 8d 21 9f fa fe 42 c2 b5 9f 9b 1b 2b 9d 06 dd cb 4a 35 53 9e d2 e1 14 fc d8 a3 d0 12 67 22 6c 91 0d 6b 29 2a 40 c3 dd 9e 93 8f 52 a0 3b 96 46 ab 47 59 c6 88 d1 24 21 a2 9c 19 da cc 55 b8 7e ea 96 b3 b3 e2 95 77 13 c3 c8 53 db af 5f 24 98 a9 84 50 ec ba 71 b3 13 ed 0b ef 9d b3 4c 89 88 5f 12 14 a7 36 03 b0 da e9 f1 1a a5 d1 28 d9 7a 81 3b 71 af d8 a5 2b b2 d8 01 31 aa d3 bf 4b a1 8c 86 92 ae 26 5d a4 92 2f 08 c3 bf 98 fd a3 6b 7b e3 45 9f bf 09 c3 14 01 d7 5b 4c dc 28 28 27 84 d8 50 68 92 8e 9f f8 c1 21 7a b9 99 92 49 75 04 48 21 b6 90 19 Data Ascii: #_P%u!5Y_S{#Du/L,0:Z J'P_.g:U!B+J5Sg"lk)*@R;FGY$!U~wS_$PqL_6(z;q+1K&]/k{E[L(('Ph!zIuH!
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 8c f7 d0 4b 53 9d 30 29 8a 72 0f 4d a9 f7 d9 74 00 52 63 4d 79 3a d1 ca 25 f7 a7 57 f4 53 a9 9f 09 61 6a 4d 49 a2 36 be 2c 1e 78 ed 6c 93 55 fa ff 08 78 d8 1e 97 ca e3 22 19 1b 4e 8e 61 a0 47 e8 d1 57 2b e0 f7 02 15 0a 4f ea 00 64 de 3b 59 5f 01 74 b5 03 99 a2 94 4d 0b f5 87 c5 b4 81 f0 72 e1 3d 80 38 30 1b ee 2a ba d6 64 7a ab 16 84 73 cc 01 d7 28 0d 86 7f c2 c5 0b af ea d5 2d 6e 3d 28 0e 77 00 c7 03 be 51 9a 39 b1 7c 28 0c 2a 52 9d a1 68 a8 22 24 42 1d 4e be c1 5b 13 8e 01 e6 d4 45 fa f3 b6 9e fa 8b 42 f5 09 ba 39 47 4c fc 3a 64 67 0e 94 fe b9 cf 18 c1 3e 0d 99 b0 87 28 e5 d5 35 ce 66 59 8e 1f 18 67 a8 c6 c9 35 af 2b f6 48 a3 60 fe 7e af 0f f8 3a 24 c9 ec b4 13 f3 f7 a5 8a 17 69 d8 72 3e e4 d8 25 f5 43 37 0c 5b 72 07 3c 20 ed 4f 49 c5 33 1c 28 a0 5f 9c Data Ascii: KS0)rMtRcMy:%WSajMI6,xlUx"NaGW+Od;Y_tMr=80dzs(-n=(wQ9\|(Rh"$BN[EB9GL:dg>(5fYg5+H`~:$ir>%C7[r< OI3(_
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 81 c9 35 2f f6 c6 2e 0e c7 6c 68 50 4a ce ca af 6e e0 0f fc c3 bb 96 95 b5 ef 1b 49 78 ef 12 ee cc d0 0f 04 c5 13 bb c9 be c3 3a dc 43 ed ea 40 e2 10 ca fd 9c b7 ad 4d 02 c9 32 8e b9 c3 e4 7f 24 72 a8 8c 06 dc 9f 2d d9 7a 79 3a 6f 92 9b 86 64 a7 ca 67 b3 bb c9 c1 4a 43 15 83 e3 80 1a 16 3f af 51 48 77 9e bb ac 36 96 da 83 c3 66 85 8b ce 7b 4f 14 12 1d a9 ca 78 b3 ee 22 83 3b 11 22 3d a2 4e fd b3 e6 9f 4c 4e 2e 64 d1 ed 3c b0 bd ed a0 7a 06 29 c1 c7 c5 91 ed b3 e6 a2 9c 2d df 61 3e 84 c7 6b e2 01 67 d8 07 21 4f 2f 18 d8 46 bb 9d 56 92 ff 8d 5d a9 67 4e 70 cc 61 f1 7e 80 3b 7a 3d 51 2c 80 9d b5 98 57 a2 69 af 6a 4c ef 85 f8 25 e7 97 59 4b b8 03 af ca 96 5c 5e 8f 01 d3 48 ee 5b ef f8 b7 71 b2 9c 34 27 00 ac 25 6b d8 19 34 a0 11 94 d1 14 03 52 a1 ca a2 2a 8d Data Ascii: 5/.lhPJnIx:C@M2$r-zy:odgJC?QHw6f{Ox";"=NLN.d<z)-a>kg!O/FV]gNpa~;z=Q,WijL%YK\^H[q4'%k4R*
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 11 ef 74 22 47 74 4a 7e 59 d2 9d bc 50 43 af 82 93 fb b5 a6 5c a6 ac 90 ec 0a 80 7f c8 2b fe 68 c0 ff c2 2e 6a cc a8 52 81 5b 52 7f 4e e1 d8 6c 06 bf 3c 7c fd 21 9c fa ff d1 99 58 f8 b0 ff d5 19 23 dc d8 4d 6a a7 84 13 0c b7 03 e8 61 b4 1c 09 47 5a f5 ba 33 d4 31 0e 27 32 78 ce 8b 35 47 cc 3e 73 c7 9f 74 60 e2 f6 a4 94 77 d6 4b 64 7b 90 d7 95 d3 32 1e 60 0a e2 26 7d 31 d0 82 5e b0 17 4a 58 47 30 b6 01 0b 5d c6 b6 9b e3 d4 9c bd c1 60 0f ef db a7 38 46 eb 31 1d fb 07 96 6a 17 c6 89 39 dc 12 02 96 09 47 36 41 fe 5a 40 a5 61 23 43 ee 53 0b 91 7e 6f 78 c4 c1 56 f2 f5 f0 61 82 59 f9 79 b6 b7 d5 83 0f 27 6a 40 d2 09 c6 fa c1 87 51 b0 9f b5 a5 18 00 e0 21 d6 5d 9b 60 9c d3 2d 11 1b f7 0d b0 1e 0e 65 de 24 c2 71 b2 6a af 5d 74 7a 72 91 46 1e 61 f4 14 62 1e a9 e0 Data Ascii: t"GtJ~YPC\+h.jR[RNl<\|!X#MjaGZ31'2x5G>st`wKd{2`&}1^JXG0]`8F1j9G6AZ@a#CS~oxVaYy'j@Q!]`-e$qj]tzrFab
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: c2 f3 e6 6b 9f 35 76 0e 6b db 00 6d e3 3a 91 ed d0 32 73 49 d9 6e 0f 6e 49 c3 0e ef 4e 4f e0 80 4a 41 3c 95 9a d4 59 14 bf ef 5c 1e 6a 93 eb 79 05 f8 59 2c e8 09 de 12 63 e3 3a 95 a3 ea 52 ab 24 ea 14 8d 9c 3b c8 b1 ab ee 25 c3 74 83 15 c8 b5 3a b0 f8 55 de 8c ce 8d 86 90 51 3b ac f5 a9 ab c6 d2 b0 43 ae 65 21 36 79 c7 21 9a e5 ee 8c 2f bf cb f3 a4 f1 f3 a9 4d 97 f9 fa 20 b5 97 f9 c0 4f 21 14 0f 06 74 d1 31 c5 97 ae 3f 6c 51 f7 4a 44 58 6e 2c e1 e3 01 71 98 f9 c6 97 36 96 94 7c 5b 53 f9 1a 2d 09 bf 62 26 9d 66 10 08 d2 ad a8 20 a3 68 7f 8d 70 ac 0b 47 4b c0 79 58 8e 23 6e 95 f8 a1 bc 8c 01 d1 00 63 ac eb 9d f9 a7 9a b4 1a 77 94 f8 73 88 4f 24 2c a8 a8 f9 5d 9f fa 89 cf 83 d5 cf d6 48 56 f7 04 8d aa af dc b8 23 ec 80 df fb dd cf 2e d6 c6 69 f4 ee 6b ec df Data Ascii: k5vkm:2sInnINOJA<Y\jyY,c:R$;%t:UQ;Ce!6y!/M O!t1?lQJDXn,q6\|[S-b&f hpGKyX#ncwsO$,]HV#.ik
2023-12-05 18:13:30 UTC	390	IN	Data Raw: 17 37 3c 45 e7 f6 f6 c2 a9 c8 7a 06 64 16 72 bd 4e b0 d9 c2 6d 1d 1a a8 d9 8e a6 25 86 e0 17 98 e4 78 de e9 2e 72 eb 08 d5 53 07 83 5d 77 33 d3 48 9e c3 f8 24 88 39 3b 41 00 57 25 fb 22 7e cf 60 9a cf 6b ff b4 41 68 d1 68 5d 1d 77 37 de 59 71 fc 0e 28 1f 27 32 64 08 3d 0b 97 7d be a6 4f de 8f 6b c8 06 e4 c4 74 2c 45 42 41 fb 0b e8 75 17 9a e1 3b 0e 67 b3 48 33 98 10 8f 9a 0b 33 d5 1a 58 aa a4 f6 3e 2f 70 8c 3c 8d a4 b4 91 ee 21 3c e6 34 54 59 a5 0d db 7a f3 53 77 ec 55 21 39 69 89 88 ed c1 a7 04 9c db ff 4a c0 30 a5 2f 31 9c 27 80 a8 14 03 1b 8d 83 1b 71 c5 64 36 8d 81 38 d0 7b cd 69 77 39 9c c0 37 a0 a2 e1 85 7b 7a 40 b8 30 63 09 67 1e 99 5b 17 46 00 93 c2 08 31 f5 05 1c f1 3b 80 d3 49 e9 39 ec d9 b5 3f f4 7e 97 76 86 90 35 ad 0f 8f df 40 f2 a6 47 75 cd Data Ascii: 7<EzdrNm%x.rS]w3H$9;AW%"~`kAhh]w7Yq('2d=}Okt,EBAu;gH33X>/p<!<4TYzSwU!9iJ0/1'qd68{iw97{z@0cg[F1;I9?~v5@Gu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49847	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	1157	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; nyt-jkidd=uid=0&lastRequest=1701800009282&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:30 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:30 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49846	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:29 UTC	621	OUT	GET /video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4 HTTP/1.1 Host: vp.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: video Referer: https://www.nytimes.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2023-12-05 18:13:30 UTC	1117	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 36 20 50 61 72 74 69 61 6c 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 30 35 33 35 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 66 61 43 4f 6a 76 58 49 37 66 6d 32 5a 7a 49 4e 66 4c 41 42 2d 37 36 35 2d 63 68 4c 6f 4b 70 45 6f 6e 38 53 63 57 6b 67 77 48 69 6b 73 4e 30 65 59 74 39 61 54 76 34 56 64 4c 42 74 68 5a 58 79 6a 4c 41 5f 39 77 35 42 37 66 33 5f 48 4c 71 55 39 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 31 3a 35 30 3a 34 39 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 Data Ascii: HTTP/1.1 206 Partial ContentConnection: closeContent-Length: 3005351X-GUploader-UploadID: ABPtcPpfaCOjvXI7fm2ZzINfLAB-765-chLoKpEon8ScWkgwHiksN0eYt9aTv4VdLBthZXyjLA_9w5B7f3_HLqU9Expires: Tue, 05 Dec 2023 11:50:49 GMTLast-Modified: Tue, 05 Dec 20
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 00 00 00 1c 66 74 79 70 69 73 6f 6d 00 00 00 01 69 73 6f 6d 61 76 63 31 6d 70 34 32 00 00 22 00 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e1 94 ba d8 e1 94 ba d8 00 00 02 58 00 00 22 e0 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 15 69 6f 64 73 00 00 00 00 10 07 00 4f ff ff 29 15 ff 00 00 13 70 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 01 e1 94 ba d6 e1 94 ba d8 00 00 00 01 00 00 00 00 00 00 22 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 Data Ascii: ftypisomisomavc1mp42"moovlmvhdX"@iodsO)ptrak\tkhd"@
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 2e 8c 69 e7 ce d6 86 66 3f a4 9c c0 22 76 a6 b8 22 3c 97 e0 96 0c 94 d9 18 37 3a 23 d0 3b 78 eb bb 94 17 ec 1d e5 e6 87 4c 69 75 50 92 69 9e 78 09 45 10 fc 04 c0 b0 51 37 1d 60 54 f3 db 0b ad a3 c6 3a 04 a8 7d 30 4e 84 4b 7f e0 2b 35 a5 c2 80 03 a1 8c e6 62 95 01 d5 a5 37 ab e3 8a b0 df 8a 40 c0 66 ea 49 e5 f5 24 d4 84 e3 91 cf 99 97 cc 26 ed bb 7d 0c 42 58 0c b5 49 96 76 91 ec 9c 64 12 07 3f c8 6c fb bd cb 8b d1 dc 76 28 55 16 79 1b f0 48 27 62 49 bd 68 8e 33 9d 1d f5 ef ad e8 e2 bc 41 b4 16 d7 b7 9f c6 d7 14 32 df 50 68 ec 86 15 63 65 f8 c8 ab c5 c3 de de 65 7a f3 76 07 2d f5 5b b0 5b dd 6f c0 f6 1e 32 6d 96 cc ae 11 7c 7f 53 f0 0e 43 2d a4 9d a3 0a 89 7d f4 59 d7 2f 81 26 44 2e a4 25 c0 67 81 be 05 b2 4e ac 24 d0 b7 49 64 cb 09 26 17 b9 99 40 89 dc f4 Data Ascii: .if?"v"<7:#;xLiuPixEQ7`T:}0NK+5b7@fI$&}BXIvd?lv(UyH'bIh3A2Phceezv-[[o2m\|SC-}Y/&D.%gN$Id&@
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: e8 12 10 7f 93 49 42 55 5d d6 50 e4 15 7c f9 5f 53 5f e2 a0 27 1d d2 01 09 9a a1 cd 38 48 8f af e7 cd 32 c8 d8 43 cc 1e 99 19 1c 2a b8 7c ba 80 53 46 9f 7e 80 e4 ef e1 7f a8 bb 1e 72 49 99 22 14 80 b8 ae ac c3 60 c9 7c 91 84 fc cc 91 cc 83 f3 74 12 1a c1 d9 65 d1 4d 91 82 f9 52 4c 3a 4f 09 fc fc 17 6c f8 e5 ec 3b f7 cf ed 9a 1d 15 0c 74 7e 76 e2 bb aa c6 a6 1a 26 a1 a9 36 54 1b ea 08 6f 2e 5b 87 24 76 47 fa 2b 77 f9 bf 00 8d a5 51 af f9 6c fb c4 83 ea 5b 9a c7 9c 7b f7 44 b5 1f b6 31 bd 3d a2 f9 47 bb fb 5f 54 36 df 8e 52 39 ca 7f ae b4 df b7 e7 41 79 8d 3b a6 e4 eb 92 2c d0 db 07 f9 f3 be 89 a5 08 73 e4 2a 7a ff 8c 49 49 9d 48 b7 24 fa 92 8f f3 56 0a 6c 33 90 7f da 09 82 1b a4 f8 6c b6 c3 94 de d3 64 30 de f9 f9 7e 03 cf 72 71 fe 75 b0 6e 70 89 71 0f a2 Data Ascii: IBU]P\|_S_'8H2C\|SF~rI"`\|teMRL:Ol;t~v&6To.[$vG+wQl[{D1=G_T6R9Ay;,szIIH$Vl3ld0~rqunpq
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 73 49 8d 65 cb 60 0f 9b 10 e2 57 82 b7 99 c1 2f d5 f4 3a 14 54 ed a5 02 83 5e fe 07 24 c8 7d 25 ab 5a 2d 2a cd 91 5e d6 7c 68 28 e0 10 8c 85 5e 88 f4 00 52 1a b8 ca e3 48 49 bb a5 7e 9c 53 57 c3 b2 5a 89 3e b1 b5 6b 56 d6 7d 27 9d 04 f8 67 e0 f4 08 e2 79 80 8a 33 4c 57 e3 da 41 9d a9 a5 9f 4f e6 77 b4 3a 55 80 8a e6 aa 59 01 c7 11 89 27 18 04 72 75 31 70 52 f4 cc 10 4d e1 f2 7e 72 ba c4 32 e3 c8 0e d3 ea 8c 15 d2 31 d7 31 56 98 9a 9b 08 42 f6 13 ab e9 3a 6e c3 dc 91 57 47 6b 8b 30 0b d9 79 d3 a2 ae 6e 22 46 83 b5 08 cc 07 dc 0e 1d 5c 53 ce 72 f2 e7 06 7b a3 e7 5c 1c d5 ee f5 17 0b c6 2b d6 78 48 63 69 c3 ae 3b 83 e2 4e 6c 07 6e 24 34 86 b6 07 ac 22 98 db 3c c0 64 db 82 81 16 bf 97 8e 01 6c 6e 3c 5e a5 0f ce 7d 25 8d 2c 13 6b 8e d9 47 cf 2e 37 3f c1 46 a8 Data Ascii: sIe`W/:T^$}%Z-*^\|h(^RHI~SWZ>kV}'gy3LWAOw:UY'ru1pRM~r211VB:nWGk0yn"F\Sr{\+xHci;Nln$4"<dln<^}%,kG.7?F
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: fe 33 8d a0 a3 04 9e 35 a7 f0 b8 74 15 54 47 a8 11 a7 e9 be 2d fc c7 da 28 89 96 a7 2e a0 c6 a0 7d f0 6c 8c 0c 73 ab 77 d4 04 3c bd 48 05 62 e1 64 69 ef 01 f8 f6 4b dc 46 2e 11 02 1d ab f8 bf 87 27 cf 24 6e 9f a5 16 e8 0d d3 64 e4 57 82 84 75 1a 61 53 67 fe 65 39 03 18 47 5c a6 6f 87 0f 41 86 0e 8c b0 04 74 7a 58 5a 2a 82 f2 39 b0 f0 e6 83 2c a6 60 a6 83 03 c8 57 96 41 06 b4 1a 83 4e 27 00 dd 34 e0 7e 8b 43 d0 be eb 77 48 bd 61 83 04 0e 76 65 5e 26 07 90 b6 b7 0e 84 dd b9 73 1a ef 9f 11 7b 61 3c 47 ed f3 32 1f 88 5c 22 8a 07 68 6e d1 3b aa 1f 0c 03 fc e2 eb 56 82 95 83 1c d0 be c0 7f d6 a4 35 67 d4 b4 0e 70 4e 37 21 b6 74 58 db f5 7e 5b 85 cc 9c e9 32 f6 f7 25 32 69 7f 89 11 45 f1 4a 6c 1c 50 7b 5e c8 51 48 7e 64 8e b8 95 41 7b 0b 8a 5e 03 85 3b 18 74 f2 Data Ascii: 35tTG-(.}lsw<HbdiKF.'$ndWuaSge9G\oAtzXZ*9,`WAN'4~CwHave^&s{a<G2\"hn;V5gpN7!tX~[2%2iEJlP{^QH~dA{^;t
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: cf e5 e7 fb 26 e4 90 0b c9 1c 2e ac d5 df 45 9c 07 c6 18 36 ed 33 f9 7b ba 64 10 4d 49 62 71 73 28 7b d1 cb 9f a1 5d b0 50 af d9 88 9c e6 60 bb 4a 3c db f2 af 69 d2 cc ed a7 1b de 41 88 83 eb 4a 56 3a 56 3e 2a f0 a5 d0 46 0c c9 67 20 36 ff 6b 2c 4a e2 e8 2b c1 0e 68 66 99 e1 ea d6 8a 1e a6 68 35 e3 01 ad 20 7e 20 8f b7 d1 84 1c 78 75 cb 43 ae 51 7e 79 51 af 14 97 3b 9e b8 be d1 e0 4b 99 8b 69 26 a4 1c db 34 e3 3f 23 40 a5 80 d7 91 80 a1 ec 73 57 ca 6d 34 13 da 81 1c 8a ce 61 60 46 05 0f f9 21 67 cd 07 93 47 8c c2 64 9c 1c 6c d8 2d 53 df 5c cc 0e cc 01 c0 1b 74 ee e8 a0 db a8 c5 f9 f6 6c ca 3c 5c 3a 6a b3 98 11 71 4d fe b6 3a 6a 5b 3a f0 96 32 58 53 b9 71 7a c5 65 a1 c5 bb 95 fe ce 44 7c b3 7f 2c ab e3 9e 01 38 09 35 2e a6 67 9e 55 77 7e 79 8f d0 8b 90 2f Data Ascii: &.E63{dMIbqs({]P`J<iAJV:V>*Fg 6k,J+hfh5 ~ xuCQ~yQ;Ki&4?#@sWm4a`F!gGdl-S\tl<\:jqM:j[:2XSqzeD\|,85.gUw~y/
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: fb 63 bd 1f 5a c1 a1 14 a0 b1 7f 40 2c a1 ce a2 13 e4 de 9d 6b d9 43 1c 5b 09 31 66 9b f0 92 6f 76 48 bc 7e 4a 35 29 fb 7a 1c 48 bc 8b 01 71 f5 50 75 b0 5c 8a a3 bc 11 9a 46 99 5c 3f e8 8e 35 51 7a 83 09 21 42 69 e1 b7 ee 61 b5 dc 12 8e 27 39 6e a5 e8 7b c1 03 fc 1b 2e 13 df 61 8c 04 36 1a 75 31 3d d1 0c a2 f0 d0 9e 41 0d 5b 12 51 c0 bd 05 26 a6 8f aa 72 63 6f af ab 17 c6 4c da 48 dc 1f 91 f6 34 f6 95 1e 38 91 93 6d f9 dd 50 5e 70 e5 36 d7 e9 10 05 56 a7 3a 1a 19 60 7b ca d1 dd 22 ff 17 83 6c 2c 32 8d 34 bf 45 12 e9 4a 87 e1 47 8b bd 9f 3e 83 3f 4f 30 02 1f 83 b7 e7 c8 dc 15 d7 db 9a 2f 9c 83 ee 0a 71 45 2a 2f 31 19 52 b8 6a 4f 4a 95 21 77 75 81 5a b5 e0 d4 02 e7 ad f0 d6 92 f3 32 57 40 79 54 dc cf 69 fe 9b 1b 29 44 18 e6 2d 6f 26 1b bc 2f 3d 7d a8 ed cd Data Ascii: cZ@,kC[1fovH~J5)zHqPu\F\?5Qz!Bia'9n{.a6u1=A[Q&rcoLH48mP^p6V:`{"l,24EJG>?O0/qE*/1RjOJ!wuZ2W@yTi)D-o&/=}
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: c9 7f db 2b 77 bd 28 df 36 e2 88 a9 3f 01 76 50 65 de 65 f6 55 1b d7 a7 9b 3b cc 19 b3 65 d3 e6 77 e8 85 48 4c e2 0c 10 ce 28 09 9a 37 0f e2 0e 0c 51 35 84 9e ff 83 20 54 7f 57 c9 d4 d5 9d b2 fc a1 17 55 04 41 6f 65 68 10 08 88 eb a8 a0 07 3e 8a 90 86 c6 8c d3 ce 57 ec 0e 7a 48 55 31 f8 75 e2 4f bb 4a 37 54 3b 7c 07 25 10 79 11 8d f4 21 24 0d 15 23 62 e9 58 78 7d 3c d5 dd 07 c8 89 64 e0 b3 ea b4 54 6d 1e 25 ef 9d 04 ea e7 87 1c 59 f5 57 a8 b6 38 17 62 1f 0e 3f b8 54 f2 57 c0 c8 b6 20 3f c8 05 3c ac 2e 83 3b 37 ae cb d8 9e 0c d4 29 97 5a 80 b4 b7 c9 a5 31 e3 7b 6a de 4c 24 45 e2 9c a6 ca 62 ba ff 0e 07 08 39 58 6c 36 1a 65 38 c9 66 c3 04 7c 2a 1c 77 08 a5 37 85 e7 38 08 48 21 2c fd e8 80 fe 68 1d 23 0e ca aa 39 69 2a d8 60 b8 7f a3 ce ba 45 a5 41 9b ca 88 Data Ascii: +w(6?vPeeU;ewHL(7Q5 TWUAoeh>WzHU1uOJ7T;\|%y!$#bXx}<dTm%YW8b?TW ?<.;7)Z1{jL$Eb9Xl6e8f\|w78H!,h#9i`EA
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: a8 6a 64 52 70 4c 07 de 81 88 72 da 65 e2 fe 19 4e fb e2 8f 38 21 01 74 9f ce fc 0f 29 4a 0f 5b 37 6b 2a d5 bf 55 43 81 c0 ce 97 76 98 26 b3 95 8f 97 ff 52 31 04 92 91 3c c9 62 bb d0 5b 3d 87 76 19 c9 8f bd 90 00 8b e4 ef 13 01 34 1b cd dc 3f c7 bf 54 10 ac 7d 6e 3f 9c 5d f7 5b b5 fe d6 ed 60 55 65 bc 27 0e 8d cf 74 af d5 c4 6e ee dd e9 50 05 a9 ef 49 ea 70 4c 1a 70 9d 66 23 a9 74 af 52 5e d6 99 c0 99 15 88 80 8f ec 93 6c 29 a9 f2 ba 1e 13 a8 3e 39 50 c3 a0 b3 0e 60 76 15 22 ed e5 de 79 18 6f 6b c3 c1 aa b0 b6 fc 6b 28 7c 8c cd 55 f0 7f 2b ed 9a 03 c4 9d e5 12 46 ee d8 98 26 79 8e 9e 35 f7 c3 93 36 4b c9 6b 30 5a 06 73 c4 e4 a1 44 25 12 d6 f7 72 a7 97 ee 5b ad 98 08 33 91 c9 8d 9a 84 56 cc 8b 36 24 49 19 e3 55 38 37 7f ba 86 2a 7a b9 cd d1 f1 33 06 f8 3c Data Ascii: jdRpLreN8!t)J[7kUCv&R1<b[=v4?T}n?][`Ue'tnPIpLpf#tR^l)>9P`v"yokk(\|U+F&y56Kk0ZsD%r[3V6$IU87z3<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49850	18.160.55.166	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	540	OUT	GET /js/chartbeat_video.js HTTP/1.1 Host: static.chartbeat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	590	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 32 30 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 32 32 3a 30 38 3a 35 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 36 20 4e 6f 76 20 32 30 32 33 20 30 32 3a 30 30 3a 31 36 20 47 4d 54 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 Data Ascii: HTTP/1.1 200 OKContent-Type: application/x-javascriptContent-Length: 72062Connection: closeDate: Mon, 04 Dec 2023 22:08:59 GMTServer: nginxLast-Modified: Thu, 16 Nov 2023 02:00:16 GMTCross-Origin-Resource-Policy: cross-originExpires: Tue,
2023-12-05 18:13:30 UTC	15794	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 76 6f 69 64 20 30 2c 67 3d 74 72 75 65 2c 69 3d 6e 75 6c 6c 2c 6a 3d 66 61 6c 73 65 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 61 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 76 61 72 20 71 2c 72 3d 74 68 69 73 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 62 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 Data Ascii: (function(){var d=void 0,g=true,i=null,j=false;function k(){return function(){}}function m(a){return function(){return this[a]}}function p(a){return function(){return a}}var q,r=this;function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Arra
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2c 62 2e 6c 65 6e 67 74 68 29 2c 6a 7d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 48 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 2c 66 2c 68 29 7b 76 61 72 20 6c 3d 72 2e 5f 73 66 5f 61 73 79 6e 63 5f 63 6f 6e 66 69 67 3b 69 66 28 62 63 28 6c 29 29 72 65 74 75 72 6e 22 22 3b 61 3d 69 62 28 61 2c 6c 2c 68 29 3b 68 3d 6e 65 77 20 44 61 74 65 3b 68 2e 73 65 74 54 69 6d 65 28 75 28 29 2b 63 2a 31 45 33 29 3b 61 3d 61 2b 22 3d 22 2b 62 2b 28 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 68 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 2b 28 22 3b 20 70 61 74 68 3d 22 2b 65 29 2b 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3d 3d 3d 22 68 74 74 70 73 3a 22 3f 22 Data Ascii: substring(a.length,b.length),j});return e};H.create=function(a,b,c,e,f,h){var l=r._sf_async_config;if(bc(l))return"";a=ib(a,l,h);h=new Date;h.setTime(u()+c*1E3);a=a+"="+b+("; expires="+h.toUTCString())+("; path="+e)+(window.location.protocol==="https:"?"
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 3a 79 61 3d 6a 3b 66 3d 5b 66 2c 65 2c 63 2c 68 2c 6c 2c 6f 2c 6e 2c 44 2c 47 2c 52 2c 55 2c 68 61 2c 63 61 2c 4c 2c 45 2c 6a 61 2c 6b 61 2c 45 64 2c 46 64 2c 47 64 2c 48 64 2c 49 64 2c 4a 64 2c 4b 64 2c 4c 64 2c 4d 64 2c 4e 64 2c 79 61 5d 3b 65 3d 31 3b 66 6f 72 28 68 3d 63 3d 30 3b 68 3c 66 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 63 7c 3d 66 5b 68 5d 26 26 65 2c 65 3c 3c 3d 31 3b 74 68 69 73 2e 75 64 3d 28 22 30 30 30 30 30 30 30 30 22 2b 63 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 38 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 64 28 29 7b 22 70 6f 73 74 4d 65 73 73 61 67 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 49 61 28 72 2c 22 6d 65 73 73 61 67 65 22 2c 76 28 74 68 69 73 2e 4a 64 2c 74 68 69 73 29 29 3b 71 63 2e 63 61 6c 6c 28 74 68 69 Data Ascii: :ya=j;f=[f,e,c,h,l,o,n,D,G,R,U,ha,ca,L,E,ja,ka,Ed,Fd,Gd,Hd,Id,Jd,Kd,Ld,Md,Nd,ya];e=1;for(h=c=0;h<f.length;h++)c\|=f[h]&&e,e<<=1;this.ud=("00000000"+c.toString(16)).slice(-8)};function cd(){"postMessage"in window&&Ia(r,"message",v(this.Jd,this));qc.call(thi
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 62 3f 22 61 64 22 3a 4d 7d 3b 71 2e 4f 3d 70 28 22 22 29 3b 71 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 61 2e 67 65 74 44 75 72 61 74 69 6f 6e 28 29 3b 69 66 28 61 3e 30 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 61 2a 31 45 33 29 7d 3b 71 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 46 29 72 65 74 75 72 6e 20 4e 3b 69 66 28 74 68 69 73 2e 63 62 29 72 65 74 75 72 6e 22 73 32 22 3b 69 66 28 74 68 69 73 2e 79 61 29 72 65 74 75 72 6e 22 73 34 22 3b 76 61 72 20 61 3d 74 68 69 73 2e 61 2e 67 65 74 53 74 61 74 65 28 29 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 22 50 41 55 53 45 Data Ascii: nction(){return this.cb?"ad":M};q.O=p("");q.aa=function(){var a=this.a.getDuration();if(a>0)return Math.round(a*1E3)};q.G=function(){if(!this.F)return N;if(this.cb)return"s2";if(this.ya)return"s4";var a=this.a.getState();return a&&a.toUpperCase()==="PAUSE
2023-12-05 18:13:30 UTC	7116	IN	Data Raw: 22 3b 4c 3d 21 62 2e 6e 6f 43 6f 6f 6b 69 65 73 26 26 61 2e 42 2e 69 73 53 75 70 70 6f 72 74 65 64 28 29 3b 45 3d 63 2e 67 65 74 53 74 72 61 74 65 67 79 4e 61 6d 65 3f 63 2e 67 65 74 53 74 72 61 74 65 67 79 4e 61 6d 65 28 29 3a 22 22 3b 72 65 74 75 72 6e 20 51 61 28 29 2b 22 2f 2f 22 2b 62 2e 70 69 6e 67 53 65 72 76 65 72 2b 22 2f 70 69 6e 67 3f 68 3d 22 2b 66 2b 22 26 67 3d 22 2b 65 2b 22 26 70 3d 22 2b 50 61 28 72 64 28 61 29 29 2b 22 26 69 3d 22 2b 50 61 28 77 64 28 61 29 29 2b 6e 2b 44 2b 22 26 75 3d 22 2b 61 2e 53 61 2b 22 26 74 3d 22 2b 61 2e 45 61 2b 22 26 78 3d 30 26 79 3d 30 26 56 3d 31 34 31 22 2b 5a 28 22 56 53 22 2c 45 29 2b 28 4c 3f 22 26 6e 3d 22 2b 61 2e 61 63 3a 22 26 6e 63 3d 31 22 29 2b 6c 2b 68 2b 52 2b 5a 28 22 5f 76 64 22 2c 63 2e 67 Data Ascii: ";L=!b.noCookies&&a.B.isSupported();E=c.getStrategyName?c.getStrategyName():"";return Qa()+"//"+b.pingServer+"/ping?h="+f+"&g="+e+"&p="+Pa(rd(a))+"&i="+Pa(wd(a))+n+D+"&u="+a.Sa+"&t="+a.Ea+"&x=0&y=0&V=141"+Z("VS",E)+(L?"&n="+a.ac:"&nc=1")+l+h+R+Z("_vd",c.g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49849	142.251.111.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1329	OUT	GET /td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	795	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:13:30 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2023-12-05 18:13:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49856	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	580	OUT	GET /video-static/vhs3/vhs-plugin-cover-vi-be85f508a34ad15e6073.min.js HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	1108	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 31 39 34 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 78 47 4b 5a 39 76 33 74 54 49 2d 37 7a 2d 6a 31 6d 4b 67 4b 49 66 4d 34 79 62 71 78 53 53 69 4a 4c 66 50 4d 6e 76 5f 43 67 54 38 63 59 4c 72 74 57 5a 30 45 4f 41 51 50 46 33 4c 74 5f 57 78 72 70 35 58 50 45 58 4c 5f 42 6a 34 79 77 4f 42 53 43 67 54 4f 78 65 33 2d 66 41 6f 43 72 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 36 30 2c 73 2d 6d 61 78 61 67 65 3d 36 30 34 38 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 30 20 4f 63 74 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 51945X-GUploader-UploadID: ADPycdvxGKZ9v3tTI-7z-j1mKgKIfM4ybqxSSiJLfPMnv_CgT8cYLrtWZ0EOAQPF3Lt_Wxrp5XPEXL_Bj4ywOBSCgTOxe3-fAoCrCache-Control: public,max-age=60,s-maxage=604800Expires: Fri, 20 Oct 2
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 56 48 53 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 56 48 53 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 32 37 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 2c 74 2e 64 28 65 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 74 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 3b 76 61 72 20 61 3d 74 28 30 29 2c 69 3d 74 28 32 37 34 29 2c 6c 3d 74 2e 6e 28 69 29 3b 63 6c 61 73 73 20 6f 20 65 78 74 65 6e 64 73 20 61 2e 64 65 66 61 75 6c 74 2e 43 6f Data Ascii: (window.webpackJsonpVHS=window.webpackJsonpVHS\|\|[]).push([[4],{270:function(n,e,t){"use strict";t.d(e,"b",(function(){return s})),t.d(e,"c",(function(){return p})),t.d(e,"a",(function(){return f}));var a=t(0),i=t(274),l=t.n(i);class o extends a.default.Co
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 6e 3d 5b 68 2e 61 2e 43 65 6c 6c 5d 3b 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 68 2e 61 5b 22 2d 22 2b 74 68 69 73 2e 70 72 6f 70 73 2e 73 69 7a 65 5d 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 76 65 72 74 69 63 61 6c 26 26 6e 2e 70 75 73 68 28 68 2e 61 5b 74 68 69 73 2e 70 72 6f 70 73 2e 76 65 72 74 69 63 61 6c 5d 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 26 26 6e 2e 70 75 73 68 28 68 2e 61 5b 74 68 69 73 2e 70 72 6f 70 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 5d 29 2c 74 68 69 73 2e 70 72 6f 70 73 5b 22 63 65 6e 74 65 72 2d 30 22 5d 26 26 6e 2e 70 75 73 68 28 68 2e 61 5b 22 63 65 6e 74 65 72 2d 30 22 5d 29 2c 74 68 69 73 2e 70 72 6f 70 73 5b 22 66 6c 65 78 2d 63 6f 6c 75 6d 6e 22 5d 26 26 6e 2e 70 75 73 68 28 68 2e 61 5b 22 66 6c 65 Data Ascii: n=[h.a.Cell];return n.push(h.a["-"+this.props.size]),this.props.vertical&&n.push(h.a[this.props.vertical]),this.props.horizontal&&n.push(h.a[this.props.horizontal]),this.props["center-0"]&&n.push(h.a["center-0"]),this.props["flex-column"]&&n.push(h.a["fle
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2b 70 2b 22 29 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 5c 6e 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 2e 63 65 6e 74 65 72 49 63 6f 6e 43 69 72 63 6c 65 2d 55 45 77 6c 72 6e 46 50 20 7b Data Ascii: ;\n background-image: url("+p+");\n background-position: center center;\n background-size: contain;\n background-repeat: no-repeat;\n margin: 0 auto;\n border: none;\n background-color: transparent;\n padding: 0;\n}\n\n.centerIconCircle-UEwlrnFP {
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 69 6e 65 2d 33 54 5a 6d 42 47 45 61 20 22 2b 6c 2e 6c 6f 63 61 6c 73 2e 63 68 65 6c 74 65 6e 68 61 6d 2c 63 6f 6d 70 61 73 73 49 63 6f 6e 3a 22 63 6f 6d 70 61 73 73 49 63 6f 6e 2d 32 76 38 57 72 69 41 49 22 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 65 7d 2c 32 37 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 7b 7d 29 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 28 6e 3d 6e 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 2e 64 65 66 61 75 6c 74 3a 6e 29 3f 6e 3a 28 2f 5e 5b 27 22 5d 2e 2a 5b 27 22 5d 24 2f 2e 74 65 73 74 28 6e 29 26 26 28 6e 3d 6e 2e 73 6c 69 63 65 28 31 2c 2d 31 29 29 2c 65 2e 68 61 Data Ascii: ine-3TZmBGEa "+l.locals.cheltenham,compassIcon:"compassIcon-2v8WriAI"},n.exports=e},272:function(n,e,t){"use strict";n.exports=function(n,e){return e\|\|(e={}),"string"!=typeof(n=n&&n.__esModule?n.default:n)?n:(/^['"].*['"]$/.test(n)&&(n=n.slice(1,-1)),e.ha
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 64 6c 65 2d 33 33 2d 30 63 73 41 70 20 7b 5c 6e 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 7d 5c 6e 2e 47 72 69 64 2d 4c 34 50 52 4b 7a 7a 37 2e 76 65 72 74 69 63 61 6c 2d 62 6f 74 74 6f 6d 2d 31 68 46 75 5f 71 38 56 20 7b 5c 6e 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 5c 6e 7d 5c 6e 2e 47 72 69 64 2d 4c 34 50 52 4b 7a 7a 37 2e 76 65 72 74 69 63 61 6c 2d 62 65 74 77 65 65 6e 2d 58 50 31 5f 56 58 4e 7a 20 7b 5c 6e 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 5c 6e 7d 5c 6e 2e 47 72 69 64 2d 4c 34 50 52 4b 7a 7a 37 2e 76 65 72 74 69 63 61 6c 2d 61 72 6f 75 6e 64 2d 54 64 64 46 45 4b 70 2d 20 7b 5c 6e 20 20 6a 75 73 74 69 Data Ascii: dle-33-0csAp {\n justify-content: center;\n}\n.Grid-L4PRKzz7.vertical-bottom-1hFu_q8V {\n justify-content: flex-end;\n}\n.Grid-L4PRKzz7.vertical-between-XP1_VXNz {\n justify-content: space-between;\n}\n.Grid-L4PRKzz7.vertical-around-TddFEKp- {\n justi
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 72 45 63 74 79 76 20 7b 5c 6e 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 66 6c 65 78 2d 65 6e 64 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 7d 5c 6e 2e 52 6f 77 2d 33 55 66 6f 66 53 5a 36 2e 66 69 6c 6c 2d 4e 38 67 6b 7a 6a 35 32 20 7b 5c 6e 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 73 74 72 65 74 63 68 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 7d 5c 6e 5c 6e 2e 52 6f 77 2d 33 55 66 6f 66 53 5a 36 2e 61 62 73 6f 6c 75 74 65 2d 48 44 72 79 6d 31 32 30 20 7b 5c 6e 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 5c 6e 7d 5c 6e 5c 6e 2e 52 6f 77 2d 33 55 66 6f 66 53 5a 36 2e 6d 61 72 67 69 6e 2d 61 75 74 6f 2d 32 52 78 6f 43 46 57 51 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 5c 6e 7d 5c 6e 22 2c 22 22 Data Ascii: rEctyv {\n align-self: flex-end;\n width: 100%;\n}\n.Row-3UfofSZ6.fill-N8gkzj52 {\n align-self: stretch;\n width: 100%;\n}\n\n.Row-3UfofSZ6.absolute-HDrym120 {\n position: absolute;\n}\n\n.Row-3UfofSZ6.margin-auto-2RxoCFWQ {\n margin: auto;\n}\n",""
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 66 6c 65 78 2d 65 6e 64 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 63 65 6e 74 65 72 2d 32 53 35 4d 4a 49 7a 30 20 7b 5c 6e 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 5c 6e 7d 5c 6e 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 31 6f 66 31 32 2d 33 75 37 68 77 46 68 55 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 28 31 30 30 25 20 2a 20 28 31 20 2f 20 31 32 29 29 20 2d 20 32 30 70 78 29 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 32 6f 66 31 32 2d 31 46 56 6b 64 35 62 34 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 28 31 30 30 25 20 2a 20 28 32 20 2f 20 31 32 29 29 20 2d 20 32 30 70 78 29 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 Data Ascii: flex-end;\n}\n.Cell-2a0dWPCm.center-2S5MJIz0 {\n justify-content: center;\n}\n\n.Cell-2a0dWPCm.\\-1of12-3u7hwFhU {\n width: calc((100% * (1 / 12)) - 20px);\n}\n.Cell-2a0dWPCm.\\-2of12-1FVkd5b4 {\n width: calc((100% * (2 / 12)) - 20px);\n}\n.Cell-2a0dWP
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 31 30 30 25 20 2a 20 28 34 20 2f 20 31 32 29 29 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 35 6f 66 31 32 2d 31 5a 67 79 4e 74 34 73 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2a 20 28 35 20 2f 20 31 32 29 29 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 36 6f 66 31 32 2d 32 4f 63 43 6c 43 44 38 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2a 20 28 36 20 2f 20 31 32 29 29 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 37 6f 66 31 32 2d 31 67 35 44 39 74 42 78 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2a Data Ascii: 100% * (4 / 12));\n}\n.Cell-2a0dWPCm.\\-5of12-1ZgyNt4s:last-child {\n width: calc(100% * (5 / 12));\n}\n.Cell-2a0dWPCm.\\-6of12-2OcClCD8:last-child {\n width: calc(100% * (6 / 12));\n}\n.Cell-2a0dWPCm.\\-7of12-1g5D9tBx:last-child {\n width: calc(100% *
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 32 20 2f 20 36 29 29 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 33 6f 66 36 2d 31 79 61 6f 42 75 64 35 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2a 20 28 33 20 2f 20 36 29 29 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 34 6f 66 36 2d 31 30 52 4a 32 5f 37 62 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2a 20 28 34 20 2f 20 36 29 29 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 5c 6e 7d 5c 6e 2e 43 65 6c 6c 2d 32 61 30 64 57 50 43 6d 2e 5c 5c 2d 35 6f Data Ascii: 2 / 6));\n margin-right: 0;\n}\n.Cell-2a0dWPCm.\\-3of6-1yaoBud5:last-child {\n width: calc(100% * (3 / 6));\n margin-right: 0;\n}\n.Cell-2a0dWPCm.\\-4of6-10RJ2_7b:last-child {\n width: calc(100% * (4 / 6));\n margin-right: 0;\n}\n.Cell-2a0dWPCm.\\-5o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49851	104.26.12.18	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	562	OUT	GET /tag/85a1ebf79602421aa1c2c2f24d32cb6c/nyt.js HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	749	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 43 66 2d 42 67 6a 3a 20 6d 69 6e 69 66 79 0d 0a 43 66 2d 50 6f 6c 69 73 68 65 64 3a 20 6f 72 69 67 53 69 7a 65 3d 34 38 32 31 0d 0a 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 63 69 64 2d 76 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:30 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCache-Control: public, max-age=3600Cf-Bgj: minifyCf-Polished: origSize=4821Request-Context: appId=cid-v
2023-12-05 18:13:30 UTC	620	IN	Data Raw: 31 32 32 33 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 72 61 6e 64 6d 65 74 72 69 63 73 2c 5f 5f 61 73 73 69 67 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e Data Ascii: 1223"use strict";var brandmetrics,__assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).
2023-12-05 18:13:30 UTC	1369	IN	Data Raw: 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 68 61 73 43 6f 6e 73 65 6e 74 28 29 29 29 64 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 65 2c 6f 28 29 7d 29 3b 65 6c 73 65 20 69 66 28 21 65 29 7b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 26 26 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 2e 73 74 6f 70 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 61 70 69 3d 7b 68 61 73 43 6f 6e 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 69 73 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e Data Ascii: \|\|void 0===n?void 0:n.hasConsent()))d(t,function(e){window.brandmetrics.api=e,o()});else if(!e){window.brandmetrics.api&&window.brandmetrics.api.stop&&window.brandmetrics.api.stop();window.brandmetrics.api={hasConsent:function(){return!1},isReady:function
2023-12-05 18:13:30 UTC	1369	IN	Data Raw: 73 65 22 75 73 70 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 33 34 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 75 73 74 6f 6d 22 3a 65 3d 6e 65 77 28 6c 2e 67 65 74 4d 6f 64 75 6c 65 28 32 33 29 29 28 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 63 6f 6e 66 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 68 61 6e 64 6c 65 20 63 6f 6e 73 65 6e 74 20 74 79 70 65 3a 20 22 2b 74 2e 63 6f 6e 73 65 6e 74 4d 6f 64 65 2e 74 79 70 65 29 7d 65 2e 63 68 65 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3f 61 28 74 2c 6e 29 3a 73 28 21 31 2c 74 2c 6e 29 7d 29 7d 65 6c 73 65 20 61 28 74 2c 6e 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d Data Ascii: se"usp":e=new(l.getModule(34));break;case"custom":e=new(l.getModule(23))(t.consentMode.conf);break;default:throw new Error("Cannot handle consent type: "+t.consentMode.type)}e.check(function(e){e?a(t,n):s(!1,t,n)})}else a(t,n)},a=function(e,t){if(void 0==
2023-12-05 18:13:30 UTC	1293	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2c 6f 3d 6e 2e 6c 6f 63 61 74 69 6f 6e 2c 72 3d 6f 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 3b 69 66 28 6e 2e 62 6f 64 79 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 30 2c 73 3d 74 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 63 3d 73 5b 61 5d 3b 69 7c 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 63 29 7d 76 61 72 20 64 3d 6f 26 26 6f 2e 73 65 61 72 63 68 26 26 2d 31 21 3d 3d 6f 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 22 62 6d 5f 64 22 29 2c 75 3d 72 26 26 30 3c 72 2e 6c 65 6e 67 74 68 3f 72 3a 5b 6f 2e 68 72 65 66 5d 2c 6c 3d 75 5b 75 2e 6c 65 6e 67 74 68 2d 31 5d 2c 70 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 70 2e 68 72 Data Ascii: unction(e,t){var n=document,o=n.location,r=o.ancestorOrigins;if(n.body){for(var i=0,a=0,s=t;a<s.length;a++){var c=s[a];i\|=Math.pow(2,c)}var d=o&&o.search&&-1!==o.search.indexOf("bm_d"),u=r&&0<r.length?r:[o.href],l=u[u.length-1],p=n.createElement("a");p.hr
2023-12-05 18:13:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49848	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1318	OUT	GET /activityi;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	1289	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49854	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1305	OUT	GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	2353	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49857	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1639	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 11049 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:30 UTC	11049	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 31 4c 65 77 58 4a 41 62 58 63 49 32 62 31 53 68 38 77 66 4e 37 44 6c 4e 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 30 38 31 36 31 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"1LewXJAbXcI2b1Sh8wfN7DlN","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800008161,"data":{"event":"impression
2023-12-05 18:13:30 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:30 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49855	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	644	OUT	GET /track/pxl/?adv=bomn82o&ct=0:s2f54xh&fmt=3&ttl=43200&gtmcb=603893681 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	689	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4d 32 45 33 4e 44 4e 69 5a 57 59 74 4e 6a 5a 6c 5a 53 30 30 59 57 59 7a 4c 57 45 77 5a 57 45 74 59 54 51 32 4d 7a 52 68 4e 6a 4e 69 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:30 GMTContent-Length: 0Connection: closeserver: Kestrellocation: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=M2E3NDNiZWYtNjZlZS00YWYzLWEwZWEtYTQ2MzRhNjNi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49853	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	530	OUT	GET /analytics/show-ads.js HTTP/1.1 Host: a1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	1107	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 65 45 45 64 76 4e 78 72 7a 45 68 35 68 66 63 47 4d 57 4f 61 71 33 48 49 4e 71 37 5a 68 41 79 43 35 51 47 52 4e 42 51 64 55 4b 53 76 64 36 74 4d 4d 57 41 71 63 5a 58 31 32 4a 58 69 58 32 70 45 52 56 47 33 76 63 4d 54 6a 64 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 34 30 32 31 35 38 34 31 38 35 32 33 36 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 45X-GUploader-UploadID: ABPtcPpeEEdvNxrzEh5hfcGMWOaq3HINq7ZhAyC5QGRNBQdUKSvd6tMMWAqcZX12JXiX2pERVG3vcMTjdAx-goog-generation: 1640215841852360x-goog-metageneration: 1x-goog-stored-content-encoding
2023-12-05 18:13:30 UTC	45	IN	Data Raw: 2f 2f 73 68 6f 77 2d 61 64 73 2e 6a 73 0a 77 69 6e 64 6f 77 2e 61 64 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 20 3d 20 66 61 6c 73 65 3b Data Ascii: //show-ads.jswindow.adBlockDetected = false;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49791	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	462	OUT	GET /images/2023/12/05/world/middleeast/Khan-Younis-Hospital/Khan-Younis-Hospital-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	1210	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 34 36 33 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 50 4f 6d 37 4f 66 65 52 63 68 59 46 52 57 6f 54 39 50 7a 58 46 31 57 51 2b 61 61 36 57 42 47 4b 31 36 6b 36 2b 77 77 72 2b 2b 4d 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 31 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 74638Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "POm7OfeRchYFRWoT9PzXF1WQ+aa6WBGK16k6+wwr++M"Expires: Tue, 05 Dec 2023 11:
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: 7d 41 81 bd 40 19 2e 05 c1 60 c0 59 74 9e 03 05 30 18 0b 2e d3 c7 01 8e 0a 60 0b a5 47 00 5b 02 e0 82 38 0c 16 c0 60 ba 19 f0 2b 46 8c 0a d1 91 95 a2 6d 1a b0 4d a3 23 1b 44 da 35 34 4d a3 35 a6 56 89 b4 6a 68 56 88 32 e0 cb 75 95 d4 f1 39 77 3a 0d 19 75 7d 13 59 ac 55 d9 54 72 8c 0c be f3 57 d4 65 75 4f d4 4d 7b 31 d4 d3 f8 4a 3f 67 35 d0 5c c9 8e df 60 77 55 f7 a0 56 c3 ef 47 9f d7 68 fc 25 2d f7 1e 5e 6e c4 e5 89 b3 5d 3f b1 f4 8d f0 fb e2 4f 7c 3e f8 9f 37 f1 ad 5e b6 37 bc df f7 b1 d1 6b 36 c7 d1 1c a1 f7 21 77 47 ee 47 cf d6 a6 ff 00 fd ac a5 7a 9b dc e3 99 b2 74 54 dc 7b 86 e3 f7 01 cd a3 76 22 6e 18 f1 e5 96 f5 13 2c a6 30 c0 d0 b9 0c 9b 9c 19 d9 e1 9f 77 11 81 46 01 ec 66 7b b8 80 0c 06 0b 3d 3f 27 d1 ee 62 8d cb 7c 30 71 6e d0 5a f7 6c 91 e8 b0 Data Ascii: }A@.`Yt0.`G[8`+FmM#D54M5VjhV2u9w:u}YUTrWeuOM{1J?g5\`wUVGh%-^n]?O\|>7^7k6!wGGztT{v"n,0wFf{=?'b\|0qnZl
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: ad ef db c2 3d a3 66 66 5b ad 1b 27 2f ab 5b 6d 7a 59 4e a8 e5 a3 55 93 c1 96 7a 9a e7 5c a1 3f 99 8c fc 2e 1e 5f 2d d5 fb 43 6f c1 64 b0 cc 6f 5f 2d 9b d4 b2 8a 75 de 8f e2 6a a5 e1 c7 87 22 75 68 25 5d 5b 27 f2 3c b7 19 a7 d1 c6 f6 73 ec eb 3b 37 3d ac 8d 7d 7e cb 1e 05 d5 68 33 bb 11 38 be e3 6c 27 c1 8d 4a bb b1 ea ab d7 c6 c5 cc 4d 1b e2 fb 1c 3d 2e 96 c6 a2 76 ab a3 0b 26 2f 94 dd 4f 51 57 8b 5c 91 cd d2 68 fc d9 9c 7b 1d a7 b5 13 84 e2 e7 2c 16 5b a6 75 37 19 e7 6c 6b ee 6a d3 fe 2b af 11 ee 0f 4d 1b 0e e7 45 d2 4b de 63 c6 52 2e 36 dc e7 75 e6 92 71 de ce f6 8f a5 78 6a bb 37 72 8e c3 2d 98 a5 82 2d e4 fb 3c 36 f4 bf 19 eb 78 ef 5d b1 cf d7 ed 75 e1 fd c7 9b d5 f4 bc c3 c4 af b9 e9 b5 9f 01 85 ea ea 85 78 f9 9e 6f 55 86 57 e1 f5 7f 87 e6 c7 19 ac Data Ascii: =ff['/[mzYNUz\?._-Codo_-uj"uh%]['<s;7=}~h38l'JM=.v&/OQW\h{,[u7lkj+MEKcR.6uqxj7r--<6x]uxoUW
2023-12-05 18:13:30 UTC	16384	IN	Data Raw: ed 8c d6 82 e4 51 85 3a 30 0c f3 91 62 33 97 06 91 16 c5 18 0c b4 5c 0c 90 02 40 59 14 c9 14 8b 22 86 00 5b 86 20 51 bc a0 28 07 98 6c cb 21 93 56 97 a7 6b 35 8e 2a ba 9e 3e a2 d9 f2 27 09 64 f4 dd 13 4d 6d 96 e7 63 d8 74 34 1e cc 51 43 8c f5 12 dd 3f a1 e9 1f 85 a6 ab 88 a5 fa 23 cd c9 71 d8 57 09 63 0e 5c 22 6d d5 0e dd cc fe 3d 96 7a 70 80 e1 ae e0 9f 2c 8c e8 8b 2c 90 d8 1a 1c ff 00 75 c3 e2 6c a7 87 a9 f9 5a cd 83 10 73 f6 6b 17 6b 58 af df be f3 73 42 9a 1c ff 00 f5 df 70 ad 6b 9f 79 e0 e9 67 82 33 9c 80 e7 fb a5 ef f3 2e 63 2d 15 4b e3 93 66 87 61 17 61 74 19 69 a8 5e 92 8a 15 2e d1 46 5f 10 57 6c 86 9a 74 37 44 5c 9c ff 00 16 45 21 32 0d 99 0c 91 4c 6c 94 36 43 22 e4 0a 2d 91 93 89 9f 20 98 1a b2 34 27 83 2e 46 de 4d a3 76 40 8c 26 59 00 34 45 c3 Data Ascii: Q:0b3\@Y"[ Q(l!Vk5*>'dMmct4QC?#qWc\"m=zp,,ulZskkXsBpkyg3.c-Kfaati^.F_Wlt7D\E!2Ll6C"- 4'.FMv@&Y4E
2023-12-05 18:13:30 UTC	9102	IN	Data Raw: bd 18 70 c9 23 54 23 44 3e 08 25 fd 86 b2 ba ac 5e 78 26 67 1a 13 3c fe ee 5f 6e dd 18 fd 38 3d 47 a2 c6 7b 9d 5c 1e 66 ed 1d b4 3c 4e 27 d2 37 64 c3 ab d2 42 d8 cb ca 7a 38 b9 ae e4 ae 79 f1 cd 76 8f 9d ec c0 29 ca 1c a9 1d 0d 66 96 ca a5 2f a1 cb 6c f6 4d 67 8b cb bb 8d 76 b4 3d 56 c5 64 61 39 70 7b 0a ee 8b 84 5a 91 f3 1f 51 e8 3a 6f 50 d8 fc 39 f6 f9 1e 7e 5e 29 3e 1e 8e 2e 5e f1 ea 2c 9c f2 4d 6e f9 8a ac 8b e7 71 39 d8 79 ba 6c 7a 3a a2 ce e8 a5 83 2b 9e 48 b9 f2 2e f0 cd ad 09 f0 46 cb 08 bb a2 91 86 dd 4e 7b 1d 66 35 ce e7 22 9a 8d 64 6b 8c be a6 3a 35 9b fb 9c fd 44 f2 cc f0 b7 63 3a 63 8c 95 e7 cf 3b 5e 8a 7b 5a e0 e6 ce 1c 85 57 e4 b3 da ce ae 3b 61 9c 4c ad 72 6e b1 19 58 52 ae e5 9f 63 3a 28 a5 94 11 19 f7 00 68 54 10 0b 81 86 db 93 4c a6 52 Data Ascii: p#T#D>%^x&g<_n8=G{\f<N'7dBz8yv)f/lMgv=Vda9p{ZQ:oP9~^)>.^,Mnq9ylz:+H.FN{f5"dk:5Dc:c;^{ZW;aLrnXRc:(hTLR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49859	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1904	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 2777 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:30 UTC	2777	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 20 20 71 75 65 72 79 20 67 65 74 4f 66 66 65 72 28 24 62 61 73 69 63 49 64 3a 20 53 74 72 69 6e 67 21 2c 20 24 63 6f 75 6e 74 72 79 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 62 61 73 69 63 3a 6f 66 66 65 72 28 69 64 3a 20 24 62 61 73 69 63 49 64 2c 20 63 6f 75 6e 74 72 79 3a 20 24 63 6f 75 6e 74 72 79 29 20 7b 5c 6e 20 20 20 20 20 20 6f 66 66 65 72 49 44 5c 6e 20 20 20 20 20 20 62 75 6e 64 6c 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 5c 6e 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 46 72 65 71 75 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 61 6e 63 65 6c 6c 61 Data Ascii: {"query":"\n query getOffer($basicId: String!, $country: String!) {\n \n basic:offer(id: $basicId, country: $country) {\n offerID\n bundle\n subscriptionName\n subscriptionValueMessage\n billingFrequency\n cancella
2023-12-05 18:13:30 UTC	1366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 34 34 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3944access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:13:30 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 62 61 73 69 63 22 3a 7b 22 6f 66 66 65 72 49 44 22 3a 22 61 65 36 36 36 62 64 35 2d 61 61 30 36 2d 31 31 65 63 2d 38 34 63 39 2d 32 32 37 35 34 33 61 63 65 37 36 35 22 2c 22 62 75 6e 64 6c 65 22 3a 22 41 44 41 5f 6e 6f 5f 73 68 61 72 65 73 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 22 3a 22 41 6c 6c 20 41 63 63 65 73 73 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 22 3a 22 55 6e 6c 69 6d 69 74 65 64 20 64 69 67 69 74 61 6c 20 61 63 63 65 73 73 20 74 6f 20 65 76 65 72 79 74 68 69 6e 67 20 77 65 20 68 61 76 65 20 74 6f 20 6f 66 66 65 72 20 2d 20 4e 65 77 73 2c 20 70 6c 75 73 20 47 61 6d 65 73 2c 20 43 6f 6f 6b 69 6e 67 2c 20 57 69 72 65 63 75 74 74 65 72 20 61 6e 64 20 54 68 65 Data Ascii: {"data":{"basic":{"offerID":"ae666bd5-aa06-11ec-84c9-227543ace765","bundle":"ADA_no_shares","subscriptionName":"All Access","subscriptionValueMessage":"Unlimited digital access to everything we have to offer - News, plus Games, Cooking, Wirecutter and The
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 20 77 65 65 6b 73 20 66 6f 72 20 36 20 6d 6f 6e 74 68 73 2c 20 61 6e 64 20 61 66 74 65 72 20 36 20 6d 6f 6e 74 68 73 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 72 61 74 65 20 6f 66 20 24 32 35 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 2e 22 2c 22 59 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 75 6e 74 69 6c 20 79 6f 75 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 31 31 35 30 31 34 38 39 33 39 36 38 2d 54 65 72 6d 73 2d 6f 66 2d 73 61 6c 65 23 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 63 61 6e 63 65 6c 3c 2f 61 3e 2e 22 2c 22 43 Data Ascii: weeks for 6 months, and after 6 months the standard rate of $25.00 every 4 weeks.","Your subscription will continue until you <a href=\"https://help.nytimes.com/hc/en-us/articles/115014893968-Terms-of-sale#cancellation\" target=\"_blank\">cancel</a>.","C
2023-12-05 18:13:30 UTC	1186	IN	Data Raw: 72 69 63 65 4d 6f 6e 74 68 6c 79 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 57 65 65 6b 6c 79 53 68 6f 72 74 22 3a 22 24 31 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 57 Data Ascii: riceMonthly":"$4.00","promoPriceMonthlyNoCountryAbbreviation":"$4.00","promoPriceAnnual":"$52.00","promoPriceAnnualNoCountryAbbreviation":"$52.00","promoPriceShort":"$4","promoPriceShortNoCountryAbbreviation":"$4","promoPriceWeeklyShort":"$1","promoPriceW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49852	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	540	OUT	GET /analytics/comscore-streaming.js HTTP/1.1 Host: a1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	1115	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 35 36 37 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 46 52 6a 72 55 6b 37 65 54 32 47 77 70 77 41 65 53 44 62 44 47 61 31 48 59 68 48 31 49 30 75 32 42 5f 76 55 4d 31 4b 6f 33 64 30 57 34 70 32 32 30 74 77 32 74 4b 31 65 58 5a 62 6c 58 67 6d 45 47 36 39 71 4a 73 75 32 7a 5a 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 34 30 32 31 35 38 34 31 39 30 32 38 35 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 105675X-GUploader-UploadID: ABPtcPqFRjrUk7eT2GwpwAeSDbDGa1HYhH1I0u2B_vUM1Ko3d0W4p220tw2tK1eXZblXgmEG69qJsu2zZQx-goog-generation: 1640215841902856x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 28 62 28 61 2e 6e 73 5f 3d 61 2e 6e 73 5f 7c 7c 7b 7d 29 2c 64 65 66 69 6e 65 28 27 6e 79 74 5f 63 6f 6d 73 63 6f 72 65 5f 73 74 72 65 61 6d 69 6e 67 27 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 6e 73 5f 7d 29 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 7b 7d 29 3a 62 28 61 2e 6e 73 5f 3d 61 2e 6e 73 5f 7c 7c 7b 7d 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 Data Ascii: !function(a,b){"use strict";"function"==typeof define&&define.amd?(b(a.ns_=a.ns_\|\|{}),define('nyt_comscore_streaming',[],function(){return a.ns_})):"object"==typeof module&&module.exports?module.exports=b({}):b(a.ns_=a.ns_\|\|{})}(this,function(a){"use stri
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 72 28 76 61 72 20 65 20 69 6e 20 62 29 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 28 61 5b 65 5d 3d 62 5b 65 5d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 62 3d 62 7c 7c 7b 7d 3b 62 2e 63 6c 6f 6e 65 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 62 3f 28 61 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2c 6e 65 77 20 61 29 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 Data Ascii: r(var e in b)b.hasOwnProperty(e)&&(a[e]=b[e]);return a};var b=b\|\|{};b.cloneObject=function(a){if(null==a\|\|"object"!=typeof a)return a;var b=function(){function a(){}function b(b){return"object"==typeof b?(a.prototype=b,new a):b}function c(a){for(var b in
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 65 70 74 68 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 61 78 69 6d 75 6d 20 72 65 63 75 72 73 69 6f 6e 20 64 65 70 74 68 20 65 78 63 65 65 64 65 64 2e 22 29 3b 72 65 74 75 72 6e 20 61 2e 70 6f 70 75 6c 61 74 65 28 74 68 69 73 2e 72 65 63 75 72 73 69 76 65 44 65 65 70 43 6f 70 79 2c 62 2c 63 29 2c 74 68 69 73 2e 64 65 70 74 68 2d 2d 2c 63 7d 7d 2c 65 2e 44 65 65 70 43 6f 70 69 65 72 3d 63 2c 65 2e 64 65 65 70 43 6f 70 69 65 72 73 3d 67 2c 65 2e 72 65 67 69 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 7c 7c 28 61 3d 6e 65 77 20 63 28 61 29 29 2c 67 2e 75 6e 73 68 69 66 74 28 61 29 7d 2c 65 2e 72 65 67 69 73 74 65 72 28 7b 63 61 6e 43 6f 70 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: epth)throw new Error("Maximum recursion depth exceeded.");return a.populate(this.recursiveDeepCopy,b,c),this.depth--,c}},e.DeepCopier=c,e.deepCopiers=g,e.register=function(a){a instanceof c\|\|(a=new c(a)),g.unshift(a)},e.register({canCopy:function(){return
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3d 74 68 69 73 2e 65 78 69 73 74 73 28 62 29 3f 62 3a 22 22 2c 74 68 69 73 2e 65 78 69 73 74 73 28 61 29 3f 61 3a 62 7d 2c 62 2e 69 73 54 72 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 28 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 74 72 75 65 22 3d 3d 3d 61 7c 7c 22 31 22 3d 3d 3d 61 7c 7c 22 6f 6e 22 3d 3d 3d 61 29 3a 21 21 61 29 7d 2c 62 2e 72 65 67 69 6f 6e 4d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 62 3c 30 7c 7c 64 3c 30 7c 7c 62 2b 65 3e 61 2e 6c 65 6e 67 74 68 7c 7c 64 2b 65 3e Data Ascii: unction(a,b){return b=this.exists(b)?b:"",this.exists(a)?a:b},b.isTrue=function(a){return"undefined"!=typeof a&&("string"==typeof a?(a=a.toLowerCase(),"true"===a\|\|"1"===a\|\|"on"===a):!!a)},b.regionMatches=function(a,b,c,d,e){if(b<0\|\|d<0\|\|b+e>a.length\|\|d+e>
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 6b 69 74 48 69 64 64 65 6e 22 2c 62 3d 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 63 3d 22 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 29 3b 76 61 72 20 64 3d 7b 68 69 64 64 65 6e 3a 61 2c 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3a 62 2c 73 74 61 74 65 3a 63 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 28 29 2c 62 2e 69 73 54 61 62 49 6e 42 61 63 6b 67 72 6f 75 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 62 2e 67 65 74 50 61 67 65 56 69 73 69 62 69 6c 69 74 79 41 50 49 28 29 3b 72 65 74 75 72 6e 20 66 75 Data Ascii: kitHidden",b="webkitvisibilitychange",c="webkitVisibilityState");var d={hidden:a,visibilityChange:b,state:c};return function(){return d}}(),b.isTabInBackground=function(){if("undefined"==typeof document)return null;var a=b.getPageVisibilityAPI();return fu
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 62 3d 65 2e 69 6e 64 65 78 4f 66 28 22 56 65 72 73 69 6f 6e 22 29 29 21 3d 2d 31 26 26 28 67 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 62 2b 38 29 29 29 3a 28 62 3d 65 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 29 21 3d 2d 31 3f 67 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 62 2b 38 29 3a 22 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 3d 3d 66 3f 28 64 3d 6e 65 77 20 52 65 67 45 78 70 28 22 4d 53 49 45 20 28 5b 30 2d 39 5d 7b 31 2c 7d 5b 2e 30 2d 39 5d 7b 30 2c 7d 29 22 29 2c 6e 75 6c 6c 21 3d 64 2e 65 78 65 63 28 65 29 26 26 28 67 3d 70 61 72 73 65 46 6c 6f 61 74 28 52 65 67 45 78 70 2e 24 31 29 29 29 3a 22 4e 65 74 73 63 61 70 65 22 3d 3d 66 3f 28 64 3d 6e 65 77 20 52 65 67 45 78 70 28 22 54 72 69 64 65 6e Data Ascii: b=e.indexOf("Version"))!=-1&&(g=e.substring(b+8))):(b=e.indexOf("Firefox"))!=-1?g=e.substring(b+8):"Microsoft Internet Explorer"==f?(d=new RegExp("MSIE ([0-9]{1,}[.0-9]{0,})"),null!=d.exec(e)&&(g=parseFloat(RegExp.$1))):"Netscape"==f?(d=new RegExp("Triden
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 64 65 5b 62 5d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 64 2e 74 65 73 74 28 65 29 29 7b 66 3d 21 30 3b 62 72 65 61 6b 7d 69 66 28 63 2e 73 68 6f 77 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 66 6f 72 28 62 3d 30 3b 62 3c 63 2e 73 68 6f 77 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 69 66 28 64 3d 63 2e 73 68 6f 77 5b 62 5d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 64 2e 74 65 73 74 28 65 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 66 26 26 21 63 2e 73 68 6f 77 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 66 28 62 29 7b 76 61 72 20 64 3d 69 2e 6c 65 6e 67 74 68 3b 28 64 3e 61 7c 7c 63 26 26 63 2e 6d 61 78 26 26 64 3e 63 2e 6d 61 78 29 26 26 28 69 3d 69 2e 73 6c 69 63 65 28 2d 4d 61 Data Ascii: de[b],d instanceof RegExp&&d.test(e)){f=!0;break}if(c.show instanceof Array)for(b=0;b<c.show.length;++b)if(d=c.show[b],d instanceof RegExp&&d.test(e))return!0;return!f&&!c.show}return!0}function f(b){var d=i.length;(d>a\|\|c&&c.max&&d>c.max)&&(i=i.slice(-Ma
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 3a 6e 75 6c 6c 3b 62 2e 65 78 74 65 6e 64 28 74 68 69 73 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 63 26 26 63 2e 67 65 74 49 74 65 6d 28 61 2b 62 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 63 26 26 63 2e 73 65 74 49 74 65 6d 28 61 2b 62 2c 64 29 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 63 26 26 63 2e 67 65 74 49 74 65 6d 28 61 2b 62 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 63 26 26 63 2e 72 65 6d 6f 76 65 49 74 65 6d 28 61 2b 62 29 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 63 26 26 62 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 64 3d 63 2e 6b 65 79 28 62 29 3b 64 2e 73 75 62 73 74 Data Ascii: :null;b.extend(this,{get:function(b){return c&&c.getItem(a+b)},set:function(b,d){c&&c.setItem(a+b,d)},has:function(b){return c&&c.getItem(a+b)},remove:function(b){c&&c.removeItem(a+b)},clear:function(){for(var b=0;c&&b<c.length;++b){var d=c.key(b);d.subst
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 55 4e 4b 4e 4f 57 4e 5f 52 45 53 4f 4c 55 54 49 4f 4e 7d 2c 67 65 74 41 70 70 6c 69 63 61 74 69 6f 6e 52 65 73 6f 6c 75 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 55 4e 4b 4e 4f 57 4e 5f 52 45 53 4f 4c 55 54 49 4f 4e 7d 2c 67 65 74 4c 61 6e 67 75 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 2e 55 4e 4b 4e 4f 57 4e 5f 56 41 4c 55 45 7d 2c 67 65 74 50 61 63 6b 61 67 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 69 73 43 6f 6e 6e 65 63 74 69 6f 6e 41 76 61 69 6c 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 69 73 43 6f 6d 70 61 74 69 62 6c 65 3a 66 75 6e 63 Data Ascii: ion:function(){return h.UNKNOWN_RESOLUTION},getApplicationResolution:function(){return h.UNKNOWN_RESOLUTION},getLanguage:function(){return h.UNKNOWN_VALUE},getPackageName:function(){return null},isConnectionAvailable:function(){return!0},isCompatible:func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49860	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1904	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 2817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:30 UTC	2817	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 20 20 71 75 65 72 79 20 67 65 74 4f 66 66 65 72 28 24 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 49 64 3a 20 53 74 72 69 6e 67 21 2c 20 24 63 6f 75 6e 74 72 79 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 3a 6f 66 66 65 72 28 69 64 3a 20 24 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 49 64 2c 20 63 6f 75 6e 74 72 79 3a 20 24 63 6f 75 6e 74 72 79 29 20 7b 5c 6e 20 20 20 20 20 20 6f 66 66 65 72 49 44 5c 6e 20 20 20 20 20 20 62 75 6e 64 6c 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 5c 6e 20 20 20 20 20 20 62 69 Data Ascii: {"query":"\n query getOffer($newsAcquisitionId: String!, $country: String!) {\n \n newsAcquisition:offer(id: $newsAcquisitionId, country: $country) {\n offerID\n bundle\n subscriptionName\n subscriptionValueMessage\n bi
2023-12-05 18:13:30 UTC	1366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 35 34 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3954access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:13:30 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 22 3a 7b 22 6f 66 66 65 72 49 44 22 3a 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 22 2c 22 62 75 6e 64 6c 65 22 3a 22 58 50 41 53 53 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 73 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 22 3a 22 41 63 63 65 73 73 20 74 6f 20 72 65 70 6f 72 74 69 6e 67 2c 20 69 6e 76 65 73 74 69 67 61 74 69 6f 6e 20 61 6e 64 20 61 6e 61 6c 79 73 69 73 2c 20 6f 6e 6c 69 6e 65 20 61 6e 64 20 69 6e 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 61 70 70 2e 22 2c 22 62 69 6c 6c 69 6e 67 46 72 65 71 75 65 6e 63 79 22 3a Data Ascii: {"data":{"newsAcquisition":{"offerID":"0fd8cf46-d029-11ea-a072-340cee6a52b6","bundle":"XPASS","subscriptionName":"News","subscriptionValueMessage":"Access to reporting, investigation and analysis, online and in The New York Times app.","billingFrequency":
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 66 20 24 34 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 20 66 6f 72 20 31 20 79 65 61 72 2c 20 61 6e 64 20 61 66 74 65 72 20 31 20 79 65 61 72 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 72 61 74 65 20 6f 66 20 24 31 37 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 2e 22 2c 22 59 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 75 6e 74 69 6c 20 79 6f 75 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 31 31 35 30 31 34 38 39 33 39 36 38 2d 54 65 72 6d 73 2d 6f 66 2d 73 61 6c 65 23 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 63 61 6e 63 Data Ascii: f $4.00 every 4 weeks for 1 year, and after 1 year the standard rate of $17.00 every 4 weeks.","Your subscription will continue until you <a href=\"https://help.nytimes.com/hc/en-us/articles/115014893968-Terms-of-sale#cancellation\" target=\"_blank\">canc
2023-12-05 18:13:30 UTC	1196	IN	Data Raw: 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 57 65 65 6b 6c 79 53 68 6f 72 74 22 3a 22 24 31 22 2c 22 70 Data Ascii: 0","promoPriceMonthly":"$4.00","promoPriceMonthlyNoCountryAbbreviation":"$4.00","promoPriceAnnual":"$52.00","promoPriceAnnualNoCountryAbbreviation":"$52.00","promoPriceShort":"$4","promoPriceShortNoCountryAbbreviation":"$4","promoPriceWeeklyShort":"$1","p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49858	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	596	OUT	GET /video/2023/12/05/113942_1_05vid-Southern-Gaza_wg_1080p.vtt HTTP/1.1 Host: vp.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: track Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 30 20 47 4d 54 0d 0a 41 67 65 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 0Server: nginxContent-Type: application/octet-streamVia: 1.1 google, 1.1 varnish, 1.1 varnishAccept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:30 GMTAge: 0Strict-Transport-Security: m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49862	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	616	OUT	POST /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive Content-Length: 4092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	4092	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 6f 70 74 73 25 32 32 25 33 41 25 32 32 65 6e 64 70 6f 69 6e 74 25 32 32 25 32 43 25 32 32 74 74 73 74 25 32 32 25 33 41 31 35 2e 37 30 30 30 30 30 30 30 30 30 34 30 37 34 35 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 68 63 25 32 32 25 33 41 34 25 32 43 25 32 32 62 72 5f 6f 68 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 62 72 5f 6f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 75 61 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 Data Ascii: jsData=%7B%22opts%22%3A%22endpoint%22%2C%22ttst%22%3A15.700000000040745%2C%22ifov%22%3Afalse%2C%22hc%22%3A4%2C%22br_oh%22%3A984%2C%22br_ow%22%3A1280%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%
2023-12-05 18:13:30 UTC	544	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 44 61 74 61 44 6f 6d 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json;charset=utf-8Content-Length: 235Connection: closeDate: Tue, 05 Dec 2023 18:13:30 GMTServer: DataDomeAccess-Control-Allow-Origin: *Pragma: no-cacheCache-Control: no-cache, no-store, must-revalid
2023-12-05 18:13:30 UTC	235	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 70 74 37 49 58 31 6c 75 5f 62 5a 77 34 4e 72 55 5f 5a 71 56 4a 6a 58 64 66 4a 68 78 78 55 55 6a 72 35 73 30 6d 37 44 5f 35 76 64 67 75 6d 48 58 73 52 30 6e 6b 4d 6c 30 38 45 54 32 36 77 76 64 49 68 76 70 4d 4a 51 5f 4c 77 70 5a 6c 48 74 52 62 61 7a 5a 50 45 48 38 44 62 49 46 32 38 77 65 4b 41 6e 36 36 52 7e 46 5a 5f 4d 45 4e 56 33 44 4b 55 4e 4c 42 38 5f 31 61 4f 65 51 6f 34 45 32 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; Max-Age=31536000; Domain=www.nytimes.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49861	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1191	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:30 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:30 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49865	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	585	OUT	GET /video-static/vhs3/vhs-plugin-nyt-analytics-3c88df1299a47b81a5f9.min.js HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	1090	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 31 31 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 46 72 57 34 4e 43 67 47 76 4a 33 75 30 53 4e 5a 51 30 4e 30 6d 69 67 56 77 73 73 4d 46 5a 59 56 45 45 77 5a 32 75 38 72 76 6e 2d 6f 6f 48 4f 32 44 46 32 79 63 32 35 62 5a 66 76 51 34 61 61 74 61 41 4f 33 63 39 31 44 2d 59 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 36 30 2c 73 2d 6d 61 78 61 67 65 3d 36 30 34 38 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 30 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 32 39 3a 34 30 20 47 4d 54 0d 0a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 27115X-GUploader-UploadID: ABPtcPqFrW4NCgGvJ3u0SNZQ0N0migVwssMFZYVEEwZ2u8rvn-ooHO2DF2yc25bZfvQ4aataAO3c91D-YgCache-Control: public,max-age=60,s-maxage=604800Expires: Mon, 20 Nov 2023 06:29:40 GMT
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 56 48 53 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 56 48 53 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 5d 2c 7b 33 36 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 3b 76 61 72 20 61 3d 69 28 32 29 2c 73 3d 69 28 35 37 29 2c 72 3d 69 28 31 31 30 29 2c 6e 3d 69 28 34 29 2c 6f 3d 69 28 38 29 3b 76 61 72 20 6c 3d 28 65 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 29 29 3d 3e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 2f 6e 79 74 69 6f 73 2f 69 2e 74 65 73 74 28 65 29 2c 64 3d 69 28 31 30 38 29 2c 75 3d 69 28 33 29 2c 68 3d 69 2e 6e 28 75 29 2c 70 3d 69 28 31 31 32 29 2c 76 3d 69 2e 6e 28 70 29 2c 6d 3d 69 28 Data Ascii: (window.webpackJsonpVHS=window.webpackJsonpVHS\|\|[]).push([[6],{367:function(e,t,i){"use strict";i.r(t);var a=i(2),s=i(57),r=i(110),n=i(4),o=i(8);var l=(e=Object(o.a)())=>"string"==typeof e&&/nytios/i.test(e),d=i(108),u=i(3),h=i.n(u),p=i(112),v=i.n(p),m=i(
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 2e 77 68 65 6e 65 76 65 72 28 22 70 6c 61 79 65 72 2e 69 73 41 64 41 63 74 69 76 65 22 2c 21 30 2c 28 29 3d 3e 7b 74 68 69 73 2e 73 74 61 74 65 2e 74 69 6d 65 54 6f 50 6c 61 79 53 74 61 72 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 74 61 74 65 2e 74 69 6d 65 54 6f 50 6c 61 79 45 6e 64 3d 6e 75 6c 6c 7d 29 2c 74 68 69 73 2e 73 74 6f 72 65 2e 77 68 65 6e 65 76 65 72 28 22 70 6c 61 79 65 72 2e 69 73 41 64 41 63 74 69 76 65 22 2c 21 31 2c 28 29 3d 3e 7b 74 68 69 73 2e 73 74 61 74 65 2e 74 69 6d 65 54 6f 50 6c 61 79 53 74 61 72 74 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 29 2c 74 68 69 73 2e 73 74 6f 72 65 2e 77 68 65 6e 65 76 65 72 28 22 70 6c 61 79 65 72 2e 69 73 4d 65 64 69 61 50 6c 61 79 69 6e 67 22 2c 21 30 2c 28 29 3d 3e 7b 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 Data Ascii: .whenever("player.isAdActive",!0,()=>{this.state.timeToPlayStart=null,this.state.timeToPlayEnd=null}),this.store.whenever("player.isAdActive",!1,()=>{this.state.timeToPlayStart=Date.now()}),this.store.whenever("player.isMediaPlaying",!0,()=>{this.store.ge
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 76 6f 69 64 20 30 3d 3d 3d 65 5b 74 5d 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 2c 65 7d 67 65 74 43 6f 6d 70 6c 65 74 65 42 61 74 63 68 28 29 7b 63 6f 6e 73 74 20 65 3d 7b 2e 2e 2e 74 68 69 73 2e 67 65 74 44 65 66 61 75 6c 74 42 61 74 63 68 28 29 2c 61 73 70 65 63 74 5f 72 61 74 69 6f 3a 74 68 69 73 2e 67 65 74 41 73 70 65 63 74 52 61 74 69 6f 28 29 2c 61 75 74 6f 70 6c 61 79 3a 74 68 69 73 2e 67 65 74 41 75 74 6f 70 6c 61 79 28 29 2c 63 72 65 61 74 69 6f 6e 5f 74 79 70 65 3a 74 68 69 73 2e 67 65 74 43 72 65 61 74 69 6f 6e 54 79 70 65 28 29 2c 64 75 72 61 74 69 6f 6e 3a 74 68 69 73 2e 67 65 74 44 75 72 61 74 69 6f 6e 28 29 2c 68 65 61 64 6c 69 6e 65 3a 74 Data Ascii: turn Object.keys(e).forEach(t=>{void 0===e[t]&&delete e[t]}),e}getCompleteBatch(){const e={...this.getDefaultBatch(),aspect_ratio:this.getAspectRatio(),autoplay:this.getAutoplay(),creation_type:this.getCreationType(),duration:this.getDuration(),headline:t
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 7d 67 65 74 50 6c 61 79 65 72 54 79 70 65 28 29 7b 63 6f 6e 73 74 20 65 3d 68 2e 61 2e 71 75 65 72 79 28 27 6d 65 74 61 5b 6e 61 6d 65 3d 22 50 54 22 5d 27 29 2c 74 3d 68 2e 61 2e 71 75 65 72 79 28 27 6d 65 74 61 5b 6e 61 6d 65 3d 22 50 53 54 22 5d 27 29 2c 69 3d 68 2e 61 2e 71 75 65 72 79 28 27 6d 65 74 61 5b 6e 61 6d 65 3d 22 73 6c 75 67 22 5d 27 29 2c 61 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 74 65 6e 74 29 7c 7c 22 22 2c 73 3d 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 6f 6e 74 65 6e 74 29 7c 7c 22 22 2c 72 3d 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 63 6f 6e 74 65 6e 74 29 7c 7c 22 22 2c 6e 3d 61 26 26 73 3f 60 24 7b 61 2e 74 6f 4c 6f 77 65 72 43 61 Data Ascii: catch(e){return}}getPlayerType(){const e=h.a.query('meta[name="PT"]'),t=h.a.query('meta[name="PST"]'),i=h.a.query('meta[name="slug"]'),a=(null==e?void 0:e.content)\|\|"",s=(null==t?void 0:t.content)\|\|"",r=(null==i?void 0:i.content)\|\|"",n=a&&s?`${a.toLowerCa
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 64 6c 69 6e 65 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 53 74 61 74 65 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 70 6c 61 79 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 2e 6d 65 64 69 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 69 2e 70 6c 61 79 6c 69 73 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 68 65 61 64 6c 69 6e 65 7d 67 65 74 44 65 6c 69 76 65 72 79 4d 65 74 68 6f 64 28 29 7b 76 61 72 20 65 2c 74 2c 69 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 53 74 61 74 Data Ascii: dline(){var e,t,i,a;return null===(e=this.store.getState())\|\|void 0===e\|\|null===(t=e.player)\|\|void 0===t\|\|null===(i=t.media)\|\|void 0===i\|\|null===(a=i.playlist)\|\|void 0===a?void 0:a.headline}getDeliveryMethod(){var e,t,i;return null===(e=this.store.getStat
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 65 3d 74 2e 64 75 72 61 74 69 6f 6e 2c 74 68 69 73 2e 73 74 61 74 65 2e 70 6c 61 79 65 72 4c 6f 61 64 54 69 6d 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 7d 67 65 74 50 6c 61 79 65 72 53 69 7a 65 28 65 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 69 66 28 74 68 69 73 2e 73 74 61 74 65 2e 70 6c 61 79 65 72 53 69 7a 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 70 6c 61 79 65 72 53 69 7a 65 3b 74 72 79 7b 63 6f 6e 73 74 20 74 3d 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 2e 66 69 6c 74 65 72 28 65 3d 3e 2f 28 76 68 73 5c 2e 6a 73 7c 76 68 73 5c 2e 6d 69 6e 5c 2e 6a 73 29 2f 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 29 5b 30 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 70 6c 61 79 65 72 53 69 7a 65 3d 74 Data Ascii: e=t.duration,this.state.playerLoadTime}catch(e){return}}getPlayerSize(e=window.performance){if(this.state.playerSize)return this.state.playerSize;try{const t=e.getEntries().filter(e=>/(vhs\.js\|vhs\.min\.js)/.test(e.name))[0];return this.state.playerSize=t
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 6c 3d 3d 3d 28 69 3d 74 2e 76 69 64 65 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 69 2e 65 72 72 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 6d 65 73 73 61 67 65 7d 67 65 74 49 73 49 6e 76 69 65 77 28 29 7b 76 61 72 20 65 2c 74 2c 69 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 53 74 61 74 65 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 70 6c 75 67 69 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 2e 76 69 65 77 70 6f 72 74 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 73 49 6e Data Ascii: l===(i=t.video)\|\|void 0===i\|\|null===(a=i.error)\|\|void 0===a?void 0:a.message}getIsInview(){var e,t,i;return null===(e=this.store.getState())\|\|void 0===e\|\|null===(t=e.plugins)\|\|void 0===t\|\|null===(i=t.viewportIntersectionObserver)\|\|void 0===i?void 0:i.isIn
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6c 6f 61 64 53 74 61 72 74 54 69 6d 65 73 74 61 6d 70 2c 6e 3d 28 6e 75 6c 6c 3d 3d 73 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 73 2e 70 6c 61 79 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 69 2e 61 64 44 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 6c 6f 61 64 45 6e 64 54 69 6d 65 73 74 61 6d 70 29 2d 72 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3f 76 6f 69 64 20 30 3a 6e 7d 67 65 74 53 65 65 6b 54 69 6d 65 28 29 7b 76 61 72 20 65 2c 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 53 74 61 74 65 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d Data Ascii: )\|\|void 0===t?void 0:t.loadStartTimestamp,n=(null==s\|\|null===(i=s.player)\|\|void 0===i\|\|null===(a=i.adData)\|\|void 0===a?void 0:a.loadEndTimestamp)-r;return isNaN(n)?void 0:n}getSeekTime(){var e,t;return null===(e=this.store.getState())\|\|void 0===e\|\|null===
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 2e 74 79 70 65 2e 41 55 44 49 4f 3f 22 61 75 64 69 6f 2d 63 6f 6d 70 6c 65 74 65 22 3a 22 76 69 64 65 6f 2d 63 6f 6d 70 6c 65 74 65 22 7d 67 65 74 54 72 61 63 6b 69 6e 67 43 6f 6e 66 69 67 28 29 7b 6c 65 74 20 65 3b 73 77 69 74 63 68 28 74 68 69 73 2e 67 65 74 54 79 70 65 28 29 29 7b 63 61 73 65 20 44 2e 74 79 70 65 2e 41 44 3a 65 3d 7b 2e 2e 2e 44 2e 61 64 43 6f 6e 66 69 67 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 44 2e 74 79 70 65 2e 50 41 49 44 5f 50 4f 53 54 3a 65 3d 7b 2e 2e 2e 44 2e 70 61 69 64 50 6f 73 74 43 6f 6e 66 69 67 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 44 2e 74 79 70 65 5b 22 33 36 30 76 69 64 65 6f 22 5d 3a 65 3d 7b 2e 2e 2e 44 2e 76 69 64 65 6f 33 36 30 43 6f 6e 66 69 67 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 44 2e 74 79 70 65 2e 41 55 44 Data Ascii: .type.AUDIO?"audio-complete":"video-complete"}getTrackingConfig(){let e;switch(this.getType()){case D.type.AD:e={...D.adConfig};break;case D.type.PAID_POST:e={...D.paidPostConfig};break;case D.type["360video"]:e={...D.video360Config};break;case D.type.AUD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49864	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1552	OUT	GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=true&us=anon&context-type=&areas=barOne&areas=dock HTTP/1.1 Host: mwcm.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:30 UTC	1122	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 35 39 34 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 16594access-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: h
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 7b 22 62 61 72 4f 6e 65 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 61 70 70 65 6e 64 45 78 69 74 55 72 69 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 61 72 4f 6e 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 62 61 72 4f 6e 65 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 31 34 66 65 65 62 31 64 2d 30 39 34 37 2d 34 38 33 33 2d 61 36 65 35 2d 61 34 65 38 38 64 30 66 62 66 33 33 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 Data Ascii: {"barOne":{"active":true,"appendExitUri":false,"html":"\n\n\n\n \u003cdiv class=\"barOne\" data-config-component-id=\"mkt-wcm:components/metered_assets/barOne/template/main\" data-component-uuid=\"14feeb1d-0947-4833-a6e5-a4e88d0fbf33\"\u003e\n\n\n\u003csc
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 72 4f 6e 65 5c 22 20 73 74 79 6c 65 3d 5c 22 20 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 3f 63 61 6d 70 61 69 67 6e 49 64 3d 39 51 51 39 4b 5c 22 5c 75 30 30 33 65 5c 6e 20 53 55 42 53 43 52 49 42 45 20 46 4f 52 20 24 32 2f 57 45 45 4b 5c 6e 20 5c 75 30 30 33 63 2f 61 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 2f 64 69 76 5c 75 30 30 33 65 5c 6e 5c 6e 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 72 65 61 74 69 76 65 2d 6f 76 65 72 72 69 64 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 70 2f 63 72 65 61 74 69 76 65 4f 76 65 72 72 69 64 65 2f 74 Data Ascii: rOne\" style=\" \" href=\"https://www.nytimes.com/subscription?campaignId=9QQ9K\"\u003e\n SUBSCRIBE FOR $2/WEEK\n \u003c/a\u003e\n\u003c/div\u003e\n\n\u003cdiv class=\"creative-override\" data-config-component-id=\"mkt-wcm:components/lp/creativeOverride/t
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 74 63 68 2e 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 2f 50 6c 61 74 66 6f 72 6d 73 2f 57 65 62 2d 2d 71 75 65 72 79 2d 70 61 72 61 6d 65 74 65 72 2d 5c 22 7d 2c 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 41 20 67 72 6f 75 70 20 6f 66 20 72 65 67 69 73 20 6f 72 20 61 6e 6f 6e 79 6d 6f 75 73 20 75 73 65 72 73 2e 20 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 4a 4b 49 44 44 2f 55 73 65 72 2d 53 74 61 74 75 73 2f 52 65 67 Data Ascii: e \\u0027plat\\u0027 query parameter. The \\u0027plat\\u0027 query parameter is required to match.\",\"path\":\"/QueryParameter/Platforms/Web--query-parameter-\"},{\"description\":\"A group of regis or anonymous users. \",\"path\":\"/JKIDD/User-Status/Reg
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 69 6e 67 54 69 65 72 73 5c 22 3a 7b 5c 22 31 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 33 36 34 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 31 33 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 35 32 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 35 32 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 31 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 31 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 Data Ascii: ingTiers\":{\"1\":{\"durationDays\":364,\"recurrence\":13,\"durationWeeks\":52,\"totalPrice\":52,\"weeklyPrice\":1,\"tierNumber\":1,\"rawPrice\":\"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\"
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 34 2e 32 35 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 32 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 31 37 2e 30 30 5c 22 7d 7d 2c 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 3a 5c 22 32 30 30 30 30 32 31 36 38 38 30 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 5c 22 2c 5c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 5c 22 3a 5c 22 Data Ascii: \"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\":4.25,\"tierNumber\":2,\"rawPrice\":\"17.00\"}},\"promoCode\":\"20000216880\",\"id\":\"0fd8cf46-d029-11ea-a072-340cee6a52b6\",\"currencyCode\":\"
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 6e 67 2d 73 65 72 76 69 63 65 73 2d 63 61 63 68 69 6e 67 5c 22 3a 66 61 6c 73 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 34 30 35 2d 2d 41 43 54 49 56 41 54 45 2d 41 42 52 41 2d 56 31 32 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 32 32 34 2d 2d 68 64 2d 61 75 78 50 72 6f 64 75 63 74 4d 61 70 70 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 31 34 39 2d 2d 43 49 52 43 55 49 54 2d 42 52 45 41 4b 45 52 2d 53 41 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 4f 42 43 4f 2d 33 30 33 38 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2d 72 6f 6c 6c 6f 75 74 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 34 33 39 2d 2d 43 49 47 2d 49 50 2d 53 45 47 4d 45 4e 54 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 Data Ascii: ng-services-caching\":false,\"FF-CMOTS-3405--ACTIVATE-ABRA-V12\":true,\"FF-CMOTS-224--hd-auxProductMapping\":true,\"FF-CMOTS-3149--CIRCUIT-BREAKER-SAS\":true,\"FF-MOBCO-3038-payment-methods-rollout\":true,\"FF-MWCM-4439--CIG-IP-SEGMENTS\":true,\"FF-MWCM-4
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 22 3a 22 4d 41 47 5f 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 73 61 6c 65 5f 62 61 72 31 63 6f 70 79 74 65 73 74 5f 73 75 62 63 6f 6e 5f 42 41 55 22 2c 22 70 61 67 65 50 61 74 68 22 3a 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 22 2c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 22 3a 74 72 75 65 2c 22 73 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 Data Ascii: "audienceName":"MAG_web_regi_anon_sale_bar1copytest_subcon_BAU","pagePath":"/marketing/mpc/muassets/variants/variant-2","isPageVariant":true,"segments":[{"description":"Based on the value of the \u0027plat\u0027 query parameter. The \u0027plat\u0027 query
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 64 6f 63 6b 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 64 6f 63 6b 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 64 37 65 32 38 32 33 65 2d 36 65 66 62 2d 34 36 33 64 2d 61 34 37 37 2d 62 63 64 64 35 33 33 30 64 31 61 32 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 5c 75 30 30 33 65 5c 6e 20 74 72 79 7b 76 61 72 20 6f 62 73 65 72 76 65 72 3d Data Ascii: l":"\n\n\n\n \u003cdiv class=\"dock\" data-config-component-id=\"mkt-wcm:components/metered_assets/dock/template/main\" data-component-uuid=\"d7e2823e-6efb-463d-a477-bcdd5330d1a2\"\u003e\n\n\n\u003cscript type=\"text/javascript\"\u003e\n try{var observer=
2023-12-05 18:13:30 UTC	811	IN	Data Raw: 74 73 2f 76 61 72 69 61 6e 74 2d 32 35 5c 22 2c 5c 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 5c 22 3a 5c 22 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 61 6c 6c 5c 22 2c 5c 22 70 61 67 65 50 61 74 68 5c 22 3a 5c 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 35 5c 22 2c 5c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 5c 22 3a 74 72 75 65 2c 5c 22 73 65 67 6d 65 6e 74 73 5c 22 3a 5b 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 Data Ascii: ts/variant-25\",\"audienceName\":\"web_regi_anon_all\",\"pagePath\":\"/marketing/mpc/muassets/variants/variant-25\",\"isPageVariant\":true,\"segments\":[{\"description\":\"Based on the value of the \\u0027plat\\u0027 query parameter. The \\u0027plat\\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49866	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1638	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 1450 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:30 UTC	1450	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 33 71 55 67 36 43 71 36 69 57 72 53 51 45 4e 53 5a 43 76 48 68 72 63 30 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 30 39 34 34 33 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"3qUg6Cq6iWrSQENSZCvHhrc0","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800009443,"data":{"event":"impression
2023-12-05 18:13:30 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:30 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49863	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	474	OUT	GET /images/2023/12/05/multimedia/05isrel-gaza-01-carousel-kcjw/05isrel-gaza-01-carousel-kcjw-threeByTwoMediumAt2X.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	1250	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 30 35 32 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 75 74 72 2b 31 56 55 5a 61 4b 2f 7a 54 32 37 46 4a 56 46 2b 79 6c 72 47 6a 54 57 46 67 4d 69 76 2f 50 6c 52 73 36 30 44 47 62 51 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 33 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 130521Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "utr+1VUZaK/zT27FJVF+ylrGjTWFgMiv/PlRs60DGbQ"Expires: Tue, 05 Dec 2023 13
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 10 0b 0c 0e 0c 0a 10 0e 0d 0e 12 11 10 13 18 28 1a 18 16 16 18 31 23 25 1d 28 3a 33 3d 3c 39 33 38 37 40 48 5c 4e 40 44 57 45 37 38 50 6d 51 57 5f 62 67 68 67 3e 4d 71 79 70 64 78 5c 65 67 63 ff db 00 43 01 11 12 12 18 15 18 2f 1a 1a 2f 63 42 38 42 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 63 ff c0 00 11 08 03 e9 05 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 41 10 00 01 04 01 03 03 03 02 04 04 04 05 04 02 01 05 01 00 02 03 11 21 04 12 31 05 41 51 13 22 61 32 71 14 42 81 91 06 23 52 a1 33 62 b1 Data Ascii: JFIFHHC(1#%(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egcC//cB8BccccccccccccccccccccccccccccccccccccccccccccccccccA!1AQ"a2qB#R3b
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 02 01 00 80 40 20 10 08 04 09 00 81 aa 05 00 a8 10 08 05 00 80 40 2a 1a 04 81 a2 04 02 01 14 22 04 0d 00 80 08 04 02 01 00 80 40 d0 08 04 02 02 d0 34 02 03 ba 01 00 80 40 d0 08 04 0d 00 80 1c a0 b1 cd 35 c2 2e 20 88 61 00 80 08 82 d5 0d 01 6a 04 a8 61 40 20 10 08 04 09 00 80 40 5a 04 80 40 20 10 24 05 a0 10 08 12 01 00 10 08 04 09 06 bd 34 31 16 17 4b c2 cd ad f3 ca 53 c7 0f a5 b9 83 1e 54 97 ca d9 18 c8 cd 5d ad 30 08 a5 42 44 24 02 01 02 40 95 02 80 45 0a a0 40 28 04 52 54 0a 20 54 24 02 06 81 20 10 08 27 17 75 2b 51 65 ac a8 b4 0d 02 40 20 10 01 10 95 09 ff 00 4a 0a c0 28 86 1a 50 48 33 e5 14 6c 1e 50 c3 0d 6a 81 d3 7c 20 30 80 b4 05 e1 14 20 57 e4 a0 57 f2 aa 2c dc 04 5c a8 aa f7 05 43 dc 3c a0 5b 82 81 ef 08 10 70 40 6e 08 0b 40 07 20 7b b0 81 6e 08 Data Ascii: @ @*"@4@5. aja@ @Z@ $41KST]0BD$@E@(RT T$ 'u+Qe@ J(PH3lPj\| 0 WW,\C<[p@n@ {n
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 40 20 10 34 02 01 00 80 40 2a 3a 1d 33 a6 fe 30 ef 95 c5 b1 83 f9 79 2b 9f 5d e7 86 b9 e7 5d b8 ba 2f 4c 1f 53 1c ea e7 74 85 72 fb f5 5d 3e 91 a9 b1 74 fd 37 f8 10 46 1c 3c 32 cf ee 56 6d b5 67 32 33 6a 25 f5 24 66 e8 e3 1b 32 29 a3 0a 6d 8d 7d 63 6e 9e 67 bc 01 93 f7 42 e3 43 e2 79 a3 c2 1a a6 79 34 90 c7 5a ad 43 59 7c 56 4d fd 82 49 69 e7 f1 cb ea 1d 32 2d 5e 99 d3 45 23 bd 66 b6 db bb f3 b5 75 e6 fd 5c fa 9f 67 99 5d dc 42 06 80 40 20 10 08 04 02 00 20 10 08 18 40 20 10 08 05 43 50 08 04 02 06 80 0a 81 04 e1 cc ad fb a9 48 ec 6b 71 a4 fd 16 1d af a7 15 74 71 30 80 40 76 40 20 10 08 04 02 01 00 88 10 08 05 01 44 94 52 44 08 04 09 00 80 40 20 4a 81 40 20 10 08 a4 88 10 08 2c d3 30 49 33 5a 78 25 4b 72 2f 33 6b a1 a9 85 bb bd 36 9a 68 5c f9 b5 d6 c6 4d Data Ascii: @ 4@*:30y+]]/LStr]>t7F<2Vmg23j%$f2)m}cngBCyy4ZCY\|VMIi2-^E#fu\g]B@ @ CPHkqtq0@v@ DRD@ J@ ,0I3Zx%Kr/3k6h\M
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 40 20 10 34 02 01 00 80 40 d0 08 05 40 80 40 20 68 04 17 69 33 a8 6a 95 79 f6 e9 75 2f f0 16 63 a7 5e 9c 85 b7 23 40 20 10 08 04 02 04 80 40 20 10 01 00 a0 60 62 d0 04 20 48 0b 54 25 02 54 08 04 40 80 40 20 48 02 a0 10 08 04 09 15 a7 47 aa fc 39 36 db b5 9e a6 b5 cd c5 d2 3c ea cd 91 b6 96 64 c6 af 96 7d 4f 00 78 5a 8c f4 ce b4 c0 40 90 0a 82 d4 54 83 8a 00 38 57 01 01 40 f0 50 2d a8 15 14 09 54 08 04 02 04 82 64 ee 6f c8 50 41 00 80 40 2a 12 09 37 95 14 89 ca 0b 9b f4 85 9a b1 20 8a ae 41 7c 2b 11 1d 84 f6 44 c5 ad e2 94 54 1c cb 28 01 1f ca a2 63 0a 28 28 04 02 02 94 02 00 2a 04 02 80 a4 02 a0 40 28 04 12 8c 7b 82 10 48 7d e5 15 14 42 71 a1 95 60 8f a8 d5 71 34 7a a1 30 d2 f5 be 13 0d 47 d6 29 86 91 94 ab 89 a5 ea 1f 29 86 a2 5c 7c a1 ad 11 7d 2b 35 a8 Data Ascii: @ 4@@@ hi3jyu/c^#@ @ `b HT%T@@ HG96<d}OxZ@T8W@P-TdoPA@7 A\|+DT(c((@({H}Bq`q4z0G))\\|}+5
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 3c 3e 8f 85 9d 6b 22 99 9a 58 76 93 c2 b1 2a 95 a6 40 40 20 10 08 12 01 40 20 15 02 04 81 d9 50 16 a8 14 53 cf 64 43 fb 84 54 80 04 7c f6 50 40 56 50 04 2a 15 20 29 03 76 1a 07 94 10 1c aa 2f 0b 0a 10 34 02 29 22 00 82 48 a4 80 ee 81 a0 4a 01 51 09 78 c2 b1 2a 9b 3e 55 64 90 0a 80 28 25 56 6d 15 78 59 68 d0 08 2c 88 72 a2 c5 67 95 50 20 ae 6e 15 89 54 2d 32 68 04 02 01 00 81 0e 50 6a 6f d2 b0 d9 a0 14 53 40 ad 10 90 35 45 52 59 e1 58 54 04 6e 57 53 0f d3 29 a6 3d 1f f0 b6 f8 9b 33 99 92 56 3b be 1b e5 dd 81 93 3a 4d e5 c5 70 75 8e 8b e6 6c 1a 50 f9 0f 07 2b d7 fe 33 8f ca e2 f5 89 a2 73 c1 8c f2 bd 5d d8 e7 25 c7 05 cd a9 37 34 f0 b9 61 ad 0c 7b 5d a7 d5 9e 37 46 b1 d4 c8 b7 ad ae 15 ae 4d 1d a0 56 81 12 a8 ac aa ca 0a 81 10 90 08 3b 71 d1 5e 67 a9 a9 b1 Data Ascii: <>k"Xv@@ @ PSdCT\|P@VP )v/4)"HJQx*>Ud(%VmxYh,rgP nT-2hPjoS@5ERYXTnWS)=3V;:MpulP+3s]%74a{]7FMV;q^g
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: cc 4f b2 0e d7 48 3b 35 5f aa 7d d1 64 f3 ea 24 11 b0 6e 73 b0 1a 3b ab 39 4f bd 75 34 8c 6e 9f 4e f9 b5 33 30 46 d6 9e c7 dc ee cd 68 e5 c7 c9 18 1e 56 be b3 3d 9f 6b fa a7 43 ea ea a2 10 3e 5f 4e 08 c3 a4 00 00 01 7d 60 9f 27 e4 f1 d9 63 ae b2 62 f3 36 b9 23 be 6e b9 5d 23 14 22 1f 64 02 a0 40 20 68 04 02 02 90 1d d0 08 1b 45 91 d9 03 dc c6 bb 8b 1e 54 13 74 a6 a8 32 82 89 a8 b6 59 2a 87 ec 50 d5 cd 7b 9c 2c 62 bc 22 b7 47 24 a2 2a 2e dc df 04 61 64 55 26 8d b3 b7 74 43 64 9d db d8 ad 4a 30 ba 37 b1 c5 ae 69 04 72 16 84 42 06 81 a0 29 06 ee 97 fe 39 52 b7 c2 ce aa 6c 85 39 5e dc e5 a7 30 80 40 20 48 04 02 04 80 40 01 65 03 78 da 70 82 36 81 da 08 d2 0b 9a 30 a2 ab 7a 22 21 50 20 10 22 80 40 94 02 a0 40 22 04 09 00 a2 8b 40 20 d2 c9 dd 1b 00 db 8f 2b 36 Data Ascii: OH;5_}d$ns;9Ou4nN30FhV=kC>_N}`'cb6#n]#"d@ hETt2YP{,b"G$.adU&tCdJ07irB)9Rl9^0@ H@exp60z"!P "@@"@ +6
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: e2 16 a3 35 5a a8 4a a0 40 20 10 08 04 09 00 80 50 3a 40 52 29 a0 44 20 01 c2 06 81 20 5c 20 9b b2 d0 47 3d d4 06 d1 48 02 0d 06 34 64 aa 36 e8 b4 64 7b df 93 7c 05 2d 58 dd a8 95 cc 67 a6 58 2c f8 53 57 59 5a d2 e1 ee 72 88 b3 68 6c 58 19 3d d4 54 a1 26 b9 ba f9 44 5f a5 98 35 e6 df c7 36 94 5c ed 40 7b f6 f9 e1 31 59 de 1e 1d 63 15 cd 2a 20 f8 a1 d4 34 92 36 bc 72 41 55 23 97 23 5d 1b cb 5d d9 15 16 9f 84 12 c2 81 61 01 4a 88 96 03 ca 68 36 b7 c2 68 00 1e 13 43 a0 80 ec 81 14 02 06 50 24 17 11 50 28 bf 8a 55 40 80 40 20 10 08 04 02 01 02 40 d0 08 05 00 a8 02 28 44 08 0e e8 3a ff 00 c3 ba 66 cf ab dc f1 61 8a 56 a3 d5 6a 67 0c 8f 6b 70 b9 df 0d c7 38 bb 79 ca e6 db 4e 98 6d 28 8e ae 95 d9 5a e2 f9 67 a7 9a fe 21 89 f0 6b 4b 1a 3f 97 27 b9 bf 0b df f5 f1 Data Ascii: 5ZJ@ P:@R)D \ G=H4d6d{\|-XgX,SWYZrhlX=T&D_56\@{1Yc* 46rAU##]]aJh6hCP$P(U@@ @(D:faVjgkp8yNm(Zg!kK?'
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: d7 ab 8b f1 3d 1b 51 15 5b 80 0f 6f c1 6e 7f d2 c2 d7 17 2b 3d 73 b1 e5 e0 71 2e a0 ba d7 08 ec 69 18 5a 2d c3 2b cf d5 77 e7 96 f6 0d cb 2d 23 a9 d7 b7 46 ca 69 05 fd 82 d7 3c eb 1d 57 21 87 55 ab 94 b8 3a af b9 5d bc 47 3f 35 6e a7 a5 ea 23 80 cd eb 03 e4 05 3e f0 fa 6a 8d 03 b5 4d 95 a1 b2 3a af ca bd 58 49 63 bb d6 74 ba 8d 54 30 4c 1f b1 8c 04 3b ef d9 73 e6 c9 5a bb 66 3c b7 72 bb 39 84 02 00 20 87 0e 54 6d d3 76 70 e4 2c d2 3a 4d b0 d3 58 ee 57 37 4c 5c d7 1a e3 14 8a 6e 20 30 1a 37 4a 0a 99 a8 05 f6 49 00 20 d1 14 ae 27 70 38 59 ad 48 d4 c9 01 e5 67 1a 5e d7 37 6d 9c 0e ea e1 ac ef ea ba 48 9d b4 ba cf c0 5a 9c 56 6f 52 35 69 7a 9e 98 9b 8e 70 0f 83 85 af ad 89 f7 95 d6 d3 75 16 38 1a 78 75 78 4b e1 33 5e 4b f8 b7 41 04 1a 98 f5 9a 50 1b 16 a2 f7 Data Ascii: =Q[on+=sq.iZ-+w-#Fi<W!U:]G?5n#>jM:XIctT0L;sZf<r9 Tmvp,:MXW7L\n 07JI 'p8YHg^7mHZVoR5izpu8xuxK3^KAP
2023-12-05 18:13:30 UTC	1379	IN	Data Raw: 03 fe c9 c7 3e 17 be 9e 61 69 cc 20 10 31 59 2e 34 02 0a cc bb 9c 4d da d3 35 36 38 1f 84 45 94 0a 09 b4 02 33 94 12 00 71 d9 04 5d 0b 4e 5a 68 aa 21 c1 e4 58 08 21 21 0f 6e 46 50 50 2c 1a 28 3d 16 92 47 3b 4f 1b 88 a3 b5 79 7b 9f c9 ea e2 ff 00 15 e6 4c 64 59 59 69 9e 59 80 36 e1 fb 2d 46 6a 81 ad 8d af 04 b4 fe ca e2 6c 6b 97 aa b0 44 d3 14 44 3b ca bc fc 76 d4 bd 49 14 ff 00 c6 75 0f 69 6e d3 fa 2e 9f e9 67 fd 91 28 9b 2e aa 46 19 4d bb 80 3c 2e bc f1 39 67 ab be 5a 5d 14 7a 23 23 98 ef 78 c7 b4 f2 52 f5 79 9b 19 e7 cd 75 74 5a 8a d1 06 ee de e3 93 7e 57 8a db 6e d7 a7 1c 3f e2 43 1c 9a a6 4a 1a 1b 23 81 0f a1 57 5d d7 5f 8e da e7 dc 8e 40 5d 9c 80 40 d0 08 1a 01 02 21 02 9d ae 7b e3 63 58 6f 6f 03 93 f2 a5 0f d0 7c 78 91 ae 69 f9 14 b3 b1 72 ae 8d b8 Data Ascii: >ai 1Y.4M568E3q]NZh!X!!nFPP,(=G;Oy{LdYYiY6-FjlkDD;vIuin.g(.FM<.9gZ]z##xRyutZ~Wn?CJ#W]_@]@!{cXoo\|xir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49868	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	1404	OUT	GET /activityi;dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2023-12-05 18:13:31 UTC	984	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:13:31 UTC	268	IN	Data Raw: 33 30 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4f 6d 66 35 49 6a 7a 2d 49 49 44 46 57 Data Ascii: 30e<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=COmf5Ijz-IIDFW
2023-12-05 18:13:31 UTC	521	IN	Data Raw: 73 72 63 3d 35 32 39 30 37 32 37 3b 74 79 70 65 3d 61 6c 6c 70 61 30 3b 63 61 74 3d 6e 79 74 69 2d 30 3b 6f 72 64 3d 31 3b 6e 75 6d 3d 34 37 36 38 38 33 32 30 30 39 31 36 30 3b 61 75 69 64 64 63 3d 2a 3b 75 31 37 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 6c 69 76 65 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 3b 75 35 3d 3b 75 31 38 3d 61 6e 6f 6e 3b 70 73 3d 31 3b 70 63 6f 72 3d 31 35 39 30 33 32 33 30 38 36 3b 67 74 6d 3d 34 35 48 65 33 62 74 30 76 37 32 37 30 33 37 39 37 3b 67 63 64 3d 31 31 6c 31 6c 31 6c 31 6c 31 3b 64 6d 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b Data Ascii: src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=*;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;
2023-12-05 18:13:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49869	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:30 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 138 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:30 UTC	138	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 39 31 33 35 38 33 36 37 31 31 35 31 37 32 39 35 39 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nytimes.com","trigger_debug_key":"8913583671151729599"},"type":"trigger-no-matching-source"}]
2023-12-05 18:13:31 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49870	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1120	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=14110&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&i=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:31 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:31 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49871	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1372	OUT	GET /ping?h=video%40nytimes.com&g=16698&p=https%3A%2F%2Fvp.nyt.com%2Fvideo%2F2023%2F12%2F05%2F113940_1_05vid-khan-younis-hospital_wg_480p.mp4&i=&g0=international_desk&u=klOrWDxbmHwDhoapt&t=CLFNODC-76e_CMggykBaThD7rTDi3&x=0&y=0&V=141&VS=H5&n=1&b=7532&r=&_vd=14880&_vi=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&_vp=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&_vh=nytimes.com&_pu=DrMis-D7EHvcW-4Z2&_pt=RbJMdCJWPcJC1gVgIerf6xC4LqZW&_pr=&_vdd=nytimes.com&_vt=ct&_vs=s1&_vcs=0&_vbr=-1&_vvs=0.003&_vpt=0&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vaup=man&_vce=0&c=0&W=0&R=0&I=1&E=0&j=75&tz=-60&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:31 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:31 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49873	142.251.111.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1367	OUT	GET /td/fls/rul/activityi;fledge=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2023-12-05 18:13:31 UTC	967	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:13:31 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2023-12-05 18:13:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49872	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1356	OUT	GET /activityi;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2023-12-05 18:13:31 UTC	1275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49875	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1343	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2023-12-05 18:13:31 UTC	2523	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49874	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1357	OUT	GET /activityi;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2023-12-05 18:13:31 UTC	1276	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49876	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1339	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2023-12-05 18:13:31 UTC	2522	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49877	104.26.12.18	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	606	OUT	GET /scripts/bundle/65568.js?sid=4486dfe2-780e-4dfa-a60a-2a948887658f&toploc=www.nytimes.com HTTP/1.1 Host: cdn.brandmetrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:31 UTC	752	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 43 66 2d 42 67 6a 3a 20 6d 69 6e 69 66 79 0d 0a 43 66 2d 50 6f 6c 69 73 68 65 64 3a 20 6f 72 69 67 53 69 7a 65 3d 36 33 35 35 35 0d 0a 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 63 69 64 2d Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:31 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCache-Control: public, max-age=3600Cf-Bgj: minifyCf-Polished: origSize=63555Request-Context: appId=cid-
2023-12-05 18:13:31 UTC	617	IN	Data Raw: 37 63 62 32 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 2c 66 2c 75 2c 79 2c 77 2c 61 2c 63 2c 62 3d 21 31 2c 72 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 72 2c 6f 2c 69 29 7b 69 66 28 66 3d 65 2c 61 3d 6f 2c 77 3d 72 2c 6d 3d 74 2c 75 3d 69 29 79 3d 75 2e 73 74 6f 72 61 67 65 3b 65 6c 73 65 20 69 66 28 22 6c 73 22 3d 3d 3d 65 2e 73 74 6f 72 61 67 65 29 74 72 79 7b 79 3d 6e 65 77 28 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 67 65 74 4d 6f 64 75 6c 65 28 35 29 29 28 66 2c 6d 2c 21 31 29 7d 63 61 74 63 68 28 65 29 7b 79 3d 76 6f 69 64 20 30 7d 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7cb2"use strict";!function(){var m,f,u,y,w,a,c,b=!1,r={},v=function(){function e(e,t,r,o,i){if(f=e,a=o,w=r,m=t,u=i)y=u.storage;else if("ls"===e.storage)try{y=new(brandmetrics.getModule(5))(f,m,!1)}catch(e){y=void 0}}return e.prototype.isReady=function()
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 6f 77 65 64 3a 21 31 7d 29 7d 2c 6f 2e 74 69 6d 65 6f 75 74 29 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6f 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 26 26 6f 2e 63 61 6c 6c 62 61 63 6b 28 65 2c 74 2c 72 29 7d 2c 75 3d 7b 6d 69 64 3a 28 6f 3d 6f 7c 7c 7b 7d 29 2e 6d 69 64 2c 62 69 64 3a 6f 2e 62 69 64 2c 63 61 6c 6c 62 61 63 6b 3a 6f 2e 63 61 6c 6c 62 61 63 6b 2c 61 75 74 6f 52 65 6e 64 65 72 3a 76 6f 69 64 20 30 3d 3d 3d 6f 2e 61 75 74 6f 52 65 6e 64 65 72 7c 7c 6f 2e 61 75 74 6f 52 65 6e 64 65 72 2c 66 6f 72 63 65 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 66 6f 72 63 65 26 26 6f 2e 66 6f 72 63 65 2c 69 73 54 65 73 74 3a 76 6f 69 64 20 30 21 3d 3d 6f 2e 69 73 54 65 73 74 26 26 6f 2e 69 73 54 65 73 74 2c 64 74 4e 61 6d 65 3a 6f 2e 64 74 Data Ascii: owed:!1})},o.timeout));var d=function(e,t,r){o&&o.callback&&o.callback(e,t,r)},u={mid:(o=o\|\|{}).mid,bid:o.bid,callback:o.callback,autoRender:void 0===o.autoRender\|\|o.autoRender,force:void 0!==o.force&&o.force,isTest:void 0!==o.isTest&&o.isTest,dtName:o.dt
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 64 69 73 70 6c 61 79 4f 70 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 29 3b 69 66 28 61 29 7b 76 61 72 20 74 3d 61 2e 63 72 65 61 74 65 28 65 29 3b 72 65 74 75 72 6e 20 72 5b 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 5d 3d 74 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 62 72 61 6e 64 6d 65 74 72 69 63 73 3a 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 63 72 65 61 74 69 6e 67 20 73 75 72 76 65 79 73 2e 22 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4d 65 74 61 64 61 74 61 3d 66 75 6e 63 Data Ascii: {if(void 0===e\|\|void 0===e.measurementId\|\|void 0===e.displayOption)throw new Error("");if(a){var t=a.create(e);return r[e.measurementId]=t}throw new Error("brandmetrics: This configuration does not support creating surveys.")},e.prototype.addMetadata=func
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 73 74 6f 70 28 29 2c 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2e 73 74 6f 70 28 29 7d 2c 65 7d 28 29 3b 77 69 6e 64 6f 77 2e 62 72 61 6e 64 6d 65 74 72 69 63 73 2e 72 65 67 69 73 74 65 72 28 7b 69 64 3a 30 2c 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 2c 69 2c 61 2c 6e 29 7b 76 61 72 20 73 3d 6e 65 77 20 76 28 65 2c 74 2c 72 2c 6f 2c 69 29 2c 64 3d 7b 62 6d 3a 73 2c 63 6f 6c 6c 65 63 74 69 6f 6e 3a 75 2c 6f 70 74 69 6f 6e 73 3a 65 2c 75 74 69 6c 73 3a 74 2c 63 6c 69 65 6e 74 3a 72 2c 73 74 6f 72 61 67 65 3a Data Ascii: ype.getOptions=function(){return f},e.prototype.stop=function(){void 0!==u&&u.stop(),void 0!==m&&m.stop()},e}();window.brandmetrics.register({id:0,ctor:function(e,t,r,o,i,a,n){var s=new v(e,t,r,o,i),d={bm:s,collection:u,options:e,utils:t,client:r,storage:
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 69 64 3d 74 2c 74 68 69 73 2e 62 65 61 63 6f 6e 49 64 3d 65 2e 69 64 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 65 2e 73 6f 75 72 63 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 6e 2c 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 69 2c 74 68 69 73 2e 6f 6e 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 72 2c 74 68 69 73 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 31 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 7d 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 6f 7c 7c 21 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 32 65 33 2c 74 68 69 73 2e 70 72 6f 70 73 3d 7b 69 6e 76 69 65 77 3a 6f 7c 7c 21 31 2c 70 6c 61 79 69 6e 67 3a 21 31 7d 3b 62 Data Ascii: id=t,this.beaconId=e.id,this.source=e.source,this.element=n,this.measurements=i,this.onPropertyChange=r,this.type){case 0:this.threshold=1e3,this.props={inview:o\|\|!1},this.active=o\|\|!1;break;case 1:this.threshold=2e3,this.props={inview:o\|\|!1,playing:!1};b
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 48 61 6e 64 6c 69 6e 67 7c 7c 30 29 29 29 69 66 28 64 2e 65 6c 65 6d 65 6e 74 26 26 6d 29 6e 75 6c 6c 3d 3d 6d 7c 7c 6d 2e 6f 62 73 65 72 76 65 28 64 2e 65 6c 65 6d 65 6e 74 29 3b 65 6c 73 65 20 69 66 28 22 61 6c 77 61 79 73 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6f 3d 68 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 79 70 65 29 29 7b 66 6f 72 28 76 61 72 20 6c 3d 30 2c 66 3d 64 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3b 6c 3c 66 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 76 3d 66 5b 6c 5d 2c 70 3d 77 2e 75 70 64 61 74 65 45 78 70 28 76 2e 69 64 2c 74 2c 31 2c 31 29 3b 67 2e 70 6f 73 74 45 76 65 6e 74 28 31 30 2c 76 2e 69 64 2c 70 2c 7b 70 69 64 3a 74 2c 66 69 72 73 74 3a 30 3d 3d 3d 64 2e 73 74 61 74 Data Ascii: Handling\|\|0)))if(d.element&&m)null==m\|\|m.observe(d.element);else if("always"!==(null===(o=h.inview)\|\|void 0===o?void 0:o.type)){for(var l=0,f=d.measurements;l<f.length;l++){var v=f[l],p=w.updateExp(v.id,t,1,1);g.postEvent(10,v.id,p,{pid:t,first:0===d.stat
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 31 3d 3d 3d 74 2e 73 74 61 74 65 26 26 74 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 70 75 73 68 28 7b 6d 69 64 3a 65 2e 69 64 2c 75 69 64 3a 74 2e 69 64 2c 73 74 61 72 74 3a 74 2e 73 74 61 72 74 2c 6c 61 73 74 3a 74 2e 6c 61 74 65 73 74 7d 29 7d 29 7d 29 2c 77 2e 73 65 74 53 65 73 73 69 6f 6e 28 69 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 7d 29 29 2c 6f 2e 64 69 72 74 79 3d 21 31 2c 6f 2e 6c 61 73 74 57 72 69 74 65 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 2e 63 6c 65 61 6e 28 68 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 29 3b 66 Data Ascii: forEach(function(t){1===t.state&&t.measurements.forEach(function(e){i.push({mid:e.id,uid:t.id,start:t.start,last:t.latest})})}),w.setSession(i.filter(function(e){return null!==e})),o.dirty=!1,o.lastWrite=Date.now()},v=function(e){w.clean(h.measurements);f
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 65 22 67 70 74 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 2c 22 6c 69 6e 65 49 74 65 6d 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 62 6a 22 3a 69 3d 5b 22 64 65 61 6c 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 74 76 22 3a 63 61 73 65 22 61 70 69 22 3a 63 61 73 65 22 73 6c 6f 74 22 3a 69 3d 5b 22 6b 65 79 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 64 22 3a 69 3d 5b 22 70 69 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 70 74 48 62 22 3a 63 61 73 65 22 67 70 74 50 62 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 2c 22 6c 69 6e 65 49 74 65 6d 49 64 22 2c 22 64 65 61 6c 49 64 22 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 6b 76 6c 22 3a 69 3d 5b 22 63 72 65 61 74 69 76 65 49 64 22 2c 22 66 6c 69 67 68 74 49 64 22 2c 22 63 61 6d 70 Data Ascii: e"gpt":i=["creativeId","lineItemId"];break;case"pbj":i=["dealId"];break;case"ntv":case"api":case"slot":i=["key"];break;case"id":i=["pid"];break;case"gptHb":case"gptPb":i=["creativeId","lineItemId","dealId"];break;case"kvl":i=["creativeId","flightId","camp
2023-12-05 18:13:31 UTC	1369	IN	Data Raw: 6f 3d 65 2e 69 6e 76 69 65 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 79 70 65 29 26 26 28 6d 3d 4f 28 7b 63 6f 6c 6c 65 63 74 69 6f 6e 3a 74 68 69 73 2c 63 61 6c 6c 62 61 63 6b 3a 4d 2c 75 74 69 6c 73 3a 69 7d 29 29 2c 79 2e 6f 6e 28 7b 65 76 65 6e 74 3a 22 70 61 67 65 73 74 61 74 75 73 22 2c 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 54 28 65 29 7d 7d 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 2c 74 28 29 2c 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 6c 6f 74 44 69 73 70 6c 61 79 65 64 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 28 65 29 7d 29 7d 29 7d 2c Data Ascii: o=e.inview)\|\|void 0===o?void 0:o.type)&&(m=O({collection:this,callback:M,utils:i})),y.on({event:"pagestatus",handler:function(e){T(e)}})}return e.prototype.reinitialize=function(){i(),t(),s.forEach(function(e){e.slotDisplayed(function(e){return S(e)})})},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49878	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	680	OUT	GET /fonts/family/cheltenham/cheltenham-normal-200.40ccfe2cc61a71e6617e56162d49b896.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:31 UTC	1119	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 34 34 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 74 66 61 74 54 42 62 36 63 57 74 56 53 66 76 63 55 5a 74 69 78 49 67 73 48 36 56 6a 32 4a 36 41 4d 50 78 51 48 58 64 68 6f 6b 59 69 64 54 39 59 42 6a 67 5f 59 36 70 50 73 34 37 70 4f 4d 71 6f 6b 4e 6a 76 63 38 63 6b 79 6b 78 71 51 49 78 64 4b 6f 56 43 38 54 54 5a 63 75 50 79 4e 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 35 20 4a 75 6e 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 26448X-GUploader-UploadID: ADPycdtfatTBb6cWtVSfvcUZtixIgsH6Vj2J6AMPxQHXdhokYidT9YBjg_Y6pPs47pOMqokNjvc8ckykxqQIxdKoVC8TTZcuPyN2Cache-Control: public,max-age=31536000,immutableExpires: Wed, 05 Jun 2
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 67 50 00 10 00 00 00 01 00 c0 00 00 66 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b b9 28 1c 81 06 06 60 00 88 64 08 2c 09 82 73 11 0c 0a 83 9b 5c 82 f2 05 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 85 10 07 86 2b 0c 83 76 1b d0 e8 47 d0 6d db 15 8d 28 dd 09 49 bb ed 75 16 27 28 60 c7 9e 00 e7 21 16 71 fc 9e 55 64 44 8f 83 80 fc 64 d9 ff ff ff 59 49 65 c8 4c 53 4c 4b 61 1b 43 d5 7b 28 20 28 8c 48 06 7a 8d 9a 28 f4 0a 76 9c ba d2 ce 58 49 46 4f 25 6e 85 8d c0 4e 74 09 a2 43 74 89 5f f2 3e 23 88 6c 05 4a e4 d5 65 96 67 8d 35 48 b1 82 da 0f ef 21 f4 d2 b2 f9 28 93 ce 4d 25 2a 51 09 62 62 b2 6f 73 85 09 d7 b0 1f 3b 49 f1 b7 78 5f f1 18 d9 8d 88 fc cf 6f eb 12 e4 0c b9 b7 e3 25 35 3a 06 fd 33 37 86 Data Ascii: wOF2gPf(`d,s\6$ +vGm(Iu'(`!qUdDdYIeLSLKaC{( (Hz(vXIFO%nNtCt_>#lJeg5H!(M%*Qbbos;Ix_o%5:37
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: af 1c 8d 9b 0b c7 4b c7 1b 50 58 ef 87 2e 19 be 05 7e c9 c8 34 3a 8c 5f 35 35 4c 0f 8e 4b 66 86 d9 c5 dc 30 7f 42 4c e4 09 b5 a4 97 ce 25 b3 bc 73 cf fb 50 ae 33 f7 59 e8 12 f1 4c ea 7d e9 ac 7c b6 74 5c be e4 8f e9 cf a9 79 d6 3a 7b b6 04 c0 6b dd 51 bf c2 fe 55 3c dd ce 30 99 66 cb 6c db 55 a7 da 54 9f 1b b3 02 dc 11 7d 47 e4 0e 82 29 c1 e5 fa f2 f9 d5 76 00 94 09 ca 02 65 85 b2 41 d9 2d 63 40 7e 86 52 da 37 d7 c6 c6 d8 03 18 f7 ed f6 1f 0f 82 1c 3e 1e 3d 1a 66 d3 68 d9 58 37 03 3b db 78 f5 48 1d e9 a3 f3 c0 1c 5d b3 7b 16 e7 d2 5c d6 99 ec 7e 1e 9b 22 b6 98 00 f4 4e b2 ad 57 c0 d2 b2 e2 c1 64 07 37 0a f3 20 84 5b 40 43 a4 7d 5a 1c 7b 31 18 4d 88 15 97 50 98 86 be 8c f6 f2 b9 ea 83 10 ac 1b 43 96 4f 93 b5 20 88 4e c2 6e d8 9b 0e 9f e9 76 fa 18 de 33 4a Data Ascii: KPX.~4:_55LKf0BL%sP3YL}\|t\y:{kQU<0flUT}G)veA-c@~R7>=fhX7;xH]{\~"NWd7 [@C}Z{1MPCO Nnv3J
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: a6 a3 9d c8 1d c1 f1 82 87 41 67 82 20 04 e7 7c 51 04 84 ef db 3f 24 67 f7 bf 42 6d 2d 13 71 31 85 54 4c 2c 69 65 6d 88 55 3f 08 7e c5 02 fb 8a d5 7b ae db 3b 9f 6e ea 79 67 af 65 7d 08 0d 9a eb 54 e8 9f 70 da 87 ae bb e5 86 0f 0d da 6f 84 c6 18 8d 71 6a 76 3b 4d d0 98 a4 71 df 87 c2 20 11 a7 45 bd e2 75 84 37 10 de 42 88 c1 50 13 d7 d0 f2 07 8d 3f f3 2f eb e3 2a 20 88 9d 41 5e f3 27 89 cd 6c 4c b5 bf d7 fe b7 18 cd 42 65 ee ad f0 b3 57 d2 29 2e d7 3b 95 ad 58 0a 6b fd df af bf 61 35 db eb 62 f6 a5 70 ef cc 98 ff 31 e2 6c b6 e3 c6 90 f5 81 b2 13 4d 4c 16 73 3f 0d 4a f3 e7 53 ee 4e a5 f6 79 33 c6 fe 3f f4 df 61 c0 39 cc 0e c4 bf 3c 76 7a c1 c7 2f 20 58 42 ff 65 71 78 82 84 a4 94 b4 4c 4a 63 96 2f d6 8e 91 b5 04 50 d5 7b ee 1a 16 d2 43 5e 3e 7e 01 c1 b9 34 Data Ascii: Ag \|Q?$gBm-q1TL,iemU?~{;nyge}Tpoqjv;Mq Eu7BP?/* A^'lLBeW).;Xka5bp1lMLs?JSNy3?a9<vz/ XBeqxLJc/P{C^>~4
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: 85 8a 86 2e 1a 03 13 4b 8c 58 71 d8 38 b8 78 f8 04 e2 25 10 4a 94 24 99 88 98 84 94 8c 9c 82 92 8a 9a 86 96 8e 9e 81 51 8a 54 26 66 16 56 36 76 69 1c 9c d2 65 70 c9 e4 96 25 5b 8e 5c 79 f2 79 14 28 54 a4 58 89 52 93 95 29 57 a1 12 c0 59 aa d5 a8 55 a7 5e 83 29 1a 35 69 d6 a2 55 9b 76 1d 6c ab ce 94 85 9c 2b 5f 81 ab 48 31 ae c3 e5 2a 44 9c 5e ad 46 ad 3a f5 fe 1e 6c d4 a4 59 8b 56 6d da 75 e8 d4 a5 db d7 87 ee 43 c0 c3 fa 80 47 0d 18 34 64 d8 88 51 63 c0 e3 26 4c a2 b7 cb b4 19 b3 e6 04 11 5e b4 b4 0d af 5a 73 89 dd 37 6d d9 b6 e3 18 e1 be 78 e8 e1 71 cf 53 67 ce 5d 28 88 7c ad 0e 83 8f 14 03 e1 d9 f4 ae 7b ee 7b e0 a1 47 1e 7b 02 f0 1d 41 71 f8 12 c8 e9 59 e5 b8 2d db 53 80 05 c6 57 41 71 28 42 6d 04 af bf 63 79 02 56 dd e5 df 90 ed 79 e0 17 af db 0f 7a Data Ascii: .KXq8x%J$QT&fV6viep%[\yy(TXR)WYU^)5iUvl+_H1*D^F:lYVmuCG4dQc&L^Zs7mxqSg](\|{{G{AqY-SWAq(BmcyVyz
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: 37 42 8b 8f 38 3c 74 47 a0 6c 91 de 47 c5 c3 e4 5f 7d 17 98 ef ba 25 db 7b d3 e6 e3 ac 0e 5e 7c ee 2c 7c 13 f0 24 b8 fb fc 51 72 12 3e 7d 14 65 0f 47 6a bd 70 fd 24 85 3f 0e b2 17 27 85 af 2e fd 5a bb d8 f7 17 3b 93 c7 21 7c 3a 82 8a 13 d5 2d 8b 0e 78 17 d3 e1 a5 cd b8 2c c7 95 a9 68 12 80 e4 f6 d1 b6 6b 9a a4 07 d9 3c 6d ba d9 2a 87 9a d9 48 77 fa 44 3b d3 e4 01 96 e9 d1 21 e5 43 58 b9 be bc 95 50 94 c4 66 cc 06 c6 62 92 14 db 38 f4 59 0d 21 26 44 ca 62 f4 5b 9a 04 b2 86 75 99 48 7a 81 84 11 9e d9 f5 84 a8 b9 98 de 48 98 b9 5c 96 3b f1 d7 a6 52 90 3d eb 7e dd 61 01 a5 e4 20 21 64 12 16 17 fa 4a 04 53 9f 61 18 23 73 59 46 60 78 d4 02 19 62 32 2c 5d f6 35 8d 37 48 d6 07 07 3f ff 98 6f 32 26 ca b5 c2 d1 30 24 f3 04 c9 c5 f1 77 37 ca 3b 62 f2 42 9c d3 2e ec Data Ascii: 7B8<tGlG_}%{^\|,\|$Qr>}eGjp$?'.Z;!\|:-x,hk<m*HwD;!CXPfb8Y!&Db[uHzH\;R=~a !dJSa#sYF`xb2,]57H?o2&0$w7;bB.
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: 5e 1f 35 11 ae 6d 43 95 af 7a 96 c1 7c 4e 88 bf 69 96 b6 53 30 04 7b 4a 36 7e cb eb 1b 59 63 5e 1b 29 b7 25 74 7e 35 48 45 12 5e 80 7e 45 bf 05 24 06 37 35 1f aa 4d a4 94 37 a6 cc c6 58 68 5a 82 ed 3e 68 6e 90 55 73 8d 85 81 35 99 f5 ec 55 53 9e 9f f6 35 42 a0 8b 21 60 c2 ff 08 c1 07 f6 c3 9f 50 83 ea 54 d7 88 2e 37 ea 96 e2 f5 07 cc d9 e5 e1 48 84 e3 54 80 93 9a b5 ef c7 92 57 c7 8f 9e 3b 86 18 7a 93 37 57 fd b2 85 1b 55 5d 56 32 ea 94 38 ac 10 c2 88 38 5b 4d bc 37 f5 72 32 4f a8 79 28 70 dc 90 51 f9 2d f1 b8 4e f3 54 a7 ef f5 53 99 ad fc b1 c6 a9 f1 c9 85 64 54 b6 14 f5 db 1f 28 7a 62 8c 75 83 b2 4e c6 f3 ef b0 7f 00 34 31 19 2d 34 ea fa 8c 19 c2 32 84 9a 1b cf 5c cc 8f ee a4 2d 9d c6 d3 20 49 49 ad a5 b3 21 aa 8d a1 3b 62 d6 cf e9 d0 60 8a 0c a5 e7 b2 Data Ascii: ^5mCz\|NiS0{J6~Yc^)%t~5HE^~E$75M7XhZ>hnUs5US5B!`PT.7HTW;z7WU]V288[M7r2Oy(pQ-NTSdT(zbuN41-42\- II!;b`
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: 40 a9 4f 2e 16 4b 79 8c 98 0b 5b 74 52 7b 3e d1 90 fb 5b ae 0d e5 2b ae 2f ca 1f a5 ca d4 42 2f ce 33 8f ea e1 b9 01 3f be e7 e3 fa 01 dc c1 58 08 cb fb 01 c2 1a 8e 9e 07 10 cc e2 74 d1 7f a7 8b bd 58 f5 4c 77 8a 5c d7 b4 59 90 3a d9 12 e9 25 9d ee 4c b0 a8 65 32 1c 35 70 8c f6 0c a7 9e 2c e5 eb ab f4 44 0d c6 f9 6e 25 75 56 92 f4 e5 39 9b 36 89 fb ae 85 98 e2 f5 39 5f 32 46 da 45 ef 9f e9 2a 69 e3 a0 89 8e a7 0c 4e 3d 58 d8 1d c5 79 11 c8 4c cd de 61 fb d0 c1 e8 89 a5 cf 1c be ca 10 62 bb 4b 86 e3 0a a6 50 cf 77 00 85 94 af 95 51 26 34 70 bc 1d 57 83 28 44 93 8b 30 ec 65 7f 7a 9e 18 71 57 3a b2 bb fe 20 05 27 bc 9f e7 f3 74 2e ed 2b 1b 63 1d 23 e8 6b d5 5a 85 cf 78 b8 dc 0c 87 37 e7 af fc 0a c8 71 58 8d 81 f8 43 b2 21 ac 26 e9 47 92 a6 a1 8f 3e 93 cf d0 Data Ascii: @O.Ky[tR{>[+/B/3?XtXLw\Y:%Le25p,Dn%uV969_2FE*iN=XyLabKPwQ&4pW(D0ezqW: 't.+c#kZx7qXC!&G>
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: 94 6a 39 9d d1 83 a9 85 41 99 2c 2f 51 c8 18 0c b2 7a 71 bd ff b1 32 fa 70 b1 93 39 78 1c a9 14 c8 6e 03 83 a8 57 4a ed b6 ae ac 6a 0c da 49 b4 0b d5 c9 34 49 29 34 aa 84 12 51 92 5d 87 08 31 2a 55 4a 66 a1 29 6e 5e 98 47 7b 1e 59 e3 ba 34 d9 ff 02 dd 9d 23 4e da 5e 26 86 1b c1 dc ec 75 b9 4a 53 41 da 65 57 43 dd 7a 79 59 05 7b 40 3f e7 d4 3f 97 32 b5 94 34 8c 35 28 85 2c 61 d5 67 38 7b b9 69 e6 86 38 63 2a 25 87 a5 8e 6f 2a c9 5b a0 cb 40 90 65 29 6d 45 07 63 35 b1 0a 8e e2 5f 8a b6 34 26 03 29 01 53 86 bf 73 de 04 60 0f 60 03 08 b6 3f 56 8e c5 48 e2 bf 30 64 3c 75 a2 f6 bd c1 b5 a2 d0 11 95 11 3e 2f 12 5a 92 40 b4 4c 53 a3 23 19 9a 30 25 56 cf 74 0b 76 47 a7 a9 50 79 22 99 94 22 13 a6 00 56 93 92 94 d6 b5 5c f3 73 17 5d c5 32 95 ea a9 f9 b6 c4 74 64 36 Data Ascii: j9A,/Qzq2p9xnWJjI4I)4Q]1UJf)n^G{Y4#N^&uJSAeWCzyY{@??245(,ag8{i8c%o*[@e)mEc5_4&)Ss``?VH0d<u>/Z@LS#0%VtvGPy""V\s]2td6
2023-12-05 18:13:31 UTC	1379	IN	Data Raw: eb c4 da 32 e2 a0 49 4c ac d3 38 6b b8 a6 a4 f2 48 27 ff 4b 33 bc 1b ea 17 2b e0 d9 17 2b 2e 66 c3 f3 5d 3a 1d 82 ee 36 f9 95 ae 6f 99 8c 12 dd 23 ce 54 71 b6 e8 f1 75 23 db 5d f1 c7 87 d6 b4 a0 d4 27 bb 20 46 c8 30 ba 12 52 a5 b1 67 c1 70 70 a9 eb fc 11 7a 50 5c ed e9 58 54 2a 53 2b d6 36 4b 94 fa e6 a8 fa 80 86 09 12 e0 d5 60 e8 43 60 a0 7f 29 a6 96 d1 84 03 c5 67 52 cd 48 63 b4 8e 9a 2d e5 9b 61 54 64 69 fc b9 77 71 e5 6b 09 3e b1 57 a8 31 8d 2c 3a c3 91 ae ee 65 a6 59 a6 d2 dc 06 f6 64 c8 ae 0d 76 e6 e7 c2 b4 aa f1 66 23 71 a9 64 b6 bb b9 21 7d 36 db 4c 73 fc b1 27 60 5c c3 56 10 d4 41 2c 61 1a 29 41 8a cd 12 8a f1 ed c9 8d ce aa ca 14 d5 4a 99 25 de 4e 2a d3 4b 71 4b 32 9b 03 a4 e8 98 3e 9c a0 80 e9 30 ab ab d9 53 31 0b 8c f5 d6 ab 2b 97 bd 76 ce df Data Ascii: 2IL8kH'K3++.f]:6o#Tqu#]' F0RgppzP\XTS+6K`C`)gRHc-aTdiwqk>W1,:eYdvf#qd!}6Ls'`\VA,a)AJ%NKqK2>0S1+v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49880	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1787	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 6637 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:31 UTC	6637	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 70 42 36 76 34 55 72 4e 72 70 76 4e 30 35 78 77 43 68 74 32 35 39 38 75 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 61 62 5f 65 78 70 6f 73 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 30 39 38 35 36 2c 22 64 61 74 61 22 3a 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 43 4b 5f 53 61 6c 65 5f Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"pB6v4UrNrpvN05xwCht2598u","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"ab_expose","how":"beacon","client_ts":1701800009856,"data":{"test":"MKT_CK_Sale_
2023-12-05 18:13:31 UTC	978	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:31 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49881	142.251.16.157	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:31 UTC	1423	OUT	GET /ddm/fls/z/dc_pre=COmf5Ijz-IIDFWwYigMdDXUFkA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5290727.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:13:31 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 49 20 44 45 56 20 50 53 41 20 50 53 44 20 49 56 41 20 49 56 44 20 4f 54 50 20 4f 55 52 20 4f 54 52 20 49 4e 44 20 4f 54 43 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 31 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate: Tue, 05 Dec 2023 18:13:31 GMTPragma: no-cache
2023-12-05 18:13:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49882	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:32 UTC	1371	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.02&x=0&m=0&y=907&o=1280&w=907&j=30&R=1&W=0&I=0&E=1&e=1&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=2&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:32 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:32 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49884	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:32 UTC	1428	OUT	GET /activityi;dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:33 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:13:33 UTC	589	IN	Data Raw: 33 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4b 36 48 6d 34 6e 7a 2d 49 49 44 46 54 Data Ascii: 300<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CK6Hm4nz-IIDFT
2023-12-05 18:13:33 UTC	186	IN	Data Raw: 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 6c 69 76 65 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news"/></body></html>
2023-12-05 18:13:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49883	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:32 UTC	1429	OUT	GET /activityi;dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:33 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:13:33 UTC	589	IN	Data Raw: 33 30 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4d 65 44 71 6f 6e 7a 2d 49 49 44 46 64 Data Ascii: 301<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMeDqonz-IIDFd
2023-12-05 18:13:33 UTC	187	IN	Data Raw: 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 6c 69 76 65 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: mium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news"/></body></html>
2023-12-05 18:13:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49885	172.253.63.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:32 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 139 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:32 UTC	139	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 36 30 34 39 32 39 31 35 39 33 39 35 37 31 32 33 38 31 30 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nytimes.com","trigger_debug_key":"16049291593957123810"},"type":"trigger-no-matching-source"}]
2023-12-05 18:13:33 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49886	172.253.115.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:32 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 138 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:32 UTC	138	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 38 30 35 32 34 34 33 36 30 31 34 35 36 33 30 33 33 36 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nytimes.com","trigger_debug_key":"8052443601456303363"},"type":"trigger-no-matching-source"}]
2023-12-05 18:13:33 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49893	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	660	OUT	GET /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	1187	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 70 62 75 73 65 72 6d 61 74 63 68 3f 6f 72 69 67 69 6e 3d 70 72 65 62 69 64 26 73 69 74 65 5f 69 64 3d 39 39 35 38 32 31 26 70 3d 31 26 69 3d 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 43 3d 31 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 38 32 33 61 36 64 30 37 66 63 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 0Connection: closeLocation: /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=&C=1CF-Ray: 830e43823a6d07fc-IADCF-Cache-Status: DYNAMICCache-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49892	74.119.119.150	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	824	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy=&gpp=${GPP_STRING_142}&gpp_sid=${GPP_SID}&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	717	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 32 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 65 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 63 72 74 26 6f 76 73 69 64 3d 62 39 61 30 34 39 37 34 2d 62 36 38 33 2d 34 31 65 34 2d 39 37 32 36 2d 35 32 37 Data Ascii: HTTP/1.1 302 Foundcontent-length: 0date: Tue, 05 Dec 2023 18:13:32 GMTserver: Kestrelcache-control: no-cacheexpires: Tue, 05 Dec 2023 00:00:00 GMTlocation: https://contextual.media.net/cksync.php?cs=1&type=crt&ovsid=b9a04974-b683-41e4-9726-527

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49890	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	603	OUT	GET /AdServer/ImgSync?p=163427 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	279	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 36 33 34 32 37 26 72 64 66 3d 31 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 54 50 43 41 43 4f 4f 4b 49 45 3d 59 45 53 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Location: /AdServer/ImgSync?p=163427&rdf=1Set-Cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure;Date: Tue, 05 Dec 2023 18:13:32 GMTContent-Length: 5
2023-12-05 18:13:33 UTC	59	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 36 33 34 32 37 26 61 6d 70 3b 72 64 66 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/AdServer/ImgSync?p=163427&rdf=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49891	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	624	OUT	GET /w/1.0/pd HTTP/1.1 Host: nytimes-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2023-12-05 18:13:33 UTC	460	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 3d 31 38 65 64 65 32 61 65 2d 33 63 38 34 2d 30 64 37 65 2d 30 62 34 35 2d 32 63 63 35 66 35 38 34 38 64 38 36 7c 31 37 30 31 38 30 30 30 31 33 3b 20 56 65 72 73 69 6f 6e 3d 31 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 30 32 34 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 44 6f 6d 61 69 6e 3d 2e 6f 70 65 6e 78 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d Data Ascii: HTTP/1.1 302 FoundSet-Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; Version=1; Expires=Wed, 04-Dec-2024 18:13:33 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=NoneServer: OXGW/0.0.0P3P: CP="CUR ADM OUR NOR STA NID"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49888	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	631	OUT	GET /sync?px=1&src=prebid& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:33 UTC	672	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 0Connection: closeLocation: https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=Cache-Control: no-cache, no-store, must-revalidateP3P: po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49896	23.46.192.28	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	586	OUT	GET /cksync.php?cs=8 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	583	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 32 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 76 69 73 69 74 6f 72 2d 69 64 3d 33 34 34 38 30 31 36 31 33 30 31 38 34 33 37 35 30 30 30 56 31 30 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 44 45 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 52Content-Type: image/gifSet-Cookie: visitor-id=3448016130184375000V10; Expires=Wed, 04 Dec 2024 18:13:33 GMT; domain=.media.net; Path=/; sameSite=none; secure=truep3p: CP="NON DSP COR NID CUR ADMa DE
2023-12-05 18:13:33 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:33 UTC	9	IN	Data Raw: 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49887	35.71.131.137	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	882	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535&google_gid=CAESEP_CDT7kH_vMT6e3BERXxH4&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRgFKAEyCwj08OPbk_K6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIGZ29vZ2xl
2023-12-05 18:13:33 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 5f 6f 72 69 67 69 6e 3d 31 26 72 65 64 69 72 3d 74 72 75 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 311Connection: closeserver: Kestrellocation: https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&r
2023-12-05 18:13:33 UTC	311	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 5f 6f 72 69 67 69 6e 3d 31 26 72 65 64 69 72 3d 74 72 75 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 74 72 75 65 22 3e 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 Data Ascii: Redirecting to: <a href="https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true">https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49889	54.163.159.203	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	686	OUT	GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcs.media.net%2Fcksync.php%3Fcs%3D8%26type%3Ddxu%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	653	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 32 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 6d 2e 77 35 35 63 2e 6e 65 74 2f 70 69 6e 67 5f 6d 61 74 63 68 2e 67 69 66 3f 73 63 63 3d 31 26 65 69 3d 4d 45 44 49 41 4e 45 54 26 72 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 73 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 38 25 32 36 74 79 Data Ascii: HTTP/1.1 302 Cache-Control: no-cache, must-revalidateDate: Tue, 05 Dec 2023 18:13:32 GMTExpires: Fri, 01 Jan 1990 00:00:00 GMTLocation: https://pm.w55c.net/ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcs.media.net%2Fcksync.php%3Fcs%3D8%26ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49895	35.211.178.172	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	643	OUT	GET /sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	800	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 75 6c 5f 63 62 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 0Connection: closeCache-Control: no-cache, no-store, must-revalidateLocation: https://x.bidswitch.net/ul_cb/sync?ssp=medianet&gdpr=${GDPR}&gdpr_conse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49898	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1340	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:33 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:33 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49899	142.251.16.157	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1410	OUT	GET /ddm/fls/z/dc_pre=CMeDqonz-IIDFdwRigMd-cwPaQ;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5290727.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:13:33 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 49 20 44 45 56 20 50 53 41 20 50 53 44 20 49 56 41 20 49 56 44 20 4f 54 50 20 4f 55 52 20 4f 54 52 20 49 4e 44 20 4f 54 43 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate: Tue, 05 Dec 2023 18:13:33 GMTPragma: no-cache
2023-12-05 18:13:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49900	142.251.16.157	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1409	OUT	GET /ddm/fls/z/dc_pre=CK6Hm4nz-IIDFTcyigMdytMGsw;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5290727.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:13:33 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 49 20 44 45 56 20 50 53 41 20 50 53 44 20 49 56 41 20 49 56 44 20 4f 54 50 20 4f 55 52 20 4f 54 52 20 49 4e 44 20 4f 54 43 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate: Tue, 05 Dec 2023 18:13:33 GMTPragma: no-cache
2023-12-05 18:13:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49901	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1082	OUT	GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=4768832009160;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;u5=;u18=anon;ps=1;pcor=1590323086;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:33 UTC	2214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49911	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	724	OUT	GET /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy=&C=1 HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:33 UTC	1117	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 74 6d 2e 65 76 65 72 65 73 74 74 65 63 68 2e 6e 65 74 2f 75 70 69 2f 70 69 64 2f 5a 4d 41 77 72 79 43 49 3f 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 25 32 46 72 75 6d 25 33 46 63 6d 5f 64 73 70 5f 69 64 25 33 44 38 38 25 32 36 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 25 33 44 25 32 34 25 37 42 54 4d 5f 55 53 45 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 0Connection: closeLocation: https://sync-tm.everesttech.net/upi/pid/ZMAwryCI?redir=https%3A%2F%2Fdsum-sec.casalemedia.com%2Frum%3Fcm_dsp_id%3D88%26external_user_id%3D%24%7BTM_USE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49902	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1068	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=1034837553500;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=250675423;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:33 UTC	2215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49913	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	885	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=14110&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&i=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49903	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1069	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=9882756875326;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news;ps=1;pcor=1582889796;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:33 UTC	2214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49904	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1319	OUT	GET /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:33 UTC	477	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 6e 6f 2d 63 61 63 68 65 2c 6e 6f 2d 73 74 6f 72 65 0d 0a 58 2d 43 61 63 68 65 3a 20 45 72 72 6f 72 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 65 61 33 62 66 63 63 64 36 38 Data Ascii: HTTP/1.1 405 Method Not AllowedContent-Type: text/html;charset=iso-8859-1Content-Length: 319Connection: closeDate: Tue, 05 Dec 2023 18:13:33 GMTCache-Control: must-revalidate,no-cache,no-storeX-Cache: Error from cloudfrontVia: 1.1 ea3bfccd68
2023-12-05 18:13:33 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49909	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	680	OUT	GET /w/1.0/pd?cc=1 HTTP/1.1 Host: nytimes-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
2023-12-05 18:13:33 UTC	383	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKVary: Accept, Accept-EncodingServer: OXGW/0.0.0Pragma: no-cacheP3P: CP="CUR ADM OUR NOR STA NID"Expires: Mon, 26 Jul 1997 05:00:00 GMTDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Type: image/gifContent-Length: 43Cache-Contro
2023-12-05 18:13:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49915	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1137	OUT	GET /ping?h=video%40nytimes.com&g=16698&p=https%3A%2F%2Fvp.nyt.com%2Fvideo%2F2023%2F12%2F05%2F113940_1_05vid-khan-younis-hospital_wg_480p.mp4&i=&g0=international_desk&u=klOrWDxbmHwDhoapt&t=CLFNODC-76e_CMggykBaThD7rTDi3&x=0&y=0&V=141&VS=H5&n=1&b=7532&r=&_vd=14880&_vi=Israel-Hamas%20War%20News%3A%20Latest%20Updates%20-%20The%20New%20York%20Times&_vp=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&_vh=nytimes.com&_pu=DrMis-D7EHvcW-4Z2&_pt=RbJMdCJWPcJC1gVgIerf6xC4LqZW&_pr=&_vdd=nytimes.com&_vt=ct&_vs=s1&_vcs=0&_vbr=-1&_vvs=0.003&_vpt=0&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vaup=man&_vce=0&c=0&W=0&R=0&I=1&E=0&j=75&tz=-60&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49914	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1136	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.02&x=0&m=0&y=907&o=1280&w=907&j=30&R=1&W=0&I=0&E=1&e=1&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=2&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49905	35.71.131.137	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	802	OUT	GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRgFKAEyCwj08OPbk_K6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIGZ29vZ2xl
2023-12-05 18:13:33 UTC	601	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 35 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 54 44 49 44 3d 33 61 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 251Connection: closeserver: Kestrellocation: https://eb2.3lift.com/xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent=set-cookie: TDID=3a
2023-12-05 18:13:33 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://eb2.3lift.com/xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent=">https://eb2.3lift.com/xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49908	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	634	OUT	GET /AdServer/ImgSync?p=163427&rdf=1 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES
2023-12-05 18:13:33 UTC	943	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 75 62 6d 61 74 69 63 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4e 44 42 45 4d 30 4d 31 51 6a 45 74 51 7a 6b 30 4e 43 30 30 52 6b 51 31 4c 55 49 78 51 6b 55 74 4d 45 45 7a 4d 54 4e 44 51 55 51 79 4d 7a 4d 7a 26 67 64 70 72 3d 2d 31 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Location: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NDBEM0M1QjEtQzk0NC00RkQ1LUIxQkUtMEEzMTNDQUQyMzMz&gdpr=-1&gdpr_consent=P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo
2023-12-05 18:13:33 UTC	170	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 75 62 6d 61 74 69 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 4e 44 42 45 4d 30 4d 31 51 6a 45 74 51 7a 6b 30 4e 43 30 30 52 6b 51 31 4c 55 49 78 51 6b 55 74 4d 45 45 7a 4d 54 4e 44 51 55 51 79 4d 7a 4d 7a 26 61 6d 70 3b 67 64 70 72 3d 2d 31 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NDBEM0M1QjEtQzk0NC00RkQ1LUIxQkUtMEEzMTNDQUQyMzMz&gdpr=-1&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49919	3.225.218.10	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	690	OUT	GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:33 UTC	634	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 50 33 50 3a 20 43 50 3d 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 61 20 44 45 56 61 20 54 41 49 61 20 50 53 41 61 20 50 53 44 61 20 4f 55 52 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAVLocation: https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49910	54.163.159.203	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	728	OUT	GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcs.media.net%2Fcksync.php%3Fcs%3D8%26type%3Ddxu%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=OQVhypoK1RazVj5
2023-12-05 18:13:33 UTC	695	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 26 74 79 70 65 3d 64 78 75 26 6f 76 73 69 64 3d 4f 51 56 68 79 70 6f 4b 31 52 61 7a 56 6a 35 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 69 6e 67 4d 61 74 63 68 2f 76 32 2e 30 2e 33 Data Ascii: HTTP/1.1 302 Cache-Control: no-cache, must-revalidateDate: Tue, 05 Dec 2023 18:13:33 GMTExpires: Fri, 01 Jan 1990 00:00:00 GMTLocation: https://cs.media.net/cksync.php?cs=8&type=dxu&ovsid=OQVhypoK1RazVj5Pragma: no-cacheServer: PingMatch/v2.0.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49907	35.211.178.172	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	736	OUT	GET /ul_cb/sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132; c=1701800013; tuuid_lu=1701800013
2023-12-05 18:13:33 UTC	759	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 2f 69 6e 76 2d 6e 65 74 73 2e 61 64 6d 69 78 65 72 2e 6e 65 74 2f 61 64 78 63 6d 2e 61 73 70 78 3f 73 73 70 3d 44 34 31 42 30 44 38 34 2d 34 44 42 37 2d 34 44 39 43 2d 38 31 43 43 2d 33 41 34 39 37 44 42 35 44 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:33 GMTContent-Length: 0Connection: closeCache-Control: no-cache, no-store, must-revalidateLocation: //inv-nets.admixer.net/adxcm.aspx?ssp=D41B0D84-4DB7-4D9C-81CC-3A497DB5D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49916	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1450	OUT	GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=true&us=anon&context-type=&areas=barOne&areas=dock HTTP/1.1 Host: mwcm.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:33 UTC	902	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 35 39 34 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6d 6f 74 73 2d 63 61 6d 70 61 69 67 6e 2d 6e 61 6d 65 73 3a 20 7b 22 62 61 72 4f 6e 65 22 3a 22 4d 41 47 5f 62 61 72 31 5f 74 65 73 74 5f 73 75 62 63 6f 6e 22 2c 22 64 6f 63 6b 22 3a 22 4d 41 47 5f 77 65 62 22 7d 0d 0a 78 2d 6e 79 74 2d 72 6f 75 74 65 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 16594cache-control: private, no-cache, no-store, must-revalidatecontent-type: application/json; charset=utf-8x-cmots-campaign-names: {"barOne":"MAG_bar1_test_subcon","dock":"MAG_web"}x-nyt-route:
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 7b 22 62 61 72 4f 6e 65 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 61 70 70 65 6e 64 45 78 69 74 55 72 69 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 61 72 4f 6e 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 62 61 72 4f 6e 65 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 31 34 66 65 65 62 31 64 2d 30 39 34 37 2d 34 38 33 33 2d 61 36 65 35 2d 61 34 65 38 38 64 30 66 62 66 33 33 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 Data Ascii: {"barOne":{"active":true,"appendExitUri":false,"html":"\n\n\n\n \u003cdiv class=\"barOne\" data-config-component-id=\"mkt-wcm:components/metered_assets/barOne/template/main\" data-component-uuid=\"14feeb1d-0947-4833-a6e5-a4e88d0fbf33\"\u003e\n\n\n\u003csc
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 72 4f 6e 65 5c 22 20 73 74 79 6c 65 3d 5c 22 20 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 3f 63 61 6d 70 61 69 67 6e 49 64 3d 39 51 51 39 4b 5c 22 5c 75 30 30 33 65 5c 6e 20 53 55 42 53 43 52 49 42 45 20 46 4f 52 20 24 32 2f 57 45 45 4b 5c 6e 20 5c 75 30 30 33 63 2f 61 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 2f 64 69 76 5c 75 30 30 33 65 5c 6e 5c 6e 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 72 65 61 74 69 76 65 2d 6f 76 65 72 72 69 64 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 70 2f 63 72 65 61 74 69 76 65 4f 76 65 72 72 69 64 65 2f 74 Data Ascii: rOne\" style=\" \" href=\"https://www.nytimes.com/subscription?campaignId=9QQ9K\"\u003e\n SUBSCRIBE FOR $2/WEEK\n \u003c/a\u003e\n\u003c/div\u003e\n\n\u003cdiv class=\"creative-override\" data-config-component-id=\"mkt-wcm:components/lp/creativeOverride/t
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 74 63 68 2e 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 2f 50 6c 61 74 66 6f 72 6d 73 2f 57 65 62 2d 2d 71 75 65 72 79 2d 70 61 72 61 6d 65 74 65 72 2d 5c 22 7d 2c 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 41 20 67 72 6f 75 70 20 6f 66 20 72 65 67 69 73 20 6f 72 20 61 6e 6f 6e 79 6d 6f 75 73 20 75 73 65 72 73 2e 20 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 4a 4b 49 44 44 2f 55 73 65 72 2d 53 74 61 74 75 73 2f 52 65 67 Data Ascii: e \\u0027plat\\u0027 query parameter. The \\u0027plat\\u0027 query parameter is required to match.\",\"path\":\"/QueryParameter/Platforms/Web--query-parameter-\"},{\"description\":\"A group of regis or anonymous users. \",\"path\":\"/JKIDD/User-Status/Reg
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 69 6e 67 54 69 65 72 73 5c 22 3a 7b 5c 22 31 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 33 36 34 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 31 33 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 35 32 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 35 32 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 31 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 31 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 Data Ascii: ingTiers\":{\"1\":{\"durationDays\":364,\"recurrence\":13,\"durationWeeks\":52,\"totalPrice\":52,\"weeklyPrice\":1,\"tierNumber\":1,\"rawPrice\":\"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\"
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 34 2e 32 35 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 32 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 31 37 2e 30 30 5c 22 7d 7d 2c 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 3a 5c 22 32 30 30 30 30 32 31 36 38 38 30 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 5c 22 2c 5c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 5c 22 3a 5c 22 Data Ascii: \"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\":4.25,\"tierNumber\":2,\"rawPrice\":\"17.00\"}},\"promoCode\":\"20000216880\",\"id\":\"0fd8cf46-d029-11ea-a072-340cee6a52b6\",\"currencyCode\":\"
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 6e 67 2d 73 65 72 76 69 63 65 73 2d 63 61 63 68 69 6e 67 5c 22 3a 66 61 6c 73 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 34 30 35 2d 2d 41 43 54 49 56 41 54 45 2d 41 42 52 41 2d 56 31 32 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 32 32 34 2d 2d 68 64 2d 61 75 78 50 72 6f 64 75 63 74 4d 61 70 70 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 31 34 39 2d 2d 43 49 52 43 55 49 54 2d 42 52 45 41 4b 45 52 2d 53 41 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 4f 42 43 4f 2d 33 30 33 38 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2d 72 6f 6c 6c 6f 75 74 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 34 33 39 2d 2d 43 49 47 2d 49 50 2d 53 45 47 4d 45 4e 54 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 Data Ascii: ng-services-caching\":false,\"FF-CMOTS-3405--ACTIVATE-ABRA-V12\":true,\"FF-CMOTS-224--hd-auxProductMapping\":true,\"FF-CMOTS-3149--CIRCUIT-BREAKER-SAS\":true,\"FF-MOBCO-3038-payment-methods-rollout\":true,\"FF-MWCM-4439--CIG-IP-SEGMENTS\":true,\"FF-MWCM-4
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 22 3a 22 4d 41 47 5f 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 73 61 6c 65 5f 62 61 72 31 63 6f 70 79 74 65 73 74 5f 73 75 62 63 6f 6e 5f 42 41 55 22 2c 22 70 61 67 65 50 61 74 68 22 3a 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 22 2c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 22 3a 74 72 75 65 2c 22 73 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 Data Ascii: "audienceName":"MAG_web_regi_anon_sale_bar1copytest_subcon_BAU","pagePath":"/marketing/mpc/muassets/variants/variant-2","isPageVariant":true,"segments":[{"description":"Based on the value of the \u0027plat\u0027 query parameter. The \u0027plat\u0027 query
2023-12-05 18:13:33 UTC	1379	IN	Data Raw: 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 64 6f 63 6b 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 64 6f 63 6b 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 64 37 65 32 38 32 33 65 2d 36 65 66 62 2d 34 36 33 64 2d 61 34 37 37 2d 62 63 64 64 35 33 33 30 64 31 61 32 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 5c 75 30 30 33 65 5c 6e 20 74 72 79 7b 76 61 72 20 6f 62 73 65 72 76 65 72 3d Data Ascii: l":"\n\n\n\n \u003cdiv class=\"dock\" data-config-component-id=\"mkt-wcm:components/metered_assets/dock/template/main\" data-component-uuid=\"d7e2823e-6efb-463d-a477-bcdd5330d1a2\"\u003e\n\n\n\u003cscript type=\"text/javascript\"\u003e\n try{var observer=
2023-12-05 18:13:33 UTC	1307	IN	Data Raw: 74 73 2f 76 61 72 69 61 6e 74 2d 32 35 5c 22 2c 5c 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 5c 22 3a 5c 22 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 61 6c 6c 5c 22 2c 5c 22 70 61 67 65 50 61 74 68 5c 22 3a 5c 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 35 5c 22 2c 5c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 5c 22 3a 74 72 75 65 2c 5c 22 73 65 67 6d 65 6e 74 73 5c 22 3a 5b 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 Data Ascii: ts/variant-25\",\"audienceName\":\"web_regi_anon_all\",\"pagePath\":\"/marketing/mpc/muassets/variants/variant-25\",\"isPageVariant\":true,\"segments\":[{\"description\":\"Based on the value of the \\u0027plat\\u0027 query parameter. The \\u0027plat\\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49918	23.56.8.25	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	743	OUT	GET /cksync.php?cs=1&type=crt&ovsid=b9a04974-b683-41e4-9726-527f7252b018&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy= HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10
2023-12-05 18:13:35 UTC	820	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 63 3d 62 39 61 30 34 39 37 34 2d 62 36 38 33 2d 34 31 65 34 2d 39 37 32 36 2d 35 32 37 66 37 32 35 32 62 30 31 38 7e 7e 31 3b 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 20 4a 61 6e 20 32 30 32 34 20 31 38 3a 31 33 3a 33 35 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 63 2d 74 73 3d 31 37 30 31 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-c=b9a04974-b683-41e4-9726-527f7252b018~~1;Expires=Thu, 04 Jan 2024 18:13:35 GMT;path=/;domain=.media.net; sameSite=none; secure=trueSet-Cookie: data-c-ts=1701
2023-12-05 18:13:35 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:35 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49920	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	1340	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:34 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 33 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:33 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49921	23.222.200.28	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	394	OUT	GET /cksync.php?cs=8 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10
2023-12-05 18:13:34 UTC	361	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 32 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 44 45 56 6f 20 54 41 49 20 50 53 41 20 50 53 44 6f 20 48 49 53 20 4f 55 52 20 42 55 53 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 53 54 41 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6d 6e 65 74 2d 68 6c 32 3a 20 45 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 52Content-Type: image/gifp3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA"Timing-Allow-Origin: *x-mnet-hl2: EExpires: Tue, 05 Dec 2023 18:13:34 GMTCache-Control: m
2023-12-05 18:13:34 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:34 UTC	9	IN	Data Raw: 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49922	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:33 UTC	698	OUT	GET /xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:34 UTC	449	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 33 63 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 4f 55 52 20 44 45 4c 20 53 41 4d 20 4f 54 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:34 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OT
2023-12-05 18:13:34 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49932	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:34 UTC	415	OUT	GET /w/1.0/pd?cc=1 HTTP/1.1 Host: nytimes-d.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
2023-12-05 18:13:34 UTC	244	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKVary: Accept, Accept-EncodingServer: OXGW/0.0.0Date: Tue, 05 Dec 2023 18:13:34 GMTContent-Type: text/htmlContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49926	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:34 UTC	1786	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 291 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:34 UTC	291	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 52 4a 69 39 6c 39 64 67 72 67 32 55 4f 31 77 75 32 31 63 30 61 62 6c 4d 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 5f 75 70 64 61 74 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 31 33 30 32 33 2c 22 64 61 74 61 22 3a 7b 22 61 63 74 69 76 65 54 69 6d 65 22 3a 35 30 30 30 2c Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"RJi9l9dgrg2UO1wu21c0ablM","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"page_update","how":"beacon","client_ts":1701800013023,"data":{"activeTime":5000,
2023-12-05 18:13:34 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:34 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49928	3.225.218.10	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:34 UTC	809	OUT	GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
2023-12-05 18:13:34 UTC	761	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 31 37 36 39 7e 32 66 66 75 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 30 32 34 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 3b 53 65 63 75 72 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:34 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC=1769~2ffu;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 04-Dec-2024 18:13:34 GMT;Secur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49929	23.46.192.28	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:34 UTC	751	OUT	GET /cksync.php?cs=8&type=con&ovsid=AAAFnRlIKeHkCQNsRLKZAAAAAAA&expiration=1701886413&is_secure=true&gdpr_consent=${GDPR_CONSENT}&gdpr=${GDPR} HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10
2023-12-05 18:13:34 UTC	585	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 63 6f 3d 41 41 41 46 6e 52 6c 49 4b 65 48 6b 43 51 4e 73 52 4c 4b 5a 41 41 41 41 41 41 41 7e 7e 38 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8;Expires=Tue, 03 Dec 2024 18:13:34 GMT;path=/;domain=.media.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID CUR ADMa
2023-12-05 18:13:34 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:34 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49925	23.46.192.28	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:34 UTC	660	OUT	GET /cksync.php?cs=8&type=dxu&ovsid=OQVhypoK1RazVj5 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10
2023-12-05 18:13:34 UTC	573	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 78 75 3d 4f 51 56 68 79 70 6f 4b 31 52 61 7a 56 6a 35 7e 7e 38 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 44 45 56 6f 20 54 41 49 20 50 53 41 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-xu=OQVhypoK1RazVj5~~8;Expires=Tue, 03 Dec 2024 18:13:34 GMT;path=/;domain=.media.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA
2023-12-05 18:13:34 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:34 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49931	216.219.92.22	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:34 UTC	852	OUT	GET /adxcm.aspx?ssp=D41B0D84-4DB7-4D9C-81CC-3A497DB5D0A6&gdpr=&consent=&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D354%26user_id%3D%24%24visitor_cookie%24%24%26ssp%3Dmedianet%26bsw_param%3Ddd7b0c52-83c2-4fd9-a13e-07c274ba1132%26gdpr%3D%26consent%3D%26gdpr_pd%3D1%26expires%3D7 HTTP/1.1 Host: inv-nets.admixer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:34 UTC	579	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 30 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 49 44 20 44 53 50 20 41 4c 4c 20 43 4f 52 22 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Tue, 05 Dec 2023 18:13:34 GMTContent-Length: 0Connection: closeAccess-Control-Allow-Origin: *Access-Control-Allow-Credentials: trueX-Xss-Protection: 0P3p: CP="NID DSP ALL COR"Location: https://x.bidsw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49933	3.225.218.10	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:34 UTC	803	OUT	GET /ups/58824/sync?_origin=0&dpid=55953&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC=1769~2ffu
2023-12-05 18:13:34 UTC	795	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 30 32 34 20 31 38 3a 31 33 3a Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:34 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 04-Dec-2024 18:13:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49934	23.222.200.28	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:35 UTC	584	OUT	GET /cksync.php?cs=8&type=con&ovsid=AAAFnRlIKeHkCQNsRLKZAAAAAAA&expiration=1701886413&is_secure=true&gdpr_consent=${GDPR_CONSENT}&gdpr=${GDPR} HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8
2023-12-05 18:13:35 UTC	585	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 63 6f 3d 41 41 41 46 6e 52 6c 49 4b 65 48 6b 43 51 4e 73 52 4c 4b 5a 41 41 41 41 41 41 41 7e 7e 38 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 35 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8;Expires=Tue, 03 Dec 2024 18:13:35 GMT;path=/;domain=.media.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID CUR ADMa
2023-12-05 18:13:35 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:35 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49935	23.222.200.28	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:35 UTC	493	OUT	GET /cksync.php?cs=8&type=dxu&ovsid=OQVhypoK1RazVj5 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8
2023-12-05 18:13:35 UTC	573	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 78 75 3d 4f 51 56 68 79 70 6f 4b 31 52 61 7a 56 6a 35 7e 7e 38 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 35 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 44 45 56 6f 20 54 41 49 20 50 53 41 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-xu=OQVhypoK1RazVj5~~8;Expires=Tue, 03 Dec 2024 18:13:35 GMT;path=/;domain=.media.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA
2023-12-05 18:13:35 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:35 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49937	35.211.178.172	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:35 UTC	812	OUT	GET /sync?dsp_id=354&user_id=0d6f033f3d39461fa9b3bd714dfb0a46&ssp=medianet&bsw_param=dd7b0c52-83c2-4fd9-a13e-07c274ba1132&gdpr=&consent=&gdpr_pd=1&expires=7 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132; c=1701800013; tuuid_lu=1701800013
2023-12-05 18:13:35 UTC	540	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 62 73 26 6f 76 73 69 64 3d 64 64 37 62 30 63 35 32 2d 38 33 63 32 2d 34 66 64 39 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:35 GMTContent-Length: 0Connection: closeCache-Control: no-cache, no-store, must-revalidateLocation: //contextual.media.net/cksync.php?cs=1&type=bs&ovsid=dd7b0c52-83c2-4fd9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49938	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:35 UTC	463	OUT	GET /xuid?mid=3658&xuid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:35 UTC	449	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 33 63 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 4f 55 52 20 44 45 4c 20 53 41 4d 20 4f 54 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:35 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OT
2023-12-05 18:13:35 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49936	8.28.7.83	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:35 UTC	813	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=-1&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES; SyncRTB3=1702944000%3A220; ipc=163427^^1^0; pi=163427:2; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=1
2023-12-05 18:13:35 UTC	410	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 35 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 38 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 73 65 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 24 7b 55 53 5f 50 52 49 56 41 43 59 7d 0d 0a 50 33 50 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:35 GMTTransfer-Encoding: chunkedConnection: closeLocation: https://image8.pubmatic.com/AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY}P3P: CP="NOI DSP
2023-12-05 18:13:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49940	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:35 UTC	800	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES; SyncRTB3=1702944000%3A220; ipc=163427^^1^0; pi=163427:2; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=1
2023-12-05 18:13:36 UTC	620	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 70 63 3d 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 30 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 3d 31 36 33 34 32 37 3a 33 Data Ascii: HTTP/1.1 204 No ContentP3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure;Set-Cookie: pi=163427:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49941	23.56.8.25	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:35 UTC	856	OUT	GET /cksync.php?cs=1&type=bs&ovsid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132&gdpr=&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-c-ts=1701800015
2023-12-05 18:13:36 UTC	615	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 62 73 3d 64 64 37 62 30 63 35 32 2d 38 33 63 32 2d 34 66 64 39 2d 61 31 33 65 2d 30 37 63 32 37 34 62 61 31 31 33 32 7e 7e 31 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 36 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1;Expires=Tue, 03 Dec 2024 18:13:36 GMT;path=/;domain=.media.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID
2023-12-05 18:13:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:36 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49945	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:36 UTC	716	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZW9oTgAEu8UX8gBU&_test=ZW9oTgAEu8UX8gBU HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:36 UTC	979	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 39 38 33 64 30 30 30 37 65 31 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:36 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43983d0007e1-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49948	23.55.204.22	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:36 UTC	695	OUT	GET /cksync.php?cs=1&type=crt&ovsid=b9a04974-b683-41e4-9726-527f7252b018&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy= HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-c-ts=1701800015; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1
2023-12-05 18:13:37 UTC	820	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 63 3d 62 39 61 30 34 39 37 34 2d 62 36 38 33 2d 34 31 65 34 2d 39 37 32 36 2d 35 32 37 66 37 32 35 32 62 30 31 38 7e 7e 31 3b 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 20 4a 61 6e 20 32 30 32 34 20 31 38 3a 31 33 3a 33 36 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 63 2d 74 73 3d 31 37 30 31 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-c=b9a04974-b683-41e4-9726-527f7252b018~~1;Expires=Thu, 04 Jan 2024 18:13:36 GMT;path=/;domain=.media.net; sameSite=none; secure=trueSet-Cookie: data-c-ts=1701
2023-12-05 18:13:37 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:37 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49947	23.55.204.22	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:36 UTC	670	OUT	GET /cksync.php?cs=1&type=bs&ovsid=dd7b0c52-83c2-4fd9-a13e-07c274ba1132&gdpr=&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-c-ts=1701800015; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1
2023-12-05 18:13:36 UTC	615	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 62 73 3d 64 64 37 62 30 63 35 32 2d 38 33 63 32 2d 34 66 64 39 2d 61 31 33 65 2d 30 37 63 32 37 34 62 61 31 31 33 32 7e 7e 31 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 36 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 6d 65 64 69 61 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1;Expires=Tue, 03 Dec 2024 18:13:36 GMT;path=/;domain=.media.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID
2023-12-05 18:13:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:36 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49946	23.218.218.72	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:36 UTC	700	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:36 UTC	905	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 76 69 73 69 74 6f 72 2d 69 64 3d 33 34 34 38 30 31 36 31 36 30 31 38 34 33 38 30 30 30 30 56 31 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 32 20 4a 75 6e 20 32 30 32 34 20 31 38 3a 31 33 3a 33 36 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 74 74 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: visitor-id=3448016160184380000V10; Expires=Sun, 02 Jun 2024 18:13:36 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=trueSet-Cookie: data-ttd=3a743bef-66e
2023-12-05 18:13:36 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:36 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49949	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:37 UTC	481	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZW9oTgAEu8UX8gBU&_test=ZW9oTgAEu8UX8gBU HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:37 UTC	985	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 39 62 61 38 63 62 30 37 63 63 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:37 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e439ba8cb07cc-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49951	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:37 UTC	586	OUT	GET /c2/3005403/cs.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
2023-12-05 18:13:37 UTC	378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 37 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 69 6e 74 65 72 6e 61 6c 2d 63 32 2f 33 30 30 35 34 30 33 2f 63 73 2e 6a 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 55 41 2c 20 50 6c 61 74 66 6f 72 6d 2c 20 41 72 63 68 2c 20 4d 6f 64 65 6c 2c 20 4d 6f 62 69 6c 65 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 69 73 73 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 34 32 30 62 30 34 35 31 35 61 66 62 65 63 30 63 34 35 62 35 39 36 31 37 66 31 33 66 37 39 32 61 2e 63 6c 6f Data Ascii: HTTP/1.1 302 FoundContent-Length: 0Connection: closeDate: Tue, 05 Dec 2023 18:13:37 GMTLocation: /internal-c2/3005403/cs.jsAccept-CH: UA, Platform, Arch, Model, MobileX-Cache: Miss from cloudfrontVia: 1.1 420b04515afbec0c45b59617f13f792a.clo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49953	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:37 UTC	530	OUT	GET /loader.js HTTP/1.1 Host: platform.iteratehq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:37 UTC	996	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 32 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 69 64 2d 32 3a 20 67 75 2b 5a 6a 41 73 71 38 6d 6d 71 76 68 42 6e 65 62 79 61 53 63 4e 38 75 47 47 6c 2b 38 73 6a 64 49 46 36 7a 57 78 76 33 54 52 30 42 2f 42 4d 72 36 6c 78 56 49 71 77 75 72 46 69 62 44 47 58 72 43 6e 32 64 55 33 70 38 6b 71 36 45 63 55 59 65 4d 46 65 31 32 4e 57 77 69 43 78 35 76 6f 35 56 71 2b 56 79 61 56 6d 72 70 34 3d 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:37 GMTContent-Type: application/javascriptContent-Length: 1324Connection: closex-amz-id-2: gu+ZjAsq8mmqvhBnebyaScN8uGGl+8sjdIF6zWxv3TR0B/BMr6lxVIqwurFibDGXrCn2dU3p8kq6EcUYeMFe12NWwiCx5vo5Vq+VyaVmrp4=
2023-12-05 18:13:37 UTC	373	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 5b 65 5d 7c 7c 28 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 3d 21 30 2c 74 29 29 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 72 2c 6f 2e 63 3d 6e 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(r){var n={};function o(e){var t;return(n[e]\|\|(t=n[e]={i:e,l:!1,exports:{}},r[e].call(t.exports,t,t.exports,o),t.l=!0,t)).exports}o.m=r,o.c=n,o.d=function(e,t,r){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},o.r=function(e){"undefin
2023-12-05 18:13:37 UTC	951	IN	Data Raw: 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6f 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6f 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6f 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 2c 32 26 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 66 6f Data Ascii: erty(e,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(o.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49954	23.218.218.72	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:37 UTC	559	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
2023-12-05 18:13:37 UTC	680	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 74 74 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 7e 7e 36 33 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 37 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63;Expires=Tue, 19 Dec 2023 18:13:37 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=truep3p: CP="NON DSP COR
2023-12-05 18:13:37 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:37 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49952	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:37 UTC	1847	OUT	GET /vi-assets/static-assets/live-favicon-29072d699076b4150ceb4d77a33c448e.ico HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:37 UTC	1335	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 32 38 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 6c 30 64 52 57 63 50 63 6f 34 7a 53 34 42 47 72 5a 4a 63 4b 30 64 6b 61 56 39 54 61 51 57 76 42 6f 51 6c 39 73 2d 52 63 73 5a 6e 5a 61 37 78 63 31 4a 68 64 7a 36 31 2d 53 51 63 30 79 51 6f 53 7a 51 31 49 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 36 31 33 31 33 30 36 39 37 30 31 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4286X-GUploader-UploadID: ABPtcPql0dRWcPco4zS4BGrZJcK0dkaV9TaQWvBoQl9s-RcsZnZa7xc1Jhdz61-SQc0yQoSzQ1Ix-goog-generation: 1701613130697012x-goog-metageneration: 1x-goog-stored-content-encoding: ide
2023-12-05 18:13:37 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:37 UTC	1379	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 25 16 00 00 25 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 20 cf 10 3a 25 d7 60 39 25 d6 a0 3b 25 d7 d0 3a 25 d8 ef 3a 25 d7 ff 3a 25 d7 ff 3a 25 d8 ef 3b 25 d7 d0 39 25 d6 a0 3a 25 d7 60 40 20 cf 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 28 d7 20 39 25 d6 a0 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a Data Ascii: ( @ %%@ :%`9%;%:%:%:%:%;%9%:%`@ 8( 9%:%:%:%:%:%:%:
2023-12-05 18:13:37 UTC	1379	IN	Data Raw: 12 12 ff 21 21 21 ff e2 e2 e2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 e1 e1 ff e1 e1 e1 ff ff ff ff ff ff ff ff ff ff ff ff ff 30 30 30 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 6a 6a 6a ff ff ff ff ff e7 e4 fa ff 3a 25 d7 ff 3a 25 d7 ff 40 20 cf 10 3a 25 d4 60 3a 25 d7 ff 6b 5b e1 ff ff ff ff ff f0 f0 f0 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 88 88 88 ff ff ff ff ff ff ff ff ff ff ff ff ff a6 a6 a6 ff 2f 2f 2f ff 12 12 12 ff 12 12 12 ff 20 20 20 ff 5c 5c 5c ff e1 e1 e1 ff c4 c4 c4 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff e1 e1 e1 ff ff ff ff ff 6b 5c e1 ff 3a 25 d7 ff 38 23 d7 60 39 25 d6 a0 3a 25 d7 ff a9 a0 ee ff ff ff ff ff 88 88 88 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff Data Ascii: !!!000jjj:%:%@ :%`:%k[/// \\\k\:%8#`9%:%
2023-12-05 18:13:37 UTC	1379	IN	Data Raw: 3a 25 d7 ff e6 e3 fa ff ff ff ff ff 6b 6b 6b ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 97 97 97 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 e1 e1 ff f0 f0 f0 ff ff ff ff ff e1 e1 e1 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 4d 4d 4d ff ff ff ff ff e6 e3 fa ff 3a 25 d7 ff 3a 25 d6 ef 40 20 cf 10 00 00 00 00 39 25 d6 a0 3a 25 d7 ff 83 76 e6 ff ff ff ff ff e2 e2 e2 ff 21 21 21 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff a6 a6 a6 ff ff ff ff ff ff ff ff ff ff ff ff ff c3 c3 c3 ff 6a 6a 6a ff 2f 2f 2f ff 12 12 12 ff 2f 2f 2f ff ff ff ff ff 88 88 88 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 21 21 21 ff e2 e2 e2 ff ff ff ff ff 83 76 e6 ff 3a 25 d7 ff 3a 23 d4 90 00 00 00 00 00 00 00 00 38 28 d7 Data Ascii: :%kkkMMM:%:%@ 9%:%v!!!jjj//////!!!v:%:#8(
2023-12-05 18:13:37 UTC	149	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c0 03 ff ff 00 00 ff fe 00 00 3f f8 00 00 1f f0 00 00 0f e0 00 00 07 c0 00 00 07 c0 00 00 03 80 00 00 01 80 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 01 80 00 00 01 c0 00 00 03 e0 00 00 03 e0 00 00 07 f0 00 00 0f f8 00 00 1f fc 00 00 7f ff 00 00 ff ff c0 03 ff Data Ascii: ?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49950	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:37 UTC	1734	OUT	GET //.status HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: / content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:37 UTC	469	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 30 36 63 30 66 39 30 66 35 61 61 32 39 34 63 31 32 61 30 30 61 62 37 30 66 32 37 66 39 65 36 33 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 37 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 33 34 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 Data Ascii: HTTP/1.1 200 OKx-content-type-options: nosniffcontent-type: text/plain; charset=utf-8x-cloud-trace-context: 06c0f90f5aa294c12a00ab70f27f9e63date: Tue, 05 Dec 2023 18:13:37 GMTserver: envoycontent-length: 34via: 1.1 googlex-envoy-upstream-s
2023-12-05 18:13:37 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49955	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:38 UTC	595	OUT	GET /internal-c2/3005403/cs.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
2023-12-05 18:13:38 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 36 3a 30 33 3a 34 39 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 33 20 4a 75 6c 20 32 30 32 33 20 31 34 3a 34 38 3a 33 36 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 64 34 31 64 38 63 64 39 38 66 30 30 62 32 30 34 65 39 38 30 30 39 39 38 65 63 66 38 34 32 37 65 22 0d 0a 78 2d 61 6d 7a 2d 73 65 72 76 65 72 2d 73 69 64 65 2d 65 6e 63 72 79 70 74 69 6f 6e 3a 20 41 45 53 32 35 36 0d Data Ascii: HTTP/1.1 200 OKContent-Type: application/javascriptContent-Length: 0Connection: closeDate: Tue, 05 Dec 2023 16:03:49 GMTLast-Modified: Mon, 03 Jul 2023 14:48:36 GMTETag: "d41d8cd98f00b204e9800998ecf8427e"x-amz-server-side-encryption: AES256

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49957	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:38 UTC	1842	OUT	GET /vi-assets/static-assets/favicon-d2483f10ef688e6f89e23806b9700298.ico HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:38 UTC	1330	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 34 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 4c 58 61 61 43 41 43 78 49 53 41 68 46 73 37 32 68 4c 53 6b 4c 69 6e 75 5f 4a 58 42 67 37 36 5f 4a 50 72 73 65 7a 49 4a 48 50 50 69 76 62 5f 68 63 55 6c 32 5a 47 74 78 39 67 44 48 73 31 41 4b 6c 54 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 31 31 37 39 34 32 35 37 35 34 33 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1648X-GUploader-UploadID: ABPtcPpLXaaCACxISAhFs72hLSkLinu_JXBg76_JPrsezIJHPPivb_hcUl2ZGtx9gDHs1AKlTwx-goog-generation: 1701117942575433x-goog-metageneration: 1x-goog-stored-content-encoding: iden
2023-12-05 18:13:38 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:38 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 06 2a 49 44 41 54 68 05 ed 99 69 4c 5c 55 14 c7 99 61 6d 01 a5 ec cb 48 09 42 ab 05 93 aa 1f 24 36 71 10 6b dd 6a ea 12 88 ad b5 26 35 1a fd 00 a8 b1 8d 4b 62 b0 9a 34 98 68 b4 7e 6c a2 46 ad b6 60 d2 c4 50 4d 54 0c 6a 0c 8d d6 aa 11 a4 b1 2a 9a b4 c8 36 2c 55 b6 01 66 fc 1d d2 47 de 3c ee 7b 73 1f 50 fd 20 37 b9 b9 f7 9e ed fe cf b9 db 79 33 31 31 2b 65 25 02 ff ef 08 78 fe 0b f7 c3 e1 b0 a7 bc bc 3c 7e 6c 6c cc 9b 9c 9c 1c ea e8 e8 98 f6 78 3c e1 c5 60 f1 2e 46 69 a9 3a 35 35 35 de 89 89 89 55 38 e0 eb ed ed 6d c8 c8 c8 98 4c 4f 4f 6f ca cc cc 5c ef d6 f6 a2 57 80 09 2b 88 da ed 4c 78 39 75 0d 75 94 7a 16 da 77 Data Ascii: PNGIHDR00WsRGBIDAThiL\UamHB$6qkj&5Kb4h~lF`PMTj6,UfG<{sP 7y311+e%x<~llx<`.Fi:555U8mLOOo\W+Lx9uuzw
2023-12-05 18:13:38 UTC	269	IN	Data Raw: 82 fc 3a f7 82 96 e5 98 98 59 80 9c 44 f6 5b da 01 c0 0e d3 26 50 73 e8 cb cf e8 15 54 39 b0 d6 12 80 50 cc 0a 9c b3 32 54 63 57 0e c8 21 63 9f b6 60 e8 66 95 b1 65 a2 ed 06 fc 1b ba b6 5c 39 20 46 e5 e5 25 82 1f d1 dd a4 3b 89 ae 1c ab f3 0e 87 de 55 46 aa 7d 06 0c 10 1c ba bf f8 35 ee 26 c6 cd 06 6d 39 5a c0 7f 40 fa b0 e0 97 8b 68 b6 5d 3b 20 06 c9 5d c6 58 e6 1a 72 99 07 19 8e 44 9b 24 0a 3f 04 f8 c6 aa aa aa bb 24 5b 8d 22 bb 80 ed 7a 0b 59 2d 14 16 16 ae e1 bf ae 27 38 dc 0f c1 cb b4 f2 9d c6 00 ff 84 fa 34 ab 2a ff 17 2c aa 2c d9 01 63 56 f9 54 1c 19 19 d9 c2 f9 b8 0d 9a fc 7f b6 1e a7 92 0c fe f9 36 00 fd 07 e8 f2 d0 35 b3 df 4f 59 f8 ae 87 cb e6 80 6a 66 b9 eb d9 16 73 73 f0 ed 1c 96 6f 01 95 dc 0a 6d 25 02 2b 11 58 7c 04 fe 01 5e 21 2f e7 33 a0 Data Ascii: :YD[&PsT9P2TcW!c`fe\9 F%;UF}5&m9Z@h]; ]XrD$?$["zY-'84*,,cVT65OYjfssom%+X\|^!/3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49956	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:38 UTC	555	OUT	GET /match-prod-eb0e5d28cbc017a01544.js HTTP/1.1 Host: platform.iteratehq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:38 UTC	978	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 38 37 31 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 69 64 2d 32 3a 20 76 69 33 45 6e 51 44 6d 49 4c 33 47 41 52 45 78 42 61 53 4a 68 61 48 67 68 71 47 6f 7a 6c 7a 66 52 6e 39 30 69 67 39 59 4d 5a 43 48 58 78 71 69 6e 2f 39 75 2f 6d 37 4d 66 73 63 4b 32 41 4d 53 62 52 58 53 5a 6d 4e 75 70 39 51 3d 0d 0a 78 2d 61 6d 7a 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 44 57 35 39 41 57 4b 4d 48 38 34 44 41 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:38 GMTContent-Type: application/javascriptContent-Length: 88717Connection: closex-amz-id-2: vi3EnQDmIL3GARExBaSJhaHghqGozlzfRn90ig9YMZCHXxqin/9u/m7MfscK2AMSbRXSZmNup9Q=x-amz-request-id: DW59AWKMH84DA
2023-12-05 18:13:38 UTC	391	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 72 5b 65 5d 7c 7c 28 74 3d 72 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 3d 21 30 2c 74 29 29 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 6e 2c 6f 2e 63 3d 72 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(n){var r={};function o(e){var t;return(r[e]\|\|(t=r[e]={i:e,l:!1,exports:{}},n[e].call(t.exports,t,t.exports,o),t.l=!0,t)).exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefin
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6f 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6f 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6f 2e 72 28 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 2c 32 26 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 6f 2e 64 28 6e Data Ascii: ",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)o.d(n
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 61 69 74 73 3a 76 6f 69 64 20 30 7d 3b 63 61 73 65 22 43 4c 45 41 52 5f 55 53 45 52 5f 44 41 54 41 22 3a 72 65 74 75 72 6e 7b 2e 2e 2e 65 2c 65 76 65 6e 74 5f 74 72 61 69 74 73 3a 76 6f 69 64 20 30 2c 75 73 65 72 5f 74 72 61 69 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 63 6b 69 6e 67 3a 76 6f 69 64 20 30 7d 3b 63 61 73 65 22 55 50 44 41 54 45 5f 43 4f 4e 54 45 58 54 22 3a 72 65 74 75 72 6e 7b 2e 2e 2e 65 2c 2e 2e 2e 74 2e 63 6f 6e 74 65 78 74 7d 3b 63 61 73 65 22 55 50 44 41 54 45 5f 43 4f 4e 54 45 58 54 5f 50 52 45 56 49 45 57 22 3a 76 61 72 20 6e 3d 74 5b 22 70 72 65 76 69 65 77 4d 6f 64 65 44 61 74 61 22 5d 2c 72 3d 7b 2e 2e 2e 6e 75 6c 6c 21 3d 28 72 3d 65 2e 74 61 72 67 65 74 69 6e 67 29 3f 72 3a 7b 7d 7d 3b 72 65 74 75 72 6e 21 30 3d 3d 3d 6e 2e 69 73 Data Ascii: aits:void 0};case"CLEAR_USER_DATA":return{...e,event_traits:void 0,user_traits:void 0,tracking:void 0};case"UPDATE_CONTEXT":return{...e,...t.context};case"UPDATE_CONTEXT_PREVIEW":var n=t["previewModeData"],r={...null!=(r=e.targeting)?r:{}};return!0===n.is
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 7b 69 6e 73 74 61 6c 6c 65 64 3a 5b 5d 2c 65 78 65 63 75 74 65 64 3a 21 31 7d 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 72 2c 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 3b 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 22 43 4c 45 41 52 5f 54 52 49 47 47 45 52 53 22 3a 72 65 74 75 72 6e 20 72 3b 63 61 73 65 22 54 52 49 47 47 45 52 5f 45 58 45 43 55 54 45 44 22 3a 76 61 Data Ascii: 7:function(e,t,n){"use strict";const r={installed:[],executed:!1};t.a=function(){var e=0<arguments.length&&void 0!==arguments[0]?arguments[0]:r,t=1<arguments.length?arguments[1]:void 0;switch(t.type){case"CLEAR_TRIGGERS":return r;case"TRIGGER_EXECUTED":va
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 70 75 73 68 28 72 29 3a 28 6e 2e 5f 68 61 6e 64 6c 65 64 3d 21 30 2c 61 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 31 3d 3d 3d 6e 2e 5f 73 74 61 74 65 3f 72 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3a 72 2e 6f 6e 52 65 6a 65 63 74 65 64 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 28 31 3d 3d 3d 6e 2e 5f 73 74 61 74 65 3f 63 3a 6c 29 28 72 2e 70 72 6f 6d 69 73 65 2c 6e 2e 5f 76 61 6c 75 65 29 3b 65 6c 73 65 7b 74 72 79 7b 65 3d 74 28 6e 2e 5f 76 61 6c 75 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 28 72 2e 70 72 6f 6d 69 73 65 2c 65 29 7d 63 28 72 2e 70 72 6f 6d 69 73 65 2c 65 29 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 72 79 7b 69 66 28 65 3d 3d 3d 74 29 Data Ascii: push(r):(n._handled=!0,a._immediateFn(function(){var e,t=1===n._state?r.onFulfilled:r.onRejected;if(null===t)(1===n._state?c:l)(r.promise,n._value);else{try{e=t(n._value)}catch(e){return void l(r.promise,e)}c(r.promise,e)}}))}function c(t,e){try{if(e===t)
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6f 28 5b 5d 29 3b 76 61 72 20 73 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 65 29 7b 74 72 79 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 72 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6e 2c 65 29 7d 2c 69 29 7d 61 5b 6e 5d 3d 65 2c 30 3d 3d 2d 2d 73 26 26 6f Data Ascii: e.slice.call(t);if(0===a.length)return o([]);var s=a.length;for(var e=0;e<a.length;e++)!function t(n,e){try{if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if("function"==typeof r)return void r.call(e,function(e){t(n,e)},i)}a[n]=e,0==--s&&o
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 68 69 73 2e 61 76 61 69 6c 61 62 6c 65 43 6f 6d 6d 61 6e 64 73 3d 7b 7d 2c 6e 2e 66 6f 72 45 61 63 68 28 65 3d 3e 74 68 69 73 2e 61 64 64 43 6f 6d 6d 61 6e 64 28 65 29 29 7d 61 64 64 43 6f 6d 6d 61 6e 64 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 65 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 7c 7c 69 2e 61 2e 65 72 72 6f 72 28 6e 65 77 20 45 72 72 6f 72 28 74 2e 6e 61 6d 65 28 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 73 75 62 63 6c 61 73 73 20 6f 66 20 43 6f 6d 6d 61 6e 64 22 29 29 2c 74 68 69 73 2e 61 76 61 69 6c 61 62 6c 65 43 6f 6d 6d 61 6e 64 73 5b 74 2e 6e 61 6d 65 28 29 5d 3d 65 7d 69 6e 69 74 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 29 3b 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 71 26 26 65 2e 71 2e 66 6f 72 45 61 63 Data Ascii: his.availableCommands={},n.forEach(e=>this.addCommand(e))}addCommand(e){var t=new e;t instanceof a\|\|i.a.error(new Error(t.name()+" is not a subclass of Command")),this.availableCommands[t.name()]=e}init(){var e=Object(o.a)();null!=e&&null!=e.q&&e.q.forEac
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 65 29 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 72 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6e 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 5b 6e 5d 3d 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 65 7d 2c 30 3d 3d 2d 2d 61 26 26 6f 28 69 29 7d 29 7d 69 5b 6e 5d 3d 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 2c 30 3d 3d Data Ascii: .length;t++)!function t(n,e){if(e&&("object"==typeof e\|\|"function"==typeof e)){var r=e.then;if("function"==typeof r)return void r.call(e,function(e){t(n,e)},function(e){i[n]={status:"rejected",reason:e},0==--a&&o(i)})}i[n]={status:"fulfilled",value:e},0==
2023-12-05 18:13:38 UTC	1369	IN	Data Raw: 74 20 65 2c 74 2c 6e 2c 72 3b 66 6f 72 28 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 6f 29 2c 61 3d 30 3b 61 3c 6f 3b 61 2b 2b 29 69 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 3b 73 77 69 74 63 68 28 69 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 32 3a 5b 6e 2c 72 5d 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 5b 74 2c 6e 2c 72 5d 3d 69 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 5b 74 2c 65 2c 6e 2c 72 5d 3d 69 7d 76 61 72 20 73 3d 64 2e 61 2e 75 70 64 61 74 65 28 74 2c 65 3d 3e 6e 28 4f 62 6a 65 63 74 28 6c 2e 72 29 28 65 29 29 29 2c 75 3d 6e 75 6c 6c 3d 3d 28 75 3d 72 2e 63 6f 6e 74 65 78 74 29 3f 76 6f 69 64 20 30 3a 75 2e 65 76 65 6e 74 5f 74 72 61 69 74 73 2c 63 3d 21 31 21 3d 3d Data Ascii: t e,t,n,r;for(var o=arguments.length,i=new Array(o),a=0;a<o;a++)i[a]=arguments[a];switch(i.length){case 2:[n,r]=i;break;case 3:[t,n,r]=i;break;default:[t,e,n,r]=i}var s=d.a.update(t,e=>n(Object(l.r)(e))),u=null==(u=r.context)?void 0:u.event_traits,c=!1!==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49959	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:38 UTC	1521	OUT	GET //.status HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:38 UTC	469	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 38 33 36 35 62 65 65 32 62 34 37 38 61 63 33 33 64 30 34 32 62 36 64 38 32 66 32 61 61 39 34 35 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 38 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 33 34 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 Data Ascii: HTTP/1.1 200 OKx-content-type-options: nosniffcontent-type: text/plain; charset=utf-8x-cloud-trace-context: 8365bee2b478ac33d042b6d82f2aa945date: Tue, 05 Dec 2023 18:13:38 GMTserver: envoycontent-length: 34via: 1.1 googlex-envoy-upstream-s
2023-12-05 18:13:38 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49958	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:38 UTC	1563	OUT	GET /vi-assets/static-assets/live-favicon-29072d699076b4150ceb4d77a33c448e.ico HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:38 UTC	1368	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 32 38 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 6b 46 39 35 41 54 4c 32 4c 39 4d 55 48 6a 4d 75 32 64 71 32 61 49 7a 70 31 50 78 52 4a 72 68 50 46 69 78 42 61 44 35 55 48 36 7a 77 50 53 5f 51 50 55 45 39 59 59 75 61 39 70 5a 58 69 6c 56 79 4d 51 5f 72 46 71 46 79 52 4d 38 57 32 34 65 54 51 42 66 59 79 4a 61 61 42 77 4b 76 58 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 53 65 70 20 32 30 32 34 20 31 32 3a 35 31 3a 33 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4286X-GUploader-UploadID: ADPycdukF95ATL2L9MUHjMu2dq2aIzp1PxRJrhPFixBaD5UH6zwPS_QPUE9YYua9pZXilVyMQ_rFqFyRM8W24eTQBfYyJaaBwKvXCache-Control: public,max-age=31536000Expires: Thu, 19 Sep 2024 12:51:3
2023-12-05 18:13:38 UTC	592	IN	Data Raw: 78 2d 6e 79 74 2d 72 6f 75 74 65 3a 20 76 69 2d 61 73 73 65 74 73 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 Data Ascii: x-nyt-route: vi-assetsContent-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: b
2023-12-05 18:13:38 UTC	1379	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 25 16 00 00 25 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 20 cf 10 3a 25 d7 60 39 25 d6 a0 3b 25 d7 d0 3a 25 d8 ef 3a 25 d7 ff 3a 25 d7 ff 3a 25 d8 ef 3b 25 d7 d0 39 25 d6 a0 3a 25 d7 60 40 20 cf 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 28 d7 20 39 25 d6 a0 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a 25 d7 ff 3a Data Ascii: ( @ %%@ :%`9%;%:%:%:%:%;%9%:%`@ 8( 9%:%:%:%:%:%:%:
2023-12-05 18:13:38 UTC	1379	IN	Data Raw: 12 12 ff 21 21 21 ff e2 e2 e2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 e1 e1 ff e1 e1 e1 ff ff ff ff ff ff ff ff ff ff ff ff ff 30 30 30 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 6a 6a 6a ff ff ff ff ff e7 e4 fa ff 3a 25 d7 ff 3a 25 d7 ff 40 20 cf 10 3a 25 d4 60 3a 25 d7 ff 6b 5b e1 ff ff ff ff ff f0 f0 f0 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 88 88 88 ff ff ff ff ff ff ff ff ff ff ff ff ff a6 a6 a6 ff 2f 2f 2f ff 12 12 12 ff 12 12 12 ff 20 20 20 ff 5c 5c 5c ff e1 e1 e1 ff c4 c4 c4 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff e1 e1 e1 ff ff ff ff ff 6b 5c e1 ff 3a 25 d7 ff 38 23 d7 60 39 25 d6 a0 3a 25 d7 ff a9 a0 ee ff ff ff ff ff 88 88 88 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff Data Ascii: !!!000jjj:%:%@ :%`:%k[/// \\\k\:%8#`9%:%
2023-12-05 18:13:38 UTC	1379	IN	Data Raw: 3a 25 d7 ff e6 e3 fa ff ff ff ff ff 6b 6b 6b ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 97 97 97 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e1 e1 e1 ff f0 f0 f0 ff ff ff ff ff e1 e1 e1 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 4d 4d 4d ff ff ff ff ff e6 e3 fa ff 3a 25 d7 ff 3a 25 d6 ef 40 20 cf 10 00 00 00 00 39 25 d6 a0 3a 25 d7 ff 83 76 e6 ff ff ff ff ff e2 e2 e2 ff 21 21 21 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff a6 a6 a6 ff ff ff ff ff ff ff ff ff ff ff ff ff c3 c3 c3 ff 6a 6a 6a ff 2f 2f 2f ff 12 12 12 ff 2f 2f 2f ff ff ff ff ff 88 88 88 ff 12 12 12 ff 12 12 12 ff 12 12 12 ff 21 21 21 ff e2 e2 e2 ff ff ff ff ff 83 76 e6 ff 3a 25 d7 ff 3a 23 d4 90 00 00 00 00 00 00 00 00 38 28 d7 Data Ascii: :%kkkMMM:%:%@ 9%:%v!!!jjj//////!!!v:%:#8(
2023-12-05 18:13:38 UTC	149	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c0 03 ff ff 00 00 ff fe 00 00 3f f8 00 00 1f f0 00 00 0f e0 00 00 07 c0 00 00 07 c0 00 00 03 80 00 00 01 80 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 01 80 00 00 01 c0 00 00 03 e0 00 00 03 e0 00 00 07 f0 00 00 0f f8 00 00 1f fc 00 00 7f ff 00 00 ff ff c0 03 ff Data Ascii: ?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49960	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:38 UTC	1558	OUT	GET /vi-assets/static-assets/favicon-d2483f10ef688e6f89e23806b9700298.ico HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:38 UTC	1361	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 34 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 61 44 72 39 36 55 64 77 63 59 77 69 54 4d 45 49 56 66 4a 71 2d 4a 5f 4c 65 46 6f 79 74 6c 4e 4f 51 70 58 73 68 2d 68 68 5a 49 31 4c 4d 35 6d 61 47 6f 6e 79 31 6b 5a 56 4a 52 35 31 69 6d 67 35 2d 59 5a 36 76 35 31 72 6d 6b 4c 70 31 6e 59 48 62 75 73 71 62 52 68 50 66 4d 50 54 64 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 35 20 53 65 70 20 32 30 32 34 20 30 39 3a 32 31 3a 35 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1648X-GUploader-UploadID: ADPycduaDr96UdwcYwiTMEIVfJq-J_LeFoytlNOQpXsh-hhZI1LM5maGony1kZVJR51img5-YZ6v51rmkLp1nYHbusqbRhPfMPTdCache-Control: public,max-age=31536000Expires: Thu, 05 Sep 2024 09:21:5
2023-12-05 18:13:38 UTC	592	IN	Data Raw: 78 2d 6e 79 74 2d 72 6f 75 74 65 3a 20 76 69 2d 61 73 73 65 74 73 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 Data Ascii: x-nyt-route: vi-assetsContent-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: b
2023-12-05 18:13:38 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 06 2a 49 44 41 54 68 05 ed 99 69 4c 5c 55 14 c7 99 61 6d 01 a5 ec cb 48 09 42 ab 05 93 aa 1f 24 36 71 10 6b dd 6a ea 12 88 ad b5 26 35 1a fd 00 a8 b1 8d 4b 62 b0 9a 34 98 68 b4 7e 6c a2 46 ad b6 60 d2 c4 50 4d 54 0c 6a 0c 8d d6 aa 11 a4 b1 2a 9a b4 c8 36 2c 55 b6 01 66 fc 1d d2 47 de 3c ee 7b 73 1f 50 fd 20 37 b9 b9 f7 9e ed fe cf b9 db 79 33 31 31 2b 65 25 02 ff ef 08 78 fe 0b f7 c3 e1 b0 a7 bc bc 3c 7e 6c 6c cc 9b 9c 9c 1c ea e8 e8 98 f6 78 3c e1 c5 60 f1 2e 46 69 a9 3a 35 35 35 de 89 89 89 55 38 e0 eb ed ed 6d c8 c8 c8 98 4c 4f 4f 6f ca cc cc 5c ef d6 f6 a2 57 80 09 2b 88 da ed 4c 78 39 75 0d 75 94 7a 16 da 77 Data Ascii: PNGIHDR00WsRGBIDAThiL\UamHB$6qkj&5Kb4h~lF`PMTj6,UfG<{sP 7y311+e%x<~llx<`.Fi:555U8mLOOo\W+Lx9uuzw
2023-12-05 18:13:38 UTC	269	IN	Data Raw: 82 fc 3a f7 82 96 e5 98 98 59 80 9c 44 f6 5b da 01 c0 0e d3 26 50 73 e8 cb cf e8 15 54 39 b0 d6 12 80 50 cc 0a 9c b3 32 54 63 57 0e c8 21 63 9f b6 60 e8 66 95 b1 65 a2 ed 06 fc 1b ba b6 5c 39 20 46 e5 e5 25 82 1f d1 dd a4 3b 89 ae 1c ab f3 0e 87 de 55 46 aa 7d 06 0c 10 1c ba bf f8 35 ee 26 c6 cd 06 6d 39 5a c0 7f 40 fa b0 e0 97 8b 68 b6 5d 3b 20 06 c9 5d c6 58 e6 1a 72 99 07 19 8e 44 9b 24 0a 3f 04 f8 c6 aa aa aa bb 24 5b 8d 22 bb 80 ed 7a 0b 59 2d 14 16 16 ae e1 bf ae 27 38 dc 0f c1 cb b4 f2 9d c6 00 ff 84 fa 34 ab 2a ff 17 2c aa 2c d9 01 63 56 f9 54 1c 19 19 d9 c2 f9 b8 0d 9a fc 7f b6 1e a7 92 0c fe f9 36 00 fd 07 e8 f2 d0 35 b3 df 4f 59 f8 ae 87 cb e6 80 6a 66 b9 eb d9 16 73 73 f0 ed 1c 96 6f 01 95 dc 0a 6d 25 02 2b 11 58 7c 04 fe 01 5e 21 2f e7 33 a0 Data Ascii: :YD[&PsT9P2TcW!c`fe\9 F%;UF}5&m9Z@h]; ]XrD$?$["zY-'84*,,cVT65OYjfssom%+X\|^!/3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49961	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:38 UTC	532	OUT	OPTIONS /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.nytimes.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	831	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 50 4f 53 54 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:39 GMTContent-Length: 0Connection: closeaccess-control-allow-credentials: trueaccess-control-allow-headers: Authorization, Content-Typeaccess-control-allow-methods: POSTaccess-control-allow-origin:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49962	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	1787	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 1647 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt
2023-12-05 18:13:39 UTC	1647	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 4b 52 52 73 74 62 58 43 6c 62 6f 4a 45 70 38 4e 41 76 69 79 68 79 6c 41 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 31 36 31 35 34 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"KRRstbXClboJEp8NAviyhylA","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800016154,"data":{"event":"impression
2023-12-05 18:13:39 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:39 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49964	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	1852	OUT	GET /2023/12/05/world/middleeast/united-nations-war-gaza-israel.html HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; nyt.et.dd=iv=35F1B812737C497CADA2E2963370F21F&val=ebLew2dZA6XxYCxa9XYSJaYFUC0ip4iPccS1lWTLexCPuEL8QstXB1Xip3Rm7SboFNaODCitEyvUadOkSVNr7sXZTyNju41u1KL3lcM+VOIfKQiEeLbWbpDOGRZdNGWvASwSicByalpJxhVRTSrUs80N8senmd0GCtshhXu7oDYMqE5XxKe5X34DAJ94H2/HWATXFw2TdfAdq5ypZQcSDQ==; nyt-b3-traceid=4caaca84eac4495b9e8cea5979b00255; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; datadome=pt7IX1lu_bZw4NrU_ZqVJjXdfJhxxUUjr5s0m7D_5vdgumHXsR0nkMl08ET26wvdIhvpMJQ_LwpZlHtRbazZPEH8DbIF28weKAn66R~FZ_MENV3DKUNLB8_1aOeQo4E2; _dd_s=rum=0&expire=1701800904465
2023-12-05 18:13:39 UTC	1310	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 34 32 36 32 35 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 62 33 2d 74 72 61 63 65 69 64 3a 20 34 66 64 38 61 30 34 61 61 38 38 36 34 30 37 31 62 66 32 33 36 34 33 35 37 33 64 32 34 64 63 39 0d 0a 78 2d 6e 79 74 2d 64 61 74 61 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 39 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 242625Server: nginxContent-Type: text/html; charset=utf-8x-b3-traceid: 4fd8a04aa8864071bf23643573d24dc9x-nyt-data-last-modified: Tue, 05 Dec 2023 18:13:39 GMTLast-Modified: Tue, 05 Dec 2023 18:
2023-12-05 18:13:39 UTC	1442	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 70 75 72 72 3d 63 66 68 68 63 66 68 68 68 63 6b 66 68 64 66 73 68 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 33 39 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 75 73 3d 31 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 36 20 44 65 63 20 32 30 32 33 20 30 30 3a 31 33 3a 33 39 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 67 65 6f 3d 55 53 3b 20 45 78 70 69 72 65 73 3d 57 65 64 Data Ascii: Set-Cookie: nyt-purr=cfhhcfhhhckfhdfsh; Expires=Wed, 04 Dec 2024 18:13:39 GMT; Path=/; Domain=.nytimes.com; SameSite=Lax; SecureSet-Cookie: nyt-us=1; Expires=Wed, 06 Dec 2023 00:13:39 GMT; Path=/; Domain=.nytimes.comSet-Cookie: nyt-geo=US; Expires=Wed
2023-12-05 18:13:39 UTC	217	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 62 33 2d 74 72 61 63 65 69 64 3d 34 66 64 38 61 30 34 61 61 38 38 36 34 30 37 31 62 66 32 33 36 34 33 35 37 33 64 32 34 64 63 39 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 2d 4d 49 53 53 0d 0a 0d 0a Data Ascii: Strict-Transport-Security: max-age=63072000; preload; includeSubdomainsSet-Cookie: nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; Path=/; Domain=.nytimes.com; SameSite=none; Securex-nyt-edge-cache: MISS-MISS
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 20 73 74 6f 72 79 20 6e 79 74 61 70 70 2d 76 69 2d 61 72 74 69 63 6c 65 22 20 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 3e 4f 6e 20 74 68 65 20 47 72 6f 75 6e 64 20 69 6e 20 57 61 72 73 20 61 6e 64 20 44 69 73 61 73 74 65 72 73 2c 20 74 68 65 20 55 2e 4e 2e 20 50 6c 61 79 73 20 61 20 56 69 74 61 6c 20 52 6f 6c 65 20 2d 20 54 68 65 20 4e 65 77 20 59 Data Ascii: <!DOCTYPE html><html lang="en" class=" story nytapp-vi-article" xmlns:og="http://opengraphprotocol.org/schema/"> <head> <meta charset="utf-8" /> <title data-rh="true">On the Ground in Wars and Disasters, the U.N. Plays a Vital Role - The New Y
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 70 61 72 61 6c 79 7a 65 64 20 62 79 20 70 6f 6c 69 74 69 63 61 6c 20 64 69 66 66 65 72 65 6e 63 65 73 2c 20 69 74 73 20 68 75 6d 61 6e 69 74 61 72 69 61 6e 20 61 67 65 6e 63 69 65 73 20 61 72 65 20 68 65 6c 70 69 6e 67 20 6e 65 65 64 79 20 70 65 6f 70 6c 65 20 69 6e 20 47 61 7a 61 20 61 6e 64 20 6f 74 68 65 72 20 70 6c 61 63 65 73 20 61 72 6f 75 6e 64 20 74 68 65 20 77 6f 72 6c 64 2e 22 2f 3e 3c 6d 65 74 61 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 Data Ascii: paralyzed by political differences, its humanitarian agencies are helping needy people in Gaza and other places around the world."/><meta data-rh="true" property="twitter:url" content="https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2b 6f 65 6d 62 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 76 63 2f 6f 65 6d 62 65 64 2f 6a 73 6f 6e 2f 3f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 6d 69 64 64 6c 65 65 61 73 74 25 32 46 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 20 74 69 74 6c 65 3d 22 4f 6e 20 74 68 65 20 47 72 6f 75 6e 64 20 69 6e 20 57 61 72 73 20 61 6e 64 20 44 69 73 61 73 74 65 72 73 2c 20 74 68 65 20 55 2e 4e 2e 20 50 6c 61 79 73 20 61 20 56 69 74 Data Ascii: " type="application/json+oembed" href="https://www.nytimes.com/svc/oembed/json/?url=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html" title="On the Ground in Wars and Disasters, the U.N. Plays a Vit
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 30 34 2f 6d 75 6c 74 69 6d 65 64 69 61 2f 30 34 69 73 72 61 65 6c 2d 75 6e 2d 61 69 64 2d 30 31 2d 62 76 71 6d 2f 30 34 69 73 72 61 65 6c 2d 75 6e 2d 61 69 64 2d 30 31 2d 62 76 71 6d 2d 73 75 70 65 72 4a 75 6d 62 6f 2e 6a 70 67 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 41 20 73 63 68 6f 6f 6c 20 69 6e 20 4b 68 61 6e 20 59 6f 75 6e 69 73 2c 20 69 6e 20 47 61 7a 61 e2 80 99 73 20 73 6f 75 74 68 2c 20 74 68 61 74 20 69 73 20 61 66 66 69 6c 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 55 6e 69 74 65 64 20 4e 61 74 69 6f 6e 73 20 52 65 6c 69 65 66 20 61 6e 64 20 57 6f 72 6b 73 20 41 67 65 6e 63 79 20 61 6e 64 20 74 68 61 74 20 77 Data Ascii: rl":"https://static01.nyt.com/images/2023/12/04/multimedia/04israel-un-aid-01-bvqm/04israel-un-aid-01-bvqm-superJumbo.jpg","caption":"A school in Khan Younis, in Gazas south, that is affiliated with the United Nations Relief and Works Agency and that w
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 65 22 3a 22 4f 6e 20 74 68 65 20 47 72 6f 75 6e 64 20 69 6e 20 57 61 72 73 20 61 6e 64 20 44 69 73 61 73 74 65 72 73 2c 20 74 68 65 20 55 2e 4e 2e 20 50 6c 61 79 73 20 61 20 56 69 74 61 6c 20 52 6f 6c 65 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 23 70 75 62 6c 69 73 68 65 72 22 2c 22 6e 61 6d 65 22 3a 22 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 22 7d 2c 22 63 6f 70 79 72 69 67 68 74 48 6f 6c 64 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 23 70 75 62 6c 69 73 68 65 72 22 2c 22 6e 61 6d 65 22 3a 22 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 22 7d 2c 22 73 6f 75 72 63 65 4f 72 Data Ascii: e":"On the Ground in Wars and Disasters, the U.N. Plays a Vital Role","publisher":{"@id":"https://www.nytimes.com/#publisher","name":"The New York Times"},"copyrightHolder":{"@id":"https://www.nytimes.com/#publisher","name":"The New York Times"},"sourceOr
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 61 2e 6f 72 67 2f 77 69 6b 69 2f 54 68 65 5f 4e 65 77 5f 59 6f 72 6b 5f 54 69 6d 65 73 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 6e 61 6d 65 22 3a 22 57 6f 72 6c 64 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 69 74 65 6d 22 3a 22 68 74 Data Ascii: a.org/wiki/The_New_York_Times"}</script><script data-rh="true" type="application/ld+json">{"@context":"http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@context":"http://schema.org","@type":"ListItem","name":"World","position":1,"item":"ht
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 67 68 61 6e 69 73 74 61 6e 2c 47 61 7a 61 20 53 74 72 69 70 2c 55 6b 72 61 69 6e 65 22 2f 3e 3c 6d 65 74 61 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 20 6e 61 6d 65 3d 22 70 64 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 32 33 31 32 30 35 22 2f 3e 3c 6d 65 74 61 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 73 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 6f 72 6c 64 22 2f 3e 3c 6d 65 74 61 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 62 79 2f 66 61 72 6e 61 7a 2d 66 61 73 73 69 68 69 22 2f 3e 3c 6d 65 74 61 Data Ascii: ghanistan,Gaza Strip,Ukraine"/><meta data-rh="true" name="pdate" content="20231205"/><meta data-rh="true" property="article:section" content="World"/><meta data-rh="true" property="article:author" content="https://www.nytimes.com/by/farnaz-fassihi"/><meta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49968	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	696	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-who-health-fbgw/05israel-hamas-who-health-fbgw-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	1204	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 32 36 38 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 53 37 51 4d 37 61 34 4f 4c 54 67 59 61 41 6b 71 72 75 72 50 4a 79 45 66 37 37 46 50 71 56 73 4a 4e 73 4f 77 7a 72 6c 6f 51 33 77 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 122688Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "S7QM7a4OLTgYaAkqrurPJyEf77FPqVsJNsOwzrloQ3w"Expires: Tue, 05 Dec 2023 17
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 52 49 46 46 38 df 01 00 57 45 42 50 56 50 38 20 2c df 01 00 d0 0f 07 9d 01 2a 00 04 ab 02 3e 91 3c 97 48 a5 a3 22 28 2c f6 0d 19 00 12 09 4d a6 76 a6 ef 33 fd 24 1e ba 01 ef bb a7 39 a7 97 ef 1b ed 2f 78 34 92 65 89 f3 ea ff 3f c8 f7 d7 57 5e 9b e7 ec ea 9f 92 fe 85 9e 3f 5d fb 77 30 9f fa bc 39 f7 bf fd 3e 7e 7e cf df 17 ff 1f af 1f eb 5e a4 df d6 7a 49 f9 ab fd e1 f5 73 f5 27 fd d7 d4 23 fa ff fc be ba ef 43 bf 39 8f 59 8f ee 5e 77 be a0 1f ff fd bd b9 d9 e2 07 e6 1f d2 ff cc fb 7d f4 97 cd df d1 7f 84 ff 4d fb 3b f2 e7 fb ae 4f fd c7 fc ef db ef 53 3f a4 7e a3 ff 27 f9 df 6a df df fe d6 79 37 f3 97 fe 6f f4 de c2 3f 9d 7f 65 ff 9d ea 71 fa 7f b8 df f3 7c 8e 38 cf f9 3f fc 7f da fb 0e fb e5 f8 8f fd 3f e9 bf d7 fb 67 fe 6f 9d ff be 7f be f6 05 f3 3f ff Data Ascii: RIFF8WEBPVP8 ,*><H"(,Mv3$9/x4e?W^?]w09>~~^zIs'#C9Y^w}M;OS?~'jy7o?eq\|8??go?
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: ab ee 7c 7a 5d d6 70 68 1b b7 0f be 33 6e 3a f3 90 42 c4 a4 fd 28 00 00 00 1b 2b b1 5e d2 48 dc 74 a5 4f 31 19 b0 a0 e7 73 67 c8 eb 0f 38 69 75 28 97 92 91 0b 6b d4 c2 1c a7 e8 01 ce 36 da 98 65 dc 77 30 1b 50 26 02 27 cc f8 d8 29 ec 57 7e 33 04 a7 7c fa 4f 98 f0 88 88 1a 06 be 09 38 33 aa 78 9a 0b 33 6e 5c 97 70 df 0f 67 15 7e c2 09 f7 5b eb cc 98 64 69 29 0e 5a b9 50 62 87 06 19 f0 a1 f7 fe 9e 1b 0b 72 8a 09 45 43 0b cb 19 3c 5c f2 2c 89 04 52 2c 79 7a d6 a5 10 fc 94 1f 5f 3c 2e 2f c6 d4 a7 4d 09 2d 21 3c b9 c1 4e 07 b6 fb 7d 00 4f 85 1c 7b 36 6f a5 26 94 1f b0 47 31 3c 0c 88 4b fc 0b e4 39 44 6c cb fc e7 ef 87 d5 ee 3a 50 0d 45 9f 8f 62 05 50 62 8b 7e e6 95 a1 7e 5d f3 b9 bf b8 88 c8 d9 20 a7 b7 c4 a5 db fd ed e3 28 5d 24 89 4b 42 35 e9 be 78 ed 62 8f Data Ascii: \|z]ph3n:B(+^HtO1sg8iu(k6ew0P&')W~3\|O83x3n\pg~[di)ZPbrEC<\,R,yz_<./M-!<N}O{6o&G1<K9Dl:PEbPb~~] (]$KB5xb
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: d5 ce f1 9d 5b 94 16 f0 3d e5 b4 13 28 9c d3 55 eb fb 7e c1 07 e7 29 9a ce 74 c5 04 45 83 cd 76 95 48 ee be 8c fc 73 cc a4 3e 78 20 7b 76 b0 db 6a 3a 3e 55 03 f8 31 d1 ee 89 96 e9 35 ce e5 ab 56 54 26 16 df 23 bb a3 71 0a 2e 13 f0 25 2c c0 0f 4b 1f ea ea c0 06 14 71 c3 16 ff 20 17 33 1d 28 13 23 10 70 a3 51 b2 bd 65 12 03 8e 50 f0 e3 bb ad 10 5e c9 ea 81 4c 8d 78 f3 fd c3 9c 1f 9f ea 45 ed 08 dc ab 01 60 0b 6c 2d 39 ad a4 68 be 2c 7e ec 90 17 9b e1 a2 21 da ee ec a8 f0 15 d2 5e 89 7b 15 ec a8 a4 c7 ed e7 d9 61 70 ae 2e b9 9c 0e 87 39 ef 11 f7 88 cd 46 c9 5f cc 2d fb de 05 f2 ad b6 be a7 22 ea 6a 36 28 ec eb 80 eb 5b f2 58 40 c1 0c 51 15 51 c4 07 98 e0 f7 f6 83 98 a8 83 b4 cc 12 19 e8 df e6 45 ae b4 2f e1 66 c2 ba 7f 54 58 2d 1f 6e 9f 9a fe 81 48 fa d1 b2 Data Ascii: [=(U~)tEvHs>x {vj:>U15VT&#q.%,Kq 3(#pQeP^LxE`l-9h,~!^{ap.9F_-"j6([X@QQE/fTX-nH
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: b6 8d 29 d5 02 e1 78 89 19 e6 81 bc 56 22 fd ea f0 60 b7 9d 9f 0e 31 b7 18 93 9a 55 3e 2e 13 eb 57 c7 42 91 3c d5 98 95 17 d5 5c 4f 77 ec b6 9d b4 ea 59 eb 93 d5 e1 54 6e 49 b6 27 7f a7 56 b8 2c 12 ff 4a a6 22 51 57 5e bd 0d d7 fc b2 d2 fa f0 5f 14 f2 46 2f 42 96 f8 ab e9 3c 32 68 b8 09 5b b8 8b de 42 af ab b2 0b d2 85 91 07 22 81 ec 18 26 ab f7 7b 79 be 29 a9 d4 5a 50 ae 8d 61 65 a5 4a bb 52 4f 56 97 4f 65 27 a3 dc 62 9d ce 20 40 af db e6 86 fb f1 4a 7e 47 d3 df af 40 fb 9b d3 dc d7 3f 38 67 7b 8b b1 ad d3 4a 0d d5 72 16 dd dd 8a 22 08 5b 66 15 95 a6 b0 9e e6 4b ab 90 1e f4 1d be f8 1f b6 92 18 1b 9d 91 fc ed ae 82 c2 49 95 66 7b 5c b8 a8 f4 a7 bc f3 d0 41 1e 9a e5 25 55 27 97 6a 55 be 6f fd c6 a8 e1 e0 48 d7 10 41 28 d8 88 20 85 d6 69 99 3b 30 8d 1a ba Data Ascii: )xV"`1U>.WB<\OwYTnI'V,J"QW^_F/B<2h[B"&{y)ZPaeJROVOe'b @J~G@?8g{Jr"[fKIf{\A%U'jUoHA( i;0
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 83 d0 6e 10 5f 42 90 13 2a 4a de 7f 2a 76 e1 92 74 83 a5 5e 22 29 f8 38 e1 f4 8c 3f fe e7 e5 72 28 a0 52 81 41 9d 28 16 5b 50 4f e3 6c 29 27 fe 62 23 1a 61 f7 29 45 c3 d9 dd 1b f0 2a e5 3c 2d 27 35 3c 0e e6 f9 6d 6b fb 58 0b de 07 9f cc 64 bc b3 6d 09 ee 02 f2 bf 88 d3 32 e5 39 67 7d 62 ca 28 cf 48 0d 28 0f ea 0d e6 38 47 6a 17 72 27 3f 32 56 97 25 0a dc 05 50 3f cb ba 88 7c e8 1f d5 76 e6 e3 c4 89 30 e3 04 64 c1 9c b9 88 55 6f 2f a8 45 be 48 39 5e a3 2e 0c 22 aa fc 22 71 9f 58 1c 04 da d7 2d d6 c5 60 3f b4 5a 73 db 05 8e 32 83 fd 06 d2 ad db 11 87 c9 ee b9 d9 25 00 c2 ab 9f b2 ef 31 c2 1d 2f 29 59 89 04 89 9b cf 5d ef bf 1f d4 10 e6 ef 52 39 e0 f4 22 71 f8 25 f1 cc 3d db e3 8d c6 8c a0 00 db 9e f4 f2 81 7b 97 06 b4 4b 20 76 0b da e7 f8 ef 5c 74 ce ed d6 Data Ascii: n_BJvt^")8?r(RA([POl)'b#a)E*<-'5<mkXdm29g}b(H(8Gjr'?2V%P?\|v0dUo/EH9^.""qX-`?Zs2%1/)Y]R9"q%={K v\t
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: c1 53 cf 4f c4 2d 1c ba df cf 2a c1 10 7e d8 2d 8c 64 55 23 e8 a0 c3 93 c5 6a ba 12 84 4e 50 be 63 7f 75 a2 2f cb ed 11 2c 7e 89 52 c3 83 c7 10 3c 96 47 9e fa e4 75 0c fa 46 3d 72 bc 39 86 1c cb 99 6e 88 f2 e5 5b 9c 64 34 2f 0b 58 30 20 95 77 e0 ab e0 10 e0 84 8e ef 15 ff fc 44 5b 40 4e f6 aa 7c 2e 7a eb b1 ee 3b a4 c0 50 ba 41 34 8a a8 8a 9a b3 65 e0 2e 2d c2 d6 fc fc ed b3 ce 79 e6 e0 b9 cc b9 64 ba 67 fe 7a 38 3c 7d 9c e0 bb a0 71 f7 86 6c 23 1e 24 38 f7 0f a7 2f ac 63 41 24 ee 3e ad 1a c7 b5 e7 12 2b 31 8d e7 d0 c0 2a 68 96 40 18 ed 36 5b e2 ad 04 11 97 8e e0 39 e1 77 f8 1a 21 53 cf 56 50 50 e2 b9 e4 e7 e7 70 c6 9a fd 3b 81 be 70 41 6c bb 42 a0 a2 b8 71 7f ed ae b1 76 9a af 90 3b 07 0e 29 f0 58 37 48 93 1f e7 4f ce bc 39 4d b7 8c 23 1c a9 a6 ce c9 a9 Data Ascii: SO-~-dU#jNPcu/,~R<GuF=r9n[d4/X0 wD[@N\|.z;PA4e.-ydgz8<}ql#$8/cA$>+1h@6[9w!SVPPp;pAlBqv;)X7HO9M#
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: fb 5c 5f 7b c8 ef 94 19 e5 a4 bc 11 d8 af 65 c0 1a d8 24 37 35 47 89 db 50 a0 3c 1c 39 4b db d7 05 39 56 e6 e7 33 d0 a5 77 8d 40 32 21 5c d5 23 b0 a8 8c 20 cb 73 64 5e fb c6 81 f3 71 7b da f6 3f 92 ff ca c8 82 8c cc 84 0a f5 90 16 f8 e1 a1 94 e6 72 f5 f4 54 f4 3c 2c 2c 69 d0 3a 46 7b e4 d8 62 3b e2 0c 90 05 c2 21 2d 76 df ad 15 ff b0 ea f4 73 a6 e6 c4 df be eb 67 ab ba 69 05 16 f9 66 f7 42 69 4f 35 b3 df 2f e7 ae bd 0d cf 5d 47 19 73 e3 d6 2e 2e a3 22 c2 52 84 9b 87 f4 0a 06 d6 4f 91 da 3d a4 3d 2a b3 34 c0 fc 84 9f 32 a9 82 d7 88 76 21 46 f7 21 2a ee 3c 1e aa e6 ea 13 ff 3b 1f cd 20 6a 3d 1d 21 0a 0a 92 df 1c 0d 51 39 2b ae d8 89 9f f8 69 80 bd 89 a9 97 bf 57 e0 d0 fb 7c 87 85 cb 19 6f 0e 71 c7 e5 26 19 b6 d6 e6 1c 72 a9 c0 1c 6d fd af c1 e9 18 8a 73 54 Data Ascii: \_{e$75GP<9K9V3w@2!\# sd^q{?rT<,,i:F{b;!-vsgifBiO5/]Gs.."RO==42v!F!<; j=!Q9+iW\|oq&rmsT
2023-12-05 18:13:39 UTC	8000	IN	Data Raw: a5 48 f9 48 7b f6 99 e0 7b 75 68 27 bd 9b 01 8a 50 93 16 dc 60 fd 77 db 66 dc af e8 4d 90 fb 62 53 8f 20 e1 8d e2 13 4d 00 51 9f 85 bd e2 f6 b3 75 b4 8e 58 61 d0 6b cd e8 09 5f 47 6b 3f cd 96 26 60 5c d0 e7 30 57 86 08 b9 cb 25 c8 78 81 69 01 d7 bc 5e 35 c7 48 3e 10 a6 2c 75 16 56 36 03 91 7d 63 78 d3 37 84 27 93 d8 c9 8b d9 2d f5 eb 80 12 29 09 04 4d 50 80 fb b5 2e 26 a4 25 c8 8e 13 55 7e 41 bd 59 e4 1d 85 b8 75 9c e9 92 f7 cb ff 5a 06 41 ca 03 2d 58 e6 df 46 54 41 91 f8 1d 0e 0c a1 89 5a b3 91 55 4b 78 30 ba 3a 2f 7d a3 fa e0 cf 05 07 ad 5b d5 3f a8 ae b6 5e a9 bb 2c a0 67 af 99 2d e4 f7 6a 8e b3 80 99 18 fc ff ff cb 6b 43 c8 47 1f 0f 8b 58 ae fb 10 d0 38 5f f2 80 38 11 8e 22 08 70 dd 3b 98 f8 cb bd 0e 07 1e 37 5e 41 71 45 23 7e 14 3b 52 e6 e3 b5 db 04 Data Ascii: HH{{uh'P`wfMbS MQuXak_Gk?&`\0W%xi^5H>,uV6}cx7'-)MP.&%U~AYuZA-XFTAZUKx0:/}[?^,g-jkCGX8_8"p;7^AqE#~;R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49969	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	696	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-who-health-ctlq/05israel-hamas-who-health-ctlq-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	1202	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 33 30 38 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 58 67 50 5a 61 53 5a 68 6f 68 66 68 39 42 78 49 6e 45 32 66 52 47 77 5a 33 69 62 74 4b 30 65 38 6c 31 4e 42 45 2f 42 74 2f 43 51 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 63088Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "XgPZaSZhohfh9BxInE2fRGwZ3ibtK0e8l1NBE/Bt/CQ"Expires: Tue, 05 Dec 2023 17:
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 52 49 46 46 68 f6 00 00 57 45 42 50 56 50 38 20 5c f6 00 00 70 e3 04 9d 01 2a 00 04 af 02 3e 91 42 9b 4a a5 a3 a3 27 26 12 eb b8 e0 12 09 67 6d 7a 46 69 7a ff 1b 1f 26 6c 88 f0 43 61 0a d5 5d ed 1e 29 fd 29 18 0d 6b d0 0f 8e 5d a9 59 f5 79 6c 10 e2 19 a7 1e dc df e1 41 1d 3a fe 53 ff 8b ce 07 ce 7b 07 fd 0f d2 6b db 73 06 7f 19 e0 bf f5 cf de 3f f0 f5 df db 0f ec 5e 22 2f c7 b4 77 e1 0c e8 f1 03 f9 3f 50 8e 1e 2f 6c f6 12 f2 8f f0 81 fb 87 a9 07 97 7f ff ff 7b 9f bc 7e d5 a6 9b f1 70 ea 36 9e 0b 8c d2 70 b7 c1 66 0b 20 b0 92 27 bc f2 08 57 e1 83 88 5a 0f 20 8f a7 a8 cb fa f1 01 ef 19 c1 a1 f9 1d e9 fa 27 46 b9 62 fe 8f e2 c5 a2 d2 00 0a 0a f1 cd 2a 85 24 32 2c 30 49 f8 d3 b7 ff d9 f5 1b 4e dc 1a e3 6f 98 da a1 c1 b3 fb 23 eb 9a d8 c3 3f c5 8f 11 a0 5a 17 Data Ascii: RIFFhWEBPVP8 \p>BJ'&gmzFiz&lCa]))k]YylA:S{ks?^"/w?P/l{~p6pf 'WZ 'Fb$2,0INo#?Z
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: aa ce b7 3e 81 35 b3 97 d1 b2 57 ac 10 d3 90 1e f6 43 d6 4d a2 a8 64 56 ce d6 1f 06 d7 dc d7 d2 3b e8 25 05 8d bb e5 34 93 50 8b 44 cd a1 06 af e5 e2 3b 6c 09 04 e4 48 55 d1 66 ea 7b 97 ad 45 2e cf 8e 2a 06 d2 4b 33 87 8b 6f 5a 57 31 73 53 41 17 2e da 67 f5 c5 a8 76 93 57 6b 02 89 e8 b9 c5 a0 b4 ba 65 4c 32 23 44 db 3c db 4a f2 1b e8 ea 30 a0 2b 2f 8e cf 51 ec 2e a7 97 e6 2c 0b a9 ea b2 0e b6 d0 49 dd 48 7f 9b e4 f1 f4 b1 20 ab 43 1f 6c 99 47 84 44 c3 94 23 94 af e4 21 14 57 ce 68 a5 6f c3 25 ab 82 c9 a1 16 85 79 73 9b 2f 95 b4 0d 12 5e 00 09 f4 2a 49 41 00 20 e6 0c a9 63 1d 78 cc ad 9f e8 bd 40 0a 97 6a 24 67 e1 b1 17 18 99 9f 0f b4 93 0e 75 f5 76 22 21 6c 89 73 b1 05 bd 54 e1 4b ba 87 b0 9e df e0 7f 83 ba a3 68 59 69 56 de 0e 39 c9 c4 81 f2 3b 39 22 cd Data Ascii: >5WCMdV;%4PD;lHUf{E.K3oZW1sSA.gvWkeL2#D<J0+/Q.,IH ClGD#!Who%ys/^IA cx@j$guv"!lsTKhYiV9;9"
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: c4 1e bf 01 0b 12 d6 b8 72 47 29 be 72 0b 0d bc b0 ba 93 ea 3d e3 35 d2 a2 d8 f6 87 eb 6d 35 8c e8 0c db f5 ba f1 21 42 d0 20 ec 64 59 c9 21 24 26 ff 79 f4 e1 a4 a2 d3 ba c4 b1 a5 f9 7e 6f b6 96 cb 95 68 53 07 15 bd 60 6e 2f 4b a9 bb 92 a0 bc ca 57 58 ff 92 e5 34 13 3b 51 d0 7e f4 21 04 eb d5 81 87 b0 00 eb 37 40 5f c4 2c 66 3c bb 01 38 1a eb df 44 76 6c 71 dc 0a a3 11 e8 a0 60 d1 60 02 2a c1 da 47 99 19 0c 2b 5f 01 25 07 dc 5d 28 03 6f 17 39 7f b5 d9 15 03 92 2d f1 97 86 fa 3f 7f 74 ae 67 5a bb 32 8c e6 e1 e6 17 28 b0 f4 f3 0a 0a 50 59 a5 ed ff 92 bf 30 84 b4 40 ec 6b c3 80 0f 69 68 77 78 eb a0 93 47 32 25 06 e3 a2 d1 00 95 71 c8 84 d3 53 f7 9b 3b e6 60 05 cd 4e 1b c4 2c 1c dd d8 40 80 72 48 31 7e d8 ae a9 99 77 80 15 7a 03 95 8a 26 b0 65 07 f5 e9 96 8c Data Ascii: rG)r=5m5!B dY!$&y~ohS`n/KWX4;Q~!7@_,f<8Dvlq``*G+_%](o9-?tgZ2(PY0@kihwxG2%qS;`N,@rH1~wz&e
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 54 69 d4 63 1c 8b 87 dd ea 26 da 74 06 9c 8c f5 e9 e0 00 c7 29 25 be 47 f5 7c 1d a8 f8 19 3c d3 f8 21 06 e8 c8 34 50 e3 de 39 ab 48 91 0b 62 4f 40 eb 47 ba c6 be b7 2a 4d 2b 08 bc 36 76 49 07 e0 d6 9c 0a 07 6b ea fc 2f b0 f0 ec 92 15 62 40 06 ba cf 6e a1 e3 08 02 9d 3b 71 ec db da be de 13 a1 f0 bb 73 32 35 0e 17 d5 1f 5f 7a 64 50 f7 16 71 a7 81 e5 05 67 a4 f1 4b 19 7b 67 73 54 9d 82 57 c6 ab e9 f9 9b be 5a bd 6d dc 11 43 e3 2b 45 fe f5 de 60 68 b0 ce 09 5c c6 00 4b 72 01 f1 df ad 34 e1 1c f3 4b fd 42 13 29 98 e4 b4 4c be 30 8c d4 4c c4 f3 f7 d1 ee 76 2c 8b 72 1a 64 66 4c 4f bf 8c ba 7d 58 1d f4 dd f4 46 ea 22 66 1a 12 4b 69 30 e4 a9 94 06 02 cc 70 28 46 20 49 34 61 2c 49 93 16 64 6f e8 b3 b3 3b e0 f0 ac 7b e3 13 54 e5 af 40 c4 07 2b 64 1a b9 0d 0f 2a b2 Data Ascii: Tic&t)%G\|<!4P9HbO@GM+6vIk/b@n;qs25_zdPqgK{gsTWZmC+E`h\Kr4KB)L0Lv,rdfLO}XF"fKi0p(F I4a,Ido;{T@+d
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: d6 3d 51 28 c1 12 37 ac 06 12 0c a4 20 ec ed 67 4e 49 f7 3a b0 ea ca 21 0d 3e 0e c4 e7 48 f7 ba ca 8f 71 23 3b 3e 39 07 df 2a 86 92 2b 24 a8 51 51 96 29 95 32 88 a2 87 69 de fc 05 29 c9 35 15 bc 63 a2 bd 66 af b0 6f 33 49 45 33 48 7c 6d 11 d2 84 93 01 ab 50 8a d8 bb 8d a7 c3 3c 41 b4 5d 30 68 38 46 31 b0 b9 a6 0a da 76 91 ce 22 b0 1a e2 c6 3b fe 99 82 3f 0e f6 d7 10 3c e5 6c cc 96 94 49 a7 b5 f4 98 20 d8 90 e4 05 2b a3 68 cb 67 51 7a 13 60 5b 15 bf d3 f8 b5 df e9 eb 05 00 d9 d2 be 20 dc 22 dd ea c8 31 3d 82 36 00 a2 3c 6e 35 71 5c b8 25 a1 d7 6d a7 ae db b2 ac 85 92 db 79 a6 f9 b2 0a bf f9 7d a0 99 16 f0 cb d5 e2 1c ee 2f 86 69 d7 60 57 c2 5f 55 0a 22 fa 07 c2 1f 0b e5 c2 a1 b0 dc 8b 30 54 68 13 04 d0 0b 27 0c 57 a7 8f dd ca fe 9b 02 ed 5e d0 93 24 27 29 Data Ascii: =Q(7 gNI:!>Hq#;>9*+$QQ)2i)5cfo3IE3H\|mP<A]0h8F1v";?<lI +hgQz`[ "1=6<n5q\%my}/i`W_U"0Th'W^$')
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: e6 75 2b d7 df cc bf 80 99 47 21 7c 1f 5b 8d 80 af 01 90 11 2a 8c 5a 43 60 3d b8 92 e2 05 94 eb 4f ae 72 fa 77 64 de 37 1e 3e ec fc 54 05 b6 4b 92 a5 69 0d a0 d4 3d 64 73 06 48 4d 5b 2c ae f7 c2 c0 59 51 e8 4b a7 a6 43 00 65 67 bd db 76 34 e1 5a fa ae f7 df 1f ca 13 5e 66 04 40 39 ce 7e 7e b5 64 9e 04 a0 3f e1 28 10 75 07 7d ce af 5c b4 f2 fc 50 05 c6 23 72 3f 60 c2 99 f6 fb 83 26 27 ab b2 c3 79 e3 e7 63 54 66 92 42 91 8e 54 ab c9 d2 a9 24 e2 cd 23 83 e7 ec b2 12 cd 92 d8 31 73 21 91 e4 68 2a 06 2e 75 23 ae 3c f2 ce 6c 35 e6 64 82 7b b7 52 dc c8 66 75 57 05 e6 e4 b1 20 50 e2 fa 4b 3d e1 ec 35 e7 1e 37 b6 d1 bc 27 6f a8 4b b8 69 cd b0 44 a0 f8 09 92 42 f8 4a 50 cb 50 64 e9 d8 d4 0b ef 0e 84 a0 11 b6 b7 8f 6e fb 57 f8 b4 39 33 3c 74 83 37 bd dd 74 c3 59 1c Data Ascii: u+G!\|[ZC`=Orwd7>TKi=dsHM[,YQKCegv4Z^f@9~~d?(u}\P#r?`&'ycTfBT$#1s!h.u#<l5d{RfuW PK=57'oKiDBJPPdnW93<t7tY
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 96 e4 4c 95 47 6f 35 6a 19 cd 7d 99 76 fc f4 a2 ee 1e 69 56 46 de 87 d4 89 16 b3 56 ec 09 dc f6 68 c7 75 a2 06 78 02 a1 b0 89 13 db 58 5d 7a 79 d2 b2 77 e7 09 1d 17 ee 5a 50 5b 73 35 fd 1e 47 f3 40 fb de 55 fb 15 66 64 a7 6e 49 c6 b6 a5 15 18 03 2c 04 2e 40 f5 fc 2c 06 f9 2b a7 95 77 fe 14 4c 0d b7 30 56 5b f0 ed 2c 6e 26 b1 cc 4e 20 9b 9e 04 a7 92 d6 b4 60 b2 cd f6 f4 70 41 55 a7 91 87 b5 46 e0 dd ad 92 26 03 81 e8 22 ca 12 f4 2b 9e a9 17 bb 62 51 89 10 f7 fd 89 c4 62 3c b7 3a e8 87 b2 2a 16 3d ee 10 cc 77 c2 de 9a 51 04 34 44 a0 c0 f6 07 5b 5d 17 b3 e9 1b 16 c6 39 15 ea f7 5c 0b 8b 94 3d 7b 39 35 16 2e d9 ce ec 11 79 ba fe 5f b1 70 7a 7c 24 cc 07 2d 67 6c a9 37 bb a3 aa a2 e9 97 c3 3c 23 c4 aa 87 33 88 da a5 c9 4d ec e6 1d 1b 6f 79 d5 3c e9 77 b2 65 2f Data Ascii: LGo5j}viVFVhuxX]zywZP[s5G@UfdnI,.@,+wL0V[,n&N `pAUF&"+bQb<:*=wQ4D[]9\={95.y_pz\|$-gl7<#3Moy<we/
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 9d 3a 09 c5 99 34 6e 82 82 d4 b8 32 22 71 7b ae 0e 70 c8 8b 7b 10 83 d6 39 a9 4d 0d 12 68 01 74 7e c2 c5 54 b9 da 06 73 cf b2 30 ea 92 f8 c9 29 3d bb 8b 46 92 13 9e 7e 5c 11 e4 03 c3 23 24 6b 45 3f 00 5c ff 92 43 8e 22 d4 80 1c 67 b0 5e cc 31 b1 73 37 ff f8 0e e2 af b7 37 4c 10 31 93 1a b3 55 4e 72 6d ca 13 24 30 9f fc 1a 86 b8 bd 59 a0 ff da cc ba a5 cb d2 72 7e 23 d7 d4 bb 7d 53 c1 c1 d7 31 fd 9c 11 7f 05 9c 2b f1 da e8 5c 78 f4 01 ef d3 be 3a 0b c4 6d ca 22 e1 66 05 4a d9 8b 13 48 b9 f8 4c c4 d7 a9 3b 5b 17 97 b6 0d cf c2 11 b3 6e 7b 16 1f f0 5f 3a 96 36 b4 84 c7 2a 1e 9f b5 d3 fa 8d f5 08 b1 62 af f9 2c f1 e5 11 ca 73 de 55 27 29 c0 98 2d fb 3c 6d 23 ef a7 8d 81 28 83 16 ee bd 17 b1 01 47 2d e8 ef 98 14 70 8b 1e 1b fb 83 f3 68 94 e3 4e 09 74 30 14 18 Data Ascii: :4n2"q{p{9Mht~Ts0)=F~\#$kE?\C"g^1s77L1UNrm$0Yr~#}S1+\x:m"fJHL;[n{_:6*b,sU')-<m#(G-phNt0
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 5c 07 61 94 ce 5c 5d b8 d5 3f d7 39 89 6c 9b 2e e1 98 62 1f 95 f4 91 0a 04 db 08 a7 40 5f 91 f2 f9 cb f5 74 9e 29 0c 16 03 a2 ee 2e 5a 3a a7 a6 1e d5 00 9c 17 f9 d5 17 82 d3 10 65 cb 99 84 f0 d3 14 34 f0 76 10 d0 23 58 8d 9b 17 90 05 02 27 7a 76 77 ba 3d 60 b8 8f ef 5f 3b f3 76 ee 3a 0d 62 4b d6 a4 5e 97 65 1f c0 c9 d4 5c 47 2c a5 2c 39 bb 56 93 54 c3 1b 3d 46 d1 3d 23 69 f3 ba c2 4a 47 bf cd 6f f1 42 f3 1a 7c 1f f1 6a 68 84 99 2d dd 6b 38 b5 f6 a5 57 4d 58 a6 f2 eb d4 90 0f ab 2a 47 9c 21 c5 98 5b 4b 3a 09 a2 93 57 c5 a0 c7 ab 6c 94 2f 3a 3c 3d d9 7a e6 38 e9 d5 25 e4 b5 ba 02 81 02 d3 65 f2 9a bb 7c b7 6f 74 9f bd 17 0d e4 33 3f f1 39 77 94 ac 75 08 08 94 57 51 c0 88 29 84 40 6b e7 31 08 c2 c9 f4 d3 d5 b2 b2 5e 84 5c 1b 85 73 5f 6b e6 9d d8 64 b9 fa fb Data Ascii: \a\]?9l.b@_t).Z:e4v#X'zvw=`_;v:bK^e\G,,9VT=F=#iJGoB\|jh-k8WMX*G![K:Wl/:<=z8%e\|ot3?9wuWQ)@k1^\s_kd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49971	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	694	OUT	GET /images/2023/10/17/multimedia/05israel-hamas-hostages-men-new/17israelgaza-photos-03-gfml-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	1209	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 39 33 36 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 2b 2b 2b 58 66 75 6a 52 65 57 50 4e 63 76 56 41 2f 53 54 76 59 54 43 52 4d 48 65 48 73 65 75 38 42 76 33 69 64 69 56 5a 2f 6e 67 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 36 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 89362Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "+++XfujReWPNcvVA/STvYTCRMHeHseu8Bv3idiVZ/ng"Expires: Tue, 05 Dec 2023 16:
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 52 49 46 46 0a 5d 01 00 57 45 42 50 56 50 38 20 fe 5c 01 00 30 5f 05 9d 01 2a 00 04 ab 02 3e 91 40 9b 4a 25 a3 a2 29 27 53 9b e1 20 12 09 67 6a 59 9f dc bf 18 c6 03 e8 bb 4b aa fc 45 1e 70 37 4a 53 36 8b 6a 49 ec 11 be 30 c2 e2 c3 94 9f f3 3c 54 fd 4b fc a7 4e 86 1a 3d be f6 02 f3 45 cd 4d c4 5c d7 5a 18 7b 5b d4 7e 5c bc a3 55 ab 57 eb bd 03 7c c1 f8 7f 34 df 78 ef 87 ff 87 d8 af f5 ef 46 ff 2e 8f 62 ff de 7d 18 7e dd 7a bc fa 8d ff 1b e8 e5 e9 83 eb 63 fd 83 d5 03 ce 8f ff 9f b4 67 fa 4d ff 9e 74 7f 3b f2 21 f4 5e bb ff 43 fb c7 fa 5e b8 9f c9 e4 af e3 3f d3 f3 3f fa c7 eb ef f1 7a ec ff 3b c0 3f d9 bf b6 f4 0b f7 9f a2 8c 20 3b 63 fa 3e 82 fe fd fe 4b cf cb f5 bc f2 fe 07 fd df b0 2f f5 2f 43 3f f8 78 dc 7e 6b fe ff b0 77 f5 af f5 3e b1 7e 0e bf 70 f5 Data Ascii: RIFF]WEBPVP8 \0_*>@J%)'S gjYKEp7JS6jI0<TKN=EM\Z{[~\UW\|4xF.b}~zcgMt;!^C^??z;? ;c>K//C?x~kw>~p
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 3c ce 93 f7 e3 8a 51 58 6b af 5b 84 5f 0a dd 75 58 46 eb 77 8d 04 93 d4 4f 37 d7 8b 3d f0 37 a1 b3 9e 04 bb 09 72 2f 24 2e e7 d2 aa e4 77 1d 99 32 db 09 7f 87 fd d1 1a a4 1b 01 6c 37 42 86 bd bd b6 0d 14 d9 9c 59 1f ce 25 20 6b a2 3a 11 14 85 9e 89 f7 a4 3d b5 69 18 1c 85 1f 72 0a c6 41 bc 58 4d f3 f6 a5 b8 c5 f0 34 ee 8c d4 4f 9d ef 2f 1a c4 06 ba c1 cf a9 4a e3 8f 69 22 69 63 dc f0 80 be 1d 3a 89 ea 0b 5f 34 3c df 42 08 89 77 1c 4c c6 c9 32 fb 14 ab 16 81 95 e0 56 fb 28 61 9c cf f1 ae f5 51 c3 f8 e6 8f 33 1b 54 b7 e9 c9 55 23 72 d3 3a 27 ab a9 3e 33 44 cb 40 a8 52 bc fb 20 e4 08 75 d3 83 02 7f 6c 1e eb 56 6c ee db 61 bd c0 52 da 80 bd 6f 6a 6f c4 4b fc 23 cb 53 9a 5e 7d b8 1d 6b c9 04 a0 d3 e9 96 32 b5 9e b8 11 09 ab 4e 51 8a 47 1f 40 ec 8d 08 fe 93 e1 Data Ascii: <QXk[_uXFwO7=7r/$.w2l7BY% k:=irAXM4O/Ji"ic:_4<BwL2V(aQ3TU#r:'>3D@R ulVlaRojoK#S^}k2NQG@
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 53 36 20 01 26 90 17 73 f4 6f 9d 7a 53 68 ba 3a 5f fb c9 84 d9 d2 b9 ce 7e 39 ba 2b df f8 ad d5 cd 20 ec 69 49 7d a5 bb ed 6e b6 74 74 22 1c 0b 7a 4f c3 d1 ea 8b db 4e 78 90 f8 69 8a 42 fc 31 a1 d2 bd 81 27 e6 2c b2 fb cb d3 f3 06 21 ec 16 03 3f 35 4b 01 1c 45 ee be 7d 0b 7f a6 6d 8f 80 90 f0 db 99 65 53 b5 ff 47 65 40 db 43 fb 34 10 a8 7c af e1 b7 b0 8e 4e 1f c7 7b e0 dd 4f 9f b5 7e 72 45 40 de 47 55 ee 45 89 25 bc f0 94 9a 15 b9 d1 28 80 7c 5b 58 7b 56 ce 9f a5 03 25 60 37 59 60 70 ee 9d f8 58 77 99 bb 32 8c df 72 9e cd e8 df 31 29 c9 0d 17 b5 48 6f e5 af 7a 3c 12 d8 49 5c 68 7b b9 39 f3 ab 3d d4 02 86 6b cd 66 a8 16 c2 e9 10 45 f4 1d f0 b8 e0 89 72 51 63 60 c9 25 5c 64 dd 2c 14 43 2b eb 54 5b 6c 79 53 bd 22 d5 36 b3 3c 68 46 f0 4a f3 ae 46 71 e3 65 95 Data Ascii: S6 &sozSh:_~9+ iI}ntt"zONxiB1',!?5KE}meSGe@C4\|N{O~rE@GUE%(\|[X{V%`7Y`pXw2r1)Hoz<I\h{9=kfErQc`%\d,C+T[lyS"6<hFJFqe
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: cd 1e 16 90 8d f3 f2 ac e6 e5 c6 5e 44 3e 65 60 52 25 b7 63 45 d5 19 34 13 4a 80 9f d1 00 76 fe a6 e9 fb e1 b7 4a b0 50 f9 ac 78 39 d1 ec 97 89 fb 79 8f db af b8 55 46 1c 6d f2 ad 94 5e b8 a6 ba a8 91 8f cf 7c 9f 5d ad 7c 07 da f5 9c 90 89 9b 46 9e 8d 8c 3d 35 1a f2 c5 c7 8c c6 cb d9 71 c9 ae f1 af 80 f2 a5 ae f9 9e 33 ac 1c 9d 3c 73 69 0b f0 25 a9 31 8a 81 02 bb d0 78 4e b5 28 21 78 8d cc 8f 40 cd 34 aa 69 83 06 df 07 ef fb f1 61 45 de af 32 e9 11 31 a0 c6 9e 42 e6 08 31 71 76 1b 90 59 89 ed 10 bf 8f 88 d3 4f 26 4d f8 54 37 52 61 3b e4 4e 82 0f 6a 21 62 fa 1e eb 32 19 2e e8 dc fd d0 6c 4a 26 a0 3d 9c 46 06 41 7d 0f 55 c3 37 88 aa 3c 9e 58 37 80 9e de 4a ab 38 a6 03 79 fe 85 73 10 34 df c2 64 54 d5 65 9e 08 4e e7 68 bd ce 58 2e 78 69 19 0d 32 05 63 af f4 Data Ascii: ^D>e`R%cE4JvJPx9yUFm^\|]\|F=5q3<si%1xN(!x@4iaE21B1qvYO&MT7Ra;Nj!b2.lJ&=FA}U7<X7J8ys4dTeNhX.xi2c
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 2b 18 81 b4 b7 ef 6a 36 45 53 0d 65 78 e9 36 fd b8 fa b5 52 55 0b 12 c6 9b 27 13 44 c3 ee 72 7a 4d c7 d6 6f 10 39 da fe 1f 75 2e a0 d9 d7 f2 c7 25 88 be 99 56 84 6c f7 a3 d3 43 8c 4a af 4c 96 75 9d 5c 6d 54 6b d8 84 dd 8d 94 c0 4d cd 24 8a 25 2d ae 29 b0 c2 30 e2 bf 89 95 14 f9 29 84 1f 3d fc 4e 4d ed 7f b8 d2 8b eb 99 b1 e7 d5 21 de d9 8c 33 68 ac 8e 1d f9 ed 33 e3 06 fd fb 32 8c 8f 3b 29 1a 06 4a 12 63 ce 62 e4 9c c5 47 c7 04 24 f2 cf 45 db 25 f5 8a 99 3d cd e7 cd a6 33 4a d7 86 5b fe f1 13 22 48 02 7a 7f d1 83 3d 68 74 13 f9 af 66 32 4b 1b f1 c9 c9 5c 90 65 77 93 0f da 28 d5 32 42 2b cb 1c 19 16 b2 63 2b f5 b1 d0 ef 2e 08 2f 71 fa ee 0e c0 43 b1 9d 9a aa 22 e5 60 ff 6a 9e 65 4d f3 7c dd ec 25 a6 5d e0 4c c3 04 0a cb b4 6f f1 75 56 85 8a 2c 9d 64 64 81 Data Ascii: +j6ESex6RU'DrzMo9u.%VlCJLu\mTkM$%-)0)=NM!3h32;)JcbG$E%=3J["Hz=htf2K\ew(2B+c+./qC"`jeM\|%]LouV,dd
2023-12-05 18:13:39 UTC	7442	IN	Data Raw: 70 d1 b8 dd 1e 5a 03 e8 0d 50 f0 94 de 74 6a e9 ba 8b df 91 bd 0e c7 24 17 3a 13 e0 95 00 a3 30 98 48 40 3b 0e 43 85 1d 37 33 ba c1 ae 9b 90 74 63 43 78 af ef 63 6b c1 d0 3f 38 a8 87 8d 84 7b 96 79 29 06 97 08 09 96 94 ee 52 e0 54 24 7a ef df 4e e4 30 fc 91 94 f1 36 cc a3 6d 2f 49 88 6f fe 6d 80 96 23 f9 11 83 71 b8 ee a5 29 11 5e 7b 16 30 b8 36 da 88 d7 39 3e 92 c7 d1 44 6a b4 bc 35 a7 cb 4d f8 33 e4 a4 7a 53 f8 5a ca ba 55 f4 5f a7 b0 8b e4 b1 fe 1b 27 68 99 89 14 52 82 58 f1 bd 4a 50 86 80 f2 aa d8 17 6d 81 71 a3 bd cc 16 b9 5b 1c b2 4c a1 30 8c ae f3 a3 a6 6e 5e 6f 4c 9f a6 c2 a3 5a 78 83 32 7c 8b eb 03 bb 29 69 9a 1e e0 83 ae cd cc d9 de 18 2e 85 4a d6 5b bf ef 9b 69 24 e2 12 e1 b9 b6 03 80 63 8b 2d 0a a8 4f 70 bd f4 fc 4c 22 f8 7d d7 9d 3c 8c 68 1c Data Ascii: pZPtj$:0H@;C73tcCxck?8{y)RT$zN06m/Iom#q)^{069>Dj5M3zSZU_'hRXJPmq[L0n^oLZx2\|)i.J[i$c-OpL"}<h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49970	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	694	OUT	GET /images/2023/12/04/multimedia/04israel-hamas-precision-cmpb/04israel-hamas-precision-cmpb-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	1204	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 34 39 32 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 43 6b 50 43 61 42 49 55 54 42 51 4a 52 66 4d 77 50 70 67 2b 51 4e 61 36 52 36 51 45 55 52 70 49 49 6c 2b 72 6d 70 4f 4b 52 6c 55 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 32 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 54928Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "CkPCaBIUTBQJRfMwPpg+QNa6R6QEURpIIl+rmpOKRlU"Expires: Tue, 05 Dec 2023 12:
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 52 49 46 46 88 d6 00 00 57 45 42 50 56 50 38 20 7c d6 00 00 d0 c6 04 9d 01 2a 00 04 e2 02 3e 91 40 9c 4b 25 a3 a6 2c a4 11 fb 21 90 12 09 67 6e 0e f7 55 0a e6 d3 84 7e a3 b5 61 f2 cf cb ef 0e de cf ec 7b 61 de 81 be 74 2d bd 80 e1 bd c3 8d d5 1e e3 e6 22 f8 fe a2 7f a8 6f 19 f3 7f e6 fd e6 f9 bf 77 d1 2f eb 4d fd d7 7f ff 9e bf c6 ff f1 f9 d5 f9 a7 64 3f 9c fb d2 ff 35 ec ff 8b fb 5e f8 e9 eb 8b ba 7f d7 bc 4b 3e 35 e9 c5 fd fe 0d 9d 3f 99 c6 01 f8 ad fb be c6 a9 e2 bf f0 f3 e1 fb 4e fe 22 6e 51 09 e5 df 2e 30 7d db ea cb 16 92 46 be 5e 2f 35 73 33 8f 8f 9c 50 c1 67 29 05 5f 4a 18 87 c7 36 3f 8f 3b cb 91 55 48 73 d9 6d 8f da db b8 cd 7e 59 a5 17 f7 d2 ed 78 58 3d e4 6a 75 7e 38 f0 29 7b 3c 34 c7 b6 84 01 99 2d ce fa 15 32 a4 dd 53 aa 15 26 19 f8 00 97 bc Data Ascii: RIFFWEBPVP8 \|*>@K%,!gnU~a{at-"ow/Md?5^K>5?N"nQ.0}F^/5s3Pg)_J6?;UHsm~YxX=ju~8){<4-2S&
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 6c e1 ef 72 60 3a 1d 8e 3f 5e 3c 8f d1 e4 18 dc 07 55 23 e6 87 7a 46 29 04 05 05 c0 6b b7 0d 93 9d 06 7b ed 9d 3c 82 4c 73 86 bf 05 cc b5 6e d7 66 a6 d2 1a 0b c4 1a 6f e5 85 a9 9a 65 03 7c bc b5 f7 18 d5 bd 1c f4 ed cf df 10 80 4e 9e 07 bf 94 f2 90 fa 0e 47 fc ad f2 00 6c 65 b5 2d 7d e8 f6 4e 9d 38 80 a6 c6 c3 7f 35 9f d1 be 90 c1 7a 72 1a 29 3b 9c 77 54 74 f3 8b 22 0c d2 2f ed 87 37 44 c9 91 39 74 02 a8 eb 8f 78 a7 9c e4 82 26 1a 78 77 50 c1 b3 78 13 da eb d8 31 4b 61 74 ca 4c 84 be 0e 3e 9f 02 a6 1c fe cf f0 0f bd 6f 36 c6 18 5c ed c8 11 bc 62 12 3f 44 fe ab 2c e5 7f 9c 8c 25 61 cd f5 0f 96 95 bc 2f 47 bb aa 75 a0 d8 ab b7 77 d3 0e 25 21 f3 e0 0f e0 7f de a6 e6 13 ed 6d 3b 5b de d3 44 8b fe cc 7b 7e 74 46 93 c6 b7 ad 2b a8 33 09 48 6f d1 7d 52 2d da 8e Data Ascii: lr`:?^<U#zF)k{<Lsnfoe\|NGle-}N85zr);wTt"/7D9tx&xwPx1KatL>o6\b?D,%a/Guw%!m;[D{~tF+3Ho}R-
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 6d 38 d1 f2 cb e1 ad 3e aa fd 8a f4 03 d7 37 82 62 a0 40 5f 05 b9 f9 81 bb 94 35 0f 88 d0 dc 6d 7e 08 97 1f ef 56 99 16 df 8e db 5f a3 88 2d 19 e8 30 70 90 87 8d 79 9a d7 fa 56 04 36 c5 bf bb 06 0b 82 a5 10 30 cc d0 21 40 87 7a c4 6b 26 73 07 90 8e 82 d8 ed bd c8 2c d5 70 a7 c9 4b ac 64 4d 06 87 ab ca 2b cc d7 c9 0c 15 f2 18 4f ad 92 6c 1b 6b c4 16 da 65 28 57 14 9e 48 c0 ec 46 93 61 a3 9f 7b a4 42 ae 1a 75 3b 33 fb 5d fd 68 3d fd 18 e5 e6 78 cc 29 f4 de e3 77 08 58 e1 67 6c 02 99 d9 d5 7e 59 ae 0a 11 07 37 67 d1 11 3b 43 50 67 10 1b 5b 75 e7 b0 33 3c 44 99 21 9b 74 ba 63 55 ce aa d1 52 31 56 98 3e df 9a aa c5 f3 e4 ba ff cf be 55 ff cf 03 40 60 44 ff e0 cb 72 5f 59 13 5a e8 10 77 98 f2 a4 e1 b4 f6 99 c4 d0 05 8f f8 1b dd 75 b2 cb b4 cc 03 2d 5d b1 94 9a Data Ascii: m8>7b@_5m~V_-0pyV60!@zk&s,pKdM+Olke(WHFa{Bu;3]h=x)wXgl~Y7g;CPg[u3<D!tcUR1V>U@`Dr_YZwu-]
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 41 e6 5b b2 63 e3 3c 5b de 3b 0b 2e 24 78 0e de bb 5a 51 bd a8 10 7e 8a c7 c8 50 53 28 f0 ee 69 2d 21 92 98 5b 71 61 f6 f0 59 2c 18 47 b7 fc c1 f7 14 89 82 1d df 60 de 73 37 fe b6 17 c2 ab a0 2e a6 97 9a f8 40 a6 f7 30 48 0a 02 db 6a 54 cb ac 14 c7 8a f3 79 ac 7c 6d 08 5e b1 b6 0c be df 2b 73 48 cf 24 14 9a c9 aa c2 27 c2 55 3e ce 88 1e ba d8 d6 78 0a 0e 25 63 50 49 1b bb 24 5c b6 54 eb a8 0d fe 53 41 b3 c1 9c d8 24 87 ae f9 35 f5 7e 7f 66 88 c3 e0 c0 a2 8e d7 93 60 e3 5e 86 2a f8 0b a1 cc 73 66 dc d4 ee 86 ac b5 af de a6 c5 ee 27 1f 2d 63 dd 79 25 a4 07 db de 1b 2e 68 d1 2c db 66 d9 dc 50 b9 2d 5b 4d 73 c4 bb 17 61 ae 98 64 83 0e 96 13 c5 b5 1c 90 ac 4d 8c 9a 38 9f 3a 07 60 ad 9f 7a d4 a7 02 a9 7e ff 57 80 13 f6 e9 27 75 ec d4 f4 8c 91 c3 5a 0d 4d ce 0b Data Ascii: A[c<[;.$xZQ~PS(i-![qaY,G`s7.@0HjTy\|m^+sH$'U>x%cPI$\TSA$5~f`^*sf'-cy%.h,fP-[MsadM8:`z~W'uZM
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 4e 9e 33 3d 19 3e 89 e3 c2 97 f3 79 a6 0f 05 7e f5 75 c0 c4 a7 07 76 2d 1f 40 2f 1b e6 9f 9b 91 16 aa 31 88 1a af 0c 11 bd 7c 4e 52 73 1b c8 17 f5 a2 1d fa 03 30 57 2e 28 24 ba f7 d6 2e 14 2f e8 27 80 07 66 da 98 e6 bf ff c8 de cf fe 90 37 6e 45 b4 ec fb 6b 3f 3c 61 ff dc 3e ca a2 f6 75 aa c7 60 d7 c0 ba eb 4c 79 67 b6 78 2e 0c be cf b8 b5 9f e9 5c e9 e3 a5 d8 bf 0c 87 c6 3b 67 17 9a 71 c5 34 23 33 e7 8a 11 91 27 78 4b 6b 98 6e 4e 5a 27 fc cd 1d 65 b3 65 90 bb 00 56 0b 3f a0 fa 88 af 0e 2b bf 29 fa ee b4 89 12 32 ac b0 da fe 56 cf 8c 18 0d 54 81 87 eb 78 c3 0b 5e 6d 9b 87 c7 87 1b a1 2e fa ea 76 c9 cf 1a 1b f2 86 3b cb ce de f8 10 74 af b9 31 56 23 cb 6a 62 17 3b 49 27 6e d8 99 eb 30 bb e8 64 e3 9d cf 4d d8 d5 ba 39 82 ab dd 11 08 f8 52 2d e2 09 03 f8 af Data Ascii: N3=>y~uv-@/1\|NRs0W.($./'f7nEk?<a>u`Lygx.\;gq4#3'xKknNZ'eeV?+)2VTx^m.v;t1V#jb;I'n0dM9R-
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: e2 e9 f4 8e 82 a4 94 1c 81 d2 47 9f 4c fa b5 1a 22 d3 a5 71 2b 57 2a 7c cc 23 0b 82 d9 14 0d 1a 68 b7 0d 79 a9 50 12 b4 83 12 9c 45 73 54 29 74 cf d1 26 69 7f 99 b1 3e 18 76 43 94 e5 7c 46 65 72 a2 80 74 5f 9e c8 b8 5c 86 c9 9d b1 27 e9 4c 6c 94 b0 87 55 68 e5 97 ee 0b 71 42 7a 5f e0 40 0b 51 41 74 81 00 93 b6 94 99 e1 ea b4 df aa 20 27 11 78 4e b2 25 61 a8 5c 7f 23 5d af 49 6e 14 a4 7c 31 4c 67 b7 d7 41 db b1 1c d6 04 2b b8 e5 24 c7 d5 e9 85 e1 3d 41 7e d6 bf 9b cf 36 d2 93 78 62 72 ef 42 e9 0f 46 d6 d3 54 2d 06 36 fc 32 d9 7a 32 4b a6 53 21 8a 70 64 35 a1 63 a0 13 77 36 e4 b4 40 4b 57 64 5f 17 92 3a 6c 5d dd 69 94 4f f9 98 e5 a7 96 79 7c 49 7f b5 30 85 ef 0b d7 9a 97 11 76 91 26 0d da 81 76 77 a1 51 f3 6f 3e 1d 0a 47 19 fb 04 02 53 87 42 42 92 0f 05 a9 Data Ascii: GL"q+W*\|#hyPEsT)t&i>vC\|Fert_\'LlUhqBz_@QAt 'xN%a\#]In\|1LgA+$=A~6xbrBFT-62z2KS!pd5cw6@KWd_:l]iOy\|I0v&vwQo>GSBB
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 62 6a 81 80 db 5d 81 7f 3d 88 ad d8 dd f7 9c 37 df 87 96 23 3a c7 42 70 05 ef d5 87 56 d4 3b 7f 2a e9 09 c9 1a 9c b1 8d 2d 1a 03 b2 b1 9c 0b bf e6 45 19 82 c0 f8 41 ac 84 63 96 1a 99 33 ae a0 33 13 ad be 97 bf 50 d4 d6 ef 36 98 97 d0 b3 ac 3f 9a c9 cd c7 ed 89 7c ba 55 01 dc 2b 9e b7 39 30 ff 27 c3 41 a9 eb 06 5f 3f c5 d3 4d 97 98 c4 47 cc 59 ec 78 f9 e8 c7 a7 4a 55 22 ea 6f 29 ae f6 5a ca a4 eb e7 74 03 58 cc 98 f8 81 85 dd d1 8e 58 98 e6 f8 39 42 fa 73 b0 4a 22 06 8e cd 2a a6 76 5f 48 de ce ea 86 63 21 e5 7a 34 fc f0 7d 77 da 74 b2 80 83 ed b9 96 21 61 e7 90 48 fc c7 25 8d 51 c5 4c 57 52 2a ea da 91 55 48 b5 3b f0 41 81 09 f1 1e e6 9a 16 8c 73 88 a6 f6 1c e2 84 15 34 77 5c 36 82 7c 4c 9c e6 f3 c1 7e de 19 73 48 30 99 c9 ed bb 64 d5 3b 0b cf 33 c9 fa 04 Data Ascii: bj]=7#:BpV;-EAc33P6?\|U+90'A_?MGYxJU"o)ZtXX9BsJ"v_Hc!z4}wt!aH%QLWR*UH;As4w\6\|L~sH0d;3
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: f8 e7 82 18 3f 63 70 02 7c de 5e 7e a3 6b e0 84 eb e9 9b 94 8b 72 38 66 78 f4 9c ae 42 d0 35 71 a1 7b 0d 0d 83 4d 1d 34 4f 9c 32 c0 20 68 80 27 cf 9d ae 0a 8a ec a2 0b 0a ff 39 96 24 00 0c 30 35 1e 0e f7 75 29 72 05 a4 97 d5 62 c2 7d 5d dc 7c c6 89 0b 3e 0c 12 d8 da c5 5d 3c 5b c4 cb 5e 88 37 cd 57 ff 47 36 43 3a 22 18 e3 0d 2c f4 9e 59 33 77 2a 59 b5 c0 7b 2f 49 9e e9 20 fa 5e 23 73 27 3e e4 a4 c9 f6 5a d7 5e 5f a6 06 35 6d 56 8a d2 6c 24 e3 45 b7 ec b5 dd 41 25 cc 00 00 fe df bf 40 47 ad a2 a3 d0 2a 52 50 3d ae 77 be 1d 46 17 64 fd 87 57 e3 99 29 aa e1 22 ff be 8e 4e a1 25 4e 77 8c 27 a5 a4 92 b3 d6 f1 fe dc d0 75 dc f4 a1 3a 7f da af 77 f4 f5 72 f7 5e 0b e0 f2 c7 14 da 01 fc 69 16 3f b5 83 b2 e1 56 29 f2 ab b6 36 e1 40 04 e2 6f 15 d9 6b 7d 20 2a 0b e3 Data Ascii: ?cp\|^~kr8fxB5q{M4O2 h'9$05u)rb}]\|>]<[^7WG6C:",Y3wY{/I ^#s'>Z^_5mVl$EA%@GRP=wFdW)"N%Nw'u:wr^i?V)6@ok} *
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 4c 6c 9c 73 a5 af e8 df 5c 30 d5 a5 d2 20 5d 30 38 e0 bb 63 bf 4f 59 8f 89 bc 21 24 e9 fb 92 ba 11 fc ad 95 8c 4e 59 79 a9 03 93 a1 3f 77 a1 2a 4f 11 5e a9 31 ff 99 4e 7a 94 65 5a 6e 64 99 5d f9 a8 33 c6 18 c9 0d 88 52 e0 5c 23 80 93 b3 bb 3f 71 2e 67 80 7d 1b 60 d2 30 ce 64 36 49 8d 88 04 30 c0 5c 3c e5 1f 7b e5 64 e7 14 db 5e bb fb 08 c4 57 b1 03 b1 72 de ac 7a b4 d1 92 7f 8c 53 05 83 57 00 c6 68 d3 3d cd 01 3a d5 10 93 ae df 9d 31 2b d1 b9 c6 2b 55 7e 85 27 3d 24 01 5a f1 8d 2f c0 58 ea ca 49 19 55 51 92 67 13 45 fb 30 53 fd 85 7d 3d 76 bd 8b 77 1c 10 88 82 d3 43 c9 73 a3 49 b5 79 36 bd 1f 56 4d c3 8a fe f4 71 b1 70 23 c9 1e a5 9b 34 8c ce 90 50 bf 55 f4 71 7b fc 24 d9 c5 2f de 71 fb e2 77 75 98 c2 7a 6a a4 6b f9 3e 94 ca a5 92 c4 a8 d2 a4 6d 02 fa c0 Data Ascii: Lls\0 ]08cOY!$NYy?w*O^1NzeZnd]3R\#?q.g}`0d6I0\<{d^WrzSWh=:1++U~'=$Z/XIUQgE0S}=vwCsIy6VMqp#4PUq{$/qwuzjk>m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49973	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	700	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-eu-terror-01-qwpm/05israel-hamas-eu-terror-01-qwpm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	1202	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 30 36 36 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 55 50 4c 6d 79 47 50 63 46 63 2b 42 4e 63 68 4f 6f 66 4c 41 6f 73 5a 52 42 33 63 6e 32 48 42 2b 4c 76 51 54 63 34 6f 6c 51 49 4d 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 70660Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "UPLmyGPcFc+BNchOofLAosZRB3cn2HB+LvQTc4olQIM"Expires: Tue, 05 Dec 2023 17:
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 52 49 46 46 fc 13 01 00 57 45 42 50 56 50 38 20 f0 13 01 00 70 d6 04 9d 01 2a 00 04 af 02 3e 91 40 9b 4a 25 a3 a9 29 27 b2 fb b9 20 12 09 4d c8 0c ea 66 1d d4 0e 9a a7 d8 ba 3b ca f6 92 b4 04 e3 7f 69 73 eb 8e 8b 1d 25 3d 97 80 39 af 7e 9e a9 f8 ff e2 bf e6 ff 5d e9 cb c8 fe 1c fd b3 f2 3e b4 1f ea f0 97 e3 bf f2 f9 de 7b 87 7c 0f fa df b7 be f7 ff aa 7f c2 f6 19 fe cb fe 7b cf 93 f7 3f e0 bf f8 df fc 3f 94 9f 0b 7f 72 3f 78 bd e0 bf f5 fa fb ff 0b ea 0b fd 8f fe cf ae 87 ac 87 f7 9f fd 5f ff fd d1 fc e7 7f fa fb 4b 7f 77 ff cf fb b5 ed ad ff ff b3 93 f8 07 ff fe 31 ff fc 9e 73 fe 6f d8 6f e7 9f 78 ff 53 d7 1f f9 3c f9 fc 3f 82 df 81 73 b7 fe 7f 86 3f ad 7f 53 e8 2f ef 3f 44 cd df f9 79 f0 5f f3 ff 6e 7d 86 bd e6 fc 2f 9e 57 eb 79 f1 fb ff fb ff 60 4f 34 Data Ascii: RIFFWEBPVP8 p*>@J%)' Mf;is%=9~]>{\|{??r?x_Kw1sooxS<?s?S/?Dy_n}/Wy`O4
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 16 f1 57 78 af d8 96 7e 5c 68 31 10 c9 4c 13 c0 b8 d9 5f b8 a0 c7 74 e2 43 75 3e 66 38 69 1a 8b 24 c5 e3 e9 70 13 63 b5 44 63 94 46 65 79 92 28 cc f6 b6 d2 73 c6 c0 7e 01 44 4f 1c 9e 97 b4 01 a0 b3 52 d5 cb 28 32 ea 83 c2 20 ba 04 f3 02 06 2a 18 aa 60 5d fa 7f 55 42 b5 5a 72 cd e6 ba ab 3b 11 be 24 c7 1a 76 71 69 bf b1 20 eb c6 d0 df 76 d5 b2 2b 01 a5 4a 46 c5 d4 e7 a1 a3 78 18 54 30 7a c2 f3 ea 1b 94 f9 e5 54 d9 60 fc 65 01 f0 54 5e ef 48 86 97 3f ec e4 fb 00 46 c2 83 dc 7e d1 7a 58 cb 63 e9 69 de 3c 95 46 63 8b bc 1b c8 bd 39 49 7f 56 f8 c7 07 a8 95 bb 74 19 52 57 c3 6c 25 b9 8c 56 8d 94 8b 2c e4 74 ec 6f 2c 52 f7 c6 5e 7e 33 b8 11 8e 1b f7 13 51 59 f0 ab 22 d1 59 aa 38 f9 41 e8 98 47 ff 85 db 8e 28 77 8f 74 9c aa 4c 81 d9 6d ee ea b6 1c 15 25 e7 c2 f5 Data Ascii: Wx~\h1L_tCu>f8i$pcDcFey(s~DOR(2 *`]UBZr;$vqi v+JFxT0zT`eT^H?F~zXci<Fc9IVtRWl%V,to,R^~3QY"Y8AG(wtLm%
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: 00 0f 34 82 d2 43 05 5e cd 0f 62 fc 89 a5 57 55 b2 b4 33 b8 14 2c 15 4b eb 5f 02 d5 b6 b9 38 2d 53 7a 9b c6 be 5d 6a ed dd 83 f4 50 d3 5d 96 42 44 4f 9b d2 af b5 7d 39 59 71 98 1a 7f fc 05 06 8b 07 31 84 de d3 55 6e 90 30 f3 02 05 bc da 17 73 85 3c 91 4b cb 43 5a 61 c5 b0 00 0f 03 f3 1a 64 f7 24 05 bb 3f a9 f0 5f 34 9e de 2f 8f 5d f9 63 fe 01 9b b2 b1 9f 76 8a 66 82 e3 74 f3 d0 e0 44 12 5f 3e f5 b9 f0 ce 8d d7 ab 94 e9 18 96 a1 58 9f 93 ce bc 53 c4 7f d4 05 e5 4c 26 02 5f 6f 49 9e 5c 2e cd 0c 96 ff 20 f5 ed c6 cd 4a 46 fe 12 89 32 17 f3 24 fb 9d bd 3e 11 d4 ff cc 5e 39 b8 2c 99 37 bb 6e 17 27 b1 5e 48 89 85 44 5a ab 82 8a 43 e0 db f1 4b 11 18 ce de 27 c0 09 71 e0 99 43 54 f4 91 a4 75 48 58 f1 9b 8c b1 ba 2a 12 25 9d ce 8f 1c 7b 69 0e 54 b6 20 b2 ed d7 ab Data Ascii: 4C^bWU3,K_8-Sz]jP]BDO}9Yq1Un0s<KCZad$?_4/]cvftD_>XSL&_oI\. JF2$>^9,7n'^HDZCK'qCTuHX*%{iT
2023-12-05 18:13:39 UTC	16384	IN	Data Raw: c2 4d 35 c9 f6 8c 93 4c bc 4b d0 0e 69 59 3d 99 7a 13 5b e3 a2 0f 08 af c7 83 2e cf 68 4a eb cb 34 2e 49 54 38 09 df 34 18 57 f2 0a f4 ac 85 ca 4d ac 84 4f 8d d0 70 7b dc d0 ee 62 dc f7 0f 58 52 b9 b8 a6 0d 57 51 4f e8 f7 ca 35 fd 18 53 39 07 41 41 fc 0d f3 02 f3 c1 65 d2 78 84 3e a2 83 49 2a 5b 67 0c b7 fd 33 75 90 7e ee 25 92 06 be 51 62 57 c1 91 bb a7 70 92 93 34 0a ae b3 b7 b9 0f b7 48 05 ad 8f 27 42 6a 13 7d 95 ec e4 3f 1c fc a3 a3 f2 59 45 c3 7f 4f b8 c2 1a cf a2 f8 e3 fd 3e 9c e1 2f 1d ba da ff 25 ea 86 07 d4 a8 96 b4 92 33 27 91 2e ca f6 c8 60 7b df a7 bf cd 45 8c 6a 2d 2f 5e 67 30 c4 b4 b1 c1 2e ed 6c 21 85 33 ed 06 fa 8e 9b 71 42 b4 7e f0 81 17 ac 94 eb 3b ef 43 34 af 3a 80 cc d5 3c 40 37 88 fa 88 a5 8b ac 9a 2a 47 f3 d9 48 af a7 b9 17 39 86 bf Data Ascii: M5LKiY=z[.hJ4.IT84WMOp{bXRWQO5S9AAex>I[g3u~%QbWp4H'Bj}?YEO>/%3'.`{Ej-/^g0.l!3qB~;C4:<@7GH9
2023-12-05 18:13:39 UTC	5124	IN	Data Raw: 9f 3f 01 06 80 1d 98 03 08 40 3d 36 cf 40 b3 68 63 a5 16 58 fb ac 1d 3b 2b 37 e6 40 38 12 18 d5 5f 5a aa ba 90 5f 9e de 28 ad 49 0c 8d bb 2a 0d 5b 69 23 e8 d0 81 f6 1c 66 fa 43 00 6d 86 8e c9 44 9e 3f be 39 87 66 32 bd 5b f8 57 66 ad 71 54 1d ea a1 fe 0b 77 ed c5 30 8e f5 25 a9 87 61 99 5f 04 61 00 d8 c1 f9 ad 53 56 8d 67 5c c6 ba b2 91 b4 9f dc 70 a7 fd 1d d8 f7 43 41 fc 88 5f 0f 8f 3f 2b ab f1 98 df 0d 21 2a 3f 6e 48 fa f7 42 8f af ec e4 56 1c f3 a3 b5 d9 de eb ad e6 77 ca b7 a9 9c 52 0c 33 53 ce 33 04 a5 e9 cc 1c 98 1b a2 9a 18 8f 26 7a 8c 15 3f e2 89 b8 e0 2a 36 31 a4 20 fa c8 37 ff 42 4d a3 75 51 2d 36 5e 32 87 88 78 ee 76 48 08 3c e8 91 db 5c b8 06 51 b2 61 38 7a fb 59 8c 81 51 50 9c c5 59 21 8d 66 c1 65 c5 e5 28 96 d3 13 57 1d 94 e2 7d 89 78 24 61 Data Ascii: ?@=6@hcX;+7@8_Z_(I[i#fCmD?9f2[WfqTw0%a_aSVg\pCA_?+!?nHBVwR3S3&z?*61 7BMuQ-6^2xvH<\Qa8zYQPY!fe(W}x$a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49974	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	798	OUT	POST /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive Content-Length: 283 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNTQ0MTI5MzQxfQ.UI13nEXGs0udbZxhjyFLruAEed42XwFO4fZlCqOgY1o User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	283	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 6c 69 76 65 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 7d 2c 22 75 73 65 72 5f 74 72 61 69 74 73 22 3a 7b 22 65 64 75 53 75 62 73 63 72 69 62 65 72 22 3a 22 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 22 22 2c 22 61 67 65 6e 74 49 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 7d 2c 22 61 70 70 22 3a 7b 22 75 69 5f 73 74 79 6c 65 22 3a 22 77 65 62 22 7d 2c 22 74 61 72 67 65 74 69 6e 67 22 3a 7b 7d 2c 22 65 76 65 6e 74 5f 74 72 61 69 74 73 22 3a 7b Data Ascii: {"browser":{"url":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news"},"user_traits":{"eduSubscriber":"","userType":"anon","external_id":"","agentId":"XbK7A_KO3s8XVA_FdXv5zD"},"app":{"ui_style":"web"},"targeting":{},"event_traits":{
2023-12-05 18:13:39 UTC	683	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:39 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeaccess-control-allow-credentials: trueaccess-control-allow-origin: *vary: OriginCF-Cache-Status: DYNAMICReport-To:
2023-12-05 18:13:39 UTC	305	IN	Data Raw: 31 32 61 0d 0a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 61 75 74 68 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 49 73 49 6e 52 35 63 43 49 36 49 6b 70 58 56 43 4a 39 2e 65 79 4a 68 61 57 51 69 4f 69 49 32 4e 54 5a 6d 4e 6a 67 31 4d 32 49 31 59 7a 55 31 59 54 41 77 4d 44 45 78 5a 47 55 35 59 7a 49 69 4c 43 4a 6a 62 32 31 77 59 57 35 35 58 32 6c 6b 49 6a 6f 69 4e 57 4d 77 4f 54 68 69 4d 32 51 78 4e 6a 55 30 59 7a 45 77 4d 44 41 78 4d 6d 4d 32 4f 47 59 35 49 69 77 69 61 57 46 30 49 6a 6f 78 4e 7a 41 78 4f 44 41 77 4d 44 45 35 66 51 2e 37 2d 61 68 50 6b 43 73 76 4f 48 63 44 78 62 77 4b 76 77 43 43 53 37 69 5a 59 62 58 62 44 58 7a 61 43 37 50 50 78 Data Ascii: 12a{"results":{"auth":{"domain":"nytimes.com","token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx
2023-12-05 18:13:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49972	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	704	OUT	GET /images/2023/12/04/multimedia/04israel-hamas-khan-younis-01-wqvc/04israel-hamas-khan-younis-01-wqvc-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:39 UTC	1214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 30 31 38 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 37 6f 46 4e 71 50 49 58 79 45 59 2f 74 4b 78 62 6c 78 59 53 59 61 4e 54 66 6a 4a 79 6f 67 35 65 36 4a 68 6f 41 4a 67 52 43 31 30 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 31 34 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 120188Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "7oFNqPIXyEY/tKxblxYSYaNTfjJyog5e6JhoAJgRC10"Expires: Mon, 04 Dec 2023 14
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 52 49 46 46 74 d5 01 00 57 45 42 50 56 50 38 20 68 d5 01 00 70 05 06 9d 01 2a 00 04 ab 02 3e 91 3c 98 48 a5 a3 2a a6 2c 56 ec 11 50 12 09 4d c1 54 eb 49 e7 98 6d fd 4e 68 5e bb c5 72 19 bd e3 9a 3e 73 bf bf e9 f9 ce cd 59 42 4f 67 ae 06 06 d0 63 76 cb 4b 8b 5e 72 ed 1d e1 95 d8 7d 7c fa 01 f1 a7 cf ff cd bb ea 4e a0 bf e6 f9 1e fd c3 fe 8e 06 0f 67 fb 3a c8 e5 df a4 7f 9f cf 6f 96 7c 8d e1 2f 5c af f1 77 97 f1 df f9 7c d9 fd d3 fb 5f 3d 9f f5 7f 6f 7d ec 7f 76 ff 91 ec 37 fd c3 d1 b7 fe ef dd df 7d 7f e1 ff f8 7a 9a fe bf ff 27 f7 47 de 23 ff 6f ee ff bd cf f0 5e a1 ff d7 ff ea fa dc ff eb ff ff ff a3 e2 07 fb af fe 0f ff 7f f9 fe 08 ff 9a 7f b6 ff ff ed 51 ff d7 da 6b fc b7 fe df 67 0f f1 bf fb 3d 40 3f ff fb 77 70 9d 79 10 fa 37 dd 4f 08 ff 35 fb 1f f7 Data Ascii: RIFFtWEBPVP8 hp><H,VPMTImNh^r>sYBOgcvK^r}\|Ng:o\|/\w\|_=o}v7}z'G#o^Qkg=@?wpy7O5
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 1b 15 4f 5d 8f 5e 01 9c 22 14 1a a8 65 69 fa ae 3c 67 93 df 60 7a 41 bb 77 26 17 9f 96 6d ba b3 c0 ca cb 22 85 8a 6c c9 5c e5 39 d3 e8 66 8c 30 79 3d b4 90 35 33 af c1 ec db 6f a6 62 95 bc d6 6b 22 78 03 de c1 db f2 24 42 8a c5 6a 4e 9a 28 39 59 1c 02 ad c1 f6 e5 87 82 2e 03 7f c7 79 87 6d d6 e3 c9 73 8f f8 06 35 02 78 fa 88 c3 8d 11 ba 3c 78 ae 45 41 fd d1 d3 b9 00 b6 8f 1b 6e 99 18 32 47 af 8b ef d4 f5 0a 68 f0 23 5d 0c 4b 45 e4 f8 88 7f 49 90 1b 7f cd 3f f5 d4 3e 63 74 26 a8 5e f9 f0 a1 a7 cb 10 d4 68 81 49 3c 65 c0 a4 a1 98 07 89 c0 0d 2f 14 20 39 91 ad 6e 58 4c b8 be 7b ec 7c fb 26 bd f9 f2 6d 5b 02 de 66 e6 36 03 07 8a 43 4d b5 95 9d f1 ad 56 54 a9 c7 2d 88 42 e5 61 ab 2b c4 ae 19 44 d5 2e 10 20 be bd 06 89 7f 63 21 01 2a 98 19 35 98 d8 72 0f e8 81 Data Ascii: O]^"ei<g`zAw&m"l\9f0y=53obk"x$BjN(9Y.yms5x<xEAn2Gh#]KEI?>ct&^hI<e/ 9nXL{\|&m[f6CMVT-Ba+D. c!*5r
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 6c e1 46 0a 49 25 d7 d6 8c 48 91 66 c0 33 ec 7c 3b 59 82 33 bf 70 6a 56 a4 64 d6 1c d8 69 00 61 1f cb af d6 61 7f 60 ad 9a 91 38 88 8c a3 02 cc 3b df 09 b7 dd 39 a8 2c 26 06 4a 32 73 0a c0 04 4c df 50 80 9e 64 52 7e d1 33 76 af b2 91 f3 48 2b 5a 85 a2 23 63 8f 4a 04 5e 0a 54 ac f3 0e 05 90 1e 4e cc 1c 63 e8 d9 3d d7 4a 97 39 a4 7b 77 22 aa e9 12 19 8a cd e9 ad a6 2e e4 6d 87 3c 86 a1 fe 2d b1 9f 96 b3 e6 7c 0a 5c 1e ed c5 ea aa df 60 46 0c 05 87 10 13 8b 6e 43 4b 36 69 28 95 54 d8 de e1 a2 38 de e8 fa 2e 31 3f 1f 8e 28 d4 b9 14 75 60 33 e1 c2 75 1c 6a 34 49 71 c6 e9 09 0f 6b 38 c8 9f a8 ca 0e df 3e 24 01 e8 63 68 6c 22 2e 8c cf 8a 39 c7 5f 08 c0 0c a9 4b 20 59 a8 84 49 b5 b6 b5 77 25 55 0f 9b af 5d a5 f6 80 3e ab 09 f0 5b 34 ba dc 7f 80 38 1b 50 a9 c0 76 Data Ascii: lFI%Hf3\|;Y3pjVdiaa`8;9,&J2sLPdR~3vH+Z#cJ^TNc=J9{w".m<-\|\`FnCK6i(T8.1?(u`3uj4Iqk8>$chl".9_K YIw%U]>[48Pv
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: ed 9a 89 b7 98 12 75 cf bb 3a 84 6d cb dd 7c ab a0 ed da 39 c0 df 7c 0c ce ca cf ee c1 26 97 93 76 64 c8 2d e1 24 25 0f 89 c4 28 c4 1b 64 57 67 c6 19 81 14 83 5f 0d 24 56 47 0c 4a 41 e9 48 65 12 1d 99 98 45 d9 f4 61 0c 82 70 4d 4d 53 25 6f d5 d5 29 59 c0 d1 4d 3a 17 65 0f 4d dc f4 2a 4f 79 ca 52 ca e8 6a 17 4e 28 9b eb 17 25 a9 7e 4b 90 6f e4 9d 90 6e 5b a8 8c 48 d8 e0 6d a5 3e 73 e1 59 f0 ed df 4d 67 e5 12 3b ad 1e e6 8f 3e b5 70 9c 0c 74 61 41 89 7b 28 d8 8d f3 c3 80 ab 13 ef ec b3 78 bf f5 2c 8b 87 5d 0a ef 5e 2e 2e c8 3d 0e 84 18 09 42 77 2e 18 07 14 68 31 da 48 85 51 1a 32 0c fd 64 c6 89 2c 1c 82 06 02 c4 38 63 ba 13 fd ae 2f 76 1e 3b e7 35 ae bb 53 43 05 85 06 a5 19 26 64 05 a4 77 f5 08 d0 aa 80 0c 57 8f ae 19 31 7f ac ea 47 c5 f5 8a 3b 56 fe 4a 01 Data Ascii: u:m\|9\|&vd-$%(dWg_$VGJAHeEapMMS%o)YM:eM*OyRjN(%~Kon[Hm>sYMg;>ptaA{(x,]^..=Bw.h1HQ2d,8c/v;5SC&dwW1G;VJ
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: b7 d7 27 d0 64 81 22 49 c5 ec 88 4d 6a 30 4b 62 1f af 51 48 91 a3 a4 1a cb 6c 99 5a 16 6f cf 2d 15 a7 2d 22 47 3b d9 16 c8 47 61 3e b8 35 1d 99 9f 73 08 10 be c3 c1 a8 50 a5 63 8d a9 b7 7f f7 90 47 07 00 e8 d1 24 36 84 a7 fe 9c a5 91 de 88 2f 76 00 5c 02 0f 87 9e eb 38 7a 7a b3 88 6e 14 45 87 fd c2 86 0d d2 6d 92 f3 6c 2a b0 c7 76 28 56 1a 38 6a db 4b 8b 26 b3 5a de b2 5b 8c 96 3d bc 4c 76 c0 e1 88 47 d4 81 33 4b ff 94 3a e7 84 52 73 c0 0e 09 5b d5 f8 d4 93 d9 14 db 94 65 3b 9e 63 55 8f 02 96 b2 69 b6 a8 2c 60 cd 95 ba 34 f1 87 57 a5 19 7f d9 6a 59 bc ee 22 61 7e 13 6a ea a6 28 3e d9 f1 5f 8e d9 80 de 99 99 65 b4 47 df 10 95 16 8d 95 38 6b ec 59 b1 34 7f b7 87 5a 27 db b4 22 da 98 70 a7 94 f6 2a 47 6d f1 d1 4e 1c 57 aa 39 3b c5 94 81 1d 7e 21 2e fb c7 7c Data Ascii: 'd"IMj0KbQHlZo--"G;Ga>5sPcG$6/v\8zznEmlv(V8jK&Z[=LvG3K:Rs[e;cUi,`4WjY"a~j(>_eG8kY4Z'"pGmNW9;~!.\|
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: a4 7c 90 7f 6f 6f 50 99 35 4c f5 46 83 8c eb 9d 78 3a 91 e3 57 74 6b ac 0a 5d 75 d2 ba 44 47 c2 92 f8 c1 4b 7a 13 88 8d 57 db a5 51 81 83 7f 09 12 5e 20 21 15 6f bd 59 fb 00 18 66 1d 78 c3 0b 1f 63 3e 79 95 d6 68 b1 c0 41 04 20 d9 af 2c b8 e5 bd 93 33 c4 95 01 e2 38 30 ab ff c4 38 13 76 f9 71 86 b2 54 29 c6 1a c2 fa 8a b7 31 c4 44 fd 78 1c 52 bc ad b6 4c 5f f5 70 7b 50 39 68 33 93 ef 1c 5b 09 20 db 5c d2 09 20 88 05 82 a1 9f 46 29 eb a4 ba 15 22 e4 65 95 03 87 97 e5 ab 05 97 6a 46 15 d7 be 26 9e e4 2e a2 93 63 60 6d d0 a5 a6 25 b4 14 24 85 61 e7 5c 1f 85 8c f1 ef b6 65 e7 00 18 01 e7 7b 22 7e 81 da 2f f8 c6 ef 46 d0 d3 d1 44 d8 08 4d 97 7c b9 83 5b 80 6d 3e 96 45 fe a0 f8 3a bc c3 d6 1d 15 dd 01 02 a2 2c ff 58 10 6f d2 27 a1 52 28 b0 d5 03 37 97 e1 bd 87 Data Ascii: \|ooP5LFx:Wtk]uDGKzWQ^ !oYfxc>yhA ,3808vqT)1DxRL_p{P9h3[ \ F)"ejF&.c`m%$a\e{"~/FDM\|[m>E:,Xo'R(7
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 05 06 cd 69 20 36 b6 6a 48 e4 a1 f9 ed 0b 26 d4 6d 9d 73 90 89 40 a1 63 59 de d5 4f e2 8e a5 4b c5 40 ec a4 ad 58 d9 f1 7d b1 54 6f c2 bf 1d e5 04 d9 9d 0c 1c 69 db 10 8e 80 84 2c 1c b0 cb 11 f6 6d 9b b9 94 21 f7 5a d2 55 69 59 d2 1c e6 18 7b b5 7f d0 dc 46 87 e9 83 7d 78 89 36 5b 75 df 6c 45 49 eb be f0 bb b1 13 4a 4d 3a 1f 68 c9 79 ab 6d c5 f0 4e 0c e7 17 8a 04 02 47 9c fa 16 4f a3 00 13 98 0e b8 6b 97 5e ee 7c 4a bf 93 e9 22 cb d1 67 42 07 e7 c1 1b 29 b4 a3 85 eb f0 22 8b da b8 28 96 41 df f7 fa f8 5f 42 85 be 33 6d a3 f7 f0 1e 9a cf ef 0f 80 a0 b4 ee 49 0c f2 ca 58 2f 07 ef 68 cd 3e 87 64 6f 98 c7 99 ea 24 ef 96 74 5b 46 c2 66 f0 3d 6a 09 36 2f fd ab 6b 0c 7d 4f 59 55 51 be f1 bd 01 e5 5f 0b d7 ee 27 c9 72 9b 61 74 40 0d 57 b0 64 73 ac 40 e6 15 14 f7 Data Ascii: i 6jH&ms@cYOK@X}Toi,m!ZUiY{F}x6[ulEIJM:hymNGOk^\|J"gB)"(A_B3mIX/h>do$t[Ff=j6/k}OYUQ_'rat@Wds@
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: 6f 7b 84 55 d8 77 9a b2 63 75 0a 17 40 53 8a 5b 26 6f ce 65 94 49 38 89 5a f4 5c 55 ea 9a 32 09 2f a2 11 6f 1f 46 dc 5f 13 55 3f f1 58 18 0e c5 84 59 79 f7 06 55 0c 8b e3 63 c5 be 97 80 00 8b 57 cd 69 ef dd 47 0f ef 9e f4 d9 26 ed 09 29 2f 7e 8f e6 a4 e6 51 cc fe 01 d9 14 e3 47 45 b3 e7 cc 44 9d 85 1f 21 5d 1f ca a4 89 af 6b 9b 6a 36 74 a7 a9 6e 72 32 3d 2e 50 98 96 0e ed 1e 4d 86 34 43 fb 7d 24 b8 c6 59 ec 56 b7 11 5c cd 54 ff e0 1f 70 6b 26 b5 60 d7 eb 36 b7 2f ff 39 7c f0 3e 07 e6 1f 08 38 4c 39 f7 a8 df 0d 8d f4 a8 e8 71 70 22 a2 8e a4 24 a0 cd 4c 92 68 9b 2d 20 c8 76 5e e4 31 16 8b c4 49 fa db 5f 5e 96 34 53 ff 17 bf f1 99 52 0c a8 0d 77 72 31 78 ae a2 a6 fa e6 46 0f 94 40 d2 a0 3d c8 4f 2a 4c 1d 1a 2f bc 71 c8 30 af 34 86 9d d7 3e 8f a4 cf 3f d1 c3 Data Ascii: o{Uwcu@S[&oeI8Z\U2/oF_U?XYyUcWiG&)/~QGED!]kj6tnr2=.PM4C}$YV\Tpk&`6/9\|>8L9qp"$Lh- v^1I_^4SRwr1xF@=O*L/q04>?
2023-12-05 18:13:39 UTC	1379	IN	Data Raw: c2 ab e1 3f 70 23 98 71 8a e5 74 d6 8a 14 59 6c 8e d5 ed 70 c3 dc 5c de f8 45 3a dc 20 2c 9d c1 86 00 9e 08 f5 33 48 38 e1 33 e6 b2 dc f0 4d 92 38 4f a3 79 ac 98 00 85 6c 5d 20 9e e9 52 9a be bf 64 4a 38 cc 6a 6d d2 6b 5c 83 f9 68 11 22 15 50 f4 b3 1b cc d2 57 82 8e fd b1 d4 6a 5e e8 90 63 90 6f 0a 56 ad 9a 74 68 21 71 f0 f9 3a 0f 83 c5 9d 70 fc 08 16 f6 2e 92 ae ba e6 18 47 1d c4 e3 29 bc fc 0d 3a 3c 39 61 f8 07 24 f9 17 e2 be ff 85 fd 63 ce bf f9 ae 03 af c6 84 a2 88 9d c6 54 c1 70 df 45 5a a3 aa ab c4 f4 2c 27 05 24 dc 92 8b 25 70 97 4f 6c 7d db de a2 89 fb 5e f3 7e 61 85 6c 14 9b 1a d9 1e e0 83 0c af c9 c5 b5 93 9f f6 19 c4 c2 f5 1e 6a 12 5e 03 0d 04 ea e8 02 ad 98 c1 3e 82 f1 2c 41 aa 0b 8e 66 d3 16 63 28 0e 5a cd 3d 54 6a 92 48 1e b4 19 06 bd f3 0e Data Ascii: ?p#qtYlp\E: ,3H83M8Oyl] RdJ8jmk\h"PWj^coVth!q:p.G):<9a$cTpEZ,'$%pOl}^~alj^>,Afc(Z=TjH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49981	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	692	OUT	GET /images/2023/12/05/multimedia/05nat-collegepresidents-ktzm/05nat-collegepresidents-ktzm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1203	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 31 38 30 36 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 42 34 35 50 6e 50 6c 76 6b 77 2b 30 70 79 76 6e 46 79 72 2b 76 2b 32 51 4d 32 4c 66 42 6f 64 36 4f 78 5a 44 72 4c 31 7a 58 67 73 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 36 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 61806Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "B45PnPlvkw+0pyvnFyr+v+2QM2LfBod6OxZDrL1zXgs"Expires: Tue, 05 Dec 2023 16:
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 52 49 46 46 66 f1 00 00 57 45 42 50 56 50 38 20 5a f1 00 00 10 70 03 9d 01 2a 00 04 ab 02 3e 91 44 9c 4b 25 a3 a2 aa 25 97 f9 c1 40 12 09 67 6e 63 5d ee e5 33 f0 83 66 74 42 72 0f c8 b8 82 2d d7 d3 df 26 ce e5 cd 5f e1 3b ee 7a 54 fe eb bc 13 cd 3f 9d 1f a6 7f f5 5b ed 1e 83 be 75 de ae bf e7 fa 40 3f ff fb 6e ff 00 ff ff d5 0f e6 5e 54 be 75 f7 5f c3 bf ce be db fe 8f ed 37 be 0f f2 19 87 f7 af f6 3c cf fb ca 9f 4f f2 bb f7 fa 01 a8 2f e6 ff d7 3d 06 bf 4f b6 b3 84 ff a1 e8 11 ef 67 e6 3c f5 3f 53 cd ff de bd 40 bc b6 ff df e1 87 f9 7f fc 9e c0 7f b0 7d 61 3f e2 ff fd e6 b7 f6 ef fa 1f ba 1f 01 df b5 5f fe ff db fb 7c 7f ff f7 7f fb e3 ff ff ff 4f c4 6f ee f7 ff f2 2d 01 f1 50 0d 90 73 09 c8 36 fc 82 d9 e4 34 f0 bd 46 82 d1 fb 8f 2e 8c 09 f1 2b db bf 1c Data Ascii: RIFFfWEBPVP8 Zp*>DK%%@gnc]3ftBr-&_;zT?[u@?n^Tu_7<O/=Og<?S@}a?_\|Oo-Ps64F.+
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: b8 11 5a ce 59 1e 10 17 bd 0a da 3d 9b d5 24 a2 72 ba ed a0 6e 73 01 de 3a 4b ee 21 fd ad 6c e3 6c 6d d5 10 ae 77 3c a0 8b 2e a2 65 e4 e4 a1 af d3 ff 88 b2 55 1a 4b 32 2e 19 a3 af fa 7c cd ed 9d a5 f0 82 22 a2 c4 42 83 ae d1 f5 5c 26 5f 16 9a 03 47 a4 3d e2 7a 56 8e 9d c3 a0 57 e7 05 68 c7 c4 b1 d6 b3 1b 0f 2b 0c 4b a8 cb 2e 4e 26 ca b6 22 fe 47 e3 5d df fe 6e ad 5d 30 1d 06 7a 21 a8 b7 1e ca 30 fd ae c1 3b 78 e3 6d 32 65 06 6a 8d 51 86 3f 23 05 e9 b0 43 0d b8 25 4a e7 2c 47 84 57 5c 78 9a 8c 25 18 f5 54 27 59 e8 c9 59 e4 ff d5 5f 9a 29 b1 38 6e 26 b2 19 4f 05 50 38 4c 67 73 44 80 13 72 f7 0e 51 47 3e ff 22 7a 86 94 c1 6f e0 b4 93 eb 42 e7 21 99 25 41 76 c5 2a 69 a0 e9 dd 4e ed 47 e3 0c 6f 83 e8 42 c4 9c 0a 74 a9 f9 19 86 a7 ca 03 6f 4b b4 b0 01 1e 0c 6f Data Ascii: ZY=$rns:K!llmw<.eUK2.\|"B\&_G=zVWh+K.N&"G]n]0z!0;xm2ejQ?#C%J,GW\x%T'YY_)8n&OP8LgsDrQG>"zoB!%Av*iNGoBtoKo
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: ba f3 04 db e9 bc 65 ac ff 38 44 32 e9 31 c5 dd b9 e2 35 b6 61 fb 8c f7 0b ba 83 6a c6 81 e6 3c 36 3d b5 63 fa 16 e2 bc 87 98 da ef a9 c2 22 95 f4 50 71 32 a3 78 55 e1 1e 62 12 ad 38 6a c6 41 8d e4 0e 50 73 c2 bb f0 48 96 33 a9 22 46 77 91 7e 70 42 82 e2 c4 1a a6 ee 3f 86 e6 9e 5f 5e ca 08 24 f8 f1 b2 ae cb 6b 2d 9b 94 83 3f 5a 08 5f bf fa c8 87 a6 44 a6 7a e0 d5 9d 17 05 18 1a 5f 92 05 9a e6 52 1c 99 b3 2b 12 cb 20 83 79 79 c0 6e 8b b4 da ac 43 29 5b a8 ff aa 9d ad af 27 ae 8a 6d d7 23 44 8d d3 0f 6d 68 48 f2 34 7c bc be 7a b9 b0 ba 99 ab fc 6f 03 f3 c8 13 82 89 c3 20 99 5a 7d 46 36 b0 41 61 c5 44 5a 26 72 9d e9 ae fd 9a 6c 30 d3 e1 6c 0d e7 85 e9 e7 57 08 58 f2 94 2a e9 b1 c6 5d 80 b9 61 c1 46 99 55 03 ba 76 70 8c be 78 db 76 a4 70 8a 43 82 62 8f cf 56 Data Ascii: e8D215aj<6=c"Pq2xUb8jAPsH3"Fw~pB?_^$k-?Z_Dz_R+ yynC)['m#DmhH4\|zo Z}F6AaDZ&rl0lWX*]aFUvpxvpCbV
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 4e 96 98 90 3b 95 5c 09 07 fc cf b2 38 78 96 3d c7 22 5f 02 25 29 d6 39 92 7b 71 0e 2a 3f 9a dc 6f d9 68 9d 42 99 f4 9e 0c d1 4d ad fe 53 ab 27 21 9f 87 a4 6c 01 48 5b 45 61 8c 5a f6 e5 89 1f 4a 61 b4 f8 3b de 0c 57 5f 27 b7 da 21 8e 9b e6 17 ef af b0 19 b1 ca 1d 00 db e4 13 86 72 59 19 4b 81 08 4c 9d 89 dc 83 87 a6 35 f0 c2 d5 d5 ff bb 8b 03 01 39 4a bc 71 21 f5 d7 00 e5 6a 96 60 ef 45 41 1e 13 7f bf ce 67 f4 dd 75 9d c7 37 14 86 86 d3 62 97 f3 e6 6f 1c 40 28 6f f7 2b 47 d7 a9 f2 02 53 32 83 69 d5 7d d5 ef e2 b9 19 6a 99 81 63 43 ed 5f b7 42 c3 6c c7 98 0d 72 a8 88 aa 8e a0 6b 37 48 cb a6 b7 5e f6 bf 2b f8 89 26 47 ee b6 5b 80 66 e8 88 13 db 29 cd 70 e5 95 c5 71 62 d5 34 c1 27 df a0 c4 e3 51 75 01 0a d6 d6 fc c1 fa 31 3e 05 e1 bf 19 6d 39 69 40 77 b3 13 Data Ascii: N;\8x="_%)9{q*?ohBMS'!lH[EaZJa;W_'!rYKL59Jq!j`EAgu7bo@(o+GS2i}jcC_Blrk7H^+&G[f)pqb4'Qu1>m9i@w
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 3a 3e 60 65 eb cb 66 12 ac e8 c0 c6 5e df e5 7f 4e ec bd d8 f4 6d 1e 9f 24 29 df 10 b1 48 3d 83 b7 da 82 bb e8 47 d6 92 bf 66 ea dd 00 36 f6 c6 57 cd 62 eb 6e e4 fe 10 d4 30 7c c9 66 00 be 8f 63 f8 8a 06 c2 d4 b8 59 d9 de c7 13 52 df ef 0e 4d 39 d1 63 3e eb 58 7a df ec 80 2b c4 16 87 b7 75 c2 23 3c 4e 5d a1 de 05 9b 17 6a 46 12 d5 2e e4 c8 0a 34 4b 4a 0c 3f a9 ad f4 74 6a 36 35 69 eb c1 79 62 a2 3f 9e 3b 42 01 7b 74 b6 8b 2c 2e a8 0d 65 db 4c 63 f3 76 46 58 99 a2 8e e2 11 0b cf f0 3c 12 ae d7 f0 87 27 7e 28 9c 5c fc f1 2d d0 24 91 da 15 ea 44 77 7a ef 7d 71 7d d0 fb 93 4e 7c c0 65 0d e3 a6 9c 6f b0 b2 6e 44 7d 2e d0 aa da b2 f5 21 1e 2b 70 91 ce 18 91 28 25 b5 9d 1f d9 e4 a2 68 23 98 dd f6 4f e7 9a 58 d3 80 f2 d4 42 d4 10 5d 8d 91 c0 6a d2 c3 e6 2d 16 b5 Data Ascii: :>`ef^Nm$)H=Gf6Wbn0\|fcYRM9c>Xz+u#<N]jF.4KJ?tj65iyb?;B{t,.eLcvFX<'~(\-$Dwz}q}N\|eonD}.!+p(%h#OXB]j-
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: f9 c0 06 90 10 ef 04 a8 37 5c 26 8e fd aa 2e 1b 91 6d 7b 4b 1c 1d 1a 1b e5 fb b9 f1 ed b1 cc 1e e3 2d a6 48 1d e9 b4 c4 72 7b 19 20 09 9e cd 03 d6 04 14 65 4f 8e b6 6f b5 e4 31 96 96 e3 35 9f fc 12 2c fc 49 0d 6f fd 13 32 f6 fd 7d a7 3c 99 28 eb 0c 87 d9 ac 8b 61 40 29 e8 92 00 2d 04 b2 26 68 34 c1 06 0a 58 2f 7e a8 b4 89 f0 95 43 9e fd 15 16 72 8e 2e 5e d7 c7 b5 c6 83 76 a7 b0 d3 6f 58 41 e1 96 65 e8 dc f9 c0 94 12 84 9f a0 17 bf 32 c3 d3 27 bc 5f 7b 76 76 aa 35 b9 4a da 3c 80 60 45 72 64 2c f6 e8 62 d1 1f cb 2c 10 00 fe fb 5b 4b 24 af 6c 61 07 66 49 db 40 a2 1d 28 aa a5 8f 3d 6f 0d 16 dd f1 d9 4f be 29 e3 29 04 a2 30 5c b4 99 94 70 ed 56 4f 31 30 95 11 89 1e 59 32 b1 b4 c4 24 27 76 f1 fd 03 46 0d 26 ac f4 27 34 eb 9b 34 08 2c 0e 24 0f d3 47 4e c8 00 00 Data Ascii: 7\&.m{K-Hr{ eOo15,Io2}<(a@)-&h4X/~Cr.^voXAe2'_{vv5J<`Erd,b,[K$lafI@(=oO))0\pVO10Y2$'vF&'44,$GN
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: df d5 f8 1a 2e f4 e7 e0 ec 36 30 aa 3c 3f cb d2 0c 1e ce 4d 10 b0 ee a4 a6 7e 6a bc d5 ec 7e 5c 9a c4 59 64 3d ee a0 40 2f 88 90 7f 8a 99 61 20 75 53 c6 bd 5e 20 8e e6 45 9e 2c 2d 5e 01 96 90 0e 29 68 ae 0c 7c 24 2c b8 f7 57 84 48 7c 61 05 9b ec c2 20 be e6 7d be ce 82 25 c6 bd da 70 32 db a8 11 4e 06 e2 b8 39 e8 84 13 c2 40 ce ab 91 9d 1a d0 d5 40 14 4a a4 79 44 5f 79 7c 68 7e 21 bd 17 d8 b7 64 ea 0f 4b a0 3c 51 8f f6 e3 21 7f 3d 35 2a 00 b5 ef 15 18 32 fc a7 86 66 cc a6 38 5c f5 74 89 42 47 82 71 15 77 f1 18 af 82 75 b9 30 f9 79 3a 23 54 1b 52 33 6e bd 1a 37 a9 61 b0 7f 48 30 1d 1b d5 e0 f5 8e 18 34 87 0d ab 64 26 e7 e6 ed f3 2a 18 83 5f ea 34 37 01 92 e6 c5 ab 59 54 c0 53 19 a3 3f 6e 65 7f 9a 52 44 91 b0 ac f9 a8 9b 0e 41 ac e0 63 1a 6e 29 94 5f 7b 68 Data Ascii: .60<?M~j~\Yd=@/a uS^ E,-^)h\|$,WH\|a }%p2N9@@JyD_y\|h~!dK<Q!=52f8\tBGqwu0y:#TR3n7aH04d&_47YTS?neRDAcn)_{h
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 94 47 97 a1 19 f6 be 46 eb de 08 91 3d 74 9b d6 0a 58 04 4a e8 26 71 a0 21 8d 76 1d 41 0c bb ff 6b 75 b8 45 6a 28 70 33 fc fd 61 df e4 a9 66 b1 4b 45 fc f0 ac 03 2e 04 18 01 06 f0 c5 5b a5 7e 6e 98 54 4e b5 17 85 c5 f9 39 26 67 0e db f8 7c ef ed a0 df 24 96 b1 23 d1 67 e5 1d a8 f9 ef d8 ac b9 8a 04 8f 9b 69 3f 83 d2 07 5b dc 07 1e 54 30 bd 41 63 0f 78 8f 28 00 9c 75 f9 ca 97 ef c0 29 f2 5c 2c 97 c5 75 1a e6 18 80 92 ed d4 a8 04 e2 c1 c0 ba 39 76 44 54 15 c3 11 b7 b2 55 4f 66 40 36 aa 40 01 53 f7 49 64 fe c5 57 cb 91 e9 0b 83 4d 3a 2a 89 04 cd 34 cd 9e 80 96 72 0d a2 ab a1 ea a6 45 c3 1e b2 ce 3b 20 f7 3e aa dd 3e b5 a2 fc 19 00 f7 a6 55 97 75 47 b8 19 ec 9f 09 49 ff e7 d5 59 d6 1e fe cb f2 bb 08 8e aa 29 bf a9 30 9b 28 9e e0 0b 1c 7b b8 fd f4 d6 a6 56 7c Data Ascii: GF=tXJ&q!vAkuEj(p3afKE.[~nTN9&g\|$#gi?[T0Acx(u)\,u9vDTUOf@6@SIdWM:*4rE; >>UuGIY)0({V\|
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 00 aa 7a 64 79 76 b3 d3 12 2d c4 fc 7b ce 85 c0 4f 29 ef 53 85 3c 4e 0a c2 0a 16 6c 6b 10 4d 36 d6 db a9 f4 b0 e9 40 79 90 00 f0 02 b9 db f8 e6 2f bd 70 83 02 11 8c c0 48 07 78 e9 4b ec 71 1a 4a f7 2d 2b 58 51 42 2c 57 6d d4 e4 12 6f af b8 25 c9 bf 2a 24 83 fc 12 6d c0 3f 67 4b 27 50 d3 32 f3 eb b9 58 88 9c 15 d8 c7 38 4b b6 af 9e 05 a1 b7 61 2d 4a 0e 18 87 d2 4d 4d 9d ab f4 c3 f2 dc 25 1d 1e d1 66 ce 37 13 fe 4e 8c a3 b6 17 31 fa fd ca eb 66 2d 9d 2a 88 60 a1 30 ee 21 94 02 92 fe 0f a6 61 48 19 98 0d 62 7e ea 2e 89 85 3c 45 07 f5 93 3e 10 9c fd 54 16 c7 b7 ba 53 a4 81 7a e0 c3 4e 3c 07 37 7e 8d c2 95 67 90 cc bf 75 02 24 50 d5 7d 16 0b a2 f3 29 7a e0 63 0a 59 dd 7f 86 e0 0e c6 18 5e 44 32 e6 39 ad a7 e5 b5 c9 06 05 5f 80 08 4e ef d2 2a b5 5b b2 54 c6 9e Data Ascii: zdyv-{O)S<NlkM6@y/pHxKqJ-+XQB,Wmo%$m?gK'P2X8Ka-JMM%f7N1f-`0!aHb~.<E>TSzN<7~gu$P})zcY^D29_N*[T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49985	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	461	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-who-health-ctlq/05israel-hamas-who-health-ctlq-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1202	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 32 33 36 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 36 4c 67 50 41 50 4a 63 45 49 61 52 46 35 33 4a 51 36 6c 49 66 51 36 75 42 2b 71 73 50 43 42 49 4a 35 71 69 4a 33 72 34 4d 2b 59 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 92368Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "6LgPAPJcEIaRF53JQ6lIfQ6uB+qsPCBIJ5qiJ3r4M+Y"Expires: Tue, 05 Dec 2023 17:
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: c0 7d 83 75 bb 89 d0 49 54 24 58 47 25 86 e2 39 68 93 2b 41 c1 b8 6b f1 14 2a 54 6d 67 31 b9 c8 86 89 d0 6b 3b 2a 20 26 56 df e1 da d4 e8 70 fa 8f 76 69 f1 1f 60 0e c3 59 09 26 dc 4a 79 bc 17 08 d8 f1 1c e7 1e ae 95 25 bc 37 07 4e 0f 82 dd ae 6e 9d 76 3b 0e f0 4b a9 c3 0d e4 fd d6 6b 8a 71 6c 37 e0 aa d3 a3 51 c2 ad 61 19 44 d9 a4 ea 4e 90 55 93 ce 44 db 9a c9 d7 f0 8d 7a d9 07 97 c4 7e 5e d3 65 18 b4 49 47 0b ac 6c ef 75 ec 93 c6 38 e8 01 88 1a a2 71 68 1a 20 34 e2 6c 95 a4 4d c1 53 cc f1 55 67 c3 a9 b1 d9 cb c0 d4 7e ea cc 32 98 80 39 73 93 0a 2e 1a 9b 59 85 15 1d 00 39 c7 ad b4 16 46 6b d2 cd 0c 39 8f 5b 05 8b c6 ed 8d 4b 90 e6 56 4d a3 59 eb 29 60 06 90 2d 7e 71 7e 6a 33 9c f2 f0 e7 3f 2b 49 f3 65 00 7a 7f 94 e8 aa 2a 16 b2 9b 4c 4e ae b9 8f d1 73 ea Data Ascii: }uIT$XG%9h+AkTmg1k; &Vpvi`Y&Jy%7Nnv;Kkql7QaDNUDz~^eIGlu8qh 4lMSUg~29s.Y9Fk9[KVMY)`-~q~j3?+Iez*LNs
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 83 70 41 e5 d5 3c c8 3d 7f 9c d4 50 90 24 ca 4e 63 6f d5 39 94 c9 4b 1a 5b 64 0c 92 46 9f ba c3 7c 47 8e 6b aa 9a 4d 6c 8c 30 25 c2 e0 97 b8 4d bb 0d d6 f1 ec f2 92 46 9e 8b cf f8 d5 27 d4 aa fa d4 6d 50 34 b4 c7 e7 6f 2b ee 36 53 a9 d5 9e 1a e2 c9 d6 d6 01 f8 9c 5d 5a cc 76 1f 08 08 7b 41 f2 89 33 3f 98 9d 4f 5d d6 b7 09 c3 c3 e2 a5 4a 34 69 97 01 30 d6 cc ef a0 55 07 88 3a 98 00 38 75 24 00 41 16 83 d5 36 78 d9 90 03 a6 ff 00 96 eb 8d 97 e9 db f2 9f 6b e7 70 4c 3b 31 0c c4 78 2d 7e 47 03 e5 86 87 1e 51 1b 2d 8e 0f 13 82 a9 45 ef f1 9a cc 91 9c 3c 86 96 f7 93 00 75 58 cc 17 18 77 86 05 66 b8 02 7c b2 20 1e dd 56 37 e2 7e 34 31 78 97 e1 b0 f0 28 30 43 cd bf a8 ed e4 f2 1c b7 5a e2 f7 f9 63 1d 4e 33 63 d6 f1 94 30 0c 9a 75 31 2c a6 f9 71 a6 1d 00 43 87 98 Data Ascii: pA<=P$Nco9K[dF\|GkMl0%MF'mP4o+6S]Zv{A3?O]J4i0U:8u$A6xkpL;1x-~GQ-E<uXwf\| V7~41x(0CZcN3c0u1,qC
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: a0 70 15 1a 1d d2 fd 95 36 23 0c e6 d5 19 74 71 f4 49 47 50 fe b3 0d 3d 4c 59 2e 27 87 56 a5 4c 38 09 80 0b e2 f1 9b 4d 3e ab 4d 83 c0 52 c2 52 bc 17 91 e6 77 4d c0 e8 a3 d5 73 a1 ed 61 fc d1 ec 21 54 64 1b f3 0e e9 e5 74 70 4c 71 1e 5b 9f ba b4 c3 70 ac 3d 32 1f 55 84 89 12 3a 73 1b cf 44 d5 93 50 38 7d 1a a2 98 2d 77 9c 93 00 09 30 05 e4 ad 25 1a 67 c3 01 e0 44 09 b7 b7 b2 8f 46 83 89 22 8d 17 39 a1 c4 89 86 d8 8d ca 9c 33 30 3b c4 a7 50 10 75 89 13 e9 30 b7 cc e3 ed 8b 7a be 91 b2 45 40 d7 8d c1 9e 91 65 22 af 81 4c 55 f2 34 4b 59 67 1b 91 0e 93 30 9d 73 9b 55 a7 23 01 b8 03 60 07 32 54 17 b1 b5 dc 43 9f fd 30 61 cf bf 98 0d 87 45 cf e4 ef 99 e2 79 6f 99 7d d5 a5 0c 45 1a d0 c0 f1 98 30 48 06 48 31 1e aa 58 a6 23 2b 80 22 4c ce 9e db 2a fc 0f 0e a5 87 Data Ascii: p6#tqIGP=LY.'VL8M>MRRwMsa!TdtpLq[p=2U:sDP8}-w0%gDF"930;Pu0zE@e"LU4KYg0sU#`2TC0aEyo}E0HH1X#+"L*
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 1e 5b 5c d2 d3 c4 69 73 67 9b 6c 61 5d b3 d1 9a d3 e1 f1 d4 f1 0c 0f 63 c3 a4 f6 33 ae 9a ac ef c4 95 dc e6 50 0d 36 15 3c de d6 09 ba b8 2a d8 78 a9 48 90 5a 75 d0 ca a6 c6 78 b5 9e e7 d4 79 2f 83 ae 93 e9 a2 b7 ad e7 29 26 5d 67 31 95 33 d6 23 90 8f dd 46 85 d5 83 99 51 cd 76 a0 df 71 28 73 24 99 30 dd a5 27 ee 96 f6 f4 fb a6 9c 6e d1 d4 a2 74 b5 c0 1f e0 40 65 de 63 ea 91 a7 5e e9 26 fe 89 01 fb a2 1d 0b 90 d9 29 30 d2 52 04 02 e8 ac 80 1b 22 48 39 28 dd 0a eb aa 14 84 b9 8d 92 1d 02 4d 0a 80 f9 a3 0e 4d cc 2e bf 35 43 b7 1a 14 53 22 0d fe a9 90 52 ca 06 aa e1 5a e9 73 6c 7e 9f e1 0f 86 e1 6c a7 ee 9f 0e 47 d9 04 07 35 d2 63 96 9a 26 4f 88 ad 49 6e f7 fa a6 0d 3a 66 62 c8 2b c3 0a 20 d2 9e 78 0c d7 44 df 89 c9 20 58 5c db b8 20 25 c5 58 60 30 ce ac f7 Data Ascii: [\isgla]c3P6<*xHZuxy/)&]g13#FQvq(s$0'nt@ec^&)0R"H9(MM.5CS"RZsl~lG5c&OIn:fb+ xD X\ %X`0
2023-12-05 18:13:40 UTC	10448	IN	Data Raw: d3 db fe 53 b6 97 5b 75 a9 1c c7 21 8c cd a3 5a 3b 69 fa 21 65 63 52 93 6a 34 59 e0 11 bd 97 11 99 8f 69 3a 93 d7 54 c8 70 c3 51 6b 35 6b 42 ba 49 a7 dd 21 8f 2d f9 a3 d6 55 1e 3d e0 52 33 76 b5 a0 96 8d 1c 79 93 d3 92 9d 5b 12 45 32 4d 84 7a fa fe cb 3f 56 be 7c c7 91 d2 2d 0b 36 b5 cc 41 ac e6 d4 a2 1a 69 80 e3 06 d0 dd f6 51 5f 02 9b e4 cb 4b 47 6b 15 2e b5 4a 74 80 a9 51 a3 29 b7 78 d9 50 62 31 06 ab 89 03 2b 66 cd 1b 05 64 d6 ef 72 4c 84 75 57 18 be 83 51 6f f8 4c 82 86 4a 6d d5 35 01 6a 78 72 b6 db b4 e3 aa 65 ee 9b 32 fb 8d 77 09 ab a7 18 1d 20 b7 68 4b 49 2d f4 69 3a d0 ee 5b 29 2f a0 2b 0c cd 10 fd db b1 ea 3a f4 4b 45 ae ca 5a e6 fc a7 b1 59 d6 ff 00 0f 1b 48 c7 12 d4 bb 15 cd 39 73 36 37 49 cf ba db 99 ba 61 a6 a0 6b b4 2e 1d e2 55 e1 a3 73 e6 Data Ascii: S[u!Z;i!ecRj4Yi:TpQk5kBI!-U=R3vy[E2Mz?V\|-6AiQ_KGk.JtQ)xPb1+fdrLuWQoLJm5jxre2w hKI-i:[)/+:KEZYH9s67Iak.Us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49984	104.26.7.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:39 UTC	357	OUT	GET /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	610	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:13:40 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closevary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3
2023-12-05 18:13:40 UTC	117	IN	Data Raw: 36 66 0d 0a 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 31 31 32 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 74 79 70 65 22 3a 22 6e 6f 74 5f 66 6f 75 6e 64 22 2c 22 75 73 65 72 5f 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 5d 7d 0d 0a Data Ascii: 6f{"errors":[{"code":112,"message":"Endpoint not found","type":"not_found","user_message":"Endpoint not found"}]}
2023-12-05 18:13:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49977	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	459	OUT	GET /images/2023/12/04/multimedia/04israel-hamas-precision-cmpb/04israel-hamas-precision-cmpb-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1203	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 35 31 36 35 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 6d 2f 49 53 34 61 55 2f 2b 73 4b 6c 4c 67 45 46 4e 39 43 42 5a 72 46 5a 53 41 65 77 78 50 30 53 6c 31 78 62 59 2b 41 38 34 72 34 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 32 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 85165Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "m/IS4aU/+sKlLgEFN9CBZrFZSAewxP0Sl1xbY+A84r4"Expires: Tue, 05 Dec 2023 12:
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ef 19 cf a1 37 af 62 91 ed fa 46 d1 e8 b1 d8 b8 9b 1b 9e e3 e4 68 f4 b3 cb 45 e0 f1 38 99 31 12 99 1e 7d 07 20 3a 04 78 bc 7c d8 bc be 21 d1 bb 01 a0 be a7 ba a2 0a c4 55 6f 62 c3 28 09 28 81 45 6d 00 ad 10 58 0a 40 df d5 71 77 f4 84 63 46 86 f3 3b a7 e0 b8 0a 30 d3 7e 6a 52 e8 c8 05 28 ee 8d ae 75 10 89 82 36 42 e3 4b 9c e0 83 52 8c 84 b6 ad 58 6b da c0 72 b6 cd 2a c8 c0 0a 14 12 0d 92 7d 57 6b 48 a9 bd 57 58 d5 42 00 9a c6 35 f4 2e 8f cc 25 d2 63 5a e7 9c bc d0 a1 86 bf 36 57 1e 5a 73 d7 92 55 ea 8b c3 90 1f 43 ea 88 46 5e fd 34 d7 f5 40 7b ef c3 f0 86 60 98 e2 35 22 fe 6b 7a f7 54 f8 7c 7e 1e 16 36 8e 81 5c 5c e5 b3 51 d1 17 65 47 54 74 85 42 9e 18 f3 5a 18 56 54 20 91 bd 95 9e 45 e9 dd 6a 33 48 88 e6 dd 3d b9 2d 22 32 63 36 f7 76 4c 3c d0 61 c1 11 92 Data Ascii: 7bFhE81} :x\|!Uob((EmX@qwcF;0~jR(u6BKRXkr*}WkHWXB5.%cZ6WZsUCF^4@{`5"kzT\|~6\\QeGTtBZVT Ej3H=-"2c6vL<a
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: cd 20 8b 13 0d b5 83 35 87 10 01 3a 56 d6 54 87 14 38 f5 ba 2f 27 2c f9 12 4e aa ec f5 b0 c7 80 c2 02 dc 1c 2d 92 40 35 93 e1 63 6b a9 e6 aa 4b 8f c1 99 07 89 37 e6 a6 bd 18 cb 2c 07 a0 00 12 56 8b 38 1c 12 57 e6 a6 92 50 36 65 86 33 ff 00 ab 69 59 97 11 c3 b8 54 59 09 86 16 7f 48 00 1f 5a 1a 94 a4 f6 db 25 d7 47 99 e2 0d e2 58 88 1d 2e 23 06 f6 60 e3 a7 b9 84 88 f3 01 b5 37 57 1a 58 2f e2 92 3a a3 c3 c0 d6 37 90 ab d3 b0 0b d3 e3 78 ef 8d 11 8e 0c 0c 8e 8e 46 91 9e 4f 20 2d d8 90 3e d6 bc e6 1b 0c f3 62 28 88 35 ea 7d c9 46 a2 95 ca 3a d5 b3 7c 6a 72 75 19 55 ed d1 98 fc 46 29 ce 21 f2 3c 10 76 b2 da 20 f2 02 aa 95 ee 1f 81 c4 e3 67 2f fe 56 3c 3a 49 64 b2 d0 6e e8 93 b9 3d 15 ac 5c 7c 3e 39 f0 ed 99 ef ce d2 3c 72 c2 0e 9d c9 e6 17 a6 60 13 b4 61 f0 ac Data Ascii: 5:VT8/',N-@5ckK7,V8WP6e3iYTYHZ%GX.#`7WX/:7xFO ->b(5}F:\|jruUF)!<v g/V<:Idn=\\|>9<r`a
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 3f 26 0e 27 19 c2 27 c2 4f 8b bc 5c 6e c6 4b e1 58 64 6f 2d 6c 40 12 00 05 ba 1b 00 f5 a5 a0 ec 1c 31 e2 61 97 0d 88 96 58 f0 0d 64 2f 87 c3 73 09 73 01 27 cc 49 6e a6 c9 55 7f ee d8 79 a1 85 b3 61 e1 76 21 a2 d9 13 e3 60 20 0d 4c 99 80 69 2e 77 41 a5 2a 59 4c 30 62 83 71 44 b3 18 49 9d ce 90 93 1e 96 d6 d5 f9 89 e6 56 7c 9d f9 39 26 9e 0b 5d 24 d1 6b 03 27 e4 70 f0 49 2e 3a 1c ef 90 f8 97 20 91 85 cc 70 36 03 01 04 ed 65 68 4b 86 13 4f 8c 8d f8 b7 12 e6 bd c5 8d 61 39 5a d3 9b 42 48 06 b9 2f 3f 80 c3 70 a9 a2 18 52 e9 9c 03 83 c9 73 da c1 9b 2d 3a a8 6c 56 eb 38 ae 0d b8 d6 b7 24 41 cd 8c 37 39 2e 76 8d 6e 50 35 20 12 46 e9 1e 58 c5 25 27 d7 41 c1 b7 6b fd 99 b8 d7 f0 dc 1c 58 47 91 3c de 62 db b6 b0 37 29 bd 45 1b bb 55 30 98 9c 0e 15 dc 4a 08 70 64 bd Data Ascii: ?&''O\nKXdo-l@1aXd/ss'InUyav!` Li.wA*YL0bqDIV\|9&]$k'pI.: p6ehKOa9ZBH/?pRs-:lV8$A79.vnP5 FX%'AkXG<b7)EU0Jpd
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: db da 6f b3 46 cb 3a 59 dd 23 83 5a 7c ba 2b 98 7c 31 92 19 9f 98 79 48 00 73 ee 55 8f 95 bf 1f 4f fc 19 92 49 2b f6 1e 14 b1 c2 58 dc 3e 36 10 3f d4 35 0b 31 ee ab bd 3e ea c5 4a c2 0b 6e c1 15 ea 95 24 2e 71 74 8e d8 9f 4d 4e e9 77 14 bb 46 97 f6 6f d9 5d f2 17 31 ad 03 40 4f cd 49 6b 44 2c 39 bc d6 6c 73 ec 54 48 f0 01 0d 42 d0 f3 90 d5 e6 d0 7b 68 a2 7b fc 17 d1 6a 1f 26 1d d2 0d f3 8f 95 27 36 66 b8 82 e1 fd 95 a8 70 38 87 61 a7 6f 84 7f 94 b7 6b d0 eb 4b 3e 40 e8 ad ae 69 07 be 8b 52 8b 8a 8b 69 e5 19 8c 93 6d 5a 79 1f 88 92 22 f0 5a da d0 29 6b 59 2c 8c 68 39 09 3e de fd 15 23 21 7f f2 d9 aa 5a 38 0c 14 f3 c9 1b 4c 6e ca 5c 3c d4 54 8d b7 fd 6c ae 92 dd 17 d9 c2 b1 4f 7b e3 0c 1a 0b 2e e5 5e aa c4 78 26 b3 0e e9 25 0e 20 1a 0e 69 a2 0f be e1 7a e1 Data Ascii: oF:Y#Z\|+\|1yHsUOI+X>6?51>Jn$.qtMNwFo]1@OIkD,9lsTHB{h{j&'6fp8aokK>@iRimZy"Z)kY,h9>#!Z8Ln\<TlO{.^x&% iz
2023-12-05 18:13:40 UTC	3245	IN	Data Raw: 57 10 c0 61 71 91 39 b2 34 13 5b ee bb ce 2a 68 f2 70 73 4b 89 d6 d7 a3 f3 ad 2e b5 ea 78 e7 e1 f9 70 32 39 d1 b4 96 59 ef a7 65 e5 4f 35 e5 71 69 d3 3e 94 79 63 24 9a 64 15 21 0d ee 89 a8 91 97 3c 86 17 21 b5 36 b4 91 87 3b 2e e1 31 b3 61 9e 1d 1b b9 ea 17 b3 c1 71 b8 e7 68 6b 8d 3a b6 5f 3f 46 1c 45 10 56 93 a3 94 aa 5b 47 d1 df 8b 19 ae d0 3b 17 dd 78 78 f8 84 ec a0 5d 61 58 1c 4e c6 ba 2b 67 3f 13 d1 4d 8a 1a ea b3 26 c6 79 48 b5 96 fc 6d de aa 93 e7 26 d1 b1 45 f7 62 00 b5 52 4c 43 9c 4a a8 5e 4a 8b 50 a3 0b c9 42 4e e8 6d 72 80 e5 0a 6c 21 34 85 22 f7 5d 65 09 28 2d 64 a3 73 10 a3 3a 55 95 16 a0 19 9d 0e 6d d0 5a eb 40 15 ae 05 2e d7 02 80 70 2a 6d 2c 15 36 80 30 51 25 02 88 14 03 05 a2 40 0a 9b 54 05 7d d0 92 35 50 4a 14 04 da 0b 5d 68 54 01 5a 84 Data Ascii: Waq94[hpsK.xp29YeO5qi>yc$d!<!6;.1aqhk:_?FEV[G;xx]aXN+g?M&yHm&EbRLCJ^JPBNmrl!4"]e(-ds:UmZ@.pm,60Q%@T}5PJ]hTZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49982	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	465	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-eu-terror-01-qwpm/05israel-hamas-eu-terror-01-qwpm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1205	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 35 31 36 37 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 54 68 44 35 54 50 41 46 56 2f 56 4a 36 4f 41 66 7a 48 72 6a 33 31 5a 6d 70 76 47 56 6e 4d 67 79 6f 45 37 30 38 52 4c 39 6a 61 73 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 105167Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "ThD5TPAFV/VJ6OAfzHrj31ZmpvGVnMgyoE708RL9jas"Expires: Tue, 05 Dec 2023 17
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 79 fc 7c 97 57 95 dd 5e b1 73 a2 43 40 c0 03 61 13 03 9a 13 51 88 58 c0 da 50 b6 f0 9a 0c 2c ac d0 7a 8f 97 55 a5 b6 05 c4 e3 f4 d9 66 6d 49 35 58 0f 55 aa b6 3a 81 68 69 3e 82 70 39 ad 7a 31 7a 85 f2 b8 c5 f8 0c 82 b4 82 15 e5 a8 79 a4 1b 1b b4 41 3c a0 e7 0a 8e b9 87 80 af ad 85 4e e4 34 40 06 32 66 31 d0 73 fd 17 73 28 db 1c ae 2f 89 a6 2f 8d 34 fe d2 a8 3f c2 cf 2c 42 af 30 1a 7d 3e aa db 8c 39 c6 fe a3 48 91 0c 82 7d 20 c1 e8 7a 2a 7a 8e c0 5e 6b 35 9c cf f9 8c bd 55 c2 6c da 25 ce 73 09 10 47 3d c8 c1 44 bb 4c 9d 20 c4 0f 3c f3 4a dc 1a 74 5b a6 a0 04 e4 8c cc 8c 82 79 7a 2e b4 9c 9d e4 fd 52 df 6a 11 8b ca 49 66 06 b1 e7 2a f6 ec b8 58 d6 23 95 27 7c fa 4a a4 b5 11 55 81 5c de 03 52 ca b3 5b a8 93 4c c6 fb 9d 82 ec a2 85 c0 bf 92 55 77 e2 f5 98 77 Data Ascii: y\|W^sC@aQXP,zUfmI5XU:hi>p9z1zyA<N4@2f1ss(//4?,B0}>9H} zz^k5Ul%sG=DL <Jt[yz.RjIfX#'\|JU\R[LUww
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 18 1e 47 30 a6 3d 97 ad bb 6b 34 7a e4 fd 02 b9 c2 83 6e 2f d6 5b ed a4 13 67 f4 85 33 8b 34 31 bd e5 9d c4 c7 21 23 ec a3 1c 5e 84 3c 55 15 db 2e f0 f8 72 07 99 56 d4 ad 7b aa 4c 6b df a9 cd 68 04 8d a4 62 53 16 85 71 85 0f 27 31 27 da 19 2e 8a 03 2a bf 6b 5a 9a 83 f1 1e 19 a7 9b 73 aa 7e ca 53 c5 2c 25 ba 6b 6e 44 e0 82 07 52 11 8f a6 31 e1 07 3e aa aa f2 bd b5 29 6e 86 3d f1 d0 18 f5 c6 fe 4a c3 4d d9 ff 00 49 74 d6 b3 6d e1 ef 0c 7f 10 b1 d2 5c ca ec 3d 06 42 ef da ad 0b 7f bf a5 b6 d3 cd 64 dc c7 dc d5 31 4e 49 3b 34 47 d9 5c 5b 70 80 21 d5 80 27 f7 79 7c 4f 35 5f b3 b8 e4 c2 39 b5 68 a2 d8 7c 84 b3 a7 5a da a5 30 ee f5 83 26 44 81 11 cf d0 a4 0d 17 3e ab 1a e6 3b 49 1e 20 41 04 11 20 85 05 6e 1b 64 28 54 77 b3 b3 50 61 83 91 90 30 ab b8 4d 85 bd c3 Data Ascii: G0=k4zn/[g341!#^<U.rV{LkhbSq'1'.*kZs~S,%knDR1>)n=JMItm\=Bd1NI;4G\[p!'y\|O5_9h\|Z0&D>;I A nd(TwPa0M
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: cc 23 fb b2 20 4f 31 3f 35 6d 45 ad 14 5a 1e 65 a4 9c 0d f7 81 b7 25 d2 c5 47 32 83 b8 37 12 e2 90 99 98 7f 05 a7 52 90 67 79 e1 7b a3 98 c7 51 1f 64 45 a7 67 1f 48 00 db 8a 99 71 c3 9a 1d 8e 59 39 33 d1 68 60 b0 99 cf 37 1c c0 03 a7 9a b0 b7 80 03 b9 10 34 f3 91 19 27 a2 dc 5b c3 16 bb 4e 76 56 d8 dc a2 1c 09 a2 3d cd 53 1f dd c6 27 c8 fd 14 83 83 d0 68 3f d9 e9 98 f7 7c 24 7c b3 85 a4 94 ca 9f 6b cd d5 a6 2e 05 33 39 fb 22 c8 38 8f 63 c4 ce 09 19 27 38 52 0e 15 68 64 fb 3b c6 3a 9f 91 ca bc 82 a6 00 a0 ea b2 57 c4 7e a6 48 c4 a7 a0 fa 4c e1 e1 76 23 4c d2 78 8d bd ec 7a 46 ca 87 b4 fc 3e d6 8f 07 ad 52 9b 08 77 79 4f 72 4e 4b a3 9f 35 e8 3a 56 53 b6 80 8e 03 53 fe 7d 1f fc 95 f0 ea 32 36 5c 6a 59 b7 60 39 cb 8c 40 10 68 6d 31 3d 95 a5 4e bf 12 b9 ef 01 Data Ascii: # O1?5mEZe%G27Rgy{QdEgHqY93h`74'[NvV=S'h?\|$\|k.39"8c'8Rhd;:W~HLv#LxzF>RwyOrNK5:VSS}26\jY`9@hm1=N
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: d9 c3 74 e4 0e a0 48 fd 9a e0 cf f6 ca 9f 26 9f d1 52 f1 9b 2b 91 4a dd de d3 a9 9e d7 47 53 0b 00 27 c5 b8 23 22 3a 2b e1 75 b9 34 2b 7f db 3f aa ab e2 97 b4 de cb 4a 5d dd 40 e7 dd 53 8d 4d 20 78 4c 9c ac 1a 44 bc e9 5b d1 97 76 70 a7 95 4e 6e ad eb be ed ef a7 5f 48 80 34 e9 07 20 ef 25 65 78 e5 09 ed 0d 8d 23 50 be 2c 9e e9 80 32 5c 7a 2d 7d 5b 9a 54 ea d4 d7 38 23 30 4e 0f a2 ca 71 2a 94 ea f6 a6 d8 d3 32 07 0f e8 46 ee 3d 56 ff 00 63 5f fa 8a 37 51 c6 7f 43 15 ed 03 5a 46 1e 9f b8 82 76 4a 95 53 73 c4 1d 4d da 48 7b 7a 8c 49 9c 73 5e 94 1f 76 19 e1 34 cc 0c 48 31 3f 02 bc df b2 b7 0d a1 5e f0 54 7c 07 d6 e8 4e 04 9e 4b d1 29 5d d0 75 09 0f 30 27 91 1b 1f 45 93 58 5b ed 39 8f 23 c4 63 94 7f 0f 1d 2d ec 20 55 2a f1 5a 64 6a a3 42 a0 d5 f9 49 69 fa c8 Data Ascii: tH&R+JGS'#":+u4+?J]@SM xLD[vpNn_H4 %ex#P,2\z-}[T8#0Nq2F=Vc_7QCZFvJSsMH{zIs^v4H1?^T\|NK)]u0'EX[9#c- UZdjBIi
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 19 e9 f4 4c 52 6b 9b a1 c0 80 4b b0 49 3a 76 db 62 b0 97 b7 61 9c 5d 8f 75 b5 47 b5 82 9c b5 8d 2e 20 06 c9 c0 1b 05 67 c0 af 5c c9 e1 f5 bc 4e a5 4d dd d3 e6 75 b1 a3 2d 31 8d 4d fb 2a da 6e 7d 4e 25 79 59 95 84 b0 18 2f 04 cc 60 62 77 5c b2 b9 57 da 2a 8c 0f 12 f4 ef 3a a8 f8 db 42 5d 1b dd 23 99 fa 4b 5a 7d a2 e1 75 ef a8 50 75 cb c5 62 34 86 55 63 98 75 1e 50 44 65 4e ca 55 6e 78 9d 71 41 e5 af 63 0c 4c 86 ce d9 81 95 89 e2 5c 72 a7 0a 63 03 bb 8a f7 ee 2f 3d e0 68 01 8d 27 12 27 7e 81 63 07 1c e3 22 e3 da 1b c4 2b 8a b3 b8 71 03 ac 40 c4 79 2d 25 9b c2 d5 63 50 43 33 30 04 ff 00 c4 9c 4e a1 70 1e 60 28 ff 00 cd e7 bb fe ce e2 4f 20 bd d6 ce 23 6c b8 47 a6 14 c2 cb 8a e2 45 27 16 9e 55 5c df b0 12 bc 4a 97 69 bb 53 52 a8 a9 4f 89 dc 39 cd 1e 5a 7a 81 Data Ascii: LRkKI:vba]uG. g\NMu-1Mn}N%yY/`bw\W:B]#KZ}uPub4UcuPDeNUnxqAcL\rc/=h''~c"+q@y-%cPC30Np`(O #lGE'U\JiSRO9Zz
2023-12-05 18:13:40 UTC	6863	IN	Data Raw: a2 b0 37 bb 5c 9e 2d a7 57 97 14 e8 34 81 1a fa 6f f1 59 e2 09 71 3e 6a 47 17 3e a1 fc c6 77 52 b2 98 6e f9 2b 42 90 37 88 6b 63 ca 44 da 13 92 bb 34 86 54 9a fe c9 a4 99 56 e3 90 14 48 4d 21 98 51 be 58 22 73 0a 67 d4 6b 27 99 fe b7 42 39 c5 d2 93 93 2d 8e 10 65 95 37 91 10 52 00 ae b0 ba 09 0a b7 2e 67 20 19 25 72 e7 18 20 15 d3 88 01 42 98 b8 c7 38 b6 63 3a 6b 80 99 2e 53 d1 6f 7a e0 d9 3a 77 28 61 0a d6 da 99 65 39 e6 53 42 09 0b 64 c8 fd 8a 96 7c 6e 5c 9b 1a 5f bc 51 ba 5c 79 27 ee 89 8c 26 ae 9c b6 c1 65 ca af 69 5a 6c 9b 98 7a 6f d9 e4 fe 75 6c da 41 3f 76 61 6a c5 a1 ea f1 65 47 69 4b 56 cb bb 61 71 74 c4 79 21 a0 09 57 37 80 f7 23 d4 2a 7e aa cd 81 11 a8 2c 43 8a 33 b6 d4 03 90 5d f7 ae e8 14 21 a9 75 47 08 95 92 3a b3 a0 f2 51 f7 87 9a 68 4d 0a Data Ascii: 7\-W4oYq>jG>wRn+B7kcD4TVHM!QX"sgk'B9-e7R.g %r B8c:k.Soz:w(ae9SBd\|n\_Q\y'&eiZlzoulA?vajeGiKVaqty!W7#*~,C3]!uG:QhM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49963	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	2062	OUT	GET /ads/parakeet.min.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156 If-None-Match: "adba4a1fb4bee00e1f70bd3e15c9f567" If-Modified-Since: Mon, 19 Jul 2021 19:29:47 GMT
2023-12-05 18:13:40 UTC	1373	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 34 20 4e 6f 74 20 4d 6f 64 69 66 69 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 54 61 67 3a 20 22 61 64 62 61 34 61 31 66 62 34 62 65 65 30 30 65 31 66 37 30 62 64 33 65 31 35 63 39 66 35 36 37 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 33 30 20 4e 6f 76 20 32 30 32 33 20 31 35 3a 34 37 3a 33 32 20 47 4d 54 0d 0a 41 67 Data Ascii: HTTP/1.1 304 Not ModifiedConnection: closeDate: Tue, 05 Dec 2023 18:13:40 GMTCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicETag: "adba4a1fb4bee00e1f70bd3e15c9f567"Expires: Thu, 30 Nov 2023 15:47:32 GMTAg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49975	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	708	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-settler-visa-ban-vzbf/05israel-hamas-settler-visa-ban-vzbf-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1202	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 35 37 30 34 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 76 6a 4a 53 6c 77 4c 4d 4a 6a 4f 56 62 39 73 51 35 69 44 6c 61 2f 76 74 4b 67 7a 4b 31 56 33 57 50 6b 7a 4e 35 41 57 52 69 64 45 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 65704Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "vjJSlwLMJjOVb9sQ5iDla/vtKgzK1V3WPkzN5AWRidE"Expires: Tue, 05 Dec 2023 17:
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 52 49 46 46 a0 00 01 00 57 45 42 50 56 50 38 20 94 00 01 00 10 fd 04 9d 01 2a 00 04 cb 02 3e 91 42 9b 4b 25 a3 a6 2f 24 b3 2a e9 e0 12 09 63 6b da 7a 5f 5e e5 bb 12 f7 60 72 4b d9 72 7a ec a1 f1 aa 82 d6 f7 91 93 bb 19 ca 3f 3a af 05 ae c8 f4 ef e1 95 40 6e 35 ba 06 79 ab 36 55 d5 66 d0 da 6b a4 f5 7c ce b9 37 d3 cf b9 69 71 96 37 53 7f 9b d0 e7 d7 ff a1 f3 a7 e9 eb fb 1f a8 77 f4 cf f3 7d 47 bc d3 7e ed fa c0 7f e9 fd bc f7 cf fd c7 d4 43 fa bf fb bf ff fe d6 de af 7f e3 3f f7 fb 0e 7e e1 7f ff f6 a4 ff ed ed 13 fe 0f ff 4f ee cf b6 0f a8 07 ff ff 6e ce 73 7f 33 ff c7 e6 a3 e8 5f e6 7f f6 ff 7f e4 8f e9 1f 9c ff bf fd 8f b4 8e 13 fe 0b c1 ef ec 7f c8 7f e9 eb b7 fe ef 18 ff 72 ff 6f ff f7 a9 07 ed 5f e8 bd 42 bf f3 c2 e7 bb ff e7 e8 6b f4 a7 f4 7c be 28 Data Ascii: RIFFWEBPVP8 >BK%/$ckz_^`rKrz?:@n5y6Ufk\|7iq7Sw}G~C?~Ons3_ro_Bk\|(
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 83 37 df 65 cd 91 d7 33 95 82 f3 84 8c 50 00 b7 7b 45 ff bd 2d d8 ef 6a 08 a5 aa 43 80 f2 76 6a a3 fb eb 05 56 66 3e 02 ff ea fe 0b b4 07 69 12 1a b6 28 bb 85 a0 cb 0b 8e b6 99 2c b3 dc 1d 03 7e d1 9c 85 31 56 8b e2 1a 9e 4b 23 12 98 30 a4 3f 9b ad bd 9a 35 45 f4 8d d8 0b 4f 33 7b c8 35 8e 46 f7 41 cc d5 28 1b 9f 5a 4a e0 a9 95 c1 72 b3 cd 44 b3 70 30 91 f9 a9 9e dc d8 17 12 94 f3 74 93 75 b9 4d 87 36 20 48 aa fa e4 6b fb 8e 11 8c 6d 66 f4 36 b4 62 b8 cd f3 b7 46 0f 3b 2e 61 61 f4 8e e6 32 57 4a 84 7e 31 1f dc 5b bf f5 43 a8 09 00 43 15 7a a8 91 13 e0 7b 1e 74 99 7a 41 a2 e5 8a 05 07 76 f8 59 45 3a 18 31 c2 16 1d 88 ac 40 3b 52 07 7e e7 d5 b7 e4 5c 24 dd a7 f6 a2 63 29 7f 38 3d b9 52 46 bc 85 71 66 f3 bd 67 d8 4a 8b d8 d6 3a 37 95 a5 e6 1f ac 00 e2 4f d4 Data Ascii: 7e3P{E-jCvjVf>i(,~1VK#0?5EO3{5FA(ZJrDp0tuM6 Hkmf6bF;.aa2WJ~1[CCz{tzAvYE:1@;R~\$c)8=RFqfgJ:7O
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: db f6 72 cf b3 0a 0b f9 c6 61 aa 47 b2 a8 b5 a5 42 fc f4 2e 41 fe a2 17 b6 b5 ea 41 03 c1 9f 11 67 f5 40 4d 2d c8 cd 82 6f a1 36 81 4d 22 d6 fe 38 4c 0c 97 df f5 53 0c 6f 25 6c 8e e2 13 0c ed ed 37 e8 d7 ac bb 12 eb 5e 2d 6e 24 6d 49 9e 78 8f 9f 52 14 f7 b9 8c ec 0c cb 80 d1 17 d6 3a 16 21 a0 15 31 7f ec 23 9c 16 a9 5d e6 98 1f 28 2f 64 5f a0 f4 95 db 0d 2d 98 ee 65 94 5b 82 3e d2 12 73 63 33 25 d0 69 8b 5a 45 70 a5 64 04 df b5 ae df d5 b5 c0 aa 54 e0 21 95 ff ed 0c b5 ba 89 2d f1 a3 e5 37 87 43 00 53 61 c3 a7 81 ed c3 e1 71 b2 eb 22 92 16 65 58 b4 96 a0 35 bf d5 83 70 b7 af e2 d4 7d a0 bc b2 2d e6 fc 30 a5 b7 15 df 51 7a 69 34 ef 17 f9 6a 4b 49 2f 44 a0 ba b9 7a fb cd c5 f2 a1 78 65 ea b9 39 f9 66 72 aa e1 4a 7e c0 27 75 a2 a7 b3 00 de c0 e9 9c 49 fa a8 Data Ascii: raGB.AAg@M-o6M"8LSo%l7^-n$mIxR:!1#](/d_-e[>sc3%iZEpdT!-7CSaq"eX5p}-0Qzi4jKI/Dzxe9frJ~'uI
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 45 1d 3b d1 8c 44 dc 51 5e 89 88 cc b3 d9 d3 75 79 b6 b7 5f 51 ab 47 9f ea bb 00 bd ea c1 fd ec e6 72 7a b5 9c de 3b 34 24 d1 90 d7 4f 6a b9 c1 ff 31 f3 44 df a5 b0 4c 11 75 07 66 5d 5b 57 3e 93 3a e7 6a 6b f8 2c 27 28 88 27 60 fa 27 e6 a0 9d 68 ed bb a5 ba e0 09 77 64 d2 0e 58 2a e7 63 d1 82 23 ba 60 cf 4f 6a 57 b2 f3 01 b5 0f d2 7d 07 04 0e 62 6b 7d d9 f5 c9 eb c5 cc 48 8e 47 3a 3c e3 82 56 34 50 f7 cc 6e 9c 1a 30 c6 fe d1 f9 18 98 24 48 86 f3 a1 cc 77 38 7a e6 9b 8f 59 f9 2b b9 d4 52 95 18 2b fa 95 c4 c8 2b 1b 67 b5 e5 3f 78 a1 ee c0 62 1c 31 57 0b 09 0d 39 9e 1d 54 99 40 cb 9f b8 76 c0 27 e4 23 2d bc 54 ec 92 f3 c0 7b 69 da f0 4a f1 4c 20 f9 3b 0b c1 c2 68 da 3f be 62 01 6f b9 de a3 46 ed be 0d 5c 80 88 83 ac 4d 5e 25 86 ed 2f 9c 7b 35 ff 90 44 66 09 Data Ascii: E;DQ^uy_QGrz;4$Oj1DLuf][W>:jk,'('`'hwdX*c#`OjW}bk}HG:<V4Pn0$Hw8zY+R++g?xb1W9T@v'#-T{iJL ;h?boF\M^%/{5Df
2023-12-05 18:13:40 UTC	168	IN	Data Raw: dd 83 b8 ff 9c 7f 49 81 b2 b5 0f ed ea 7d 7a 82 86 1a d9 11 80 6d bf 0f 9c f2 a8 07 58 df 13 8d bd 52 37 f6 28 f7 a7 7b 24 24 79 70 8f ed e1 05 e3 e7 60 25 f3 f6 b0 01 04 c7 9b 6d 09 f4 62 f0 6c bc f3 9b 4c 24 27 ee f8 da 9a c7 b7 5c 91 28 96 3a d1 c0 0b b4 50 28 4c 36 f0 57 a3 bb c8 95 ed 07 5d 22 73 e7 c3 ee cb f5 d5 d8 a2 b0 87 5e 82 1e ea 3b d1 c2 e7 fb 85 7b 7f 91 7e a4 00 f0 48 21 02 aa c5 eb 67 68 74 08 d9 11 de fd 44 1b 89 5c 60 4f 0a 74 44 f1 d2 87 6a 2b d0 68 40 d8 52 10 f3 53 e8 00 00 00 Data Ascii: I}zmXR7({$$yp`%mblL$'\(:P(L6W]"s^;{~H!ghtD\`OtDj+h@RS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49979	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	694	OUT	GET /images/2023/12/04/multimedia/04israel-hamas-miller-01-tjqm/04israel-hamas-miller-01-tjqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1204	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 38 38 38 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 34 6c 45 55 50 70 70 55 55 69 44 77 61 4d 54 76 30 2f 59 55 31 5a 58 7a 4f 61 46 73 6e 71 71 72 58 52 6c 55 43 49 38 35 50 4c 49 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 32 33 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 98888Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "4lEUPppUUiDwaMTv0/YU1ZXzOaFsnqqrXRlUCI85PLI"Expires: Mon, 04 Dec 2023 23:
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 52 49 46 46 40 82 01 00 57 45 42 50 56 50 38 20 34 82 01 00 50 0b 06 9d 01 2a 00 04 ab 02 3e 91 3e 99 49 a5 a3 22 28 a9 93 7c b9 10 12 09 65 6d 57 11 7e e8 a3 4f ad 69 12 a2 ba d7 a6 44 b4 b8 e2 df d8 0e 8b 4d 12 1b b8 be 63 9f b9 68 17 d6 ef 00 97 0f 94 b3 c3 b2 57 fe 1f 63 1f dc 3f 78 3d 9f bf 19 bd ea ff e2 fd b7 f8 3b fb c7 f9 01 f0 6b fa 47 fa ef 57 3f fc 9f b3 9e ff 3f b7 7a 87 ff 90 f4 c6 ff c7 ed 39 fd 8f fe 7f ff ff 71 ff e6 ff e9 ff ff fb 53 7a c6 ff 7e f3 c7 ff ff d9 dd d0 2f e4 de 44 fe 71 fd 47 7c 3f a0 fd e3 fe 3f cf cf 86 7f da 71 ef ee 7f e6 79 9f fd 6b f7 8f fc fd 7c 7f a1 e0 1f ee 7f e3 7f f8 f5 11 fd a3 fd 77 fe af 5c 4f e9 ed ac e9 3c c6 b0 03 fd 5f 3a ff 77 ff 93 ec 13 e5 df fe bf 1b 1f ca ff e3 f6 0f fe ad fe cf f6 cf de 43 ff 0f ff Data Ascii: RIFF@WEBPVP8 4P*>>I"(\|emW~OiDMchWc?x=;kGW??z9qSz~/DqG\|??qyk\|w\O<_:wC
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: c4 f5 05 a1 02 48 97 25 ac 32 41 70 37 bb 87 b4 0f 14 f3 0f af 8a f3 7f 8b e5 b8 bc 78 7e 8c 48 31 ab e8 03 af fd 30 da 68 fd 7c 99 1e 7c f3 0f ce af 84 da e1 e9 07 81 fb 4d 23 b5 8b d7 e7 8d 7c cf d3 45 2e 52 1c c1 7d d3 a5 23 91 a3 77 ea ae 9a 1b 98 42 32 96 4f 8d 42 d9 79 83 93 44 7a e1 b3 ef ae 2f c7 b3 22 ac 9d 15 31 18 3d fb 26 2f c5 22 b9 62 34 24 36 89 45 f7 43 89 fe 7f 2c 6a b0 8b 8b 59 81 fb 22 c3 ac 58 f0 da 07 ca b7 3d b3 f2 65 26 94 65 e0 0c b7 3e fb 1c f6 5c dc 78 78 00 5f dd dc e1 15 7b 0c 3e 4f c8 92 1b ce cf ad 6d 47 05 bf 4a 99 c8 44 78 ac 9c 93 5d a0 71 14 b0 2e 7e d0 7f 22 00 93 a3 aa 0a ee de 9e 39 9f 32 e9 7c c4 48 a7 74 f2 ac d5 01 bd 2c f3 e2 51 77 19 ce 3d fe be ef 0c a2 c8 05 dc c5 ff 95 01 9d 03 61 41 ad e5 64 df 36 d3 c9 bf dd Data Ascii: H%2Ap7x~H10h\|\|M#\|E.R}#wB2OByDz/"1=&/"b4$6EC,jY"X=e&e>\xx_{>OmGJDx]q.~"92\|Ht,Qw=aAd6
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: f4 bf 7b 73 0b d8 12 12 2b 31 34 c1 a7 92 00 64 78 3d 65 e3 1b 70 8e ce 1f 38 7b 39 d4 e8 43 d8 70 cb b5 de d6 0b c6 bf 8b a3 49 eb 94 7e 68 40 dc 6c 50 8f ae 0d fa b9 19 c4 42 75 38 4e 17 ff 42 5a 15 c0 e1 8e 91 c8 63 3c 20 ee a1 8f aa a3 22 1b f8 87 15 06 bd 0d 00 5c d6 13 56 db 22 b7 90 88 2a 53 33 66 e4 2d a8 ab 5e 2d 25 64 13 99 0e 9d e4 85 99 9f e3 21 bc 06 e6 ca da c0 59 00 46 90 a2 e0 90 1b a6 98 69 0c 0a 24 4a 1a b5 28 10 e0 88 a1 36 d4 05 4a b9 4e 55 c7 8b 46 44 e5 bd a7 90 86 08 57 3c 8c 66 c4 f0 dc 82 90 ce 83 c6 1c 03 07 1a 14 89 35 8e de 71 4f b8 fa 9d e0 99 f4 a6 e7 e3 5c 53 d9 46 6c 1f ec 69 44 a6 aa d0 d4 74 3d 8d 3e ba 44 44 ac b8 32 0e cc 62 2a f7 4a 67 bc fd bb d0 35 10 5e ec 87 e5 64 3d 4a c0 58 1e 93 85 21 bf ea db 35 54 36 0e fb 76 Data Ascii: {s+14dx=ep8{9CpI~h@lPBu8NBZc< "\V"S3f-^-%d!YFi$J(6JNUFDW<f5qO\SFliDt=>DD2bJg5^d=JX!5T6v
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 64 8c 79 22 71 06 7a 2c 11 3c e6 2f 54 62 54 a3 22 04 d0 2a 69 65 a4 27 f7 f6 81 d4 c8 b5 ea 6e 55 8b c4 b4 94 39 6b 46 7e 55 9c 6f 60 d9 af 20 94 af af 10 20 8b 98 e9 89 87 f8 74 2f ae 87 a4 d9 7a b4 9b fe 5b 2c 9d 14 10 7a 54 59 79 6e 4d 89 40 7b 94 48 82 b8 eb 34 2d 01 45 d4 3e 4b 85 21 2c fb 24 d4 d3 c0 9e d8 42 94 d4 1a ff bd 10 01 51 07 fc 0b 64 17 d7 84 5f b3 e4 0a ce 63 b1 c0 6e 08 7a 06 11 51 dc 16 c4 cc eb e4 ab 6e a3 43 2d 29 a0 4a 96 e5 72 bb aa fa 7b 40 a1 ac 1a 6e 2c 0b 5b 34 08 50 f9 73 97 b3 ac f0 3c 0c 7d fd 70 49 e5 2e 01 d9 ae 09 74 c9 ac f3 cf 64 43 b1 d4 43 33 c3 fd 34 26 6d 60 2e 15 21 37 48 c5 e3 87 c5 5d 3e 77 ae 22 a1 fa 98 61 12 0c 52 eb aa 8e 4b 11 b6 01 30 68 b9 49 14 05 71 6d dd b5 88 c0 29 31 36 fb 83 26 5e 1a f9 ef 93 2a 6b Data Ascii: dy"qz,</TbT"ie'nU9kF~Uo` t/z[,zTYynM@{H4-E>K!,$BQd_cnzQnC-)Jr{@n,[4Ps<}pI.tdCC34&m`.!7H]>w"aRK0hIqm)16&^k
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 75 14 c4 3f 08 bd 72 89 2a 62 e6 4b 18 e3 cf 52 d9 43 e9 45 01 d3 2c 58 8f 2f 95 ee 42 4a f2 ab 88 c9 f1 3d 79 1a 05 ef b4 3e eb dd 0a 7a dc 4a 3e ad f9 54 b1 29 4d 0e f0 82 65 47 df 3a 56 36 12 f2 97 e3 92 17 a1 d2 5c 3e 35 d2 94 4a 4d db 9a e6 73 a7 70 c7 cd 9d 1b b3 3d 62 4c 69 28 50 2c a4 fc 03 35 89 69 92 de 85 42 88 ff 4d c9 28 42 18 d3 79 05 eb 89 00 d8 4b a6 25 ca bc 86 a9 b3 4c 91 4d 21 09 f0 21 a4 9e c8 69 76 3e 5b 3e bb 36 e1 9b 90 a1 8a 20 77 8a 90 66 02 24 ff 27 e8 84 6d 21 34 15 ae 56 27 38 a5 1f 8a a8 bb c2 f8 46 40 00 00 43 00 66 a5 00 1e 82 1a dc e0 cd f5 e7 8c 58 c5 02 2a 3a bd bf 8d 2a a8 ce e2 34 a9 e0 3a fb 37 f5 99 51 c4 32 c5 a8 b2 35 d4 02 73 03 a0 67 da 43 ac da 70 92 3e b9 2b b5 e8 d3 70 14 c7 87 fc c6 33 6c 06 77 db 57 ef e8 3a Data Ascii: u?rbKRCE,X/BJ=y>zJ>T)MeG:V6\>5JMsp=bLi(P,5iBM(ByK%LM!!iv>[>6 wf$'m!4V'8F@CfX:*4:7Q25sgCp>+p3lwW:
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 5e f0 03 19 1b 28 71 e6 75 be b1 1c bf 74 0d 92 0c 4a 04 09 7a 81 d6 c2 5f 3b 68 6a ab 8d 33 a1 75 09 5e ba 1b aa 5e c6 76 52 4d 58 e0 ca fd 66 9c d0 b6 71 f2 ca 46 fa cd c5 b7 b6 23 4a 71 fc 0f 1f 8d 2e bf 97 91 1c 5b b2 25 ec 93 45 0e 8c bd fd c3 ec 55 31 32 13 3e b0 34 d3 46 b8 4f 17 f8 9f 77 bf ab e6 57 9f ae d9 12 9e 52 06 ab 1a 6c cd 0e 79 ac f2 e6 ab 19 8e 9c 2f 14 45 1b c0 15 2a 6f f0 05 7a 9b 6b 10 12 fe c8 e8 87 27 83 c1 7f ed f6 18 18 e9 79 4c 4d ab 4f 79 5c 10 e0 9b 20 35 be 74 1f ac 7b dd 89 00 70 ed e1 45 6f 11 aa 70 89 da cb eb f3 23 c8 a6 f9 73 c5 85 8c ca c8 7b 9b 7b 08 d8 14 18 ca d6 f8 99 5d 6f a8 f2 be 61 10 f7 bb b4 4d 6f b7 22 e3 23 ee 5f ab 50 fd 4f 15 ca be a9 dc aa f4 2a c0 55 4b ca cd 2e 29 0d 4c 1c 60 1d b4 aa c8 f6 ce 79 f1 7a Data Ascii: ^(qutJz_;hj3u^^vRMXfqF#Jq.[%EU12>4FOwWRly/Eozk'yLMOy\ 5t{pEop#s{{]oaMo"#_POUK.)L`yz
2023-12-05 18:13:40 UTC	584	IN	Data Raw: 48 83 f4 c1 05 22 6c 5d ad 2a 9b 7f cd 6f ec bb 89 ea d6 bc 5d cd ad ad 3c 32 19 ab e3 69 98 5b a8 25 74 0a 88 ff c8 68 8e 1d 3e e8 26 b1 4e cb 81 74 29 2d b3 f0 9e 50 ed 04 e1 73 74 5f 7e 51 65 35 f9 7a 30 ed c9 a3 ba 80 b9 e5 4b 34 f0 1d 23 dd 29 ce 15 02 ed bd 4e b5 34 a9 68 f9 60 30 aa 39 69 5e e3 03 82 d0 3a 6e e7 01 16 da c6 70 41 04 e3 ed 2f 6e 33 4f b8 1e 63 50 93 2e 06 89 c3 87 d4 3d 83 af a6 a1 80 dd b8 0f d6 bc 71 b8 d4 c7 ee ab 24 20 9c 7e c0 34 52 02 f7 f6 e5 1b 96 ff 18 dc 08 80 cc 47 51 24 61 05 1a 80 5e 91 8c 24 ee 00 1a 0a 1e 99 e6 60 c3 89 21 4c 7d 77 db 2c 80 16 4c e0 f9 a9 bc f5 73 6f 84 ed 45 a8 23 08 3b 9b c9 74 47 1f 81 8b 93 ea 7d ce 15 24 67 92 bd 9a 6b 97 08 f9 0d 8a 3f 22 3f cc 00 91 80 19 d3 8a bd d3 33 09 b6 c1 8b 41 02 3a e9 Data Ascii: H"l]*o]<2i[%th>&Nt)-Pst_~Qe5z0K4#)N4h`09i^:npA/n3OcP.=q$ ~4RGQ$a^$`!L}w,LsoE#;tG}$gk?"?3A:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49978	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	459	OUT	GET /images/2023/10/17/multimedia/05israel-hamas-hostages-men-new/17israelgaza-photos-03-gfml-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1212	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 37 33 30 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 77 57 38 65 56 2f 46 64 42 48 50 35 33 6f 41 31 77 43 6c 63 50 70 7a 35 7a 73 4b 73 64 4a 72 2b 6c 47 66 59 75 30 33 74 74 6e 41 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 36 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 117302Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "wW8eV/FdBHP53oA1wClcPpz5zsKsdJr+lGfYu03ttnA"Expires: Tue, 05 Dec 2023 16
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 38 8c 53 58 75 e2 d6 d3 c5 bc ed a5 52 50 61 29 26 27 b5 60 59 56 65 19 b9 f0 87 5b a9 57 9a cd f1 e4 e2 0f 19 c5 86 8a b2 80 06 e0 42 52 01 8a f3 6a 6b 25 ef d7 8d 8f 44 d7 c8 97 a9 e8 d8 8c 56 3f 0b 87 53 ca 6f 02 db 48 28 95 43 44 e5 98 cc 12 99 20 1e 54 78 4c 4f 19 71 24 b9 89 e1 e0 14 28 a1 48 71 a4 dc dd 32 0c 91 da bc 5d a0 b8 2a f1 12 15 31 17 13 bc 5a ae b0 38 5c cb 07 32 42 60 41 89 33 a1 ed 5d 7e 3b 6f af dc e1 a3 d4 f6 ce 12 eb 67 0a e2 b8 a7 11 c2 87 92 a1 95 29 71 b3 20 0b fb b1 7a a3 f6 93 8e 0c 1a 4a 78 78 6d c2 a5 9c 8e 28 21 69 09 02 0d a6 4c ed 54 d8 7e 19 82 2f a1 29 c5 b4 f2 4c 79 82 4a 08 3d 8e a7 ad 6d 78 97 b1 2c 27 00 de 29 18 94 84 80 92 6d 22 fc a2 b9 cf 34 94 dc 6e 57 ef 74 69 63 55 76 79 43 ef e2 31 38 67 b1 dc 53 18 c6 56 14 Data Ascii: 8SXuRPa)&'`YVe[WBRjk%DV?SoH(CD TxLOq$(Hq2]*1Z8\2B`A3]~;og)q zJxxm(!iLT~/)LyJ=mx,')m"4nWticUvyC18gSV
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 6e a8 bc a7 54 94 4a 33 15 29 51 a0 9d fa 52 29 c4 be 1c ce e7 99 5e 60 56 48 09 3b 81 13 ad 36 fa 9e 71 4a 75 cc eb 50 56 55 af 51 3a 01 23 b5 62 52 b0 72 90 d2 1f 57 86 e2 56 80 4c 28 f9 41 03 78 37 f4 a0 75 a2 95 28 a1 79 d3 98 89 82 27 79 83 52 14 db f8 ac a4 29 2a c8 d0 e4 02 52 0d 85 e2 2a 02 89 3a 92 4e 9f 0a c0 10 58 d7 51 49 80 39 13 f3 a1 02 a8 3a 8b 63 46 5a 71 33 98 46 87 d0 e9 4d 93 33 40 77 3a 20 a3 04 6c 48 f9 50 d2 81 34 20 9e b4 b1 22 66 f3 a5 25 3a da 56 43 81 09 0a ca 9c c4 f2 02 d4 28 c5 74 1a 22 23 9f ad 24 e9 da 80 b3 c3 81 f8 74 92 6d e6 a9 08 00 a5 41 0a 93 1f 0b ed 51 58 4c b2 90 99 cc 67 b6 bf 5a 9f 86 20 25 52 04 89 d6 06 db 8d e8 54 28 4a 73 a5 49 02 73 41 93 16 98 98 fd aa 50 01 01 49 93 af 4f 9d 47 60 a4 95 8b 15 c0 9c b7 b9 Data Ascii: nTJ3)QR)^`VH;6qJuPVUQ:#bRrWVL(Ax7u(y'yR)R:NXQI9:cFZq3FM3@w: lHP4 "f%:VC(t"#$tmAQXLgZ %RT(JsIsAPIOG`
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 0f d2 bd 01 d1 2b 4e 9b d1 ac e1 f0 ed 38 fb ca ca da 13 2a e6 4e 80 0e 64 ed 5b 59 5e cb 4a 66 25 e1 e3 bb 52 69 18 20 e6 55 a1 2a 64 b6 a2 6f 98 49 49 d8 c6 c0 d3 c9 70 38 90 a4 79 ae 75 23 6d 60 1d 29 b7 1e 53 ce 3d 8a 58 85 2c 93 1b 00 74 03 b5 02 1a 02 36 b8 b7 4d eb b1 e3 61 ab c4 0a 01 41 5f b5 09 22 0d 85 4b 48 26 66 45 ed b4 83 cc 51 80 95 a4 85 20 1e b4 a1 65 78 99 3e 9f 0a 30 b0 98 cd 6d 3e 5a 1a 37 d9 4a 54 08 90 23 7b 8a 4c 33 ab c3 be db ed a5 2a 52 14 08 cc 02 93 63 b8 34 65 55 d4 b6 7f 82 f1 45 60 d7 f9 09 51 71 00 a1 21 69 24 89 99 17 ac ca b0 58 cc 1b ad 7e 23 0e b6 b3 28 11 98 44 80 6f 1c e2 bd 49 b9 f2 38 a6 90 b0 52 14 85 30 b9 09 04 49 00 40 9e d5 8b f6 9f 12 56 f6 0c 05 a8 24 66 56 45 0c aa 06 62 7b 18 b5 72 c5 96 4e 5a 5a 47 a7 36 Data Ascii: +N8Nd[Y^Jf%Ri UdoIIp8yu#m`)S=X,t6MaA_"KH&fEQ ex>0m>Z7JT#{L3*Rc4eUE`Qq!i$X~#(DoI8R0I@V$fVEb{rNZZG6
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 9c 8b 20 6b a4 d8 d5 d2 df f0 44 b4 cb 08 3c d2 d8 9e 73 26 6a 2b 8e af 10 af 11 d5 05 29 51 3b 19 02 06 95 a4 66 69 74 54 40 42 4a 90 27 96 84 47 ad 47 56 19 25 56 b0 fd ea 5f 86 ef 8a 94 a0 66 24 c0 d0 1f 89 ad 06 13 83 a5 40 17 1f 6c af 5c a0 c8 1c c1 36 9a 8d 1c 95 d9 5e cf b2 fc 4d 4c 35 89 c3 a9 0b 4a d2 08 49 25 2a 8d ac 44 54 c5 e1 f8 c6 13 00 e8 5b 19 14 e1 2d 80 54 02 a2 2e 45 eb 73 c3 dc 4a 53 f8 77 9c 6e 40 19 32 ab 61 68 b6 84 56 27 db 71 88 77 1b 84 65 a6 96 a0 1b 51 f2 a4 9f 32 8d c0 8d ed 5c be 1c 64 d5 f4 36 b2 4a 29 d7 63 1e 86 d7 9d a2 a6 b7 dd cb 6b f2 ad 87 07 21 5c 39 89 db 38 ff 00 f6 3f 0a cc 60 f8 07 18 c4 ac 04 e1 96 d8 d7 33 80 a4 7c 35 ad b3 5c 3f f8 73 0d 61 cb 99 c8 46 62 62 01 52 89 90 3a 0a ef 16 ac e5 45 47 18 c5 b9 87 6d Data Ascii: kD<s&j+)Q;fitT@BJ'GGV%V_f$@l\6^ML5JI%*DT[-T.EsJSwn@2ahV'qweQ2\d6J)ck!\98?`3\|5\?saFbbR:EGm
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: b4 90 98 df 73 51 1d e2 0f b9 36 11 f0 aa b5 bc b5 9d 6d 5c 1d 23 5a d2 89 89 4a f8 e0 9c 71 2e 19 b2 7e 74 bf 88 73 92 7f bd 45 4a d0 68 e0 9b 83 4a 39 8f 78 ea 93 e5 4d 2f 8c 7f 91 3c ea 35 c4 5b 7f 9d 10 24 c5 bf ad 28 83 aa 1e 26 f1 6d e4 d7 04 e2 10 3c ae 26 3a 01 34 a9 44 ed fb 53 a7 0e e4 7f bb 54 76 31 f4 aa 2c 8a 57 8b 1f ad 5f 08 a6 cb f8 9f fc 45 7d 2a 5e 47 bf 4a 57 f0 26 9c 4e 1b 16 41 ff 00 67 59 b6 e9 3f d2 96 2c bb 67 19 89 4d 83 84 8e 46 e3 e7 52 91 8f 53 89 28 71 a0 e2 33 82 62 52 6d b4 8d b9 55 50 69 4b 41 1e 22 52 0c 73 98 de 34 d6 a6 20 42 72 a4 4e 80 6d 61 61 55 1b 2d 30 ec 70 ec 46 7c 8a 75 95 8f d2 61 60 82 64 40 10 49 15 19 e6 c0 29 2d 3e da d0 85 99 83 0a 89 d0 83 17 1c e9 18 4a c3 8a 82 23 29 93 a4 13 cb af 5a 7f c1 6c 7b c1 21 Data Ascii: sQ6m\#ZJq.~tsEJhJ9xM/<5[$(&m<&:4DSTv1,W_E}*^GJW&NAgY?,gMFRS(q3bRmUPiKA"Rs4 BrNmaaU-0pF\|ua`d@I)->J#)Zl{!
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 9e 7c aa b0 63 70 8d 2d 6a 25 0b 30 72 fe a1 9b 94 a8 e9 cc d0 9e 33 83 42 dc 5a 1a 70 2d 64 48 48 4a 13 a4 40 02 48 02 b2 d4 99 a5 a5 13 d4 83 88 4a 3c 5c 66 29 d5 25 20 7e 5a 0a 53 cc c0 b6 bc f7 aa f5 32 5a c5 2f 28 58 ca 5a 24 2e ca f7 80 e6 68 47 1d 4a bf fb 75 1b 7e a5 29 57 ed 20 53 4d e3 d0 fb af b9 e5 48 ca 80 02 52 52 24 2c 5a 2b 70 4d 3d cc c9 a6 69 bd 9e 1f ed 5c 43 ae 17 15 ff 00 c0 d6 6d 44 fe 21 47 a0 ad 87 08 5e 09 6f 38 18 4c 2b f0 b8 8c fa 83 3e 19 99 27 59 3a 56 3d 61 5e 32 b7 b7 7b cf 5a e9 3f 2a 22 34 bc 59 2a 75 38 44 a5 dc 87 24 c8 9d 20 5a c2 6f 55 43 87 8b e7 71 6b 33 fc 8b 50 f9 90 2a d3 12 b5 a5 dc 32 92 92 a1 90 05 65 51 04 27 2f 30 6d 4c 2b 18 d8 50 1f 87 1a 6b 95 4e 1a f2 db 3a 52 22 1c 06 4b fe 4f 49 08 49 fa 93 4f 21 a5 94 Data Ascii: \|cp-j%0r3BZp-dHHJ@HJ<\f)% ~ZS2Z/(XZ$.hGJu~)W SMHRR$,Z+pM=i\CmD!G^o8L+>'Y:V=a^2{Z?"4Yu8D$ ZoUCqk3P*2eQ'/0mL+PkN:R"KOIIO!
2023-12-05 18:13:40 UTC	2614	IN	Data Raw: a2 cb a6 ba 52 65 14 00 c9 d2 28 6f 70 29 cb 52 5e f1 54 18 70 29 36 ae 93 43 3a d7 43 01 c8 a4 fb e7 43 35 d7 ab 40 39 d3 b5 24 8b d0 c6 b4 40 54 07 48 a5 06 90 01 45 06 80 59 37 a1 34 b7 ae b5 00 31 4b 04 cd 75 24 d0 1c 05 27 3a e2 69 39 d5 21 dc e9 29 6b 84 d0 1c 47 de d5 d6 bd 74 d7 5e 80 e8 35 c3 7a 58 35 d1 ad 00 a2 2b a4 57 44 cd 77 3a 03 ad 5d ce 92 c7 e1 5d 36 a0 3a ba ff 00 3a ea 50 09 a1 4e 03 5a 20 8e b5 c9 4d 16 53 f3 a8 05 48 4f ca 8e fb 13 b0 e7 5d 96 e4 01 4e 04 98 16 e5 d2 a0 04 6d d8 ff 00 9a 30 9b 51 81 33 6d e9 40 99 12 2d de 6a 1a 3a 12 00 bd 2a 0a 64 c7 f6 8e b5 d9 45 a6 e2 69 6c 09 e5 f0 a0 10 1d 6f a5 15 89 f5 ef 48 2e 63 a5 2f 3b cd a6 d6 a8 0e cc 7d de b4 b3 10 26 60 da 6f f6 28 09 4c e9 48 48 00 11 1f 5a 00 ee 01 a1 2b b1 ef 42 Data Ascii: Re(op)R^Tp)6C:CC5@9$@THEY741Ku$':i9!)kGt^5zX5+WDw:]]6::PNZ MSHO]Nm0Q3m@-j:*dEiloH.c/;}&`o(LHHZ+B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49976	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	672	OUT	GET /images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1204	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 31 39 35 36 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 58 64 58 37 34 64 30 43 50 6e 56 52 4a 76 37 31 6d 34 2b 66 55 32 56 4d 44 59 32 6d 62 66 38 38 52 71 43 69 6a 55 77 4e 6b 63 4d 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 32 32 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 91956Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "XdX74d0CPnVRJv71m4+fU2VMDY2mbf88RqCijUwNkcM"Expires: Mon, 04 Dec 2023 22:
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 52 49 46 46 2c 67 01 00 57 45 42 50 56 50 38 20 20 67 01 00 30 22 05 9d 01 2a 00 04 db 02 3e 91 40 9b 49 a5 a3 a3 24 2a 94 da 80 b0 12 09 67 6e dc d5 b9 ed ed 3a 7c ab b8 1f 6b 5f 01 db dd 90 69 bd f6 d6 a1 3e d9 d7 22 64 01 d5 da d0 e0 33 53 cf 15 38 bf fc 3a a9 f5 af f0 f3 c3 ea 47 ed f8 2b e0 d3 ff fe da cf 5e 33 5f b9 01 5f 2e f2 7b f3 af ea 7b d1 fc fb ec bf 71 9e d6 5f c0 e2 df e1 7f d1 f3 13 fa ef f0 0c e8 ff 4f fb 71 e2 8f ca 9f aa bd 81 7f 3f fe db e6 55 f6 5f b9 3d df 9a cf fa 9f db 7f 61 1f 73 bf 01 fb 57 ec 03 fc 1e 6d ff 13 ea 0b fb 55 eb 17 7e 1f f2 7d 40 ff c7 fa 39 ff cd ff ff d0 6f ec df 9a 3f 03 7f d8 7f de 7f fa ff 7d db f0 d9 2c 35 f8 18 38 c6 2d ec f7 48 c1 d3 00 2a 30 3b dc 26 da 67 2f f2 06 31 28 09 76 5b 3e 45 5a d7 39 7f 90 78 ba Data Ascii: RIFF,gWEBPVP8 g0">@I$gn:\|k_i>"d3S8:G+^3__.{{q_Oq?U_=asWmU~}@9o?},58-H*0;&g/1(v[>EZ9x
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: b3 ac b0 9f 4d f3 4c b5 66 6d ec 04 27 f1 dc de 55 e1 cb 82 ff b3 1a 1a f8 b3 f4 12 15 d3 b5 ab 17 ca 2d ff 92 62 70 79 32 05 bc 07 7a 7c 45 1d a9 ae 6b 1f d0 a3 e5 c7 4c 2b da dc 7a f1 b0 fe f0 da ff 8e 69 98 6e cb ce 1a f1 ea d5 e9 ed 9e 84 2c 28 16 d5 f8 5b 3a 1a 91 df 5e c0 7c df ac 91 29 f9 6b a9 ac cf 8e 6b 07 bc 42 61 a0 99 e5 26 30 67 38 50 9d f4 08 55 65 6c 86 a2 6b 7f 54 ff be e5 5d ec 72 0d 21 73 c1 b4 54 a4 68 4e b5 9a 28 bb 02 68 bc 8d 53 88 86 ba 28 6a 9e c8 54 a9 d5 fb 13 66 01 8d 3d 1d f7 a0 97 6a 12 6d cd 34 bc 7f 01 39 17 97 02 61 10 40 fa 6c 56 0a 14 0a 6f 4e 17 b8 b6 af be 49 a6 49 07 75 11 27 a5 5a 76 2b c1 dc 39 f9 93 55 14 d2 f4 ee cb 1d 8e 81 ee fd 69 dd a0 78 7b d2 92 79 c6 9d f8 d0 4a 2a 6d 69 d0 7c 27 fa 64 33 b8 56 ca d8 ff 22 Data Ascii: MLfm'U-bpy2z\|EkL+zin,([:^\|)kkBa&0g8PUelkT]r!sThN(hS(jTf=jm49a@lVoNIIu'Zv+9Uix{yJ*mi\|'d3V"
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: f2 19 a3 d1 c9 13 fd 39 61 4f b2 bf 99 6f 0c 1d e5 83 8d a1 d4 43 b5 ba 18 dd 7c 2b b2 c8 d8 3b 6f ae b7 c0 0d c7 9f 0c f4 21 68 73 72 1c 61 d5 a6 e6 d3 d3 22 1f 98 92 b7 05 dd e2 f7 4d 38 a8 59 b1 32 d6 b4 a1 7b d9 b9 54 09 a1 0d a7 a1 84 63 f0 56 6d c7 44 dc 8a b1 bb e9 80 1b 72 12 cb ad 73 e2 cb a6 ee d0 60 22 14 6a f1 bc b0 0c 20 10 b9 bf 8a 88 75 f6 ac 3f 1a 96 40 86 4d ff f3 43 3e d3 cd ac 54 62 6c 52 2e e4 fa cc 87 8a 13 c5 04 03 ae 60 e8 23 65 f0 f6 8f fd 58 4b c3 5d 2c f6 0d 83 e7 81 25 8a 71 65 f8 de e7 c7 aa be 70 f0 bd 4e f2 bb 41 98 ad 95 31 f6 1c 14 60 22 ce db f0 3e 76 a3 ca 7c 03 83 08 12 3f bf 01 87 52 54 2d 87 59 f5 2f ba ac 53 ca 11 3d 70 27 23 e1 61 6b 42 79 1b 1d 38 60 80 9c 0d 24 71 82 65 0f ff a6 3b 57 ca d6 d3 84 aa 3a 2a ca 97 89 Data Ascii: 9aOoC\|+;o!hsra"M8Y2{TcVmDrs`"j u?@MC>TblR.`#eXK],%qepNA1`">v\|?RT-Y/S=p'#akBy8`$qe;W:*
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 52 07 30 2b 7f ee 3f 98 69 e6 5b 63 9a 87 b3 76 35 d4 cf 69 68 40 87 2e 2b b2 a0 dc 57 f6 ad ae 28 53 79 43 4a 85 06 eb ad ce 46 b0 cf e4 fa fe 01 50 36 5f cb 1d a0 93 30 e1 dd 95 ef 01 60 aa 76 8b 8c 1c 36 3d db bc 5d f0 5b b9 bf 31 fc a2 c6 6c 39 33 63 87 5a e7 28 fa 93 97 be 80 e5 ff 6c ca c0 9a a6 24 cd 6f b0 33 fa c1 fe d1 89 09 d1 fd 90 ee 7c 8d ee 63 e6 54 13 1f 1b 46 c9 e7 d1 74 f1 19 c7 06 fe 8b 38 69 b4 f6 92 fe b7 df 63 21 86 fa 35 76 5e 2b be 2c 86 ce b1 8d 75 4f 1c 25 d9 90 6d 01 f9 c3 15 fb 30 41 31 1d 01 47 c4 bd ab 20 12 2f 6a 6d 46 12 d3 c9 bd 22 fa 3f 73 3e 14 35 93 62 16 96 94 d5 52 98 a6 70 6a 8b 74 9d cb 5d f2 b8 e8 9d 5f 15 47 af 95 fd 4a 43 fb d2 8d c6 5b 6d 53 3e 03 46 44 34 82 b5 72 8f ef 81 7b 92 37 da 6c 48 99 fc ff 6d 60 b9 ab Data Ascii: R0+?i[cv5ih@.+W(SyCJFP6_0`v6=][1l93cZ(l$o3\|cTFt8ic!5v^+,uO%m0A1G /jmF"?s>5bRpjt]_GJC[mS>FD4r{7lHm`
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 82 d2 ae de 60 9a d6 27 30 76 63 b0 85 0d 28 a9 6d 2f 9d 37 c9 2f 0c 9f 63 d4 7f 7e fc df c8 52 32 08 b5 88 a3 5a 0b 32 82 c8 f3 2c f1 66 ae 68 3e c1 86 11 4f 50 e7 8c 15 9e b5 47 6f b1 09 d9 f7 59 37 a3 28 f6 22 42 c5 8a 3b 7c 4d cd cd 75 87 87 ed c1 1c a3 96 5d 88 0e df 95 55 b9 36 96 41 7e 44 a8 8b 1f eb eb 4b a1 e8 a0 36 e9 6f 1a c4 28 64 bb f4 f6 9b 1d 4a 7c 89 dc 8b a2 19 c5 6d 4d c5 b4 3b 91 25 84 1b a6 13 41 57 43 d0 d3 3c a6 dc b5 c9 22 47 14 57 c1 54 ea 8a ff 00 09 e4 24 bc 80 74 b9 51 82 cf a2 16 e2 49 8d 55 e9 53 94 7b 3e 1e 2a ed cb 03 95 a7 59 30 9d 0b 6d 53 15 a1 68 d5 db c2 2b 27 6e 8f 9c 42 7a 4b d5 d9 70 40 22 15 00 3f 05 8e 36 0e 0b 6c 3d d1 17 c3 30 57 19 fd 00 e4 a2 23 4b 8b 0a 85 8e 15 f8 2a 87 25 65 7d cd 1d e1 6c 02 eb 12 68 7f 9b Data Ascii: `'0vc(m/7/c~R2Z2,fh>OPGoY7("B;\|Mu]U6A~DK6o(dJ\|mM;%AWC<"GWT$tQIUS{>Y0mSh+'nBzKp@"?6l=0W#K%e}lh
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 37 68 04 76 b8 29 40 cd 14 00 06 0f e6 f5 71 d5 55 0b 22 bc 84 91 4a 33 de d4 3f 34 00 08 10 5a 62 35 e6 b4 26 a2 2f 41 bb d0 96 ad 0d 6f 23 d3 27 98 77 f0 9e 0f 70 b1 c4 0d 5e 00 5d 55 06 d7 19 37 6a 7e 98 d6 d2 47 d3 06 8b d3 94 8a 20 09 90 b9 3f f5 47 10 36 47 0b a1 72 35 64 76 53 ed 97 d0 80 73 58 9d 47 a4 1b 36 01 f3 1e 4c 62 66 85 f6 3f 13 c6 de bf 6f ff 2a 73 b2 32 18 43 ae 76 f3 9a 18 35 84 b4 b3 53 65 67 09 ea 14 77 23 ee 5b f9 51 f5 90 6d ef df f8 b3 39 24 6f 3c 1c ac 6e 34 96 27 7a 8c ff 0f 46 5a cc 9f 0a 28 c5 d7 b8 fe a9 96 6e d3 ae 60 82 4c f1 ad 97 91 2f cf 65 9a 8f 0b 5e dd 9b 61 8f b1 e5 61 04 b3 df 08 54 6d 15 13 96 79 77 b9 9d 4f 24 19 32 8b 8d 91 bf d5 8c 99 ca 8c 17 fb 8f 3b c2 79 8a a6 6b b1 18 fe 9b 87 27 f7 ee f1 d4 8d 41 21 3a 23 Data Ascii: 7hv)@qU"J3?4Zb5&/Ao#'wp^]U7j~G ?G6Gr5dvSsXG6Lbf?o*s2Cv5Segw#[Qm9$o<n4'zFZ(n`L/e^aaTmywO$2;yk'A!:#
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 64 ce 8c 5b 7c ee 2a b1 bd 18 7c 0b db 78 0d 5b d9 2e ed 11 d5 1e 6f f3 ab 52 fe 5e f7 89 3c 3c 2e 0c e3 e0 23 ae c7 6a 08 0f ba c7 da 31 72 ec 0b 2f 84 65 cc fb d9 91 87 d4 00 c7 75 d9 c3 5c 5a 69 3d df 20 d8 26 65 a2 d1 cb 20 9b fa ed a1 44 36 ed e7 e6 12 97 5a 64 70 b7 34 a8 2d 23 97 9f fe c1 8f 2d 7f c5 6d 02 a3 93 09 e5 b5 33 98 29 55 0c 31 96 8c 11 ed 7a 00 80 af d1 15 46 87 e7 ef 51 fa a9 70 b1 2a 7e 76 31 53 8e cc bb 99 fc 7a 71 ef b9 b9 2b a0 77 6d ae c6 0e b3 a4 c1 08 82 b2 f4 29 ae 54 f1 ac 94 06 c0 41 6e 13 cd 37 00 c0 dc 8a 9d 37 f4 7b ad 76 ef 08 08 79 15 08 c0 74 52 be 11 99 77 6e 61 dd 2d 31 7e 72 54 ed 3e 17 bb ef f7 5f 14 4e 4f e5 e3 ff 8d ed 88 f0 72 e5 69 93 8d 0c 99 75 66 5e 1b 81 48 6e 30 eb b2 d6 81 f8 71 6d d0 c3 af 01 4a 33 f1 0e Data Ascii: d[\|\|x[.oR^<<.#j1r/eu\Zi= &e D6Zdp4-#-m3)U1zFQp~v1Szq+wm)TAn77{vytRwna-1~rT>_NOriuf^Hn0qmJ3
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 07 98 0e bd a9 76 76 90 cf 9f 29 34 b3 7f e6 ea 7b 43 25 bc 4e 9c 07 da c2 68 a6 63 79 ec a5 81 8d 06 6d 4d f9 83 5a 18 80 ed 76 be dc 77 02 a1 ba 22 6c ed 10 e2 3e 08 82 c7 0e 76 63 49 ef c7 fe 48 e8 75 d9 3e 31 1b 9c ac 6b 73 c4 fa 30 54 af 06 95 d1 dc 4e 62 90 07 e1 04 b1 95 3f ef e2 09 2d e9 63 2e 26 ee 45 f8 6c 95 c6 0b c9 ce c5 7d 63 c6 31 90 dc c5 93 b5 6b cb 7f fe 6d 4d 7b 9a 91 87 67 f1 93 c6 69 b9 1d 33 dc 9f 0a c0 86 5a f6 74 af 3c 66 ca 7c 6c 6f b9 e0 9b 15 40 49 ed c9 61 19 b7 3b 2b 27 c2 ba d8 16 56 f3 44 18 c4 ae 72 88 2b b6 f8 07 a1 aa af 4b 2e 71 18 9b 01 04 7b a6 bd 58 cb ff 06 00 e4 65 7b ba 32 94 ef fd a2 37 2e c5 3a 49 36 65 14 7c 6d f3 7a 85 f2 5b 73 7f 2e cf d4 19 f3 fc 93 0f 89 03 96 10 36 a5 f4 76 ba 18 ef 91 71 38 f8 c6 74 b1 ee Data Ascii: vv)4{C%NhcymMZvw"l>vcIHu>1ks0TNb?-c.&El}c1kmM{gi3Zt<f\|lo@Ia;+'VDr+K.q{Xe{27.:I6e\|mz[s.6vq8t
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: ef f2 19 54 58 7d b2 8a dc 4d c4 b7 84 75 86 a6 c4 c5 c3 f3 61 4c 5a 71 8b 42 ec 6a a4 f1 fc aa b4 46 8e f8 37 ce bf 96 cd 39 e6 8c 3d 9c 4e e9 92 0e f0 86 17 36 96 14 8f cc 4d 0d 4a 5b 68 51 36 b4 8d 95 3e 2a 2d 30 b5 34 64 39 cd a5 c3 67 92 10 83 00 3e 32 67 33 55 fc bb ab 82 1b 10 87 66 47 58 19 77 e0 08 08 a6 05 6e 46 49 94 02 ce c8 42 eb 09 8c 00 bb 02 bc 4d 90 b1 0e f0 80 37 5f 98 dc a6 26 33 db 51 f0 af 54 7b 71 9b 15 38 eb 0f 88 33 be 3e 9b 8a 5e 91 40 53 af a0 32 25 7e 58 68 44 7f 70 04 36 25 51 d1 72 32 97 04 01 b1 64 00 3d 89 60 35 17 4b ce 76 7a 11 7c f6 97 01 d6 42 dc 87 d0 67 f2 9e a1 dd 0c 2f 90 40 9f c0 cd f0 82 00 ab f4 7f 4d 30 07 35 97 d9 be 10 00 01 15 28 20 00 6f 29 c2 ef e7 05 51 3e 1a 1f 34 76 e5 6a 57 c1 ff bc 33 1a 67 b6 51 71 b3 Data Ascii: TX}MuaLZqBjF79=N6MJ[hQ6>*-04d9g>2g3UfGXwnFIBM7_&3QT{q83>^@S2%~XhDp6%Qr2d=`5Kvz\|Bg/@M05( o)Q>4vjW3gQq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49980	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	461	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-who-health-fbgw/05israel-hamas-who-health-fbgw-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1205	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 32 37 39 34 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 4f 43 69 38 57 74 4e 35 6f 67 68 65 4e 6e 45 31 70 61 57 37 64 53 50 51 7a 50 7a 43 6c 77 57 56 4c 41 79 44 56 33 41 63 45 4a 4d 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 152794Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "OCi8WtN5ogheNnE1paW7dSPQzPzClwWVLAyDV3AcEJM"Expires: Tue, 05 Dec 2023 17
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 55 15 42 96 70 ab 92 c5 87 4c 7b 57 37 1a bb a0 09 e1 e0 29 7d bc b0 38 27 20 1e a3 8e f5 68 87 ea db 1b 86 26 ea de 54 93 c1 11 c6 ca 55 95 4b 0c 31 00 91 80 69 81 d8 ef 17 43 0e c6 58 16 12 7c 68 e3 67 26 35 20 49 93 dd 79 1c e7 83 4b 5a d3 f8 0a db c0 3c ee 3c 9e 33 ed eb 5a 4d af 69 b9 fe 1d c1 88 38 0d 96 56 51 b9 46 09 24 8e be 9e b5 88 ef e3 b8 b8 76 49 a2 c1 20 79 08 3c e7 24 00 09 c8 e7 a5 4e 88 e6 e6 ae c4 45 77 33 46 a5 55 9b 2a 18 8f 2f 1c fa 73 c0 a9 6d af 5e 12 f2 21 21 76 95 07 ae 72 31 83 eb 8a 2f 52 b3 49 dd 65 8b 1e 19 c6 e0 72 36 92 4e 31 81 d0 fa f6 a0 96 c5 9b 77 86 ac 56 33 b5 b3 8c 80 4e 01 20 1f de 8e dc 88 94 44 89 ef 26 91 3c 10 ed e1 06 c8 5e a3 76 30 4f cd 48 d1 2c 8a 4a 97 3c 8e a3 18 5c 60 1c f7 cf 7a 25 ec 2e 2d d4 39 61 e6 Data Ascii: UBpL{W7)}8' h&TUK1iCX\|hg&5 IyKZ<<3ZMi8VQF$vI y<$NEw3FU*/sm^!!vr1/RIer6N1wV3N D&<^v0OH,J<\`z%.-9a
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: fc 57 20 d3 3e ab 36 53 5d bf e1 ac 5c cb 31 72 bb 08 09 e8 13 1d 14 d5 9b ff 00 5e 5e 6d 04 59 5a 0e 46 3c cd c8 f6 18 e2 b7 a8 83 62 6a 6f 4b 21 dc 2d fe 65 c5 5f 62 33 1f 53 eb 54 dd 5a 49 25 ba 3b 63 75 94 95 0a 36 9f 3f b8 1d c8 c7 35 95 fa c7 56 95 d9 51 21 53 9e 8a 14 9c 75 ef da 93 dd 6b ef a8 88 a6 b9 bc 64 6b 69 43 c6 fc 2f 86 c4 60 30 28 7a 1e 95 99 d0 8a d5 07 a7 90 92 4a d6 d3 7d 62 e2 e3 4e b2 49 a4 b3 93 ce 42 86 60 55 43 75 c1 24 63 1e 95 41 b4 bd bd 8d 9b c2 b7 dc 88 57 d4 f5 18 1c 13 de ae ba b6 b3 67 7d 6a 91 34 b3 4d fc 54 32 78 80 9d 8a a7 93 c9 39 3d b1 55 00 0d d3 dc 34 21 82 23 92 9b 54 9e 09 f2 93 8c e3 1c fc 50 1a 43 58 1c 8d cc c5 5f d3 0a c7 60 76 15 f9 8f ac 2d d3 50 8a 49 b5 4d 5d 6d e0 c1 0d 18 75 8c 29 61 d0 e4 92 47 a8 ef Data Ascii: W >6S]\1r^^mYZF<bjoK!-e_b3STZI%;cu6?5VQ!SukdkiC/`0(zJ}bNIB`UCu$cAWg}j4MT2x9=U4!#TPCX_`v-PIM]mu)aG
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ea c6 68 55 82 c8 ea c7 8c 79 ba 31 00 67 03 db b5 58 24 0d 6a d7 12 42 5a 49 24 20 64 a8 20 0d b8 27 24 f5 3d e8 9d 8a 83 fd a0 7e 93 01 60 d7 99 bf e2 99 c1 65 20 47 c0 c0 5e 71 91 95 38 e7 ef 4d 35 ad 36 ce 1f a4 a5 b8 f1 15 9c bc 4d 19 38 07 96 c6 00 c0 e7 06 aa 52 7e 2d bf 31 45 1e 9b c1 e3 e0 66 b0 de 2c c8 b0 cf 26 f8 81 e8 01 c8 3e c4 e2 85 81 dc 42 31 bb 70 a7 f4 91 68 9a 7c da 9d c2 59 c2 e8 ad 2c aa a1 98 e0 29 23 82 40 ce 6b b8 58 fd 21 a6 e9 28 ad 0e f7 94 c7 e1 49 23 c8 72 c1 b9 38 50 30 39 03 02 b9 16 98 89 a6 dc ad cc 04 96 52 ae aa fc 79 90 ee 18 3e f5 64 ff 00 d5 1f 52 ea 77 4b e0 1f c8 43 f8 70 a0 2a 39 c0 2d 92 72 07 bd 2b 68 21 af bf 12 c8 32 e9 d2 0d 01 ce f2 bb ae 59 c4 2d d4 96 61 3c 0e 63 2b c6 3c a7 0d d3 9e dc 1a 17 44 fa 88 e9 Data Ascii: hUy1gX$jBZI$ d '$=~`e G^q8M56M8R~-1Ef,&>B1ph\|Y,)#@kX!(I#r8P09Ry>dRwKCp*9-r+h!2Y-a<c+<D
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: f7 cf a9 f4 a3 d3 e4 23 20 d8 d7 78 33 e2 d5 84 82 77 1b 88 8d ad 27 84 80 d9 53 8e 84 e0 e3 e2 9c e8 76 56 97 57 e8 97 93 28 8d 46 ed b9 20 b9 07 f2 e7 fa d4 17 52 cb 7c 22 58 16 49 a5 0b ca a2 96 2b cf 4e 07 7a 85 b4 cd 4a 02 ad 34 5e 07 23 99 58 21 cf 63 8c e6 bd 47 1b 10 0d 7b cf 27 19 a6 52 cb 74 78 9d 61 75 6d 37 4e 52 2d 22 89 58 f4 2a a1 4e 3e 00 1c 55 6f 53 d4 cd f6 e3 3f 88 54 03 85 8d c8 62 7e e6 93 c0 11 d4 b1 94 3e 00 dd e1 a9 c6 7f ee 72 2a 56 85 23 24 cb 08 54 3f cc ce 5b ec 76 01 d6 b9 02 37 73 c4 f4 4e 6c 40 6c 39 f6 95 fb fb 46 16 e6 e1 2d 3c 34 0c 01 66 94 33 67 1d 08 27 bd 2f 8a d2 e6 6e 52 07 23 d7 04 2e 3e 4e 05 5b 51 41 8d 82 15 58 78 6f 22 aa e4 8e 01 ce 09 e3 d7 35 18 44 70 4b 36 e3 83 cb 12 dd f1 c1 39 aa 87 00 56 e6 72 32 6a 6b Data Ascii: # x3w'SvVW(F R\|"XI+NzJ4^#X!cG{'Rtxaum7NR-"XN>UoS?Tb~>rV#$T?[v7sNl@l9F-<4f3g'/nR#.>N[QAXxo"5DpK69Vr2jk
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 43 91 cd 4d 0c 68 c8 73 43 89 b9 95 c6 c8 63 5b 2b 01 de b3 70 c0 cc e4 1e 37 1f d2 a1 c9 35 70 78 9c a7 93 0d 84 86 96 31 c7 e6 1f 15 70 0c 4f 1d 48 1c 76 fd ea a7 a6 c2 65 9c 7a 28 cd 59 81 3d 78 eb ef 41 8d d4 c2 01 a9 cc a2 31 0e 06 5c 64 f7 e8 78 aa e1 27 8a 67 a9 b3 7e 2c 93 fe 41 4b 98 0e 4e 78 eb 44 70 26 33 c2 de 42 32 0a 9a d1 a2 95 7a ae 7f 7a d9 1c af 4a 21 27 07 af 34 76 82 42 93 37 4a 91 a5 dc a3 d8 fe d5 b3 24 72 e7 0a 77 7b 62 a0 30 c8 33 e5 3f a6 2b 6f 34 d5 24 2a ec 7e 6a 40 c5 88 0a 3a 9a 8c 27 98 e6 b6 42 41 a1 34 94 c3 3f 39 1f be 2a 23 1c a3 aa d4 e6 57 ee c6 a7 b6 b6 b9 bc 72 b1 83 b4 63 73 60 90 07 db bd 62 40 16 4c c0 13 22 b1 d3 e7 bc 94 a2 0c 00 32 4f 1d 3f d6 af 8b 02 78 28 a5 5a 26 55 03 28 70 38 1e 83 8a 8a de c9 ad a2 45 85 Data Ascii: CMhsCc[+p75px1pOHvez(Y=xA1\dx'g~,AKNxDp&3B2zzJ!'4vB7J$rw{b03?+o4$~j@:'BA4?9#Wrcs`b@L"2O?x(Z&U(p8E
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 77 81 0f 4c 1c 63 e3 ff 00 35 3a db 6d 5d bc e3 24 e3 92 72 4e 7a d7 9c ed 03 18 20 75 c7 27 ef e9 4d 51 6e 69 14 49 c9 d9 9e 4d 46 d3 af 98 2a ee 38 f7 c7 a6 09 a3 d2 c6 46 c9 79 92 24 c8 ea 40 e4 f6 20 f5 cf 6a 09 a5 b7 8e 29 9e 08 de 40 b8 dc f8 20 2e 78 19 3e a7 b5 12 08 85 11 9c d2 82 7f da 0e c2 62 e8 ac c5 43 00 76 e3 3f b0 e4 1a 65 63 01 49 80 91 0c 51 71 b9 ca 96 61 9e 06 06 3a 9a 37 46 9f 4e bb 78 63 63 e1 4e 07 1b f3 e6 6e c5 49 20 67 d8 d5 e9 45 95 b4 65 b6 16 97 93 c9 2d 82 38 24 71 81 8f 4a 99 62 0c b0 c2 17 ee dc fb 44 52 d9 cb 67 29 65 1f c2 91 08 33 b8 c9 03 a6 30 47 19 a5 f7 5f 4f 2d c5 b3 4b 67 b2 29 b6 e3 1c 08 dc e3 a6 32 76 9a b2 7e 26 e5 92 41 2c 78 2d 8c 33 31 6d c4 0e 72 01 c8 18 ed 55 cd 5b 49 ba bb 91 e5 b2 9e 59 24 62 73 0b 9c Data Ascii: wLc5:m]$rNz u'MQniIMF*8Fy$@ j)@ .x>bCv?ecIQqa:7FNxccNnI gEe-8$qJbDRg)e30G_O-Kg)2v~&A,x-31mrU[IY$bs
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: d0 11 d0 fb d2 8d 24 09 85 9b fe 1d 22 2d 96 21 46 30 07 4a 73 7f 7a b6 d1 b3 e7 a0 a9 9c 49 dc 5c 89 ea 73 31 d4 5c d9 82 e9 5a a9 98 4a b2 d9 1b 68 d0 90 37 0d a3 1e d9 eb 4b 2f 2c b4 9b cb 93 29 b7 f3 29 ea a4 ae e1 9e 84 0e a2 aa d7 1a d5 c5 ed cb 80 c4 22 9e 07 6f 9a 61 69 73 2e 06 07 7a 6a 53 b5 44 57 c8 87 52 b9 0d e4 1d e5 be 0b 9b 72 a1 30 17 68 0a 17 a6 00 18 00 0e c0 51 1b c8 c6 d3 c5 55 2e 4b ed 13 26 43 01 cf c5 62 2b e9 86 d2 18 f4 14 d2 7c cb 4c e9 84 0f 8c 73 4a 27 9c 15 23 bf 34 aa 7d 62 e6 47 55 63 e4 07 fd 9a 24 4c b2 00 d8 cf 1f b5 68 60 12 b9 59 1b 9e c6 aa 5a 9c e1 73 93 c0 c9 34 ef 52 98 6f 6c 1e 99 ae 79 ac 5e 9d af 18 27 2c 7f 61 c9 fd 6a 4e 78 1e f2 88 3b fb 4b a6 81 ab db dc db 24 63 0a c9 c6 de fd 73 9f bd 1d 7f f5 2c 76 6e 96 Data Ascii: $"-!F0JszI\s1\ZJh7K/,))"oais.zjSDWRr0hQU.K&Cb+\|LsJ'#4}bGUc$Lh`YZs4Roly^',ajNx;K$cs,vn
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: d0 57 32 05 46 c9 18 fd 39 fb 73 4c 32 19 a8 4f 99 6c af 2e 9a 65 b6 76 2c 09 20 03 d4 11 d0 0f f4 ad ef e4 78 e0 73 8c 67 ca 3e 4d 5c 35 ed 15 ed b5 fb 2d 46 de 32 21 96 e1 3c 4c 67 08 d9 e4 90 39 00 d5 da 0f a5 74 1d 42 73 2c aa b2 78 52 9d c8 af 91 b8 72 41 03 b7 b5 41 f1 29 c8 ac 06 dd e5 d3 31 5c 6c a4 ef da 73 af a2 7e 9a b8 ba 49 2f 3c 3e 18 14 42 78 00 77 39 ab 8e ad f4 56 8e 51 27 d4 6e 27 5c 00 b9 8b 0a 8b ee 49 07 f5 ae 9d 1a 45 1a aa 46 aa a8 a3 00 28 00 00 3b 00 3a 0a af 7d 54 96 f3 68 f7 11 cc 03 29 03 ca 43 36 48 39 19 0a 41 02 ac 08 2d 72 06 e8 09 c5 f5 9f a7 f4 dd 3a 54 b6 52 5d 25 42 63 9b 8c e4 76 38 e3 3e 95 5b 86 2b c5 8d 01 8e 40 88 4e 30 0e 33 9c e7 3e b4 cf 5e 1a 82 5c 5a 25 c4 65 11 17 28 43 12 ad c7 04 0e c4 55 b3 43 72 d1 c6 aa Data Ascii: W2F9sL2Ol.ev, xsg>M\5-F2!<Lg9tBs,xRrAA)1\ls~I/<>Bxw9VQ'n'\IEF(;:}Th)C6H9A-r:TR]%Bcv8>[+@N03>^\Z%e(CUCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49986	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	842	OUT	POST /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive Content-Length: 344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	344	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 6c 69 76 65 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 69 73 72 61 65 6c 2d 68 61 6d 61 73 2d 77 61 72 2d 67 61 7a 61 2d 6e 65 77 73 22 7d 2c 22 75 73 65 72 5f 74 72 61 69 74 73 22 3a 7b 22 65 64 75 53 75 62 73 63 72 69 62 65 72 22 3a 22 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 22 22 2c 22 61 67 65 6e 74 49 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 7d 2c 22 61 70 70 22 3a 7b 22 75 69 5f 73 74 79 6c 65 22 3a 22 77 65 62 22 7d 2c 22 74 61 72 67 65 74 69 6e 67 22 3a 7b 7d 2c 22 65 76 65 6e 74 5f 74 72 61 69 74 73 22 3a 7b Data Ascii: {"browser":{"url":"https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news"},"user_traits":{"eduSubscriber":"","userType":"anon","external_id":"","agentId":"XbK7A_KO3s8XVA_FdXv5zD"},"app":{"ui_style":"web"},"targeting":{},"event_traits":{
2023-12-05 18:13:40 UTC	681	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:40 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeaccess-control-allow-credentials: trueaccess-control-allow-origin: *vary: OriginCF-Cache-Status: DYNAMICReport-To:
2023-12-05 18:13:40 UTC	70	IN	Data Raw: 34 30 0d 0a 7b 22 65 72 72 6f 72 22 3a 22 49 6e 76 61 6c 69 64 20 63 6f 6e 74 65 78 74 3a 20 69 6e 76 61 6c 69 64 20 4f 62 6a 65 63 74 49 64 20 69 6e 20 4a 53 4f 4e 3a 20 5c 22 66 61 6c 73 65 5c 22 22 7d 0d 0a Data Ascii: 40{"error":"Invalid context: invalid ObjectId in JSON: \"false\""}
2023-12-05 18:13:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49983	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	469	OUT	GET /images/2023/12/04/multimedia/04israel-hamas-khan-younis-01-wqvc/04israel-hamas-khan-younis-01-wqvc-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 30 31 38 35 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 67 32 66 56 2f 71 38 73 37 76 75 34 66 31 68 46 66 68 55 68 6e 69 45 42 77 6c 55 73 57 69 47 4e 43 62 72 74 77 74 36 47 52 33 51 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 31 34 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 150185Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "g2fV/q8s7vu4f1hFfhUhniEBwlUsWiGNCbrtwt6GR3Q"Expires: Mon, 04 Dec 2023 14
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 79 21 48 6d bd c4 81 bb 20 63 e3 e3 51 99 0d 5a af 75 e1 ec d4 a0 43 63 2a 93 d4 e0 62 a6 d0 62 62 54 5d 60 49 b0 52 6f ac d2 ab db 93 9c b8 6a 2f a8 0f eb 55 bd e6 a5 a6 35 77 72 87 6e 21 69 70 85 0d aa 39 1c 89 02 9a 1a be 91 fd 24 7e e2 bf 2a 1e 1f 9d d6 3a 95 1a 6f 67 0d 9d a1 ea 8f 92 ae fa 38 78 aa 93 f4 70 f1 57 d9 f9 55 af d2 fa 3f f4 a1 fb aa fc a9 3f 4b 69 07 fd a9 3f ba af ca a3 0f e4 54 b3 33 98 55 46 c0 7f 5b ec a4 1b 11 9e 7e ca b5 56 a9 a4 ff 00 49 4f ee ab f2 a6 ce a9 a5 7f 49 4f ee ab f2 a2 1d c8 a3 33 7d e1 e6 aa 55 66 3c ea 3a ed 79 e6 ae 4e a5 a5 7f 4a 4f ee ab f2 a6 57 a8 69 59 3e b6 8e 3c 15 f9 51 0e e4 51 99 9e f0 f3 51 2c 59 4a 54 56 e1 84 a7 24 9f 01 45 79 78 ed f3 c8 42 41 ec d2 61 08 fb c9 f3 3f 65 3a ed b5 d3 80 06 da 25 b3 04 Data Ascii: y!Hm cQZuCcbbbT]`IRoj/U5wrn!ip9$~:og8xpWU??Ki?T3UF[~VIOIO3}Uf<:yNJOWiY><QQQ,YJTV$EyxBAa?e:%
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 45 3e 3b 55 c1 ab 97 1d 5b 9a 55 a9 59 32 97 1c 1e 64 0e 0e 79 aa 87 e3 d5 d0 af 2d bf 3c cd 6a c4 b9 a6 a5 32 d1 95 a6 90 80 8c 13 1d fd 2f 10 1c ec ce 15 dc 49 ea 08 57 96 9a 9d ba 14 1b 29 4c 6e 1b 48 98 da 44 4e 49 33 e3 54 ba ab ed 5c 5f 38 a6 49 28 10 01 88 24 cc 93 12 6a b0 29 49 3b 42 88 1e 1d 26 96 08 49 3f e7 3e ff 00 1a cd 4e 9b 5a f9 54 ba a3 8b 72 ae 8b e8 df a2 d6 37 96 76 b7 17 85 cf ac 50 59 1b b6 a7 6e e2 00 c0 eb 1c d7 46 d2 16 12 81 64 96 17 d9 15 ad 29 00 42 52 80 60 09 3d 07 4a cc e8 01 57 1e 8e 80 d9 8d 96 08 cf 82 d0 e2 c1 f8 d6 b3 43 79 48 6d 80 e1 51 df be 4a 8c 19 41 82 00 f0 1d 2a 9a b6 79 1b 2e 86 1d 8d 38 37 ba 01 74 c4 6f 6d d7 16 ba d0 2f b4 ff 00 5b 75 c4 04 b4 87 56 cb 67 70 2a 51 42 b0 63 a0 8e b4 f2 d5 8b 85 2c ca bd 72 Data Ascii: E>;U[UY2dy-<j2/IW)LnHDNI3T\_8I($j)I;B&I?>NZTr7vPYnFd)BR`=JWCyHmQJAy.87tom/[uVgpQBc,r
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ad a0 01 f5 c9 30 9c 0e f0 0a 80 3a 54 5c 0c 69 1b ab 1a f1 24 0e 4a d3 53 bb ba 66 f7 d5 5b 09 2d 15 b6 e2 42 a4 00 a5 0e f4 09 eb 19 ab cd 3e dc 2f 5b 61 e4 e4 7a bb 89 03 12 60 48 93 f1 ac f6 a8 9d da f5 b7 8c 31 3c 1c c6 45 5d da 6b 36 0c 6a 76 bb 9f 0b 59 70 b5 0d 82 ae f2 fb a2 49 02 00 ea 6a a6 03 99 96 ef 53 26 c5 68 74 bb b5 dc 5e 3e 85 e0 29 a5 94 26 20 00 95 41 1e 66 ad 9d 6c 26 da e4 71 f5 0e 0e bc 94 90 38 ac 07 a3 f7 77 ea d7 94 97 2d dc 69 b0 db a9 29 5e e3 de dc 09 32 40 00 9f 01 5b 6b f7 43 96 57 69 26 02 98 51 11 8c 29 24 1c f8 d7 49 ee a6 ea b4 f8 6d ca 2d 65 cf a4 ca cc c3 d6 e2 bf 31 bd fa 2c 73 c8 47 6e 10 d9 52 57 d9 a1 09 24 10 21 28 52 84 83 e2 40 aa f7 9c 51 42 c1 44 1d 8a db d7 db 12 09 3d 4c 55 06 95 ab a5 a5 90 f2 d7 bc 28 a9 Data Ascii: 0:T\i$JSf[-B>/[az`H1<E]k6jvYpIjS&ht^>)& Afl&q8w-i)^2@[kCWi&Q)$Im-e1,sGnRW$!(R@QBD=LU(
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 9e b9 8f 91 4f 06 14 49 3e ae 30 04 7d 5a 06 62 01 1d fc c5 2c b2 43 50 59 48 4c e4 94 22 00 88 c8 dc 20 0f 1a 57 a8 bc 22 1c eb 91 b9 59 fb 6a 3f a9 de 77 a1 c1 31 d5 6b 3c f4 8e b4 f8 2f f7 7e 28 e2 33 df f8 14 f2 0b 2a 75 90 3b 39 0b c6 11 31 3d 3b e4 83 e7 58 cd 7e c1 c7 b5 47 97 bf 68 05 a7 3d 95 1e eb 69 83 90 46 4d 6a 5a d3 ef 12 37 00 d2 88 32 09 5a c7 9c 71 55 ee 69 f7 57 0f ac b8 cb 26 60 1f ac 58 30 91 81 81 81 e5 53 0c 70 89 67 c7 f7 48 b9 8e 16 a8 47 87 ea 17 37 b9 b0 64 5e 5b db 39 76 90 e0 7d c5 ed 2d b8 67 78 48 00 18 80 47 5a b1 f4 7e d1 94 dd 0d 97 09 77 65 ba db da 96 d6 9e 55 33 24 0f 1c d6 b9 ef 47 db 76 e9 37 0b b5 68 ba 15 32 1e 70 71 04 63 6c 74 a6 53 66 de 94 0b 8d d9 b5 bc 95 1c 3c b3 ed 9c 92 0a 62 31 4b 30 61 cc ea 60 01 7d ff Data Ascii: OI>0}Zb,CPYHL" W"Yj?w1k</~(3*u;91=;X~Gh=iFMjZ72ZqUiW&`X0SpgHG7d^[9v}-gxHGZ~weU3$Gv7h2pqcltSf<b1K0a`}
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 3c e1 66 35 6a 51 aa 4b 49 87 00 1c 3a 2e 6a e3 97 0d dd 5c 38 e3 89 98 25 49 38 10 ac 00 01 cc d0 65 7b 99 50 23 12 01 54 19 04 e4 1f 0c e7 15 76 f6 84 d9 61 e5 5c 49 7b 7a 81 2d ca 80 cc 80 27 2a f3 35 00 b4 9b 74 98 59 ec 95 00 a9 04 02 15 cc 01 fe 66 b9 75 0b 9d 50 39 c6 5c e3 32 bd ad 1a 94 9f 4c 64 20 80 00 b6 9e 0a 34 b8 96 89 42 8f 22 70 3f 54 c8 27 ca a3 f7 f7 95 05 67 a8 9e 67 a7 ba a7 f6 a5 b7 56 42 14 5b 85 26 79 f6 c7 24 f5 f3 a8 24 73 5d 3c 3b 19 54 97 07 76 ac 48 fd 55 35 09 64 36 2d 16 2a 7d 9f 68 fd dd 9b 22 0f e9 0d f9 60 2a 54 04 98 35 27 d2 db fb 85 eb 77 76 fd c5 a3 d6 16 a4 08 ea ac 47 3c 88 a7 3d 1f d3 1f bd d5 34 e5 b6 52 10 d5 e3 45 72 40 24 4c 98 1d 62 b4 8a 2d 22 f2 f5 46 cc 36 be d9 dd ce 3a 90 a2 a0 56 60 a2 44 a5 3f 7d 73 3d Data Ascii: <f5jQKI:.j\8%I8e{P#Tva\I{z-'5tYfuP9\2Ld 4B"p?T'ggVB[&y$$s]<;TvHU5d6-}h"`*T5'wvG<=4REr@$Lb-"F6:V`D?}s=
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 1a 52 49 67 d5 df 0d 2d 21 a4 18 06 4a 8e 0c 13 80 3c 69 db 6b 5d 39 17 4a 6f b7 4e e4 a8 8f 65 33 83 04 49 15 8e 5b c5 60 93 ba 60 75 9f b7 91 51 45 c5 da 56 14 97 95 20 e0 98 26 7d e6 a9 a8 c9 d0 0f 92 9d 3a a4 13 24 fc d7 4d bf bb b3 b6 d3 17 b5 4a 42 09 19 04 6e 54 1e ea 60 f2 3c 47 5a cf 5a eb 16 4e 30 db 2f da 18 42 96 52 37 12 80 14 ad c5 24 75 4f 91 e2 b2 6b 75 f7 94 14 f3 aa 59 1c 6e 32 07 b8 70 28 89 31 4d 94 c0 6d fe 09 ba b1 ce 0b 46 9c ee b7 4c 5f 33 64 f2 5d b5 6e d5 62 e5 48 4e d6 41 09 6e 30 77 6e 9c 99 c7 8d 5f 39 ad 3c 84 06 ae 5b 4a 98 79 65 2a 54 90 a4 a4 88 91 88 11 cc 75 ae 58 c5 db d6 eb 4b 88 59 0a 0a 07 e5 9a d8 5a dd 39 ab 16 d0 f5 c2 fb a3 20 00 07 94 19 80 0d 5a cb 00 04 98 55 3d ce 7b 8b 9d a9 5b 24 ea f6 ee 34 e3 37 8c 96 8a Data Ascii: RIg-!J<ik]9JoNe3I[``uQEV &}:$MJBnT`<GZZN0/BR7$uOkuYn2p(1MmFL_3d]nbHNAn0wn_9<[Jye*TuXKYZ9 ZU={[$47
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ad 5e a0 0c 10 01 b9 3a 05 b0 7a f9 0f 24 f6 81 01 60 9e b9 8e 92 39 02 aa 96 fb 10 7e b5 1b 73 fa c0 56 3f 7b 02 60 0c 9c 9c 93 3e 33 4a 2e b5 1d dc 9f 95 72 7f ab 10 20 52 1f f2 5d 73 e8 86 97 66 35 4c ff 00 8a d4 e8 e8 d1 48 71 57 d7 fd 94 11 09 4b 6a 59 23 ac 40 8a 6f 51 bc d0 1a 57 e8 6f dc b9 93 ed 36 10 23 a7 53 59 65 be a5 a0 81 8f 21 39 fc ea 0a 42 89 29 54 f3 d7 c2 b9 06 a3 83 f3 03 e1 b2 ea f0 58 5b 94 f9 ee b4 ce 6a ac 5c 21 b6 83 71 b3 79 ef 67 70 50 88 81 e3 51 85 e5 ba 9d 2c 82 a2 a6 a7 69 82 4a 94 0e 4a 48 38 07 c2 a9 9b 1f 5a 02 54 41 06 3c 49 3c 40 f7 d4 a6 2d 6e 02 bb 46 5a 49 21 44 6f 12 4a 55 d6 41 38 f7 d5 4f a8 66 4c 2b 98 c1 10 d0 54 c1 76 f8 75 d7 7b 5d 85 44 25 49 92 95 1c f3 11 56 85 77 ae 32 e2 99 08 4e d4 2a 37 90 ac 91 0a 21 Data Ascii: ^:z$`9~sV?{`>3J.r R]sf5LHqWKjY#@oQWo6#SYe!9B)TX[j\!qygpPQ,iJJH8ZTA<I<@-nFZI!DoJUA8OfL+Tvu{]D%IVw2N*7!
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 09 57 ba 90 ba 7b 26 d4 55 27 34 d2 81 a7 54 48 51 04 51 41 a4 9a 6e 66 81 a4 a8 90 69 3b 8f 85 24 27 3e 34 ee 20 d3 09 c9 a7 ba 50 85 6b a7 db 34 a4 2e e1 f5 43 69 30 07 5c 09 27 e1 55 0e 2b 72 d6 47 b3 26 3d d3 8a 32 48 04 02 62 9a a7 26 21 28 bc a5 24 66 95 e3 44 28 e9 26 8c 1a 57 4a 46 69 7d 29 a1 68 fd 13 7d 4c eb 4c 41 8d e9 5a 0f c4 4d 75 55 ba e3 89 52 09 c2 d2 53 c0 e0 88 cf be b8 c6 8e ef 65 aa 58 af c1 e4 7c 89 83 5d 9d 63 92 53 93 31 f0 3c d4 9a 14 1c 74 5c 25 e6 cb 4f 3a d1 e5 0b 52 7e 29 31 4d e0 56 c7 d2 dd 21 16 eb 4d f3 20 ed 75 7b 5c 1d 02 88 90 47 be b1 a0 8e a0 d4 4d 8c 29 03 21 0d d5 71 a3 20 bb aa 58 24 75 7d 1e 78 49 99 fb 2a a0 6d 38 ad 37 a2 ad 6e d5 50 4a 64 21 b5 ab ca 62 01 fb 68 89 44 ae 96 b7 6e 89 3b 16 d6 49 e5 b8 3e 5c 13 Data Ascii: W{&U'4THQQAnfi;$'>4 Pk4.Ci0\'U+rG&=2Hb&!($fD(&WJFi})h}LLAZMuURSeX\|]cS1<t\%O:R~)1MV!M u{\GM)!q X$u}xI*m87nPJd!bhDn;I>\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49987	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	1999	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 611 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:40 UTC	611	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 31 39 32 36 31 2c 22 64 61 74 61 22 3a 7b 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"page","how":"beacon","client_ts":1701800019261,"data":{"canonicalUrl":"https://w
2023-12-05 18:13:40 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:40 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49988	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	2265	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:40 UTC	703	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 55 73 65 72 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 20 20 20 71 75 65 72 79 20 55 73 65 72 51 75 65 72 79 20 7b 20 20 20 20 20 75 73 65 72 20 7b 20 20 20 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 20 20 20 20 20 20 20 70 72 6f 66 69 6c 65 20 7b 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 4e 61 6d 65 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 75 73 65 72 49 6e 66 6f 20 7b 20 20 20 20 20 20 20 20 20 72 65 67 69 49 64 20 20 20 20 20 20 20 20 20 65 6e 74 69 74 6c 65 6d 65 6e 74 73 20 20 20 20 20 20 20 20 20 64 65 6d 6f 67 72 61 70 68 69 63 73 20 7b 20 20 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 53 75 62 73 Data Ascii: {"operationName":"UserQuery","variables":{},"query":" query UserQuery { user { __typename profile { displayName email } userInfo { regiId entitlements demographics { emailSubs
2023-12-05 18:13:40 UTC	1314	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 39 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 149access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:13:40 UTC	215	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, Origin, Accept-EncodingTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:40 UTC	149	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 2c 22 70 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 75 73 65 72 49 6e 66 6f 22 3a 7b 22 72 65 67 69 49 64 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 6c 65 6d 65 6e 74 73 22 3a 6e 75 6c 6c 2c 22 64 65 6d 6f 67 72 61 70 68 69 63 73 22 3a 6e 75 6c 6c 7d 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 44 65 74 61 69 6c 73 22 3a 6e 75 6c 6c 7d 7d 7d 0a Data Ascii: {"data":{"user":{"__typename":"User","profile":null,"userInfo":{"regiId":null,"entitlements":null,"demographics":null},"subscriptionDetails":null}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49989	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	682	OUT	GET /images/2023/12/04/multimedia/04israel-un-aid-01-bvqm/04israel-un-aid-01-bvqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 32 34 34 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 4f 36 4f 59 72 6d 43 6a 39 67 45 6f 6a 46 67 62 42 44 46 33 63 68 71 38 30 39 50 7a 77 47 55 42 57 38 4e 7a 2f 6b 6c 30 79 63 73 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 112442Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "O6OYrmCj9gEojFgbBDF3chq809PzwGUBW8Nz/kl0ycs"Expires: Tue, 05 Dec 2023 10
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 52 49 46 46 32 b7 01 00 57 45 42 50 56 50 38 20 26 b7 01 00 50 ee 05 9d 01 2a 00 04 ab 02 3e 91 3c 98 49 25 a3 22 a4 2a 97 fc d0 b0 12 09 63 6e 02 c2 3f 81 6d a8 ad b3 3b a2 3f cd 79 d9 cd 69 ef 0a 4c d3 6f ff 86 ed ca 23 fe 81 fe 57 f5 bb 5a f3 d8 03 8d bd a3 bf ab 3a 2c 74 a2 63 fa 9b fd f4 59 6f 83 c6 ff c7 e8 2f cb be 89 47 67 fd de 15 7c 9f fe 0f 39 4f 6a fe c7 ce 97 fe af 5c 1f dc 7f e0 fb 11 7f 84 f2 f0 fd d4 f8 21 fe 0b ff 57 e5 bf c2 0f ea 3f ee 7f 70 3d df 3f f3 7a ea fe ff ea 1f fd 87 fe 97 ad 97 ff 0f ff fe f0 ff dd bd 4f bf 9f 7f ce f5 a1 ff e7 fb d1 f1 1b fe 07 ff 37 ee e7 b5 cf ff 9f 60 0f ff 5e d9 7f c0 3f ff f1 94 79 34 f9 c7 f5 9f f6 7c 25 fc e3 ec 5f e0 7f 88 ff 45 ff 8f fc af cd f7 ee b9 4b f8 3f f3 3f f7 fa 17 f7 13 fb bf e8 3d b1 ff Data Ascii: RIFF2WEBPVP8 &P><I%"cn?m;?yiLo#WZ:,tcYo/Gg\|9Oj\!W?p=?zO7`^?y4\|%_EK??=
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: a4 6c 1c 26 3f 65 8f f8 b8 75 85 91 64 bc e8 01 97 67 d7 1a 3d b6 cf 21 7f f9 b6 e8 17 32 a3 fe 42 27 96 d6 f2 48 53 f4 ba 41 0c ce 9f d3 5c fc 8b 83 9b ff fa e9 b6 8b b6 81 60 5d f2 0f 87 12 7b 56 88 74 bc 4f 9f 43 37 e4 6a 21 f1 e1 23 5c e9 e7 1e 90 cb 5c 8d 85 d5 be 38 0c 9c 45 20 07 2f fd 25 01 c4 4d aa 03 35 71 ba 04 c4 8b ac 09 fe 97 82 08 4c 53 ff 25 40 b0 ac 9f 24 9c e9 00 ff a9 9c f2 44 58 a3 a2 02 f3 1b 5e b2 8c ea d5 4a 47 e0 7b 09 7f a7 b2 63 0f d9 4c 27 e1 04 1d 37 25 73 6a 35 b2 ed 96 dc a0 42 5b 97 47 3f 57 b1 8a 07 e8 5f 79 2a 8c ae 42 24 8a 40 07 34 9e a9 86 ff 36 c2 ec 2c 86 f9 23 9b 08 16 6e 60 bf fe 6f 84 6e 9d 35 b4 8f a9 7d a0 c1 a3 46 b2 76 9f e8 67 ac 19 5a 64 b7 90 1e da d7 93 10 e7 19 1c 32 a0 de 97 dd be ff e3 96 da eb 65 c9 d9 Data Ascii: l&?eudg=!2B'HSA\`]{VtOC7j!#\\8E /%M5qLS%@$DX^JG{cL'7%sj5B[G?W_y*B$@46,#n`on5}FvgZd2e
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: d7 df eb bf e3 44 59 46 ab 4c 39 b4 93 4b b6 12 13 a9 ba 80 60 58 66 3e df 60 81 10 cc 2b 2c 79 0f 8e 73 f3 d8 39 46 0c 00 a0 c4 8f 6b 40 66 5b f0 1a 9b 85 fb a9 28 03 c8 d5 c8 03 50 9e 13 18 97 90 24 54 d8 72 35 07 9f ed 3d e3 d6 cd 40 ce 91 06 43 0c 98 d7 3a 9f 81 8f ba 18 d2 ea cb d7 5b d4 95 62 8c df 05 04 fa d6 92 99 a8 9e 9a 1a 2d a6 9b 12 64 1b ee 03 2c 30 75 60 e1 9e 06 51 71 74 1a 34 c8 ec bd 57 c4 9a 29 fc 0b 95 23 5f 70 fa 4a fe 88 d3 eb 3c 0e 2a 93 f4 39 8d 58 ea 26 3a d5 f2 e1 28 ea b1 29 93 f1 a9 5b c3 e8 0d 02 e4 b7 c2 67 5b 8e 6d 31 bf e0 a9 67 83 9d a1 5d 4f b9 1a 81 da 15 7d c0 0f c0 d0 2c 6a db a4 c2 ca f4 c6 fe 11 6b c1 d0 75 37 73 eb 56 ca 94 4f 9b 39 5d bf b9 96 91 3e 65 2a ef 87 a0 e6 96 67 58 29 20 fa 15 ca 2f c2 c7 fd 3f 42 e2 2f Data Ascii: DYFL9K`Xf>`+,ys9Fk@f[(P$Tr5=@C:[b-d,0u`Qqt4W)#_pJ<9X&:()[g[m1g]O},jku7sVO9]>egX) /?B/
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 2e d8 32 59 51 eb df 80 67 89 24 c7 31 c4 33 ce 64 04 43 a3 7f 4e 40 50 99 e4 09 56 e7 12 38 66 9a f4 ec 69 c4 de 1c fc 95 ae 4a 36 a2 19 e7 55 32 71 74 b1 4e 31 f8 32 3b d3 6b ed cd 30 18 e8 da cf 14 d0 dc 6a f5 b5 b0 87 6d e5 5b 03 c2 c4 af 63 a6 a3 97 ef 17 60 d8 29 c2 79 8f d5 09 72 22 b2 5e ed c0 84 f7 c8 5d 50 b1 e2 2a 44 52 5f 59 6d 09 a7 ec fe 51 d2 d3 4b 00 dd 68 93 26 7f 14 53 27 cb ee ce b2 87 36 2a 0e 7d b1 ec 81 02 94 0a 0d d7 e9 3a 2f 01 f5 94 6e 0b 06 86 7f fa 52 31 22 6b bb 95 37 07 64 6d 0d 3d 94 91 f4 ea fa 23 7f c0 16 b2 a7 c8 5d 3d 6b 07 69 8d 17 eb e3 93 b9 9c 30 57 18 11 83 2c 90 b2 cc 44 70 ed 4a b1 f4 e0 b3 bb b4 1f e6 5b 1a 74 88 2a 33 91 a8 66 e5 37 01 1c 51 a0 bb 28 3c 5a 10 42 04 9a 99 ed 7b a5 ca 3c 82 76 44 63 74 19 29 b4 86 Data Ascii: .2YQg$13dCN@PV8fiJ6U2qtN12;k0jm[c`)yr"^]PDR_YmQKh&S'6}:/nR1"k7dm=#]=ki0W,DpJ[t*3f7Q(<ZB{<vDct)
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 0a bc b6 35 65 85 3d b4 d2 6a e7 fc 14 bb 81 e1 0c e2 25 d3 07 a9 b6 a4 b3 23 a0 e0 8e 56 ad 07 18 a0 8c 60 1c 7d 31 be be ec 6c 75 37 76 76 7c b4 f7 80 1a ac 58 41 c1 fd aa e0 5e a6 a3 e3 27 f3 68 cb 38 48 c5 85 ab b0 6d aa 4b 45 4d cf 4d 57 af a1 de 0d a9 93 d4 8b 74 b6 82 05 ad cd c7 16 02 53 90 4d 57 ee e1 b2 e8 f9 70 e6 40 5a 51 82 d7 69 65 7a 4d ef 87 f7 6d cc c6 90 6a 6f 25 04 4b b1 01 68 1b 2c c9 d7 92 96 87 54 be 1e b9 bd 1d 63 7f e9 49 9d fc 81 57 3a 8d fe 2d bd 69 a6 8c c4 bf 65 e4 16 96 66 32 d3 e4 df ff ef ba 3d 83 72 3d 5f df fc a8 e8 8a 91 9b 1b 0b 70 46 f9 29 c3 a1 5d 56 dd 69 ed 50 ea 82 4b 77 f3 9a d2 16 10 8e 22 ce 74 33 fb c9 96 ef 3c 69 13 f3 57 cb 9f 54 d6 13 46 eb cc 2d e7 07 7b 21 ef ce 86 82 f4 06 5d 92 6b f7 6a ee 03 9a 04 b9 ae Data Ascii: 5e=j%#V`}1lu7vv\|XA^'h8HmKEMMWtSMWp@ZQiezMmjo%Kh,TcIW:-ief2=r=_pF)]ViPKw"t3<iWTF-{!]kj
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 17 e2 38 fd 1b cf a1 3e 5a ac a5 79 3d 71 a6 a2 b9 b1 78 61 5e ec b7 61 5f c7 53 d5 7b ef 70 3d 7a 92 32 30 17 39 2b 7f 82 af 9e 72 86 dc 10 34 70 9d 87 c5 5e 0c 82 15 ce b7 e2 a7 03 b9 31 da d3 6f ec b2 b3 a1 f6 15 0b 79 fb 89 29 7e 48 ae 9f d0 ec 31 ef 4d dc d0 2c dc 9c cb d8 1f 6c f2 8d 4c fd 08 29 84 f3 0d 61 d1 55 09 37 fd f7 ec e7 e7 54 d3 fb d1 98 38 51 e9 9a 9e 2c c8 32 72 0a a2 55 a9 9a 36 0e 03 08 cb aa 0a 35 c3 34 96 5a 7f 1a e0 d6 4e 3c 3d 2e 9e 7c 43 a5 d4 57 a1 21 7d b2 a0 d4 f3 c8 3c e6 96 fe 4f f2 68 4f 3e 7f 8c bf ce 41 b9 2d 3d f2 b0 11 e7 b9 11 fd 00 48 28 76 60 16 a3 b2 b6 f2 aa d8 42 34 62 9c fc b5 bb f9 07 3b f9 ff 51 d1 d8 9e 09 84 90 f2 ca 36 fc bf 0b 7b 39 70 3c b6 7a ea 1c fc e4 26 25 1f c4 c2 1c 50 4e 5b 5d 48 d7 fd 64 3a cd 14 Data Ascii: 8>Zy=qxa^a_S{p=z209+r4p^1oy)~H1M,lL)aU7T8Q,2rU654ZN<=.\|CW!}<OhO>A-=H(v`B4b;Q6{9p<z&%PN[]Hd:
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 12 3d 51 d6 b1 f1 29 67 8a ee c7 c4 63 8e 83 d0 91 d3 73 88 43 1e 82 bd 70 9a e7 46 af 9b f5 8c 5d 6a ee e6 ab 45 75 72 23 d7 f4 42 b3 2b 34 eb ba 5d 89 b5 1c 0b 67 35 dc 3e 36 d8 ec 4c f0 65 a3 b0 18 a4 ba 49 6f 45 40 ff 06 9c 1a 57 0b d6 fd c3 fc f5 9e dc b8 f8 b4 e0 5d 5c 73 90 0c ff 4d 63 74 33 b7 ff 86 99 c8 80 c6 4e 05 47 89 9f 69 6e b4 a6 40 e3 c8 55 07 ed cd a1 41 f3 29 7e b4 26 c0 32 1d aa 1e ca b2 a8 39 ed a8 e0 2f 37 ba aa 07 2a 70 46 38 fa e2 40 ec 81 2e 1d 60 a4 79 d4 a7 63 04 bd 7d bb 46 c1 33 cb 4d fb 6c bf b3 1f 0e fe b2 57 e3 3d cf 48 86 36 96 4f 4c fb 7a 4e b9 af f5 d1 dc e2 5e 1e a9 e2 65 8e 32 b0 07 1f 72 cc e8 b8 3d 8b fa 7b ba 56 8a e9 4a 49 b5 99 13 5e 01 db 79 9e 70 33 13 b0 9c ee fe ba 28 8f 02 b2 7a be 52 8f 86 64 05 af 33 69 fc Data Ascii: =Q)gcsCpF]jEur#B+4]g5>6LeIoE@W]\sMct3NGin@UA)~&29/7*pF8@.`yc}F3MlW=H6OLzN^e2r={VJI^yp3(zRd3i
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: b2 c4 a6 b2 88 39 71 57 ba 84 21 83 f5 5c 3d ee 7d a1 0b 03 1d de 17 5e 9e 4d c3 18 b7 7a 73 1c 2a 47 c4 47 93 eb 39 5b e2 8d e4 62 2b 1f 44 5c cd 55 94 4e 85 be 3f 0d 85 a9 eb f5 92 4e 5b 7f fc a8 4b e3 0f 42 11 36 97 de e3 72 7d b4 5c 31 96 49 ee 18 43 2b 82 93 91 33 2e ac d4 42 02 54 83 6f 27 3e 2a 4d 1a d3 ac 2b 94 ed 62 4d 7d 12 7b 5e 82 50 bb 2f 2f b0 35 ca c3 8b b5 fd 4f 82 1f c2 f2 f4 40 43 b7 b1 d4 a7 12 f0 27 fa 6f 08 d4 c8 e6 0b 3d e6 48 53 41 41 27 45 47 df a3 09 ef 00 dd 30 3d 0c 30 3e ea 5a 3a 49 64 79 53 e4 b7 4e 7f 9d 34 4e e3 4a cf 4c 99 1f 9a b6 da ff 5b 25 68 d3 9c 0e 75 8d ec 5f 5d da ca 96 94 27 8f 1b ec ef 94 e2 cf ef 44 ca 4c ed 62 8c 27 a9 d8 79 c0 16 32 6b 06 b6 fe c8 ab 99 d8 ff f0 6d 6c 73 51 0a ff c8 f4 ce 95 1f 64 33 ed 6c fc Data Ascii: 9qW!\=}^MzsGG9[b+D\UN?N[KB6r}\1IC+3.BTo'>M+bM}{^P//5O@C'o=HSAA'EG0=0>Z:IdySN4NJL[%hu_]'DLb'y2kmlsQd3l
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 58 8f e5 ca d1 02 01 db 72 a2 6f aa 25 ad 62 d4 35 88 6e a3 40 2c 8c 0f 46 45 8c 17 da ba 08 57 ab 3a d2 72 3a 25 43 9a 95 5e 18 f0 35 3a e9 3c ea 89 7e 83 dc e5 0f d6 ac 3f 98 72 bb 21 c5 d1 fa 64 7e 51 90 49 a5 41 56 f9 4d bf 51 3b 18 41 a6 42 03 2a 42 75 af 7d a7 db 1d b0 7e 6b e4 98 b1 27 91 b9 a8 d9 ba 39 50 52 75 1e 0d 06 b8 9a c1 12 63 ae b4 17 d4 4e 0c 56 ff e3 22 b0 e7 2c d0 40 cd cf d1 ac de 42 6a 54 05 e6 81 5b ef 3c 1a f5 0b 3a 1f d4 db de c6 f9 8b d7 c3 0d bd 34 7e f0 ce 52 a7 06 2e 7e e1 a9 cc ab c5 9b a4 6f 4b f1 c5 d7 dc 9f 99 a8 89 72 62 bd 24 54 b2 0d fb d4 f6 5f 2d 5b b2 d6 6e e3 ab 41 a7 f6 9c 8d 30 b0 71 5e 0f f4 bd 2d 9b e2 1e d8 15 64 09 95 ab 23 07 47 9c 35 fc f9 23 f3 85 6d bc 28 6a 41 f9 3d 03 70 85 30 08 9f e7 7c 75 a8 ef de e4 Data Ascii: Xro%b5n@,FEW:r:%C^5:<~?r!d~QIAVMQ;AB*Bu}~k'9PRucNV",@BjT[<:4~R.~oKrb$T_-[nA0q^-d#G5#m(jA=p0\|u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49990	52.3.42.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	1826	OUT	GET /als?uri=nyt%3A%2F%2Farticle%2F5802e4f2-c830-5f17-ab9e-b5740b9fff98&typ=&prop=nyt&plat=web HTTP/1.1 Host: als-svc.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:40 UTC	770	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 44 4e 54 2c 20 58 2d 43 75 73 74 6f 6d 48 65 61 64 65 72 2c 20 4b 65 65 70 2d 41 6c 69 76 65 2c 20 55 73 65 72 2d 41 67 65 6e 74 2c 20 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 2c 20 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 2c 20 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 43 6f 6f 6b 69 65 2c 20 41 63 63 65 70 74 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 78 2d 61 70 69 2d 6b 65 79 2c 20 6e 79 74 2d 61 0d 0a 61 63 63 65 73 73 2d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: DNT, X-CustomHeader, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Cookie, Accept, x-requested-by, x-api-key, nyt-aaccess-
2023-12-05 18:13:40 UTC	1557	IN	Data Raw: 7b 22 61 6c 73 5f 74 65 73 74 5f 63 6c 69 65 6e 74 73 69 64 65 22 3a 22 77 65 62 5f 6e 6f 6e 65 5f 6c 6f 77 5f 32 30 32 33 31 32 30 35 31 38 31 33 34 30 22 2c 22 55 73 65 72 22 3a 7b 22 61 69 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 72 65 67 69 49 64 22 3a 22 30 22 2c 22 62 74 22 3a 22 22 2c 22 73 75 62 22 3a 22 61 6e 6f 6e 22 2c 22 69 73 4c 6f 67 67 65 64 49 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6d 6b 74 67 22 3a 22 74 79 70 65 5f 61 6e 6f 6e 2c 6c 6f 67 66 2c 61 62 66 22 7d 2c 22 41 73 73 65 74 22 3a 7b 22 70 74 22 3a 22 6e 74 31 30 2c 6e 74 31 32 2c 6e 74 31 33 2c 6e 74 31 34 2c 6e 74 31 35 2c 6e 74 31 36 2c 6e 74 31 38 2c 6e 74 32 2c 6e 74 33 2c 6e 74 34 Data Ascii: {"als_test_clientside":"web_none_low_20231205181340","User":{"aid":"XbK7A_KO3s8XVA_FdXv5zD","userType":"anon","regiId":"0","bt":"","sub":"anon","isLoggedIn":"false","mktg":"type_anon,logf,abf"},"Asset":{"pt":"nt10,nt12,nt13,nt14,nt15,nt16,nt18,nt2,nt3,nt4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49991	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	1995	OUT	GET /vi-assets/static-assets/story-ba1053d3a59448a9f2d0.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156
2023-12-05 18:13:40 UTC	1318	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 39 35 38 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 5a 39 72 57 73 37 47 46 56 49 54 72 55 43 76 6a 55 48 54 6e 63 47 75 6e 45 78 4e 50 32 69 2d 5a 75 56 4a 71 63 45 6d 4e 55 30 74 6f 6c 79 62 2d 44 36 75 43 32 6f 34 34 63 58 73 6d 79 52 35 48 45 4f 59 55 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 39 36 36 33 30 32 38 31 37 36 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 2869582X-GUploader-UploadID: ABPtcPqZ9rWs7GFVITrUCvjUHTncGunExNP2i-ZuVJqcEmNU0tolyb-D6uC2o44cXsmyR5HEOYUx-goog-generation: 1701796630281765x-goog-metageneration: 1x-goog-stored-content-encoding:
2023-12-05 18:13:40 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 33 2c 35 2c 38 2c 31 30 2c 31 37 2c 32 30 2c 32 31 2c 36 30 2c 38 31 2c 31 34 34 2c 31 34 35 2c 31 35 30 2c 31 36 33 2c 31 36 34 5d 2c 7b 22 2b 2f 54 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 6f 3b 76 61 72 20 72 3d 69 28 6e 28 22 71 31 74 49 22 29 29 2c 61 3d 28 69 28 6e 28 22 31 37 78 39 22 29 29 2c 69 28 6e 28 22 77 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[133,5,8,10,17,20,21,60,81,144,145,150,163,164],{"+/Tm":function(e,t,n){"use strict";var i=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=o;var r=i(n("q1tI")),a=(i(n("17x9")),i(n("w
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 65 74 3a 32 70 78 3b 7d 40 73 75 70 70 6f 72 74 73 20 73 65 6c 65 63 74 6f 72 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 26 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 7d 26 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 32 70 78 20 31 70 78 20 72 67 62 28 30 20 39 35 20 32 30 34 29 3b 6f 75 74 6c 69 6e 65 3a 33 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 3b 7d 7d 7d 22 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 6f 6e 42 61 72 54 68 65 6d 65 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 22 3a 74 2c 69 3d 65 2e 64 72 6f 70 53 68 61 64 6f 77 2c 72 3d 76 6f 69 64 20 30 Data Ascii: et:2px;}@supports selector(:focus-visible){&:focus{box-shadow:none;}&:focus-visible{box-shadow:0 0 2px 1px rgb(0 95 204);outline:3px solid transparent;outline-offset:2px;}}}")},O=function(e){var t=e.actionBarTheme,n=void 0===t?"":t,i=e.dropShadow,r=void 0
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 61 2c 72 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 61 3d 65 2e 6c 69 6e 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 4f 76 65 72 72 69 64 65 73 2c 6f 3d 65 2e 72 65 6e 64 65 72 52 65 6c 61 74 65 64 2c 6c 3d 65 2e 69 73 4c 61 7a 79 2c 75 3d 65 2e 73 68 6f 77 49 6d 61 67 65 43 72 65 64 69 74 73 2c 66 3d 4f 62 6a 65 63 74 28 78 2e 75 73 65 54 68 65 6d 65 29 28 29 2e 6e 6f 46 6f 6c 6c 6f 77 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b Data Ascii: a,r=e.className,a=e.linkTrackingParamOverrides,o=e.renderRelated,l=e.isLazy,u=e.showImageCredits,f=Object(x.useTheme)().noFollowExternalLinks;if(!i)return null;var p=function(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 67 6f 2c 4f 3d 78 2e 75 72 6c 2c 6b 3d 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 45 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6c 2e 62 72 61 6e 64 42 61 72 4c 6f 67 6f 43 6c 61 73 73 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 77 2c 6b 69 63 6b 65 72 3a 64 2c 73 69 7a 65 3a 68 7d 29 3b 72 65 74 75 72 6e 20 6b 3f 28 76 26 26 28 6b 3d 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 2c 7b 68 72 65 66 3a 4f 7c 7c 22 23 22 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 73 74 6f 72 79 2d 73 65 63 74 69 6f 6e 22 7d 2c 6b 29 29 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 73 2e 63 78 29 28 6c 2e 62 72 61 6e 64 42 61 72 43 Data Ascii: go,O=x.url,k=a.default.createElement(E,{className:l.brandBarLogoClass,displayName:w,kicker:d,size:h});return k?(v&&(k=a.default.createElement("a",{href:O\|\|"#","data-testid":"story-section"},k)),a.default.createElement("div",{className:(0,s.cx)(l.brandBarC
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 3d 63 3b 76 61 72 20 75 3d 28 30 2c 72 2e 63 73 73 29 28 22 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 22 29 3b 74 2e 62 75 74 74 6f 6e 57 72 61 70 70 65 72 43 6c 61 73 73 3d 75 7d 2c 22 30 6f 42 56 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 69 28 6e 28 22 51 49 4c 6d 22 29 29 2c 61 3d 69 28 6e 28 22 6c 77 73 45 22 29 29 2c 6f 3d 69 28 6e 28 22 57 38 4d 4a 22 29 29 2c 73 3d 69 28 6e 28 22 37 57 32 69 22 29 29 2c 6c 3d 69 28 6e 28 22 61 Data Ascii: =c;var u=(0,r.css)("text-align:center;");t.buttonWrapperClass=u},"0oBV":function(e,t,n){"use strict";var i=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var r=i(n("QILm")),a=i(n("lwsE")),o=i(n("W8MJ")),s=i(n("7W2i")),l=i(n("a
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 28 68 3d 6e 75 6c 6c 3d 3d 3d 28 6d 3d 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 72 65 73 70 6f 6e 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 76 6f 69 64 20 30 3a 6d 2e 75 73 65 72 73 74 61 74 65 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 3f 76 6f 69 64 20 30 3a 68 2e 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 4d 65 73 73 61 67 65 43 61 70 73 2c 43 3d 6e 75 6c 6c 3b 69 66 28 54 29 69 66 28 28 4d 3d 54 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 22 64 6f 63 6b 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 75 6e 69 74 29 26 26 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 61 6d 70 61 69 67 6e 29 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d Data Ascii: null===(h=null===(m=null==w?void 0:w.response)\|\|void 0===m?void 0:m.userstate())\|\|void 0===h?void 0:h.messageSelectionMessageCaps,C=null;if(T)if((M=T).forEach((function(e){var t,n;"dock"===(null==e?void 0:e.unit)&&(null==e?void 0:e.campaign)===(null===(t=
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 72 28 29 28 22 73 76 67 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 33 22 2c 77 69 64 74 68 3a 22 31 36 22 2c 68 65 69 67 68 74 3a 22 31 33 22 7d 2c 76 6f 69 64 20 30 2c 72 28 29 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 52 75 6c 65 3a 22 65 76 65 6e 6f 64 64 22 2c 63 6c 69 70 52 75 6c 65 3a 22 65 76 65 6e 6f 64 64 22 2c 64 3a 22 4d 31 35 2e 34 30 36 20 35 2e 33 35 39 4c 38 2e 39 37 38 20 30 76 33 2e 32 31 35 43 33 2e 38 32 20 33 2e 32 31 35 2e 34 30 36 20 38 2e 31 30 37 2e 34 30 36 20 31 32 2e 36 36 20 31 2e 36 35 33 20 39 2e 31 33 33 20 34 2e 32 39 20 37 2e 35 31 37 20 38 2e 39 37 38 20 37 2e 35 31 37 76 33 2e 32 6c 36 2e 34 32 38 2d 35 2e 33 35 38 7a 22 2c 66 69 6c 6c 3a 6e 7d 29 Data Ascii: ;return r()("svg",{className:t,viewBox:"0 0 16 13",width:"16",height:"13"},void 0,r()("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M15.406 5.359L8.978 0v3.215C3.82 3.215.406 8.107.406 12.66 1.653 9.133 4.29 7.517 8.978 7.517v3.2l6.428-5.358z",fill:n})
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 79 3a 22 2c 61 2e 64 65 66 61 75 6c 74 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 61 2e 64 65 66 61 75 6c 74 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 62 6f 6c 64 2c 22 3b 22 2c 75 28 65 2c 7b 66 6f 6e 74 53 69 7a 65 3a 5b 31 35 2c 31 36 5d 2c 6c 69 6e 65 48 65 69 67 68 74 3a 5b 32 30 2c 32 32 5d 7d 29 2c 22 3b 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 22 29 3b 72 65 74 75 72 6e 22 63 6f 6d 70 61 63 74 22 3d 3d 3d 65 2e 74 68 65 6d 65 2e 64 69 73 70 6c 61 79 53 74 79 6c 65 7c 7c 22 69 6e 74 65 6e 74 69 6f 6e 61 6c 22 3d 3d 3d 65 2e 74 68 65 6d 65 2e 64 69 73 70 6c Data Ascii: y:",a.default.font.franklinBase,";font-weight:",a.default.font.weight.bold,";",u(e,{fontSize:[15,16],lineHeight:[20,22]}),";a{text-decoration:underline;}a:hover{text-decoration:none;}");return"compact"===e.theme.displayStyle\|\|"intentional"===e.theme.displ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49994	35.190.80.1	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	530	OUT	OPTIONS /report/v3?s=ZTE58r3lhnis%2FhN2fgE9or%2FqiTmXLkGXCam5m3eIJ0cEv8dAkhQgwW4USdv1FujwFqjZhJPHeto3W7e2dhYvQdsblpSByEHS2zTPcgM88hVo86GLTFW2d%2FzsTZDOCSk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://iteratehq.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 38 36 34 30 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 2c 20 63 6f 6e 74 65 6e 74 2d 74 79 70 65 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c Data Ascii: HTTP/1.1 200 OKContent-Length: 0access-control-max-age: 86400access-control-allow-methods: POST, OPTIONSaccess-control-allow-origin: *access-control-allow-headers: content-length, content-typedate: Tue, 05 Dec 2023 18:13:40 GMTVia: 1.1 googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49993	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	2061	OUT	GET /ads/prebid8.1.0.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156 If-None-Match: "69d0b1569bbd0b87116d60db3a12cd34" If-Modified-Since: Mon, 26 Jun 2023 19:11:32 GMT
2023-12-05 18:13:40 UTC	1372	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 34 20 4e 6f 74 20 4d 6f 64 69 66 69 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 54 61 67 3a 20 22 36 39 64 30 62 31 35 36 39 62 62 64 30 62 38 37 31 31 36 64 36 30 64 62 33 61 31 32 63 64 33 34 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 32 30 32 33 20 31 39 3a 34 35 3a 32 30 20 47 4d 54 0d 0a 41 67 Data Ascii: HTTP/1.1 304 Not ModifiedConnection: closeDate: Tue, 05 Dec 2023 18:13:40 GMTCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicETag: "69d0b1569bbd0b87116d60db3a12cd34"Expires: Sun, 19 Nov 2023 19:45:20 GMTAg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49995	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	457	OUT	GET /images/2023/12/05/multimedia/05nat-collegepresidents-ktzm/05nat-collegepresidents-ktzm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1203	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 39 39 30 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 70 51 54 77 47 53 33 63 7a 54 46 4b 53 69 6f 67 64 42 76 39 42 37 43 65 4d 4a 4c 78 64 4e 5a 2f 75 49 4b 6d 58 57 6a 31 50 77 45 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 36 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 79900Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "pQTwGS3czTFKSiogdBv9B7CeMJLxdNZ/uIKmXWj1PwE"Expires: Tue, 05 Dec 2023 16:
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 97 43 b3 6b b6 49 23 45 d8 00 b6 f8 ce 4d 77 5c e3 23 fd 36 4f 20 fb 7e 5d 55 cf d4 3a 59 a5 9e 57 97 c8 f7 12 eb fe 6b ef ec b2 e0 df 4b 6d 67 d7 c1 6d 14 bd 8e 63 9c d7 60 82 a6 c2 dd af b0 6f 69 da 46 32 4f 5e e1 45 ee 74 af 73 ee c9 2a e9 a0 9b 4e f0 1c d7 0b 68 22 c1 16 0f 06 8f 75 d1 3e 13 6b 73 5c 19 21 18 70 70 2d 7d 3a c5 0c 8e 7d f8 fa 2d 1a 88 db e6 dc 50 bd 8d 24 36 8d 9a 7d 64 59 eb ec b2 91 4e 15 90 0a b5 f2 3e 40 dd d2 97 64 0a 24 fd 3e 54 6a 5b a2 d3 e8 a4 40 19 07 06 fa df e4 ad 6e d2 08 37 75 8a 1d 6f 20 ab 5c f2 e1 1c 2f 11 b0 37 77 e1 68 2e bb c9 24 1c 92 86 6c 69 fc 56 e3 63 36 28 93 57 f4 4b 75 94 10 80 6e d3 9a 70 3c 74 a2 ac 88 bd ee ad bb bd 3f 38 1d 7d a9 13 47 e5 bb cb dc d7 bf 1e a6 dd 71 c5 9e 54 bc 99 a3 dd 25 3d 9b 48 04 e4 Data Ascii: CkI#EMw\#6O ~]U:YWkKmgmc`oiF2O^Ets*Nh"u>ks\!pp-}:}-P$6}dYN>@d$>Tj[@n7uo \/7wh.$liVc6(WKunp<t?8}GqT%=H
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 49 1e 98 bc 16 bd 8d 31 16 3d c6 36 35 a3 d4 68 70 e2 ba 39 6d 82 76 d2 49 b7 59 ca cd 19 a0 f0 4d 39 d6 b9 ac 13 c6 df 27 79 6e eb 01 e5 a3 03 69 06 8f 62 bd 1f 86 78 31 d4 98 e4 32 09 23 dc 41 3f 87 f0 3a b8 19 be cb ce c7 e1 d3 99 a1 31 b4 ff 00 10 07 b4 b9 cd 68 7b 49 22 c1 c0 37 58 3d 57 b4 f0 6f 07 d4 43 27 de 43 84 20 92 4b 1d 19 dd 64 d9 06 cd 01 f1 ca ba 3a 5f 33 52 0f e5 4b f5 5b aa 54 b9 ec 93 92 8a 7f 57 46 bf 17 d0 6a 23 d2 49 2e 92 77 07 86 7a a3 34 5b 21 27 26 dd 64 38 df d7 85 c5 f0 ed 43 34 fa 99 1d ac 73 98 00 3b 24 f5 36 22 cd b9 f4 64 3a fb 2f 49 e3 9a ad 06 9b 4c d9 35 64 12 1d 71 b3 04 b9 c0 55 81 dc 77 e8 be 6e 7c 52 4d 5e a1 82 50 ff 00 21 8c 7b 63 8d ae 27 68 23 92 4e 49 ee 57 b7 e2 13 8c dc e2 bf 4a ba be 7e c7 08 3b 54 d9 e8 35 Data Ascii: I1=65hp9mvIYM9'ynibx12#A?:1h{I"7X=WoC'C Kd:_3RK[TWFj#I.wz4[!'&d8C4s;$6"d:/IL5dqUwn\|RM^P!{c'h#NIWJ~;T5
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 3a af 13 ac fb 53 39 12 bb 4d a7 73 1a 1a fa 7c 80 38 0d 99 04 01 59 3d 6f 85 89 47 4e 2f 73 59 34 9c da a5 c1 e3 3e d2 41 a8 97 c4 a7 71 d3 bf 7e 1d 86 16 30 33 86 ed 07 81 de fa af 45 f6 36 4f 0e 8b 51 1c 71 8d fa 87 6f 6b a4 01 cd a0 5a 08 07 34 45 8a 07 a2 c5 e3 7f 68 60 f1 2d 2e 9e 3d 3c b4 e0 d0 25 f3 23 da eb 26 f0 e0 4e 07 51 d5 79 df 0d f1 2d 6f 87 eb 59 34 2e 07 6b ff 00 05 d3 5c 09 cd 81 56 17 95 cd 43 56 d6 55 f2 76 a6 e1 4f 0e 8f b9 6a 64 31 96 39 c2 2f 24 02 64 73 ee db 42 c1 00 03 63 ba f9 47 86 c1 e1 be 8d 54 8e 7c b0 07 48 f9 e1 f4 8f 51 71 0c 2d 04 82 42 d9 e3 3e 3b a3 d6 f8 71 7b b5 0e 6e a5 e0 b5 d1 46 d0 19 40 50 25 c4 12 47 60 bc b3 bc 4f 53 ad 8e 1d 34 9b 40 63 63 63 1d 86 ed 6b 05 00 6a 81 bf 75 bd 5d 58 36 9e 1d 65 76 66 10 75 ee Data Ascii: :S9Ms\|8Y=oGN/sY4>Aq~03E6OQqokZ4Eh`-.=<%#&NQy-oY4.k\VCVUvOjd19/$dsBcGT\|HQq-B>;q{nF@P%G`OS4@ccckju]X6evfu
2023-12-05 18:13:40 UTC	14364	IN	Data Raw: 4d 9b e2 c1 b0 40 0a a8 a3 61 de d7 49 86 b8 55 03 9b 18 a1 ca 93 eb c9 9d a6 4b 75 35 d6 05 58 ba 20 83 d9 67 96 d3 f3 e3 c8 31 38 1b 3d 72 a5 64 ed 0b a7 a9 8a 47 08 21 86 3b b8 c3 ac 1b 16 32 6a f8 f7 5c cd cf 8c 96 b8 51 af 8f a1 5b 8c 94 95 a0 68 0f 89 9e 9d a0 e0 fe 20 70 7b d8 cf c2 ad af 1b 38 18 3f 5a 54 12 4a 41 69 e6 81 b2 9a 40 da 40 c0 be 99 f6 50 b9 0d 59 b1 fd 3e 52 63 5d b0 b8 7e 1f 9f d8 75 a5 b2 37 45 e5 96 ee 21 ce c1 c0 db 5d 09 2b 93 c7 57 92 a3 48 73 65 02 18 cd d5 74 ab 1d 6c f2 a4 d6 d3 29 ae 2c 04 0e 49 aa 27 91 63 90 54 20 74 91 06 39 ac 2c 00 d1 70 bf af c5 ad fa 8d 4c 0e 7b de 1b d1 b9 f7 e0 d0 35 6b ce f7 29 52 56 bf b9 70 61 74 9b 0e ec b9 c0 d1 7d 9c 8f e9 f2 88 09 2f 73 dc ed a2 8f 51 77 59 20 94 3e 5f 32 bf 88 4e 47 a6 8d Data Ascii: M@aIUKu5X g18=rdG!;2j\Q[h p{8?ZTJAi@@PY>Rc]~u7E!]+WHsetl),I'cT t9,pL{5k)RVpat}/sQwY >_2NG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50006	104.26.7.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	357	OUT	GET /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	610	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:13:40 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closevary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3
2023-12-05 18:13:40 UTC	117	IN	Data Raw: 36 66 0d 0a 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 31 31 32 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 74 79 70 65 22 3a 22 6e 6f 74 5f 66 6f 75 6e 64 22 2c 22 75 73 65 72 5f 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 5d 7d 0d 0a Data Ascii: 6f{"errors":[{"code":112,"message":"Endpoint not found","type":"not_found","user_message":"Endpoint not found"}]}
2023-12-05 18:13:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50003	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	473	OUT	GET /images/2023/12/05/multimedia/05israel-hamas-settler-visa-ban-vzbf/05israel-hamas-settler-visa-ban-vzbf-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1203	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 35 37 30 39 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 6f 4f 4b 4a 33 72 54 46 4d 77 61 32 4a 77 53 52 67 36 54 70 4a 2b 6a 69 34 4b 57 4e 59 49 6d 6d 6e 4c 63 70 4b 46 6a 73 51 69 67 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 95709Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "oOKJ3rTFMwa2JwSRg6TpJ+ji4KWNYImmnLcpKFjsQig"Expires: Tue, 05 Dec 2023 17:
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 00 b5 c7 5f ae e8 b6 80 c6 38 07 b0 43 5c 48 83 e8 b2 2b 61 ab 53 26 58 7e 6b d9 0d 0c 8d bd d4 3a 98 20 48 1b 2a 8c da 0a 3c 20 9b 48 28 b3 48 36 5e 9f 17 86 a6 d6 82 1a 01 70 33 f4 5e 53 f3 38 75 5b 46 5b af 02 2c 4e 67 1e 81 5d 0d 79 00 db 40 b3 98 4e 66 f4 fb 85 b3 4d b3 4c 1e 43 9a 52 1a 32 5e 3c 6e b6 e9 ac 9c a6 c5 05 50 45 67 ff 00 db aa 6b 45 42 e1 00 e8 3a 48 43 00 1c df 97 d9 43 dd 5c 90 0e 8a f1 19 58 64 5e 3e c2 53 1e 08 24 18 b7 05 1b 98 8a 8d 24 cc 8d 94 c4 80 37 9e 8b 9e e7 49 cb 1b a5 9a 8e 1a 85 4a d8 05 94 8b ed 3e fc 15 8c 8c 2d 0f 10 a9 ba a6 69 84 dc 2d 41 25 ae dc 7b a1 a7 56 03 aa b1 c0 d0 22 de 0f ac 04 a2 5c d2 5c 09 89 8f 35 62 b3 c3 aa 34 bb fc 42 ac e0 65 c0 69 3e 5a 6a a5 7f 40 1e d2 e7 b7 62 7d 55 63 48 99 b4 1f bb 2b 14 da Data Ascii: _8C\H+aS&X~k: H*< H(H6^p3^S8u[F[,Ng]y@NfMLCR2^<nPEgkEB:HCC\Xd^>S$$7IJ>-i-A%{V"\\5b4Bei>Zj@b}UcH+
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 61 f4 80 e0 f3 cb c9 5b 6b 5d 4c 99 07 2f aa b7 2b 03 33 17 0c af 3c 40 53 49 ef f0 99 d0 9f d9 5f ab 4e 8d 4e 76 d5 24 53 80 e0 38 fd 95 2e 4a a8 0a 95 9c 64 e6 3b 2a 9d e4 4d d5 d7 b4 12 49 3a fa 2a fd cb 4b a2 77 fa 26 9a ac 88 aa ea 84 59 b7 3d 12 0b dc 75 0b 53 b9 30 e2 32 e8 94 fc 2b cb a4 0b 58 79 ad 14 e2 14 66 41 12 8a 98 3d e0 ea b4 1d 87 0d 20 3a 01 85 5d d4 da c2 63 ee ca b7 a7 81 16 33 17 06 92 26 41 f6 d1 4b 99 63 63 70 3d b5 29 6c 82 1a d0 34 68 f5 95 71 c3 3b 69 81 1a 19 8e 27 55 93 74 d0 e8 4d 09 bb 5c 6d 04 fd f5 4b aa eb 8b 40 db d5 0b 4b da d7 13 ab 6c 7c 8c 29 aa 33 01 94 de 3a 18 37 4e be 60 12 f6 87 38 3b 69 95 a2 c3 fd 87 07 1d 07 ca e1 67 c5 9a ae 53 33 44 46 ae 39 51 2e 17 d4 68 45 41 99 c4 f2 9f 52 97 4a 8e 72 67 44 f7 d3 78 6b Data Ascii: a[k]L/+3<@SI_NNv$S8.Jd;MI:Kw&Y=uS02+XyfA= :]c3&AKccp=)l4hq;i'UtM\mK@Kl\|)3:7N`8;igS3DF9Q.hEARJrgDxk
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 4f aa 80 3f b8 d6 44 dc 7a e8 ac 32 a7 f7 8d 30 3e 12 01 ff 00 e4 25 63 29 ca 5f c9 49 18 f5 fc 52 f0 22 f0 e1 fe c9 34 8c 82 d3 a8 d3 a7 04 d6 38 17 39 87 47 58 f5 d8 f9 2a e0 16 bc f1 07 de 57 4a e2 84 37 ba 26 5d b4 1e aa d5 06 7c 6d 32 03 48 f5 08 58 c2 49 23 49 fe 13 bb cc ad 74 c5 e0 7a ac e5 26 f0 55 09 ae e2 ea ac 6b 74 11 3f 40 55 c6 d8 5d 05 3a 41 a5 ee 3a ca 22 4d ba fd ca 56 9d 50 d2 05 c4 5d 20 9e 13 a2 79 6c 92 52 5c 36 e7 e4 9a 65 d0 a9 5d 26 7c 94 10 3c 5f 77 45 6f 65 41 40 93 64 b3 37 44 e3 ae c8 0e bf 7a a1 08 7e 1c f8 cd fe c2 b0 fb 2a d8 61 fd c3 d0 ab af 64 08 05 67 3c 48 df 4d 7c a5 37 12 66 52 c0 82 9e e6 fc 92 9a 0b 9d 13 f7 c1 34 f0 53 59 39 b4 0b 9c 23 62 ae 06 64 8f aa 9a 79 9b af d8 09 af 82 27 97 9a ca 53 6d d1 a4 74 d2 57 45 Data Ascii: O?Dz20>%c)_IR"489GXWJ7&]\|m2HXI#Itz&Ukt?@U]:A:"MVP] ylR\6e]&\|<_wEoeA@d7Dz~adg<HM\|7fR4SY9#bdy'SmtWE
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: f2 4c a7 4e 5c 64 fc 20 18 e2 55 0a 75 9d 4c 10 35 3b fc d3 4e 26 1c 1c de 03 92 c5 c2 56 eb 82 d5 17 69 b8 b8 5f 52 53 0b 4d 92 69 b8 bb 2b 80 bc df 84 6c ac ba 35 d7 5e 2a 59 69 0b 26 c1 24 81 7e 13 f5 4f b4 14 97 01 7d 51 65 d1 5c d9 ca 0c a2 e2 87 37 92 ab 15 11 7b 21 71 17 e8 9a d0 20 fd ee 96 e0 24 e8 9a 79 0a 22 9b 83 5d e4 b4 05 40 e6 f9 ac ab ca 36 54 73 22 12 94 2f 3d ca 84 b6 97 1e 4d d2 99 3d e0 23 63 f6 14 17 87 4d c7 d5 73 6a 35 a4 ca 9a 69 71 93 4b 56 b2 68 90 22 4a 43 dc 40 30 89 ae 05 a0 8f bf 34 87 97 66 24 f1 59 45 64 da f0 59 63 09 8e 8a 7b bd 7a ab 34 4b 4b 02 97 e9 6e 2b 27 37 74 75 46 0a 93 2a c5 80 3f 65 03 9b 74 c7 10 67 f8 49 cc 41 82 ad 59 2e 8a ef d2 65 57 cc d0 0a b6 f0 08 24 2c ba 93 27 aa e9 d3 ce 0e 5d 5f 96 98 4e 70 f6 49 Data Ascii: LN\d UuL5;N&Vi_RSMi+l5^Yi&$~O}Qe\7{!q $y"]@6Ts"/=M=#cMsj5iqKVh"JC@04f$YEdYc{z4KKn+'7tuF?etgIAY.eW$,']_NpI
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 61 65 57 89 2b 6d 35 91 31 32 7e ec 8d a4 89 23 82 04 da 4d cf 6c d1 cd 68 c1 21 42 6f ae aa d5 2a 12 d3 3c 3a 2e c3 d2 97 bf 78 3a e9 e8 af b2 9d c5 8a ce 73 ac 23 58 c6 c7 50 66 5a 63 a2 6c 03 e8 80 66 b9 fe 14 02 eb dc ac 1b 35 48 92 0e df 65 2c b6 01 28 c9 e0 bb 61 cc 29 b2 d2 2a 3c 6b f6 12 4f 18 57 1c 2c 7a 24 16 eb f7 ba a8 c8 7b 05 cf c9 46 a8 80 d6 50 c1 ba b1 50 ab 09 4b 83 7b ec 9b b2 51 3f 7f 45 a2 21 aa 00 4c 88 e2 9e 79 f0 05 57 cc 27 cd 59 1e 20 4f df f0 9c bb 13 10 9b 58 81 11 64 45 f9 81 8d 51 53 a7 e1 94 39 00 93 f7 0b 2f 96 f8 35 5b a8 65 1a ee 60 21 59 0f 71 9b eb f7 e4 b3 0b a1 d6 5a 18 72 0b 41 e5 a2 8d 48 a4 b7 51 d1 a3 36 de db e0 b0 d0 2e 79 24 d4 70 16 52 6a 40 23 8a 48 04 c2 ce 2b 36 cd e4 f1 48 43 9e 44 de ca 93 c1 32 af 9a 73 Data Ascii: aeW+m512~#Mlh!Bo<:.x:s#XPfZclf5He,(a)<kOW,z${FPPK{Q?E!LyW'Y OXdEQS9/5[e`!YqZrAHQ6.y$pRj@#H+6HCD2s
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 8b 81 3f 7b 2a 75 1c 19 88 75 ee 1d f5 57 9a 5a 41 23 4e 4a 9f 60 12 f9 be 9a fb 2c 7a ed 70 79 5b 6e cb 1a c2 cc c4 80 08 e9 0a e0 f2 26 51 bd d1 83 63 78 b2 ed c7 44 40 d8 db 75 a3 1a 1b 87 a8 da 6f 13 a7 a2 d4 6d c1 59 0c 66 77 8d 23 6e ab 5f 0b 48 86 09 b9 58 6a d2 cf 73 7d 34 de 06 03 f4 42 e2 6e 9c 5a 60 88 d9 29 d2 16 1b 8d 94 45 90 e2 ef 35 20 1b df 6f aa 73 40 37 03 ea 8c 30 28 72 35 8c 38 2a 5c 8f 34 0e 56 5c cd 52 6d 74 d3 2f 68 19 04 4a 02 de 5b 2b 07 64 a7 1b 15 49 b0 69 15 5e d0 09 2a ab 8e bd 15 b7 df a7 d5 52 3b fd d9 74 c3 3c 9c ba 80 23 63 cc 15 01 aa cd 3a 42 0a b9 34 96 4c 92 6d 8d 65 4f 00 fb f6 40 ea 93 20 f0 e8 98 18 00 36 4a 2d 37 eb e4 b2 55 66 d4 e9 09 3b ab 78 57 06 c9 71 d9 55 73 40 50 c2 1a 44 e9 21 54 96 e8 d0 e1 2d b2 4c d1 Data Ascii: ?{uuWZA#NJ`,zpy[n&QcxD@uomYfw#n_HXjs}4BnZ`)E5 os@70(r58\4V\Rmt/hJ[+dIi^*R;t<#c:B4LmeO@ 6J-7Uf;xWqUs@PD!T-L
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 26 0c 0f 6d 12 9b 88 7f 78 6a 1d 64 ce c1 35 0c 7d 8b 49 60 f4 f8 7c 77 7e 71 0d 22 32 4d f6 89 85 18 6a f4 ea d5 ad 00 39 b2 0f 39 d0 d9 79 ba 66 b1 ef dd 4e 72 65 01 de 66 55 ce cf ef 1a f7 35 af 68 ce 07 8b 5d 75 03 9a 1c 52 bc 85 1e 8b 3d 1a 44 78 83 64 88 ea 52 71 58 3a 58 87 02 f7 10 5a 2d b2 75 3c 35 26 5c dc f1 37 d1 30 86 13 3d 54 5b 20 c3 7f 64 18 39 6a 58 85 76 95 3e ee 9b 58 ed 60 05 71 ec d6 0f 04 a2 d3 25 3d cd f2 06 47 69 10 d1 45 fc 2a 0f 42 17 55 c6 d1 a4 e7 35 d9 8c 1b ed 74 7d a8 d0 70 ce 30 04 10 56 6e 2a b1 0f 04 d3 04 39 ad f7 6d d6 8b 29 7d c0 5d 43 87 ad 50 b8 07 49 3f 4d 16 a5 3c 3b 69 e1 a9 3c 13 e2 2e 10 76 2d 31 0b 20 54 a8 43 72 d3 02 f3 a7 05 bd 48 bd dd 9e 0b ae e6 e2 0c f4 7b 65 37 60 53 70 37 e9 d6 eb 2b 16 3c 7a 45 96 c3 Data Ascii: &mxjd5}I`\|w~q"2Mj99yfNrefU5h]uR=DxdRqX:XZ-u<5&\70=T[ d9jXv>X`q%=GiEBU5t}p0Vn9m)}]CPI?M<;i<.v-1 TCrH{e7`Sp7+<zE
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: a9 03 47 1d 2e b4 d2 97 e6 5f 72 0a 40 1e 26 42 d6 a2 26 9b 27 80 f6 59 ae a7 53 31 ca c2 7e f8 2b 61 b8 9a 74 fc 4c f0 80 16 b2 ca 59 40 56 ae d2 31 0e 81 72 67 d9 73 4b e3 4d 13 9b e2 39 9e 3c c1 84 60 53 bc 12 26 53 be 02 8a b5 6a d4 aa d6 87 68 df 92 53 67 ef 55 7c d3 69 6f c4 2e 84 61 c4 9f ee 36 df 34 29 2a 0a 64 b5 b8 a6 3c 3b 5c a0 20 2d c4 3a 0c 18 cc 7a 48 d4 2d 26 bd b0 0d a6 67 88 9d 3d 13 a9 be 9b 41 be a4 9d b7 dd 46 ef 64 3a 29 f7 c7 bb 6b 5c c2 1d 96 23 97 10 94 71 35 0b 0b 5c 04 47 35 a1 48 8e f6 8e 60 0b 5a 0b 67 5b 11 62 ac 01 4a 4b 72 b7 78 ea 34 4a d7 80 2a 51 c5 b0 d2 2e 75 9c 3e 5b 29 a1 56 9e 26 ac 3c 45 bc a1 5a 6e 1e 87 7b 46 40 8c ae 69 eb 12 0a 9a 74 a8 b2 a1 01 90 e9 1c 84 44 10 a5 d0 d1 99 55 94 ce 68 70 0e 04 8b 9e 06 ca b5 Data Ascii: G._r@&B&'YS1~+atLY@V1rgsKM9<`S&SjhSgU\|io.a64)d<;\ -:zH-&g=AFd:)k\#q5\G5H`Zg[bJKrx4JQ.u>[)V&<EZn{F@itDUhp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50005	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	437	OUT	GET /images/2023/12/04/multimedia/04dc-shipping-qvwp/04dc-shipping-qvwp-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 36 35 32 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 39 76 51 45 4d 34 2b 42 64 61 2b 68 6c 4d 67 42 64 67 63 49 51 32 75 51 49 6c 48 4f 53 2f 51 4d 71 30 71 6e 78 35 31 2f 41 72 49 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 32 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 116523Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "9vQEM4+Bda+hlMgBdgcIQ2uQIlHOS/QMq0qnx51/ArI"Expires: Mon, 04 Dec 2023 22
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: e7 e4 0a ca 7d 51 66 98 e6 7b 73 7c e2 1b 18 c8 d7 3c 3a 01 c3 56 e2 58 fc df f4 c3 32 95 6e 07 04 0a ae 46 73 59 d8 28 e5 ba ff 00 f2 b1 4c c4 93 4c f5 f3 c6 31 75 b4 90 01 bc 16 2a d5 81 cc 5e a0 20 d8 63 ce 28 27 69 a5 35 91 1b 6c 61 eb 59 8c 33 10 79 aa ff 00 e5 62 db 13 ee 27 1a b2 36 f1 61 4b 01 67 bf 19 62 b6 9e 16 70 ee 8c 6b a7 2c 2f cd 8e f9 cc f4 c1 24 90 dd 7a d5 f1 8a 7d 0a ff 00 98 d7 e2 ab 26 99 9e 9b d6 6d 31 60 4b 94 1c 7f 0d 8f 9e fc 0c ae 7d 6a bd 04 d3 a2 00 4f 22 c5 8f 9c c4 be 99 65 16 7e 7b 9c 6f 4e 30 c4 59 e9 e0 9c 5f c9 de 2d fc 49 e7 f7 7d be 72 1d 4b 80 7d 9c 57 7f f5 c5 1e 98 b3 ef 6f 8e 46 16 d8 ea 7d ac 07 61 cd 63 4c 41 3b 90 08 84 d7 9c 83 50 d7 cc 5d b0 23 d0 fc d8 0a c6 be e6 73 d7 a9 fe d9 36 b5 f0 e3 b9 bf 13 ff 00 f2 Data Ascii: }Qf{s\|<:VX2nFsY(LL1u*^ c('i5laY3yb'6aKgbpk,/$z}&m1`K}jO"e~{oN0Y_-I}rK}WoF}acLA;P]#s6
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 57 d4 da 94 00 16 0f 00 91 d4 9f 39 61 93 4b 0b 86 04 fa c5 80 3c 02 77 13 c8 00 f5 fb f6 c5 6d cd 7d 52 ac 8e ac 82 35 2c 08 28 b7 fa 1b 3c 83 e3 36 c8 ba 49 5c 97 df 19 55 4e b1 86 62 08 b0 45 77 f8 cb 82 e9 9d 1c aa 6f 70 c3 d4 b5 1e ce 78 a1 7d 47 8c bb 52 52 43 22 96 97 70 0a a6 32 42 92 17 90 41 e9 43 1b c7 64 93 ed 9e 3f c3 c9 0c 3e cf 7d bf a6 ad 19 0a c4 79 e4 f3 f3 98 66 d4 28 8e 38 56 32 cc 8f 61 5d 01 60 41 e4 12 38 20 67 4d 75 5c 13 ea 7b 94 0d 88 5c 1e 4f 50 2b a7 ce 57 c0 04 2a a3 a4 42 c0 0d 44 86 3c b0 f9 1f d7 26 df d1 8a 1e 58 a5 52 35 4a c3 dc 3d c8 80 12 4f 42 07 61 e4 65 be a4 02 44 64 e4 df fc b4 8c 85 d9 55 74 7b f9 39 69 9b d1 76 95 9d 5f d3 04 32 95 ad c4 ff 00 17 df c6 16 1e 9e d9 06 be c9 5d c3 b9 50 dd 57 e4 7c 76 c2 c8 cd 21 Data Ascii: W9aK<wm}R5,(<6I\UNbEwopx}GRRC"p2BACd?>}yf(8V2a]`A8 gMu\{\OP+W*BD<&XR5J=OBaeDdUt{9iv_2]PW\|v!
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: a2 22 21 4f b8 b9 21 be 78 1d bc 64 5d cf 0b 51 34 cc cb ea 44 01 b2 42 8b af b0 f3 97 6d 84 14 56 4d 9b 90 ed e4 f4 ed d3 ce 63 13 6a 4b 94 31 b7 1d 1a e8 5f 53 57 d3 34 a3 ea d3 72 dd 82 a3 f3 10 48 1e 05 63 92 62 a4 81 77 02 a1 94 91 c7 bc b7 3d fe c7 36 29 42 42 34 64 f5 eb 75 e3 af 9c 47 05 cd ab 84 e3 90 01 22 fc e5 6c 1b 79 60 40 7b 5a f7 12 a4 11 c9 23 b1 38 fc 86 52 80 95 e0 1b e0 91 62 bb 90 7b e5 6f 0a b6 ed d1 82 1d 6b 83 56 2f 91 c7 63 e3 2e 48 dd 8b 6e 54 e9 43 c5 f9 04 f4 07 be 54 76 b5 96 91 40 52 01 a3 66 cf 02 80 c2 77 20 d3 22 fb a3 46 0d 5c 82 c0 d9 07 b0 ed f3 8e 54 7a 61 b7 d7 4e 38 e8 4d 71 e7 09 52 3f 37 cf ff 00 2c 74 ca 59 c6 de 02 92 38 07 91 ff 00 c1 f3 94 4f 4a 1e 37 10 6c fd ba 75 07 ce 2d 22 ee 65 60 55 40 a0 2f a9 f0 3f cf Data Ascii: "!O!xd]Q4DBmVMcjK1_SW4rHcbw=6)BB4duG"ly`@{Z#8Rb{okV/c.HnTCTv@Rfw "F\TzaN8MqR?7,tY8OJ7lu-"e`U@/?
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: dd d2 2a f3 d8 1a bb 19 57 ae e8 6c 41 a7 3d 8d 39 6a b3 d4 12 6a b1 8b ad 8c c5 bd be ba 2b 91 40 16 14 79 eb 55 c6 13 a6 85 e9 5b 6b b1 00 7b 40 22 fe 0e 72 a4 97 50 67 3e f5 34 7a 28 00 11 5d 01 27 be 34 b3 6b 1b 66 c8 75 0a e5 4e e6 05 42 1a e8 40 ed f3 e7 2e 54 d8 db f8 58 e1 da a9 18 4e 6c 77 ba ea 39 e2 b2 d6 5d 41 aa aa bb f6 ad 1a 3d 80 ec 06 73 11 9f 52 c3 d4 94 ad 1f cb c0 3f 7e 0f 23 34 18 96 8b 06 76 7d a3 77 bc 9e 41 e2 85 e3 2f b3 75 d0 9a 30 94 16 44 6e 9d 16 f9 3d ac f7 1e 72 94 59 3d 42 68 0d 80 b0 f0 c4 0a 0a 6b 8e 73 09 7f 4d 10 02 58 15 0c 45 db 29 26 a8 83 df 1c c4 24 85 4e e9 6c dd ad 6d 35 e4 10 79 19 70 b6 6f 65 b3 69 e2 40 86 21 24 8c c0 33 d9 e8 6f 91 5d 2b 35 3a a6 f7 2c f6 1d 79 50 b4 17 ed e3 ef 9c 68 74 50 37 a9 47 50 bb f6 Data Ascii: *WlA=9jj+@yU[k{@"rPg>4z(]'4kfuNB@.TXNlw9]A=sR?~#4v}wA/u0Dn=rY=BhksMXE)&$Nlm5ypoei@!$3o]+5:,yPhtP7GP
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: e0 1d cb 2d 02 3b d5 8c ad db 5c c0 a8 8e 38 89 a3 ed 95 49 af 82 7a df 8c 72 8d 51 69 23 60 57 54 cf 31 2c 0a 12 e7 6a a8 eb 74 7a e6 81 a6 d1 b0 65 40 a1 55 49 e9 62 be e7 a9 39 81 13 5e 55 07 e2 22 03 93 44 06 3f ae 56 a4 ee 98 7e 76 60 03 7b c2 ad 03 d8 76 cb 95 36 7a 6c 4d 36 8d 88 f4 63 d3 97 1d e8 96 1e 2f 2f 76 d5 34 6a 01 84 1b ad f4 55 b9 e3 80 0e 73 14 e9 63 01 4c 12 6e 17 44 4b c5 77 1f 39 67 a7 a2 7f 48 88 a7 2e a3 90 58 82 01 e8 38 c6 1f a6 99 07 d4 a3 8a 48 d6 58 0b a0 ee cd df b9 18 a9 16 b1 90 3b eb 21 43 40 9d 96 c0 95 f2 0f 7c 61 a1 d1 31 b0 92 16 a3 fc 4d 57 e0 91 d7 16 3d 26 85 04 8d f8 6d fd 05 8d ed ce 26 2f 3f fd a8 bf 50 d1 ac bb df 58 57 93 c6 d0 ab f6 a1 c9 c3 1f d4 be 9f bc 59 63 77 cd 31 e3 b5 5f 4c bd 74 30 3d 7f c2 27 51 66 Data Ascii: -;\8IzrQi#`WT1,jtze@UIb9^U"D?V~v`{v6zlM6c//v4jUscLnDKw9gH.X8HX;!C@\|a1MW=&m&/?PXWYcw1_Lt0='Qf
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 43 c6 42 fa 87 94 33 c7 b4 b8 ff 00 f8 8a bf 94 5f 38 18 ed 2c 5e 39 4d 2d 16 16 45 8e 38 17 d3 33 a0 8a 40 0b c1 ea 1b 3c 9b 04 0f 20 1c 9c 0b 4c db 14 33 1a 47 36 05 2b 70 7a 85 3d c1 f1 80 ea 07 a6 d1 a9 fc df f4 90 41 ec 47 60 71 1b f7 88 8a 74 c1 96 32 7d 8f 41 78 e8 45 74 ac 63 a9 83 d2 11 49 1c 88 2c 9b 0a 49 e7 a0 27 c0 ed 85 f1 de 04 9a c7 f5 23 30 c4 ec 12 bd a2 8e e0 3a d8 1d 2f cf 6c 3f 89 d5 49 04 fa 67 8b 52 b0 ad ca 28 81 b5 c9 f2 3a 65 2b 1f d2 e5 94 02 25 0e 07 e6 1b 87 df a7 6c d1 14 5e 8f ac b0 b8 b7 42 a4 31 3b 4a 93 74 7b 91 f1 95 26 eb 58 d6 2e ae 0d 1c d3 6a 5d 26 d3 33 24 7e ab 6e 05 94 59 0c 40 e8 7b 79 ce 2c 1a d8 e1 28 62 88 07 69 37 90 79 5b be 84 78 cb 1e 36 85 57 fe 10 0b e8 f1 ab 10 6b a8 e4 f1 86 12 23 69 e6 9b 40 b2 23 c7 Data Ascii: CB3_8,^9M-E83@< L3G6+pz=AG`qt2}AxEtcI,I'#0:/l?IgR(:e+%l^B1;Jt{&X.j]&3$~nY@{y,(bi7y[x6Wk#i@#
2023-12-05 18:13:41 UTC	1835	IN	Data Raw: ea 7f b6 3a cd 29 6d 9e 8b a6 ce 88 49 1c 78 16 39 cd 0f 1a 22 47 b4 57 27 32 7a b2 15 6b 63 c1 e3 26 b5 80 20 67 62 64 0e b6 dc 00 c7 a7 70 68 71 81 f4 e0 06 65 47 50 01 e4 38 1c 5f 06 cf 39 56 f6 4d 74 1b 49 01 d0 96 1d 89 fb 65 e6 69 07 a9 ee fe 7c e3 7b 22 b6 1a 5f 44 02 65 2b df 73 96 e7 bf 23 31 3e a7 41 0c 21 8c 53 58 e0 6e 42 45 5f 24 93 d7 e3 0e af 55 a8 89 e1 54 90 a8 2c 6c 0c df f4 fd 4c f2 09 37 c8 cd 46 85 fd f1 b7 dd 5f 8e de 31 87 f1 f0 1b 02 34 70 c4 6d da a4 9b f0 47 6c bd 75 8c 18 af e1 65 56 e3 6d 25 83 fa 9e 99 d4 58 e3 20 da 2f 42 6e b9 bf be 72 b5 fa 99 e1 8a 2f 4e 46 5b 39 3e 53 d2 63 7a b4 9e 9d 4a ac a7 70 ec 09 3f 1c f4 c2 64 a4 75 60 18 33 03 b5 81 16 cb d0 91 d3 8f 39 86 21 bc a9 66 62 49 17 ee 3e 73 3c ee db 99 b7 1b 46 da a6 Data Ascii: :)mIx9"GW'2zkc& gbdphqeGP8_9VMtIei\|{"_De+s#1>A!SXnBE_$UT,lL7F_14pmGlueVm%X /Bnr/NF[9>SczJp?du`39!fbI>s<F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49997	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	1893	OUT	GET /auth/prefetch-assets HTTP/1.1 Host: myaccount.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:40 UTC	1341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 33 32 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 45 78 70 72 65 73 73 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 74 72 61 63 65 2d 69 64 3a 20 37 39 38 34 37 32 33 31 33 36 36 32 32 35 37 31 33 39 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 70 61 72 65 6e 74 2d 69 64 3a 20 33 30 34 35 34 37 30 32 32 30 39 39 32 30 37 33 34 39 33 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 73 61 6d 70 6c 65 64 3a 20 31 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 73 61 6d 70 6c 69 6e 67 2d 70 72 69 6f 72 69 74 79 3a 20 30 0d Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 332content-type: text/html; charset=utf-8x-powered-by: Expressx-datadog-trace-id: 798472313662257139x-datadog-parent-id: 3045470220992073493x-datadog-sampled: 1x-datadog-sampling-priority: 0
2023-12-05 18:13:40 UTC	332	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6c 69 72 65 5f 75 69 2f 6a 73 2f 75 6e Data Ascii: <!DOCTYPE html><html lang="en"><head> <title>The New York Times</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="viewport" content="initial-scale=1, maximum-scale=1" /> <script src="/lire_ui/js/un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49998	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	676	OUT	GET /fonts/family/franklin/franklin-normal-800.fdc7cad17deeec2db1fe2f9f8c0520ed.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1109	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 34 31 38 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 50 70 56 72 4a 42 63 7a 34 53 53 48 2d 41 79 77 6a 48 56 74 4c 31 38 4b 78 55 56 76 7a 54 6e 53 62 6e 50 58 44 67 62 63 55 62 57 57 7a 78 39 62 2d 74 32 48 73 38 58 33 78 73 31 65 63 36 69 4e 4c 6b 56 34 31 47 65 30 5a 42 42 74 5f 45 35 34 7a 7a 61 37 44 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 3a 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 24184X-GUploader-UploadID: ADPycduPpVrJBcz4SSH-AywjHVtL18KxUVvzTnSbnPXDgbcUbWWzx9b-t2Hs8X3xs1ec6iNLkV41Ge0ZBBt_E54zza7DCache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02:0
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 5e 78 00 10 00 00 00 00 df c8 00 00 5e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b c1 3e 1c 66 06 60 00 86 78 08 3c 09 97 62 11 08 0a 82 c1 50 82 9d 29 01 36 02 24 03 87 3c 0b 83 60 00 04 20 05 86 67 07 85 31 0c 81 0d 1b a5 ca 17 d8 b6 ac 18 7e 77 ab 8a e4 a3 00 bb 01 77 cc ed 50 11 8a b0 e5 d9 c1 18 36 8e c1 43 d0 22 65 ff ff 9f 97 54 c6 d8 3e 6c ff 01 21 35 b5 2a 2e f7 48 47 6d aa 2d d1 b2 ab 26 12 8e d0 da c6 50 9a de 35 c3 44 40 15 11 4e 9e b1 d5 fd 78 c9 9c c9 2e b1 69 44 43 a5 fb 74 92 46 08 d9 81 53 a4 a3 c1 c9 69 7d a0 16 84 49 4c 04 3a 9a dd ed 60 62 9a 37 9c dd 78 db b0 82 98 64 76 24 9c 7f 96 79 f3 e7 e3 5f 0b ac df 47 f9 a1 e9 af a2 54 f1 61 f7 cb ba f1 65 b6 1f 36 22 d3 65 c3 a7 Data Ascii: wOF2^x^>f`x<bP)6$<` g1~wwP6C"eT>l!5*.HGm-&P5D@Nx.iDCtFSi}IL:`b7xdv$y_GTae6"e
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: bb 85 78 84 30 c0 f6 60 37 b0 3f 98 54 f2 1f 26 31 1e 02 89 f1 99 7c 13 1b de d1 f1 0a d0 10 e8 9f 1f 00 60 58 20 1c 81 81 2b 43 8a c3 48 18 a9 32 04 bd 73 0a 04 0c a8 34 e4 79 75 5e 1c de bb 83 17 bc 7e f0 a2 c8 f5 0d 88 7a 4f b3 4f 4c 69 35 63 4d bb 75 31 94 eb ae 1b 70 cb 1d 83 e2 f6 8c d8 b7 ef 55 02 d2 a0 82 4c 27 50 4a de ac 0c 50 85 a9 73 68 ef 08 d4 a9 39 a8 45 7b 44 56 33 66 cd 99 2f cb c9 56 77 29 16 10 4f 89 40 9b b1 65 db b1 cf 6e 26 6e b5 f8 74 ea 0b 59 b0 35 36 bb 89 78 70 78 09 44 b1 e1 c6 6e 9a 95 84 35 82 f6 44 c7 ba 23 86 bd 32 28 d3 a8 32 a9 7b 43 db 31 01 0c cd 32 63 36 62 ab b8 44 d0 9f 91 2b 99 ca 72 24 52 08 e2 a0 92 f8 c8 06 3c 8d e4 1b 35 e4 9f db f5 35 7c db 8b 0e 96 18 2f 46 8a 54 90 eb c4 51 64 c4 4a 5f 21 e7 cf 28 8a 28 43 ce Data Ascii: x0`7?T&1\|`X +CH2s4yu^~zOOLi5cMu1pUL'PJPsh9E{DV3f/Vw)O@en&ntY56xpxDn5D#2(2{C12c6bD+r$R<55\|/FTQdJ_!((C
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 68 a6 44 fa 20 5a c5 cc 3d 9a 35 cc 0a e4 06 88 b8 84 ca f3 59 78 ef b4 59 ad 73 cb e8 e5 28 c7 6b 5f 13 25 e5 bb e9 d2 09 c9 ac 10 ae 62 b7 d8 af 25 d1 27 01 a6 d0 e4 04 97 3b eb b3 34 95 e5 eb 6b 80 a2 5c 2e 00 42 8b 98 3f 9c 00 21 98 85 1f e5 04 08 41 90 ac ac ac ac 0c 80 2e 52 72 76 82 b1 68 4c 24 28 3a a4 e5 1e d8 86 44 05 a4 f6 87 76 75 bb 1a 97 6f e7 f9 fc 5f 17 53 61 53 63 d0 60 d0 ca a6 ab 00 a8 98 d3 b8 5c d7 33 e4 22 83 83 e3 f2 fc 36 f4 50 b6 fd 90 06 33 99 dd 7e 1a 8d 06 c3 18 86 61 ed 3b 38 ce e7 df 54 eb 1b 94 25 1b c7 f9 7c be af 07 b3 9d b8 e0 c2 0b e8 a6 db 90 8b 20 10 04 e1 13 93 3f d4 99 c9 66 56 df 07 e6 30 97 a3 be 2a 4d bd e3 23 05 e4 6a 4e 2d 11 ed d1 d1 2f a1 a8 7e 50 c2 39 29 95 68 9e 99 4e 9a 95 6b 2e e6 b5 b9 90 3b cc 30 95 46 Data Ascii: hD Z=5YxYs(k_%b%';4k\.B?!A.RrvhL$(:Dvuo_SaSc`\3"6P3~a;8T%\| ?fV0*M#jN-/~P9)hNk.;0F
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 66 f3 e3 b4 3a fb ab 68 4e 97 53 15 92 5a bb ce 57 ae 8a 50 32 fc 33 af d0 3e 3f 6e 58 2d 55 3b bc 27 ee 5d 4c 94 b3 17 2e 18 ef 81 c3 c8 c4 3d 67 c5 f7 90 1d cc 83 fb 77 04 5b 55 f8 e0 b0 f6 1e 1c 38 56 05 bb 79 2a 12 b0 68 45 46 ea 20 53 27 05 10 cd 00 24 89 c8 b1 20 d9 ef dd 00 0a 67 14 d0 57 cb e8 0d 53 bb ac 67 17 d0 06 80 5d 80 5a 11 19 86 e1 5a b7 1d 1d 94 19 0f 70 ed 91 0b 8d 9b db ed 5d f4 56 38 d5 c0 cf 2a 1a 0c 5d b2 54 08 88 4e e8 b0 4c f4 f6 c5 ce b8 24 8c ee 89 f6 2d 00 22 77 1b d0 1e f9 57 a5 d7 e3 bb a7 bb 3c f5 a7 3a 0b 00 90 36 b0 bf da fe db ca b9 fe e5 f2 e3 91 8e cd 80 21 e9 54 cb 3a 00 d0 8b 91 f1 fb 30 6d 63 d2 e1 c5 9f 05 8c ea 00 40 3d a5 24 87 a5 c9 32 e8 7d cb 1e fb a6 ef fb d4 df fd d7 ff e1 47 49 2f 5b cb f1 1a af 89 fa 9d fa Data Ascii: f:hNSZWP23>?nX-U;']L.=gw[U8VyhEF S'$ gWSg]ZZp]V8]TNL$-"wW<:6!T:0mc@=$2}GI/[
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 25 74 f5 f3 4e 8e d8 ef 78 cb 4c 43 1d 9c a4 9c ed 43 dd dc 05 30 73 57 60 5a f3 9e 3a c3 d2 4b b9 63 9c f5 e4 77 0b a3 21 bb 87 4a 07 7b 88 57 ad 73 9e be 50 5c 8b 32 03 e0 56 5b b5 61 ca 51 dc b1 06 9b c8 6b 76 bf f7 83 0f 38 bf 00 00 60 73 4f f7 ea 20 8c 2f 7a 8e 80 16 b3 b6 c6 09 6b fb 4d c8 73 8c e6 58 eb 39 01 eb 27 e2 42 3a 72 8a 4a 14 e9 67 d0 18 9b 10 0d 88 6d 8f cb 9b 99 72 36 23 ce 9d 55 bd 27 1a a6 49 c0 de bd e8 99 80 e0 90 32 2f 15 cf 4e 9e 97 56 a5 a3 40 5b 92 a3 36 69 14 4d f5 34 29 0d 10 36 f8 81 9b 58 11 9f e3 4f 62 b5 bd 73 3f 89 b8 bd b0 e0 3a b7 73 44 89 20 43 3a 96 47 a4 d8 07 79 72 5f e4 2b e6 20 98 96 4a 92 79 59 c6 09 66 6b 93 4c e7 a2 f0 f1 ac b0 e7 a2 a2 8e 79 cf 29 39 8e 24 6c 92 1a 38 6a c2 86 6b a6 69 94 27 b1 27 68 cb a1 28 Data Ascii: %tNxLCC0sW`Z:Kcw!J{WsP\2V[aQkv8`sO /zkMsX9'B:rJgmr6#U'I2/NV@[6iM4)6XObs?:sD C:Gyr_+ JyYfkLy)9$l8jki''h(
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 21 96 90 a3 b7 18 62 da f5 e3 25 ac 21 90 65 3d 1e df 0a 6a 15 3d ff dd 25 28 01 02 a5 23 49 17 1c 2d a5 e0 c4 52 87 5b 78 1e 7d d2 6b 6d 0b 1c 73 0f 92 88 bd 4d 6f c4 76 aa 15 ce 0a 72 a7 a2 fb 5b 92 a9 a3 bc 14 5b 9e 7c 4b 18 c7 cd bd 7f 06 4e 27 a4 3b 6a ac fc b4 9a 36 3a de 29 36 34 2c 49 e6 b5 92 ce 1b 55 de 15 ba d7 6f 62 0f f7 28 15 2e ca ee 88 ce e3 da 21 48 a2 9b 8d 7d 02 e5 24 48 df 49 35 29 12 09 47 fe 7b af d0 62 d8 83 58 24 ff fa 93 07 2b 9b ee d3 67 3e 53 06 66 f1 e8 37 0b 36 90 9c db ab dc e7 21 3c 31 fb 6d a9 69 32 3a dd f1 b5 20 bf 4a bb af ea fb 09 a4 4d a6 9c 1b 3e bb df a2 d6 46 dc d7 5b fd 67 0c 5b 7e f9 d3 d0 86 61 fe e4 19 4b 73 a9 18 6b 18 e0 d4 a3 9b 52 0e 9d fd ac c7 39 49 d9 b2 fd ce f1 6a 47 b7 05 cc 4a 8f ba 3a d1 30 96 fe b8 Data Ascii: !b%!e=j=%(#I-R[x}kmsMovr[[\|KN';j6:)64,IUob(.!H}$HI5)G{bX$+g>Sf76!<1mi2: JM>F[g[~aKskR9IjGJ:0
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 03 01 12 b8 56 29 26 80 d3 6e 9c 46 63 f0 33 bf 0d 55 c9 3f 75 7e 3e 47 65 c5 7d bc 56 68 06 29 db 79 ca 48 7a 6c f7 a5 72 81 83 72 8c f2 f9 24 26 de 51 8f 35 43 a6 f7 04 5c 9a 23 57 53 5d fd e5 05 83 b4 60 fb 1e 7a a6 7a 8a 22 36 41 35 9a d1 27 8f d3 94 86 e2 d7 56 ca d3 4b c5 1a af de 66 a7 f5 87 2c 6f 8d fc 41 d6 6d db a5 1c b4 78 0a 1c c8 2b d1 96 8b fd 91 4a 3e 59 37 d3 6b d7 95 60 75 58 dc 41 9e dd fa 08 8a 05 32 75 1a fb f2 6e e1 5e 6f de e9 42 4d d2 f8 7a 6c 8c 44 39 90 0e 5f f8 98 35 31 5e 6f 42 96 b5 66 ee f1 44 74 de c9 32 ca 40 3d b6 8a fb d6 05 b1 b9 70 3f bb 05 be f2 37 e8 1b 98 21 1f b9 bf 7f 8b 10 9b ad 32 82 8c 64 4b 9f 65 bb 57 10 e3 94 98 8a 4c 02 c0 be 89 4f 9e d1 37 db 2b cb b7 e1 83 a4 d1 4d ad 8b e8 50 8e bb 2e 56 5c c8 c3 61 08 b4 Data Ascii: V)&nFc3U?u~>Ge}Vh)yHzlrr$&Q5C\#WS]`zz"6A5'VKf,oAmx+J>Y7k`uXA2un^oBMzlD9_51^oBfDt2@=p?7!2dKeWLO7+MP.V\a
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: a1 7f a3 1f af 78 b1 ff a7 af 10 91 bc 47 ce bd 84 98 b7 98 98 60 fd e9 69 6b fb f4 1f fb 82 f7 9b cd af 0b 5a b7 88 5a 5b 22 36 1f 87 27 c0 21 ef 37 b7 54 b6 80 92 5b 6d 2b a8 23 f7 1f 45 47 ae d6 75 dc 2c ee 3e c3 01 7c 31 2b 72 1e 38 7a dd b8 a9 e6 3b f5 f0 21 b9 cb 9e 71 9e 63 ef c9 9b f9 4e c9 6d 38 56 42 54 9e c7 ce 9a 12 d7 c5 f0 32 36 9e 48 e2 10 c3 cb 5d 76 16 55 7b ee 88 34 33 13 05 74 49 48 08 3c e4 c7 13 3f c4 bd b2 24 1f 51 9a 28 27 d8 70 8e 84 48 44 dd ff a7 a7 9c 89 2e 32 67 bc ca c9 12 4c a5 41 ff 76 e3 46 d0 2c 86 60 0b c3 18 56 52 3e da ab 5b 8c cd ce 39 89 ec c9 97 2d 58 0a 55 c7 bb 27 f6 b4 8b 70 12 34 6c e5 fb c2 84 6c 31 b9 36 dd a0 1a b5 15 7c 87 2b 37 ed 80 75 49 ab 3b 92 72 d1 d5 c8 b2 46 79 16 e4 7d d8 df 23 64 31 34 2a 4c ec 1a Data Ascii: xG`ikZZ["6'!7T[m+#EGu,>\|1+r8z;!qcNm8VBT26H]vU{43tIH<?$Q('pHD.2gLAvF,`VR>[9-XU'p4ll16\|+7uI;rFy}#d14*L
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: ec e7 35 33 f9 a2 7b da ee 9e fb 2a 17 87 db 2d 7e 3b cc 22 f7 3d 60 4e 97 82 27 95 64 09 be 7e e5 c3 73 49 77 c8 8a 2d f6 9d b4 42 d8 46 12 8b ad a6 41 d8 87 d1 0a 92 f0 98 d9 28 da ff 07 37 e5 3e a1 e3 ad 57 a5 9d ca 37 5c 40 71 08 12 53 a6 0c 01 4b 6d 63 fb 44 3c ce 88 91 41 43 e0 be 57 1f f5 60 2a fd 39 ce 51 e3 ff 2f 93 ea 65 26 81 9f 4d 12 30 89 1c e0 35 23 45 82 db fa ee 9e ef b3 c5 d2 b7 9c c6 04 4a ef a3 dc 3b 5d 7b aa eb e1 5f 45 84 d4 d9 bc 63 3e 33 66 91 db 22 84 47 cd 1b a8 04 27 7f 80 b5 6f d6 6f dc 0c e6 98 88 f3 62 a8 b7 3a 5c db 6d b7 48 97 c8 95 82 fa 1b 7e cd d9 50 66 7c 06 4e b6 98 9f 08 ca 27 1b 4c 0a cb ac c8 20 92 25 20 5a 58 1e e1 3f 33 e3 f0 b3 e4 46 6d b2 54 8e ab 97 55 2b 8f 8d 34 5e a3 95 5d 4d a8 2d d8 fe f9 72 aa dd a5 d2 a1 Data Ascii: 53{-~;"=`N'd~sIw-BFA(7>W7\@qSKmcD<ACW`9Q/e&M05#EJ;]{_Ec>3f"G'oob:\mH~Pf\|N'L % ZX?3FmTU+4^]M-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50007	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	1553	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:40 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:40 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50008	3.162.114.30	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	946	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:41 UTC	612	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 4b 31 48 52 30 48 51 37 44 4a 52 35 30 42 31 46 45 5a 4d 59 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 191Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:13:41 GMTx-amz-rid: K1HR0HQ7DJR50B1FEZMYAccess-Control-Allow-Origin: https://www.nytimes.comAccess-Contro
2023-12-05 18:13:41 UTC	191	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 66 67 22 3a 7b 22 43 4f 4e 46 49 47 5f 43 41 4c 4c 5f 45 4e 41 42 4c 45 44 22 3a 74 72 75 65 2c 22 76 22 3a 31 7d 2c 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 69 6e 64 65 78 5f 70 6d 2d 64 62 35 5f 72 62 64 5f 6e 2d 76 6d 67 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 6f 78 2d 64 62 35 5f 61 6e 2d 64 62 35 5f 33 6c 69 66 74 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50000	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	680	OUT	GET /fonts/family/cheltenham/cheltenham-normal-300.7ea91ebd036309e1fe756ee3aab272da.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1112	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 32 36 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 74 61 36 51 67 50 53 54 4b 50 7a 38 6e 35 7a 38 70 43 66 51 31 4c 6e 48 43 53 6b 64 54 4f 70 51 4f 4c 52 4c 4b 70 34 78 38 4c 41 68 4d 45 57 37 57 76 37 75 74 46 69 75 4d 36 51 61 31 31 4f 69 36 61 4b 67 6f 38 39 64 30 44 44 6e 51 75 4f 55 47 6f 62 34 53 33 47 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 30 32 34 20 30 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 27260X-GUploader-UploadID: ADPycdta6QgPSTKPz8n5z8pCfQ1LnHCSkdTOpQOLRLKp4x8LAhMEW7Wv7utFiuM6Qa11Oi6aKgo89d0DDnQuOUGob4S3GACache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2024 02
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6a 7c 00 10 00 00 00 00 fd 58 00 00 6a 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b b9 14 1c 81 06 06 60 00 88 64 08 2c 09 82 73 11 0c 0a 83 95 08 82 ea 56 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 85 10 07 86 2b 0c 83 76 1b 0d e5 07 d8 36 2d 9e d9 ed 00 da da 7f ef 84 46 22 74 3b a2 2a 06 f6 dc cc 60 1e 07 28 67 67 c8 fe ff 4f 49 4e 64 68 a0 1b 21 59 d5 aa fa 73 89 66 86 0d 15 0e bb 65 b4 22 55 99 fe cd ad 3b 64 ed 72 f4 f4 a1 58 9e 5b c1 ea f8 59 58 a0 d1 d3 49 af 4c e2 10 df 15 7d 3b 76 fa 2c 2a e1 11 19 49 a5 10 13 13 36 1c 09 49 f3 84 0d 73 c2 c2 64 6f 88 97 1c 02 13 0d d6 70 e1 49 04 22 fa 9a f7 19 12 be 39 7c 61 e3 1d a9 0f 1d 93 bd 7f f0 10 5d c4 91 59 b0 c0 d1 b4 86 c5 f7 c6 4b d1 50 Data Ascii: wOF2j\|Xj`d,sV6$ +v6-F"t;`(ggOINdh!Ysfe"U;drX[YXIL};v,I6IsdopI"9\|a]YKP
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 37 67 8d 65 6f 17 df 2f 9a b2 7b 8a fb 8a 47 20 b0 bf ef ad a8 af 5a 78 45 fd e1 40 30 d4 b5 b1 60 3c b0 57 34 11 4c 96 4c 05 d3 a5 44 48 96 52 09 3a e1 48 30 89 99 5a 7f 02 e1 2c 73 95 05 2b 12 cb a4 bf 2f 96 95 ca e6 8a f3 15 5d 0b af 87 8d b2 7b 65 af 13 6a 50 5a 5f 34 a4 b0 7e 15 92 8b 19 43 34 b6 c4 b6 a8 12 56 c3 5a 5c 8f 15 a0 ef 36 7c b7 dc 5a 10 25 e8 b9 e1 f9 74 6a 11 35 04 0a 61 81 b0 42 d8 20 86 fd e0 22 84 d2 aa b8 9a ac 27 db a9 33 ab a2 d5 c5 b5 40 eb 8b 1b 8b c6 18 cd 58 b2 d6 6c 77 64 cb 1c 2c 52 45 ba e8 28 30 45 67 ec 8a c5 b8 18 97 2c 86 e9 62 54 6a a8 74 8f 9d 6a 1d e1 dc e6 03 a0 d9 b2 e2 16 5e 9b cd 7d a7 81 08 c7 00 30 e8 2a 2b ae bc 14 9c 30 6c c1 50 bb 76 1c 82 f2 d0 a9 45 d6 82 b1 6d 7c c8 f2 33 53 07 04 6b 61 bb 4f 1b 1d 75 a8 Data Ascii: 7geo/{G ZxE@0`<W4LLDHR:H0Z,s+/]{ejPZ_4~C4VZ\6\|Z%tj5aB "'3@Xlwd,RE(0Eg,bTjtj^}0*+0lPvEm\|3SkaOu
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 40 4d 20 83 e8 f9 74 b4 2d b1 c4 f8 9d c0 43 23 33 02 81 60 8c d3 91 85 d5 92 77 ae dc b0 ff 15 86 f6 fa c2 3a 54 41 b1 c8 4a 5f 17 aa d8 03 fa da 00 ee 84 33 78 73 b5 07 af 36 d2 7e 61 87 79 9d 08 fd a9 f4 0a f4 3d 6c f7 83 c3 8e 39 e2 07 3d 56 eb a7 35 48 6b 88 c6 b0 a5 46 68 8d d2 fa c4 0f 42 40 61 db 45 bc ef 33 84 cf 11 be 44 08 41 aa 8a a9 ab bb 46 eb ba 6e 78 9f 57 01 80 86 19 31 40 17 80 c6 58 21 95 af 1d ee 5b 94 96 72 a0 fc 37 2a e9 b5 16 8a a4 f2 64 a7 f9 8a 37 5b f6 38 cb ca ab 84 52 1e 5d 70 bd 41 f4 b6 b5 39 90 7a d1 e4 3c 51 96 a2 09 a3 42 c9 85 a4 34 5d 7e 88 bb 1d 89 9d f4 d5 3b f7 7f 6f 7f fb 00 8e 9d c9 40 f4 0b fc ef 00 2f 3e fc 04 5c b0 bf 2c 1c 3c 02 71 12 24 49 91 96 14 63 fe 48 b5 18 57 d1 fe 5e 63 73 cc 26 41 6e e2 c1 8b 0f 3f 81 Data Ascii: @M t-C#3`w:TAJ_3xs6~ay=l9=V5HkFhB@aE3DAFnxW1@X![r7*d7[8R]pA9z<QB4]~;o@/>\,<q$IcHW^cs&An?
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: c5 9b 0f 5f 7e fc 05 08 14 24 58 88 50 52 61 c2 f1 22 44 8a 12 2d 86 4c 5f fd f4 27 37 c0 40 83 0c 36 84 42 ac 38 f1 12 24 4a 92 2c 45 aa 34 e9 32 64 ca 92 2d 47 ae 3c f9 0a 14 2a 52 ac 44 a9 32 e5 2a 54 aa 02 54 ab 51 ab ce 50 c3 0c 37 c2 48 a3 8c 36 c6 58 e3 8c 37 c1 44 93 4c 36 85 37 64 9e 99 66 79 e6 98 8b 65 54 a9 3e c4 b9 8b a9 2c b1 d4 b2 f1 62 ae b0 d2 2a ab ad a1 b6 d6 3a eb 6d b0 d1 e0 86 dd 04 d8 6c 0b 60 ab 6d b6 db 61 a7 5d 76 db 03 d8 6b 9f fd cc 1c 70 50 83 43 0e 07 22 10 8f 39 7e 16 4f 39 9d 12 2f 6c 44 13 ce e1 7c 62 e4 a2 2e 8f 5c bd f4 3a 6e e0 26 6e 45 88 bf 27 23 f0 30 32 04 5e 6c 5b d0 8a 36 b4 a3 03 9d 78 8c 27 78 0a 00 78 06 57 d1 e4 06 8b 97 22 db 48 6f b0 c2 33 00 40 8f 63 0f 13 3a 8d dd 18 a9 fb b8 af c7 ef 80 09 69 bb 0a 66 e4 Data Ascii: _~$XPRa"D-L_'7@6B8$J,E42d-G<RD2TTQP7H6X7DL67dfyeT>,b*:ml`ma]vkpPC"9~O9/lD\|b.\:n&nE'#02^l[6x'xxW"Ho3@c:if
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 48 0f c6 09 37 13 c3 33 d1 5d 6f 1c 65 f1 9f 8e 57 f6 84 0f 2d 5f 7a 91 fa 4b 80 3d 58 50 c5 d7 02 9d 04 2f a0 e9 31 8a be 39 c6 15 6f 91 85 d6 2a ba c4 83 6f bf fb 24 df 4e ed af 18 73 df 5f cd fc 02 fe 7b f6 f1 a7 90 d7 0f 6f bf 27 f0 a5 91 fd f1 f5 3c d2 57 9e ff 8c 32 af 0f cd e7 eb f0 86 be 71 6e 43 65 9b b0 43 03 27 fc e4 99 07 ef d0 06 38 65 35 9d d6 01 a4 08 f7 ff ac b3 2c 0b fb 9e ef 5f 86 ff a4 25 bc 3e 7b 2f 6c 22 9b 91 cd 24 b0 71 60 96 ad 83 36 91 b6 fd 91 5e 80 ef b1 7a c8 23 d5 3d e0 5c b9 3f e9 17 b7 7b 82 85 61 14 e9 c9 eb 44 41 19 02 b5 0c 56 b4 72 53 72 3f da bc 5a 38 ef 64 b3 7b 20 37 14 1e ea f5 42 ed 7e 33 af 6c 88 8c 00 41 c2 46 8c 35 0b 3d fa 9a 8b 94 d5 19 a1 08 30 42 68 a2 a7 bd 78 b5 a6 a7 a6 ad a8 40 3d d9 32 ee e7 bc 1d 6c c8 Data Ascii: H73]oeW-_zK=XP/19o*o$Ns_{o'<W2qnCeC'8e5,_%>{/l"$q`6^z#=\?{aDAVrSr?Z8d{ 7B~3lAF5=0Bhx@=2l
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: b0 39 a3 f7 2e 0d 5f 07 40 4c a4 98 c7 51 9a 2e a3 8d f4 f5 92 e4 eb e4 76 53 20 f5 f1 d8 d3 31 0b 89 9e 28 6b 12 d8 13 24 cb 86 41 1e d4 e8 2e ea f7 f6 0f 7a a5 7c ef 00 10 01 a9 73 30 5f b4 63 41 c5 6f 8b 29 33 6c 1e b5 2b 14 49 30 ee 59 3d 3b c6 61 c4 96 ec f6 d3 6a 9c 88 a1 51 b2 9a 5b 7e d2 28 6c 5d dc 08 f0 34 f2 a0 bf 10 b6 af 31 a1 15 e5 02 31 92 da a1 4c 87 0e 51 c0 e0 f3 f6 97 37 87 90 cd 4e e2 26 5a 86 7b dc 09 58 5d 3f e7 5e 3f 4d 54 7e be 23 0b de ea 4c d6 a2 a0 4a 59 a5 89 cd 55 81 a8 b6 9e b9 88 44 36 80 dc 19 75 50 36 2e f3 2b b3 29 c2 c0 4a ee ef 73 5c 25 48 1a 40 9f 78 1b 5c a8 c4 c5 ea 29 39 59 b9 bc 37 48 66 6b a2 ee 43 8d 93 8f 4a 1c 35 29 04 9b 50 52 f0 2e be 86 c8 83 d1 ea 09 9a 4f 11 9f d2 38 a7 7d 7d 92 39 16 2a 5d e1 97 35 3c a3 Data Ascii: 9._@LQ.vS 1(k$A.z\|s0_cAo)3l+I0Y=;ajQ[~(l]411LQ7N&Z{X]?^?MT~#LJYUD6uP6.+)Js\%H@x\)9Y7HfkCJ5)PR.O8}}9*]5<
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 7f 3e c3 d3 22 dd 36 2d c9 63 c2 da 81 db 03 22 08 df 91 92 86 4e 25 5c a3 eb 42 95 2a 2a 31 7f 21 06 96 2b b3 08 e7 1c f3 b0 c0 6c e8 b0 b5 9d 6e 67 1f af 67 8a ac 0d 9b 55 55 27 8e ae f7 8e ca b2 20 eb 38 42 01 ea 22 17 f3 23 0e 31 15 03 99 7f dc 34 03 b3 0f d7 8a b0 54 39 86 0b 83 d9 6e 1b 37 5b 8d 66 89 50 b4 7b 39 2c 82 18 0a 75 e9 63 4a 8b 5d 99 1a 20 dd 47 00 20 92 81 33 76 97 95 63 9d 75 cb 11 a7 c9 c5 32 73 2a 25 6a b1 98 1a b2 21 a0 24 58 8d 86 91 47 cc 71 0c 51 34 83 65 7e d5 c0 76 9a 0c 48 f2 79 34 31 23 f2 2c 77 28 71 8e 05 e1 2a c7 98 07 87 76 43 f9 94 df 05 4d 3c 3d 7a de 45 75 f8 9f 0b 0e a9 90 a9 e9 14 3a 16 02 80 14 03 bc 20 f0 1a 8c 57 ec 7a 5e b7 b4 2b eb 5f f8 b6 9c 0d 06 7d 6f 6a b5 5f 94 2f 1a 01 36 8b 57 cd 01 62 c8 3f 2d 8b 1e 66 Data Ascii: >"6-c"N%\B*1!+lnggUU' 8B"#14T9n7[fP{9,ucJ] G 3vcu2s%j!$XGqQ4e~vHy41#,w(q*vCM<=zEu: Wz^+_}oj_/6Wb?-f
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: b5 d0 95 92 e1 42 2e cc 57 8e 5a 96 c5 df c8 47 6d c4 b2 e3 74 f0 d0 d4 92 97 39 d5 22 0f ed af a5 53 73 c5 53 ab 16 be 4a cb 78 b9 1d b8 3e ac e5 cf aa 0c ae ca a9 8e 88 73 41 7a c6 ed cd 6a f0 f0 ca d9 54 9b ec 15 8e 38 b2 f5 2c 82 36 71 59 f3 8f 16 52 00 75 2d ab 7f 41 d1 fd 40 ba cd 2a ac 33 58 32 a6 d5 14 2f c8 f0 44 d4 b8 aa 2c e3 5b 48 56 2e 7a ef 4a 28 31 fe 52 0e 02 5e f3 28 15 4d 9f 42 39 8f cf 30 22 5b 42 aa f2 28 b3 f3 5d 8a 6c 4b a2 ff ff 96 97 49 6e aa 5c 4c d5 d2 19 50 cd 64 5d c6 b2 5b e7 4b 3e 23 c2 e5 34 93 d3 6c 26 9f ee 0c 52 c6 8a 58 00 40 71 7c 4d 0e dc 9f 53 c0 5d e8 ac 6e ce 50 29 83 19 8e 6a ee c2 82 82 94 61 fb 57 97 ba 05 ad 99 b1 6b 3e 08 c3 fe aa 63 db 6f 6b 0a 78 0b 2f d1 9e 5f 9d 0f 72 61 10 b6 a2 b5 02 5b 19 e1 41 4f 62 99 Data Ascii: B.WZGmt9"SsSJx>sAzjT8,6qYRu-A@*3X2/D,[HV.zJ(1R^(MB90"[B(]lKIn\LPd][K>#4l&RX@q\|MS]nP)jaWk>cokx/_ra[AOb
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: f2 91 2e af 7d 68 4e e5 61 71 65 ed d6 f4 0e bf 7c 7a 8e 41 da 51 54 14 54 36 77 f9 54 6a 3b bd 24 c3 a6 99 d1 ee 5b 21 70 17 2d 65 d7 5a a5 4d 9a 4c 61 b5 dd 15 c8 7e 63 26 4e 35 15 fa f8 6d 3f 0e f1 e8 56 6d 56 39 59 96 59 4a d2 49 e9 b6 54 59 7a be 57 d9 c2 ff 31 98 2b 90 69 69 de b4 8b 4c 8c 66 e3 51 b2 b1 9e 0d e0 53 0a 52 ac 46 71 bd 55 ce a9 74 18 da 18 7a f9 04 4a a1 46 5c fe 35 4d 99 f6 c5 97 78 54 b9 b5 62 78 56 fd 4e 59 8d 75 22 d1 2e 64 6a 19 c2 fd 3c e1 41 36 c8 77 c0 10 93 a9 99 ab 6a 59 62 fa 18 fa c6 40 be 2c c0 a9 c7 65 fa 96 65 d7 d7 66 0d 3a 8a 75 db 7a a6 1f ce 69 9e 74 a4 72 d2 6e d9 ab 63 05 40 ec 94 c4 56 41 b9 ce 50 c0 94 e4 36 66 6b ab 48 fd 39 99 a4 7a b5 a3 21 cd 9c 59 93 e4 4a bb dd 84 e1 47 62 f0 31 27 cd 71 bb 62 f0 18 0c 0e Data Ascii: .}hNaqe\|zAQTT6wTj;$[!p-eZMLa~c&N5m?VmV9YYJITYzW1+iiLfQSRFqUtzJF\5MxTbxVNYu".dj<A6wjYb@,eef:uzitrnc@VAP6fkH9z!YJGb1'qb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50004	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	797	OUT	GET /ads/tpc-check.html HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "598d685c63f68aaefa1f7c474e83327c" If-Modified-Since: Wed, 03 Apr 2019 14:30:57 GMT
2023-12-05 18:13:40 UTC	507	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 34 20 4e 6f 74 20 4d 6f 64 69 66 69 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 54 61 67 3a 20 22 35 39 38 64 36 38 35 63 36 33 66 36 38 61 61 65 66 61 31 66 37 63 34 37 34 65 38 33 33 32 37 63 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 31 38 20 53 65 70 20 32 30 32 Data Ascii: HTTP/1.1 304 Not ModifiedConnection: closeDate: Tue, 05 Dec 2023 18:13:40 GMTVia: 1.1 varnishCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicETag: "598d685c63f68aaefa1f7c474e83327c"Expires: Mon, 18 Sep 202

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50002	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	459	OUT	GET /images/2023/12/04/multimedia/04israel-hamas-miller-01-tjqm/04israel-hamas-miller-01-tjqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 34 31 35 37 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 39 66 4d 6f 6e 78 55 4c 48 6d 71 42 45 72 39 4c 55 4f 72 6a 6d 64 63 75 47 71 31 32 4a 71 63 50 51 62 35 45 2f 6e 42 4a 37 67 34 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 32 33 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 124157Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "9fMonxULHmqBEr9LUOrjmdcuGq12JqcPQb5E/nBJ7g4"Expires: Mon, 04 Dec 2023 23
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:40 UTC	16384	IN	Data Raw: 04 fc 93 f3 42 36 f7 28 f3 1f 13 31 88 93 44 da cc 06 79 1d 07 dc 93 44 6b 10 04 b4 90 06 46 47 78 f7 a5 69 68 28 e8 08 b2 aa 24 c7 e4 7a d7 99 95 95 5b 88 34 07 2d 9e 46 33 f1 c5 4a d9 25 7d 40 fc fb 0e 38 a2 80 9a a0 2a 58 9f fb 7e 79 a1 6e e3 6a 16 78 31 f2 7f 53 ed 53 16 ed ec 6d a4 03 33 d7 8e d5 25 b6 20 98 92 04 4a f7 f9 a3 48 0f 59 f2 f7 2e ee 73 8e b3 dc 9a 9b 43 b3 c6 04 62 24 8c 7e b4 1b 5f bb 7f 51 07 3f 6e ff 00 51 53 6d be a2 5b 93 f4 9f 8a 1f 20 c9 5a 0b 04 96 95 60 07 e7 cf bd 72 c8 51 79 cc 7a 54 92 26 78 ee 3b 57 93 90 24 46 4c fb 75 8a 1d c0 ca c3 63 4c 0c 98 8f ca 80 0e 75 24 10 3d 27 3e ff 00 19 f7 a5 98 95 78 66 fc 44 9e d0 3f ad 09 95 91 82 90 d2 4f b9 fa 54 ae 28 da 65 0e 08 e2 4f eb 54 92 d5 00 4d a1 46 e0 4e 48 cf 18 38 19 a3 13 Data Ascii: B6(1DyDkFGxih($z[4-F3J%}@8*X~ynjx1SSm3% JHY.sCb$~_Q?nQSm[ Z`rQyzT&x;W$FLucLu$='>xfD?OT(eOTMFNH8
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 56 26 5a 79 81 01 dc 03 20 12 1b 33 fe f4 3b cf 71 37 5e 5d 8c 92 48 98 24 82 20 81 1d 29 31 72 fb 5e 6b 2b 05 63 d2 30 73 f2 6a c9 34 e6 de 91 6d b0 01 80 f5 44 91 ea 33 1e fe f5 8e 95 5d 08 6e d6 df d8 d9 19 27 7f 46 c9 12 26 7e 9f 95 58 e9 dd 01 33 71 60 5b 65 ee 66 23 35 45 7a f3 06 b6 82 e0 0c e3 a6 62 38 31 d0 53 f6 d5 6c a9 dc ca d8 86 23 1c e7 35 14 54 5d 31 07 b5 92 05 cc e4 18 c8 9e 91 42 68 05 77 64 e2 7d e3 bd 0e d5 f3 60 44 48 24 e7 b4 7b 54 ae 6c 60 5a 64 93 83 ed 1d a9 38 d7 fc 9a 36 bd 8e 5d 64 64 5d 82 0c c3 03 8e 39 34 25 64 de 02 90 22 3e fc cf c5 75 17 72 30 eb 32 0f 3c 73 3e d4 2b 36 c1 bc 38 f5 1e b8 c0 fe 46 b4 51 49 6c 9d b6 86 1a eb 93 66 ca ae 77 1d d8 ea 4e 3e 82 b5 2c 34 da 49 da 37 5d 23 8e 49 24 73 f1 ef 59 ab b6 de db b0 4d Data Ascii: V&Zy 3;q7^]H$ )1r^k+c0sj4mD3]n'F&~X3q`[ef#5Ezb81Sl#5T]1Bhwd}`DH${Tl`Zd86]dd]94%d">ur02<s>+68FQIlfwN>,4I7]#I$sYM
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: d3 26 72 49 27 a1 23 8c 74 ae a8 bb 5a 38 e4 a9 ec 25 8b b7 09 0c aa 37 4f 31 23 e0 fb 52 da a0 e2 eb 6e 2a 5b ae d8 89 ed 22 8e b7 ad 03 b6 da 36 c9 c8 ef ec 63 81 52 d4 2a db 61 b9 40 72 b3 b7 a2 82 30 31 42 d3 e0 39 5c 96 5f d9 bd 4e cd 4d cb 47 87 50 47 ca d6 f1 2b e6 36 ae 0d 26 ae c1 52 0e d6 52 4f 18 61 90 6b e9 36 5c 15 1f eb 15 8e 65 b5 2f 28 df 0b d3 5e 01 6a 6d f2 6b 2b e3 1a 4f 32 d8 b8 06 54 e7 e2 b6 8e 81 94 d5 5d eb 20 82 23 11 51 09 53 46 92 8d ae 0f 9b 38 0a 54 81 d4 d7 6a c3 5f a4 3a 7b a7 fb 84 e3 fa 52 10 04 d7 6c 5d a3 8f 2a fb de 8e 54 d3 a7 c5 43 a1 f8 ab 8f 0d f0 d1 ab b2 ce d7 4a 00 db 70 24 9c 4f 7a 53 9c 61 1b 93 d0 f0 60 cb 9f 22 c7 8e 37 26 ae ae b8 f9 2b 87 14 f6 93 5c da 6b 3a cb 61 01 f3 ed 84 26 48 80 0c e3 bc d5 9a 78 5e Data Ascii: &rI'#tZ8%7O1#Rn["6cRa@r01B9\_NMGPG+6&RROak6\e/(^jmk+O2T] #QSF8Tj_:{Rl]*TCJp$OzSa`"7&+\k:a&Hx^
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 63 27 bf d2 aa fc 43 4f ea 61 1c 1a a4 ff 00 8e 6b 41 05 3c b4 23 b2 c9 fc cd 2d 7b c5 75 f7 32 d7 cf d0 01 fc aa e3 e9 b2 a7 7a 47 2c ff 00 8c 7a 4b 74 b2 34 fc 25 fe ec d1 e8 af 18 60 49 0c 22 3e 47 cd 5b 7f c3 ac dd b4 97 75 4f bd 8a 86 da 5c f0 78 04 08 fb 56 0a cf 89 ea 2d 92 7d 2d f2 33 f9 45 16 ef 8b eb 6e 47 ac 2e 23 1d ba 73 35 71 f4 f9 14 db d5 7c 9c de a7 f8 97 a7 cb 85 28 df 57 74 e3 db e4 dc 5b 3e 1f a7 70 d6 ec a2 f3 c2 80 7f 4a 7d bc 43 4c b3 0b 26 3f 3e 95 f3 af 0d d3 37 88 6a 8d bb 97 d8 28 42 ec 49 24 c2 f4 13 d4 d6 a3 fe 0d e1 b6 e0 32 6e 3e ec 5b e8 72 29 cb 1a 8f e5 26 df c1 c3 0c b2 9a b8 c5 25 f2 1b 59 e2 9e 5c 31 b8 a9 9c f4 1f 6e b4 85 a5 bd e2 4e 36 92 2d 03 f8 dc 44 9f 65 eb 56 fa 74 f0 db 23 d3 65 01 07 10 07 eb 43 d4 f8 9e 95 Data Ascii: c'COakA<#-{u2zG,zKt4%`I">G[uO\xV-}-3EnG.#s5q\|(Wt[>pJ}CL&?>7j(BI$2n>[r)&%Y\1nN6-DeVt#eC
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: a1 7b c4 f5 ef ab d2 a2 b7 ee ed 14 3b 24 28 6d bc c9 3c cd 58 05 f4 85 1d 85 54 6a ec 02 32 3a fe 62 a6 13 6b 5d 8a c9 89 4b 77 b1 dd 09 d3 69 2d 68 35 36 2e 2c dc b9 fb d2 48 9d ae 23 69 13 80 0d 6b f7 0b 96 c3 29 05 58 48 23 22 0d 7c a7 c8 54 c4 75 3f 99 98 ad 87 80 6b ad 2d 95 d2 35 c1 b8 31 d8 a4 e6 39 c7 b5 6f 19 a6 e8 e6 9e 37 15 66 9b c3 fd 1a 87 1d c7 f3 a6 b5 b6 c3 5b b9 1d 41 91 f4 e6 94 b0 42 ea 55 bb 9a 67 5c e5 2c de 33 03 69 fd 2a cc 8f 99 78 9b 87 36 41 fc 60 90 7a c8 18 04 d5 2e b7 3a 5b ab dc 01 f9 d3 da 9b 9e 6d e6 6e 9d 3e 2a b2 fc dc 75 5e 80 e4 f0 08 61 10 2b 4b a8 11 a6 d9 4b e5 3e 4c 63 ed 5d 08 7d 5f f6 9a bd fd 98 30 d8 07 a5 4f dc 9f e5 42 5d 22 11 72 58 cc 8f 62 00 30 7e 95 87 d4 4c 92 84 e9 c9 9c c4 1f a5 11 4d cc 05 dd 00 76 Data Ascii: {;$(m<XTj2:bk]Kwi-h56.,H#ik)XH#"\|Tu?k-519o7f[ABUg\,3ix6A`z.:[mn>u^a+KK>Lc]}_0OB]"rXb0~LMv
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: d1 c0 3d 68 01 d4 ae 70 50 75 c8 c8 cc f5 a1 2e d9 39 12 4e 27 23 19 c1 aa 50 8f 80 b6 37 6d 89 20 9e 8b 89 ef 1c 57 8d c0 33 c9 88 ce 06 68 61 d6 0f bc 1e e3 18 a0 3b fa 89 1d 08 8f eb 4f a6 c5 61 4b 4c fc fe 5d 81 a9 6a 30 6d 37 a4 06 45 24 f3 c1 82 00 a5 d4 92 bf 53 f3 14 e5 d4 df 67 4c dd 76 b8 ff 00 da 66 9d 53 42 14 75 75 45 24 fa 4e e8 eb c6 0c d0 16 e0 98 98 1d ff 00 ca 9c b8 a5 b4 96 d8 7f 0d d7 1f 70 0d 2e 2c 96 0e c0 60 2c fb 4c c4 0a a5 55 b1 97 3e 0b 74 ad cb ca 7a a8 38 ce 46 2a da f5 cb 9b c3 05 c6 d1 f3 26 a8 3c 2c bd ab ad 71 84 80 42 47 bb 19 3f a5 5f f9 ef b8 c0 1b 02 cf b9 24 e0 0f 6a 4d d3 1d d5 15 3a ab 96 ac 5d 77 71 2d fc fa 8a a9 ba ee e8 5d 87 a9 ce 3a c2 8c 08 ed 34 d6 a0 36 a6 fa 28 33 04 27 b6 4f e6 7b 9a 4a fb 82 ee 57 89 85 Data Ascii: =hpPu.9N'#P7m W3ha;OaKL]j0m7E$SgLvfSBuuE$Np.,`,LU>tz8F*&<,qBG?_$jM:]wq-]:46(3'O{JW
2023-12-05 18:13:41 UTC	9469	IN	Data Raw: 0d 04 c9 38 02 32 49 ec 28 d6 ee 06 d5 fe eb fe 90 73 b6 79 81 c1 27 df b5 77 cc b9 6b 48 e1 57 d5 70 44 83 fc 03 90 3b 13 d6 93 b0 db 6e 00 b1 80 64 f3 93 5c bb 7d 4f f4 07 43 ec 96 5e eb 3b 08 0a 86 47 40 66 0f d3 b5 72 ed 92 74 76 01 22 49 23 d4 60 80 d9 13 3d 69 ab 20 5b 17 ee 5c 52 41 01 76 74 24 e0 93 3d 47 7a 9d fd 32 bc 9b 81 98 16 95 75 9d a0 f5 5f 6a 4a 54 d6 f8 15 08 69 b4 c6 dd b6 ba c3 d5 6d 48 e8 d9 27 9c 54 74 ef 6d ec ea 02 48 24 ae f7 e7 83 24 80 38 14 1d 53 b1 2b 69 1a 13 71 90 24 09 1c 93 dc 51 3c 3b 7d 86 7b 8c 87 6e d3 22 09 04 44 47 d6 aa 9b 8b 6d ed f0 80 12 a5 cb c5 4a 37 98 aa 48 ea 09 11 3c 57 6c da b9 70 ba 31 51 bd 76 67 1d 64 4f bd 59 7e cd e9 6b fa 3d a2 dd d2 17 68 39 b6 49 c4 cf 7a 45 af ca dc 5b aa a5 8c c1 82 18 18 c7 1c Data Ascii: 82I(sy'wkHWpD;nd\}OC^;G@frtv"I#`=i [\RAvt$=Gz2u_jJTimH'TtmH$$8S+iq$Q<;}{n"DGmJ7H<Wlp1QvgdOY~k=h9IzE[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50001	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	676	OUT	GET /fonts/family/imperial/imperial-normal-700.024693f96c8f2c457e4a6a8d02a636b7.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:40 UTC	1115	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 35 36 38 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 74 49 76 51 42 45 71 76 53 6d 59 34 51 6b 72 5f 58 78 6a 38 36 35 79 68 4d 66 4c 77 6a 45 36 50 72 77 77 31 4e 73 61 45 46 4f 6c 68 5a 35 4b 51 50 65 46 64 4f 44 52 73 7a 72 43 48 39 67 52 5a 78 4d 77 67 4e 33 7a 36 52 6b 6e 30 51 4e 58 46 63 42 2d 74 39 6b 75 45 65 62 41 6f 37 49 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 32 20 4f 63 74 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 25680X-GUploader-UploadID: ADPycdtIvQBEqvSmY4Qkr_Xxj865yhMfLwjE6Prww1NsaEFOlhZ5KQPeFdODRszrCH9gRZxMwgN3z6Rkn0QNXFcB-t9kuEebAo7ICache-Control: public,max-age=31536000,immutableExpires: Wed, 02 Oct 2
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 64 50 00 10 00 00 00 01 13 94 00 00 63 f1 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 10 1b cc 1a 06 60 00 85 7e 08 46 09 97 62 11 08 0a 83 a1 70 82 e5 0b 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 83 33 07 86 06 0c 81 18 1b 11 f2 27 d0 9b f9 41 71 3b b0 92 7f f3 8f 14 4c 37 77 28 b7 83 08 15 59 2f d5 6c 44 04 ce 03 42 ea f7 b9 2f fb ff ff 93 8e ca 18 db 06 fb 01 42 93 ca 24 47 72 22 32 d8 68 d2 9d 06 06 65 53 ad da 9c c6 cb eb 08 79 5a 0f 97 be 47 a8 80 d5 71 65 b2 f7 1b 29 ce 23 e4 8c 58 9d 5e 0d 0d 47 c3 6a 98 f9 a6 a4 cf 97 fb 6a a7 f8 cd f3 be fd c7 6a b7 dc fd 69 5f 0f f4 4b 3a b0 38 33 39 28 2e 15 21 fd 2c 39 95 b1 c5 14 97 1a b8 47 61 54 1c 08 32 82 47 99 29 85 c9 bb 19 c9 b9 29 28 1b 5a Data Ascii: wOF2dPc`~Fbp6$ 3'Aq;L7w(Y/lDB/B$Gr"2heSyZGqe)#X^Gjjji_K:839(.!,9GaT2G))(Z
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 0d 68 9d bc 0b 77 03 cf 6e c1 0a 62 29 59 ab ee fe 37 bb 9a dd f8 76 33 d8 73 d8 bb d9 fb d8 57 d8 63 ec 17 ec bf dd 7b 72 a0 9c 18 8e 91 63 e3 1c c0 11 5f 75 3e 44 ff f2 26 8b e0 69 80 6a d1 c0 d0 99 22 42 81 62 49 ca 95 b3 a9 54 2b 4d bd 06 0e cd 70 bb b4 6a e3 d6 e1 ce 36 55 17 8f b9 95 5c 4b 86 e5 59 61 b7 7c 7b 9d b0 c8 29 b8 7b 9d 73 c1 1c 23 ee f9 6e 1a b7 c0 ed ca 62 f7 2b 4b fc 51 59 ea af e1 7d a4 e0 38 6c 20 c2 36 11 cb ff 7f 24 11 26 f6 1a a2 20 a3 04 a8 c8 b0 64 86 d0 d4 34 de 00 b4 31 1d 0d 7d c2 90 30 26 2c 34 ac 30 1b cc 4e c3 41 c3 9d f0 26 fc 89 00 2c 04 09 43 22 90 28 24 de a8 14 24 5b e5 f7 44 9e 46 21 52 8c 94 22 e5 48 25 52 8d 8c 40 66 00 b3 80 39 c0 3c e0 32 a1 44 d0 10 d6 24 ae 69 fc ea d1 e2 c4 55 b7 c2 fa 2c 59 11 1f 6d 91 f4 92 Data Ascii: hwnb)Y7v3sWc{rc_u>D&ij"BbIT+Mpj6U\KYa\|{){s#nb+KQY}8l 6$& d41}0&,40NA&,C"($$[DF!R"H%R@f9<2D$iU,Ym
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 88 2e 0b ad 12 36 1b e9 ba 68 67 c5 f6 5e 3c 23 49 62 2f 49 1a 96 e9 64 38 2f 8b b6 a1 e1 b9 94 3c a8 d0 33 45 28 51 a6 42 f5 95 6b 5d b6 94 b1 9c b6 32 0f 3a c8 2b 2c e7 d1 28 4c 8b d4 c3 08 80 07 4f b1 68 2c 1e 8f 42 a1 31 8c a1 31 20 aa 3d 4e 22 35 e1 26 62 0f 87 c9 f8 f1 f1 e4 4c 5e 5f b8 02 47 f4 3f d6 e3 89 0e 47 2c a4 3b 52 12 8d c5 f4 50 6e ff 53 7d bf c7 02 c6 c7 5a 28 51 a6 42 75 40 be 20 68 8c e6 da 9c a4 e3 3b 4a 1a 25 77 e1 de 7e c4 e5 ae ec 1b 68 1a 44 1a 18 3c 1e 94 9e 44 55 3c d7 cd 64 49 2b 06 ad 5c 9d 35 4f d2 86 be 9a 21 18 31 0f b7 96 38 40 ce 02 d7 23 ee 5d 3c 8d 17 5f d6 9f 13 a8 08 ae 36 d4 ab b4 88 c4 a2 34 62 f8 fc d9 f2 a7 20 09 e3 13 a0 43 24 92 e6 5b 33 28 fd 44 bd 62 54 c6 18 67 82 49 a6 65 a9 d6 2d 67 94 16 c2 63 d2 c6 66 ce Data Ascii: .6hg^<#Ib/Id8/<3E(QBk]2:+,(LOh,B11 =N"5&bL^_G?G,;RPnS}Z(QBu@ h;J%w~hD<DU<dI+\5O!18@#]<_64b C$[3(DbTgIe-gcf
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 16 b3 00 e8 5a 7c 9b 78 3d dc 5c 60 a5 5d 3e 2f 06 d8 73 8f 17 e9 5a 96 56 1f 35 62 6a ac f2 1f 5f fd 5c ec fb a7 c5 7f ae 65 9a da 28 b5 01 0e 76 e2 29 9d 26 8d ee a5 bd cb 72 44 a5 c3 b7 ac fc 56 b5 35 c7 a1 6e 3c 94 a6 ca bb af 8b 4d 1d e8 fb 01 b8 74 28 86 fb fc 9d c1 d3 f4 50 8c ba 84 fe 89 e8 57 ed 29 12 aa a6 7a a0 c7 23 4f 55 c8 2b 52 a2 4c 85 ea 53 b5 2c a2 ba 2e 71 ae d8 fd 06 5a ed dd 83 be 80 f2 19 2f 7f c7 12 39 36 de bf 71 23 37 1b 0f 77 db 8b 1a 20 c9 d0 cc 4e c5 e7 26 3b b0 5c d3 8f aa 7f 0e 77 f8 81 ff ac 7e 6b 42 e3 4a e7 35 48 13 84 00 f0 bb 4e 80 a0 c9 57 02 d9 9e 10 cb ff 87 65 fa e7 83 e6 01 08 de d2 f2 d7 06 81 af 69 ba ed 6e 78 e8 93 ff 7c 85 b2 e8 93 99 c2 b4 67 7a fa eb 72 5d ad 7b f5 a0 a3 b0 67 18 58 06 89 41 63 00 0c 2e 43 ca Data Ascii: Z\|x=\`]>/sZV5bj_\e(v)&rDV5n<Mt(PW)z#OU+RLS,.qZ/96q#7w N&;\w~kBJ5HNWeinx\|gzr]{gXAc.C
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 6a 64 dd 72 18 16 15 9c 1e a6 8a 51 e4 a0 f2 0b cb df 3b f9 5d db 6a 6b 6a 9c ef d8 80 06 2d 4c 4d 81 53 f9 75 d4 b1 89 fe c8 d0 31 38 2c 01 17 d5 bd c5 5b 68 42 f6 4f a9 e7 34 e8 f4 88 89 47 f5 cb d4 b2 5b 14 97 ee ac 5a 6c 61 1c 28 dc 3b 78 3e cc d8 06 a8 a0 bc a5 fb 17 c6 e6 85 4d 5d 32 69 a8 db 6b eb ed 0c a9 97 77 50 16 10 69 f1 fa 32 51 7c 74 1b 7f 8a 8b fd b1 eb dc b8 df 4d e1 d2 39 69 51 b5 83 4c d8 fc 74 48 c5 53 50 e4 cb 17 bb 56 2c 20 98 d7 86 64 59 8b fa 96 2c 2e 8a 7c e9 aa 8a 4f 15 93 5c 4e 45 9b 97 2d 67 58 9c 23 fc 49 35 1c 36 2b 32 ed 22 69 a8 1b d2 3e 6a 78 29 55 0f 48 a3 a2 35 d2 6b 10 f4 cc 2e 8e 65 7a 8c 74 83 dd 20 2a 61 1a 36 a2 fd 29 1b b6 e6 7c 7b e3 58 16 96 8d 39 b0 22 64 4a ec 8b 68 ed 39 99 c5 78 18 7b 0d e6 dd 44 1f 9d 20 8c Data Ascii: jdrQ;]jkj-LMSu18,[hBO4G[Zla(;x>M]2ikwPi2Q\|tM9iQLtHSPV, dY,.\|O\NE-gX#I56+2"i>jx)UH5k.ezt *a6)\|{X9"dJh9x{D
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 8f 8f a3 3e ed 32 c4 1d 68 65 26 9a 2b c2 08 5f 5f 3b 47 2d 62 06 0f ab f0 f6 71 74 b0 44 1a c8 0e 10 69 4e 19 59 32 ae be a9 1a 83 c0 49 93 40 c1 db 00 a1 a0 c9 42 8c 9a 22 86 43 aa 25 6f fc 74 2d 55 08 59 53 f3 76 87 51 14 53 41 e1 f7 cd 92 86 dd b4 f3 cc 86 5a a3 fb 8c 35 1e 68 44 af 1d 5f 3c 3b 82 7f 75 a5 a4 43 68 da ca 9b dc ba 42 52 6a 42 71 f4 48 4c a1 9f 9e 45 16 c0 d5 c7 c5 93 55 20 49 b5 7a 73 97 3f 98 75 ef 36 56 02 c0 d8 73 5f 49 d4 fd ec ba f5 02 ea c5 ef b5 f7 51 c4 65 e2 8e bb dc bf f3 e5 66 ad ab 24 10 ee 8c 65 61 8a fe 13 3b 46 4d 0c 3c b2 6a d5 ad 10 2b bf ac 23 5b 43 cf 15 a2 8e ba 17 9c d7 fe 1d 6d e8 ec 8a 2b a8 86 4a 51 fc 37 34 ba b1 d7 bc e6 38 10 7a 89 88 a2 d4 0f f6 91 b0 d6 48 c9 22 59 eb cc 9a 3b a4 cd 2c 19 f5 b0 19 c5 e5 2e Data Ascii: >2he&+__;G-bqtDiNY2I@B"C%ot-UYSvQSAZ5hD_<;uChBRjBqHLEU Izs?u6Vs_IQef$ea;FM<j+#[Cm+JQ748zH"Y;,.
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 96 d1 d2 43 a6 4c b4 b5 ef 11 84 2c fd 9b a5 aa fd 7c fe 67 ae 5e 78 fe 67 0a 03 52 44 7d d2 94 23 b6 af 09 5e d5 97 35 22 b1 f2 ca 45 2a 6d 5d 47 0d 52 fc e1 3c 53 88 57 9b f3 80 ac 78 81 15 82 c8 c0 95 be c9 33 80 0f 4c 23 62 34 9d 35 f8 fc cb 80 ef 68 f4 d4 91 1f 68 4d f2 c5 f9 74 fe 5b c8 74 20 be d6 a5 3d 9b 33 53 50 66 6f 69 5d 14 47 db 73 70 fe 63 ff 4d 54 de 5a 5d 55 05 db 79 74 c9 21 6b 66 54 8a 46 f9 83 e5 d2 ac 99 7a 2d b5 a2 af 2e 17 10 d9 91 2c fb 7c 76 c6 bf 3b 79 87 03 03 a1 70 56 da 73 b3 63 59 49 30 0d 2d a5 0b b6 ea 73 c8 0c cf c1 c3 24 ce b5 9c 32 79 2b 35 7b 82 39 60 de 41 63 dd 08 96 13 eb 67 73 c9 c0 9a 1f 7c 1d c2 a3 db bc 13 22 f5 69 fd da 7a fa 4c 7b 67 2d db d3 a5 72 7b b7 b8 91 34 64 46 78 82 bf 7f da 7c b6 ad ff 2e db 4a 8d b4 Data Ascii: CL,\|g^xgRD}#^5"E*m]GR<SWx3L#b45hhMt[t =3SPfoi]GspcMTZ]Uyt!kfTFz-.,\|v;ypVscYI0-s$2y+5{9`Acgs\|"izL{g-r{4dFx\|.J
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: 46 dc c6 43 33 cb ff 8d c9 b7 76 c7 5d 05 fe fc 33 7b 82 0f 7f 0f e0 89 1e 4f c0 d9 27 b1 28 17 32 e3 52 bd c3 8c 50 34 c6 f4 68 44 b7 7a c8 4a 0c eb f9 e0 20 5a 27 08 b8 65 53 7c f5 14 10 0f 7b 9c d2 96 cd 02 e7 94 85 81 55 86 9a 3a c8 d0 9c 63 af ad 71 c0 7c f8 3c 36 3c d5 51 1d 5b a8 8a d3 62 77 3f e4 d1 36 b9 33 ea 5a d4 aa 62 92 0d ac c4 f9 60 db 84 d6 df 1b 86 4a e9 dd 14 dc 66 bc ed 85 f7 08 e0 15 c2 93 03 1a 80 2a f7 b1 ce 4b 44 31 ea 67 96 57 e3 cd 2f f0 30 b3 a7 33 20 75 b7 e3 08 92 38 9e 1d 6c e1 f3 59 10 ce 92 77 46 3d 83 b0 b3 fd 3c da 3e b2 a9 97 fd d1 25 aa 61 85 57 d6 43 02 b6 46 95 d7 6c 9c 6b 76 cb c3 98 b0 0a e8 69 45 c3 87 e0 50 43 69 52 ed 16 2b fe c7 0f 89 9e 53 f6 9f 71 ac ae 91 06 9f f5 ec e9 db ed 6b 76 e3 9a 27 7b 96 b5 b7 42 13 Data Ascii: FC3v]3{O'(2RP4hDzJ Z'eS\|{U:cq\|<6<Q[bw?63Zb`Jf*KD1gW/03 u8lYwF=<>%aWCFlkviEPCiR+Sqkv'{B
2023-12-05 18:13:40 UTC	1379	IN	Data Raw: fb b6 30 d1 1b 47 9b 0e 78 2c 10 6f d8 9a 9c 06 a0 85 56 89 3a 5e 6b 87 68 33 fc c9 0a 3b a7 b6 e6 7a ab d1 19 53 2e 3f 28 9b ce 7a 41 79 e7 ac 82 38 8f 52 93 43 9d b6 de d2 ee 61 5a 8a 9e 31 f3 cc 06 b6 3d 0a b7 5b c3 dd ea 46 d5 77 3d d7 48 17 92 f8 af f5 c6 fc 18 55 62 f8 df 89 ed 50 1b 3b f6 74 ec 86 15 d6 fc ea fd 55 49 29 81 2a 70 1b ed 16 d4 58 97 39 ec d9 af 8e 06 6f 85 9f c3 bc 16 a7 5a a2 54 b1 1c 1c d4 34 64 a0 32 3a d1 14 48 ef 65 b0 86 b8 94 d1 70 23 96 1b e1 a0 de 66 27 6d b9 71 1c 59 c6 2c a5 cc df 43 5c 57 63 ac ac 44 84 75 73 53 55 7a 1c ce c5 24 53 b7 93 a1 48 ff 23 56 01 48 3d 7a e4 16 45 25 6e ea f2 b8 a5 dc f0 fe a2 cc d6 8c 2c c4 0e 04 ee f5 bc 63 c2 16 83 4e 5c 62 33 54 01 9a ec 75 d6 a6 a9 86 c1 bc 54 5e 77 5a 76 bb 2c 3d 79 06 25 Data Ascii: 0Gx,oV:^kh3;zS.?(zAy8RCaZ1=[Fw=HUbP;tUI)*pX9oZT4d2:Hep#f'mqY,C\WcDusSUz$SH#VH=zE%n,cN\b3TuT^wZv,=y%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49999	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	676	OUT	GET /fonts/family/imperial/imperial-italic-700.996d951f04d92feac357036afa5da0bc.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:41 UTC	1111	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 32 30 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 74 70 2d 5a 68 55 54 4e 76 45 34 72 68 66 33 6f 32 4d 5f 44 39 32 68 50 49 6e 6a 6c 38 45 59 30 73 78 64 32 7a 6f 48 73 34 77 77 32 6f 71 56 47 50 58 55 54 34 75 56 59 46 68 6a 34 4b 37 51 79 77 38 55 4d 59 4a 55 7a 65 75 65 72 72 6b 42 74 77 62 4e 66 71 76 72 77 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 31 20 41 75 67 20 32 30 32 34 20 31 31 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 27204X-GUploader-UploadID: ADPycdtp-ZhUTNvE4rhf3o2M_D92hPInjl8EY0sxd2zoHs4ww2oqVGPXUT4uVYFhj4K7Qyw8UMYJUzeuerrkBtwbNfqvrwCache-Control: public,max-age=31536000,immutableExpires: Sun, 11 Aug 2024 11
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6a 44 00 10 00 00 00 01 29 a0 00 00 69 e5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 10 1b cc 4a 06 60 00 85 76 08 46 09 97 62 11 08 0a 83 cd 54 83 8a 30 01 36 02 24 03 88 04 0b 84 04 00 04 20 05 83 33 07 86 05 0c 81 18 5b dd 04 51 c3 76 fd 00 64 37 e0 7f ea 8c aa 79 e3 d9 08 db e3 68 70 60 79 c2 8d a1 77 3b 4a a0 f7 7a 73 f6 ff 9f 99 d4 64 ac 34 87 c9 ba 8d 01 20 82 ea 3f 97 4d 8b 4d 6c 93 74 70 ac 6e 6a 29 c1 a1 3b 76 a1 2b 1a 73 1b 82 90 70 5c 56 17 91 14 b5 a8 20 a2 19 26 de 30 f6 cc b8 cd ec 78 e2 6c e7 78 a1 22 77 5c 0b f2 8e 1b ca 4a de a3 94 65 c3 de 2b da 7e e9 0a 39 06 33 4a ea f3 0d bf 12 fe 88 e8 25 da a2 98 34 d1 81 82 37 f1 17 ff 31 a3 a2 a2 14 6e 54 98 5f d3 d4 93 1e bf 87 6d bb Data Ascii: wOF2jD)iJ`vFbT06$ 3[Qvd7yhp`yw;Jzsd4 ?MMltpnj);v+sp\V &0xlx"w\Je+~93J%471nT_m
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 3a 78 49 c7 59 17 59 b7 59 3f bf 2e a8 0c 6a 80 d6 39 8e 3e f7 7f 58 75 41 15 bc 0a fe f1 12 d9 41 f6 75 f6 9d 53 3d 60 7f 8d 64 22 66 88 00 51 21 4e a4 22 3e 2a 9b 90 05 c8 8f 1c 68 24 60 ac 21 38 00 12 13 8e cd 16 61 a8 40 66 24 f2 88 14 c7 fa b1 4a c9 c4 a9 3c 55 82 6a 0a 89 ea 35 48 d3 1c eb 67 68 d5 26 d3 a8 f5 b3 8d 31 4e 8e e9 ab f3 cd 3b 55 81 65 f6 28 b4 cf 31 2d 4e c4 fa 53 9c 76 d6 54 57 d7 9f e1 a6 5b 66 ea 5f 3d db cf 0f ea 1c bf fd 31 57 c5 54 89 8e 40 95 68 32 7d 12 8c 42 a3 95 16 2e e3 40 42 52 4a 5a e6 47 65 79 2f 89 20 e2 fb c1 88 8e 66 c8 2f ff 7f e7 05 44 85 a4 06 68 90 b4 48 3a 04 3d 8a 01 60 4c 4c 28 e6 cc 92 59 b3 01 94 41 d8 10 6c 18 65 04 85 ce ec 99 33 73 c1 3c 10 2f c4 07 61 20 81 43 42 90 68 e5 6d 16 43 89 43 09 28 09 a5 a0 34 Data Ascii: :xIYYY?.j9>XuAAuS=`d"fQ!N">*h$`!8a@f$J<Uj5Hgh&1N;Ue(1-NSvTW[f_=1WT@h2}B.@BRJZGey/ f/DhH:=`LL(YAle3s</a CBhmCC(4
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: da 9b 51 17 fa 45 84 27 df 3b cf 07 9d 7e b3 7c 62 0d bb f1 11 e6 29 9f f5 fb f7 84 36 22 4b 3d f1 78 be dd 81 fd ec a5 17 f3 67 48 02 e8 84 46 d7 14 35 eb 3f 6d 83 75 7c 45 de 52 69 90 76 f0 47 5d 66 22 66 ae 58 3e 62 4d fd 27 07 52 3e 2b 8f 8a dd 38 74 c5 3e 00 47 35 f7 79 d6 f0 ea c7 fb 5e c2 bc c5 ff ba 40 2b 48 e8 21 ba 30 2c e2 6e 3c 88 62 eb 6d ef bd 4e ee 00 c5 bd 92 80 a4 94 b4 4c 64 4f bf 7d 8e 91 a7 15 38 45 df 94 4c 28 33 2a 2e db a4 6d 9d 6d 27 4a 8f 34 a5 92 85 21 10 2c cd 03 b3 14 cd b0 46 18 b6 71 1e 7b 8d 8e 78 09 a8 0f 4b 73 3b 9a ff 62 a2 dc 65 8c 62 b6 4e bb 9d b3 25 36 ef 2c a8 21 1e f5 fb 36 98 c4 9f 9a 74 f1 c7 5d 6f 53 c1 ba b8 79 09 4a 4a 49 cb 94 39 28 af 30 91 b4 21 54 62 e3 66 cf 62 7d ba 43 5c ae b8 4d 77 f9 23 2e 17 13 ff 81 Data Ascii: QE';~\|b)6"K=xgHF5?mu\|ERivG]f"fX>bM'R>+8t>G5y^@+H!0,n<bmNLdO}8EL(3*.mm'J4!,Fq{xKs;bebN%6,!6t]oSyJJI9(0!Tbfb}C\Mw#.
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 73 e6 2d 66 6e bb 6c b2 ec b5 3c d7 61 78 38 3c ee b4 e6 a8 cc 9e 2a 3c 51 cc 45 36 39 8c bd 95 ce 73 88 ef 05 35 cf f1 6c 32 d2 69 81 8e b4 12 32 19 48 52 c4 25 21 29 25 2d 33 6b 5c f9 fe ab 16 be bb 82 61 dd eb d9 19 47 30 5f 73 d5 a2 36 39 3b 0b 4f 98 0d 29 f4 fa f2 e4 9d ba 7a b7 07 61 a6 7d 2d da bd a4 d0 16 5a da 33 b5 af 86 3d 03 fb 44 4b 93 b5 5f 93 6d 86 7b 25 d6 fc 7a 10 4d 26 c3 d7 4f 6f a8 7d b5 56 33 d1 f1 c3 69 ae 12 5a cb bf 7e fc 69 95 fa 1f c6 ff 5e e5 8d b9 75 ac 9b ad ae c5 22 8d 14 5d a4 3b 60 dd c3 82 5b 56 d2 c2 8c 04 69 c6 f4 a9 a5 dd 69 11 39 cb 1a 81 d6 e9 8a fe 00 33 18 6f db 74 ac cf 66 c3 28 9b 08 b9 9f 50 99 0a d3 7b 06 61 0a 37 c3 24 ed b5 f2 96 9c a2 ad 5d b4 0f a5 0f 77 e6 a0 8b 7b ad 38 a6 7f ba 85 e8 8e 3a c3 08 f9 e3 f1 Data Ascii: s-fnl<ax8<*<QE69s5l2i2HR%!)%-3k\aG0_s69;O)za}-Z3=DK_m{%zM&Oo}V3iZ~i^u"];`[Vii93otf(P{a7$]w{8:
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 1b 77 d4 3f 96 13 39 95 81 64 32 94 5c 46 32 16 27 28 39 07 ea 14 85 45 cf c8 6a 46 23 57 a5 d9 46 26 1d 9f e3 b4 df 12 5c 38 17 47 b5 76 05 60 94 3b 82 09 49 6b d2 0c ad af 72 e3 39 ac a5 67 47 96 31 57 c7 62 a2 d4 85 a7 ea 9c 72 06 8a b5 a5 e4 39 f0 ca 56 ef 45 ca 2c 4e 0a 0e 4e 71 c5 38 f7 bd 0f 8d 5f 80 10 ea bd 93 b5 72 1e e3 87 8e 97 40 8d 91 ad 31 f2 90 be 0e 39 5e a1 ba 56 3b 6e c8 b6 52 38 89 ed 7f 8d a2 82 7c 07 95 d2 c9 a0 20 aa 6e e7 6f 23 1d 49 42 18 9b aa da 5f fd b0 89 9e b4 fa 50 ec b6 05 69 50 9b 15 97 2b 33 e2 a3 59 5e 2a 50 e7 ad af d5 4d 07 2a fe 04 b5 7a 0a 1d fc 55 9b 58 d2 5e 85 9f 6a b3 7c 30 3f 55 5a ce d5 b7 ce 74 48 e4 01 65 50 fa 7a 46 cd 1c e4 b1 7d d1 5e b1 88 62 9c 0a 3d a6 69 cd d4 92 32 f4 18 df 98 d2 c7 92 80 4e a5 93 f4 Data Ascii: w?9d2\F2'(9EjF#WF&\8Gv`;Ikr9gG1Wbr9VE,NNq8_r@19^V;nR8\| no#IB_PiP+3Y^PMzUX^j\|0?UZtHePzF}^b=i2N
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: cf 29 61 6a eb d9 98 9c 86 05 1c be 14 76 d3 84 d5 98 b6 9e ab 38 b0 ee f2 64 0d 79 2a b4 67 a0 90 c1 11 20 20 08 6c 11 c2 ae e2 e2 e3 e9 fb fb 7e cf a0 8c 4d d1 9c 53 51 3c ee e4 63 a0 8d f3 f8 df fc 45 88 45 00 85 21 9e cb 39 ef 76 73 07 67 58 95 32 8c 35 9a 5d 49 87 48 de 95 6d ca cd ee 68 28 eb 53 d2 0e 25 24 57 dd 2a 7b f3 27 b9 15 b8 27 37 91 5a 3b 13 35 e0 e8 99 3a 82 eb 63 50 1b 8a 52 ca 4e a8 c8 14 22 4c 87 db 90 43 a9 75 0f 95 69 f7 97 05 6c ae 54 88 11 ac 53 99 05 61 88 49 23 ee a7 7a ad d6 28 91 67 ea d8 a1 6c 9e 84 c2 85 95 31 c9 29 a1 8a 69 7d ef 3a 83 c0 80 16 d6 92 df 15 86 25 c5 c6 0d a6 07 75 66 a2 0d 77 d7 47 b9 ac 44 b0 93 04 ae a2 89 e9 73 33 84 a2 cf e4 04 3f 11 f8 46 2b 90 77 6f 2c de 40 15 2e 5d 4f b4 8e 7a 47 5a 6f a3 dc aa 33 8a Data Ascii: )ajv8dyg l~MSQ<cEE!9vsgX25]IHmh(S%$W{''7Z;5:cPRN"LCuilTSaI#z(gl1)i}:%ufwGDs3?F+wo,@.]OzGZo3
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: e6 dd 0f e8 9f 44 03 9e 7e 6d ae 16 a7 e3 11 1b 94 ae 3a 52 6a 53 42 81 b7 6b 35 37 ce d5 5a 78 44 4d 5b 4a e5 47 b7 a2 6c 29 00 01 dc 88 07 87 52 db ea c2 3e 0f 43 3c 9b 87 af d4 ec cf 01 c7 36 75 d4 80 5e f4 10 bc 94 3c b1 de 9a 93 31 27 ee dd 3a 26 5e ef 93 50 4c 06 78 c4 7b 87 07 f0 89 20 f5 2f bf 3e 5a 93 9c 0f ff e6 fe 2a bc c8 0c 57 59 60 06 7b c3 13 c2 ca ef 76 17 15 3e 2c 1f de 6d 92 6e 0c d4 60 f7 7e 76 28 7d fd fd cb d2 c0 89 17 91 25 e5 ba 96 0e 8f a8 c9 a4 21 6a 7d 4d 73 ab be ea b4 3d 9a 20 b4 5e 82 0d 24 18 ef 89 1e 4c 06 cb 11 67 b1 b9 35 7e d1 d2 53 03 85 65 7d 09 d4 71 64 5b 23 30 33 cb 44 ee 09 62 83 11 6a c2 e2 98 ce 10 1b 13 fe 6b 71 0c 61 8f e5 e4 1f ba 11 8f 67 40 c2 93 0e 3d 9b 4c cc 3d 64 f1 ca 72 62 2e 18 29 cb 1d c3 72 7c 5c ca Data Ascii: D~m:RjSBk57ZxDM[JGl)R>C<6u^<1':&^PLx{ />Z*WY`{v>,mn`~v(}%!j}Ms= ^$Lg5~Se}qd[#03Dbjkqag@=L=drb.)r\|\
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: a1 6c ec d1 85 34 52 cc 59 11 88 c9 fa 17 35 0a 47 88 cc da 50 47 88 bd 1c a6 67 e9 5b f5 77 b6 7c c1 e4 42 c1 e2 20 77 bd 9a 93 b0 1e 30 30 df 72 6d b4 b8 ea 47 30 15 ae f1 05 3c 03 e6 b3 28 cf f2 e6 e2 32 2e 35 b3 38 7d f9 b6 64 da 1f eb 3e 00 d3 9e 8c b9 ab a4 69 1f ac 67 96 98 b7 de 95 7c 96 c3 48 38 f6 cd 27 38 4f 47 bf 79 91 6f 75 f3 22 ff cc 7a 6f f3 6e 6c 69 90 0b da ec 26 81 7a fa 72 d3 9d 51 9c e9 49 b8 63 1e f0 d9 20 db 65 5f e0 00 a1 91 74 d6 8f 4f e6 33 6e 44 bc 07 a6 83 3e 32 44 4c 27 62 64 32 6b aa f4 d7 c5 ed 4d 6c 20 48 61 a9 3b 13 ab 52 d9 1e a9 a7 2f c7 ec 28 da 5b 4b 3f 05 ae 58 53 3a de 5c 8d 3b 52 7e c4 60 cd de fe c5 fe 76 af df e9 81 e5 c1 4e b4 0f 46 02 e8 08 ba ee 0b 66 8a 0a 2d 73 f7 41 10 7d 48 18 87 b5 e9 fd e4 b4 5b 0a 06 02 Data Ascii: l4RY5GPGg[w\|B w00rmG0<(2.58}d>ig\|H8'8OGyou"zonli&zrQIc e_tO3nD>2DL'bd2kMl Ha;R/([K?XS:\;R~`vNFf-sA}H[
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 05 1f 91 af f4 52 19 ab bd 9f 65 19 33 ca e2 39 51 c0 14 94 0b 11 af 45 5b ce 52 c7 17 3a 6d bc 0f 11 90 43 cf d8 ff 66 53 28 39 73 0a 8b a3 fe 2a dd 02 80 5a 91 68 d8 e2 ab f9 f8 ef 13 8c 80 44 79 98 47 ed c0 a6 72 bc 2b 21 0c d3 16 a4 c7 41 7a 52 89 3b 97 57 be b8 cc 71 ef 7f ec 57 7e 3f 43 8a 25 1d dd 3d c9 4e 5c a7 f3 97 eb c3 c9 69 91 25 7b 16 98 f6 c6 90 1f 91 9b 92 2f 67 b2 ba 85 c8 c6 a9 42 1c 93 63 01 7f a7 b9 79 5a 41 9d db 5d 27 d0 f8 1b 02 f9 bc 2f 11 a0 11 c8 38 3b 34 b0 33 99 80 91 b8 b9 0c 7c 50 60 54 5a 64 2c c4 c3 75 c5 9d 49 06 bb cf 98 80 9c 86 76 c4 f3 bc a9 19 25 34 64 55 6e b8 e5 35 eb f0 2e a0 b0 ac 39 94 07 57 15 d8 63 3c 85 da 2f 50 ba 29 0d fa 62 fe 76 7f 5f 4f a1 c7 11 b3 ee ec 12 d7 f3 88 06 d1 0e 54 b1 4a ce 64 02 83 14 4b 9a Data Ascii: Re39QE[R:mCfS(9s*ZhDyGr+!AzR;WqW~?C%=N\i%{/gBcyZA]'/8;43\|P`TZd,uIv%4dUn5.9Wc</P)bv_OTJdK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50010	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:40 UTC	1623	OUT	GET /als?uri=nyt%3A%2F%2Farticle%2F5802e4f2-c830-5f17-ab9e-b5740b9fff98&typ=&prop=nyt&plat=web HTTP/1.1 Host: als-svc.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:41 UTC	435	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 35 35 37 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 32 34 0d 0a 73 74 72 69 63 74 2d 74 Data Ascii: HTTP/1.1 200 OKcache-control: private, no-store, no-cache, must-revalidate, max-age=0content-type: application/json; charset=utf-8date: Tue, 05 Dec 2023 18:13:41 GMTcontent-length: 1557via: 1.1 googlex-envoy-upstream-service-time: 24strict-t
2023-12-05 18:13:41 UTC	1557	IN	Data Raw: 7b 22 61 6c 73 5f 74 65 73 74 5f 63 6c 69 65 6e 74 73 69 64 65 22 3a 22 77 65 62 5f 6e 6f 6e 65 5f 6c 6f 77 5f 32 30 32 33 31 32 30 35 31 38 31 33 34 31 22 2c 22 55 73 65 72 22 3a 7b 22 61 69 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 72 65 67 69 49 64 22 3a 22 30 22 2c 22 62 74 22 3a 22 22 2c 22 73 75 62 22 3a 22 61 6e 6f 6e 22 2c 22 69 73 4c 6f 67 67 65 64 49 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6d 6b 74 67 22 3a 22 74 79 70 65 5f 61 6e 6f 6e 2c 6c 6f 67 66 2c 61 62 66 22 7d 2c 22 41 73 73 65 74 22 3a 7b 22 70 74 22 3a 22 6e 74 31 30 2c 6e 74 31 32 2c 6e 74 31 33 2c 6e 74 31 34 2c 6e 74 31 35 2c 6e 74 31 36 2c 6e 74 31 38 2c 6e 74 32 2c 6e 74 33 2c 6e 74 34 Data Ascii: {"als_test_clientside":"web_none_low_20231205181341","User":{"aid":"XbK7A_KO3s8XVA_FdXv5zD","userType":"anon","regiId":"0","bt":"","sub":"anon","isLoggedIn":"false","mktg":"type_anon,logf,abf"},"Asset":{"pt":"nt10,nt12,nt13,nt14,nt15,nt16,nt18,nt2,nt3,nt4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50011	35.190.80.1	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	474	OUT	POST /report/v3?s=ZTE58r3lhnis%2FhN2fgE9or%2FqiTmXLkGXCam5m3eIJ0cEv8dAkhQgwW4USdv1FujwFqjZhJPHeto3W7e2dhYvQdsblpSByEHS2zTPcgM88hVo86GLTFW2d%2FzsTZDOCSk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 402 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:41 UTC	402	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 37 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 36 2e 37 2e 32 32 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 74 65 72 61 74 65 68 71 2e 63 6f 6d 2f 61 70 69 Data Ascii: [{"age":0,"body":{"elapsed_time":578,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.26.7.229","status_code":404,"type":"http.error"},"type":"network-error","url":"https://iteratehq.com/api
2023-12-05 18:13:41 UTC	168	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKContent-Length: 0date: Tue, 05 Dec 2023 18:13:41 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50009	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	447	OUT	GET /images/2023/12/04/multimedia/04israel-un-aid-01-bvqm/04israel-un-aid-01-bvqm-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:41 UTC	1208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 38 33 37 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 74 42 66 73 32 35 72 69 42 58 75 39 66 45 71 30 67 2b 73 58 4a 79 4e 39 6d 38 62 75 59 47 4a 37 57 57 51 61 61 51 58 7a 6c 49 59 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 138372Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "tBfs25riBXu9fEq0g+sXJyN9m8buYGJ7WWQaaQXzlIY"Expires: Tue, 05 Dec 2023 10
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: ec 60 78 98 0b 72 ea 3b 0f cf 7a 10 e7 9d 15 e2 6d fd 2e 4f 90 fd 28 43 93 5f 47 8f 68 47 d0 f0 b2 3f 6e 5e ac 39 60 f8 b4 41 fd 66 3f 9d 5a d6 30 6a 2e 17 67 1c b6 89 21 76 07 53 72 c6 36 34 44 59 20 ce 24 3f 50 2b ce c9 19 78 93 e5 cc f5 31 35 e1 43 f4 a2 aa 30 da 9c 1b 9e f4 f6 b3 7c 9c 38 fc c5 45 f0 b7 01 8f a4 1f 91 15 3e d2 fc 25 ec fa 8a ba 81 a7 1d aa 2f 2a 65 3b c6 c3 fc 7b 53 09 7f eb 7d 41 a3 57 74 c2 9f 72 ce aa 5c 8c 83 ed f4 f9 d5 50 e7 06 a0 92 ee 24 d9 9c 51 a9 05 30 98 20 d4 81 70 37 a1 b1 5c 44 cb 90 7f 0a b5 f1 09 a4 e0 f4 a6 a5 11 53 2d 00 bb 53 c2 8d c5 57 49 17 03 7a 91 a4 19 1e a1 ff 00 bd 3b 42 dc 7e 8e 74 d0 bb d2 79 9e e2 a3 f3 ca b6 e3 6c 52 7a 46 9b 2c e0 e2 98 69 a9 72 0a 9d a9 eb 22 b6 f4 a9 3a 1d b3 d9 e7 f2 a8 f5 6f f5 15 Data Ascii: `xr;zm.O(C_GhG?n^9`Af?Z0j.g!vSr64DY $?P+x15C0\|8E>%/*e;{S}AWtr\P$Q0 p7\DS-SWIz;B~tylRzF,ir":o
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 18 ca 73 b6 a2 ce 00 ec 03 1d 3f 95 17 b7 e0 fc 3e de 31 1c 70 fa 73 cb 3a 47 e0 b8 a2 39 35 5e 6b ab 7b 70 5a 69 e3 8c 63 f7 d8 2f ea 6b 6d 11 bb ad fb 9e 23 9c dc 74 ea 75 da f6 26 8a 18 22 ff 00 45 0a 27 f6 54 0f cc 0a a7 21 fe 97 6f ff 00 15 ff 00 e4 6a 15 71 e2 ee 01 6f 9c df 2c 87 b4 40 bf e6 05 54 e2 7c 71 6d 6c 2d b8 a4 70 34 88 ee ac a8 48 43 89 10 e3 27 07 04 75 ab 8a bb 48 cb 23 ad 2d f7 36 19 a4 cd 73 1f f2 de fe e6 30 d0 45 6b 0e 41 da 42 cc c3 7c 6e 76 06 84 dc 71 df 11 4b 9f e9 a7 07 a4 45 54 7e 5b d6 6e 69 3a a6 6d 18 39 24 d3 5b f9 9d 89 99 54 65 88 03 b9 c0 fc cd 0a 9f 8f 70 7b 72 44 bc 42 00 47 40 da 8f e0 b9 ae 1f 75 2d cb b1 37 12 48 cd 8f df 62 df a9 35 4b cc 8d 06 ee 06 d5 3e 27 91 7e 17 76 76 1b 8f 1d 70 58 73 e5 89 e6 fe ca 05 1f Data Ascii: s?>1ps:G95^k{pZic/km#tu&"E'T!ojqo,@T\|qml-p4HC'uH#-6s0EkAB\|nvqKET~[ni:m9$[Tep{rDBG@u-7Hb5K>'~vvpXs
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: b9 01 83 5a 6f 1c 9d 16 ce a4 e7 ed 54 ef b1 d9 0e c7 61 cb a5 69 f8 64 e9 0f 0b b4 79 a7 44 44 b4 88 9d 59 d9 42 0d fe bc ff 00 2a 8d 3a 93 b7 f8 99 a6 b7 05 1d 31 bd b9 02 44 77 11 78 4d c5 c2 b0 99 85 c9 65 61 a4 80 59 02 e4 60 63 3d 3b d1 af 03 dd db da 70 bb a6 90 48 ce d7 4e 00 51 9d 82 ae 71 93 8c 9a 05 2d e5 cd f7 0a e2 b7 92 1d 30 49 0a ad bc 5c 8a a2 b6 0b b0 e8 64 e8 2a ff 00 83 e5 b7 92 d4 5b b6 a2 cd 73 29 c2 82 76 0a bd 79 0c e2 88 56 a7 be dc 82 6e 7a 13 51 f6 8d ab df c4 b3 de 69 80 cd 1c be 59 07 d2 17 d2 98 20 86 de b3 46 c2 e5 a5 33 db c0 96 d2 89 75 c7 e5 4b 85 45 07 21 42 e9 3c f9 93 d6 92 cb 8b 47 f0 91 3c ca d2 4a da b7 45 01 4e 0e d8 34 8d e2 14 46 d2 b0 c4 0e ac 7a e6 03 ae 39 01 cc f4 a6 e5 89 37 ed 10 be b2 ea a1 b0 92 70 7b 9b Data Ascii: ZoTaidyDDYB:1DwxMeaY`c=;pHNQq-0I\d[s)vyVnzQiY F3uKE!B<G<JEN4Fz97p{
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 1d 0e f5 e9 f0 6e 51 cd c3 ab 5b e4 56 78 5c 46 65 c4 f0 9c 6e 47 1a d3 8a 49 6f cb 63 0c f3 2a 10 b8 66 63 b8 55 19 38 ee 7a 01 ef 4e 8e 50 e4 a9 56 56 03 3a 58 60 e3 b8 c7 31 59 db fb 8b a0 d1 08 1d 83 c8 f2 7a 57 9e 14 e9 03 7d b1 56 ed e0 bd 4f 2a e6 7b 86 38 03 ec f1 8c 6b 38 39 3f ca be 81 71 0d e6 70 51 93 aa b7 4a 92 7b f3 ee 7c bc be 8f c7 1e 16 39 67 92 29 ca d4 55 bd 4e 6b 6a 4a b9 58 6b 34 57 85 5a 24 b7 30 cb 3a b7 c2 ab 9d 67 07 07 4e 3d 23 1c c9 c8 da 83 4e ce 91 92 91 eb 6c 8d b2 00 03 a9 24 f4 1d 6b 33 2f 88 38 9c 23 44 17 ac 63 0e 64 31 79 63 46 47 71 8f 57 bd 61 f4 8f 18 b1 47 c2 83 f6 e4 b7 f2 4c e9 fa 0b e8 b7 c4 e4 fa ce 45 f6 58 e5 b7 9c d5 3a f4 3b 6f 0e b5 8a cb 8d 5e 45 0c 24 23 46 b8 6c 64 85 c6 08 df a1 3f 8e 2b 39 c5 af 63 bd Data Ascii: nQ[Vx\FenGIocfcU8zNPVV:X`1YzW}VO{8k89?qpQJ{\|9g)UNkjJXk4WZ$0:gN=#Nl$k3/8#Dcd1ycFGqWaGLEX:;o^E$#Fld?+9c
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 17 3b 6f 91 ab 6d b9 6f 56 e3 54 d0 f8 e5 8d 3b 8d b0 bc f3 de aa 1e 4b 80 c4 e9 3a ba 9c 67 23 96 c3 e5 54 84 57 c8 24 93 9f ba 3b 01 93 fc ab d1 a8 52 c3 1c c8 5d 86 76 3c f1 4e 00 95 5d b7 38 3f 86 d8 f6 15 34 6a c1 db 18 27 57 b0 df 1b 9f 90 a6 22 12 be 82 7d c7 be 33 54 2f 21 5b 8b 79 ad d8 e9 d6 a4 06 fe 16 1b 83 ee 01 a2 4c 31 a8 74 19 fc 85 61 b8 cf 89 56 d6 69 21 81 50 98 cf ae 46 c9 01 80 dd 40 18 c9 1d e8 7b a1 ae 66 2e f6 de f2 da f1 a1 b8 64 8e 45 51 ab 90 19 1b 82 37 dc 1e 87 ad 1c e0 77 50 cd 7f 00 93 07 05 b4 e7 18 d5 a7 6c 67 f2 ac f5 ff 00 11 87 8b 49 f1 17 b7 41 65 09 82 02 11 92 bb 00 02 8e 58 e6 68 6a de a4 00 08 0b 39 04 7a b0 57 04 72 23 ae 6b 18 c5 a9 c5 d7 ba ec de 53 4f 1c a2 e5 5a a2 d6 dc f7 3a fc a4 31 7d fa fb f5 a9 f8 5e d7 Data Ascii: ;omoVT;K:g#TW$;R]v<N]8?4j'W"}3T/![yL1taVi!PF@{f.dEQ7wPlgIAeXhj9zWr#kSOZ:1}^
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: ba 92 05 16 c8 94 66 a5 45 15 62 2b 7c a1 ef 55 65 0c 84 e4 52 d5 63 d2 d2 b3 ce 48 34 dd cd 30 b6 d5 e5 34 ec 92 42 29 b8 e7 5e 2d ce 9b 9a 76 03 81 a9 91 aa b0 27 7a 7a b1 06 8b 03 5d c2 2d 78 87 11 d5 14 37 8c 81 14 96 d4 e7 1b 0c 80 01 38 24 d3 2e ed e5 e1 57 30 2d d6 9b 98 a5 4d 69 84 55 6c fb 33 29 dc 1f c6 a9 f0 4b e6 b5 bc 46 0e 54 36 c4 e4 8e bc f6 ad 87 1b e1 93 5d c1 67 71 15 cc 6b 1a 31 66 91 d8 28 8f 3b 83 b6 58 9e d5 94 92 be 86 b1 9c 92 a5 29 2f 89 83 bb f1 0d f4 fa 97 59 c5 0a 58 a7 b8 62 4e 7e 66 89 43 60 b1 a8 69 0e 4d 48 ce 14 60 6d 5b 53 ea 61 b2 e4 8a 02 cb 1f 79 a9 62 82 13 26 92 7a d4 ac e4 9c 0d cf e3 5a 4f 0f 78 6e 7b fb a5 6b 88 1c 45 81 d3 19 39 a8 93 8a 5b 95 14 db 05 af 07 81 d7 21 ea ac dc 16 55 ce 93 9a e9 5c 5f c2 12 5b 46 Data Ascii: fEb+\|UeRcH404B)^-v'zz]-x78$.W0-MiUl3)KFT6]gqk1f(;X)/YXbN~fC`iMH`m[Sayb&zZOxn{kE9[!U\_[F
2023-12-05 18:13:41 UTC	16384	IN	Data Raw: 1e 67 ee c8 47 33 d0 93 fc ab 09 63 84 55 e9 6c e8 8c e5 2a 57 4c 2e 7c 54 46 1b e1 32 7b 86 00 fe 95 0b f8 aa 59 17 0b 6c 41 cf 3d 5b fe 95 a7 8e c3 86 36 93 f0 51 e0 81 ea 0b 85 27 eb 52 3f 09 e1 e4 6d 02 0d 59 c6 d8 e5 cf ad 61 ab 1f e4 66 95 93 f3 23 27 fe 54 dd 05 1a 6d f0 7b eb 24 7d 76 aa 87 c4 77 3a fc c1 0a 2b e0 fa b9 9d c6 3a d6 bb f6 37 0e fd eb 68 86 7e 64 fc c6 f4 8d c1 38 7e ac f9 36 e5 77 e6 08 df e7 9a 7a b1 7e 51 69 c9 f9 91 85 7e 39 7a ec cc ba 32 4f 30 98 3f 96 29 e3 8d f1 4d b3 20 c6 3b 0f e7 5b 94 e0 d6 00 b6 9b 68 cf 7d 88 db db 7a ba bc 2f 86 14 c0 b2 40 70 37 39 20 fc f1 47 89 8f f2 06 89 fe 63 9e 0e 3b c4 ba 5c 69 d8 f2 03 f3 18 a8 7f 6b f1 5c e7 e3 98 7c 88 1f 3d b1 5b d9 78 2f 0f 0f ea b5 87 1d c8 23 ae db 54 b1 f0 9e 14 a4 29 Data Ascii: gG3cUl*WL.\|TF2{YlA=[6Q'R?mYaf#'Tm{$}vw:+:7h~d8~6wz~Qi~9z2O0?)M ;[h}z/@p79 Gc;\ik\\|=[x/#T)
2023-12-05 18:13:41 UTC	7300	IN	Data Raw: fd 46 8a da f0 7b 09 2c a6 9c 3a 87 40 31 93 83 9c 64 e0 56 69 99 a3 90 33 36 37 14 26 c9 94 63 b5 1a 54 e1 a7 48 69 4e c7 1c ff 00 9d 48 21 b4 59 0c 40 0d c7 3a 08 dc 6a 46 41 17 4a ab 25 db ae 18 67 35 4a 54 25 8a 4d f6 35 76 11 5b 5b 99 43 11 be 7d f6 e9 54 2f da 24 52 c3 bf d2 b3 4b c4 27 67 27 59 a9 8b cb 2f de 6a 5a f6 a1 f8 0f 6b 14 5e 6b 62 00 02 9c f2 a4 71 96 23 26 a2 d0 17 91 a6 86 4c 9d 5b d4 db 7d 4d a3 8e 11 e8 0d 9f 8f 98 f2 16 2a a4 dc 7a 76 cf 4a 23 79 67 0c 9e a4 5a a2 bc 3b 56 da 2b 16 a5 7c ce 85 a1 2e 45 23 c4 a4 90 ef 21 3f 95 4d 14 b2 ea 0c b9 c8 ab 8b c1 80 60 d8 eb 45 a1 b1 8d 17 71 d2 84 9f 50 72 5d 8b 76 13 7c 40 01 97 d5 8a 4b cb 29 a7 7f 28 64 2e 79 73 15 25 94 f0 da ce ae dc 85 18 3c 4e 39 2e 44 8a 80 ae 37 ad e1 bc 77 67 16 Data Ascii: F{,:@1dVi367&cTHiNH!Y@:jFAJ%g5JT%M5v[[C}T/$RK'g'Y/jZk^kbq#&L[}M*zvJ#ygZ;V+\|.E#!?M`EqPr]v\|@K)(d.ys%<N9.D7wg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50014	35.186.253.211	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	696	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2361 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
2023-12-05 18:13:41 UTC	2361	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 74 6f 70 22 7d 2c 22 64 69 76 69 64 22 3a 22 74 6f 70 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 22 3a 7b 22 69 6e 76 43 6f 64 65 22 3a 22 6e 79 74 5f 77 6f 72 6c 64 5f 74 6f 70 22 7d 7d 2c 22 69 64 22 3a 22 31 31 36 39 64 39 61 37 36 33 63 61 38 64 61 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 31 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 35 34 34 31 31 32 30 36 30 7d 2c 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 Data Ascii: {"imp":[{"ext":{"data":{"pbadslot":"top"},"divid":"top","customParams":{"invCode":"nyt_world_top"}},"id":"1169d9a763ca8da","banner":{"topframe":1,"format":[{"w":728,"h":90},{"w":970,"h":90},{"w":970,"h":250}]},"tagid":544112060},{"ext":{"data":{"pbadslot"
2023-12-05 18:13:41 UTC	437	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 65 63 65 69 76 65 2d 63 6f 6f 6b 69 65 2d 64 65 70 72 65 63 61 74 69 6f 6e 3d 31 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 44 6f 6d 61 69 6e 3d 2e 6f 70 65 6e 78 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.nytimes.comContent-Type: text/plainSet-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None
2023-12-05 18:13:41 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 32 33 32 34 63 65 63 34 2d 65 65 30 36 2d 34 33 39 65 2d 39 66 65 38 2d 64 61 31 33 39 63 61 63 37 31 39 31 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"2324cec4-ee06-439e-9fe8-da139cac7191","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50016	44.198.213.90	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	787	OUT	POST /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&tmax=10000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 1876 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:41 UTC	1876	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4e 59 54 69 6d 65 73 5f 37 32 38 78 39 30 5f 39 37 30 5f 74 6f 70 5f 50 42 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 74 6f 70 22 7d 7d 7d 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 74 6f 70 22 7d 7d 7d 2c 7b 22 69 64 22 3a 31 2c 22 74 61 67 69 64 22 3a 22 4e 59 54 69 6d 65 73 5f 37 32 38 78 39 30 5f 39 37 30 5f 6d 69 64 5f 50 42 22 2c 22 62 61 6e Data Ascii: {"imp":[{"id":0,"tagid":"NYTimes_728x90_970_top_PB","banner":{"format":[{"w":728,"h":90},{"w":970,"h":90},{"w":970,"h":250}]},"fpd":{"context":{"data":{"pbadslot":"top"}}},"ext":{"data":{"pbadslot":"top"}}},{"id":1,"tagid":"NYTimes_728x90_970_mid_PB","ban
2023-12-05 18:13:41 UTC	644	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 35 20 4f 63 74 20 31 39 39 32 20 32 30 3a 31 30 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 58 2d 58 53 53 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:41 GMTContent-Type: application/json; charset=utf-8Content-Length: 19Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 15 Oct 1992 20:10:00 GMTPragma: no-cacheX-XSS
2023-12-05 18:13:41 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50020	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	678	OUT	POST /openrtb/pbjs?s=995821 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2478 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:41 UTC	2478	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 38 31 62 65 33 36 39 39 32 32 33 66 37 35 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 7d 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 66 61 6c 73 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 38 2c 22 69 75 22 Data Ascii: {"id":"281be3699223f75","site":{"page":"https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html","domain":"nytimes.com","publisher":{"domain":"nytimes.com"}},"ext":{"source":"prebid","ixdiag":{"ls":false,"mfu":0,"bu":8,"iu"
2023-12-05 18:13:41 UTC	749	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 62 34 38 66 65 63 31 66 66 64 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:41 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeCF-Ray: 830e43b48fec1ffd-IADCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: https://www.nytimes.comCache-Contro
2023-12-05 18:13:41 UTC	620	IN	Data Raw: 31 37 37 64 0d 0a 7b 22 69 64 22 3a 22 32 38 31 62 65 33 36 39 39 32 32 33 66 37 35 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 65 34 66 37 35 33 35 39 2d 33 66 37 33 2d 34 33 32 35 2d 38 32 61 62 2d 61 64 34 34 36 64 65 37 64 39 34 38 22 2c 22 69 6d 70 69 64 22 3a 22 33 31 66 62 62 30 32 30 32 64 61 38 64 32 64 22 2c 22 70 72 69 63 65 22 3a 31 33 38 2c 22 61 64 69 64 22 3a 22 31 33 31 36 36 34 32 38 22 2c 22 61 64 6d 22 3a 22 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 35 35 35 38 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 39 39 35 38 32 32 2f 38 35 2f 63 6c 6e 6d 67 6c 38 6b 37 62 69 38 70 6c 67 63 6e 6d 63 30 2f 65 34 66 37 35 33 35 39 2d 33 66 37 Data Ascii: 177d{"id":"281be3699223f75","seatbid":[{"bid":[{"id":"e4f75359-3f73-4325-82ab-ad446de7d948","impid":"31fbb0202da8d2d","price":138,"adid":"13166428","adm":"<img src=\"https://a5558.casalemedia.com/impression/v2/995822/85/clnmgl8k7bi8plgcnmc0/e4f75359-3f7
2023-12-05 18:13:41 UTC	1369	IN	Data Raw: 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 6b 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 2c 63 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 5c 22 73 74 72 69 6e 67 5c 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 5c 22 73 74 72 69 6e 67 5c 22 21 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 31 21 3d 63 2e 6c 65 6e 67 74 68 3f 2d 31 3a 61 2e 69 6e 64 65 78 4f 66 28 63 2c 30 29 3b 66 6f 72 28 76 61 72 20 Data Ascii: SPDX-License-Identifier: Apache-2.0 */ var k=this\|\|self;var l=Array.prototype.indexOf?function(a,c){return Array.prototype.indexOf.call(a,c,void 0)}:function(a,c){if(\"string\"===typeof a)return\"string\"!==typeof c\|\|1!=c.length?-1:a.indexOf(c,0);for(var
2023-12-05 18:13:41 UTC	1369	IN	Data Raw: 31 7d 69 66 28 66 29 7b 76 61 72 20 67 3d 62 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 65 3d 62 2e 64 6f 63 75 6d 65 6e 74 26 26 62 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 6e 75 6c 6c 7d 65 6c 73 65 20 67 3d 65 2c 65 3d 6e 75 6c 6c 3b 63 2e 70 75 73 68 28 6e 65 77 20 75 28 67 7c 7c 5c 22 5c 22 29 29 3b 74 72 79 7b 61 3d 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 68 29 7b 61 3d 6e 75 6c 6c 7d 7d 77 68 69 6c 65 28 61 26 26 62 21 3d 61 29 3b 62 3d 30 3b 66 6f 72 28 61 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 62 3c 3d 61 3b 2b 2b 62 29 63 5b 62 5d 2e 64 65 70 74 68 3d 61 2d 62 3b 62 3d 6b 3b 69 66 28 62 2e 6c 6f 63 61 74 69 6f 6e 26 26 62 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 62 2e 6c 6f 63 61 74 Data Ascii: 1}if(f){var g=b.location.href;e=b.document&&b.document.referrer\|\|null}else g=e,e=null;c.push(new u(g\|\|\"\"));try{a=b.parent}catch(h){a=null}}while(a&&b!=a);b=0;for(a=c.length-1;b<=a;++b)c[b].depth=a-b;b=k;if(b.location&&b.location.ancestorOrigins&&b.locat
2023-12-05 18:13:41 UTC	1369	IN	Data Raw: 74 3e 3c 69 66 72 61 6d 65 20 69 64 3d 5c 22 67 6f 6f 67 6c 65 5f 64 65 63 72 79 70 74 5f 66 72 61 6d 65 5f 31 35 32 35 35 39 39 36 38 5c 22 74 69 74 6c 65 3d 5c 22 41 64 76 65 72 74 69 73 65 6d 65 6e 74 5c 22 73 63 72 6f 6c 6c 69 6e 67 3d 5c 22 6e 6f 5c 22 66 72 61 6d 65 62 6f 72 64 65 72 3d 5c 22 30 5c 22 6d 61 72 67 69 6e 77 69 64 74 68 3d 5c 22 30 5c 22 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 5c 22 30 5c 22 77 69 64 74 68 3d 5c 22 39 37 30 5c 22 68 65 69 67 68 74 3d 5c 22 32 35 30 5c 22 73 72 63 3d 5c 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 67 6f 6f 67 6c 65 5f 64 65 63 72 79 70 74 5f 66 72 61 6d 65 5f 31 35 32 35 35 39 39 Data Ascii: t><iframe id=\"google_decrypt_frame_152559968\"title=\"Advertisement\"scrolling=\"no\"frameborder=\"0\"marginwidth=\"0\"marginheight=\"0\"width=\"970\"height=\"250\"src=\"about:blank\"></iframe><script>document.getElementById('google_decrypt_frame_1525599
2023-12-05 18:13:41 UTC	1294	IN	Data Raw: 61 73 43 58 61 75 72 41 74 75 72 71 77 4c 42 72 4b 73 43 39 71 79 72 41 69 57 75 71 77 4a 43 72 71 73 43 58 61 36 72 41 6a 75 76 71 77 4b 73 72 36 73 43 54 62 43 72 41 6d 4b 79 71 77 49 67 73 36 73 43 4b 4c 4f 72 41 70 61 7a 71 77 4b 71 73 36 73 43 46 72 53 72 41 68 71 30 71 77 49 6c 74 4b 73 43 4b 62 53 72 41 73 4f 31 71 77 4c 31 74 61 73 43 54 4c 61 72 41 70 71 32 71 77 4b 68 74 71 73 43 36 37 61 72 41 75 32 32 71 77 4a 50 74 36 73 43 68 4c 65 72 41 67 4f 34 71 77 4a 31 75 4b 73 43 35 4c 69 72 41 6c 79 35 71 77 4c 35 75 61 73 43 46 4c 75 72 41 68 71 37 71 77 4a 59 75 36 73 43 39 4c 75 72 41 68 43 38 71 77 49 33 76 4b 73 43 65 62 79 72 41 6e 47 39 71 77 4b 50 76 61 73 43 6d 4c 32 72 41 72 69 39 71 77 4b 41 37 51 55 44 49 46 37 33 42 41 4c 56 38 41 6e 4e Data Ascii: asCXaurAturqwLBrKsC9qyrAiWuqwJCrqsCXa6rAjuvqwKsr6sCTbCrAmKyqwIgs6sCKLOrApazqwKqs6sCFrSrAhq0qwIltKsCKbSrAsO1qwL1tasCTLarApq2qwKhtqsC67arAu22qwJPt6sChLerAgO4qwJ1uKsC5LirAly5qwL5uasCFLurAhq7qwJYu6sC9LurAhC8qwI3vKsCebyrAnG9qwKPvasCmL2rAri9qwKA7QUDIF73BALV8AnN
2023-12-05 18:13:41 UTC	1324	IN	Data Raw: 35 32 35 0d 0a 57 6b 35 55 68 68 62 5a 66 50 47 2d 49 54 62 54 4e 36 50 39 69 75 71 35 39 34 76 58 67 6d 46 48 76 36 6e 58 35 56 53 52 7a 59 57 35 48 5a 63 66 71 50 70 69 79 68 37 55 43 39 37 6e 43 69 58 65 70 4d 62 79 61 71 5a 6e 38 38 64 41 6a 6f 69 53 70 5f 78 46 46 56 46 73 62 55 34 70 67 26 63 69 64 3d 43 41 51 53 47 77 44 49 43 61 61 4e 5f 48 54 4f 32 74 58 4e 31 7a 67 55 52 4b 44 6f 35 2d 57 49 31 2d 37 62 50 47 64 77 56 52 67 42 26 65 78 6b 3d 31 35 32 35 35 39 39 36 38 26 72 66 6c 3d 5c 22 2b 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 72 66 6c 29 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 3f 72 66 6c 28 29 3a 27 27 29 2b 5c 22 26 61 5f 70 72 3d 31 33 3a 5a 57 39 6f 56 51 41 41 41 41 41 74 7a 70 75 52 63 37 43 48 62 42 6d 32 55 35 63 66 6b 77 4d 59 51 Data Ascii: 525Wk5UhhbZfPG-ITbTN6P9iuq594vXgmFHv6nX5VSRzYW5HZcfqPpiyh7UC97nCiXepMbyaqZn88dAjoiSp_xFFVFsbU4pg&cid=CAQSGwDICaaN_HTO2tXN1zgURKDo5-WI1-7bPGdwVRgB&exk=152559968&rfl=\"+(typeof(window.rfl)=='function'?rfl():'')+\"&a_pr=13:ZW9oVQAAAAAtzpuRc7CHbBm2U5cfkwMYQ
2023-12-05 18:13:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50023	104.36.115.111	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	767	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2255 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES; SyncRTB3=1702944000%3A220; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; pi=163427:3; chkChromeAb67Sec=2
2023-12-05 18:13:41 UTC	2255	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 31 38 30 30 30 32 30 31 32 38 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 35 36 39 34 63 30 34 66 61 38 64 63 61 61 65 22 2c 22 74 61 67 69 64 22 3a 22 6e 79 74 69 6d 65 73 5f 74 6f 70 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 74 6f 70 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 2c Data Ascii: {"id":"1701800020128","at":1,"cur":["USD"],"imp":[{"id":"5694c04fa8dcaae","tagid":"nytimes_top","secure":1,"ext":{"data":{"pbadslot":"top"}},"bidfloorcur":"USD","banner":{"w":728,"h":90,"format":[{"w":970,"h":90},{"w":970,"h":250}],"pos":0,"topframe":1}},
2023-12-05 18:13:41 UTC	229	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 204 No ContentAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.nytimes.comCache-Control: no-cache, no-store, must-revalidateDate: Tue, 05 Dec 2023 18:13:41 GMTConnection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50024	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	1781	OUT	GET /lire_ui/js/unified-lire.bundle.js?v=c4113f2 HTTP/1.1 Host: myaccount.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://myaccount.nytimes.com/auth/prefetch-assets Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:41 UTC	1165	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 33 31 31 38 0d 0a 78 2d 6e 79 74 2d 62 61 63 6b 65 6e 64 3a 20 6c 69 72 65 2d 75 69 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4e 6f 76 20 32 30 32 33 20 30 39 3a 30 34 3a 32 39 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 30 0d 0a 65 74 61 67 3a 20 22 64 69 51 47 30 67 22 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 63 35 36 38 36 37 35 39 37 62 63 36 31 33 39 39 35 64 65 66 39 33 33 34 66 66 39 63 66 65 64 66 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 163118x-nyt-backend: lire-uiexpires: Wed, 29 Nov 2023 09:04:29 GMTcache-control: public, max-age=600etag: "diQG0g"x-cloud-trace-context: c56867597bc613995def9334ff9cfedfcontent-type: applicat
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 ff ec bd f9 7a 1b c7 b5 e8 fb ff 7d 0a 08 49 18 c0 6c 42 04 a9 11 30 c2 a3 81 8a 95 68 8a 28 d9 f1 a6 b9 f5 81 40 83 68 11 40 c3 40 83 83 08 7c df 79 8d fb 7a f7 49 ee 6f ad 1a ba 1a 6c 4a b2 77 9c 9d b3 4f e2 88 e8 a1 ba c6 35 d7 5a ab 6e 7f 73 ab f2 2c 9d 55 46 49 2f 9e cc e3 4a 32 19 a4 b3 71 37 4b d2 49 65 3a 8a bb 3c 9a c7 71 65 31 49 06 49 dc df 1a 25 b3 b8 71 bc 98 f4 47 71 e3 e3 bc f1 e2 f9 93 fd 57 07 fb 8d ec 22 ab 7c 73 fb ff b9 35 58 4c 7a f2 69 2d ae 5f 9d 75 67 95 ac 73 b5 6a bb 87 95 49 6d 56 bf 4a 06 b5 ec 70 76 54 9f c5 d9 62 36 a9 c8 75 23 be 98 a6 b3 6c de 96 4f d2 8e 3c ea 5c 25 ad 59 34 6a dd 6a 46 f6 65 eb 6a b5 6a db 8f 62 f9 a8 d7 1d 8d 6a a9 fb 36 4a a3 fc 7a 52 e7 66 d4 b9 b5 9d 3f 5b 4d 1a e3 4e 1c 4d Data Ascii: z}IlB0h(@h@@\|yzIolJwO5Zns,UFI/J2q7KIe:<qe1II%qGqW"\|s5XLzi-_ugsjImVJpvTb6u#lO<\%Y4jjFejjbj6JzRf?[MNM
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: e9 51 3d ef 92 9b 9c 78 33 98 1e 16 51 b8 5a d4 35 13 04 00 6c 56 db d5 68 d4 d9 f9 26 db dc fd 66 b2 79 e7 9b ae 90 8d 87 77 04 c3 46 f5 ab b8 93 e4 5d 6a 55 a3 87 f5 cd a6 82 51 8f 17 f3 c5 b1 11 2d a8 35 f1 a4 cd af bd ed 7c b1 e4 76 14 bb 02 9b 3d 6d bc 49 4b 4f 96 cb 1d f9 d9 d8 48 6b bd a8 59 df ab 6e 9d c7 c7 a7 49 b6 55 a5 54 af d5 5b c9 2c 15 0a de 4a 6b 09 25 dd 14 25 6e 6d e9 b4 81 dd ed e6 5d b7 70 0f ef f3 69 12 2e 70 73 bb d0 46 b2 99 b4 12 b3 88 0f ef 36 dd 67 cd e6 bd f5 ef 76 6f fc ec de 6e fe 99 f4 b4 d0 dc dd 9b 3e 6b 6e 6f 3f 6c 31 36 7e e1 58 85 6f ee d4 eb 06 7b 74 38 0f ef 3d 34 38 f9 f0 ce 8e 6d 28 98 23 fa 6f 7b 7f df c1 60 e1 6d 75 6b 9c 7e 62 2e 7d b9 e6 76 d3 d5 f7 c0 75 fc 86 2f f8 76 1e 7e fa 80 0f e8 f1 1d a1 cc 85 0e 3f 70 Data Ascii: Q=x3QZ5lVh&fywF]jUQ-5\|v=mIKOHkYnIUT[,Jk%%nm]pi.psF6gvon>kno?l16~Xo{t8=48m(#o{`muk~b.}vu/v~?p
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: e7 df 5b fe bd e0 df d3 ce b0 d3 e7 f7 15 ff 3e f1 ef 19 ff 5e f2 ef 71 a7 e7 2c 09 df 75 1e d3 cf ef 3b d5 6a f4 5e fe fc 20 7f 7e e6 4f fb d5 b7 8f db 6a 65 1a 53 3a e0 d0 af ea d4 d7 e9 7c 07 0e 33 8a 8b cd fd cd 8f 9b a7 f4 5b ef f8 1d 77 ee 88 d2 76 b1 d7 dc 6e dd b9 5f a7 43 1f 3b d2 c1 c7 9b 9b d1 77 d8 9b 22 a1 a5 f6 33 ad df d6 86 aa f1 89 cf bf ef 7c ef 41 78 2e ec 83 0f be fd de ce b3 ed 35 7c ce f2 bf b1 53 f5 11 ac c4 fc 61 55 a3 bb f6 b7 69 b9 01 5d 29 02 d8 f7 9b 76 50 d8 a5 5e d5 57 e3 ce dd 87 ab b5 2a 9b 48 cd 02 fe fd 8e f6 c9 58 65 d6 88 79 34 ec 34 99 d1 cd cd 57 76 ba 5c 1d eb 53 e6 f4 18 ea 1c 6e 6e 86 74 b6 b9 73 b7 35 dc da 0a 1f dd b9 ef e4 af f5 a9 17 76 62 94 64 74 49 1d 30 65 e3 96 a2 e9 d3 ce 2b 34 fc a7 df 7e 07 7a 3e 75 e8 Data Ascii: [>^q,u;j^ ~OjeS:\|3[wvn_C;w"3\|Ax.5\|SaUi])vP^W*HXey44Wv\Snnts5vbdtI0e+4~z>u
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: c7 b8 42 fa 11 8e 85 52 e5 55 60 23 21 e5 13 a8 1a d8 0e b3 e6 34 b0 81 63 6d aa 8a 09 6b ab 0d 50 b5 b0 84 55 23 5a 80 02 bf 03 4b 07 ba 3f bf e8 dc fe cf 9f b6 37 6f 9f 44 f3 ce ed 43 38 dc ec a7 c1 11 77 83 ce ed 16 8e 60 27 68 c3 b7 3f a5 e9 f2 64 d6 bd 0d e7 bb 5d 3b 8c 5a 95 a3 7a cd 1b 32 ea 94 19 77 6e 47 3f cd 36 f7 b8 1c 4a 91 9f 32 aa 99 50 ec 9b 9f 06 7b 1b 3c bd ec dc fe 5f b5 d3 9f ce 37 eb 3f cd bf a9 fd 74 f0 8d fc de 8e 8e 69 a4 55 d3 ed 4a a9 e6 84 db 1a 9b b1 fd ad 74 32 ba 94 27 67 f4 69 7e 36 3c e2 cb ad c3 ec 78 34 3b ba da 59 dd 8e ce 3b b7 7f aa 49 4d 0d ad e8 27 29 fa 5a 1b 9e ff 74 70 f4 cd 5e bd cd 83 d3 ce 6d 36 70 46 83 a5 1a ec 78 70 41 65 ff c9 db 5a eb 70 36 3d 3a 8c 47 47 dd c3 9f ce b7 8e 36 eb f2 f8 36 3a e5 6d 6b 66 5a Data Ascii: BRU`#!4cmkPU#ZK?7oDC8w`'h?d];Zz2wnG?6J2P{<_7?tiUJt2'gi~6<x4;Y;IM')Ztp^m6pFxpAeZp6=:GG66:mkfZ
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 06 81 31 3f c7 f4 ad 7f 38 46 cc e2 8f 17 d3 fb f4 74 d0 49 a3 7e 3e 06 c4 a4 9b d6 bf 8b c9 68 85 60 7b 19 c0 8d fa c1 b9 d5 2f 11 ef 60 a2 f3 f9 de 4d 35 0e bf 02 a2 ce 80 a8 d8 c1 54 cb dc 29 f8 29 90 21 53 87 60 61 48 da 24 a7 1f a2 80 49 69 e4 a3 e5 d2 5e 48 97 9c fc e3 70 cd ba 4a 0b 37 1c 5d 5a 02 07 18 2b 62 a6 9d 89 d3 56 ba 01 dd 4a eb ed 2e 22 4f e7 5c 0b 25 e1 82 8c d6 16 64 24 fa 4d c2 9e 14 d3 3f 62 fa 13 20 96 f8 90 ee 61 f3 a8 93 78 0f e1 5e 67 a7 dd fb 36 6d e3 ad 59 ef 1e f6 f0 d8 e4 8f a3 7e e5 1d d5 89 e8 b2 2a a7 eb ab e2 66 c2 b0 f1 78 2e 13 51 b2 3e 13 37 11 bf 7c 89 90 66 05 12 d3 02 30 1f 4a 44 47 0e 60 37 d5 7a 11 5d c1 6c 12 dc 09 3e c1 94 d3 a8 87 9f 6f dc ca 88 17 b1 28 b2 5e eb 7f ad 4a f4 aa 1c 4a 4c b7 21 78 b9 d0 2f bb bd Data Ascii: 1?8FtI~>h`{/`M5T))!S`aH$Ii^HpJ7]Z+bVJ."O\%d$M?b ax^g6mY~*fx.Q>7\|f0JDG`7z]l>o(^JJL!x/
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 78 bd 44 f1 5b 76 17 59 fa 8c 90 d1 f9 d2 1a 6c bf 97 70 6f 77 f3 64 18 f7 4e e3 fe 32 f1 df cd 17 53 4c a8 f3 f9 13 e3 ff bb df 37 1d fb a1 3b 9b 10 7e b9 74 af bf bb ec cf 94 ef b9 17 3a ce 17 c4 68 2c bb bd 5e 3c cd ec 8f 60 10 86 79 bd 9b cf ff 4a a7 ba 1a cf bf 44 f6 4e cf cd df f7 c8 26 2f e3 7e d2 35 b7 6f ba 97 12 d1 fa 36 c6 e0 3a e7 4b 29 f8 0c 66 7d 80 f4 1d 4f cc fd 3b 8f 88 3d 6a 1c 51 6a 7e 39 e9 e9 60 85 99 8f e2 2c d6 9b 37 a3 ee e5 b2 d7 9d 92 19 20 5e f6 e2 d1 e8 4d b7 df 97 71 c8 f5 01 ae cf 7a 3d a4 0d c2 fc 28 41 6f 99 45 7e cd b4 f4 a0 07 4b 55 fd 9f 3f 35 bf af 20 92 cb 5e 3a 9a cb 1f 2a 98 f0 ab 8e d2 ee d7 4d 98 b9 bf c8 5e b2 f0 7a 3d 33 1f 4d 32 b9 78 81 ad 92 a7 e9 ac 4f 45 b3 74 3e 7f 3d 4b b0 c0 b2 9a 59 57 fe c4 ef 12 da e9 Data Ascii: xD[vYlpowdN2SL7;~t:h,^<`yJDN&/~5o6:K)f}O;=jQj~9`,7 ^Mqz=(AoE~KU?5 ^:*M^z=3M2xOEt>=KYW
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 89 aa b9 ce 99 19 85 cd b4 98 17 8e b1 cd 4f f9 6a 7e 4a ed 12 af e5 4a cc 4f dd 95 a8 54 2c 8d b6 28 44 96 84 43 af 21 59 67 0c 21 1d 0c 44 36 4b 2d 20 0a 69 ed 62 ba 5c 1a 82 c4 a4 0b 24 9b 1f 03 f3 5c 0b 81 20 11 c3 0c 20 3c d7 0b 99 96 37 a9 04 f6 82 52 f2 46 1e bc 63 4d 4e 99 ae 39 3c 71 92 ce e3 26 bf cc e4 6b 15 19 60 93 43 3b d5 96 63 16 3a 6f 9f e5 40 61 1f 98 01 4d 65 45 98 b6 33 fa 46 ed 66 7d cc cf a3 ec ef f6 c1 a3 ec 47 7f f5 1f c2 3b 90 30 cf e2 47 42 61 f3 3b f8 5b 2f 7b 2b 03 e3 99 ae d1 59 6c da 98 29 4b 46 64 86 0b ff 5d fe fc c8 1f 31 23 b1 8a 42 d7 98 15 9c b4 48 40 f4 44 6c 50 f6 fa 29 c4 c2 b1 e8 7d b0 7f 32 67 42 a4 0a 83 f7 cf 28 8e 80 26 0f 0c cf e4 17 6e 02 e7 06 71 e0 e2 17 4b 98 e6 9c 55 82 85 92 d8 c6 30 e6 1c a0 61 cb c2 a7 Data Ascii: Oj~JJOT,(DC!Yg!D6K- ib\$\ <7RFcMN9<q&k`C;c:o@aMeE3Ff}G;0GBa;[/{+Yl)KFd]1#BH@DlP)}2gB(&nqKU0a
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: f4 d8 b9 74 ed f5 3a 8b e2 7e d4 25 9e 91 fe 75 5d 1d c0 6f 09 43 76 5f 00 41 e2 38 e6 ef c5 ef d3 40 ce 6b 37 3b 03 e1 ff 67 e2 11 42 1a bd da a5 6c b5 e5 7e 66 b2 2c 73 d0 91 8c 01 eb ac 82 1d ce de 26 70 ee b8 e8 6b dd 97 cb 5d d1 64 b3 93 02 34 b8 89 53 99 59 10 e6 cb 03 42 77 6f 5c 1b d5 5b 7d dc 61 24 53 ae 5d e4 8f ba 4f 51 a7 a0 c0 32 58 f3 71 b9 3c ad 7d 04 09 6b 17 87 1f 65 b6 3e 02 12 17 f9 88 3a bd e8 42 1d c7 26 92 4f d3 f1 3c 6d 6f df 0d f1 da e2 8e a2 8b 3a 11 08 96 26 5f 7b 7d ac a0 eb 11 e9 a6 62 69 e3 19 26 6b 31 94 19 17 c4 83 68 5f 69 1e 5e 43 16 b8 4e 1b d6 74 23 26 08 9b 01 14 ee 3c db 63 1b 4d 4d 43 a0 ec a6 b8 a5 88 c2 96 73 e1 29 1c 77 1a 7e 0a 80 e9 ec e2 52 ee 5d 00 24 7c 87 6d 33 9a 30 59 57 85 da cd 59 8f f0 96 b7 39 1e 2b 19 Data Ascii: t:~%u]oCv_A8@k7;gBl~f,s&pk]d4SYBwo\[}a$S]OQ2Xq<}ke>:B&O<mo:&_{}bi&k1h_i^CNt#&<cMMCs)w~R]$\|m30YWY9+
2023-12-05 18:13:41 UTC	1379	IN	Data Raw: 02 3b d2 c4 44 94 5a 55 6f 24 3a 71 de 48 6e 25 2a 7f 9f 5b 25 73 50 13 b9 c7 ea 3c ee 61 ae e0 65 7b a4 76 af b7 d2 5a 5d 54 1a 31 55 ae d4 60 89 90 2b 92 70 18 8f e9 6a a9 d8 a6 71 f2 57 b9 6c df 1c a7 40 58 fd 67 0c 15 be 0f 04 91 a8 1d 42 1c fe 51 a5 33 9c 89 09 e5 73 c6 09 47 9c 6a a5 95 83 d4 26 90 0f 78 96 03 58 38 b3 03 8b 82 75 79 55 85 37 87 86 a9 97 ad 6a 53 ab 5e 63 1f 99 e3 4f b2 5c ba 69 f8 65 06 d6 d0 9a ea ad 04 33 c1 c6 49 fd ab 50 51 40 9f 21 cb c1 39 c4 30 71 fc 8e 83 7e ce 52 b1 ea a3 78 aa 47 be 21 23 58 16 ed eb 2a 6a 62 48 09 d4 79 31 37 4c c4 d5 2a d4 c9 09 1e f5 eb 64 95 66 2c f0 21 2c 81 8b ff a5 25 cd b5 63 df d0 1a 40 20 03 d7 ae 74 b5 11 48 d9 a6 12 2f 65 e4 6d 03 5b 4e 54 46 c5 35 4e 25 6a 99 a8 fe 20 cc 4d 0c 55 2e fd 63 44 Data Ascii: ;DZUo$:qHn%[%sP<ae{vZ]T1U`+pjqWl@XgBQ3sGj&xX8uyU7jS^cO\ie3IPQ@!90q~RxG!#XjbHy17L*df,!,%c@ tH/em[NTF5N%j MU.cD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50021	34.120.63.153	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	847	OUT	POST /rtb/prebid?cid=8CU4WQK98 HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1; data-c-ts=1701800016
2023-12-05 18:13:41 UTC	3335	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 2c 22 69 73 54 6f Data Ascii: {"site":{"domain":"www.nytimes.com","page":"https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html","ref":"","topMostLocation":"https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html","isTo
2023-12-05 18:13:41 UTC	664	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 70 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 65 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 61 63 63 65 70 74 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 53 65 63 2d 43 48 2d 55 41 2d Data Ascii: HTTP/1.1 200 OKcache-control: max-age=0, no-cache, no-store, must-revalidatepragma: no-cacheexpires: Tue, 05 Dec 2023 18:13:41 GMTaccept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-
2023-12-05 18:13:41 UTC	478	IN	Data Raw: 31 64 32 0d 0a 7b 22 69 64 22 3a 22 61 61 36 37 63 35 64 37 32 36 32 30 63 33 39 37 32 30 61 66 33 34 39 36 34 36 33 36 33 63 33 38 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 34 57 51 4b 39 38 26 70 72 76 69 64 3d 32 35 31 25 32 43 34 35 30 25 32 43 31 37 38 25 32 43 31 35 37 25 32 43 33 30 31 38 25 32 43 33 30 31 37 25 32 43 31 35 39 25 32 43 32 31 34 25 32 43 31 31 37 25 32 43 33 33 37 25 32 43 33 33 38 Data Ascii: 1d2{"id":"aa67c5d72620c39720af349646363c38","bidList":[],"ext":{"csUrl":[{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU4WQK98&prvid=251%2C450%2C178%2C157%2C3018%2C3017%2C159%2C214%2C117%2C337%2C338

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50022	68.67.179.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	690	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 3001 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: icu=ChgIkbx3EAoYASABKAEwx9C9qwY4AUABSAEQx9C9qwYYAA..; uuid2=3114214532401325210
2023-12-05 18:13:41 UTC	3001	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 34 37 64 65 31 34 61 64 32 35 34 39 66 33 32 22 2c 22 63 6f 64 65 22 3a 22 6e 79 74 5f 77 6f 72 6c 64 5f 74 6f 70 22 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":90},{"width":970,"height":250}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"47de14ad2549f32","code":"nyt_world_top","allow_smaller_sizes":false,"use_pmt_rule":fa
2023-12-05 18:13:41 UTC	1164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 35 31 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 Data Ascii: HTTP/1.1 200 OKServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:13:41 GMTContent-Type: application/json; charset=utf-8Content-Length: 30510Connection: closeVary: Accept-EncodingCache-Control: no-store, no-cache, privatePragma: no-cacheExpir
2023-12-05 18:13:41 UTC	15220	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 34 39 66 35 34 37 35 38 37 62 36 65 64 35 22 2c 22 74 61 67 5f 69 64 22 3a 32 31 38 39 37 32 34 36 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 34 39 31 37 38 38 32 32 32 37 33 38 36 33 34 38 33 38 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 6d 31 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 6d 69 64 64 6c 65 65 61 73 74 25 32 46 75 6e 69 74 65 Data Ascii: {"version":"3.0.0","tags":[{"uuid":"49f547587b6ed5","tag_id":21897246,"auction_id":"491788222738634838","nobid":false,"no_ad_url":"https://nym1-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funite
2023-12-05 18:13:41 UTC	15290	IN	Data Raw: 74 42 53 46 72 62 31 42 74 64 30 46 70 54 44 45 74 4f 47 4a 46 53 30 78 77 4e 48 56 4e 51 6b 64 42 51 57 64 79 59 6c 64 55 51 56 52 42 51 6b 39 42 51 6b 46 42 52 57 70 4e 52 6c 5a 45 62 48 64 4d 5a 30 74 58 51 55 4a 6e 4d 47 64 47 62 30 46 49 51 55 46 6c 51 55 4e 42 51 56 46 44 53 55 46 52 51 31 46 42 55 55 64 5a 51 56 46 48 5a 30 46 52 53 32 39 42 55 55 74 33 51 56 46 44 4e 55 46 57 57 46 5a 4a 62 32 78 51 55 30 35 4e 58 33 64 52 52 6c 59 78 55 30 74 4b 56 44 42 71 56 46 41 34 61 30 4a 42 51 55 46 42 57 55 39 50 52 44 56 36 58 31 70 42 55 55 46 42 51 55 46 42 51 55 46 51 51 56 38 30 51 55 68 73 4d 48 4a 52 52 54 6c 52 52 55 46 42 53 55 4a 42 62 55 46 4a 51 57 39 42 53 55 46 30 55 55 6c 42 41 53 55 49 64 6c 46 4a 41 51 66 59 51 58 64 42 53 55 46 35 51 55 Data Ascii: tBSFrb1Btd0FpTDEtOGJFS0xwNHVNQkdBQWdyYldUQVRBQk9BQkFBRWpNRlZEbHdMZ0tXQUJnMGdGb0FIQUFlQUNBQVFDSUFRQ1FBUUdZQVFHZ0FRS29BUUt3QVFDNUFWWFZJb2xQU05NX3dRRlYxU0tKVDBqVFA4a0JBQUFBWU9PRDV6X1pBUUFBQUFBQUFQQV80QUhsMHJRRTlRRUFBSUJBbUFJQW9BSUF0UUlBASUIdlFJAQfYQXdBSUF5QU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50028	18.160.1.134	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	742	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:41 UTC	494	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 4a 36 39 5a 4a 35 41 36 37 50 34 31 37 53 4a 50 32 4e 52 4d 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 34 37 34 37 34 37 34 37 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 191Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:13:41 GMTx-amz-rid: J69ZJ5A67P417SJP2NRMStrict-Transport-Security: max-age=47474747; includeSubDomains; pre
2023-12-05 18:13:41 UTC	191	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 66 67 22 3a 7b 22 43 4f 4e 46 49 47 5f 43 41 4c 4c 5f 45 4e 41 42 4c 45 44 22 3a 74 72 75 65 2c 22 76 22 3a 31 7d 2c 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 6e 2d 69 6e 64 65 78 5f 70 6d 2d 64 62 35 5f 72 62 64 5f 6e 2d 76 6d 67 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 6f 78 2d 64 62 35 5f 61 6e 2d 64 62 35 5f 33 6c 69 66 74 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50026	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	771	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:41 UTC	787	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 33 4a 52 53 36 45 34 41 35 32 30 5a 58 52 43 4d 39 4e 41 44 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 7c 74 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d 4a 75 6c 2d 32 30 32 34 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 Data Ascii: HTTP/1.1 302 FoundServer: ServerDate: Tue, 05 Dec 2023 18:13:41 GMTContent-Length: 0Connection: closex-amz-rid: 3JRS6E4A520ZXRCM9NADSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU\|t; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 18:13:41 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50034	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	425	OUT	GET /openrtb/pbjs?s=995821 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:41 UTC	610	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 62 38 64 66 38 66 30 37 64 66 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 Data Ascii: HTTP/1.1 204 No ContentDate: Tue, 05 Dec 2023 18:13:41 GMTContent-Type: application/jsonConnection: closeCF-Ray: 830e43b8df8f07df-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Pragma: no-cacheReport-To: {"endpoints":[{"url"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50035	44.215.149.250	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	534	OUT	GET /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&tmax=10000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:41 UTC	940	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 35 20 4f 63 74 20 31 39 39 32 20 32 30 3a 31 30 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 58 2d 58 53 53 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:41 GMTContent-Type: application/json; charset=utf-8Content-Length: 19Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 15 Oct 1992 20:10:00 GMTPragma: no-cacheX-XSS
2023-12-05 18:13:41 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50036	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	916	OUT	GET /b?c1=2&c2=3005403&ns__t=1701800020779&ns_c=UTF-8&c8=On%20the%20Ground%20in%20Wars%20and%20Disasters%2C%20the%20U.N.%20Plays%20a%20Vital%20Role%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
2023-12-05 18:13:41 UTC	457	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 55 49 44 3d 31 43 45 30 30 31 64 37 39 32 62 61 37 65 63 35 39 64 66 64 36 38 61 31 37 30 31 38 30 30 30 30 37 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 3b 20 64 6f 6d 61 69 6e 3d 2e 73 63 6f 72 65 63 61 72 64 72 65 73 65 61 72 63 68 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 36 32 32 30 38 30 30 30 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 55 41 2c 20 50 6c 61 74 66 6f 72 6d 2c 20 41 72 63 68 2c 20 4d 6f 64 65 6c 2c 20 4d 6f 62 69 6c Data Ascii: HTTP/1.1 204 No ContentConnection: closeDate: Tue, 05 Dec 2023 18:13:41 GMTset-cookie: UID=1CE001d792ba7ec59dfd68a1701800007; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000Accept-CH: UA, Platform, Arch, Model, Mobil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50037	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:41 UTC	818	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU\|t
2023-12-05 18:13:42 UTC	827	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 49 53 4f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 46 58 51 35 41 54 48 42 47 4a 59 4b 4b 34 32 57 30 46 35 42 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:42 GMTContent-Type: text/html;charset=ISO-8859-1Content-Length: 320Connection: closex-amz-rid: FXQ5ATHBGJYKK42W0F5BSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.c
2023-12-05 18:13:42 UTC	320	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 6e 2d 69 6e 64 65 78 5f 70 6d 2d 64 62 35 5f 72 62 64 5f 6e 2d 76 6d 67 5f 6e 2d 4d 65 64 69 61 4e 65 74 5f 6f 78 2d 64 62 35 5f 61 6e 2d 64 62 35 5f 33 6c 69 66 74 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 22 20 73 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50042	68.67.160.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	437	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
2023-12-05 18:13:42 UTC	934	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 35 20 4e 6f 76 20 32 30 30 38 20 31 36 3a 30 30 Data Ascii: HTTP/1.1 200 OKServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:13:42 GMTContent-Type: application/json; charset=utf-8Content-Length: 57Connection: closeCache-Control: no-store, no-cache, privatePragma: no-cacheExpires: Sat, 15 Nov 2008 16:00
2023-12-05 18:13:42 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50041	34.120.63.153	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	594	OUT	GET /rtb/prebid?cid=8CU4WQK98 HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1; data-c-ts=1701800016
2023-12-05 18:13:42 UTC	397	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 31 20 47 4d 54 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 32 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 0d 0a 41 63 63 65 Data Ascii: HTTP/1.1 405 Method Not Allowedcontent-type: text/html;charset=utf-8content-language: endate: Tue, 05 Dec 2023 18:13:41 GMTx-envoy-upstream-service-time: 2vary: Accept-Encodingserver: envoyVia: 1.1 googleAccess-Control-Allow-Origin: Acce
2023-12-05 18:13:42 UTC	461	IN	Data Raw: 31 63 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 35 20 e2 80 93 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 Data Ascii: 1c1<!doctype html><html lang="en"><head><title>HTTP Status 405 Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50039	35.227.252.103	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	413	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
2023-12-05 18:13:42 UTC	175	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:13:42 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50043	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	616	OUT	POST /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive Content-Length: 4794 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:42 UTC	4794	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 6f 70 74 73 25 32 32 25 33 41 25 32 32 65 6e 64 70 6f 69 6e 74 25 32 32 25 32 43 25 32 32 74 74 73 74 25 32 32 25 33 41 31 35 2e 37 30 30 30 30 30 30 30 30 30 34 30 37 34 35 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 68 63 25 32 32 25 33 41 34 25 32 43 25 32 32 62 72 5f 6f 68 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 62 72 5f 6f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 75 61 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 Data Ascii: jsData=%7B%22opts%22%3A%22endpoint%22%2C%22ttst%22%3A15.700000000040745%2C%22ifov%22%3Afalse%2C%22hc%22%3A4%2C%22br_oh%22%3A984%2C%22br_ow%22%3A1280%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%
2023-12-05 18:13:42 UTC	544	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 44 61 74 61 44 6f 6d 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json;charset=utf-8Content-Length: 235Connection: closeDate: Tue, 05 Dec 2023 18:13:42 GMTServer: DataDomeAccess-Control-Allow-Origin: *Pragma: no-cacheCache-Control: no-cache, no-store, must-revalid
2023-12-05 18:13:42 UTC	235	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 7e 73 63 72 37 64 75 63 67 62 75 67 59 47 79 51 75 61 50 5a 58 48 68 7a 57 51 78 37 39 4f 68 74 64 75 34 35 56 4b 45 54 44 7e 5a 52 63 41 6a 35 50 43 48 68 4c 78 67 4d 35 72 32 65 31 5f 31 37 74 63 64 6a 4d 78 66 64 4e 74 59 61 55 4b 73 30 45 53 44 73 46 65 51 56 46 69 33 75 6b 50 66 55 41 5a 7e 31 30 79 37 57 58 70 54 65 55 68 49 50 6a 39 4c 4a 69 69 38 61 50 39 42 4c 53 6e 6b 35 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=~scr7ducgbugYGyQuaPZXHhzWQx79Ohtdu45VKETD~ZRcAj5PCHhLxgM5r2e1_17tcdjMxfdNtYaUKs0ESDsFeQVFi3ukPfUAZ~10y7WXpTeUhIPj9LJii8aP9BLSnk5; Max-Age=31536000; Domain=www.nytimes.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50044	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	2307	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 280 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:42 UTC	280	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 52 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 75 72 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 5d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 66 31 63 33 66 39 61 62 32 39 39 30 34 34 38 31 38 63 32 33 34 66 37 35 33 39 63 64 33 63 34 37 32 62 64 37 61 61 33 63 64 35 36 Data Ascii: {"operationName":"ReadingListStatusQuery","variables":{"url":["https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html"]},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"f1c3f9ab299044818c234f7539cd3c472bd7aa3cd56
2023-12-05 18:13:42 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 33 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 63access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:13:42 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:42 UTC	63	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 72 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 7d 7d 7d 0a Data Ascii: {"data":{"user":{"readingListStatus":[],"__typename":"User"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50045	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	2370	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 6260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 x-nyt-entitlements: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-nyt-programming-abtest: nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 x-nyt-news-tenure: x-nyt-internal-meter-override: sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:42 UTC	6260	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 71 75 65 72 79 20 67 65 74 4d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 28 24 64 61 74 61 3a 20 4d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 49 6e 70 75 74 21 29 20 7b 5c 6e 20 20 20 20 75 73 65 72 20 7b 5c 6e 20 20 20 20 20 20 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 28 64 61 74 61 3a 20 24 64 61 74 61 29 7b 5c 6e 20 20 20 20 20 20 20 20 75 6e 69 74 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 63 61 6e 53 68 6f 77 5c 6e 20 20 20 20 20 20 20 20 20 20 72 65 61 73 6f 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 61 75 64 69 65 6e 63 65 5c Data Ascii: {"query":"\n query getMessageSelection($data: MessageSelectionInput!) {\n user {\n messageSelection(data: $data){\n units {\n name\n canShow\n reason\n messages {\n name\n audience\
2023-12-05 18:13:42 UTC	1349	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 31 37 33 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 9173access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:13:42 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 22 3a 7b 22 75 6e 69 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 62 61 72 4f 6e 65 22 2c 22 63 61 6e 53 68 6f 77 22 3a 74 72 75 65 2c 22 72 65 61 73 6f 6e 22 3a 22 41 6c 6c 28 54 68 65 20 69 6e 70 75 74 2e 4e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 76 69 20 61 6e 64 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 76 69 2c 20 4e 6f 74 28 54 68 65 72 65 20 61 72 65 20 6e 65 69 74 68 65 72 20 4a 4b 49 44 44 20 49 50 2e 45 44 55 20 6e 6f 72 20 49 50 2e 43 6f 72 70 20 66 69 65 6c 64 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 45 44 55 20 61 6e 64 20 42 32 42 20 61 63 63 65 73 73 29 29 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 6e 61 6d Data Ascii: {"data":{"user":{"messageSelection":{"units":[{"name":"barOne","canShow":true,"reason":"All(The input.Name parameter is vi and is expected to be vi, Not(There are neither JKIDD IP.EDU nor IP.Corp fields representing EDU and B2B access))","messages":[{"nam
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 62 6c 65 3d 74 72 75 65 20 61 6e 64 20 47 61 74 65 77 61 79 45 78 65 6d 70 74 3d 66 61 6c 73 65 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 53 55 42 43 4f 4e 5f 43 4f 4e 56 5f 42 41 55 5f 52 45 47 49 57 41 4c 4c 5f 32 33 31 22 2c 22 61 75 64 69 65 6e 63 65 22 3a 22 22 2c 22 63 61 6e 53 68 6f 77 22 3a 74 72 75 65 2c 22 72 65 61 73 6f 6e 22 3a 22 41 6c 6c 28 54 68 65 20 69 6e 70 75 74 2e 4e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 76 69 20 61 6e 64 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 76 69 2c 20 4e 6f 74 28 41 6e 79 28 46 41 49 4c 28 54 68 65 72 65 20 55 52 4c 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 29 2c 20 46 41 49 4c 28 54 68 65 72 65 Data Ascii: ble=true and GatewayExempt=false","messages":[{"name":"SUBCON_CONV_BAU_REGIWALL_231","audience":"","canShow":true,"reason":"All(The input.Name parameter is vi and is expected to be vi, Not(Any(FAIL(There URL does not match the specified value), FAIL(There
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 20 75 6e 69 74 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 4f 4e 56 5f 50 41 59 50 41 4c 5f 43 54 41 5f 4b 49 4c 4c 5f 53 57 49 54 43 48 5f 32 33 31 31 22 2c 22 61 75 64 69 65 6e 63 65 22 3a 22 30 5f 41 6c 6c 6f 77 22 2c 22 63 61 6e 53 68 6f 77 22 3a 74 72 75 65 2c 22 72 65 61 73 6f 6e 22 3a 22 61 62 72 61 3a 20 41 6c 6c 20 61 62 72 61 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 64 20 53 65 6c 65 63 74 65 64 20 62 79 20 74 68 65 20 52 61 6e 64 6f 6d 20 73 65 6c 65 63 74 6f 72 20 66 75 6e 63 74 69 6f 6e 20 62 65 63 61 75 73 65 20 6e 6f 20 6f 74 68 65 72 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 22 2c 22 73 65 6c 65 63 74 65 64 22 3a 74 72 75 65 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 61 79 6d Data Ascii: unit","messages":[{"name":"CONV_PAYPAL_CTA_KILL_SWITCH_2311","audience":"0_Allow","canShow":true,"reason":"abra: All abra criteria matched Selected by the Random selector function because no other messages are available.","selected":true}]},{"name":"paym
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 6e 5f 41 70 70 6c 65 50 61 79 5f 43 54 41 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 30 5f 41 6c 6c 6f 77 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 53 55 42 43 4f 4e 5f 52 45 53 5f 41 49 47 5f 53 55 52 56 45 59 5f 32 32 38 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 30 5f 43 6f 6e 74 72 6f 6c 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 53 75 62 43 6f 6e 5f 50 61 79 50 61 6c 5f 43 54 41 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 30 5f 41 6c 6c 6f 77 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 Data Ascii: n_ApplePay_CTA","variant":"0_Allow","integration":"onsite-messaging-prd"},{"test":"SUBCON_RES_AIG_SURVEY_228","variant":"0_Control","integration":"onsite-messaging-prd"},{"test":"MKT_SubCon_PayPal_CTA","variant":"0_Allow","integration":"onsite-messaging-p
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 43 4f 4e 56 5f 31 30 30 5f 4e 4f 54 41 42 4c 45 53 5f 50 41 59 57 41 4c 4c 5f 54 45 53 54 5f 32 33 31 31 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 31 5f 76 61 72 69 61 6e 74 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 58 5f 4e 65 77 41 72 63 68 69 74 65 63 74 75 72 65 5f 50 6f 73 74 4c 6f 67 69 6e 4f 66 66 65 72 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 Data Ascii: "integration":"onsite-messaging-prd"},{"test":"MKT_CONV_100_NOTABLES_PAYWALL_TEST_2311","variant":"1_variant","integration":"onsite-messaging-prd"},{"test":"MX_NewArchitecture_PostLoginOffer","variant":"","integration":"onsite-messaging-prd"},{"test":"MKT
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 66 69 72 73 74 5f 70 61 72 74 79 5f 64 61 74 61 5f 73 75 72 76 65 79 5f 73 75 62 73 5f 64 6f 63 6b 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 30 5f 63 6f 6e 74 72 6f 6c 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 43 4b 5f 50 4c 4f 5f 50 52 4f 5f 48 65 61 64 65 72 5f 54 65 73 74 5f 31 32 32 30 32 33 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 5d 7d 2c 22 6d 65 74 65 72 22 3a 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a Data Ascii: site-messaging-prd"},{"test":"MKT_first_party_data_survey_subs_dock","variant":"0_control","integration":"onsite-messaging-prd"},{"test":"MKT_CK_PLO_PRO_Header_Test_122023","variant":"","integration":"onsite-messaging-prd"}]},"meter":{"error":null,"data":
2023-12-05 18:13:42 UTC	899	IN	Data Raw: 22 67 65 74 53 74 61 72 74 65 64 4e 6f 77 22 3a 6e 75 6c 6c 2c 22 6c 69 76 65 4f 6e 62 6f 61 72 64 69 6e 67 42 6c 6f 63 6b 22 3a 6e 75 6c 6c 2c 22 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 4d 65 73 73 61 67 65 43 61 70 73 22 3a 6e 75 6c 6c 2c 22 70 72 6f 64 75 63 74 53 65 6c 65 63 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 4f 6e 62 6f 61 72 64 69 6e 67 22 3a 6e 75 6c 6c 2c 22 73 61 76 65 64 41 72 74 69 63 6c 65 54 6f 6f 6c 74 69 70 22 3a 6e 75 6c 6c 2c 22 73 68 61 72 65 4c 69 6e 6b 54 6f 6f 6c 74 69 70 41 70 70 22 3a 6e 75 6c 6c 2c 22 73 68 61 72 65 4c 69 6e 6b 54 6f 6f 6c 74 69 70 57 65 62 22 3a 6e 75 6c 6c 2c 22 73 74 69 63 6b 79 47 69 66 74 54 65 73 74 57 65 62 22 3a 6e 75 6c 6c 2c 22 73 74 6f 72 79 42 6c 6f 63 6b 22 3a 6e 75 6c 6c 2c 22 73 Data Ascii: "getStartedNow":null,"liveOnboardingBlock":null,"messageSelectionMessageCaps":null,"productSelection":null,"regiOnboarding":null,"savedArticleTooltip":null,"shareLinkTooltipApp":null,"shareLinkTooltipWeb":null,"stickyGiftTestWeb":null,"storyBlock":null,"s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50046	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	2023	OUT	GET /svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&caller_id=nyt-vi&jkcb=1701800021284&referrer=&sourceApp=nyt-vi HTTP/1.1 Host: a.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=2; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:42 UTC	1084	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-byaccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comcontent-type: applica
2023-12-05 18:13:42 UTC	1065	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 32 32 34 30 38 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800022408,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50047	52.3.42.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	1747	OUT	GET /v1/purr-cache HTTP/1.1 Host: purr.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:42 UTC	624	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 75 72 72 2d 63 61 63 68 65 3d 3c 4b 30 3c 72 3c 43 5f 3c 47 5f 3c 53 30 3c 61 30 3c 75 61 3c 54 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 34 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 35 33 3a 34 32 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-origin: https://www.nytimes.comset-cookie: purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; Path=/; Domain=nytimes.com; Expires=Sat, 04 Jan 2025 05:53:42 GMT; HttpOnly; Secure; SameSite=La

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50050	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	2007	OUT	GET /vi-assets/static-assets/clientSideCapsule-3ba408d68d4aef1db00b.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; datadome=icY37o1ExWmdnAFK2mNmbJvnu~Ow53NsyH0gHlBy3XOUEwLApMFz0vKrozdbMfiVSLLImFsugouMi0oDeCe3uolyTbob8HLlvf~bfBSui19eMZNfZVMK30zzaJE~VXDh; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _dd_s=rum=0&expire=1701800919156
2023-12-05 18:13:42 UTC	1336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 36 31 39 38 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 69 32 6e 63 31 5f 76 4c 62 79 51 74 77 4a 50 49 44 45 42 72 41 66 72 43 4c 43 75 55 62 41 69 72 45 69 68 48 54 6e 4f 75 79 52 59 33 68 39 72 36 45 33 46 53 75 41 63 6a 44 55 61 75 66 73 42 37 75 45 6c 34 58 38 30 39 39 37 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 32 31 30 39 33 39 37 32 36 31 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 561980X-GUploader-UploadID: ABPtcPpi2nc1_vLbyQtwJPIDEBrAfrCLCuUbAirEihHTnOuyRY3h9r6E3FSuAcjDUaufsB7uEl4X80997wx-goog-generation: 1701721093972619x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:42 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 2c 31 36 33 5d 2c 7b 22 2b 6e 48 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 61 2e 6b 65 79 66 72 61 6d 65 73 29 28 22 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 20 73 63 61 6c 65 28 31 2c 31 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 3b 7d 32 35 25 7b 74 72 61 6e 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[61,163],{"+nHC":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){var e=(0,a.keyframes)("0%{transform:translate(0,0) scale(1,1) translate(0,0);}25%{trans
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 73 7d 2c 61 29 2c 69 26 26 72 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 6d 65 22 2c 7b 64 61 74 65 54 69 6d 65 3a 69 2c 63 6c 61 73 73 4e 61 6d 65 3a 6c 2e 65 70 69 73 6f 64 65 50 75 62 64 61 74 65 43 6c 61 73 73 7d 2c 28 30 2c 6f 2e 66 6f 72 6d 61 74 44 61 74 65 29 28 6e 65 77 20 44 61 74 65 28 69 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 2c 22 64 64 64 64 2c 20 4d 4d 4d 4d 20 44 6f 2c 20 59 59 59 59 22 29 29 29 7d 3b 64 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 45 70 69 73 6f 64 65 4d 65 74 61 64 61 74 61 22 2c 64 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 65 70 69 73 6f 64 65 54 69 74 6c 65 3a 22 22 2c 68 6f 73 74 65 64 42 79 3a 22 22 2c 73 75 6d 6d 61 72 79 3a 22 22 2c 70 75 62 44 61 74 65 3a 22 22 7d 3b 76 61 Data Ascii: s},a),i&&r.default.createElement("time",{dateTime:i,className:l.episodePubdateClass},(0,o.formatDate)(new Date(i).toISOString(),"dddd, MMMM Do, YYYY")))};d.displayName="EpisodeMetadata",d.defaultProps={episodeTitle:"",hostedBy:"",summary:"",pubDate:""};va
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 22 42 52 49 45 46 49 4e 47 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 69 2e 54 48 45 4d 45 53 2e 43 4f 56 45 52 41 47 45 5f 42 52 49 45 46 49 4e 47 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 69 2e 54 48 45 4d 45 53 2e 4e 45 57 53 5f 42 52 49 45 46 49 4e 47 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 69 2e 54 48 45 4d 45 53 2e 4c 49 56 45 5f 42 4c 4f 47 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 69 2e 54 48 45 4d 45 53 2e 53 54 4f 52 59 4c 49 4e 45 5f 46 45 45 44 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 69 2e 54 48 45 4d 45 53 29 2e 69 6e Data Ascii: "BRIEFING"===e}function l(e){return e===i.THEMES.COVERAGE_BRIEFING}function s(e){return e===i.THEMES.NEWS_BRIEFING}function d(e){return e===i.THEMES.LIVE_BLOG}function u(e){return e===i.THEMES.STORYLINE_FEED}function c(e){return Object.values(i.THEMES).in
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 74 2e 73 6d 61 6c 6c 2c 22 7b 77 69 64 74 68 3a 22 2c 66 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 74 65 78 74 42 6f 64 79 57 69 64 74 68 2c 22 70 78 3b 68 65 69 67 68 74 3a 33 31 39 70 78 3b 7d 22 29 2c 79 3d 4f 62 6a 65 63 74 28 75 2e 63 73 73 29 28 22 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 22 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 2c 6e 3d 65 2e 73 74 79 6c 65 73 2c 61 3d 74 2e 79 6f 75 54 75 62 65 49 64 2c 69 3d 74 2e 63 61 70 74 69 6f 6e 2c 72 3d 74 2e 63 72 65 64 69 74 3b 72 65 74 75 72 6e 20 6c 28 29 28 22 66 69 67 75 72 65 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 4f 62 6a 65 63 74 28 75 2e 63 78 29 28 6e 2c 76 29 7d 2c 76 6f 69 64 20 30 2c 6c 28 29 28 22 64 69 76 22 2c 7b 63 Data Ascii: t.small,"{width:",f.a.breakpoint.textBodyWidth,"px;height:319px;}"),y=Object(u.css)("width:100%;height:100%;"),b=function(e){var t=e.data,n=e.styles,a=t.youTubeId,i=t.caption,r=t.credit;return l()("figure",{className:Object(u.cx)(n,v)},void 0,l()("div",{c
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 3d 28 30 2c 64 2e 64 65 66 61 75 6c 74 29 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 69 3d 28 30 2c 64 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 61 2c 61 72 67 75 6d 65 6e 74 73 2c 69 29 7d 65 6c 73 65 20 6e 3d 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 6e 29 7d 7d 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 6c 2e 64 65 66 61 75 6c 74 29 28 6e 2c 65 29 3b 76 61 72 20 74 3d 66 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 61 2c 72 Data Ascii: }();return function(){var n,a=(0,d.default)(e);if(t){var i=(0,d.default)(this).constructor;n=Reflect.construct(a,arguments,i)}else n=a.apply(this,arguments);return(0,s.default)(this,n)}}var p=function(e){(0,l.default)(n,e);var t=f(n);function n(e){var a,r
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 54 69 6d 65 3a 30 2c 69 73 50 6c 61 79 69 6e 67 3a 21 31 7d 29 2c 4f 3d 70 28 29 28 77 2c 32 29 2c 43 3d 4f 5b 30 5d 2c 4d 3d 4f 5b 31 5d 2c 54 3d 64 7c 7c 7b 7d 2c 53 3d 54 2e 61 75 64 69 6f 43 6f 6e 74 72 6f 6c 73 2c 52 3d 63 28 29 28 54 2c 5f 29 3b 69 66 28 21 6f 2e 66 69 6c 65 55 72 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6a 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 28 68 28 29 2e 70 72 65 73 65 6e 74 61 74 69 6f 6e 7c 7c 7b 7d 29 2e 70 61 67 65 54 79 70 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 22 68 6f 6d 65 70 61 67 65 22 2c 4e 3d 6f 2e 70 72 6f 6d 6f 74 69 6f 6e 61 6c 48 65 61 64 6c 69 6e 65 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6f 2e 68 65 61 64 6c 69 6e 65 29 Data Ascii: Time:0,isPlaying:!1}),O=p()(w,2),C=O[0],M=O[1],T=d\|\|{},S=T.audioControls,R=c()(T,_);if(!o.fileUrl)return null;var j=(null===(t=(h().presentation\|\|{}).pageType)\|\|void 0===t?void 0:t.toLowerCase())\|\|"homepage",N=o.promotionalHeadline\|\|(null===(n=o.headline)
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 56 6e 31 31 22 29 2c 47 3d 6e 28 22 44 70 4a 7a 22 29 2c 4b 3d 6e 28 22 72 4e 45 64 22 29 2c 51 3d 6e 28 22 79 45 5a 49 22 29 2c 5a 3d 6e 2e 6e 28 51 29 3b 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 2e 6c 65 67 61 63 79 54 61 62 6c 65 48 74 6d 6c 2c 6e 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 3b 72 65 74 75 72 6e 20 67 28 29 28 5a 2e 61 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 7d 2c 76 6f 69 64 20 30 2c 67 28 29 28 22 64 69 76 22 2c 7b 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 74 7d 7d 29 29 7d 24 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 4c 65 67 61 63 79 54 61 62 6c 65 42 6c 6f 63 6b 22 2c 24 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 64 61 74 61 3a 6e 75 6c 6c 2c 63 6c Data Ascii: Vn11"),G=n("DpJz"),K=n("rNEd"),Q=n("yEZI"),Z=n.n(Q);function $(e){var t=e.data.legacyTableHtml,n=e.className;return g()(Z.a,{className:n},void 0,g()("div",{dangerouslySetInnerHTML:{__html:t}}))}$.displayName="LegacyTableBlock",$.defaultProps={data:null,cl
2023-12-05 18:13:42 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 66 6e 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 42 65 28 29 28 65 2c 74 2c 6e 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 66 6e 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 Data Ascii: =null!=arguments[t]?arguments[t]:{};t%2?fn(Object(n),!0).forEach((function(t){Be()(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):fn(Object(n)).forEach((function(t){Object.defineProperty(e,t,Ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50051	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	2307	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 397 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; nyt-jkidd=uid=0&lastRequest=1701800009804&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:42 UTC	397	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 49 6e 6c 69 6e 65 45 64 69 74 6f 72 73 50 69 63 6b 73 50 65 72 73 6f 6e 61 6c 69 7a 65 64 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 6c 69 73 74 55 72 69 22 3a 22 6e 79 74 3a 2f 2f 70 65 72 2f 70 65 72 73 6f 6e 61 6c 69 7a 65 64 2d 6c 69 73 74 2f 68 6f 6d 65 2d 66 65 61 74 75 72 65 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 2c 22 6f 72 69 67 69 6e 61 6c 52 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 64 65 76 69 63 65 54 Data Ascii: {"operationName":"InlineEditorsPicksPersonalizedQuery","variables":{"listUri":"nyt://per/personalized-list/home-featured","referrer":"https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html","originalReferrer":null,"deviceT
2023-12-05 18:13:42 UTC	1365	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 37 36 39 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 43769access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-regio
2023-12-05 18:13:42 UTC	227	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 46 61 73 74 6c 79 2d 55 6e 69 71 75 65 2d 49 64 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Fastly-Unique-Id, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 22 3a 7b 22 65 64 69 74 6f 72 73 50 69 63 6b 73 4c 69 73 74 22 3a 7b 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 68 61 73 4e 65 78 74 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 50 72 65 76 69 6f 75 73 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 72 74 43 75 72 73 6f 72 22 3a 22 59 58 4a 79 59 58 6c 6a 62 32 35 75 5a 57 4e 30 61 57 39 75 4f 6a 41 3d 22 2c 22 65 6e 64 43 75 72 73 6f 72 22 3a 22 59 58 4a 79 59 58 6c 6a 62 32 35 75 5a 57 4e 30 61 57 39 75 4f 6a 6b 3d 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 61 67 65 49 6e 66 6f 22 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 65 72 73 6f 6e 61 6c 69 7a 65 64 49 74 65 6d 73 43 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 65 64 67 65 73 22 3a 5b 7b 22 74 72 61 Data Ascii: {"data":{"list":{"editorsPicksList":{"pageInfo":{"hasNextPage":false,"hasPreviousPage":false,"startCursor":"YXJyYXljb25uZWN0aW9uOjA=","endCursor":"YXJyYXljb25uZWN0aW9uOjk=","__typename":"PageInfo"},"__typename":"PersonalizedItemsConnection","edges":[{"tra
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 30 31 2f 6d 75 6c 74 69 6d 65 64 69 61 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2d 6d 61 73 74 65 72 31 30 35 30 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 31 30 35 30 2c 22 68 65 69 67 68 74 22 3a 37 30 30 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 43 72 6f 70 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 4d 41 4c 4c 5f 53 51 55 41 52 45 22 2c 22 72 65 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 74 68 75 6d 62 4c 61 72 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 Data Ascii: .com/images/2023/12/01/multimedia/01WELL-LATE-FLU-SHOT1-pkhb/01WELL-LATE-FLU-SHOT1-pkhb-master1050.jpg","width":1050,"height":700,"__typename":"ImageRendition"}],"__typename":"ImageCrop"},{"name":"SMALL_SQUARE","renditions":[{"name":"thumbLarge","url":"ht
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 2d 70 6b 68 62 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2d 74 68 72 65 65 42 79 54 77 6f 4c 61 72 67 65 41 74 32 58 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 34 30 30 30 2c 22 68 65 69 67 68 74 22 3a 32 36 36 37 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 74 68 72 65 65 42 79 54 77 6f 4d 65 64 69 75 6d 41 74 32 58 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 30 31 2f 6d 75 6c 74 69 6d 65 64 69 61 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 Data Ascii: -pkhb/01WELL-LATE-FLU-SHOT1-pkhb-threeByTwoLargeAt2X.jpg","width":4000,"height":2667,"__typename":"ImageRendition"},{"name":"threeByTwoMediumAt2X","url":"https://static01.nyt.com/images/2023/12/01/multimedia/01WELL-LATE-FLU-SHOT1-pkhb/01WELL-LATE-FLU-SHOT
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 62 79 2f 6b 6e 76 75 6c 2d 73 68 65 69 6b 68 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 65 72 73 6f 6e 22 7d 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 42 79 6c 69 6e 65 22 7d 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 7b 22 63 6f 64 65 22 3a 22 65 6e 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 61 6e 67 75 61 67 65 22 7d 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 31 30 30 30 30 30 30 30 39 32 30 32 34 30 30 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 61 72 74 69 63 6c 65 2f 66 32 39 37 66 61 34 36 2d 33 66 61 32 2d 35 36 66 34 2d 39 33 33 37 2d 33 61 64 64 62 30 37 66 38 64 30 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f Data Ascii: /www.nytimes.com/by/knvul-sheikh","__typename":"Person"}],"__typename":"Byline"}],"language":{"code":"en","__typename":"Language"},"sourceId":"100000009202400","uri":"nyt://article/f297fa46-3fa2-56f4-9337-3addb07f8d01","url":"https://www.nytimes.com/2023/
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 6e 65 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 61 72 74 69 63 6c 65 4c 61 72 67 65 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 36 30 30 2c 22 68 65 69 67 68 74 22 3a 33 33 36 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 6d 61 73 74 65 72 31 30 35 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 31 30 2f 6d 61 67 61 7a 69 6e 65 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 6d 61 73 74 65 72 31 30 35 30 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 31 30 35 30 2c 22 68 65 69 67 68 74 22 3a Data Ascii: ne/10mag-ethicist/10mag-ethicist-articleLarge.jpg","width":600,"height":336,"__typename":"ImageRendition"},{"name":"master1050","url":"https://static01.nyt.com/images/2023/12/10/magazine/10mag-ethicist/10mag-ethicist-master1050.jpg","width":1050,"height":
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 65 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 74 68 72 65 65 42 79 54 77 6f 4c 61 72 67 65 41 74 32 58 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 32 31 30 32 2c 22 68 65 69 67 68 74 22 3a 31 34 30 30 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 74 68 72 65 65 42 79 54 77 6f 4d 65 64 69 75 6d 41 74 32 58 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 31 30 2f 6d 61 67 61 7a 69 6e 65 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 74 68 72 65 65 42 79 54 77 6f 4d 65 64 69 75 6d 41 74 32 58 Data Ascii: e/10mag-ethicist/10mag-ethicist-threeByTwoLargeAt2X.jpg","width":2102,"height":1400,"__typename":"ImageRendition"},{"name":"threeByTwoMediumAt2X","url":"https://static01.nyt.com/images/2023/12/10/magazine/10mag-ethicist/10mag-ethicist-threeByTwoMediumAt2X
2023-12-05 18:13:42 UTC	1379	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 22 65 6e 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 61 6e 67 75 61 67 65 22 7d 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 31 30 30 30 30 30 30 30 39 32 30 35 37 36 38 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 61 72 74 69 63 6c 65 2f 32 37 39 39 34 30 38 30 2d 35 39 64 39 2d 35 31 66 34 2d 61 64 65 37 2d 31 35 34 30 63 33 34 31 34 38 63 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 31 2f 6d 61 67 61 7a 69 6e 65 2f 72 65 70 61 74 72 69 61 74 69 6f 6e 2d 61 72 74 2d 65 74 68 69 63 73 2e 68 74 6d 6c 22 2c 22 73 68 6f 72 74 55 72 6c 22 3a 22 22 2c 22 6c 61 73 74 4d 61 6a 6f 72 4d 6f 64 69 66 69 63 61 74 69 6f 6e 22 3a 22 32 30 32 33 2d 31 32 2d 30 Data Ascii: {"code":"en","__typename":"Language"},"sourceId":"100000009205768","uri":"nyt://article/27994080-59d9-51f4-ade7-1540c34148c4","url":"https://www.nytimes.com/2023/12/01/magazine/repatriation-art-ethics.html","shortUrl":"","lastMajorModification":"2023-12-0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50053	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:42 UTC	932	OUT	GET /v3/pr?exlist=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-index_pm-db5_rbd_n-vmg_n-MediaNet_ox-db5_an-db5_3lift&dcc=t Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:42 UTC	452	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 49 53 4f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 31 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 58 4b 50 38 46 34 37 5a 37 57 32 41 48 39 50 41 54 38 4e 52 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:42 GMTContent-Type: text/html;charset=ISO-8859-1Content-Length: 2112Connection: closex-amz-rid: XKP8F47Z7W2AH9PAT8NRCache-Control: max-age=0, no-cache, no-store, private, must-revalid
2023-12-05 18:13:42 UTC	2112	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 31 34 37 35 38 62 65 63 2d 37 34 31 63 2d 34 37 38 37 2d 62 66 66 37 2d 31 66 39 37 38 39 62 33 61 32 65 39 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="14758bec-741c-4787-bff7-1f9789b3a2e9"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50054	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	2307	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 271 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:43 UTC	271	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 74 72 75 73 74 41 73 73 65 74 73 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 37 31 35 64 34 30 66 31 32 31 64 39 65 62 34 64 63 34 33 32 35 39 61 31 32 61 65 31 62 32 37 30 39 39 30 35 33 38 31 62 63 33 37 66 36 37 34 39 35 32 66 62 Data Ascii: {"operationName":"trustAssetsQuery","variables":{"id":"https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html"},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"715d40f121d9eb4dc43259a12ae1b2709905381bc37f674952fb
2023-12-05 18:13:43 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 33 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 63access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:13:43 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:43 UTC	63	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 61 72 74 69 63 6c 65 22 3a 7b 22 74 72 75 73 74 41 73 73 65 74 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 72 74 69 63 6c 65 22 7d 7d 7d 0a Data Ascii: {"data":{"article":{"trustAssets":[],"__typename":"Article"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50057	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	806	OUT	GET /usermatch?s=192259&cb=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dindex.com%26id%3D%24UID HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:43 UTC	991	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 63 32 61 63 38 62 33 62 30 65 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:43 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCF-Ray: 830e43c2ac8b3b0e-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZ
2023-12-05 18:13:43 UTC	378	IN	Data Raw: 36 37 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 69 6e 64 65 78 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 41 6a 34 41 41 41 41 42 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 Data Ascii: 674<html><head><title></title></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=" style="display:none"
2023-12-05 18:13:43 UTC	1281	IN	Data Raw: 37 36 33 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 64 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 41 6a 34 41 41 41 41 42 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 31 33 32 37 3f 62 69 64 64 65 72 5f 69 64 3d 31 34 34 38 31 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a Data Ascii: 763&us_privacy=&gdpr=&gdpr_consent=&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gpp=&gpp_sid=" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZW9oTXuTmmdZ
2023-12-05 18:13:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50058	23.46.192.28	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	874	OUT	GET /cksync?cs=31&type=tam&redirect=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dmedia.net%26id%3D%3Cvsid%3E HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1; data-c-ts=1701800016
2023-12-05 18:13:43 UTC	438	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 34 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 6d 65 64 69 61 2e 6e 65 74 26 69 64 3d 33 34 34 38 30 31 36 31 33 30 31 38 34 33 37 35 30 30 30 56 31 30 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 44 45 56 6f 20 54 41 49 20 50 53 41 20 50 53 44 6f 20 48 49 53 20 4f 55 52 20 42 55 53 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: ApacheContent-Length: 154Content-Type: text/htmlLocation: https://s.amazon-adsystem.com/ecm3?ex=media.net&id=3448016130184375000V10p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT
2023-12-05 18:13:43 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50061	34.200.65.202	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	812	OUT	GET /ups/58251/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu"
2023-12-05 18:13:43 UTC	752	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:43 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 04-Dec-2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50060	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	905	OUT	GET /w/1.0/cm?id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a-2f288854a0ba&plm=5&r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dopenx.com%26id%3D%7BOPENX_ID%7D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013
2023-12-05 18:13:43 UTC	620	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 3d 31 38 65 64 65 32 61 65 2d 33 63 38 34 2d 30 64 37 65 2d 30 62 34 35 2d 32 63 63 35 66 35 38 34 38 64 38 36 7c 31 37 30 31 38 30 30 30 31 33 3b 20 56 65 72 73 69 6f 6e 3d 31 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 30 32 34 20 31 38 3a 31 33 3a 34 33 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 44 6f 6d 61 69 6e 3d 2e 6f 70 65 6e 78 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 64 3d 76 32 7c 31 37 30 31 38 30 30 30 Data Ascii: HTTP/1.1 200 OKVary: Accept, Accept-EncodingSet-Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; Version=1; Expires=Wed, 04-Dec-2024 18:13:43 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=NoneSet-Cookie: pd=v2\|17018000
2023-12-05 18:13:43 UTC	693	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 6f 70 65 6e 78 2e 63 6f 6d 26 69 64 3d 39 33 39 37 61 31 38 61 2d 38 39 61 39 2d 38 39 37 33 2d 39 31 39 64 2d 36 36 62 61 66 39 39 30 37 35 39 62 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 72 2d 62 68 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 79 6e 63 2f 6f 70 65 6e 78 2f 35 66 38 36 62 62 62 33 2d 30 35 61 66 2d 61 30 63 30 2d 36 30 34 34 2d 66 32 64 38 36 65 66 34 37 33 33 32 3f 67 64 70 72 3d 30 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://s.amazon-adsystem.com/ecm3?ex=openx.com&id=9397a18a-89a9-8973-919d-66baf990759b"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0"><img src="ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50059	52.223.22.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	764	OUT	GET /getuid?redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3D3lift.com%26id%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:43 UTC	511	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 65 63 6d 33 3f 65 78 3d 33 6c 69 66 74 2e 63 6f 6d 26 69 64 3d 32 36 31 38 36 37 32 34 31 31 35 36 39 36 37 36 32 37 38 31 34 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:43 GMTContent-Length: 0Connection: closeLocation: https://s.amazon-adsystem.com/ecm3?ex=3lift.com&id=2618672411569676278148Cache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50062	68.67.160.76	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	793	OUT	GET /getuid?https://s.amazon-adsystem.com/ecm3?id=$UID&ex=appnexus.com HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
2023-12-05 18:13:43 UTC	1014	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 35 20 4e 6f 76 20 32 30 30 38 20 31 36 3a 30 30 3a 30 30 20 47 Data Ascii: HTTP/1.1 302 FoundServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:13:43 GMTContent-Type: text/html; charset=utf-8Content-Length: 0Connection: closeCache-Control: no-store, no-cache, privatePragma: no-cacheExpires: Sat, 15 Nov 2008 16:00:00 G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50063	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:43 UTC	2114	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 14436 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:43 UTC	14436	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 4c 79 7a 4b 4e 6f 5f 6b 33 30 76 50 72 53 56 44 7a 5a 46 2d 30 6a 72 74 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 61 62 5f 61 6c 6c 6f 63 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 30 37 36 36 2c 22 64 61 74 61 22 3a 7b 22 61 6c 6c 6f 63 73 22 3a 5b 7b 22 74 65 73 74 22 3a 22 53 55 Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"LyzKNo_k30vPrSVDzZF-0jrt","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"ab_alloc","how":"beacon","client_ts":1701800020766,"data":{"allocs":[{"test":"SU
2023-12-05 18:13:43 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:43 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50064	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	744	OUT	GET /ecm3?ex=3lift.com&id=2618672411569676278148 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:44 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 45 4e 46 52 52 45 53 52 30 53 4a 53 41 4d 51 44 30 47 4b 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: ENFRRESR0SJSAMQD0GKKCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50065	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	744	OUT	GET /ecm3?id=3114214532401325210&ex=appnexus.com HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:44 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 32 51 42 45 33 33 53 35 54 54 50 53 50 5a 45 57 4a 39 57 57 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 2QBE33S5TTPSPZEWJ9WWCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50066	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	768	OUT	GET /ecm3?ex=vmg.com&id=eS1hRGtwejBsRTJ1SmkxUl9sLmhTeC4zTVhQcHV6emo0UX5B HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:44 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 36 52 57 51 31 54 44 36 4e 46 37 33 57 56 54 48 56 50 38 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 6RWQ1TD6NF73WVTHVP83Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50068	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	2266	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 2817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:44 UTC	2817	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 20 20 71 75 65 72 79 20 67 65 74 4f 66 66 65 72 28 24 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 49 64 3a 20 53 74 72 69 6e 67 21 2c 20 24 63 6f 75 6e 74 72 79 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 3a 6f 66 66 65 72 28 69 64 3a 20 24 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 49 64 2c 20 63 6f 75 6e 74 72 79 3a 20 24 63 6f 75 6e 74 72 79 29 20 7b 5c 6e 20 20 20 20 20 20 6f 66 66 65 72 49 44 5c 6e 20 20 20 20 20 20 62 75 6e 64 6c 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 5c 6e 20 20 20 20 20 20 62 69 Data Ascii: {"query":"\n query getOffer($newsAcquisitionId: String!, $country: String!) {\n \n newsAcquisition:offer(id: $newsAcquisitionId, country: $country) {\n offerID\n bundle\n subscriptionName\n subscriptionValueMessage\n bi
2023-12-05 18:13:44 UTC	1366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 35 34 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3954access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:13:44 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:44 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 22 3a 7b 22 6f 66 66 65 72 49 44 22 3a 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 22 2c 22 62 75 6e 64 6c 65 22 3a 22 58 50 41 53 53 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 73 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 22 3a 22 41 63 63 65 73 73 20 74 6f 20 72 65 70 6f 72 74 69 6e 67 2c 20 69 6e 76 65 73 74 69 67 61 74 69 6f 6e 20 61 6e 64 20 61 6e 61 6c 79 73 69 73 2c 20 6f 6e 6c 69 6e 65 20 61 6e 64 20 69 6e 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 61 70 70 2e 22 2c 22 62 69 6c 6c 69 6e 67 46 72 65 71 75 65 6e 63 79 22 3a Data Ascii: {"data":{"newsAcquisition":{"offerID":"0fd8cf46-d029-11ea-a072-340cee6a52b6","bundle":"XPASS","subscriptionName":"News","subscriptionValueMessage":"Access to reporting, investigation and analysis, online and in The New York Times app.","billingFrequency":
2023-12-05 18:13:44 UTC	1379	IN	Data Raw: 66 20 24 34 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 20 66 6f 72 20 31 20 79 65 61 72 2c 20 61 6e 64 20 61 66 74 65 72 20 31 20 79 65 61 72 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 72 61 74 65 20 6f 66 20 24 31 37 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 2e 22 2c 22 59 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 75 6e 74 69 6c 20 79 6f 75 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 31 31 35 30 31 34 38 39 33 39 36 38 2d 54 65 72 6d 73 2d 6f 66 2d 73 61 6c 65 23 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 63 61 6e 63 Data Ascii: f $4.00 every 4 weeks for 1 year, and after 1 year the standard rate of $17.00 every 4 weeks.","Your subscription will continue until you <a href=\"https://help.nytimes.com/hc/en-us/articles/115014893968-Terms-of-sale#cancellation\" target=\"_blank\">canc
2023-12-05 18:13:44 UTC	1196	IN	Data Raw: 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 57 65 65 6b 6c 79 53 68 6f 72 74 22 3a 22 24 31 22 2c 22 70 Data Ascii: 0","promoPriceMonthly":"$4.00","promoPriceMonthlyNoCountryAbbreviation":"$4.00","promoPriceAnnual":"$52.00","promoPriceAnnualNoCountryAbbreviation":"$52.00","promoPriceShort":"$4","promoPriceShortNoCountryAbbreviation":"$4","promoPriceWeeklyShort":"$1","p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50069	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	686	OUT	GET /ecm3?ex=openx.com&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:44 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 56 51 4d 56 5a 30 59 41 58 39 31 34 38 37 4d 50 42 57 56 58 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: VQMVZ0YAX91487MPBWVXCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50070	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	713	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:44 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 5a 53 48 30 56 5a 50 4b 54 51 42 35 30 58 57 51 4d 51 54 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: ZSH0VZPKTQB50XWQMQTTSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50071	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	768	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:44 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 42 44 30 54 57 33 58 36 53 53 5a 51 52 58 46 5a 54 34 52 4b 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: BD0TW3X6SSZQRXFZT4RKSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50072	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	843	OUT	GET /pixel?google_nid=openx&google_hm=ZTcyZTBlM2QtNWM3NC02YzJkLTQ0NzMtYmU5NDViNDE3MDFi HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:44 UTC	374	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 48 54 54 50 20 73 65 72 76 65 72 20 28 75 6e 6b 6e 6f 77 6e 29 0d 0a 43 Data Ascii: HTTP/1.1 200 OKContent-Type: image/pngDate: Tue, 05 Dec 2023 18:13:44 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidateCross-Origin-Resource-Policy: cross-originServer: HTTP server (unknown)C
2023-12-05 18:13:44 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50082	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	695	OUT	GET /ecm3?ex=index.com&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:45 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 31 36 41 44 45 53 31 41 52 44 4d 53 33 34 42 45 57 45 59 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 16ADES1ARDMS34BEWEY1Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50073	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	896	OUT	GET /pixel?google_nid=index&google_cm&google_hm=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:45 UTC	713	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 72 65 64 69 72 3f 73 3d 31 38 34 30 32 33 26 67 64 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Location: https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gd
2023-12-05 18:13:45 UTC	364	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 75 73 65 72 6d 61 74 63 68 72 65 64 69 72 3f 73 3d 31 38 34 30 32 33 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ssum-sec.casalemedia.com/usermatchredir?s=184023&gdpr_consent=&gdpr=&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50077	216.22.16.37	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	663	OUT	GET /api/sync?callerId=82&gdpr=$%7bGDPR%7d&gdpr_consent=$%7bGDPR_CONSENT%7d HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:44 UTC	366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 39 36 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 34 35 34 31 36 30 30 35 35 33 36 34 31 36 30 38 36 33 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 69 64 3d 34 35 34 31 36 30 30 35 35 33 36 34 31 36 30 38 36 33 35 3b 20 65 78 70 69 72 65 73 3d 53 61 74 2c 20 30 34 20 4a 61 6e 20 32 Data Ascii: HTTP/1.1 302 Foundcontent-length: 0date: Tue, 05 Dec 2023 18:13:44 GMTlocation: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=196&external_user_id=4541600553641608635&gdpr=0&gdpr_consent=set-cookie: pid=4541600553641608635; expires=Sat, 04 Jan 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50079	35.244.154.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	590	OUT	GET /711587.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:44 UTC	664	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 69 64 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 31 30 30 30 2e 67 69 66 3f 6d 65 6d 6f 3d 43 4b 4f 33 4b 78 6f 4e 43 4e 6a 51 76 61 73 47 45 67 55 49 36 41 63 51 41 45 49 41 53 67 41 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 50 53 41 61 20 50 53 44 61 20 4f 55 52 20 42 55 53 20 43 4f 4d 20 49 4e 54 20 4f 54 43 20 50 55 52 20 53 54 41 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 6c 61 73 33 3d 30 79 4d 6e 2b 50 54 4f 4b 68 55 Data Ascii: HTTP/1.1 307 Temporary RedirectCache-Control: no-cache, no-storeLocation: https://id.rlcdn.com/1000.gif?memo=CKO3KxoNCNjQvasGEgUI6AcQAEIASgAP3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"Set-Cookie: rlas3=0yMn+PTOKhU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50076	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	802	OUT	GET /track/cmf/openx?oxid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRgBIAEoAjILCJbQ3fuT8ro8EAU4AVoHc3Z4OXQ1MGAC
2023-12-05 18:13:44 UTC	643	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 74 74 64 5f 70 75 69 64 3d 63 62 34 31 64 64 66 37 2d 39 35 30 33 2d 33 32 38 39 2d 35 31 39 33 2d 65 34 32 64 39 31 61 33 62 65 37 62 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Length: 335Connection: closeserver: Kestrellocation: https://us-u.openx.net/w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b
2023-12-05 18:13:44 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 74 74 64 5f 70 75 69 64 3d 63 62 34 31 64 64 66 37 2d 39 35 30 33 2d 33 32 38 39 2d 35 31 39 33 2d 65 34 32 64 39 31 61 33 62 65 37 62 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a46

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50075	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	767	OUT	GET /track/cmf/casale HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRgBIAEoAjILCJbQ3fuT8ro8EAU4AVoHc3Z4OXQ1MGAC
2023-12-05 18:13:44 UTC	669	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 30 34 33 39 32 30 32 34 26 67 64 70 72 3d Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Length: 323Connection: closeserver: Kestrellocation: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392024&gdpr=
2023-12-05 18:13:44 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 30 34 33 39 32 30 32 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 Data Ascii: Redirecting to: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392024&gdpr=0&gdpr_consent=">https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50074	50.17.66.232	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	691	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZW9oTXuTmmdZfZr30kZulQAA%26574&gpdr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:44 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 73 2f 33 31 33 32 37 3f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 62 69 64 64 65 72 5f 69 64 3d 31 34 34 38 31 26 67 70 70 3d 26 62 69 64 64 65 72 5f 75 75 69 64 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 25 32 36 35 37 34 26 5f 6c 69 5f 63 68 6b 3d 74 72 75 65 26 67 70 70 5f 73 69 64 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 67 70 64 72 3d 26 70 72 65 76 69 6f 75 73 5f 75 75 69 64 3d 33 30 64 37 33 Data Ascii: HTTP/1.1 303 See OtherDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Length: 0Connection: closeLocation: /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZW9oTXuTmmdZfZr30kZulQAA%26574&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=30d73

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50081	52.73.239.53	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	735	OUT	GET /sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
2023-12-05 18:13:44 UTC	777	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 67 65 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 72 76 65 72 3a 20 41 54 53 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:44 GMTContent-Type: image/gifContent-Length: 43Connection: closeAge: 0Strict-Transport-Security: max-age=31536000Server: ATSExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/cs
2023-12-05 18:13:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50078	54.198.207.123	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	602	OUT	GET /sync?nid=68 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:45 UTC	1341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 34 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 32 33 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 6f 75 53 5a 46 74 57 57 57 68 5a 31 7a 35 31 56 6a 68 67 65 39 57 61 6c 4d 46 4d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 61 2d 75 73 65 72 2d 69 64 3d 73 25 33 41 30 2d 61 32 65 34 39 39 31 36 2d 64 35 39 36 2d 35 61 31 36 2d 37 35 63 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Date: Tue, 05 Dec 2023 18:13:44 GMTLocation: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=ouSZFtWWWhZ1z51Vjhge9WalMFMSet-Cookie: sa-user-id=s%3A0-a2e49916-d596-5a16-75c
2023-12-05 18:13:45 UTC	122	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 32 33 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 6f 75 53 5a 46 74 57 57 57 68 5a 31 7a 35 31 56 6a 68 67 65 39 57 61 6c 4d 46 4d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=123&external_user_id=ouSZFtWWWhZ1z51Vjhge9WalMFM">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50083	70.42.32.191	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:44 UTC	647	OUT	GET /usersync/index/?us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:45 UTC	515	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 44 65 63 20 31 39 39 34 20 31 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 75 73 65 72 73 79 6e 63 2f 69 6e 64 65 78 2f 3f 67 64 70 72 3d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 26 67 70 70 5f 73 69 64 3d 26 73 3d Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Content-Length: 109Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 01 Dec 1994 16:00:00 GMTLocation: /usersync/index/?gdpr=&gdpr_consent=&gpp=&gpp_sid=&s=
2023-12-05 18:13:45 UTC	109	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 69 6e 64 65 78 2f 3f 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 70 70 3d 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 26 61 6d 70 3b 73 3d 32 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/index/?gdpr=&gdpr_consent=&gpp=&gpp_sid=&s=2&us_privacy=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50084	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	616	OUT	POST /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive Content-Length: 4178 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:45 UTC	4178	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 6f 70 74 73 25 32 32 25 33 41 25 32 32 65 6e 64 70 6f 69 6e 74 25 32 32 25 32 43 25 32 32 74 74 73 74 25 32 32 25 33 41 37 37 31 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 68 63 25 32 32 25 33 41 34 25 32 43 25 32 32 62 72 5f 6f 68 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 62 72 5f 6f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 75 61 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 Data Ascii: jsData=%7B%22opts%22%3A%22endpoint%22%2C%22ttst%22%3A771%2C%22ifov%22%3Afalse%2C%22hc%22%3A4%2C%22br_oh%22%3A984%2C%22br_ow%22%3A1280%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gec
2023-12-05 18:13:45 UTC	544	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 44 61 74 61 44 6f 6d 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json;charset=utf-8Content-Length: 235Connection: closeDate: Tue, 05 Dec 2023 18:13:45 GMTServer: DataDomeAccess-Control-Allow-Origin: *Pragma: no-cacheCache-Control: no-cache, no-store, must-revalid
2023-12-05 18:13:45 UTC	235	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 46 36 59 4a 42 43 62 46 43 49 32 43 53 4f 36 37 42 7e 44 6a 70 44 48 4f 71 43 4a 49 31 38 6b 34 6b 79 45 66 5f 53 78 32 4f 4a 51 66 68 7e 70 78 38 73 57 39 59 56 68 6e 47 50 59 31 36 48 61 45 54 43 64 47 73 5a 49 57 42 6c 49 58 69 5f 57 6d 39 30 36 6b 7a 71 70 48 48 64 70 64 61 74 58 36 49 70 4e 35 55 70 56 61 6c 66 56 41 6b 35 6b 77 6d 70 52 6c 45 6f 42 66 30 4d 4c 47 7e 57 6b 69 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; Max-Age=31536000; Domain=www.nytimes.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50086	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	1918	OUT	GET /vi-assets/static-assets/service-worker-test-1701795880486.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=~scr7ducgbugYGyQuaPZXHhzWQx79Ohtdu45VKETD~ZRcAj5PCHhLxgM5r2e1_17tcdjMxfdNtYaUKs0ESDsFeQVFi3ukPfUAZ~10y7WXpTeUhIPj9LJii8aP9BLSnk5; _dd_s=rum=0&expire=1701800919156
2023-12-05 18:13:45 UTC	1328	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 35 37 39 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 4c 4b 4d 30 48 5a 76 50 64 6c 56 38 71 6b 43 31 51 74 69 59 41 6d 56 4f 4b 6b 4f 47 36 53 43 6f 34 32 6a 33 4e 67 6a 73 2d 67 37 33 52 7a 4d 78 76 54 41 5f 52 70 36 52 39 50 6c 4c 56 72 34 4f 4d 2d 48 6e 59 4a 5a 49 36 73 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 39 35 39 39 33 33 31 34 37 31 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 35799X-GUploader-UploadID: ABPtcPqLKM0HZvPdlV8qkC1QtiYAmVOKkOG6SCo42j3Ngjs-g73RzMxvTA_Rp6R9PlLVr4OM-HnYJZI6sQx-goog-generation: 1701795993314719x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:45 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 72 65 63 61 63 68 65 43 6f 6e 66 69 67 3d 5b 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 31 35 2d 35 36 32 38 30 33 61 32 65 38 36 62 35 62 38 32 31 32 30 38 2e 6a 73 22 2c 22 32 36 63 36 36 30 64 61 35 30 31 65 64 37 61 65 66 61 37 33 32 36 37 63 31 66 35 63 37 38 35 62 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 31 37 36 2d 37 30 65 39 32 62 32 31 61 33 63 33 62 39 34 66 34 36 66 62 2e 6a 73 22 2c 22 30 38 30 32 63 31 62 35 32 66 38 64 63 64 61 31 33 64 66 38 32 34 37 30 30 37 62 33 31 39 31 33 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 31 37 37 2d 64 61 62 36 63 35 31 64 Data Ascii: "use strict";var precacheConfig=[["/vi-assets/static-assets/15-562803a2e86b5b821208.js","26c660da501ed7aefa73267c1f5c785b"],["/vi-assets/static-assets/176-70e92b21a3c3b94f46fb.js","0802c1b52f8dcda13df8247007b31913"],["/vi-assets/static-assets/177-dab6c51d
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 65 38 34 33 64 61 35 35 38 39 66 34 63 35 37 37 32 35 65 65 34 62 30 64 32 39 62 33 66 65 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 32 35 2d 34 34 34 32 62 66 64 63 30 30 35 36 34 62 66 37 64 62 64 61 2e 6a 73 22 2c 22 31 62 66 37 63 66 39 62 35 36 36 66 66 32 37 65 37 62 30 62 35 35 38 35 64 38 31 34 32 35 64 62 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 32 36 2d 38 32 39 64 30 64 39 32 61 62 35 30 64 61 33 64 35 39 32 33 2e 6a 73 22 2c 22 30 38 39 62 31 65 31 34 32 64 36 32 39 65 61 33 62 62 61 31 34 32 66 31 38 32 65 34 61 63 66 35 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 32 37 2d 30 61 32 32 36 33 38 34 32 35 Data Ascii: e843da5589f4c57725ee4b0d29b3fe"],["/vi-assets/static-assets/25-4442bfdc00564bf7dbda.js","1bf7cf9b566ff27e7b0b5585d81425db"],["/vi-assets/static-assets/26-829d0d92ab50da3d5923.js","089b1e142d629ea3bba142f182e4acf5"],["/vi-assets/static-assets/27-0a22638425
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 55 70 73 68 6f 74 4c 6f 67 6f 2d 63 61 65 31 63 39 61 30 66 35 66 34 66 62 38 32 32 39 63 34 2e 6a 73 22 2c 22 62 61 38 39 34 62 61 61 64 34 34 32 31 62 34 65 65 66 33 38 36 61 32 61 64 31 30 62 63 61 37 36 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 57 6f 72 6c 64 43 75 70 4c 6f 67 6f 32 30 31 38 2d 61 35 36 66 62 31 65 62 37 36 63 39 66 36 33 39 35 30 38 63 2e 6a 73 22 2c 22 35 31 38 39 64 61 35 61 61 39 36 35 39 32 32 34 64 64 61 63 61 64 37 30 66 39 31 61 39 33 65 34 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 61 63 63 65 73 73 43 6f 64 65 4c 50 41 6c 6c 41 63 63 65 73 73 2d 33 33 31 62 62 38 36 63 Data Ascii: assets/static-assets/UpshotLogo-cae1c9a0f5f4fb8229c4.js","ba894baad4421b4eef386a2ad10bca76"],["/vi-assets/static-assets/WorldCupLogo2018-a56fb1eb76c9f639508c.js","5189da5aa9659224ddacad70f91a93e4"],["/vi-assets/static-assets/accessCodeLPAllAccess-331bb86c
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 2d 32 38 38 36 35 62 37 32 39 35 33 33 38 30 61 34 30 61 61 34 33 33 31 38 31 30 38 38 37 36 63 62 2e 70 6e 67 22 2c 22 33 31 39 33 37 33 61 61 66 34 35 32 34 64 39 34 64 33 38 61 61 35 39 39 63 35 36 62 38 36 35 35 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 64 61 72 6b 2d 66 37 34 65 36 39 62 66 36 64 61 65 37 33 35 31 36 39 38 35 34 61 34 31 32 36 63 65 62 66 38 63 2e 70 6e 67 22 2c 22 35 31 35 64 31 36 66 31 63 66 38 30 31 35 32 34 61 66 39 30 65 37 35 37 35 30 65 35 30 34 38 65 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 61 73 6b 2d 63 34 30 38 66 66 39 61 35 61 32 36 34 36 35 39 38 30 30 64 2e 6a 73 22 2c 22 Data Ascii: -28865b72953380a40aa43318108876cb.png","319373aaf4524d94d38aa599c56b8655"],["/vi-assets/static-assets/apple-touch-icon-dark-f74e69bf6dae735169854a4126cebf8c.png","515d16f1cf801524af90e75750e5048e"],["/vi-assets/static-assets/ask-c408ff9a5a264659800d.js","
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 62 65 73 74 73 65 6c 6c 65 72 73 2d 65 65 37 37 35 64 39 31 66 61 61 63 30 63 37 31 36 62 36 65 2e 6a 73 22 2c 22 61 62 30 62 65 38 62 33 62 61 63 37 34 62 30 62 34 32 36 62 31 35 32 39 32 33 31 30 33 35 39 63 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 62 6c 61 6e 6b 2d 62 63 36 39 66 63 33 62 65 62 30 62 33 61 34 66 35 63 61 32 2e 6a 73 22 2c 22 33 30 64 61 35 38 34 37 38 31 30 62 32 65 65 66 35 63 61 36 36 37 65 37 62 65 31 34 34 65 32 63 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 62 6f 6f 6b 2d 72 65 76 69 65 77 2d 30 64 31 31 61 36 39 65 32 32 30 36 34 38 35 65 39 37 32 61 2e 6a 73 22 2c 22 36 31 31 36 32 65 32 36 38 Data Ascii: static-assets/bestsellers-ee775d91faac0c716b6e.js","ab0be8b3bac74b0b426b15292310359c"],["/vi-assets/static-assets/blank-bc69fc3beb0b3a4f5ca2.js","30da5847810b2eef5ca667e7be144e2c"],["/vi-assets/static-assets/book-review-0d11a69e2206485e972a.js","61162e268
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 33 31 62 62 38 35 34 39 39 34 36 33 61 36 36 35 32 62 39 63 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 63 6f 6d 6d 65 6e 74 73 46 6f 72 6d 2d 33 33 64 35 64 34 63 66 35 61 61 34 37 35 37 33 38 66 33 35 2e 6a 73 22 2c 22 35 30 36 39 34 38 35 62 63 34 30 36 66 36 62 32 36 65 63 32 31 38 36 34 38 39 36 35 39 36 64 37 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 63 6f 6f 6b 69 65 70 6f 6c 69 63 79 5f 74 68 75 6d 62 6e 61 69 6c 2d 34 39 66 63 62 35 62 30 36 34 61 62 33 63 35 66 36 34 39 37 34 31 37 64 63 64 66 36 30 34 32 65 2e 6a 70 67 22 2c 22 33 63 65 37 32 64 37 62 62 35 66 32 39 39 34 31 61 37 37 64 63 35 64 63 39 32 35 30 66 31 37 38 22 5d 2c 5b 22 2f 76 69 2d 61 Data Ascii: 31bb85499463a6652b9c"],["/vi-assets/static-assets/commentsForm-33d5d4cf5aa475738f35.js","5069485bc406f6b26ec21864896596d7"],["/vi-assets/static-assets/cookiepolicy_thumbnail-49fcb5b064ab3c5f6497417dcdf6042e.jpg","3ce72d7bb5f29941a77dc5dc9250f178"],["/vi-a
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 64 65 66 61 75 6c 74 48 61 6d 62 75 72 67 65 72 4e 61 76 44 61 74 61 2d 32 62 35 34 37 34 38 62 33 37 64 32 35 35 31 34 37 35 35 31 2e 6a 73 22 2c 22 63 30 36 65 65 64 32 32 33 64 38 31 65 32 64 34 35 37 35 32 62 65 62 61 63 39 32 39 62 32 61 65 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 64 65 66 61 75 6c 74 53 69 74 65 49 6e 64 65 78 44 61 74 61 2d 37 39 34 65 34 32 38 62 65 31 38 36 32 39 66 36 61 39 38 61 2e 6a 73 22 2c 22 30 38 35 39 30 33 61 38 37 62 30 64 35 63 65 63 61 30 34 61 35 62 62 30 37 36 63 61 64 35 31 30 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 64 65 73 6b 74 6f 70 4c 6f 67 6f 4e 61 76 Data Ascii: ssets/static-assets/defaultHamburgerNavData-2b54748b37d255147551.js","c06eed223d81e2d45752bebac929b2ae"],["/vi-assets/static-assets/defaultSiteIndexData-794e428be18629f6a98a.js","085903a87b0d5ceca04a5bb076cad510"],["/vi-assets/static-assets/desktopLogoNav
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 66 6f 6f 2d 63 30 39 30 36 37 30 38 39 66 38 64 62 30 37 65 31 36 64 33 2e 6a 73 22 2c 22 34 66 33 62 63 66 30 63 31 62 30 38 30 37 62 30 38 33 66 38 66 33 35 35 66 30 63 39 36 61 38 61 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 67 61 6d 65 73 2d 69 6d 61 67 65 2d 32 38 33 37 61 33 39 62 62 30 38 37 35 38 34 37 33 64 34 35 39 32 38 32 39 30 31 38 38 37 65 35 2e 6a 70 67 22 2c 22 35 35 61 33 31 39 39 30 64 30 64 32 38 35 38 66 37 35 30 65 39 30 64 66 37 30 63 64 64 35 36 38 22 5d 2c 5b 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 67 61 6d 65 73 47 69 66 74 4c 61 6e 64 69 6e 67 50 61 67 65 2d Data Ascii: ],["/vi-assets/static-assets/foo-c09067089f8db07e16d3.js","4f3bcf0c1b0807b083f8f355f0c96a8a"],["/vi-assets/static-assets/games-image-2837a39bb08758473d459282901887e5.jpg","55a31990d0d2858f750e90df70cdd568"],["/vi-assets/static-assets/gamesGiftLandingPage-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50085	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	804	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:45 UTC	660	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 76 61 6c 3d 43 41 45 53 45 43 41 61 38 57 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESECAa8W
2023-12-05 18:13:45 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 43 41 61 38 57 4c 58 52 48 6c 50 47 50 44 4f 57 34 51 51 65 6d 30 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESECAa8WLXRHlPGPDOW4QQem0&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50087	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	1753	OUT	GET /unified_lire/js/standalone-client.bundle.js HTTP/1.1 Host: myaccount.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:45 UTC	1164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 38 30 36 0d 0a 78 2d 6e 79 74 2d 62 61 63 6b 65 6e 64 3a 20 6c 69 72 65 2d 75 69 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 39 20 4e 6f 76 20 32 30 32 33 20 31 30 3a 33 34 3a 30 38 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 36 30 30 0d 0a 65 74 61 67 3a 20 22 64 69 51 47 30 67 22 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 65 30 62 33 33 32 66 66 65 63 32 36 39 38 38 61 36 39 63 62 61 31 31 34 33 64 39 32 61 65 61 32 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 14806x-nyt-backend: lire-uiexpires: Wed, 29 Nov 2023 10:34:08 GMTcache-control: public, max-age=600etag: "diQG0g"x-cloud-trace-context: e0b332ffec26988a69cba1143d92aea2content-type: applicati
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 ff dc 7d db 76 db d8 99 e6 fd 3c 05 89 ca c8 40 04 d1 a4 24 4b 36 69 98 ed b2 a5 8a 12 9f 62 b9 ca a9 c8 1a 2d 88 04 29 d8 14 c0 00 a0 64 95 a4 5e ee 99 e9 39 ae 35 0f 30 37 d3 b7 73 35 ef 90 37 69 cf 8b cc f7 ed 33 78 70 39 49 77 a7 d7 94 13 11 d8 d8 d8 c7 ff bc ff ff 47 73 34 cb 06 55 9a 67 7e 15 5c 5f c4 45 23 89 ae 6f 7b ba b0 91 f9 45 70 9d 8e fc e4 a8 38 0e 8a a4 9a 15 59 83 d7 ad e4 e3 34 2f aa b2 c7 57 f2 88 45 d1 75 da 2d c2 49 b7 d9 09 d5 c3 ee f5 ed 6d 4f bd 54 f1 a5 41 3c 99 f8 b9 7e 37 cc 43 7b 9d 05 b8 99 44 cd b6 2d bb cd 5a e7 51 15 66 ad 41 94 e0 ef 30 d2 a3 f2 ab 30 09 31 ae ac 95 f3 32 b8 b9 79 79 fa 3e 19 54 ad 61 32 4a b3 e4 55 91 4f 93 a2 ba 12 d5 ae 93 6c 76 9e 14 f1 e9 24 e9 a2 f1 71 52 75 8b db e0 16 ed Data Ascii: }v<@$K6ib-)d^9507s57i3xp9IwGs4Ug~\_E#o{Ep8Y4/WEu-ImOTA<~7C{D-ZQfA0012yy>Ta2JUOlv$qRu
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: f8 97 e1 28 9c 06 e1 e5 d1 44 dd 4e c2 0b c0 2f 5e 8d a6 e1 38 10 5c fb 9c 1c bb 08 2e 8f ce 51 27 c5 2b e7 61 81 eb b0 d9 0e 40 8e e6 51 85 d4 66 3b f0 bd b8 bc ca 06 00 22 05 f3 8b 15 6b 2c 4e 93 2c 62 11 b1 eb 1e 28 17 b1 6b 6b 57 62 57 07 58 44 ec 22 b6 11 bb 1e b4 83 d6 6f f6 7e 14 18 b6 05 4c 1b b1 6c 93 98 05 cc c3 3b 53 fc ee 02 13 87 f8 25 06 5e e1 b7 73 0f 15 cf c4 c5 76 10 9e f3 49 1b dd 5d b0 64 07 ef 8e 59 82 77 4f f1 4b ca 79 89 df dd ad 20 fc 88 5f 10 cc f0 25 7e ef e3 cd 43 fe a2 fc 03 9f a3 ed 13 fc 6e b6 f1 c2 7b 5c 3c 40 c5 3d fc 76 58 70 80 8b 2d d4 78 86 5f d2 8b 57 d1 fb d6 28 7c 12 1d e0 ef 9b e8 04 7f f7 a3 a2 25 85 c9 f0 05 2e 7f 7d f8 f2 45 f8 3c 7a b1 b6 f6 a2 45 ee 9f 8d d3 d1 55 f8 3a 1a fa de c9 59 3a 1c 26 19 48 c5 63 de 56 Data Ascii: (DN/^8\.Q'+a@Qf;"k,N,b(kkWbWXD"o~Ll;S%^svI]dYwOKy _%~Cn{\<@=vXp-x_W(\|%.}E<zEU:Y:&HcV
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 9d cf 1f 54 b8 0d eb 76 c1 ee 8f f5 02 6c 71 f7 77 b4 0c 3a 46 9a a7 49 39 28 d2 29 36 a5 fb 8b b9 47 d4 3c ca ee ef e7 4a 25 fc 95 dd 0a 96 2e 41 0b d2 0a aa 9c 2b bc 00 0f a0 b0 02 6b 7a 76 17 01 56 9e 99 5c 7d 04 ba 41 b3 38 76 5f d9 d2 25 77 8a 2b 05 89 d0 b6 e7 37 41 df ea dd 52 ac a9 b0 eb 9a 08 7a 47 34 e9 1d c3 00 f7 dc 97 6c c7 bb be 15 77 d7 71 17 83 bf b9 d1 f7 72 60 a2 9f 00 b8 ee 51 04 c5 1e 18 e9 d3 d9 86 1a fd 26 7b a8 8e c1 80 3b 3d 43 f9 34 31 04 13 56 cc c0 3c 12 dc 58 9a 18 23 d2 f2 ce 71 e8 9f 82 57 dc dc c8 1d 85 b8 25 38 ab 80 4d 25 b4 5c 88 e7 e0 f5 76 75 08 09 80 c1 25 82 28 b8 02 6a c2 8c 4c eb b3 a2 93 94 10 00 ed f8 51 2d 92 0e b2 6f 98 9a 9f b7 e2 e9 74 72 e5 bf a0 74 87 62 47 84 3b 7a 0c 45 47 68 f2 ae 60 17 3e 76 eb b4 84 b4 Data Ascii: Tvlqw:FI9()6G<J%.A+kzvV\}A8v_%w+7ARzG4lwqr`Q&{;=C41V<X#qW%8M%\vu%(jLQ-otrtbG;zEGh`>v
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 32 1b 26 25 b6 d5 6e a0 7c da 84 8e 46 1a f0 2c 2d a0 fd 8d 0a 74 e8 81 6d 9a d1 49 81 03 47 82 0b b6 10 47 e0 32 0f 41 fe eb 26 12 18 76 71 2e d8 ca 8b 14 47 36 98 09 1c 3b 70 fc 04 58 86 41 4d 42 27 44 80 84 92 84 1a 6c ea e7 01 8e fe 88 eb d0 2b ed 38 84 7a a8 e4 19 79 e4 dd 9a 62 81 9e 03 b2 e2 71 e2 5f 63 f5 79 d1 ad 42 75 45 73 4f 37 0e 69 9b 28 61 1a 09 bd 5f e2 cc ef 0b 18 06 33 25 31 4c 1f a2 f2 6c 82 52 04 ce 17 60 5a 2f 06 20 a0 14 26 3a 0f 80 78 b3 c8 f7 bc f5 01 24 13 5a 13 ec 21 1f 48 32 64 ea dd 00 eb 4d 7b 43 75 28 8e 89 9c 39 18 f1 7d a0 f8 07 18 c5 52 42 4b 5c 0b 07 72 ed cb 65 04 3a eb 95 40 95 14 66 59 8f 30 e2 09 d3 a1 be 01 ed a3 fd 35 81 a4 1a 51 63 d2 55 63 55 2b 16 0f fb 98 03 2b 75 67 ad f7 38 01 f3 a5 19 84 7a 14 df 86 f2 5d f4 Data Ascii: 2&%n\|F,-tmIGG2A&vq.G6;pXAMB'Dl+8zybq_cyBuEsO7i(a_3%1LlR`Z/ &:x$Z!H2dM{Cu(9}RBK\re:@fY05QcUcU++ug8z]
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: a2 fa ad f7 88 3b 24 86 01 b2 45 0e 0a ef c7 a4 10 6a 33 0e ba 27 79 3c 4c 86 e0 17 55 2b 2d 7f 48 cb 94 c7 de b9 e2 cf 58 2b a5 1d c3 26 f3 24 3f 9f ce 60 62 11 0e a5 60 d3 9a 97 ab c9 35 db 58 e5 1c 18 cc 5f 5f fc 85 9a 28 7e 0b a8 88 cd 0e 8a 75 41 7e eb 5a 03 84 42 44 c1 97 83 cc 31 10 a8 e2 f1 79 89 85 34 8c 28 ef 5f df 76 73 cc 89 64 41 8f 79 a0 9e 63 94 30 17 c6 e0 e2 58 db 18 26 81 31 a4 26 d4 4c b2 0b d8 e6 e5 08 fa de dd 78 56 9d dd f5 ba ea 42 0a 2a f0 a7 1f 45 b3 be 77 56 55 50 e8 ef de 3d bf 8a 07 83 7c 96 61 85 1d e3 4b 77 c9 f3 b2 1a d7 ea c0 b8 5f 09 eb 0a b7 a5 6f 2f bb f0 92 c4 13 02 16 ec 59 d2 8f 0e 47 1b 30 0c a7 ad 22 29 a7 00 d2 e4 44 3e 9d 01 a0 07 79 fe 21 05 52 5e e1 f1 40 78 e5 9e a4 c3 9b 1b 3e a2 b7 d6 30 9e 08 b9 e9 0c 8f 95 Data Ascii: ;$Ej3'y<LU+-HX+&$?`b`5X__(~uA~ZBD1y4(_vsdAyc0X&1&LxVB*EwVUP=\|aKw_o/YG0")D>y!R^@x>0
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 07 bd 33 21 58 af 3c b2 9e f9 ca 2c 06 a1 e6 02 28 a3 1a 83 a8 8b 43 6b 18 8d c0 5b 5c 9a 13 5c 13 ec 0a 1d d0 8c 30 71 ef a5 b7 de 58 5f 1f 84 97 0c 11 a7 e7 03 a5 6b 15 35 1e 5d 23 7c 07 91 e4 2f f6 f6 9e 32 b2 6b 84 93 cb df 20 28 d5 ec 8b 30 84 d1 ac 23 8e 11 94 8d ab 14 81 2c 8e d6 05 1b c3 12 5d ac ef 1d 42 45 78 e5 05 eb 22 46 ba 99 72 64 70 9d 67 73 33 ac b3 b2 fc 7b fb 1e cd 43 4d 1d 51 ed ed 79 3d 90 be 40 43 b4 88 66 4f 6f e9 03 fa 16 c0 b5 64 6c 2b 1a 6e b6 6b ed 02 3a 17 9a bd bc 0d f3 6c 1f 92 ca 4f 8e 67 ac 51 c2 1b 38 e0 9a b4 b8 36 6b 6b 1c 30 54 30 d9 15 dc d5 70 cb c3 a0 d5 76 b2 9a 79 5b 8b 03 9e 8c 90 00 7d 32 0a 33 ac 38 f4 07 50 bb 5c f7 4b a5 fe f3 27 18 c1 5d 48 a5 47 21 21 94 1e 86 69 94 1f 21 dc 9d 0e 6f 1b ef cb 93 12 51 ca c9 Data Ascii: 3!X<,(Ck[\\0qX_k5]#\|/2k (0#,]BEx"Frdpgs3{CMQy=@CfOodl+nk:lOgQ86kk0T0pvy[}238P\K']HG!!i!oQ
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 03 9d fd 24 8a ce 90 cc 00 4a d8 09 98 87 51 0f 90 ce e0 44 a4 85 38 39 f2 fe e6 6f cc 92 42 74 3f 5b 5b 3b 61 aa 89 bd e8 fd cd cd 47 ff 8c 89 0e ce fa 87 fd 8f be 07 b2 29 73 a8 74 f7 54 0c 2c 92 1f a8 94 32 c0 2b bc 88 03 1d 51 e5 e6 e6 3d 95 a4 67 38 fc ba 44 f6 81 67 52 de e4 e4 a0 9f 05 60 b5 46 fb 54 09 96 10 b3 82 63 91 8f 3c 68 2b 91 84 e2 a5 08 ae 2a c0 85 f4 d4 ad 5a 28 d3 59 c4 a8 35 09 87 d8 e4 c3 b5 b5 f7 d8 7d b5 b4 68 fb 7d 8b a4 0f 2d 61 da 6d cc 43 37 61 13 0b bc 57 f2 af f4 2a 64 46 80 e6 05 4c e7 8c 8e f8 c0 e9 33 5f 46 ec 9f a0 83 3d 80 26 04 e4 68 0f 3f 2f 8f a3 61 78 c6 28 c9 71 74 2d bb eb 1e f6 f7 10 dd ac 3b 47 da 08 80 62 f7 5c 16 2a b1 56 2d 49 f7 e0 16 60 45 e3 c9 29 21 66 1c 88 9f 13 26 dd 38 01 74 8d 8f 4e 61 f7 48 26 88 b7 Data Ascii: $JQD89oBt?[[;aG)stT,2+Q=g8DgR`FTc<h+Z(Y5}h}-amC7aWdFL3_F=&h?/ax(qt-;Gb\*V-I`E)!f&8tNaH&
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 5f 29 ad 6b 3d b9 25 db e7 fa d0 21 0d 9e ec 22 40 01 db 5a 42 58 82 af 99 3e c4 2c 1f 8e 7a a5 92 0b 62 14 3b 83 2a 83 e0 e1 f6 7d 28 09 8f 72 2d 1d 60 3e 5a 2e 85 73 5c 99 1c c0 87 6b 06 b2 a6 79 20 ba e5 92 35 91 de ad d1 ce 3b c2 57 07 d7 ed 53 71 89 ab f5 f6 47 5c 06 d7 8e d2 6a b6 71 1e d0 1f 76 70 b8 c8 44 58 44 04 dd 2d c5 3b 43 ec 90 1a c1 3f ef d7 c3 cf cf 74 5e 0b a5 8e 11 77 bb 1a ce 9a 84 33 e4 54 83 85 13 6a da 95 3f a6 4c 02 f1 6b 18 74 79 89 84 d2 6a d1 a0 09 13 a2 11 66 5a 22 f0 19 39 91 1f ff ee e4 87 c7 cf be df 0b 9f 1f bc 50 57 58 0c 1c fe 7d f7 f8 cd c1 0f 7b 27 07 2f f6 0f 5e 1c bc f9 31 84 d9 ea a0 5e b2 f7 ea f0 e0 19 b2 e2 a5 e5 3e bd 99 90 cd 07 b9 7e 2a c8 36 05 ae d8 48 5a 1e c6 23 ae a5 28 63 57 87 8f f7 d9 e4 9b bd ef f6 5e Data Ascii: _)k=%!"@ZBX>,zb;}(r-`>Z.s\ky 5;WSqG\jqvpDXD-;C?t^w3Tj?LktyjfZ"9PWX}{'/^1^>~6HZ#(cW^
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 8d f1 a5 8b 6d e0 0a af 85 cb 2f 69 c8 3b 84 b6 3f 2c 2f 10 3c 00 97 fd 8d 49 7c 9a 4c a2 3b 8c a9 02 c7 bc d3 18 a5 93 89 0d f5 48 c3 3b 70 37 60 d8 c4 bb 3b 8c 9b 78 77 07 6e cd 22 f0 42 df 3f 62 73 68 10 2c b1 54 d7 b8 a3 6f 72 5c 7c 47 f7 7b 1c f7 34 d2 61 e4 8d d5 8d d7 f8 d8 89 bc 8d ce 3d 44 61 34 ae 70 c9 df 8f 9b f2 f7 4a fe 9a 86 d0 54 9c a5 38 02 41 8c 83 8e 0e a0 b7 5e e4 41 37 6c 0c 67 70 b5 ef b4 76 4b 0f 61 10 39 4c 04 aa d5 0a c1 60 b2 fd c1 ec 34 1d 6c 9c 26 3f a5 49 c1 8f 82 b4 76 76 f0 2d 0e fc e2 13 10 b0 19 4f f1 3d 98 27 8c 9d 8a 00 04 82 a9 43 e7 f2 1a 77 bf a6 ff cd 25 fd 73 2a ec 7c 8b 21 26 8d 7f 82 ce 91 42 75 da c8 47 23 d8 0e e5 02 b1 40 ba ef 47 77 4c 74 10 77 49 3c 40 ce d6 41 5a 21 54 bd dd da 99 9b 46 ad 25 b1 f6 5f dd d4 Data Ascii: m/i;?,/<I\|L;H;p7`;xwn"B?bsh,Tor\\|G{4a=Da4pJT8A^A7lgpvKa9L`4l&?Ivv-O='Cw%s*\|!&BuG#@GwLtwI<@AZ!TF%_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50088	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	1951	OUT	GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=false&gwtype=REGIWALL&us=anon&context-type=&areas=barOne&areas=truncator HTTP/1.1 Host: mwcm.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:45 UTC	1161	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 37 39 37 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 9797access-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: ht
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 7b 22 62 61 72 4f 6e 65 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 61 70 70 65 6e 64 45 78 69 74 55 72 69 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 61 72 4f 6e 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 62 61 72 4f 6e 65 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 31 34 66 65 65 62 31 64 2d 30 39 34 37 2d 34 38 33 33 2d 61 36 65 35 2d 61 34 65 38 38 64 30 66 62 66 33 33 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 Data Ascii: {"barOne":{"active":true,"appendExitUri":false,"html":"\n\n\n\n \u003cdiv class=\"barOne\" data-config-component-id=\"mkt-wcm:components/metered_assets/barOne/template/main\" data-component-uuid=\"14feeb1d-0947-4833-a6e5-a4e88d0fbf33\"\u003e\n\n\n\u003csc
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 72 4f 6e 65 5c 22 20 73 74 79 6c 65 3d 5c 22 20 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 3f 63 61 6d 70 61 69 67 6e 49 64 3d 39 51 51 39 4b 5c 22 5c 75 30 30 33 65 5c 6e 20 53 55 42 53 43 52 49 42 45 20 46 4f 52 20 24 32 2f 57 45 45 4b 5c 6e 20 5c 75 30 30 33 63 2f 61 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 2f 64 69 76 5c 75 30 30 33 65 5c 6e 5c 6e 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 72 65 61 74 69 76 65 2d 6f 76 65 72 72 69 64 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 70 2f 63 72 65 61 74 69 76 65 4f 76 65 72 72 69 64 65 2f 74 Data Ascii: rOne\" style=\" \" href=\"https://www.nytimes.com/subscription?campaignId=9QQ9K\"\u003e\n SUBSCRIBE FOR $2/WEEK\n \u003c/a\u003e\n\u003c/div\u003e\n\n\u003cdiv class=\"creative-override\" data-config-component-id=\"mkt-wcm:components/lp/creativeOverride/t
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 74 63 68 2e 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 2f 50 6c 61 74 66 6f 72 6d 73 2f 57 65 62 2d 2d 71 75 65 72 79 2d 70 61 72 61 6d 65 74 65 72 2d 5c 22 7d 2c 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 41 20 67 72 6f 75 70 20 6f 66 20 72 65 67 69 73 20 6f 72 20 61 6e 6f 6e 79 6d 6f 75 73 20 75 73 65 72 73 2e 20 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 4a 4b 49 44 44 2f 55 73 65 72 2d 53 74 61 74 75 73 2f 52 65 67 Data Ascii: e \\u0027plat\\u0027 query parameter. The \\u0027plat\\u0027 query parameter is required to match.\",\"path\":\"/QueryParameter/Platforms/Web--query-parameter-\"},{\"description\":\"A group of regis or anonymous users. \",\"path\":\"/JKIDD/User-Status/Reg
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 69 6e 67 54 69 65 72 73 5c 22 3a 7b 5c 22 31 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 33 36 34 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 31 33 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 35 32 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 35 32 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 31 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 31 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 Data Ascii: ingTiers\":{\"1\":{\"durationDays\":364,\"recurrence\":13,\"durationWeeks\":52,\"totalPrice\":52,\"weeklyPrice\":1,\"tierNumber\":1,\"rawPrice\":\"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\"
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 34 2e 32 35 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 32 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 31 37 2e 30 30 5c 22 7d 7d 2c 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 3a 5c 22 32 30 30 30 30 32 31 36 38 38 30 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 5c 22 2c 5c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 5c 22 3a 5c 22 Data Ascii: \"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\":4.25,\"tierNumber\":2,\"rawPrice\":\"17.00\"}},\"promoCode\":\"20000216880\",\"id\":\"0fd8cf46-d029-11ea-a072-340cee6a52b6\",\"currencyCode\":\"
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 6e 67 2d 73 65 72 76 69 63 65 73 2d 63 61 63 68 69 6e 67 5c 22 3a 66 61 6c 73 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 34 30 35 2d 2d 41 43 54 49 56 41 54 45 2d 41 42 52 41 2d 56 31 32 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 32 32 34 2d 2d 68 64 2d 61 75 78 50 72 6f 64 75 63 74 4d 61 70 70 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 31 34 39 2d 2d 43 49 52 43 55 49 54 2d 42 52 45 41 4b 45 52 2d 53 41 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 4f 42 43 4f 2d 33 30 33 38 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2d 72 6f 6c 6c 6f 75 74 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 34 33 39 2d 2d 43 49 47 2d 49 50 2d 53 45 47 4d 45 4e 54 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 Data Ascii: ng-services-caching\":false,\"FF-CMOTS-3405--ACTIVATE-ABRA-V12\":true,\"FF-CMOTS-224--hd-auxProductMapping\":true,\"FF-CMOTS-3149--CIRCUIT-BREAKER-SAS\":true,\"FF-MOBCO-3038-payment-methods-rollout\":true,\"FF-MWCM-4439--CIG-IP-SEGMENTS\":true,\"FF-MWCM-4
2023-12-05 18:13:45 UTC	1379	IN	Data Raw: 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 22 3a 22 4d 41 47 5f 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 73 61 6c 65 5f 62 61 72 31 63 6f 70 79 74 65 73 74 5f 73 75 62 63 6f 6e 5f 42 41 55 22 2c 22 70 61 67 65 50 61 74 68 22 3a 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 22 2c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 22 3a 74 72 75 65 2c 22 73 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 Data Ascii: "audienceName":"MAG_web_regi_anon_sale_bar1copytest_subcon_BAU","pagePath":"/marketing/mpc/muassets/variants/variant-2","isPageVariant":true,"segments":[{"description":"Based on the value of the \u0027plat\u0027 query parameter. The \u0027plat\u0027 query
2023-12-05 18:13:45 UTC	144	IN	Data Raw: 65 2c 22 68 74 6d 6c 22 3a 22 22 2c 22 6a 73 22 3a 6e 75 6c 6c 2c 22 63 73 73 22 3a 6e 75 6c 6c 2c 22 61 73 73 65 74 73 22 3a 6e 75 6c 6c 2c 22 66 69 65 6c 64 73 22 3a 6e 75 6c 6c 2c 22 74 61 72 67 65 74 69 6e 67 49 6e 66 6f 22 3a 6e 75 6c 6c 2c 22 63 61 6d 70 61 69 67 6e 4e 61 6d 65 22 3a 22 4d 41 47 2d 77 65 62 5f 61 6c 6c 5f 6e 6f 6e 2d 6d 6f 62 69 6c 65 2d 61 6c 6c 5f 77 65 6c 63 6f 6d 65 2d 6b 69 6c 6c 73 65 74 22 7d 7d 0a Data Ascii: e,"html":"","js":null,"css":null,"assets":null,"fields":null,"targetingInfo":null,"campaignName":"MAG-web_all_non-mobile-all_welcome-killset"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50093	3.162.114.30	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	1012	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:46 UTC	612	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 4d 54 46 39 4b 46 42 41 4b 58 50 46 42 4b 53 58 39 46 4e 34 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 116Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:13:46 GMTx-amz-rid: MTF9KFBAKXPFBKSX9FN4Access-Control-Allow-Origin: https://www.nytimes.comAccess-Contro
2023-12-05 18:13:46 UTC	116	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 70 6d 2d 64 62 35 5f 72 62 64 5f 6e 2d 4d 65 64 69 61 4e 65 74 22 2c 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=pm-db5_rbd_n-MediaNet","cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50091	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	1419	OUT	GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:45 UTC	2215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50090	142.251.111.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	1448	OUT	GET /td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:45 UTC	646	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:13:45 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2023-12-05 18:13:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50089	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	1437	OUT	GET /activityi;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:45 UTC	1318	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50092	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:45 UTC	811	OUT	GET /track/pxl/?adv=bomn82o&ct=0:s2f54xh&fmt=3&ttl=43200&gtmcb=466688651 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRgBIAEoAjILCJbQ3fuT8ro8EAU4AVoHc3Z4OXQ1MGAC
2023-12-05 18:13:45 UTC	742	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 26 6e 65 78 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:45 GMTContent-Length: 0Connection: closeserver: Kestrellocation: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&gdpr_consent=&expires=30&nex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50098	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	641	OUT	GET /ecm3?ex=media.net&id=3448016130184375000V10 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:46 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 42 51 41 41 37 59 30 59 37 4a 57 53 37 4d 36 4d 36 42 57 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:46 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: BQAA7Y0Y7JWS7M6M6BWTCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50099	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	2112	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 958 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:46 UTC	958	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 30 49 32 76 66 32 74 61 58 50 70 51 57 77 53 53 6b 43 71 49 37 41 4c 6f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 69 58 4a 36 46 78 74 46 72 42 65 30 34 4f 41 52 47 6a 6b 73 6b 4d 49 71 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6c 4f 76 4b 54 41 71 58 69 5f 6f 67 52 47 2d 78 6b 7a 6b 50 55 72 52 46 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 5f 75 70 64 61 74 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 31 38 33 33 38 2c 22 64 61 74 61 22 3a 7b 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 3a 7b 22 61 70 Data Ascii: [{"context_id":"0I2vf2taXPpQWwSSkCqI7ALo","pageview_id":"iXJ6FxtFrBe04OARGjkskMIq","event_id":"lOvKTAqXi_ogRG-xkzkPUrRF","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"page_update","how":"beacon","client_ts":1701800018338,"data":{"performance":{"ap
2023-12-05 18:13:46 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:46 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50110	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1372	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.26&x=0&m=0&y=1210&o=1263&w=907&j=30&R=1&W=0&I=0&E=6&e=5&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=3&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:46 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:46 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50095	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gksXOnsw8XCS2Ux&MD=UvcwRhXS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-05 18:13:46 UTC	560	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 30 30 30 31 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 4d 78 31 52 6f 4a 48 2f 71 45 77 70 57 66 4b 6c 6c 78 37 73 62 73 6c 32 38 41 75 45 52 7a 35 49 59 64 63 73 76 74 54 4a 63 67 4d 3d 5f 32 31 36 30 22 0d 0a 4d 53 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 62 37 34 62 38 37 31 32 2d 37 37 31 37 2d 34 39 36 36 2d Data Ascii: HTTP/1.1 200 OKCache-Control: no-cachePragma: no-cacheContent-Type: application/octet-streamExpires: -1Last-Modified: Mon, 01 Jan 0001 00:00:00 GMTETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160"MS-CorrelationId: b74b8712-7717-4966-
2023-12-05 18:13:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2023-12-05 18:13:46 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50111	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1820	OUT	GET /svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&caller_id=nyt-vi&jkcb=1701800021284&referrer=&sourceApp=nyt-vi HTTP/1.1 Host: a.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=3
2023-12-05 18:13:46 UTC	867	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 6a 6b 69 64 64 3d 75 69 64 3d 30 26 6c 61 73 74 52 65 71 75 65 73 74 3d 31 37 30 31 38 30 30 30 32 36 36 39 35 26 61 63 74 69 76 65 44 61 79 73 3d 25 35 42 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 31 25 35 44 26 61 64 Data Ascii: HTTP/1.1 200 OKcontent-type: application/json; charset=UTF-8set-cookie: nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&ad
2023-12-05 18:13:46 UTC	556	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 32 36 36 39 35 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800026695,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownTyp
2023-12-05 18:13:46 UTC	509	IN	Data Raw: 72 22 3a 66 61 6c 73 65 2c 22 67 69 66 74 47 69 76 65 72 22 3a 66 61 6c 73 65 2c 22 64 69 67 69 47 72 61 63 65 22 3a 66 61 6c 73 65 2c 22 67 61 74 65 77 61 79 48 69 74 4c 4d 22 3a 66 61 6c 73 65 2c 22 63 6f 6f 6b 69 6e 67 47 72 61 63 65 22 3a 66 61 6c 73 65 2c 22 63 72 6f 73 73 77 6f 72 64 73 47 72 61 63 65 22 3a 66 61 6c 73 65 2c 22 76 65 72 69 7a 6f 6e 53 63 68 6f 6f 6c 22 3a 66 61 6c 73 65 2c 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 61 64 76 5f 73 63 6f 72 65 73 22 3a 7b 22 61 75 64 69 65 6e 63 65 5f 73 70 6c 69 74 5f 69 64 73 22 3a 5b 5d 2c 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 6d 61 72 6b 65 74 69 6e 67 22 3a 7b 22 61 75 64 69 65 6e 63 65 5f 69 64 73 22 3a 5b 5d 2c 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 7d 2c 22 76 65 72 73 69 6f 6e 22 3a Data Ascii: r":false,"giftGiver":false,"digiGrace":false,"gatewayHitLM":false,"cookingGrace":false,"crosswordsGrace":false,"verizonSchool":false,"modified":0},"adv_scores":{"audience_split_ids":[],"modified":0},"marketing":{"audience_ids":[],"modified":0}},"version":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50106	50.17.66.232	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	803	OUT	GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=&bidder_uuid=ZW9oTXuTmmdZfZr30kZulQAA%26574&_li_chk=true&gpp_sid=&us_privacy=&gpdr=&previous_uuid=30d734a50f7e4e05b715ac1826c2c216 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
2023-12-05 18:13:46 UTC	633	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 64 69 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 64 69 73 2f 75 73 65 72 73 79 6e 63 2e 61 73 70 78 3f 72 3d 37 37 26 70 3d 33 31 31 26 63 70 3d 6c 69 76 65 69 6e 74 65 6e 74 26 63 75 3d 31 26 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 32 38 32 39 32 3f 62 69 64 64 65 72 5f 69 64 25 33 44 37 31 33 34 30 25 32 36 62 69 64 64 65 72 5f 75 75 69 64 25 33 44 40 40 43 52 49 54 45 4f 5f Data Ascii: HTTP/1.1 303 See OtherDate: Tue, 05 Dec 2023 18:13:46 GMTContent-Length: 0Connection: closeLocation: https://dis.criteo.com/dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50102	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	2113	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 8296 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:46 UTC	8296	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 71 63 41 56 47 59 56 4a 77 50 35 42 4c 42 5f 39 43 4e 79 57 55 41 36 6f 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 33 36 37 38 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"qcAVGYVJwP5BLB_9CNyWUA6o","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800023678,"data":{"event":"impression
2023-12-05 18:13:46 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:46 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50096	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1471	OUT	GET /activityi;dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:47 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:13:47 UTC	589	IN	Data Raw: 33 32 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 2d 6c 6c 35 44 7a 2d 49 49 44 46 53 Data Ascii: 32b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CL-ll5Dz-IIDFS
2023-12-05 18:13:47 UTC	229	IN	Data Raw: 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 6d 69 64 64 6c 65 65 61 73 74 25 32 46 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: %253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html"/></body></html>
2023-12-05 18:13:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50103	35.244.154.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	696	OUT	GET /1000.gif?memo=CKO3KxoNCNjQvasGEgUI6AcQAEIASgA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=0yMn+PTOKhUuQId8uD+jMWAjhM0pu75h5qJ/uGohuII=; pxrc=CAA=
2023-12-05 18:13:46 UTC	674	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 75 6d 3f 73 6f 75 72 63 65 69 64 3d 33 26 75 69 64 3d 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 50 53 41 61 20 50 53 44 61 20 4f 55 52 20 42 55 53 20 43 4f 4d 20 49 4e 54 20 4f 54 43 20 50 55 52 20 53 54 41 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 6c 61 73 33 3d 4f 4b 51 61 36 49 39 42 31 6e 41 75 51 49 64 38 75 44 2b 6a 4d 57 41 6a 68 Data Ascii: HTTP/1.1 307 Temporary RedirectCache-Control: no-cache, no-storeLocation: https://dsum-sec.casalemedia.com/ium?sourceid=3&uid=P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"Set-Cookie: rlas3=OKQa6I9B1nAuQId8uD+jMWAjh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50116	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1553	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:46 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:46 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50122	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	816	OUT	GET /w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy
2023-12-05 18:13:47 UTC	568	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 6e 69 76 5f 69 64 3d 35 33 37 30 37 32 39 37 31 7c 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 7c 31 37 30 31 38 30 30 30 32 36 39 34 38 34 31 39 3b 20 56 65 72 73 69 6f 6e 3d 31 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 44 65 63 2d 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 31 32 39 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 44 6f 6d 61 69 6e 3d 2e 6f 70 65 6e 78 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 Data Ascii: HTTP/1.1 200 OKVary: AcceptSet-Cookie: univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419; Version=1; Expires=Wed, 20-Dec-2023 18:13:46 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=NoneServer: OXGW/0.0.0Pr
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50101	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	2112	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 875 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:46 UTC	875	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 68 2d 34 51 43 33 67 70 79 78 67 41 4b 53 5a 4d 57 63 59 4c 7a 32 70 69 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 61 62 5f 65 78 70 6f 73 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 34 39 30 35 2c 22 64 61 74 61 22 3a 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 43 4b 5f 53 61 6c 65 5f Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"h-4QC3gpyxgAKSZMWcYLz2pi","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"ab_expose","how":"beacon","client_ts":1701800024905,"data":{"test":"MKT_CK_Sale_
2023-12-05 18:13:47 UTC	978	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:47 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50105	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1532	OUT	GET /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:46 UTC	477	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 6e 6f 2d 63 61 63 68 65 2c 6e 6f 2d 73 74 6f 72 65 0d 0a 58 2d 43 61 63 68 65 3a 20 45 72 72 6f 72 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 64 30 66 31 39 35 36 32 34 65 Data Ascii: HTTP/1.1 405 Method Not AllowedContent-Type: text/html;charset=iso-8859-1Content-Length: 319Connection: closeDate: Tue, 05 Dec 2023 18:13:46 GMTCache-Control: must-revalidate,no-cache,no-storeX-Cache: Error from cloudfrontVia: 1.1 d0f195624e
2023-12-05 18:13:46 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50120	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	728	OUT	GET /crum?cm_dsp_id=196&external_user_id=4541600553641608635&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:46 UTC	981	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 64 38 30 61 39 38 33 62 33 65 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:46 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43d80a983b3e-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50115	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	720	OUT	GET /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:46 UTC	1019	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 32 39 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 64 38 30 61 39 63 33 62 33 35 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:46 GMTContent-Length: 0Connection: closeLocation: https://c1.adform.net/serving/cookie/match?party=29CF-Ray: 830e43d80a9c3b35-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50121	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	765	OUT	GET /rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392024&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:47 UTC	987	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 64 38 35 65 34 65 30 38 31 37 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:46 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43d85e4e0817-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50117	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1544	OUT	GET /v1/purr-cache HTTP/1.1 Host: purr.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 75 72 72 2d 63 61 63 68 65 3d 3c 4b 30 3c 72 3c 43 5f 3c 47 5f 3c 53 30 3c 61 30 3c 75 61 3c 54 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 34 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 35 33 3a 34 37 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 32 65 62 35 31 33 64 36 66 39 64 35 35 36 65 62 37 30 61 37 32 39 62 39 33 65 35 32 63 36 30 38 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 Data Ascii: HTTP/1.1 200 OKset-cookie: purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; Path=/; Domain=nytimes.com; Expires=Sat, 04 Jan 2025 05:53:47 GMT; HttpOnly; Secure; SameSite=Laxvary: Originx-cloud-trace-context: 2eb513d6f9d556eb70a729b93e52c608date: Tue, 05 Dec 20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50124	104.36.115.113	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	794	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69976975&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SyncRTB3=1702944000%3A220; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; pi=163427:3; chkChromeAb67Sec=2
2023-12-05 18:13:47 UTC	886	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 41 44 55 53 45 52 43 4f 4f 4b 49 45 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 3b 20 64 6f 6d 61 69 6e 3d 70 75 Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=UTF-8P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; domain=pu
2023-12-05 18:13:47 UTC	1731	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 51 4e 50 46 73 63 6c 45 54 39 57 78 76 67 6f 78 50 4b 30 6a 4d 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 5f 64 65 76 69 Data Ascii: PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=QNPFsclET9WxvgoxPK0jMw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_devi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50113	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	704	OUT	GET /w/1.0/pd HTTP/1.1 Host: nytimes-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy
2023-12-05 18:13:47 UTC	383	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKVary: Accept, Accept-EncodingServer: OXGW/0.0.0Pragma: no-cacheP3P: CP="CUR ADM OUR NOR STA NID"Expires: Mon, 26 Jul 1997 05:00:00 GMTDate: Tue, 05 Dec 2023 18:13:46 GMTContent-Type: image/gifContent-Length: 43Cache-Contro
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50119	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	714	OUT	GET /rum?cm_dsp_id=123&external_user_id=ouSZFtWWWhZ1z51Vjhge9WalMFM HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:47 UTC	981	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 64 38 62 62 35 33 30 38 33 63 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43d8bb53083c-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50104	70.42.32.191	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	686	OUT	GET /usersync/index/?gdpr=&gdpr_consent=&gpp=&gpp_sid=&s=2&us_privacy= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=0ve4IDJUsd2OZC0HsNGu
2023-12-05 18:13:47 UTC	537	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 44 65 63 20 31 39 39 34 20 31 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 37 26 65 78 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Content-Length: 115Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 01 Dec 1994 16:00:00 GMTLocation: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&ex
2023-12-05 18:13:47 UTC	115	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 37 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 30 76 65 34 49 44 4a 55 73 64 32 4f 5a 43 30 48 73 4e 47 75 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=0ve4IDJUsd2OZC0HsNGu">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50128	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1901	OUT	GET /vi-assets/static-assets/15-562803a2e86b5b821208.js?_sw-precache=26c660da501ed7aefa73267c1f5c785b HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _dd_s=rum=0&expire=1701800919156; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
2023-12-05 18:13:47 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 35 39 34 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 59 64 51 62 53 63 4b 37 69 6d 47 62 47 70 31 4a 77 6c 6c 79 77 37 4d 69 33 6f 2d 5a 74 69 58 70 46 4a 52 70 4e 62 6e 62 64 76 72 79 48 55 74 76 5f 4b 45 79 5f 65 57 54 4b 7a 42 47 5a 48 55 46 48 71 34 32 36 4a 35 74 59 54 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 39 3a 35 38 3a 34 33 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 25947X-GUploader-UploadID: ABPtcPqYdQbScK7imGbGp1Jwllyw7Mi3o-ZtiXpFJRpNbnbdvryHUtv_KEy_eWTKzBGZHUFHq426J5tYTQCache-Control: public,max-age=31536000Expires: Tue, 03 Dec 2024 19:58:43 GMTLast-Modif
2023-12-05 18:13:47 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 5d 2c 7b 22 2b 33 4d 34 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 72 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 2c 74 2e 64 28 72 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 74 2e 64 28 72 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 74 2e 64 28 72 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 29 2c 74 2e 64 28 72 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{"+3M4":function(e,r,t){"use strict";t.d(r,"f",(function(){return s})),t.d(r,"g",(function(){return f})),t.d(r,"a",(function(){return p})),t.d(r,"e",(function(){return b})),t.d(r,"d",(function(){ret
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 2c 22 62 75 74 74 6f 6e 4d 69 73 73 69 6e 67 50 61 70 65 72 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 29 29 2c 74 2e 64 28 72 2c 22 62 75 74 74 6f 6e 4d 69 73 73 69 6e 67 52 65 64 65 6c 69 76 65 72 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 74 2e 64 28 72 2c 22 62 75 74 74 6f 6e 4d 69 73 73 69 6e 67 53 65 63 74 69 6f 6e 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 29 29 2c 74 2e 64 28 72 2c 22 62 75 74 74 6f 6e 4f 74 68 65 72 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 29 29 2c 74 2e 64 28 72 2c 22 62 75 74 74 6f 6e 4f 74 68 65 72 50 72 6f 62 6c 65 6d 48 44 53 75 62 22 2c 28 66 75 6e Data Ascii: ,"buttonMissingPaperHDSub",(function(){return v})),t.d(r,"buttonMissingRedeliveryHDSub",(function(){return S})),t.d(r,"buttonMissingSectionHDSub",(function(){return D})),t.d(r,"buttonOtherHDSub",(function(){return g})),t.d(r,"buttonOtherProblemHDSub",(fun
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 2e 64 28 72 2c 22 63 6f 70 79 53 63 68 65 64 75 6c 65 64 52 65 64 65 6c 69 76 65 72 79 54 6f 64 61 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 29 2c 74 2e 64 28 72 2c 22 63 6f 70 79 53 63 68 65 64 75 6c 65 64 52 65 64 65 6c 69 76 65 72 79 54 6f 6d 6f 72 72 6f 77 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 59 7d 29 29 2c 74 2e 64 28 72 2c 22 63 6f 70 79 57 68 65 6e 54 61 6b 65 50 6c 61 63 65 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 2c 74 2e 64 28 72 2c 22 63 6f 70 79 4e 6f 53 74 61 72 74 50 72 6f 63 65 73 73 65 64 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 7d 29 29 2c 74 2e 64 28 72 2c 22 63 Data Ascii: .d(r,"copyScheduledRedeliveryTodayHDSub",(function(){return G})),t.d(r,"copyScheduledRedeliveryTomorrowHDSub",(function(){return Y})),t.d(r,"copyWhenTakePlaceHDSub",(function(){return U})),t.d(r,"copyNoStartProcessedHDSub",(function(){return B})),t.d(r,"c
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 6e 66 6f 52 65 64 65 6c 69 76 65 72 79 57 69 6e 64 6f 77 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 7d 29 29 2c 74 2e 64 28 72 2c 22 69 6e 66 6f 57 65 74 50 61 70 65 72 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 7d 29 29 2c 74 2e 64 28 72 2c 22 69 6e 66 6f 4e 6f 53 74 61 72 74 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 65 7d 29 29 2c 74 2e 64 28 72 2c 22 69 6e 66 6f 4f 74 68 65 72 53 75 73 70 65 6e 73 69 6f 6e 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 65 7d 29 29 2c 74 2e 64 28 72 2c 22 69 6e 66 6f 50 72 65 53 74 61 72 74 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: nfoRedeliveryWindowHDSub",(function(){return de})),t.d(r,"infoWetPaperHDSub",(function(){return se})),t.d(r,"infoNoStartHDSub",(function(){return fe})),t.d(r,"infoOtherSuspensionHDSub",(function(){return pe})),t.d(r,"infoPreStartHDSub",(function(){return
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 65 7d 29 29 2c 74 2e 64 28 72 2c 22 65 72 72 6f 72 41 64 74 41 72 72 69 76 65 42 79 4e 65 78 74 44 61 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 7d 29 29 2c 74 2e 64 28 72 2c 22 65 72 72 6f 72 53 75 73 70 65 6e 64 65 64 44 65 6c 69 76 65 72 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 65 7d 29 29 2c 74 2e 64 28 72 2c 22 65 72 72 6f 72 53 75 73 70 65 6e 64 65 64 44 65 6c 69 76 65 72 79 54 65 6d 70 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 65 7d 29 29 2c 74 2e 64 28 72 2c 22 65 72 72 6f 72 41 64 74 57 65 61 74 68 65 72 53 61 6d 65 44 61 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 65 7d 29 29 2c 74 Data Ascii: e})),t.d(r,"errorAdtArriveByNextDayHDSub",(function(){return _e})),t.d(r,"errorSuspendedDeliveryHDSub",(function(){return We})),t.d(r,"errorSuspendedDeliveryTempHDSub",(function(){return Fe})),t.d(r,"errorAdtWeatherSameDayHDSub",(function(){return je})),t
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 6e 67 20 73 65 63 74 69 6f 6e 22 2c 67 3d 22 4f 74 68 65 72 22 2c 68 3d 22 64 65 6c 69 76 65 72 79 20 70 72 6f 62 6c 65 6d 22 2c 45 3d 22 44 65 6c 69 76 65 72 79 20 64 75 72 69 6e 67 20 73 75 73 70 65 6e 73 69 6f 6e 22 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 66 72 6f 6d 2c 74 3d 65 2e 74 6f 2c 6e 3d 65 2e 74 69 6d 65 7a 6f 6e 65 3b 72 65 74 75 72 6e 20 61 28 29 28 22 73 70 61 6e 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 52 65 64 65 6c 69 76 65 72 20 6d 79 20 70 61 70 65 72 20 74 6f 64 61 79 20 62 65 74 77 65 65 6e 20 22 2c 72 2c 22 20 61 6e 64 20 22 2c 74 2c 6e 29 7d 3b 41 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 62 75 74 74 6f 6e 52 65 64 65 6c 69 76 65 72 54 6f 64 61 79 48 44 53 75 62 22 3b 76 61 72 20 48 3d 22 57 65 74 20 70 Data Ascii: ng section",g="Other",h="delivery problem",E="Delivery during suspension",A=function(e){var r=e.from,t=e.to,n=e.timezone;return a()("span",{},void 0,"Redeliver my paper today between ",r," and ",t,n)};A.displayName="buttonRedeliverTodayHDSub";var H="Wet p
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 61 69 6c 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 74 20 22 2c 72 2c 22 2e 22 29 7d 2c 46 3d 22 57 65 e2 80 99 76 65 20 74 61 6b 65 6e 20 6e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 68 61 73 20 68 61 70 70 65 6e 65 64 2e 5c 6e 20 20 20 20 57 65 e2 80 99 6c 6c 20 66 6f 6c 6c 6f 77 20 75 70 20 77 69 74 68 20 79 6f 75 72 20 64 65 6c 69 76 65 72 79 20 73 65 72 76 69 63 65 20 61 6e 64 20 64 6f 20 6f 75 72 20 62 65 73 74 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 74 68 69 73 20 64 6f 65 73 6e e2 80 99 74 20 68 61 70 70 65 6e 20 61 67 61 69 6e 2e 22 2c 6a 3d 22 59 6f 75 20 63 61 6e 20 72 65 70 6f 72 74 20 61 6e 79 20 64 65 6c 69 76 65 72 79 20 70 72 6f 62 6c 65 6d 73 20 66 72 6f Data Ascii: ail confirmation with this information at ",r,".")},F="Weve taken note that this has happened.\n Well follow up with your delivery service and do our best to make sure that this doesnt happen again.",j="You can report any delivery problems fro
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 65 72 65 64 20 64 75 72 69 6e 67 20 61 20 73 75 73 70 65 6e 73 69 6f 6e 2c 20 72 65 70 6f 72 74 20 69 74 20 6e 6f 77 2e 22 2c 51 3d 22 57 65 e2 80 99 76 65 20 65 73 63 61 6c 61 74 65 64 20 74 68 69 73 20 69 73 73 75 65 2e 22 2c 58 3d 22 59 6f 75 20 72 65 70 6f 72 74 65 64 20 61 6e 20 69 6e 63 6f 72 72 65 63 74 20 70 61 70 65 72 2e 22 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 73 75 73 70 65 6e 64 44 65 6c 69 76 65 72 79 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 69 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 49 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 20 73 75 73 70 65 6e 64 65 64 20 79 6f 75 72 20 64 65 6c 69 76 65 72 79 2e 20 54 6f 20 6d 61 6b 65 20 63 68 61 6e 67 Data Ascii: ered during a suspension, report it now.",Q="Weve escalated this issue.",X="You reported an incorrect paper.",$=function(e){var r=e.suspendDeliveryLink;return i.a.createElement(i.a.Fragment,null,"It looks like you suspended your delivery. To make chang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50114	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	723	OUT	GET /AdServer/ImgSync?p=163427 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SyncRTB3=1702944000%3A220; KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; pi=163427:3; chkChromeAb67Sec=2
2023-12-05 18:13:47 UTC	907	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 75 62 6d 61 74 69 63 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 26 67 64 70 72 3d 2d 31 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Location: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=-1&gdpr_consent=P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS
2023-12-05 18:13:47 UTC	135	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 75 62 6d 61 74 69 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 26 61 6d 70 3b 67 64 70 72 3d 2d 31 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=-1&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50100	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	2307	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 236 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:46 UTC	236	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 43 6c 69 65 6e 74 43 61 70 73 75 6c 65 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 69 64 22 3a 22 6e 79 74 3a 2f 2f 63 61 70 73 75 6c 65 2f 34 33 30 36 64 33 37 39 2d 66 33 65 35 2d 35 64 30 64 2d 38 30 36 33 2d 33 66 37 66 39 39 64 34 65 32 63 64 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 32 64 64 31 34 37 65 34 34 35 66 33 33 37 39 64 36 31 64 34 36 61 35 32 31 64 35 39 38 35 62 34 61 38 34 33 30 35 36 35 66 36 34 61 32 39 35 64 36 33 36 66 39 30 33 62 37 66 36 65 39 66 37 66 22 7d 7d 7d Data Ascii: {"operationName":"ClientCapsuleQuery","variables":{"id":"nyt://capsule/4306d379-f3e5-5d0d-8063-3f7f99d4e2cd"},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"2dd147e445f3379d61d46a521d5985b4a8430565f64a295d636f903b7f6e9f7f"}}}
2023-12-05 18:13:47 UTC	1377	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 32 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1120access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:13:47 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:47 UTC	1120	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 61 6e 79 57 6f 72 6b 22 3a 7b 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 63 61 70 73 75 6c 65 2f 34 33 30 36 64 33 37 39 2d 66 33 65 35 2d 35 64 30 64 2d 38 30 36 33 2d 33 66 37 66 39 39 64 34 65 32 63 64 22 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 31 30 30 30 30 30 30 30 39 31 33 31 36 31 37 22 2c 22 62 6f 64 79 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 5b 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 45 6d 61 69 6c 53 69 67 6e 75 70 42 6c 6f 63 6b 22 2c 22 70 72 6f 64 75 63 74 43 6f 64 65 22 3a 22 49 47 57 42 22 2c 22 6e 65 77 73 6c 65 74 74 65 72 53 75 6d 6d 61 72 79 22 3a 5b 7b 22 74 65 78 74 22 3a 22 54 68 65 20 6c 61 74 65 73 74 20 6e 65 77 73 20 61 62 6f 75 74 20 74 68 65 20 63 6f 6e 66 6c 69 63 74 2e 22 2c 22 5f 5f 74 79 70 65 Data Ascii: {"data":{"anyWork":{"uri":"nyt://capsule/4306d379-f3e5-5d0d-8063-3f7f99d4e2cd","sourceId":"100000009131617","body":{"content":[{"__typename":"EmailSignupBlock","productCode":"IGWB","newsletterSummary":[{"text":"The latest news about the conflict.","__type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50107	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	762	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESELezj83S7KBI3Z4Ws1BVBdw&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:47 UTC	985	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 64 38 64 62 37 35 39 63 36 34 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43d8db759c64-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50118	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	1165	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=Farnaz%20Fassihi&n=1&f=00001&c=0&x=0&m=0&y=948&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&b=7337&t=B4FYW8kZWmaBgsmf5Xj0TQBlCSN8&V=141&i=On%20the%20Ground%20in%20Wars%20and%20Disasters%2C%20the%20U.N.%20Plays%20a%20Vital%20Role&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=2&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:47 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50109	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	654	OUT	GET /sync?px=1&src=prebid& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgkIOhDm2r3ZwzE=; tluid=2618672411569676278148
2023-12-05 18:13:47 UTC	653	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 73 79 6e 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 33 63 2f 70 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Length: 0Connection: closeLocation: https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent=Cache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://cdn.3lift.com/w3c/p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50132	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:46 UTC	754	OUT	GET /w/1.0/sd?id=537072991&val=CAESECAa8WLXRHlPGPDOW4QQem0&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy
2023-12-05 18:13:47 UTC	366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKVary: AcceptServer: OXGW/0.0.0Pragma: no-cacheP3P: CP="CUR ADM OUR NOR STA NID"Expires: Mon, 26 Jul 1997 05:00:00 GMTDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Cache-Control: private, max-a
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50125	172.253.122.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 139 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:47 UTC	139	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 36 33 36 32 34 38 31 37 35 32 32 31 31 30 37 38 37 31 34 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nytimes.com","trigger_debug_key":"16362481752211078714"},"type":"trigger-no-matching-source"}]
2023-12-05 18:13:47 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50126	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	2389	OUT	GET /auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html%26EXIT_URI%3Dhttps%253A%252F%252Fwww.nytimes.com%252F2023%252F12%252F05%252Fworld%252Fmiddleeast%252Funited-nations-war-gaza-israel.html&display=regiwall_lire&asset=RegiWall&application=Free_Experience&preloaded=true HTTP/1.1 Host: myaccount.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
2023-12-05 18:13:47 UTC	1375	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 34 34 31 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 45 78 70 72 65 73 73 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 74 72 61 63 65 2d 69 64 3a 20 33 37 32 38 35 39 32 38 34 36 36 39 38 32 39 39 31 30 30 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 70 61 72 65 6e 74 2d 69 64 3a 20 37 36 30 34 34 31 33 33 33 35 33 36 33 34 36 30 38 35 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 73 61 6d 70 6c 65 64 3a 20 31 0d 0a 78 2d 64 61 74 61 64 6f 67 2d 73 61 6d 70 6c 69 6e 67 2d 70 72 69 6f 72 69 74 79 3a 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 19441content-type: text/html; charset=utf-8x-powered-by: Expressx-datadog-trace-id: 3728592846698299100x-datadog-parent-id: 760441333536346085x-datadog-sampled: 1x-datadog-sampling-priority:
2023-12-05 18:13:47 UTC	807	IN	Data Raw: 72 65 73 70 2d 64 65 74 61 69 6c 73 3a 20 5b 5b 69 74 3a 6c 75 69 5d 5d 0d 0a 65 74 61 67 3a 20 57 2f 22 34 62 66 31 2d 48 6e 61 4d 79 65 73 4a 61 65 76 78 39 43 44 61 62 6d 37 64 51 75 4d 46 56 6c 6b 22 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 31 61 36 62 30 37 65 38 35 66 36 63 34 37 39 32 38 66 37 33 39 62 63 36 31 39 62 31 62 37 38 62 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 2c 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 33 30 0d 0a 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 6c 69 72 65 2d 75 69 2e 61 75 74 68 2e 6e 79 74 69 2e 6e Data Ascii: resp-details: [[it:lui]]etag: W/"4bf1-HnaMyesJaevx9CDabm7dQuMFVlk"x-cloud-trace-context: 1a6b07e85f6c47928f739bc619b1b78bserver: envoyvia: 1.1 google, 1.1 varnishx-envoy-upstream-service-time: 30x-envoy-decorator-operation: lire-ui.auth.nyti.n
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 73 6f 75 72 63 65 41 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 79 74 2d 6c 69 72 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d Data Ascii: <!DOCTYPE html><html lang="en"><head> <title>The New York Times</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="sourceApp" content="nyt-lire" /> <meta name="viewport" content="initial-scale=1, m
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 20 20 20 20 2e 66 75 6c 6c 2d 70 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 2a 2f 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 50 72 6f 76 69 64 65 64 20 62 79 20 41 6b 61 6d 61 69 20 66 6f 72 20 69 6e 74 65 67 72 61 74 69 6f 6e 20 77 69 74 68 20 6d 50 75 Data Ascii: .full-page { display: flex; flex-flow: column nowrap; flex: 0 0 auto; height: 100%; } </style> <script> /* eslint-disable / /* * Provided by Akamai for integration with mPu
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 20 74 68 65 20 62 72 6f 77 73 65 72 20 74 6f 20 65 78 65 63 75 74 65 20 74 68 65 20 50 72 65 6c 6f 61 64 65 64 20 73 63 72 69 70 74 20 62 79 20 61 64 64 69 6e 67 20 69 74 20 74 6f 20 74 68 65 20 44 4f 4d 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 6d 6f 74 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 72 6f 6d 6f 74 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 69 64 20 3d 20 22 62 6f 6f 6d 72 2d 73 63 72 2d 61 73 22 3b Data Ascii: the browser to execute the Preloaded script by adding it to the DOM function promote() { if (promoted) { return; } var script = document.createElement("script"); script.id = "boomr-scr-as";
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 63 72 69 70 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 46 6f 72 20 49 45 20 36 2f 37 2c 20 77 65 27 6c 6c 20 6a 75 73 74 20 6c 6f 61 64 20 74 68 65 20 73 63 72 69 70 74 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 72 61 6d 65 2c 20 61 73 20 74 68 6f 73 65 20 62 72 6f 77 73 65 72 73 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 27 61 62 6f 75 74 3a 62 6c 61 6e 6b 27 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 66 6f 72 20 61 6e 20 69 66 72 61 6d 65 20 73 72 63 20 28 69 74 20 74 72 69 67 67 65 72 73 20 77 61 72 6e 69 6e 67 73 20 6f 6e 20 73 65 63 75 72 65 20 73 69 74 65 73 Data Ascii: .body; parent.appendChild(script); }; // For IE 6/7, we'll just load the script in the current frame, as those browsers don't support 'about:blank' // for an iframe src (it triggers warnings on secure sites
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 6f 63 6b 0a 20 20 20 20 20 20 20 20 20 20 70 61 72 65 6e 74 4e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 66 72 61 6d 65 29 3b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 72 79 20 74 6f 20 67 65 74 20 74 68 65 20 69 66 72 61 6d 65 27 73 20 64 6f 63 75 6d 65 6e 74 20 6f 62 6a 65 63 74 0a 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 20 3d 20 69 66 72 61 6d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 20 3d 20 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2e 6f 70 65 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 64 Data Ascii: ock parentNode.appendChild(iframe); // Try to get the iframe's document object try { win = iframe.contentWindow; doc = win.document.open(); } catch (e) { // d
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 70 6c 69 74 20 74 68 65 20 73 74 72 69 6e 67 20 73 6f 20 48 54 4d 4c 20 63 6f 64 65 20 69 6e 6a 65 63 74 6f 72 73 20 64 6f 6e 27 74 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 61 6e 64 20 61 64 64 20 63 6f 64 65 20 68 65 72 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 2e 77 72 69 74 65 28 22 3c 62 6f 22 20 2b 20 22 64 79 20 6f 6e 6c 6f 61 64 3d 27 64 6f 63 75 6d 65 6e 74 2e 5f 62 6f 6f 6d 72 6c 28 29 3b 27 3e 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 20 68 61 73 6e 27 74 20 63 68 61 6e 67 65 64 2c 20 72 65 67 75 6c 61 72 20 6d 65 74 68 6f 64 20 73 68 6f 75 6c 64 20 62 65 20 4f 4b 0a 20 20 20 Data Ascii: plit the string so HTML code injectors don't get confused and add code here. doc.write("<bo" + "dy onload='document._boomrl();'>"); } else { // document.domain hasn't changed, regular method should be OK
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 20 48 61 76 65 20 61 20 66 61 6c 6c 62 61 63 6b 20 69 6e 20 63 61 73 65 20 50 72 65 6c 6f 61 64 20 64 6f 65 73 20 6e 6f 74 68 69 6e 67 20 6f 72 20 69 73 20 73 6c 6f 77 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 70 72 6f 6d 6f 74 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 4c 6f 61 64 65 72 28 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 20 4c 4f 41 44 45 52 5f 54 49 4d 45 4f 55 54 29 3b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 74 65 20 74 68 65 20 74 69 6d 65 73 74 61 6d 70 20 77 65 20 73 74 61 72 74 65 64 20 74 Data Ascii: Have a fallback in case Preload does nothing or is slow setTimeout(function() { if (!promoted) { iframeLoader(true); } }, LOADER_TIMEOUT); // Note the timestamp we started t
2023-12-05 18:13:47 UTC	1379	IN	Data Raw: 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 0a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 38 29 29 3b 65 6c 73 65 20 66 6f 72 28 74 3d 5b 5d 3b 74 2e 6c 65 6e 67 74 68 3c 31 38 3b 29 74 2e 70 75 73 68 28 32 35 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 5e 32 35 35 26 28 65 3d 65 7c 7c 2b 6e 65 77 20 44 61 74 65 29 29 2c 0a 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2f 32 35 36 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 74 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 2d 22 29 2e 72 65 70 6c 61 63 65 28 0a 2f 5c 2f 2f 67 2c 22 5f 22 29 7d 69 66 28 73 2e 6e 79 74 5f 65 74 29 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 65 74 32 20 73 Data Ascii: getRandomValues(new Uint8Array(18));else for(t=[];t.length<18;)t.push(256*Math.random()^255&(e=e\|\|+new Date)),e=Math.floor(e/256);return btoa(String.fromCharCode.apply(String,t)).replace(/\+/g,"-").replace(/\//g,"_")}if(s.nyt_et)try{console.warn("et2 s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50130	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	1902	OUT	GET /vi-assets/static-assets/176-70e92b21a3c3b94f46fb.js?_sw-precache=0802c1b52f8dcda13df8247007b31913 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _dd_s=rum=0&expire=1701800919156; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
2023-12-05 18:13:47 UTC	1315	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 30 33 31 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 64 4a 4b 76 68 34 53 35 7a 6f 6f 64 38 75 6b 42 31 34 6c 54 59 41 41 72 54 62 44 53 32 6d 6d 2d 64 72 41 59 6c 74 72 73 53 66 43 65 6f 58 53 49 32 7a 4e 32 4a 66 38 75 6a 39 47 74 71 6e 31 36 7a 54 70 55 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 34 32 37 37 35 31 35 34 35 39 37 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 120316X-GUploader-UploadID: ABPtcPqdJKvh4S5zood8ukB14lTYAArTbDS2mm-drAYltrsSfCeoXSI2zN2Jf8uj9Gtqn16zTpUx-goog-generation: 1701742775154597x-goog-metageneration: 1x-goog-stored-content-encoding: i
2023-12-05 18:13:47 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 36 5d 2c 7b 22 30 5a 6b 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 2c 74 2e 64 28 6e 2c 22 62 75 74 74 6f 6e 43 61 6e 63 65 6c 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 74 2e 64 28 6e 2c 22 62 75 74 74 6f 6e 43 6f 6e 74 69 6e 75 65 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 74 2e 64 28 6e 2c 22 62 75 74 74 6f 6e 52 65 70 6f 72 74 43 6f 6e 74 69 6e 75 65 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[176],{"0ZkC":function(e,n,t){"use strict";t.r(n),t.d(n,"buttonCancelHDSub",(function(){return d})),t.d(n,"buttonContinueHDSub",(function(){return l})),t.d(n,"buttonReportContinueHDSub",(function(){retur
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 29 29 2c 74 2e 64 28 6e 2c 22 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 2c 74 2e 64 28 6e 2c 22 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 74 2e 64 28 6e 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 29 29 2c 74 2e 64 28 6e 2c 22 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 74 2e 64 28 6e 2c 22 44 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 74 2e 64 28 6e 2c 22 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 29 2c 74 2e 64 28 6e 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: unction(){return H})),t.d(n,"o",(function(){return P})),t.d(n,"m",(function(){return k})),t.d(n,"g",(function(){return A})),t.d(n,"h",(function(){return T})),t.d(n,"D",(function(){return E})),t.d(n,"l",(function(){return I})),t.d(n,"f",(function(){return
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 69 6e 67 20 79 6f 75 72 20 73 75 73 70 65 6e 73 69 6f 6e 2e 20 54 68 69 73 20 77 69 6c 6c 20 62 65 5c 6e 20 20 20 20 64 65 64 75 63 74 65 64 20 66 72 6f 6d 20 74 68 65 20 63 72 65 64 69 74 20 79 6f 75 20 72 65 63 65 69 76 65 20 66 6f 72 20 79 6f 75 72 20 75 6e 64 65 6c 69 76 65 72 65 64 20 6e 65 77 73 70 61 70 65 72 73 2e 20 59 6f 75 e2 80 99 6c 6c 5c 6e 20 20 20 20 72 65 63 65 69 76 65 20 61 20 70 61 72 74 69 61 6c 20 63 72 65 64 69 74 20 6f 6e 20 79 6f 75 72 20 6e 65 78 74 20 62 69 6c 6c 20 61 66 74 65 72 20 79 6f 75 72 20 64 65 6c 69 76 65 72 79 20 68 61 73 20 72 65 73 74 61 72 74 65 64 2e 5c 6e 20 20 20 20 53 61 6c 65 73 20 74 61 78 20 6d 61 79 20 61 70 70 6c 79 2e 22 2c 70 3d 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 75 6e 6c 69 6d 69 74 65 64 Data Ascii: ing your suspension. This will be\n deducted from the credit you receive for your undelivered newspapers. Youll\n receive a partial credit on your next bill after your delivery has restarted.\n Sales tax may apply.",p="Would you like unlimited
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 70 61 73 73 77 6f 72 64 20 63 61 6e 20 6f 6e 6c 79 20 63 6f 6e 74 61 69 6e 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d 62 65 72 73 2c 20 68 79 70 68 65 6e 73 2c 20 70 65 72 69 6f 64 73 20 61 6e 64 20 75 6e 64 65 72 73 63 6f 72 65 73 2e 22 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 63 63 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 69 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 27 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 27 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 73 6f 6f 6e 2c 20 6f 72 22 2c 22 20 22 2c 6e 2c 22 20 66 6f 72 20 69 6d 6d 65 64 Data Ascii: password can only contain letters, numbers, hyphens, periods and underscores.",S=function(e){var n=e.ccLink;return i.a.createElement(i.a.Fragment,null,"We're sorry, but we're having a technical issue right now. Please try again soon, or"," ",n," for immed
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 45 7d 29 29 2c 74 2e 64 28 6e 2c 22 74 65 78 74 49 6e 70 75 74 45 6d 61 69 6c 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 46 6f 72 6d 61 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 29 2c 74 2e 64 28 6e 2c 22 74 65 78 74 49 6e 70 75 74 56 61 6c 69 64 45 6d 61 69 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 29 2c 74 2e 64 28 6e 2c 22 62 61 6e 6e 65 72 4d 65 73 73 61 67 65 52 65 76 6f 6b 65 46 61 69 6c 75 72 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 29 29 3b 76 61 72 20 72 3d 74 28 22 71 31 74 49 22 29 2c 69 3d 74 2e 6e 28 72 29 2c 6f 3d 22 42 6f 6e 75 73 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: E})),t.d(n,"textInputEmailValidationErrorFormat",(function(){return I})),t.d(n,"textInputValidEmail",(function(){return N})),t.d(n,"bannerMessageRevokeFailure",(function(){return R}));var r=t("q1tI"),i=t.n(r),o="Bonus subscriptions not found.",u=function(
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6e 29 7d 2c 4a 3d 22 56 69 65 77 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 22 2c 4b 3d 22 4d 61 6e 61 67 65 20 64 65 6c 69 76 65 72 79 22 2c 51 3d 22 52 65 70 6f 72 74 20 61 6e 20 69 73 73 75 65 22 2c 56 3d 22 53 75 73 70 65 6e 64 20 64 65 6c 69 76 65 72 79 22 2c 58 3d 22 4d 61 6e 61 67 65 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 5a 3d 22 43 68 61 6e 67 65 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 24 3d 22 45 78 70 6c 6f 72 65 20 6f 74 68 65 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 65 65 3d 22 55 6e 6c 69 6d 69 74 65 64 20 61 63 63 65 73 73 20 74 6f 20 72 65 73 65 61 72 63 68 2c 20 72 65 76 69 65 77 73 20 61 6e 64 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 Data Ascii: escription;return"".concat(n)},J="View more details",K="Manage delivery",Q="Report an issue",V="Suspend delivery",X="Manage subscription",Z="Change subscription",$="Explore other subscriptions",ee="Unlimited access to research, reviews and recommendations
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 61 6c 50 61 75 73 65 45 6e 74 72 79 50 6f 69 6e 74 44 65 74 61 69 6c 73 43 6f 70 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 29 29 2c 74 2e 64 28 6e 2c 22 63 61 6e 63 65 6c 45 6e 74 72 79 50 6f 69 6e 74 54 69 74 6c 65 43 6f 70 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 74 2e 64 28 6e 2c 22 63 68 61 6e 67 65 48 64 50 72 6f 64 75 63 74 45 6e 74 72 79 50 6f 69 6e 74 54 69 74 6c 65 43 6f 70 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 74 2e 64 28 6e 2c 22 73 75 73 70 65 6e 64 44 65 6c 69 76 65 72 79 45 6e 74 72 79 50 6f 69 6e 74 54 69 74 6c 65 43 6f 70 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 29 29 2c 74 2e 64 28 6e 2c 22 73 75 Data Ascii: alPauseEntryPointDetailsCopy",(function(){return D})),t.d(n,"cancelEntryPointTitleCopy",(function(){return w})),t.d(n,"changeHdProductEntryPointTitleCopy",(function(){return C})),t.d(n,"suspendDeliveryEntryPointTitleCopy",(function(){return H})),t.d(n,"su
2023-12-05 18:13:47 UTC	5628	IN	Data Raw: 3d 65 2e 63 63 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 69 28 29 28 22 73 70 61 6e 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 44 75 65 20 74 6f 20 61 20 70 72 65 76 69 6f 75 73 6c 79 20 73 63 68 65 64 75 6c 65 64 20 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 2c 20 77 65 20 61 72 65 20 75 6e 61 62 6c 65 20 74 6f 20 6d 61 6b 65 20 63 68 61 6e 67 65 73 20 74 6f 20 79 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 6f 6e 6c 69 6e 65 2e 20 50 6c 65 61 73 65 20 22 2c 6e 2c 22 20 69 66 20 79 6f 75 27 64 20 6c 69 6b 65 20 74 6f 20 72 65 73 74 61 72 74 20 79 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 22 29 7d 3b 78 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 70 65 6e 64 69 6e 67 43 61 6e 63 65 6c 43 6f 70 79 48 44 53 75 62 22 3b 76 61 72 20 4d 3d 22 53 6f 6d 65 74 68 69 Data Ascii: =e.ccLink;return i()("span",{},void 0,"Due to a previously scheduled cancellation, we are unable to make changes to your subscription online. Please ",n," if you'd like to restart your subscription.")};x.displayName="pendingCancelCopyHDSub";var M="Somethi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50134	74.119.119.150	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	763	OUT	GET /dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=b9a04974-b683-41e4-9726-527f7252b018
2023-12-05 18:13:47 UTC	519	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 36 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 65 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 32 38 32 39 32 3f 62 69 64 64 65 72 5f 69 64 3d 37 31 33 34 30 26 62 69 64 64 65 72 5f 75 75 69 64 3d 6b 2d 4f 44 58 2d 75 46 37 57 6c 53 68 76 6b 6a 67 72 39 51 4f 50 4a 64 72 70 79 35 43 68 35 Data Ascii: HTTP/1.1 302 Foundcontent-length: 0date: Tue, 05 Dec 2023 18:13:46 GMTserver: Kestrelcache-control: no-cacheexpires: Tue, 05 Dec 2023 00:00:00 GMTlocation: https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50129	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	1902	OUT	GET /vi-assets/static-assets/177-dab6c51dede0a1b643e0.js?_sw-precache=1a5e5be10bcf732498e2bc288a2cb0e8 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _dd_s=rum=0&expire=1701800919156; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2
2023-12-05 18:13:47 UTC	1322	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 33 39 38 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 75 36 73 76 65 37 41 6c 58 65 58 75 45 72 68 68 70 5f 35 45 45 61 38 53 6e 42 42 6f 6f 75 37 7a 73 52 68 39 33 50 73 38 4f 48 51 38 4a 45 48 6c 52 73 2d 64 4b 4d 70 4e 72 32 6e 78 49 75 6f 72 53 62 77 77 65 6a 4a 4b 31 51 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 37 35 39 32 31 38 30 39 37 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 143980X-GUploader-UploadID: ABPtcPou6sve7AlXeXuErhhp_5EEa8SnBBoou7zsRh93Ps8OHQ8JEHlRs-dKMpNr2nxIuorSbwwejJK1Qwx-goog-generation: 1701718759218097x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:47 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 37 5d 2c 7b 22 2b 65 36 46 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 65 29 3b 76 61 72 20 69 2c 61 2c 72 2c 6f 3d 6e 28 22 67 63 52 2f 22 29 2c 63 3d 6e 2e 6e 28 6f 29 2c 73 3d 6e 28 22 71 31 74 49 22 29 2c 75 3d 6e 2e 6e 28 73 29 2c 64 3d 6e 28 22 4d 53 68 47 22 29 2c 6c 3d 6e 28 22 4b 65 37 53 22 29 2c 70 3d 6e 28 22 34 2b 61 30 22 29 2c 62 3d 6e 28 22 4a 34 7a 70 22 29 2c 6d 3d 6e 2e 6e 28 62 29 2c 66 3d 6e 28 22 2f 45 66 6c 22 29 2c 79 3d 6e 28 22 66 75 31 30 22 29 2c 76 3d 28 6e 28 22 57 38 4d 4a 22 29 2c 6e 28 22 6c 77 73 45 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[177],{"+e6F":function(t,e,n){"use strict";n.r(e);var i,a,r,o=n("gcR/"),c=n.n(o),s=n("q1tI"),u=n.n(s),d=n("MShG"),l=n("Ke7S"),p=n("4+a0"),b=n("J4zp"),m=n.n(b),f=n("/Efl"),y=n("fu10"),v=(n("W8MJ"),n("lwsE
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 6e 22 2c 65 29 2c 50 2e 74 6f 28 22 2f 73 68 61 72 65 2d 74 68 65 2d 74 69 6d 65 73 22 29 7d 7d 2c 48 3d 7b 69 64 3a 22 67 72 6f 75 70 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 68 65 61 64 65 72 3a 67 74 2e 6c 69 73 74 54 69 74 6c 65 47 72 6f 75 70 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 74 2e 6c 69 73 74 42 75 74 74 6f 6e 47 72 6f 75 70 2c 62 75 74 74 6f 6e 56 61 72 69 61 6e 74 3a 64 2e 4c 2e 66 69 6c 6c 65 64 2c 74 61 72 67 65 74 55 72 6c 3a 22 22 2e 63 6f 6e 63 61 74 28 70 2e 61 2e 4d 59 41 43 43 4f 55 4e 54 5f 42 41 53 45 5f 55 52 4c 2c 22 2f 67 72 6f 75 70 2d 6d 61 6e 61 67 65 72 22 29 2c 74 61 72 67 65 74 54 61 62 3a 64 2e 64 62 2e 6e 65 77 54 61 62 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 67 74 2e 6c 69 73 74 44 65 73 63 72 69 70 74 69 6f 6e 47 Data Ascii: n",e),P.to("/share-the-times")}},H={id:"group-subscriptions",header:gt.listTitleGroup,buttonText:gt.listButtonGroup,buttonVariant:d.L.filled,targetUrl:"".concat(p.a.MYACCOUNT_BASE_URL,"/group-manager"),targetTab:d.db.newTab,description:gt.listDescriptionG
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 63 28 29 28 58 65 2c 7b 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 74 6e 2c 7b 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 64 2e 47 2c 7b 69 64 3a 22 63 72 65 61 74 65 2d 70 61 73 73 77 6f 72 64 2d 6d 6f 64 61 6c 2d 6c 61 62 65 6c 2d 69 64 22 2c 6c 65 76 65 6c 3a 22 31 22 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 64 2e 4e 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 66 2e 61 2c 7b 63 6f 70 79 3a 7a 65 2e 63 72 65 61 74 65 50 61 73 73 77 6f 72 64 4d 6f 64 61 6c 48 65 61 64 65 72 2c 70 61 72 61 6d 73 3a 7b 73 73 6f 50 72 6f 76 69 64 65 72 4e 61 6d 65 3a 79 2e 65 5b 65 5d 7d 7d 29 29 2c 63 28 29 28 64 2e 6b 2c 7b 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 28 4b 65 2e 63 29 Data Ascii: );return c()(Xe,{},void 0,c()(tn,{},void 0,c()(d.G,{id:"create-password-modal-label-id",level:"1",colorVariant:d.N.text.primary},void 0,c()(f.a,{copy:ze.createPasswordModalHeader,params:{ssoProviderName:y.e[e]}})),c()(d.k,{onClick:function(t){Object(Ke.c)
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 3a 68 65 61 64 65 72 22 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 6d 69 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 44 61 74 65 22 29 2c 63 28 29 28 6d 69 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 53 75 62 73 63 72 69 70 74 69 6f 6e 22 29 2c 63 28 29 28 66 69 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 53 65 72 76 69 63 65 20 50 65 72 69 6f 64 22 29 2c 63 28 29 28 6d 69 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 41 6d 6f 75 6e 74 22 29 2c 63 28 29 28 6d 69 2c 7b 7d 29 29 29 7d 3b 77 69 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 72 65 6e 64 65 72 74 61 62 6c 65 48 65 61 64 65 72 22 3b 76 61 72 20 6a 69 2c 45 69 2c 4e 69 2c 50 69 2c 41 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 62 69 6c 6c 69 6e 67 54 72 61 6e 73 61 63 74 69 6f 6e 73 2c 6e 3d 4f 62 6a 65 63 74 28 73 Data Ascii: :header"},void 0,c()(mi,{},void 0,"Date"),c()(mi,{},void 0,"Subscription"),c()(fi,{},void 0,"Service Period"),c()(mi,{},void 0,"Amount"),c()(mi,{})))};wi.displayName="rendertableHeader";var ji,Ei,Ni,Pi,Ai=function(t){var e=t.billingTransactions,n=Object(s
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 6e 53 74 61 72 74 44 61 74 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 45 6e 64 44 61 74 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 75 73 5c 6e 20 20 20 20 20 20 67 69 66 74 50 75 72 63 68 61 73 65 72 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 42 69 6c 6c 69 6e 67 53 6f 75 72 63 65 5c 6e 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 20 20 6e 65 78 74 50 61 79 6d 65 6e 74 44 61 74 65 5c 6e 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 53 65 72 76 69 63 65 50 65 72 69 6f 64 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 66 72 6f 6d 5c 6e 20 20 20 20 20 20 20 20 20 20 74 6f 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 Data Ascii: nStartDate\n subscriptionEndDate\n subscriptionStatus\n giftPurchaserName\n subscriptionBillingSource\n billingInformation {\n nextPaymentDate\n currentServicePeriod {\n from\n to\n }\n
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 44 2e 64 69 73 70 6c 61 79 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 63 28 29 28 66 2e 61 2c 7b 63 6f 70 79 3a 4a 61 2e 6d 65 73 73 61 67 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 52 65 61 63 74 69 76 61 74 65 64 2c 70 61 72 61 6d 73 3a 7b 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 3a 61 2c 65 6d 61 69 6c 41 64 64 72 65 73 73 3a 74 7d 7d 29 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 72 65 61 63 74 69 76 61 74 65 64 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 2c 73 74 61 72 74 49 63 6f 6e 4e 61 6d 65 3a 22 73 75 63 63 65 73 73 22 2c 73 74 61 72 74 49 63 6f 6e 43 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 64 2e 4e 2e 69 63 6f 6e 2e 70 6f 73 69 74 69 76 65 7d 29 2c 4f 2e 72 65 73 65 74 53 74 6f 72 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: D.displayNotification(c()(f.a,{copy:Ja.messageConfirmationReactivated,params:{subscriptionName:a,emailAddress:t}}),{dataTestId:"reactivated-confirmation",startIconName:"success",startIconColorVariant:d.N.icon.positive}),O.resetStore().then((function(){ret
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 2e 77 69 72 65 63 75 74 74 65 72 53 75 62 42 65 6e 65 66 69 74 48 65 61 64 6c 69 6e 65 43 6f 70 79 2c 62 65 6e 65 66 69 74 73 46 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 6f 28 61 6f 29 7d 7d 2c 41 54 48 4c 45 54 49 43 3a 7b 69 64 3a 22 54 68 65 20 41 74 68 6c 65 74 69 63 22 2c 69 63 6f 6e 46 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 6f 28 64 2e 63 62 2e 75 69 2e 62 72 61 6e 64 41 74 68 6c 65 74 69 63 29 7d 2c 68 65 61 64 6c 69 6e 65 3a 57 72 2e 61 74 68 6c 65 74 69 63 53 75 62 42 65 6e 65 66 69 74 48 65 61 64 6c 69 6e 65 43 6f 70 79 2c 62 65 6e 65 66 69 74 73 46 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 6f 28 72 6f 29 7d 7d 2c 48 44 3a 7b 69 64 3a Data Ascii: .wirecutterSubBenefitHeadlineCopy,benefitsFactory:function(){return lo(ao)}},ATHLETIC:{id:"The Athletic",iconFactory:function(){return uo(d.cb.ui.brandAthletic)},headline:Wr.athleticSubBenefitHeadlineCopy,benefitsFactory:function(){return lo(ro)}},HD:{id:
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 61 67 65 22 7d 29 29 29 2c 69 3d 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2c 61 3d 65 2e 70 72 6f 64 75 63 74 53 77 69 74 63 68 45 6c 69 67 69 62 69 6c 69 74 79 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 65 6c 69 67 69 62 6c 65 3a 21 31 7d 3a 61 2c 6f 3d 4f 62 6a 65 63 74 28 6c 2e 63 29 28 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 73 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 28 71 61 2e 41 29 28 69 29 7d 29 2c 5b 5d 29 2c 69 2e 6c 65 6e 67 74 68 3f 75 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 75 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 6e 2c 63 28 29 28 79 74 2c 7b 7d 2c 76 6f 69 64 20 30 2c 74 63 7c 7c 28 74 63 3d 63 28 29 28 66 74 2e 61 2c 7b 7d 29 29 2c 63 28 29 28 41 61 2c Data Ascii: age"}))),i=e.subscriptions,a=e.productSwitchEligibility,r=void 0===a?{eligible:!1}:a,o=Object(l.c)();return Object(s.useEffect)((function(){Object(qa.A)(i)}),[]),i.length?u.a.createElement(u.a.Fragment,null,n,c()(yt,{},void 0,tc\|\|(tc=c()(ft.a,{})),c()(Aa,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50139	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	1532	OUT	GET /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	477	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 6e 6f 2d 63 61 63 68 65 2c 6e 6f 2d 73 74 6f 72 65 0d 0a 58 2d 43 61 63 68 65 3a 20 45 72 72 6f 72 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 32 63 61 31 61 32 36 36 34 64 Data Ascii: HTTP/1.1 405 Method Not AllowedContent-Type: text/html;charset=iso-8859-1Content-Length: 319Connection: closeDate: Tue, 05 Dec 2023 18:13:47 GMTCache-Control: must-revalidate,no-cache,no-storeX-Cache: Error from cloudfrontVia: 1.1 2ca1a2664d
2023-12-05 18:13:47 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50136	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	482	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:47 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 33 33 59 33 39 45 50 50 54 4a 38 33 32 58 51 59 36 59 39 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 33Y39EPPTJ832XQY6Y9NSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50137	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	455	OUT	GET /ecm3?ex=openx.com&id=9397a18a-89a9-8973-919d-66baf990759b HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:47 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 56 57 52 31 43 4a 46 4a 36 54 46 56 53 48 33 41 37 30 45 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: VWR1CJFJ6TFVSH3A70EKCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50135	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	524	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB&gpp=&gpp_sid= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:47 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 58 32 4d 4d 30 30 31 4d 54 31 4d 58 51 50 41 47 50 30 51 46 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: X2MM001MT1MXQPAGP0QFSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50140	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	2113	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 1295 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	1295	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 4b 62 62 58 4d 68 4f 6c 34 52 6d 46 50 77 4b 59 79 76 52 5a 47 35 37 36 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 5f 75 70 64 61 74 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 35 35 35 33 2c 22 64 61 74 61 22 3a 7b 22 61 64 42 6c 6f 63 6b 45 6e 61 62 6c 65 64 22 3a 66 Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"KbbXMhOl4RmFPwKYyvRZG576","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"page_update","how":"beacon","client_ts":1701800025553,"data":{"adBlockEnabled":f
2023-12-05 18:13:47 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:47 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50141	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	1553	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:47 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50138	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	451	OUT	GET /ecm3?ex=index.com&id=ZW9oTXuTmmdZfZr30kZulQAAAj4AAAAB HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:47 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 58 54 35 33 53 36 4e 54 34 50 32 37 47 43 4b 54 36 33 39 59 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: XT53S6NT4P27GCKT639YCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50142	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	642	OUT	GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:47 UTC	566	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 74 6c 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4d 6a 59 78 4f 44 59 33 4d 6a 51 78 4d 54 55 32 4f 54 59 33 4e 6a 49 33 4f 44 45 30 4f 41 25 33 44 25 33 44 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Length: 0Connection: closeLocation: https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjYxODY3MjQxMTU2OTY3NjI3ODE0OA%3D%3DCache-Control: no-ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50143	35.71.131.137	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	830	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRgFKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIHcnViaWNvbg..
2023-12-05 18:13:47 UTC	746	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 32 66 61 70 70 6e 65 78 75 73 25 33 66 74 74 64 25 33 64 31 25 32 36 61 6e 69 64 25 33 64 25 32 34 55 49 44 26 74 74 64 5f 74 64 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:47 GMTContent-Length: 341Connection: closeserver: Kestrellocation: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=3a743bef-66e
2023-12-05 18:13:47 UTC	341	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 32 66 61 70 70 6e 65 78 75 73 25 33 66 74 74 64 25 33 64 31 25 32 36 61 6e 69 64 25 33 64 25 32 34 55 49 44 26 74 74 64 5f 74 64 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 22 3e 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 Data Ascii: Redirecting to: <a href="https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535">https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50146	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	1902	OUT	GET /vi-assets/static-assets/178-402d852444b5149d85e8.js?_sw-precache=6e77cc0d194cfa617dcb9cea0a0cc5db HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800926174
2023-12-05 18:13:47 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 34 32 32 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 54 52 36 69 4a 6d 58 45 61 34 73 50 77 36 79 46 34 42 76 6e 4c 55 33 79 53 78 58 58 4f 41 77 75 41 7a 6a 64 53 63 71 46 62 42 39 79 72 56 6c 4d 49 65 65 51 38 35 69 69 65 74 6c 64 46 48 34 65 4d 52 49 43 78 32 56 36 6b 68 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 34 35 32 33 37 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 84222X-GUploader-UploadID: ABPtcPpTR6iJmXEa4sPw6yF4BvnLU3ySxXXOAwuAzjdScqFbB9yrVlMIeeQ85iietldFH4eMRICx2V6khQx-goog-generation: 1701718545452374x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:47 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 38 5d 2c 7b 22 32 50 37 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 29 3b 76 61 72 20 72 2c 6f 2c 61 3d 6e 28 22 67 63 52 2f 22 29 2c 69 3d 6e 2e 6e 28 61 29 2c 73 3d 6e 28 22 4a 34 7a 70 22 29 2c 75 3d 6e 2e 6e 28 73 29 2c 63 3d 6e 28 22 71 31 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[178],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return j})),n.d(t,"c",(function(){return H})),n.d(t,"a",(function(){return I}));var r,o,a=n("gcR/"),i=n.n(a),s=n("J4zp"),u=n.n(s),c=n("q1t
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 65 63 65 69 76 65 20 61 20 66 75 6c 6c 20 63 72 65 64 69 74 5c 6e 20 20 20 20 66 6f 72 20 79 6f 75 72 20 75 6e 64 65 6c 69 76 65 72 65 64 20 6e 65 77 73 70 61 70 65 72 73 20 6f 6e 20 79 6f 75 72 20 6e 65 78 74 20 62 69 6c 6c 20 61 66 74 65 72 20 79 6f 75 72 20 64 65 6c 69 76 65 72 79 20 68 61 73 5c 6e 20 20 20 20 72 65 73 74 61 72 74 65 64 2e 22 2c 6c 3d 22 4e 6f 2c 20 73 75 73 70 65 6e 64 20 6d 79 20 75 6e 6c 69 6d 69 74 65 64 20 64 69 67 69 74 61 6c 20 61 72 74 69 63 6c 65 20 61 63 63 65 73 73 22 2c 70 3d 22 59 6f 75 e2 80 99 6c 6c 20 62 65 20 63 68 61 72 67 65 64 20 24 31 2e 30 30 20 70 65 72 20 63 61 6c 65 6e 64 61 72 20 64 61 79 20 64 75 72 69 6e 67 20 79 6f 75 72 20 73 75 73 70 65 6e 73 69 6f 6e 2e 20 54 68 69 73 20 77 69 6c 6c 20 62 65 5c 6e 20 20 Data Ascii: eceive a full credit\n for your undelivered newspapers on your next bill after your delivery has\n restarted.",l="No, suspend my unlimited digital article access",p="Youll be charged $1.00 per calendar day during your suspension. This will be\n
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 6e 2c 69 3d 74 2e 73 75 73 70 65 6e 73 69 6f 6e 73 3b 69 66 28 21 61 7c 7c 21 61 2e 73 74 6f 70 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 63 75 72 72 65 6e 74 53 75 73 70 65 6e 73 69 6f 6e 20 77 69 74 68 20 60 73 74 6f 70 60 20 66 69 65 6c 64 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 22 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 6e 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 28 21 72 7c 7c 6e 2e 69 64 21 3d 3d 72 2e 69 64 29 26 26 28 4f 62 6a 65 63 74 28 44 2e 62 29 28 6e 2e 73 74 6f 70 29 2e 69 73 42 65 74 77 65 65 6e 28 65 2c 74 2c 22 64 61 79 22 2c 22 5b 5d 22 29 7c 7c 21 21 6e 2e 72 65 Data Ascii: n,i=t.suspensions;if(!a\|\|!a.stop)throw new Error("currentSuspension with `stop` field must be specified");var s=function(e,t,n,r){if(!n)return null;var o=n.filter((function(n){return(!r\|\|n.id!==r.id)&&(Object(D.b)(n.stop).isBetween(e,t,"day","[]")\|\|!!n.re
2023-12-05 18:13:47 UTC	15992	IN	Data Raw: 64 53 75 73 70 65 6e 73 69 6f 6e 28 5c 6e 20 20 20 20 24 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3a 20 49 44 21 2c 5c 6e 20 20 20 20 24 74 72 61 6e 73 61 63 74 69 6f 6e 49 64 3a 20 53 74 72 69 6e 67 21 2c 5c 6e 20 20 20 20 24 72 65 73 74 61 72 74 44 61 74 65 3a 20 53 74 72 69 6e 67 21 2c 5c 6e 20 20 20 20 24 72 65 73 6f 6c 75 74 69 6f 6e 4f 70 74 69 6f 6e 3a 20 53 75 73 70 65 6e 73 69 6f 6e 52 65 73 6f 6c 75 74 69 6f 6e 54 79 70 65 21 5c 6e 20 20 29 20 7b 5c 6e 20 20 20 20 75 70 64 61 74 65 41 63 74 69 76 65 53 75 73 70 65 6e 73 69 6f 6e 28 5c 6e 20 20 20 20 20 20 75 70 64 61 74 65 41 63 74 69 76 65 53 75 73 70 65 6e 73 69 6f 6e 49 6e 70 75 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3a 20 24 73 75 62 73 63 72 69 Data Ascii: dSuspension(\n $subscriptionId: ID!,\n $transactionId: String!,\n $restartDate: String!,\n $resolutionOption: SuspensionResolutionType!\n ) {\n updateActiveSuspension(\n updateActiveSuspensionInput: {\n subscriptionId: $subscri
2023-12-05 18:13:47 UTC	16384	IN	Data Raw: 3a 4e 2e 6c 61 62 65 6c 4e 6f 45 6e 64 44 61 74 65 48 44 53 75 62 7d 29 29 29 29 29 2c 69 28 29 28 76 72 2c 7b 7d 2c 76 6f 69 64 20 30 2c 6f 26 26 72 26 26 69 28 29 28 62 2e 6a 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 62 74 6e 2d 63 68 61 6e 67 65 22 2c 76 61 72 69 61 6e 74 3a 62 2e 4c 2e 6f 75 74 6c 69 6e 65 2c 68 65 69 67 68 74 56 61 72 69 61 6e 74 3a 62 2e 4b 2e 63 6f 6d 70 61 63 74 2c 77 69 64 74 68 56 61 72 69 61 6e 74 3a 7b 73 6d 61 6c 6c 3a 62 2e 4d 2e 66 6c 65 78 2c 6d 65 64 69 75 6d 3a 62 2e 4d 2e 63 6f 6e 74 65 6e 74 7d 2c 6f 6e 43 6c 69 63 6b 3a 6f 7d 2c 76 6f 69 64 20 30 2c 24 6e 7c 7c 28 24 6e 3d 69 28 29 28 79 72 2c 7b 7d 2c 76 6f 69 64 20 30 2c 69 28 29 28 66 2e 61 2c 7b 63 6f 70 79 3a 4e 2e 62 75 74 74 6f 6e 43 68 61 6e 67 65 48 44 53 75 Data Ascii: :N.labelNoEndDateHDSub}))))),i()(vr,{},void 0,o&&r&&i()(b.j,{dataTestId:"btn-change",variant:b.L.outline,heightVariant:b.K.compact,widthVariant:{small:b.M.flex,medium:b.M.content},onClick:o},void 0,$n\|\|($n=i()(yr,{},void 0,i()(f.a,{copy:N.buttonChangeHDSu
2023-12-05 18:13:47 UTC	2694	IN	Data Raw: 29 2c 64 3d 4f 62 6a 65 63 74 28 61 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 6d 69 61 33 63 64 33 22 7d 29 28 69 2e 69 62 2e 62 6f 64 79 32 2c 22 20 63 6f 6c 6f 72 3a 22 2c 69 2e 4f 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 2c 22 3b 22 29 2c 6c 3d 4f 62 6a 65 63 74 28 61 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 6d 69 61 33 63 64 34 22 7d 29 28 69 2e 69 62 2e 6c 65 67 61 6c 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 29 28 73 2c 7b 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2e 64 61 74 61 54 65 73 74 49 64 7c 7c 22 22 2c 22 3a 63 6f 6e 74 61 69 6e 65 72 22 29 7d 2c 76 6f 69 64 20 30 2c 6f 28 29 28 75 2c 7b 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 22 2e 63 Data Ascii: ),d=Object(a.d)("div",{target:"emia3cd3"})(i.ib.body2," color:",i.O.text.primary,";"),l=Object(a.d)("div",{target:"emia3cd4"})(i.ib.legal),p=function(e){return o()(s,{"data-testid":"".concat(e.dataTestId\|\|"",":container")},void 0,o()(u,{"data-testid":"".c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50148	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	2124	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 882 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	882	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 66 43 50 6b 71 57 66 38 37 65 6f 4a 5f 76 6a 6a 38 71 6f 48 33 79 46 48 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 70 75 51 6c 6e 72 43 73 58 30 47 74 44 43 4a 79 4b 71 52 38 57 67 61 64 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 70 75 51 6c 6e 72 43 73 58 30 47 74 44 43 4a 79 4b 71 52 38 57 67 61 64 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 32 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 6c 69 72 65 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 36 35 36 31 2c 22 64 61 74 61 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e Data Ascii: [{"context_id":"fCPkqWf87eoJ_vjj8qoH3yFH","pageview_id":"puQlnrCsX0GtDCJyKqR8Wgad","event_id":"puQlnrCsX0GtDCJyKqR8Wgad","client_lib":"v1.2.0","sourceApp":"nyt-lire","subject":"page","how":"beacon","client_ts":1701800026561,"data":{"url":"https://myaccoun
2023-12-05 18:13:47 UTC	1404	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://myaccount.nytimes.comset-cookie:
2023-12-05 18:13:47 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50149	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	2124	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 397 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	397	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 66 43 50 6b 71 57 66 38 37 65 6f 4a 5f 76 6a 6a 38 71 6f 48 33 79 46 48 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 70 75 51 6c 6e 72 43 73 58 30 47 74 44 43 4a 79 4b 71 52 38 57 67 61 64 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 39 46 70 65 51 65 34 66 67 2d 61 53 47 74 4e 6b 75 66 4c 54 75 37 48 6d 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 32 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 6c 69 72 65 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 61 62 5f 61 6c 6c 6f 63 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 36 35 38 36 2c 22 64 61 74 61 22 3a 7b 22 61 6c 6c 6f 63 73 22 3a 5b 7b 22 74 65 73 74 22 3a 22 Data Ascii: [{"context_id":"fCPkqWf87eoJ_vjj8qoH3yFH","pageview_id":"puQlnrCsX0GtDCJyKqR8Wgad","event_id":"9FpeQe4fg-aSGtNkufLTu7Hm","client_lib":"v1.2.0","sourceApp":"nyt-lire","subject":"ab_alloc","how":"beacon","client_ts":1701800026586,"data":{"allocs":[{"test":"
2023-12-05 18:13:47 UTC	984	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://myaccount.nytimes.comset-cookie:
2023-12-05 18:13:47 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50147	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	2307	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 170 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	170	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 55 73 65 72 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 65 36 30 35 33 33 63 62 38 35 36 66 39 32 35 34 32 31 39 33 32 38 39 65 34 66 39 30 37 37 38 35 65 33 38 37 61 66 64 35 34 33 64 64 64 36 30 62 65 64 35 66 37 37 36 63 34 63 36 35 61 63 36 30 22 7d 7d 7d Data Ascii: {"operationName":"UserQuery","variables":{},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"e60533cb856f92542193289e4f907785e387afd543ddd60bed5f776c4c65ac60"}}}
2023-12-05 18:13:47 UTC	1314	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 210access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:13:47 UTC	215	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, Origin, Accept-EncodingTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:47 UTC	210	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 2c 22 70 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 6e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3a 7b 22 6e 65 77 73 6c 65 74 74 65 72 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 22 7d 2c 22 75 73 65 72 49 6e 66 6f 22 3a 7b 22 72 65 67 69 49 64 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 6c 65 6d 65 6e 74 73 22 3a 6e 75 6c 6c 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 49 6e 66 6f 22 7d 7d 7d 7d 0a Data Ascii: {"data":{"user":{"__typename":"User","profile":null,"newsletterSubscriptions":{"newsletters":[],"__typename":"NewsletterSubscriptions"},"userInfo":{"regiId":null,"entitlements":null,"__typename":"UserInfo"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50150	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	2112	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 936 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	936	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 69 4b 37 67 35 6f 41 55 61 66 71 54 6d 34 5f 74 30 6c 61 54 52 6d 39 56 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 36 35 30 30 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"iK7g5oAUafqTm4_t0laTRm9V","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800026500,"data":{"event":"impression
2023-12-05 18:13:47 UTC	978	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:47 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50151	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	2124	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:47 UTC	522	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 66 43 50 6b 71 57 66 38 37 65 6f 4a 5f 76 6a 6a 38 71 6f 48 33 79 46 48 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 70 75 51 6c 6e 72 43 73 58 30 47 74 44 43 4a 79 4b 71 52 38 57 67 61 64 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 74 50 41 4e 66 4d 38 34 5f 55 46 43 57 65 79 38 74 33 44 39 4b 47 71 32 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 32 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 6c 69 72 65 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 36 37 34 32 2c 22 64 61 74 61 22 3a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 6e Data Ascii: [{"context_id":"fCPkqWf87eoJ_vjj8qoH3yFH","pageview_id":"puQlnrCsX0GtDCJyKqR8Wgad","event_id":"tPANfM84_UFCWey8t3D9KGq2","client_lib":"v1.2.0","sourceApp":"nyt-lire","subject":"impression","how":"beacon","client_ts":1701800026742,"data":{"application":{"n
2023-12-05 18:13:47 UTC	984	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://myaccount.nytimes.comset-cookie:
2023-12-05 18:13:47 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50152	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	1302	OUT	GET /svc/nyt/data-layer?sourceApp=nyt-lire&referrer=https%3A%2F%2Fwww.nytimes.com%2F&assetUrl=https%3A%2F%2Fmyaccount.nytimes.com%2Fauth%2Fiframe%2Fenter-email%3Fresponse_type%3Dcookie%26client_id%3Dfreex%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252Fsubscription%252Fonboarding-offer%253FcampaignId%253D7JFJX%2526redirect_uri%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%2526EXIT_URI%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%26display%3Dregiwall_lire%26asset%3DRegiWall%26application%3DFree_Experience%26preloaded%3Dtrue%23lire-ui-261522 HTTP/1.1 Host: a.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:47 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-byaccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://myaccount.nytimes.comcontent-type: a
2023-12-05 18:13:47 UTC	1014	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 32 37 39 30 33 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800027903,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50154	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:47 UTC	1553	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:48 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 37 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:47 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50163	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	853	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:48 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 34 4d 34 38 36 4a 46 39 59 4b 30 41 58 59 46 36 30 56 32 43 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 4M486JF9YK0AXYF60V2CSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50157	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	1553	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _chartbeat2=.1701800009715.1701800009715.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.1; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; nyt-jkidd=uid=0&lastRequest=1701800022408&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:48 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:48 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50158	68.67.179.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	794	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
2023-12-05 18:13:48 UTC	1061	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 35 20 4e 6f 76 20 32 30 30 38 20 31 36 3a 30 30 3a 30 30 20 47 Data Ascii: HTTP/1.1 302 FoundServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:13:48 GMTContent-Type: text/html; charset=utf-8Content-Length: 0Connection: closeCache-Control: no-store, no-cache, privatePragma: no-cacheExpires: Sat, 15 Nov 2008 16:00:00 G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50159	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	671	OUT	GET /ium?sourceid=3&uid= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:48 UTC	652	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 65 33 34 66 63 64 38 31 65 64 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 52 65 70 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Length: 0Connection: closeCF-Ray: 830e43e34fcd81ed-IADCF-Cache-Status: DYNAMICCache-Control: max-age=0, no-cache, no-storeExpires: Tue, 05 Dec 2023 18:13:48 GMTPragma: no-cacheRep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50161	50.17.66.232	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	730	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQ HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjdARDUFg; lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
2023-12-05 18:13:48 UTC	590	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 69 36 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 32 38 32 39 32 3f 62 69 64 64 65 72 5f 69 64 3d 37 31 33 34 30 26 62 69 64 64 65 72 5f 75 75 69 64 3d 6b 2d 4f 44 58 2d 75 46 37 57 6c 53 68 76 6b 6a 67 72 39 51 4f 50 4a 64 72 70 79 35 43 68 35 48 70 48 76 41 38 70 70 51 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 69 5f 73 73 3d 43 68 4d 4b 42 67 6a 64 41 52 44 55 46 67 6f 4a 43 50 5f 5f 5f 5f 38 48 45 4e 34 57 Data Ascii: HTTP/1.1 303 See OtherDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Length: 0Connection: closeLocation: https://i6.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQSet-Cookie: _li_ss=ChMKBgjdARDUFgoJCP____8HEN4W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50185	34.200.65.202	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	827	OUT	GET /ups/58292/sync?_origin=1&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu"
2023-12-05 18:13:48 UTC	771	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50170	18.160.1.134	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	808	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&pid=aA6wh4nEAAioK&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:48 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 39 41 53 41 4b 5a 46 4a 42 39 56 56 44 57 58 51 4a 45 59 46 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 34 37 34 37 34 37 34 37 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 98Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:13:48 GMTx-amz-rid: 9ASAKZFJB9VVDWXQJEYFStrict-Transport-Security: max-age=47474747; includeSubDomains; prel
2023-12-05 18:13:48 UTC	98	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 64 6c 3d 72 62 64 22 2c 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=rbd","cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50175	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	628	OUT	POST /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive Content-Length: 5757 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:48 UTC	5757	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 6f 70 74 73 25 32 32 25 33 41 25 32 32 61 6a 61 78 4c 69 73 74 65 6e 65 72 50 61 74 68 25 32 43 65 6e 64 70 6f 69 6e 74 25 32 32 25 32 43 25 32 32 74 74 73 74 25 32 32 25 33 41 38 32 2e 35 39 39 39 39 39 39 39 39 39 37 36 37 32 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 68 63 25 32 32 25 33 41 34 25 32 43 25 32 32 62 72 5f 6f 68 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 62 72 5f 6f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 75 61 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 Data Ascii: jsData=%7B%22opts%22%3A%22ajaxListenerPath%2Cendpoint%22%2C%22ttst%22%3A82.59999999997672%2C%22ifov%22%3Afalse%2C%22hc%22%3A4%2C%22br_oh%22%3A984%2C%22br_ow%22%3A1280%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%
2023-12-05 18:13:48 UTC	544	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 44 61 74 61 44 6f 6d 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json;charset=utf-8Content-Length: 241Connection: closeDate: Tue, 05 Dec 2023 18:13:48 GMTServer: DataDomeAccess-Control-Allow-Origin: *Pragma: no-cacheCache-Control: no-cache, no-store, must-revalid
2023-12-05 18:13:48 UTC	241	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 77 72 6d 61 67 69 44 39 36 75 50 71 59 79 49 65 61 35 4d 59 6a 4d 54 44 73 56 5f 76 77 77 7a 44 42 79 59 52 6f 77 61 4b 42 51 51 4f 37 50 4f 69 57 32 79 72 43 32 52 32 78 4a 62 4c 36 70 70 46 5f 79 33 54 76 33 59 63 57 49 5a 7a 70 39 37 30 68 72 4b 6f 77 42 4e 44 4e 30 66 30 79 76 44 56 53 76 71 30 39 4d 6a 77 4d 5a 39 67 35 42 70 7a 45 57 38 50 5f 64 41 4f 42 7a 4a 66 7a 32 46 79 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=wrmagiD96uPqYyIea5MYjMTDsV_vwwzDByYRowaKBQQO7POiW2yrC2R2xJbL6ppF_y3Tv3YcWIZzp970hrKowBNDN0f0yvDVSvq09MjwMZ9g5BpzEW8P_dAOBzJfz2Fy; Max-Age=31536000; Domain=myaccount.nytimes.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50162	142.251.16.157	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	1452	OUT	GET /ddm/fls/z/dc_pre=CL-ll5Dz-IIDFScxigMd7_oIAA;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5290727.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:13:48 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 49 20 44 45 56 20 50 53 41 20 50 53 44 20 49 56 41 20 49 56 44 20 4f 54 50 20 4f 55 52 20 4f 54 52 20 49 4e 44 20 4f 54 43 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate: Tue, 05 Dec 2023 18:13:48 GMTPragma: no-cache
2023-12-05 18:13:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50172	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	817	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:48 UTC	683	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 6e 69 64 3d 32 32 34 39 26 65 78 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&ex
2023-12-05 18:13:48 UTC	326	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 70 75 74 3d 43 41 45 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50164	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	803	OUT	GET /ecm3?ex=pubmatic.com&id=PM_UID40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:48 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 39 43 51 38 4e 46 4e 5a 52 59 4e 39 37 4d 51 42 52 51 50 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 9CQ8NFNZRYN97MQBRQPKCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50167	8.28.7.83	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	925	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=-1&gdpr_consent=&piggybackCookie=CAESEO4HZyZ72dJGvMK1nyipGtU&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; pi=163427:3
2023-12-05 18:13:48 UTC	760	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 38 3a 35 39 3a 35 32 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 38 30 3d 32 32 39 38 37 2d 43 41 45 53 45 4f 34 48 5a 79 5a 37 32 64 4a 47 76 4d 4b 31 6e 79 69 70 47 74 55 26 4b 52 54 42 26 32 33 30 32 35 2d 43 41 45 53 45 4f 34 48 5a 79 5a 37 32 64 4a 47 76 4d 4b 31 6e 79 69 70 47 74 55 26 4b 52 54 42 26 32 33 33 38 36 2d 43 41 45 53 45 4f 34 48 5a 79 5a 37 32 64 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 08:59:52 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72d
2023-12-05 18:13:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50171	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	441	OUT	GET /ecm3?ex=media.net&id=3448016130184375000V10 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:48 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 4d 48 31 46 50 30 37 34 4e 31 57 50 35 38 4e 44 30 34 4d 53 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: MH1FP074N1WP58ND04MSCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50180	52.223.22.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	699	OUT	GET /xuid?mid=7976&xuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:48 UTC	449	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 33 63 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 4f 55 52 20 44 45 4c 20 53 41 4d 20 4f 54 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OT
2023-12-05 18:13:48 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50168	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	1111	OUT	GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=863798274517;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html;u5=;u18=anon;ps=1;pcor=1468203746;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:49 UTC	2215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50173	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	688	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:48 UTC	888	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 52 37 59 43 4e 4e 4e 53 59 59 4a 43 50 54 4a 31 35 37 36 35 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d 4a 75 6c 2d 32 30 32 34 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 3b 20 Data Ascii: HTTP/1.1 302 FoundServer: ServerDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Length: 0Connection: closex-amz-rid: R7YCNNNSYYJCPTJ15765Set-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 18:13:48 GMT;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50160	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	707	OUT	GET /crum?cm_dsp_id=17&external_user_id=0ve4IDJUsd2OZC0HsNGu HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:48 UTC	979	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 65 34 32 63 31 35 33 39 39 37 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43e42c153997-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50183	52.73.239.53	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	757	OUT	GET /sync/pubmatic/40D3C5B1-C944-4FD5-B1BE-0A313CAD2333?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
2023-12-05 18:13:49 UTC	777	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 67 65 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 72 76 65 72 3a 20 41 54 53 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:48 GMTContent-Type: image/gifContent-Length: 43Connection: closeAge: 0Strict-Transport-Security: max-age=31536000Server: ATSExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/cs
2023-12-05 18:13:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50197	34.111.113.62	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:48 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:49 UTC	1087	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 38 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 0d 0a 41 63 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:48 GMTStrict-Transport-Security: max-age=31536000Access-Control-Allow-Origin: *Accept-CH: Sec-CH-UAAccept-CH: Sec-CH-UA-ArchAccept-CH: Sec-CH-UA-BitnessAccept-CH: Sec-CH-UA-Full-Version-ListAc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50188	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	2086	OUT	GET /vi-assets/static-assets/179-9ce786c57ce144531cbf.js?_sw-precache=19cd6e7fb911f3682635a2d5278917b2 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:49 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 39 36 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 42 74 2d 2d 4c 74 47 7a 6a 6b 67 34 75 58 62 73 48 6a 50 4e 68 41 79 68 70 4c 4d 46 70 69 4c 34 64 31 6b 62 32 5f 47 4d 53 4f 43 48 51 51 35 43 58 34 53 77 33 61 75 6a 54 33 2d 44 41 61 46 6e 4b 45 4e 53 38 52 35 6d 5a 74 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 37 35 39 32 33 39 39 36 37 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 20964X-GUploader-UploadID: ABPtcPqBt--LtGzjkg4uXbsHjPNhAyhpLMFpiL4d1kb2_GMSOCHQQ5CX4Sw3aujT3-DAaFnKENS8R5mZtgx-goog-generation: 1701718759239967x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:49 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 22 32 50 37 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 3b 76 61 72 20 6f 2c 72 2c 61 3d 6e 28 22 67 63 52 2f 22 29 2c 69 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 4a 34 7a 70 22 29 2c 75 3d 6e 2e 6e 28 63 29 2c 6c 3d 6e 28 22 71 31 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[179],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return w})),n.d(t,"c",(function(){return C})),n.d(t,"a",(function(){return j}));var o,r,a=n("gcR/"),i=n.n(a),c=n("J4zp"),u=n.n(c),l=n("q1t
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 22 22 3b 61 2e 64 69 73 70 6c 61 79 43 75 73 74 6f 6d 4d 6f 64 61 6c 43 6f 6d 70 6f 6e 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 29 28 68 2e 61 2c 7b 72 6f 6f 74 45 6c 65 6d 65 6e 74 52 65 66 3a 74 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2c 6f 6e 43 6c 6f 73 65 3a 61 2e 63 6c 6f 73 65 44 69 61 6c 6f 67 2c 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 3a 69 28 29 28 79 2e 61 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 75 73 65 72 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6e 61 76 2d 6d 65 6e 75 22 2c 6f 6e 52 6f 75 74 65 72 55 70 64 61 74 65 3a 44 2c 63 75 72 72 65 6e 74 50 61 74 68 3a 22 22 2c 6e 61 76 49 74 65 6d 73 3a 54 2c 74 72 61 63 6b 69 6e 67 43 6f 6e 74 65 78 74 3a 7b 6d 6f 64 75 6c 65 4e Data Ascii: splayName)\|\|"";a.displayCustomModalComponent((function(t){return i()(h.a,{rootElementRef:t,displayName:e,onClose:a.closeDialog,navigationMenu:i()(y.a,{dataTestId:"user-drop-down-nav-menu",onRouterUpdate:D,currentPath:"",navItems:T,trackingContext:{moduleN
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 71 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 29 29 2c 6e 2e 64 28 74 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 28 Data Ascii: p})),n.d(t,"q",(function(){return v})),n.d(t,"l",(function(){return h})),n.d(t,"b",(function(){return y})),n.d(t,"g",(function(){return A})),n.d(t,"f",(function(){return E})),n.d(t,"c",(function(){return k})),n.d(t,"d",(function(){return w})),n.d(t,"e",(
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6c 65 74 65 20 6d 79 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 61 63 63 6f 75 6e 74 2e 22 2c 41 3d 22 44 65 6c 65 74 65 20 61 63 63 6f 75 6e 74 22 2c 45 3d 22 59 6f 75 72 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 61 63 63 6f 75 6e 74 20 69 73 20 62 65 69 6e 67 20 64 65 6c 65 74 65 64 2e 22 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 20 61 72 65 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 22 2c 72 28 29 28 63 2e 62 2c 7b 7d 2c 76 6f 69 64 20 30 2c 65 29 2c 22 2e 22 29 7d 2c 77 3d 22 54 68 69 73 20 61 63 74 69 6f 6e 20 6d 61 79 20 Data Ascii: lete my New York Times account.",A="Delete account",E="Your New York Times account is being deleted.",k=function(e){return i.a.createElement(i.a.Fragment,null,"We are deleting the New York Times account for ",r()(c.b,{},void 0,e),".")},w="This action may
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 20 20 20 20 22 29 3a 22 22 7d 29 29 2c 75 3d 4f 62 6a 65 63 74 28 6f 2e 64 29 28 22 73 70 61 6e 22 2c 7b 74 61 72 67 65 74 3a 22 65 31 6d 75 72 67 6b 73 33 22 7d 29 28 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 22 2c 72 2e 68 62 5b 2e 35 5d 2c 22 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 22 2c 72 2e 69 62 2e 6c 65 67 61 6c 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 65 72 72 6f 72 3f 72 2e 4f 2e 74 65 78 74 2e 6e 65 67 61 74 69 76 65 3a 72 2e 4f 2e 74 65 78 74 2e 73 65 63 6f 6e 64 61 72 79 7d 29 2c 22 3b 22 29 7d 2c 62 6e 33 45 3a 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: box-shadow: none;\n border-radius: 3px;\n "):""})),u=Object(o.d)("span",{target:"e1murgks3"})("margin-top:",r.hb[.5],";float:right;",r.ib.legal,";color:",(function(e){return e.error?r.O.text.negative:r.O.text.secondary}),";")},bn3E:function(e,
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 75 6c 6c 2c 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 22 2c 22 20 22 2c 72 28 29 28 22 61 22 2c 7b 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 68 72 65 66 3a 63 2e 43 41 52 45 5f 50 41 47 45 5f 4c 49 4e 4b 2c 72 65 6c 3a 22 6e 6f 6f 70 65 6e 65 72 22 7d 2c 76 6f 69 64 20 30 2c 22 43 75 73 74 6f 6d 65 72 20 43 61 72 65 22 29 2c 22 20 22 2c 22 66 6f 72 20 61 73 73 69 73 74 61 6e 63 65 2e 22 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 63 4c 69 6e 6b 2c 6e 3d 65 2e 63 6f 6e 6e 65 63 74 44 69 67 69 74 61 6c 41 63 63 6f 75 6e 74 4c 69 Data Ascii: ull,"Were sorry, but were having a technical issue right now. Please contact"," ",r()("a",{target:"_blank",href:c.CARE_PAGE_LINK,rel:"noopener"},void 0,"Customer Care")," ","for assistance.")},s=function(e){var t=e.ccLink,n=e.connectDigitalAccountLi
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 73 6f 6f 6e 2c 20 6f 72 20 22 2c 74 2c 22 20 66 6f 72 20 69 6d 6d 65 64 69 61 74 65 20 61 73 73 69 73 74 61 6e 63 65 2e 22 29 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 49 66 20 79 6f 75 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 68 61 76 65 20 70 72 6f 62 6c 65 6d 73 2c 20 70 6c 65 61 73 65 22 2c 22 20 22 2c 72 28 29 28 22 61 22 2c 7b 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 68 72 Data Ascii: "Please try again soon, or ",t," for immediate assistance.")},h=function(){return i.a.createElement(i.a.Fragment,null,"Were sorry, but were having a technical issue right now. If you continue to have problems, please"," ",r()("a",{target:"_blank",hr
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6c 54 69 74 6c 65 45 72 72 6f 72 50 61 67 65 54 69 74 6c 65 41 6c 6c 7d 29 29 29 2c 61 7c 7c 28 61 3d 62 28 29 28 70 2e 48 2c 7b 73 70 61 63 65 3a 22 34 22 7d 29 29 2c 62 28 29 28 77 2e 61 2c 7b 7d 2c 76 6f 69 64 20 30 2c 62 28 29 28 70 2e 6d 2c 7b 74 79 70 65 53 74 79 6c 65 3a 70 2e 5a 2e 74 69 74 6c 65 31 2c 68 65 61 64 65 72 4c 65 76 65 6c 3a 22 33 22 7d 2c 76 6f 69 64 20 30 2c 69 7c 7c 28 69 3d 62 28 29 28 76 2e 61 2c 7b 63 6f 70 79 3a 6b 2e 67 6c 6f 62 61 6c 45 72 72 6f 72 45 72 72 6f 72 50 61 67 65 41 6c 6c 7d 29 29 29 2c 63 7c 7c 28 63 3d 62 28 29 28 70 2e 48 2c 7b 73 70 61 63 65 3a 22 32 22 7d 29 29 2c 62 28 29 28 70 2e 72 2c 7b 74 79 70 65 53 74 79 6c 65 3a 70 2e 5a 2e 62 6f 64 79 32 7d 2c 76 6f 69 64 20 30 2c 62 28 29 28 76 2e 61 2c 7b 63 6f 70 Data Ascii: lTitleErrorPageTitleAll}))),a\|\|(a=b()(p.H,{space:"4"})),b()(w.a,{},void 0,b()(p.m,{typeStyle:p.Z.title1,headerLevel:"3"},void 0,i\|\|(i=b()(v.a,{copy:k.globalErrorErrorPageAll}))),c\|\|(c=b()(p.H,{space:"2"})),b()(p.r,{typeStyle:p.Z.body2},void 0,b()(v.a,{cop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50195	35.236.220.17	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:49 UTC	961	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 75 69 64 3d 36 32 44 30 46 35 45 38 32 44 31 41 34 45 44 36 42 33 45 33 32 34 35 39 46 46 34 41 35 39 43 41 3b 20 50 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 73 69 6d 70 6c 69 2e 66 69 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 35 2d 44 65 63 2d 32 34 20 31 38 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: openrestyDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: text/htmlContent-Length: 142Connection: closeSet-Cookie: suid=62D0F5E82D1A4ED6B3E32459FF4A59CA; Path=/; domain=simpli.fi; Expires=Thu, 05-Dec-24 18
2023-12-05 18:13:49 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50182	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	866	OUT	GET /track/cmf/rubicon HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCOrmg_PEv688EAUYBSABKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIIYXBwbmV4dXM.
2023-12-05 18:13:49 UTC	771	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 5f 6f 72 69 67 69 6e 3d 31 26 72 65 64 69 72 3d 74 72 75 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Length: 311Connection: closeserver: Kestrellocation: https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&r
2023-12-05 18:13:49 UTC	311	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 5f 6f 72 69 67 69 6e 3d 31 26 72 65 64 69 72 3d 74 72 75 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 74 72 75 65 22 3e 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 Data Ascii: Redirecting to: <a href="https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true">https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50179	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	860	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=QNPFsclET9WxvgoxPK0jMw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:49 UTC	662	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=15657
2023-12-05 18:13:49 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50169	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	1869	OUT	GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=false&gwtype=REGIWALL&us=anon&context-type=&areas=barOne&areas=truncator HTTP/1.1 Host: mwcm.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw
2023-12-05 18:13:49 UTC	941	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 37 39 37 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6d 6f 74 73 2d 63 61 6d 70 61 69 67 6e 2d 6e 61 6d 65 73 3a 20 7b 22 62 61 72 4f 6e 65 22 3a 22 4d 41 47 5f 62 61 72 31 5f 74 65 73 74 5f 73 75 62 63 6f 6e 22 2c 22 74 72 75 6e 63 61 74 6f 72 22 3a 22 4d 41 47 2d 77 65 62 5f 61 6c 6c 5f 6e 6f 6e 2d 6d 6f 62 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 9797cache-control: private, no-cache, no-store, must-revalidatecontent-type: application/json; charset=utf-8x-cmots-campaign-names: {"barOne":"MAG_bar1_test_subcon","truncator":"MAG-web_all_non-mob
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 7b 22 62 61 72 4f 6e 65 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 61 70 70 65 6e 64 45 78 69 74 55 72 69 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 61 72 4f 6e 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 62 61 72 4f 6e 65 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 31 34 66 65 65 62 31 64 2d 30 39 34 37 2d 34 38 33 33 2d 61 36 65 35 2d 61 34 65 38 38 64 30 66 62 66 33 33 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 Data Ascii: {"barOne":{"active":true,"appendExitUri":false,"html":"\n\n\n\n \u003cdiv class=\"barOne\" data-config-component-id=\"mkt-wcm:components/metered_assets/barOne/template/main\" data-component-uuid=\"14feeb1d-0947-4833-a6e5-a4e88d0fbf33\"\u003e\n\n\n\u003csc
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 72 4f 6e 65 5c 22 20 73 74 79 6c 65 3d 5c 22 20 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 3f 63 61 6d 70 61 69 67 6e 49 64 3d 39 51 51 39 4b 5c 22 5c 75 30 30 33 65 5c 6e 20 53 55 42 53 43 52 49 42 45 20 46 4f 52 20 24 32 2f 57 45 45 4b 5c 6e 20 5c 75 30 30 33 63 2f 61 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 2f 64 69 76 5c 75 30 30 33 65 5c 6e 5c 6e 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 72 65 61 74 69 76 65 2d 6f 76 65 72 72 69 64 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 70 2f 63 72 65 61 74 69 76 65 4f 76 65 72 72 69 64 65 2f 74 Data Ascii: rOne\" style=\" \" href=\"https://www.nytimes.com/subscription?campaignId=9QQ9K\"\u003e\n SUBSCRIBE FOR $2/WEEK\n \u003c/a\u003e\n\u003c/div\u003e\n\n\u003cdiv class=\"creative-override\" data-config-component-id=\"mkt-wcm:components/lp/creativeOverride/t
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 74 63 68 2e 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 2f 50 6c 61 74 66 6f 72 6d 73 2f 57 65 62 2d 2d 71 75 65 72 79 2d 70 61 72 61 6d 65 74 65 72 2d 5c 22 7d 2c 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 41 20 67 72 6f 75 70 20 6f 66 20 72 65 67 69 73 20 6f 72 20 61 6e 6f 6e 79 6d 6f 75 73 20 75 73 65 72 73 2e 20 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 4a 4b 49 44 44 2f 55 73 65 72 2d 53 74 61 74 75 73 2f 52 65 67 Data Ascii: e \\u0027plat\\u0027 query parameter. The \\u0027plat\\u0027 query parameter is required to match.\",\"path\":\"/QueryParameter/Platforms/Web--query-parameter-\"},{\"description\":\"A group of regis or anonymous users. \",\"path\":\"/JKIDD/User-Status/Reg
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 69 6e 67 54 69 65 72 73 5c 22 3a 7b 5c 22 31 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 33 36 34 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 31 33 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 35 32 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 35 32 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 31 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 31 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 Data Ascii: ingTiers\":{\"1\":{\"durationDays\":364,\"recurrence\":13,\"durationWeeks\":52,\"totalPrice\":52,\"weeklyPrice\":1,\"tierNumber\":1,\"rawPrice\":\"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\"
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 34 2e 32 35 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 32 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 31 37 2e 30 30 5c 22 7d 7d 2c 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 3a 5c 22 32 30 30 30 30 32 31 36 38 38 30 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 5c 22 2c 5c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 5c 22 3a 5c 22 Data Ascii: \"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\":4.25,\"tierNumber\":2,\"rawPrice\":\"17.00\"}},\"promoCode\":\"20000216880\",\"id\":\"0fd8cf46-d029-11ea-a072-340cee6a52b6\",\"currencyCode\":\"
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6e 67 2d 73 65 72 76 69 63 65 73 2d 63 61 63 68 69 6e 67 5c 22 3a 66 61 6c 73 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 34 30 35 2d 2d 41 43 54 49 56 41 54 45 2d 41 42 52 41 2d 56 31 32 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 32 32 34 2d 2d 68 64 2d 61 75 78 50 72 6f 64 75 63 74 4d 61 70 70 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 31 34 39 2d 2d 43 49 52 43 55 49 54 2d 42 52 45 41 4b 45 52 2d 53 41 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 4f 42 43 4f 2d 33 30 33 38 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2d 72 6f 6c 6c 6f 75 74 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 34 33 39 2d 2d 43 49 47 2d 49 50 2d 53 45 47 4d 45 4e 54 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 Data Ascii: ng-services-caching\":false,\"FF-CMOTS-3405--ACTIVATE-ABRA-V12\":true,\"FF-CMOTS-224--hd-auxProductMapping\":true,\"FF-CMOTS-3149--CIRCUIT-BREAKER-SAS\":true,\"FF-MOBCO-3038-payment-methods-rollout\":true,\"FF-MWCM-4439--CIG-IP-SEGMENTS\":true,\"FF-MWCM-4
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 22 3a 22 4d 41 47 5f 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 73 61 6c 65 5f 62 61 72 31 63 6f 70 79 74 65 73 74 5f 73 75 62 63 6f 6e 5f 42 41 55 22 2c 22 70 61 67 65 50 61 74 68 22 3a 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 22 2c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 22 3a 74 72 75 65 2c 22 73 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 Data Ascii: "audienceName":"MAG_web_regi_anon_sale_bar1copytest_subcon_BAU","pagePath":"/marketing/mpc/muassets/variants/variant-2","isPageVariant":true,"segments":[{"description":"Based on the value of the \u0027plat\u0027 query parameter. The \u0027plat\u0027 query
2023-12-05 18:13:49 UTC	144	IN	Data Raw: 65 2c 22 68 74 6d 6c 22 3a 22 22 2c 22 6a 73 22 3a 6e 75 6c 6c 2c 22 63 73 73 22 3a 6e 75 6c 6c 2c 22 61 73 73 65 74 73 22 3a 6e 75 6c 6c 2c 22 66 69 65 6c 64 73 22 3a 6e 75 6c 6c 2c 22 74 61 72 67 65 74 69 6e 67 49 6e 66 6f 22 3a 6e 75 6c 6c 2c 22 63 61 6d 70 61 69 67 6e 4e 61 6d 65 22 3a 22 4d 41 47 2d 77 65 62 5f 61 6c 6c 5f 6e 6f 6e 2d 6d 6f 62 69 6c 65 2d 61 6c 6c 5f 77 65 6c 63 6f 6d 65 2d 6b 69 6c 6c 73 65 74 22 7d 7d 0a Data Ascii: e,"html":"","js":null,"css":null,"assets":null,"fields":null,"targetingInfo":null,"campaignName":"MAG-web_all_non-mobile-all_welcome-killset"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50192	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	2086	OUT	GET /vi-assets/static-assets/180-1dcf8f5ec828979b5585.js?_sw-precache=da1092368394d1ffb67100511ff4d664 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:49 UTC	1313	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 31 31 30 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 4c 54 54 65 71 56 49 74 58 6a 4b 61 54 67 6b 57 74 36 30 78 49 45 57 54 32 6e 59 78 55 61 61 55 34 61 4e 64 66 42 77 46 77 4d 4d 55 76 79 6f 54 6a 4a 4e 52 47 37 77 45 4f 65 46 4a 43 36 75 42 64 53 67 6b 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 37 35 39 32 34 32 39 30 37 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 41104X-GUploader-UploadID: ABPtcPrLTTeqVItXjKaTgkWt60xIEWT2nYxUaaU4aNdfBwFwMMUvyoTjJNRG7wEOeFJC6uBdSgkx-goog-generation: 1701718759242907x-goog-metageneration: 1x-goog-stored-content-encoding: id
2023-12-05 18:13:49 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 30 5d 2c 7b 22 32 50 37 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 3b 76 61 72 20 69 2c 72 2c 61 3d 6e 28 22 67 63 52 2f 22 29 2c 6f 3d 6e 2e 6e 28 61 29 2c 75 3d 6e 28 22 4a 34 7a 70 22 29 2c 73 3d 6e 2e 6e 28 75 29 2c 63 3d 6e 28 22 71 31 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[180],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return P})),n.d(t,"c",(function(){return N})),n.d(t,"a",(function(){return C}));var i,r,a=n("gcR/"),o=n.n(a),u=n("J4zp"),s=n.n(u),c=n("q1t
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 22 22 3b 61 2e 64 69 73 70 6c 61 79 43 75 73 74 6f 6d 4d 6f 64 61 6c 43 6f 6d 70 6f 6e 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 29 28 68 2e 61 2c 7b 72 6f 6f 74 45 6c 65 6d 65 6e 74 52 65 66 3a 74 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2c 6f 6e 43 6c 6f 73 65 3a 61 2e 63 6c 6f 73 65 44 69 61 6c 6f 67 2c 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 3a 6f 28 29 28 45 2e 61 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 75 73 65 72 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6e 61 76 2d 6d 65 6e 75 22 2c 6f 6e 52 6f 75 74 65 72 55 70 64 61 74 65 3a 6a 2c 63 75 72 72 65 6e 74 50 61 74 68 3a 22 22 2c 6e 61 76 49 74 65 6d 73 3a 44 2c 74 72 61 63 6b 69 6e 67 43 6f 6e 74 65 78 74 3a 7b 6d 6f 64 75 6c 65 4e Data Ascii: splayName)\|\|"";a.displayCustomModalComponent((function(t){return o()(h.a,{rootElementRef:t,displayName:e,onClose:a.closeDialog,navigationMenu:o()(E.a,{dataTestId:"user-drop-down-nav-menu",onRouterUpdate:j,currentPath:"",navItems:D,trackingContext:{moduleN
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 72 69 70 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 65 63 74 69 6f 6e 44 65 73 63 72 69 70 74 69 6f 6e 55 6e 75 73 65 64 53 68 61 72 65 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 65 63 74 69 6f 6e 44 65 73 63 72 69 70 74 69 6f 6e 55 73 65 64 53 68 61 72 65 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 74 65 78 74 49 6e 70 75 74 45 6d 61 69 6c 4c 61 62 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 75 74 74 6f 6e 49 6e 76 69 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e Data Ascii: ription",(function(){return l})),n.d(t,"sectionDescriptionUnusedShares",(function(){return d})),n.d(t,"sectionDescriptionUsedShares",(function(){return f})),n.d(t,"textInputEmailLabel",(function(){return m})),n.d(t,"buttonInvite",(function(){return p})),n
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 22 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 75 73 74 6f 6d 65 72 43 61 72 65 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 72 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 20 61 72 65 20 73 6f 72 72 79 20 62 75 74 20 77 65 20 61 72 65 20 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 79 6f 75 72 20 62 6f 6e 75 73 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 20 49 66 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 22 2c 74 2c 22 2e 22 29 7d 2c 75 3d 22 43 75 73 74 6f 6d 65 72 20 43 61 72 65 22 2c 73 3d 22 52 65 74 75 72 6e 20 74 6f 20 6d 79 20 Data Ascii: subscriptions not found.",o=function(e){var t=e.customerCareLink;return r.a.createElement(r.a.Fragment,null,"We are sorry but we are unable to locate your bonus subscriptions. If this is an error please contact ",t,".")},u="Customer Care",s="Return to my
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 2c 6a 3d 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 22 7d 2c 52 7a 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 73 65 63 74 69 6f 6e 47 69 66 74 53 75 62 73 63 72 69 70 74 69 6f 6e 73 54 69 74 6c 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 65 63 74 69 6f 6e 47 69 66 74 53 75 62 73 63 72 69 70 74 69 6f 6e 73 44 65 73 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e Data Ascii: alid email address.",j="Were sorry, but were having a technical issue right now."},Rz33:function(e,t,n){"use strict";n.r(t),n.d(t,"sectionGiftSubscriptionsTitle",(function(){return l})),n.d(t,"sectionGiftSubscriptionsDesc",(function(){return d})),n.
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 65 64 53 74 61 74 75 73 44 65 73 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 69 41 63 74 69 6f 6e 50 61 79 6d 65 6e 74 4e 6f 4c 6f 6e 67 65 72 41 76 61 69 6c 61 62 6c 65 53 74 61 74 75 73 44 65 73 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 69 41 63 74 69 6f 6e 50 61 79 6d 65 6e 74 52 65 66 75 6e 64 65 64 53 74 61 74 75 73 44 65 73 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 69 41 63 74 69 6f 6e 42 75 74 74 6f 6e 54 72 79 41 67 61 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 69 41 63 74 69 6f 6e 42 75 74 74 6f 6e Data Ascii: edStatusDesc",(function(){return j})),n.d(t,"liActionPaymentNoLongerAvailableStatusDesc",(function(){return L})),n.d(t,"liActionPaymentRefundedStatusDesc",(function(){return w})),n.d(t,"liActionButtonTryAgain",(function(){return k})),n.d(t,"liActionButton
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 22 2c 22 20 22 2c 74 2c 22 20 74 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 2e 22 29 7d 2c 66 3d 22 50 75 72 63 68 61 73 65 20 61 20 67 69 66 74 20 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 6d 3d 22 53 65 65 20 6f 70 74 69 6f 6e 73 22 2c 70 3d 22 50 75 72 63 68 61 73 65 20 61 20 64 69 73 63 6f 75 6e 74 65 64 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 74 68 65 20 6e 65 78 74 20 74 69 6d 65 20 79 6f 75 20 6e 65 65 64 20 61 20 67 69 66 74 2e 22 2c 62 3d 22 48 65 6c 70 20 43 65 6e 74 65 72 22 2c 67 3d 22 47 69 66 74 73 22 2c 76 3d 22 50 61 73 74 20 67 69 66 74 73 22 2c 68 3d 22 50 61 79 6d 65 6e 74 20 69 6e 20 70 72 6f 67 72 65 73 73 22 2c 45 3d 22 53 63 68 65 64 75 6c 65 64 22 2c 53 3d 22 52 65 6e 65 77 61 6c 20 73 63 68 Data Ascii: "," ",t," to learn more.")},f="Purchase a gift subscription",m="See options",p="Purchase a discounted New York Times subscription the next time you need a gift.",b="Help Center",g="Gifts",v="Past gifts",h="Payment in progress",E="Scheduled",S="Renewal sch
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 20 74 3d 65 2e 61 63 74 75 61 6c 52 65 63 69 70 69 65 6e 74 45 6d 61 69 6c 2c 6e 3d 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 72 74 44 61 74 65 3b 72 65 74 75 72 6e 20 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 6f 28 29 28 22 64 69 76 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 52 65 64 65 65 6d 65 64 20 62 79 3a 20 22 2c 74 29 2c 6f 28 29 28 22 64 69 76 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 53 75 62 73 63 72 69 70 74 69 6f 6e 20 73 74 61 72 74 73 3a 20 22 2c 4f 62 6a 65 63 74 28 63 2e 64 29 28 6e 29 29 29 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 75 61 6c 52 65 63 69 70 69 65 6e 74 45 6d 61 69 6c 2c 6e 3d 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e Data Ascii: t=e.actualRecipientEmail,n=e.subscriptionStartDate;return s.a.createElement(s.a.Fragment,null,o()("div",{},void 0,"Redeemed by: ",t),o()("div",{},void 0,"Subscription starts: ",Object(c.d)(n)))},J=function(e){var t=e.actualRecipientEmail,n=e.subscription

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50194	142.251.167.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	612	OUT	GET /pixel?google_nid=openx&google_hm=ZTcyZTBlM2QtNWM3NC02YzJkLTQ0NzMtYmU5NDViNDE3MDFi HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:49 UTC	374	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 48 54 54 50 20 73 65 72 76 65 72 20 28 75 6e 6b 6e 6f 77 6e 29 0d 0a 43 Data Ascii: HTTP/1.1 200 OKContent-Type: image/pngDate: Tue, 05 Dec 2023 18:13:49 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidateCross-Origin-Resource-Policy: cross-originServer: HTTP server (unknown)C
2023-12-05 18:13:49 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50193	34.202.221.201	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	504	OUT	GET /sync/openx/5f86bbb3-05af-a0c0-6044-f2d86ef47332?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
2023-12-05 18:13:49 UTC	777	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 67 65 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 72 76 65 72 3a 20 41 54 53 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: image/gifContent-Length: 43Connection: closeAge: 0Strict-Transport-Security: max-age=31536000Server: ATSExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/cs
2023-12-05 18:13:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50176	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	908	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCOrmg_PEv688EAUYBSABKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIIYXBwbmV4dXM.
2023-12-05 18:13:49 UTC	753	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 35 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Length: 355Connection: closeserver: Kestrellocation: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3a743bef-66ee-4af3-a0ea-a4
2023-12-05 18:13:49 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50190	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	2086	OUT	GET /vi-assets/static-assets/181-6ccf757cb37605cd8921.js?_sw-precache=577c7f3f9e3eb6c9dafad9ba34569a09 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:49 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 35 39 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 36 4a 65 6f 54 74 64 53 58 78 72 30 41 68 36 48 65 74 51 36 64 53 42 6f 70 34 34 73 78 4a 6c 37 62 76 44 6c 44 55 4b 57 74 76 5a 37 68 53 6b 43 64 57 44 68 78 6a 57 6e 59 76 6e 64 43 75 70 6d 36 5f 70 62 33 76 71 58 78 34 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 34 33 31 34 33 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 21593X-GUploader-UploadID: ABPtcPp6JeoTtdSXxr0Ah6HetQ6dSBop44sxJl7bvDlDUKWtvZ7hSkCdWDhxjWnYvndCupm6_pb3vqXx4Ax-goog-generation: 1701718545431434x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:49 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 31 5d 2c 7b 22 2b 33 4d 34 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[181],{"+3M4":function(e,t,n){"use strict";n.d(t,"f",(function(){return d})),n.d(t,"g",(function(){return m})),n.d(t,"a",(function(){return g})),n.d(t,"e",(function(){return f})),n.d(t,"d",(function(){re
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6e 74 65 78 74 28 7b 73 65 74 55 73 65 72 50 72 6f 66 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 7d 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 67 65 43 6f 6e 74 65 6e 74 4d 61 78 57 69 64 74 68 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 4f 62 6a 65 63 74 28 63 2e 75 73 65 43 6f 6e 74 65 78 74 29 28 6d 2e 62 29 2c 6c 3d 4f 62 6a 65 63 74 28 63 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 73 3d 75 28 29 28 6c 2c 32 29 2c 67 3d 73 5b 30 5d 2c 62 3d 73 5b 31 5d 2c 50 3d 4f 62 6a 65 63 74 28 63 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 54 3d 75 28 29 28 50 2c 32 29 2c 4f 3d 54 5b 30 5d 2c 53 3d 54 5b 31 5d 3b 4f 62 6a 65 63 74 28 63 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ntext({setUserProfile:function(e){}}),P=function(e){var t=e.pageContentMaxWidth,n=e.children,o=Object(c.useContext)(m.b),l=Object(c.useState)(null),s=u()(l,2),g=s[0],b=s[1],P=Object(c.useState)(null),T=u()(P,2),O=T[0],S=T[1];Object(c.useEffect)((function(
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 76 61 72 20 54 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 67 65 43 6f 6e 74 65 6e 74 4d 61 78 57 69 64 74 68 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 69 28 29 28 67 2e 61 2c 7b 70 75 72 72 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 62 2e 61 2e 50 55 52 52 5f 45 4e 56 49 52 4f 4e 4d 45 4e 54 7d 29 2c 69 28 29 28 50 2c 7b 70 61 67 65 43 6f 6e 74 65 6e 74 4d 61 78 57 69 64 74 68 3a 74 7d 2c 76 6f 69 64 20 30 2c 6e 29 29 7d 7d 2c 22 34 67 43 66 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 72 3d 6e 28 22 67 63 52 2f 22 29 2c 6f 3d 6e 2e 6e 28 72 29 Data Ascii: var T=function(e){var t=e.pageContentMaxWidth,n=e.children;return s.a.createElement(s.a.Fragment,null,i()(g.a,{purrEnvironment:b.a.PURR_ENVIRONMENT}),i()(P,{pageContentMaxWidth:t},void 0,n))}},"4gCf":function(e,t,n){"use strict";var a,r=n("gcR/"),o=n.n(r)
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 74 6f 61 73 74 4d 65 73 73 61 67 65 45 6d 61 69 6c 43 68 61 6e 67 65 45 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 68 61 6e 67 65 45 6d 61 69 6c 41 63 74 69 6f 6e 42 75 74 74 6f 6e 57 69 74 68 50 77 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 68 61 6e 67 65 45 6d 61 69 6c 41 63 74 69 6f 6e 42 75 74 74 6f 6e 57 69 74 68 6f 75 74 50 77 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 6e 2e 64 28 74 2c 22 74 65 78 74 4c 69 6e 6b 52 65 74 75 72 6e 54 6f 41 63 63 6f 75 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: on(){return p})),n.d(t,"toastMessageEmailChangeError",(function(){return E})),n.d(t,"changeEmailActionButtonWithPwd",(function(){return C})),n.d(t,"changeEmailActionButtonWithoutPwd",(function(){return w})),n.d(t,"textLinkReturnToAccount",(function(){retu
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 65 73 6e 27 74 20 6d 61 74 63 68 20 6f 75 72 20 72 65 63 6f 72 64 73 2e 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 63 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 72 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 27 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 27 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 73 6f 6f 6e 2c 20 6f 72 22 2c 22 20 22 2c 74 2c 22 20 66 6f 72 20 69 6d 6d 65 64 69 61 74 65 20 61 73 73 69 73 74 61 6e 63 65 2e 22 29 7d 2c 43 3d 22 53 61 76 65 22 2c 77 3d 22 43 72 65 61 74 65 20 70 61 73 73 77 6f 72 64 22 2c 79 3d 22 52 Data Ascii: esn't match our records.",E=function(e){var t=e.ccLink;return r.a.createElement(r.a.Fragment,null,"We're sorry, but we're having a technical issue right now. Please try again soon, or"," ",t," for immediate assistance.")},C="Save",w="Create password",y="R
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 22 2c 63 3d 22 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 22 2c 22 20 22 2c 72 28 29 28 22 61 22 2c 7b 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 68 72 65 66 3a 6c 2e 43 41 52 45 5f 50 41 47 45 5f 4c 49 4e 4b 2c 72 65 6c 3a 22 6e 6f 6f 70 65 6e 65 72 22 7d 2c 76 6f 69 64 20 30 2c 22 43 75 73 74 6f 6d 65 72 20 43 61 72 65 22 29 2c 22 20 22 2c 22 66 6f Data Ascii: ",c="Page not found",s=function(){return i.a.createElement(i.a.Fragment,null,"Were sorry, but were having a technical issue right now. Please contact"," ",r()("a",{target:"_blank",href:l.CARE_PAGE_LINK,rel:"noopener"},void 0,"Customer Care")," ","fo
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 63 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 69 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 73 6f 6f 6e 2c 20 6f 72 20 22 2c 74 2c 22 20 66 6f 72 20 69 6d 6d 65 64 69 61 74 65 20 61 73 73 69 73 74 61 6e 63 65 2e 22 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 69 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 Data Ascii: ,h=function(e){var t=e.ccLink;return i.a.createElement(i.a.Fragment,null,"Please try again soon, or ",t," for immediate assistance.")},p=function(){return i.a.createElement(i.a.Fragment,null,"Were sorry, but were having a technical issue right now.
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 74 6f 72 79 5c 6e 20 20 20 20 20 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 4d 65 74 68 6f 64 73 5c 6e 20 20 20 20 7d 5c 6e 20 20 7d 5c 6e 27 5d 29 29 29 2c 4f 3d 50 28 72 7c 7c 28 72 3d 41 28 29 28 5b 22 5c 6e 20 20 6d 75 74 61 74 69 6f 6e 20 63 68 61 6e 67 65 45 6d 61 69 6c 28 24 6e 65 77 45 6d 61 69 6c 3a 20 53 74 72 69 6e 67 21 2c 20 24 70 61 73 73 77 6f 72 64 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 20 20 63 68 61 6e 67 65 52 65 67 69 45 6d 61 69 6c 28 5c 6e 20 20 20 20 20 20 63 68 61 6e 67 65 45 6d 61 69 6c 49 6e 70 75 74 3a 20 7b 20 6e 65 77 45 6d 61 69 6c 3a 20 24 6e 65 77 45 6d 61 69 6c 2c 20 70 61 73 73 77 6f 72 64 3a 20 24 70 61 73 73 77 6f 72 64 20 7d 5c 6e 20 20 20 20 29 20 7b 5c 6e 20 20 20 20 20 20 73 75 63 63 65 73 73 5c 6e 20 20 Data Ascii: tory\n authenticationMethods\n }\n }\n']))),O=P(r\|\|(r=A()(["\n mutation changeEmail($newEmail: String!, $password: String!) {\n changeRegiEmail(\n changeEmailInput: { newEmail: $newEmail, password: $password }\n ) {\n success\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50191	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	2193	OUT	GET /vi-assets/static-assets/vendors~emailsignup-01e5189b94e38dca3af6.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:49 UTC	1329	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 30 32 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 49 75 57 74 77 2d 30 30 53 6e 42 38 71 5f 71 2d 48 30 4c 56 31 79 67 5a 76 51 71 52 6e 37 5f 37 76 69 52 30 61 4d 75 34 59 43 4b 52 57 63 53 44 4c 31 58 4c 71 37 71 7a 4d 2d 37 53 65 61 6c 62 6b 42 68 6b 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 37 36 31 33 31 39 39 39 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 20022X-GUploader-UploadID: ABPtcPpIuWtw-00SnB8q_q-H0LV1ygZvQqRn7_7viR0aMu4YCKRWcSDL1XLq7qzM-7SealbkBhkx-goog-generation: 1701718761319990x-goog-metageneration: 1x-goog-stored-content-encoding: id
2023-12-05 18:13:49 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 38 5d 2c 7b 22 2b 66 55 45 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 6e 28 22 54 71 52 74 22 29 2c 61 3d 6e 28 22 63 44 66 35 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 74 2e 46 61 64 65 49 6e 4f 75 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 73 2c 72 3d 6f 28 6e 28 22 4a 34 7a 70 22 29 29 2c 6c 3d 6f 28 6e 28 22 6c 53 4e 41 22 29 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[148],{"+fUE":function(e,t,n){"use strict";var o=n("TqRt"),a=n("cDf5");Object.defineProperty(t,"__esModule",{value:!0}),t.default=t.FadeInOut=void 0;var s,r=o(n("J4zp")),l=o(n("lSNA")),i=function(e,t){if
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 2e 64 65 66 61 75 6c 74 29 28 79 2c 32 29 2c 43 3d 62 5b 30 5d 2c 77 3d 62 5b 31 5d 3b 72 65 74 75 72 6e 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 26 26 67 21 3d 3d 70 2e 45 58 49 54 49 4e 47 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 21 43 3f 73 7c 7c 28 68 28 70 2e 45 4e 54 45 52 49 4e 47 29 2c 65 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 70 2e 45 4e 54 45 52 45 44 29 2c 77 28 21 30 29 7d 29 2c 61 29 29 3a 28 68 28 70 2e 45 58 49 54 49 4e 47 29 2c 65 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 70 2e 45 58 49 54 45 44 29 7d 29 2c 61 29 29 2c 66 75 6e 63 74 69 6f 6e Data Ascii: .default)(y,2),C=b[0],w=b[1];return(0,i.useEffect)((function(){if(t&&g!==p.EXITING){var e=null;return n&&!C?s\|\|(h(p.ENTERING),e=window.setTimeout((function(){h(p.ENTERED),w(!0)}),a)):(h(p.EXITING),e=window.setTimeout((function(){h(p.EXITED)}),a)),function
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 7d 72 65 74 75 72 6e 20 65 7d 28 7b 72 65 64 69 72 65 63 74 5f 75 72 69 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 6c 69 65 6e 74 5f 69 64 3a 22 66 72 65 65 78 22 2c 61 73 73 65 74 3a 22 22 2e 63 6f 6e 63 61 74 28 6f 2e 70 72 6f 64 75 63 74 43 6f 64 65 2c 22 2d 73 74 61 6e 64 61 6c 6f 6e 65 22 29 2c 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3a 22 63 6f 6f 6b 69 65 22 2c 61 70 70 6c 69 63 61 74 69 6f 6e 3a 22 4e 65 77 73 6c 65 74 74 65 72 22 2c 64 69 73 70 6c 61 79 3a 75 7d 2c 64 29 3b 72 65 74 75 72 6e 20 6c 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 64 65 66 61 75 6c 74 2c 7b 68 6f 73 74 3a 74 2c 70 61 72 61 6d 73 3a 63 2c 6f 6e 53 75 63 63 65 73 73 3a 6e 7d 29 7d 3b 64 2e 64 69 73 70 6c 61 79 4e 61 Data Ascii: }return e}({redirect_uri:window.location.href,client_id:"freex",asset:"".concat(o.productCode,"-standalone"),response_type:"cookie",application:"Newsletter",display:u},d);return l.default.createElement(r.default,{host:t,params:c,onSuccess:n})};d.displayNa
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 3d 28 30 2c 64 2e 64 65 66 61 75 6c 74 29 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 61 3d 28 30 2c 64 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 61 29 7d 65 6c 73 65 20 6e 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 64 65 66 61 75 6c Data Ascii: .valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function(){var n,o=(0,d.default)(e);if(t){var a=(0,d.default)(this).constructor;n=Reflect.construct(o,arguments,a)}else n=o.apply(this,arguments);return(0,i.defaul
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 2c 7b 69 64 3a 22 73 68 61 72 65 64 75 69 2d 6d 6f 64 61 6c 22 2c 69 73 4f 70 65 6e 3a 6e 2c 6f 76 65 72 6c 61 79 43 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 66 2e 63 78 29 28 67 2e 6f 76 65 72 6c 61 79 43 6c 61 73 73 2c 73 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 66 2e 63 78 29 28 67 2e 6d 6f 64 61 6c 43 6c 61 73 73 2c 72 29 2c 62 6f 64 79 4f 70 65 6e 43 6c 61 73 73 4e 61 6d 65 3a 67 2e 62 6f 64 79 4f 70 65 6e 43 6c 61 73 73 2c 6f 6e 41 66 74 65 72 4f 70 65 6e 3a 61 2c 6f 6e 52 65 71 75 65 73 74 43 6c 6f 73 65 3a 6f 2c 63 6f 6e 74 65 6e 74 4c 61 62 65 6c 3a 69 2c 72 6f 6c 65 3a 64 2c 73 68 6f 75 6c 64 46 6f 63 75 73 41 66 74 65 72 52 65 6e 64 65 72 3a 63 2c 73 68 6f 75 6c 64 43 6c 6f 73 65 4f 6e 4f 76 65 72 6c 61 79 43 6c 69 63 6b 3a 68 2c 73 68 6f 75 6c Data Ascii: ,{id:"sharedui-modal",isOpen:n,overlayClassName:(0,f.cx)(g.overlayClass,s),className:(0,f.cx)(g.modalClass,r),bodyOpenClassName:g.bodyOpenClass,onAfterOpen:a,onRequestClose:o,contentLabel:i,role:d,shouldFocusAfterRender:c,shouldCloseOnOverlayClick:h,shoul
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 61 74 69 6f 6e 43 6c 61 73 73 3d 74 2e 62 75 74 74 6f 6e 53 70 61 6e 43 6c 61 73 73 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 6e 28 22 4a 71 70 39 22 29 2c 73 3d 6f 28 6e 28 22 33 52 6b 32 22 29 29 2c 72 3d 6f 28 6e 28 22 77 58 43 37 22 29 29 2c 6c 3d 6e 28 22 33 73 4d 54 22 29 2c 69 3d 6e 28 22 6a 50 6e 39 22 29 2c 64 3d 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 5b 22 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 22 2c 72 2e 64 65 66 61 75 6c 74 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 73 6d 61 6c 6c 5d 29 2c 75 3d 28 30 2c 61 2e 63 73 73 29 28 22 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 72 2e 64 65 66 61 75 6c 74 2e 66 6f 6e 74 2e 73 65 72 69 66 42 61 73 65 2c 22 3b 66 6f 6e Data Ascii: ationClass=t.buttonSpanClass=void 0;var a=n("Jqp9"),s=o(n("3Rk2")),r=o(n("wXC7")),l=n("3sMT"),i=n("jPn9"),d=(0,s.default)(["@media (min-width: 480px)",r.default.breakpoint.small]),u=(0,a.css)("text-align:center;font-family:",r.default.font.serifBase,";fon
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 61 75 6c 74 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 37 29 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 22 2c 72 2e 64 65 66 61 75 6c 74 2e 66 6f 6e 74 2e 73 69 7a 65 28 32 35 29 2c 22 3b 7d 22 29 3b 74 2e 73 69 67 6e 75 70 4d 65 73 73 61 67 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 3d 70 3b 76 61 72 20 6d 3d 28 30 2c 61 2e 63 73 73 29 28 22 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 22 2c 64 28 7b 6d 61 72 67 69 6e 52 69 67 68 74 3a 5b 22 31 30 70 78 22 2c 6e 75 6c 6c 2c 22 32 30 70 78 22 5d 7d 29 29 3b 74 2e 73 69 67 6e 75 70 4d 65 73 73 61 67 65 43 6c 61 73 73 3d 6d 3b 76 61 72 20 76 3d 28 30 2c 61 2e 63 73 73 29 28 22 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 22 29 3b 74 2e 73 69 67 6e 75 70 4d Data Ascii: ault.font.size(17),";line-height:",r.default.font.size(25),";}");t.signupMessageContainerClass=p;var m=(0,a.css)("max-width:500px;text-align:left;",d({marginRight:["10px",null,"20px"]}));t.signupMessageClass=m;var v=(0,a.css)("text-align:left;");t.signupM
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 74 29 7b 69 66 28 21 74 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 61 28 65 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 7b 64 65 66 61 75 6c 74 3a 65 7d 3b 76 61 72 20 6e 3d 75 28 74 29 3b 69 66 28 6e 26 26 6e 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 6e 2e 67 65 74 28 65 29 3b 76 61 72 20 6f 3d 7b 7d 2c 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 72 26 26 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: t){if(!t&&e&&e.__esModule)return e;if(null===e\|\|"object"!==a(e)&&"function"!=typeof e)return{default:e};var n=u(t);if(n&&n.has(e))return n.get(e);var o={},s=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var r in e)if("default"!==r&&Object.pro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50186	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	635	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:49 UTC	172	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidate
2023-12-05 18:13:49 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50184	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	2388	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 1253 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad
2023-12-05 18:13:49 UTC	1253	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 66 43 50 6b 71 57 66 38 37 65 6f 4a 5f 76 6a 6a 38 71 6f 48 33 79 46 48 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 70 75 51 6c 6e 72 43 73 58 30 47 74 44 43 4a 79 4b 71 52 38 57 67 61 64 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6d 4f 35 5f 4f 53 4f 49 4c 62 49 59 70 44 62 36 79 74 7a 76 71 49 76 50 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 32 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 6c 69 72 65 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 5f 75 70 64 61 74 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 37 34 37 39 2c 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 Data Ascii: [{"context_id":"fCPkqWf87eoJ_vjj8qoH3yFH","pageview_id":"puQlnrCsX0GtDCJyKqR8Wgad","event_id":"mO5_OSOILbIYpDb6ytzvqIvP","client_lib":"v1.2.0","sourceApp":"nyt-lire","subject":"page_update","how":"beacon","client_ts":1701800027479,"data":{"user":{"type":"
2023-12-05 18:13:49 UTC	1404	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://myaccount.nytimes.comset-cookie:
2023-12-05 18:13:49 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50199	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	629	OUT	POST /report HTTP/1.1 Host: csp.dev.nytimes.com Connection: keep-alive Content-Length: 1779 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:49 UTC	1779	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 61 75 74 68 2f 69 66 72 61 6d 65 2f 65 6e 74 65 72 2d 65 6d 61 69 6c 3f 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 6f 6b 69 65 26 63 6c 69 65 6e 74 5f 69 64 3d 66 72 65 65 78 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 73 75 62 73 63 72 69 70 74 69 6f 6e 25 32 46 6f 6e 62 6f 61 72 64 69 6e 67 2d 6f 66 66 65 72 25 33 46 63 61 6d 70 61 69 67 6e 49 64 25 33 44 37 4a 46 4a 58 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 Data Ascii: {"csp-report":{"document-uri":"https://myaccount.nytimes.com/auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%25
2023-12-05 18:13:49 UTC	361	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 32 35 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 31 33 36 2d 49 41 44 0d 0a 58 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 425Server: VarnishRetry-After: 0Content-Type: text/html; charset=utf-8Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:49 GMTVia: 1.1 varnishX-Served-By: cache-iad-kiad7000136-IADX
2023-12-05 18:13:49 UTC	425	IN	Data Raw: 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 68 31 3e 45 72 72 6f 72 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html> <head> <title>403 Forbidden</title> </head> <body> <h1>Error 403 Forbidden</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50196	40.76.134.238	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2040D3C5B1-C944-4FD5-B1BE-0A313CAD2333&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:49 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 38 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: text/htmlContent-Length: 581Connection: close
2023-12-05 18:13:49 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50181	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	833	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:49 UTC	736	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9
2023-12-05 18:13:49 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50189	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	2185	OUT	GET /vi-assets/static-assets/emailsignup-f3ca1a7e06022030da1d.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:49 UTC	1331	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 34 30 34 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 42 71 4f 77 50 36 72 6b 4b 62 70 72 31 34 51 44 7a 63 46 48 41 74 65 70 67 4d 6e 38 4e 59 61 35 54 2d 38 61 66 69 71 59 6f 77 6d 47 4a 4e 47 5f 41 45 36 52 32 6c 65 57 67 67 30 51 4a 64 77 67 6b 37 33 35 63 69 73 67 33 74 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 38 30 30 35 35 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 194045X-GUploader-UploadID: ABPtcPpBqOwP6rkKbpr14QDzcFHAtepgMn8NYa5T-8afiqYowmGJNG_AE6R2leWgg0QJdwgk735cisg3tQx-goog-generation: 1701369734800550x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:49 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 5d 2c 7b 22 35 44 4e 75 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 63 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 29 2c 65 2e 64 28 63 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 2c 65 2e 64 28 63 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 29 29 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 69 65 6e 74 49 64 2c 65 3d 61 2e 6e 65 77 73 6c 65 74 74 65 72 4e 61 6d 65 2c 62 3d 61 2e 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[75],{"5DNu":function(a,c,e){"use strict";e.d(c,"a",(function(){return b})),e.d(c,"c",(function(){return n})),e.d(c,"b",(function(){return t}));var b=function(a){var c=a.clientId,e=a.newsletterName,b=a.p
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 38 65 61 62 31 39 39 65 2d 38 66 38 65 2d 34 35 35 37 2d 62 64 37 66 2d 38 66 31 38 31 36 39 66 33 34 32 63 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 39 31 31 61 39 37 35 65 2d 37 61 65 32 2d 34 33 30 32 2d 61 32 61 63 2d 34 61 33 61 39 35 30 32 66 62 66 66 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 35 38 65 31 33 30 35 66 2d 33 33 37 30 2d 34 64 64 37 2d 39 62 36 38 2d 35 65 37 34 61 66 65 65 35 64 36 38 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 34 31 66 63 62 34 32 38 2d 35 33 33 65 2d 34 32 32 66 2d 62 30 66 66 2d 66 32 66 30 37 34 33 32 39 66 62 62 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c Data Ascii: "nyt://followableplace/8eab199e-8f8e-4557-bd7f-8f18169f342c","nyt://followableplace/911a975e-7ae2-4302-a2ac-4a3a9502fbff","nyt://followableplace/58e1305f-3370-4dd7-9b68-5e74afee5d68","nyt://followableplace/41fcb428-533e-422f-b0ff-f2f074329fbb","nyt://foll
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 34 62 38 35 2d 35 38 63 61 2d 38 39 62 32 2d 34 30 38 63 37 31 31 65 37 37 65 33 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 65 61 35 62 35 61 66 64 2d 62 66 63 65 2d 35 63 32 37 2d 39 61 33 37 2d 66 65 66 62 31 37 33 63 31 39 38 32 22 5d 2c 22 73 75 62 50 6c 61 63 65 73 22 3a 5b 5d 2c 22 62 71 50 6c 61 63 65 53 74 72 69 6e 67 73 22 3a 5b 22 43 68 69 6c 65 22 5d 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 68 69 6e 61 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 31 64 63 34 64 62 39 38 2d 65 34 31 62 2d 34 62 33 61 2d 61 64 32 61 2d 39 37 35 39 33 61 30 65 66 65 64 33 22 2c 22 74 61 67 73 22 3a 5b 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 65 65 34 64 38 37 64 39 2d 66 38 34 62 2d Data Ascii: 4b85-58ca-89b2-408c711e77e3","nyt://location/ea5b5afd-bfce-5c27-9a37-fefb173c1982"],"subPlaces":[],"bqPlaceStrings":["Chile"]},{"displayName":"China","uri":"nyt://followableplace/1dc4db98-e41b-4b3a-ad2a-97593a0efed3","tags":["nyt://location/ee4d87d9-f84b-
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 36 65 66 2d 63 66 62 33 35 36 34 63 33 36 32 37 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 37 65 38 30 38 30 62 64 2d 37 35 35 63 2d 34 63 63 30 2d 61 61 66 34 2d 62 64 64 63 65 65 39 35 32 32 33 61 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 30 65 33 32 66 66 66 64 2d 34 65 36 39 2d 34 65 36 39 2d 62 34 32 63 2d 31 38 30 38 66 35 31 39 31 30 65 36 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 38 32 32 37 61 30 37 62 2d 34 64 66 36 2d 34 64 36 31 2d 62 30 38 62 2d 65 62 61 33 34 35 37 64 31 32 33 37 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 35 63 39 65 33 65 64 31 2d 34 61 35 35 2d 34 66 64 33 2d 38 66 36 62 2d 39 35 63 38 34 65 35 Data Ascii: 6ef-cfb3564c3627","nyt://followableplace/7e8080bd-755c-4cc0-aaf4-bddcee95223a","nyt://followableplace/0e32fffd-4e69-4e69-b42c-1808f51910e6","nyt://followableplace/8227a07b-4df6-4d61-b08b-eba3457d1237","nyt://followableplace/5c9e3ed1-4a55-4fd3-8f6b-95c84e5
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 63 61 66 31 65 32 32 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 31 37 37 37 35 32 36 62 2d 66 31 65 61 2d 35 39 62 63 2d 38 37 62 62 2d 61 32 30 31 66 31 66 31 62 62 64 62 22 2c 22 6e 79 74 3a 2f 2f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2f 37 61 61 36 36 65 63 31 2d 36 38 31 64 2d 35 66 63 62 2d 61 36 36 38 2d 61 61 31 37 32 36 38 30 30 39 32 30 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 38 61 65 35 34 34 30 38 2d 33 62 37 31 2d 35 36 38 33 2d 39 61 38 38 2d 35 35 66 37 39 38 65 63 61 66 62 37 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 36 39 39 61 31 39 31 32 2d 35 66 35 39 2d 35 62 32 36 2d 61 37 36 33 2d 66 66 31 37 39 39 35 35 37 31 64 37 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 61 62 65 31 33 34 63 34 2d 30 Data Ascii: caf1e22","nyt://location/1777526b-f1ea-59bc-87bb-a201f1f1bbdb","nyt://organization/7aa66ec1-681d-5fcb-a668-aa1726800920","nyt://location/8ae54408-3b71-5683-9a88-55f798ecafb7","nyt://location/699a1912-5f59-5b26-a763-ff17995571d7","nyt://location/abe134c4-0
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 34 35 62 37 2d 64 35 35 62 2d 35 39 33 62 2d 39 32 65 33 2d 64 39 33 33 31 31 64 63 32 62 34 65 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 37 38 38 34 65 32 63 62 2d 65 32 39 38 2d 35 63 39 36 2d 39 38 33 65 2d 31 35 65 63 36 61 37 65 39 32 62 39 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 34 31 34 37 32 39 64 65 2d 63 37 31 33 2d 35 65 65 61 2d 62 36 38 32 2d 61 38 61 31 31 39 37 34 33 64 31 62 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 63 32 65 62 31 61 61 65 2d 33 31 62 63 2d 35 34 39 63 2d 38 37 62 62 2d 37 66 38 36 39 31 30 62 35 35 34 31 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 64 34 33 61 64 39 38 32 2d 33 66 36 34 2d 35 63 66 38 2d 62 64 31 63 2d 66 35 34 61 34 32 31 38 62 36 65 33 22 2c 22 6e 79 74 3a Data Ascii: 45b7-d55b-593b-92e3-d93311dc2b4e","nyt://location/7884e2cb-e298-5c96-983e-15ec6a7e92b9","nyt://location/414729de-c713-5eea-b682-a8a119743d1b","nyt://location/c2eb1aae-31bc-549c-87bb-7f86910b5541","nyt://location/d43ad982-3f64-5cf8-bd1c-f54a4218b6e3","nyt:
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 37 36 2d 64 64 31 63 2d 35 61 34 32 2d 39 66 32 31 2d 37 63 38 65 61 62 64 64 39 31 36 32 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 38 32 64 35 64 64 36 35 2d 34 35 61 64 2d 35 39 35 66 2d 38 30 31 35 2d 38 32 35 38 33 63 33 31 64 38 35 63 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 30 30 64 31 39 34 38 65 2d 35 62 65 64 2d 35 64 34 38 2d 62 63 32 37 2d 61 64 38 31 30 38 66 65 66 34 39 61 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 37 64 38 36 36 61 37 63 2d 64 30 38 32 2d 35 34 39 31 2d 39 33 62 63 2d 30 31 64 36 65 63 33 38 34 30 66 33 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 61 37 31 36 38 33 34 63 2d 62 65 33 63 2d 35 63 34 61 2d 39 62 33 66 2d 61 37 66 33 61 38 30 35 30 61 36 39 22 2c 22 6e 79 74 3a 2f 2f Data Ascii: 76-dd1c-5a42-9f21-7c8eabdd9162","nyt://location/82d5dd65-45ad-595f-8015-82583c31d85c","nyt://location/00d1948e-5bed-5d48-bc27-ad8108fef49a","nyt://location/7d866a7c-d082-5491-93bc-01d6ec3840f3","nyt://location/a716834c-be3c-5c4a-9b3f-a7f3a8050a69","nyt://
2023-12-05 18:13:49 UTC	16384	IN	Data Raw: 30 30 36 65 33 39 32 31 30 38 37 31 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 36 63 39 66 66 65 64 61 2d 38 37 66 32 2d 35 39 30 31 2d 38 62 34 34 2d 65 30 61 39 31 61 30 62 63 34 39 64 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 39 32 32 33 37 64 39 61 2d 61 31 30 32 2d 35 33 38 37 2d 38 65 30 33 2d 63 35 64 62 66 39 35 63 30 38 31 30 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 61 30 32 66 31 62 65 37 2d 32 66 61 33 2d 35 61 61 39 2d 39 63 37 38 2d 33 32 62 31 64 39 32 34 61 61 30 31 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 64 36 61 62 33 63 62 62 2d 30 64 64 65 2d 35 36 33 65 2d 38 64 61 38 2d 31 32 30 38 62 33 32 30 33 62 34 66 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 33 61 39 62 65 34 34 31 2d Data Ascii: 006e39210871","nyt://location/6c9ffeda-87f2-5901-8b44-e0a91a0bc49d","nyt://location/92237d9a-a102-5387-8e03-c5dbf95c0810","nyt://location/a02f1be7-2fa3-5aa9-9c78-32b1d924aa01","nyt://location/d6ab3cbb-0dde-563e-8da8-1208b3203b4f","nyt://location/3a9be441-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50208	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	1553	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:49 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:49 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50209	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	720	OUT	GET /crum?cm_dsp_id=111&external_user_id=7523681944929849834&expiration=1703009624 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:49 UTC	989	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 65 37 64 39 61 36 30 36 32 38 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43e7d9a60628-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50207	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	958	OUT	GET /ads/adplatforms/cdn/Baymax-1.2.2.js HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:49 UTC	1109	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 34 38 37 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 62 46 4f 79 30 64 4e 37 71 38 51 39 4e 4c 68 31 4c 4e 72 39 61 66 52 6e 37 6a 57 73 4a 6d 6b 56 71 57 44 31 6f 32 62 67 4d 39 68 79 6f 63 68 55 32 59 6e 68 4d 47 62 2d 75 79 73 52 50 79 37 4a 42 77 52 58 78 37 70 58 4d 68 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 34872X-GUploader-UploadID: ABPtcPpbFOy0dN7q8Q9NLh1LNr9afRn7jWsJmkVqWD1o2bgM9hyochU2YnhMGb-uysRPy7JBwRXx7pXMhACache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicEx
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 2f 2a 20 3a 3a 3a 20 42 41 59 4d 41 58 20 4d 65 64 69 61 20 50 6c 61 79 65 72 20 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 2f 2a 20 3a 3a 3a 20 76 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 38 20 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 2f 2a 20 3a 3a 3a 20 64 65 76 65 6c 6f 70 65 72 3a 20 54 61 6e 76 69 72 20 48 61 69 64 65 72 20 3a 3a 3a 20 2a 2f 0a 0a 2f 2f 63 6f 6e 73 74 20 7b 20 48 6c 73 20 7d 20 3d 20 72 65 71 75 69 72 65 28 22 2e 2f 48 4c 53 22 29 3b 0a 0a 0a 63 6c 61 73 73 20 4d 65 64 69 61 20 7b 0a 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 28 64 61 74 61 29 20 7b 0a 0a 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 76 69 64 65 6f 20 63 72 65 61 Data Ascii: /* ::: BAYMAX Media Player :::::::: // ::: version: 1.0.8 :::::::::::: // ::: developer: Tanvir Haider ::: *///const { Hls } = require("./HLS");class Media { constructor (data) { //console.log("video crea
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 2f 75 73 65 72 2d 69 6e 74 65 72 66 61 63 65 2d 65 6c 65 6d 65 6e 74 73 2f 76 69 64 65 6f 2d 69 63 6f 6e 73 2f 61 75 64 69 6f 2d 6f 66 66 2e 73 76 67 22 3b 0a 20 20 20 20 6c 65 74 20 67 65 6e 65 72 69 63 46 75 6c 6c 73 63 72 65 65 6e 42 75 74 74 6f 6e 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 61 64 73 2f 61 64 70 6c 61 74 66 6f 72 6d 73 2f 75 73 65 72 2d 69 6e 74 65 72 66 61 63 65 2d 65 6c 65 6d 65 6e 74 73 2f 76 69 64 65 6f 2d 69 63 6f 6e 73 2f 66 75 6c 6c 73 63 72 65 65 6e 2d 6f 6e 2e 73 76 67 22 3b 0a 20 20 20 20 6c 65 74 20 67 65 6e 65 72 69 63 46 75 6c 6c 73 63 72 65 65 6e 43 6c 6f 73 65 42 75 74 74 6f 6e 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 69 6d 65 73 2e 63 Data Ascii: /user-interface-elements/video-icons/audio-off.svg"; let genericFullscreenButton = "https://static01.nytimes.com/ads/adplatforms/user-interface-elements/video-icons/fullscreen-on.svg"; let genericFullscreenCloseButton = "https://static01.nytimes.c
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 29 3b 0a 20 20 20 20 6c 65 74 20 74 65 6d 70 4d 65 64 69 61 50 6c 61 79 65 72 20 3d 20 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 76 69 64 65 6f 27 29 3b 0a 20 20 20 20 53 63 6f 70 65 2e 6d 65 64 69 61 50 61 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 20 3d 20 6d 65 64 69 61 50 61 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 3b 0a 0a 20 20 20 20 74 65 6d 70 4d 65 64 69 61 50 6c 61 79 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 77 65 62 6b 69 74 2d 70 6c 61 79 73 69 6e 6c 69 6e 65 27 2c 20 27 27 29 3b 0a 20 20 20 20 74 65 6d 70 4d 65 64 69 61 50 6c 61 79 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 70 6c 61 79 73 69 6e 6c 69 6e 65 27 2c 20 27 27 29 3b 0a 20 20 20 20 74 65 6d 70 4d 65 64 69 61 50 6c 61 79 65 72 2e 73 65 74 Data Ascii: ); let tempMediaPlayer = document.createElement('video'); Scope.mediaParentContainer = mediaParentContainer; tempMediaPlayer.setAttribute('webkit-playsinline', ''); tempMediaPlayer.setAttribute('playsinline', ''); tempMediaPlayer.set
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6f 66 20 64 61 74 61 2e 70 6c 61 79 62 75 74 74 6f 6e 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 4d 65 64 69 61 50 6c 61 79 42 75 74 74 6f 6e 20 3d 20 53 63 6f 70 65 2e 4d 61 6b 65 45 6c 65 6d 65 6e 74 73 20 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 64 69 76 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 22 3a 20 22 76 69 64 65 6f 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 61 73 73 22 3a 20 22 64 65 66 61 75 6c 74 2d 70 6c 61 79 2d 62 75 74 74 6f 6d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 64 69 61 50 61 72 65 6e 74 43 6f 6e 74 61 69 Data Ascii: of data.playbutton === 'string') { MediaPlayButton = Scope.MakeElements ({ "type": "div", "id": "video-play-button", "class": "default-play-buttom" }); mediaParentContai
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6f 70 65 2e 41 73 73 69 67 6e 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 28 4d 65 64 69 61 50 61 75 73 65 42 75 74 74 6f 6e 2c 20 64 61 74 61 2e 70 61 75 73 65 62 75 74 74 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 65 6c 73 65 20 7b 0a 0a 20 20 20 20 20 20 20 20 4d 65 64 69 61 50 61 75 73 65 42 75 74 74 6f 6e 20 3d 20 53 63 6f 70 65 2e 4d 61 6b 65 45 6c 65 6d 65 6e 74 73 20 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 64 69 76 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 22 3a 20 22 76 69 64 65 6f 2d 70 61 75 73 65 2d 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 63 6c 61 73 73 22 3a 20 22 64 65 66 61 75 6c 74 2d 70 61 75 73 65 2d 62 75 74 74 6f 6d 22 0a 20 20 20 Data Ascii: ope.AssignBackgroundImage (MediaPauseButton, data.pausebutton); } } else { MediaPauseButton = Scope.MakeElements ({ "type": "div", "id": "video-pause-button", "class": "default-pause-buttom"
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6e 64 43 68 69 6c 64 28 4d 65 64 69 61 4d 75 74 65 42 75 74 74 6f 6e 29 3b 20 0a 20 20 20 20 20 20 20 20 53 63 6f 70 65 2e 41 73 73 69 67 6e 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 28 4d 65 64 69 61 4d 75 74 65 42 75 74 74 6f 6e 2c 20 67 65 6e 65 72 69 63 4d 75 74 65 42 75 74 74 6f 6e 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 53 63 6f 70 65 2e 4d 65 64 69 61 4d 75 74 65 42 75 74 74 6f 6e 20 3d 20 4d 65 64 69 61 4d 75 74 65 42 75 74 74 6f 6e 3b 0a 20 20 20 20 4d 65 64 69 61 4d 75 74 65 42 75 74 74 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 53 63 6f 70 65 2e 4d 75 74 65 56 69 64 65 6f 28 29 3b 0a 20 20 20 20 20 20 20 20 6d 65 64 69 61 50 61 72 Data Ascii: ndChild(MediaMuteButton); Scope.AssignBackgroundImage (MediaMuteButton, genericMuteButton); } Scope.MediaMuteButton = MediaMuteButton; MediaMuteButton.addEventListener('click', function() { Scope.MuteVideo(); mediaPar
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 65 2d 62 75 74 74 6f 6d 22 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 0a 20 20 20 20 20 20 20 20 6d 65 64 69 61 50 61 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 4d 65 64 69 61 55 6e 4d 75 74 65 42 75 74 74 6f 6e 29 3b 20 0a 20 20 20 20 20 20 20 20 53 63 6f 70 65 2e 41 73 73 69 67 6e 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 20 28 4d 65 64 69 61 55 6e 4d 75 74 65 42 75 74 74 6f 6e 2c 20 67 65 6e 65 72 69 63 55 6e 4d 75 74 65 42 75 74 74 6f 6e 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 53 63 6f 70 65 2e 4d 65 64 69 61 55 6e 4d 75 74 65 42 75 74 74 6f 6e 20 3d 20 4d 65 64 69 61 55 6e 4d 75 74 65 42 75 74 74 6f 6e 3b 0a 20 20 20 20 4d 65 64 69 61 55 6e 4d 75 74 65 42 75 74 74 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: e-buttom" }); mediaParentContainer.appendChild(MediaUnMuteButton); Scope.AssignBackgroundImage (MediaUnMuteButton, genericUnMuteButton); } Scope.MediaUnMuteButton = MediaUnMuteButton; MediaUnMuteButton.addEventListe
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 48 4c 53 73 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 48 4c 53 70 6c 61 79 61 20 3d 20 6e 65 77 20 48 6c 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 4c 6f 61 64 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 66 69 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 6c 6f 61 64 65 72 20 3d 20 6e 65 77 20 48 6c 73 2e 44 65 66 61 75 6c 74 43 6f 6e 66 69 67 2e 6c 6f Data Ascii: HLSscript.onload = function () { window.HLSplaya = new Hls({ /* pLoader: function (config) { let loader = new Hls.DefaultConfig.lo
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 28 22 3a 3a 48 4c 53 20 64 65 74 65 74 61 69 6c 73 3a 3a 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 64 65 62 75 67 28 48 6c 73 2e 76 65 72 73 69 6f 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 64 65 62 75 67 28 22 6c 61 74 65 6e 63 79 3a 20 22 2c 48 6c 73 2e 6c 61 74 65 6e 63 79 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 Data Ascii: */ }); console.group("::HLS detetails::"); console.debug(Hls.version); console.debug("latency: ",Hls.latency); c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50200	52.95.125.22	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	695	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:49 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 48 56 30 5a 47 46 46 5a 54 31 35 39 33 50 51 45 5a 36 45 56 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: HV0ZGFFZT1593PQEZ6EVSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50217	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	736	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFBTTlM5VFgtMS1CVDgy HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:49 UTC	679	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 67 6f Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&go
2023-12-05 18:13:49 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 48 69 52 76 7a 53 6a 62 30 66 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&google_gid=CAESEHiRvzSjb0f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50210	35.71.131.137	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	937	OUT	GET /track/cmf/appnexus?ttd=1&anid=3114214532401325210&ttd_tdid=3a743bef-66ee-4af3-a0ea-a4634a63b535 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCOrmg_PEv688EAUYBSABKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIIYXBwbmV4dXM.
2023-12-05 18:13:49 UTC	771	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 5f 6f 72 69 67 69 6e 3d 31 26 72 65 64 69 72 3d 74 72 75 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Length: 311Connection: closeserver: Kestrellocation: https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&r
2023-12-05 18:13:49 UTC	311	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 5f 6f 72 69 67 69 6e 3d 31 26 72 65 64 69 72 3d 74 72 75 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 72 65 64 69 72 3d 74 72 75 65 22 3e 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 35 39 35 33 2f 73 79 6e 63 3f 75 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 Data Ascii: Redirecting to: <a href="https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true">https://ups.analytics.yahoo.com/ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50212	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	998	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; pi=163427:3; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
2023-12-05 18:13:49 UTC	986	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 75 6d 2e 73 69 6d 70 6c 69 2e 66 69 2f 70 75 62 6d 61 74 69 63 3f 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4f 44 41 32 4a 6e 52 73 50 54 55 78 4f 44 51 77 4d 41 3d 3d 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 75 69 64 3a 24 55 49 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Location: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=P3p: CP="NO
2023-12-05 18:13:49 UTC	207	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6d 2e 73 69 6d 70 6c 69 2e 66 69 2f 70 75 62 6d 61 74 69 63 3f 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4f 44 41 32 4a 6e 52 73 50 54 55 78 4f 44 51 77 4d 41 3d 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 75 69 64 3a 24 55 49 44 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50218	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	697	OUT	GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:49 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 34 31 45 37 4e 4a 33 45 50 56 59 39 37 32 31 36 54 4e 39 53 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 41E7NJ3EPVY97216TN9SCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50216	104.36.115.113	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	1012	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=3396806&p=156011&s=165626&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
2023-12-05 18:13:49 UTC	904	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 41 44 55 53 45 52 43 4f 4f 4b 49 45 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 3b 20 64 6f 6d 61 69 6e 3d 70 75 Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=UTF-8P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; domain=pu
2023-12-05 18:13:49 UTC	1587	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 Data Ascii: PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD233

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50215	34.111.113.62	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	749	OUT	GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7
2023-12-05 18:13:49 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 0d 0a 41 63 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:49 GMTStrict-Transport-Security: max-age=31536000Access-Control-Allow-Origin: *Accept-CH: Sec-CH-UAAccept-CH: Sec-CH-UA-ArchAccept-CH: Sec-CH-UA-BitnessAccept-CH: Sec-CH-UA-Full-Version-ListAc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50213	54.86.106.102	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	708	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQ HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
2023-12-05 18:13:49 UTC	226	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 52 65 71 75 65 73 74 2d 54 69 6d 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Type: image/gifContent-Length: 43Connection: closeRequest-Time: 0Cache-Control: no-storeStrict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-05 18:13:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50221	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	765	OUT	GET /pixel?google_nid=rubicon&google_hm=Mjk2ODgyNTJiY2IwMzNjMjdiYzlmNGYzOTNkNGI4ZTMxZjc2YzhjZA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:49 UTC	374	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 48 54 54 50 20 73 65 72 76 65 72 20 28 75 6e 6b 6e 6f 77 6e 29 0d 0a 43 Data Ascii: HTTP/1.1 200 OKContent-Type: image/pngDate: Tue, 05 Dec 2023 18:13:49 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidateCross-Origin-Resource-Policy: cross-originServer: HTTP server (unknown)C
2023-12-05 18:13:49 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50222	34.200.65.202	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	854	OUT	GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
2023-12-05 18:13:49 UTC	793	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:49 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50225	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	2086	OUT	GET /vi-assets/static-assets/182-fce11dfd2749a3f8ba8b.js?_sw-precache=34da22edff8c2fcf0bc998311790f858 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:49 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 31 32 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 75 62 75 68 79 6b 45 79 6d 56 74 36 50 58 43 52 65 74 57 50 59 65 6c 35 54 51 78 77 79 69 7a 53 4c 38 56 6b 6b 43 58 56 64 78 64 53 76 68 50 4f 42 59 54 7a 77 54 42 5f 35 67 57 4a 4c 34 64 4c 4d 77 72 4d 68 68 77 79 67 4b 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 37 35 39 31 37 30 35 34 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 21128X-GUploader-UploadID: ABPtcPoubuhykEymVt6PXCRetWPYel5TQxwyizSL8VkkCXVdxdSvhPOBYTzwTB_5gWJL4dLMwrMhhwygKgx-goog-generation: 1701718759170549x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:49 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 32 5d 2c 7b 22 2b 33 4d 34 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[182],{"+3M4":function(e,t,n){"use strict";n.d(t,"f",(function(){return l})),n.d(t,"g",(function(){return g})),n.d(t,"a",(function(){return m})),n.d(t,"e",(function(){return f})),n.d(t,"d",(function(){re
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 6e 74 65 78 74 28 7b 73 65 74 55 73 65 72 50 72 6f 66 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 7d 7d 29 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 67 65 43 6f 6e 74 65 6e 74 4d 61 78 57 69 64 74 68 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 4f 62 6a 65 63 74 28 63 2e 75 73 65 43 6f 6e 74 65 78 74 29 28 67 2e 62 29 2c 69 3d 4f 62 6a 65 63 74 28 63 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 64 3d 75 28 29 28 69 2c 32 29 2c 6d 3d 64 5b 30 5d 2c 70 3d 64 5b 31 5d 2c 54 3d 4f 62 6a 65 63 74 28 63 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 4f 3d 75 28 29 28 54 2c 32 29 2c 41 3d 4f 5b 30 5d 2c 53 3d 4f 5b 31 5d 3b 4f 62 6a 65 63 74 28 63 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ntext({setUserProfile:function(e){}}),T=function(e){var t=e.pageContentMaxWidth,n=e.children,o=Object(c.useContext)(g.b),i=Object(c.useState)(null),d=u()(i,2),m=d[0],p=d[1],T=Object(c.useState)(null),O=u()(T,2),A=O[0],S=O[1];Object(c.useEffect)((function(
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 76 61 72 20 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 67 65 43 6f 6e 74 65 6e 74 4d 61 78 57 69 64 74 68 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 64 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 73 28 29 28 6d 2e 61 2c 7b 70 75 72 72 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 70 2e 61 2e 50 55 52 52 5f 45 4e 56 49 52 4f 4e 4d 45 4e 54 7d 29 2c 73 28 29 28 54 2c 7b 70 61 67 65 43 6f 6e 74 65 6e 74 4d 61 78 57 69 64 74 68 3a 74 7d 2c 76 6f 69 64 20 30 2c 6e 29 29 7d 7d 2c 22 34 67 43 66 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 61 3d 6e 28 22 67 63 52 2f 22 29 2c 6f 3d 6e 2e 6e 28 61 29 Data Ascii: var O=function(e){var t=e.pageContentMaxWidth,n=e.children;return d.a.createElement(d.a.Fragment,null,s()(m.a,{purrEnvironment:p.a.PURR_ENVIRONMENT}),s()(T,{pageContentMaxWidth:t},void 0,n))}},"4gCf":function(e,t,n){"use strict";var r,a=n("gcR/"),o=n.n(a)
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 74 68 45 72 72 6f 72 49 6e 76 61 6c 69 64 43 75 72 72 65 6e 74 50 61 73 73 77 6f 72 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 75 74 68 45 72 72 6f 72 50 61 73 73 77 6f 72 64 4c 65 6e 67 74 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 75 74 68 45 72 72 6f 72 50 61 73 73 77 6f 72 64 50 61 72 61 6d 65 74 65 72 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 29 29 2c 6e 2e 64 28 74 2c 22 74 6f 61 73 74 4d 65 73 73 61 67 65 50 61 73 73 77 6f 72 64 55 70 64 61 74 65 45 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 68 61 6e 67 65 50 61 73 73 77 6f 72 Data Ascii: thErrorInvalidCurrentPassword",(function(){return h})),n.d(t,"authErrorPasswordLength",(function(){return w})),n.d(t,"authErrorPasswordParameters",(function(){return v})),n.d(t,"toastMessagePasswordUpdateError",(function(){return P})),n.d(t,"changePasswor
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 63 6f 6e 74 61 69 6e 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d 62 65 72 73 2c 20 68 79 70 68 65 6e 73 2c 20 70 65 72 69 6f 64 73 20 61 6e 64 20 75 6e 64 65 72 73 63 6f 72 65 73 2e 22 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 63 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 61 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 27 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 27 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 73 6f 6f 6e 2c 20 6f 72 22 2c 22 20 22 2c 74 2c 22 20 66 6f 72 20 69 6d 6d 65 64 69 61 74 65 20 61 73 73 69 73 74 61 6e 63 65 2e 22 29 Data Ascii: contain letters, numbers, hyphens, periods and underscores.",P=function(e){var t=e.ccLink;return a.a.createElement(a.a.Fragment,null,"We're sorry, but we're having a technical issue right now. Please try again soon, or"," ",t," for immediate assistance.")
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 75 3d 22 54 72 79 20 61 67 61 69 6e 20 73 6f 6f 6e 22 2c 63 3d 22 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 22 2c 22 20 22 2c 61 28 29 28 22 61 22 2c 7b 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 68 72 65 66 3a 69 2e 43 41 52 45 5f 50 41 47 45 5f 4c 49 4e 4b 2c 72 65 6c 3a 22 6e 6f 6f 70 65 6e 65 72 22 7d 2c 76 6f 69 64 20 30 2c 22 43 75 73 74 6f 6d Data Ascii: u="Try again soon",c="Page not found",d=function(){return s.a.createElement(s.a.Fragment,null,"Were sorry, but were having a technical issue right now. Please contact"," ",a()("a",{target:"_blank",href:i.CARE_PAGE_LINK,rel:"noopener"},void 0,"Custom
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 61 6e 74 20 74 6f 20 6c 6f 73 65 20 79 6f 75 2e 22 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 63 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 73 6f 6f 6e 2c 20 6f 72 20 22 2c 74 2c 22 20 66 6f 72 20 69 6d 6d 65 64 69 61 74 65 20 61 73 73 69 73 74 61 6e 63 65 2e 22 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 Data Ascii: ant to lose you.",h=function(e){var t=e.ccLink;return s.a.createElement(s.a.Fragment,null,"Please try again soon, or ",t," for immediate assistance.")},w=function(){return s.a.createElement(s.a.Fragment,null,"Were sorry, but were having a technical
2023-12-05 18:13:49 UTC	1379	IN	Data Raw: 76 6f 69 64 20 30 2c 67 28 29 28 62 2e 6d 2c 7b 74 79 70 65 53 74 79 6c 65 3a 62 2e 5a 2e 64 69 73 70 6c 61 79 32 2c 68 65 61 64 65 72 4c 65 76 65 6c 3a 22 32 22 7d 2c 76 6f 69 64 20 30 2c 61 7c 7c 28 61 3d 67 28 29 28 68 2e 61 2c 7b 63 6f 70 79 3a 45 2e 67 6c 6f 62 61 6c 54 69 74 6c 65 45 72 72 6f 72 50 61 67 65 54 69 74 6c 65 41 6c 6c 7d 29 29 29 2c 6f 7c 7c 28 6f 3d 67 28 29 28 62 2e 48 2c 7b 73 70 61 63 65 3a 22 34 22 7d 29 29 2c 67 28 29 28 79 2e 61 2c 7b 7d 2c 76 6f 69 64 20 30 2c 67 28 29 28 62 2e 6d 2c 7b 74 79 70 65 53 74 79 6c 65 3a 62 2e 5a 2e 74 69 74 6c 65 31 2c 68 65 61 64 65 72 4c 65 76 65 6c 3a 22 33 22 7d 2c 76 6f 69 64 20 30 2c 73 7c 7c 28 73 3d 67 28 29 28 68 2e 61 2c 7b 63 6f 70 79 3a 45 2e 67 6c 6f 62 61 6c 45 72 72 6f 72 45 72 72 6f Data Ascii: void 0,g()(b.m,{typeStyle:b.Z.display2,headerLevel:"2"},void 0,a\|\|(a=g()(h.a,{copy:E.globalTitleErrorPageTitleAll}))),o\|\|(o=g()(b.H,{space:"4"})),g()(y.a,{},void 0,g()(b.m,{typeStyle:b.Z.title1,headerLevel:"3"},void 0,s\|\|(s=g()(h.a,{copy:E.globalErrorErro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50224	162.248.18.34	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:49 UTC	1009	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; pi=163427:3; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
2023-12-05 18:13:50 UTC	408	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 53 50 75 67 54 3d 31 37 30 31 38 30 30 30 33 30 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 2d 4a 61 6e 2d 32 30 32 34 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 3b 20 70 61 74 68 3d 2f 0d 0a 50 33 50 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Tue, 05 Dec 2023 18:13:50 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: SPugT=1701800030; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 04-Jan-2024 18:13:50 GMT; path=/P3P: CP="NOI DSP C
2023-12-05 18:13:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50228	162.248.18.37	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1052	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
2023-12-05 18:13:50 UTC	829	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 33 37 37 3d 36 38 31 30 2d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 4b 52 54 42 26 32 32 39 31 38 2d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 4b 52 54 42 26 32 32 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:50 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22
2023-12-05 18:13:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50229	8.28.7.83	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1030	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:62D0F5E82D1A4ED6B3E32459FF4A59CA HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
2023-12-05 18:13:50 UTC	836	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 38 3a 35 39 3a 30 30 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 31 34 38 3d 31 39 34 32 31 2d 75 69 64 3a 36 32 44 30 46 35 45 38 32 44 31 41 34 45 44 36 42 33 45 33 32 34 35 39 46 46 34 41 35 39 43 41 26 4b 52 54 42 26 32 33 34 38 36 2d 75 69 64 3a 36 32 44 30 46 35 45 38 32 44 31 41 34 45 44 36 42 33 45 33 32 34 35 39 46 46 34 41 35 39 43 41 26 4b 52 54 42 26 32 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 08:59:00 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&2
2023-12-05 18:13:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50226	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	2086	OUT	GET /vi-assets/static-assets/183-58962d469cec4df94955.js?_sw-precache=fa04218e01f03f0aff1de4d78a63b400 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:50 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 37 33 38 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 63 78 63 53 49 31 39 54 41 4d 67 56 77 61 58 77 36 74 72 5a 43 74 32 79 6f 64 56 77 57 67 33 63 6f 46 53 77 44 51 59 4c 6a 6f 47 38 56 76 79 37 43 37 71 5a 4b 6e 53 79 43 38 2d 78 32 77 41 64 31 50 35 42 4e 61 63 68 51 58 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 34 31 36 32 36 38 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 77381X-GUploader-UploadID: ABPtcPqcxcSI19TAMgVwaXw6trZCt2yodVwWg3coFSwDQYLjoG8Vvy7C7qZKnSyC8-x2wAd1P5BNachQXQx-goog-generation: 1701718545416268x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:50 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 33 5d 2c 7b 22 32 50 37 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 72 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 2c 72 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 29 3b 76 61 72 20 6e 2c 69 2c 61 3d 72 28 22 67 63 52 2f 22 29 2c 6f 3d 72 2e 6e 28 61 29 2c 63 3d 72 28 22 4a 34 7a 70 22 29 2c 73 3d 72 2e 6e 28 63 29 2c 75 3d 72 28 22 71 31 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[183],{"2P7h":function(e,t,r){"use strict";r.d(t,"b",(function(){return T})),r.d(t,"c",(function(){return O})),r.d(t,"a",(function(){return N}));var n,i,a=r("gcR/"),o=r.n(a),c=r("J4zp"),s=r.n(c),u=r("q1t
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 22 22 3b 61 2e 64 69 73 70 6c 61 79 43 75 73 74 6f 6d 4d 6f 64 61 6c 43 6f 6d 70 6f 6e 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 29 28 67 2e 61 2c 7b 72 6f 6f 74 45 6c 65 6d 65 6e 74 52 65 66 3a 74 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2c 6f 6e 43 6c 6f 73 65 3a 61 2e 63 6c 6f 73 65 44 69 61 6c 6f 67 2c 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 3a 6f 28 29 28 68 2e 61 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 75 73 65 72 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6e 61 76 2d 6d 65 6e 75 22 2c 6f 6e 52 6f 75 74 65 72 55 70 64 61 74 65 3a 6b 2c 63 75 72 72 65 6e 74 50 61 74 68 3a 22 22 2c 6e 61 76 49 74 65 6d 73 3a 45 2c 74 72 61 63 6b 69 6e 67 43 6f 6e 74 65 78 74 3a 7b 6d 6f 64 75 6c 65 4e Data Ascii: splayName)\|\|"";a.displayCustomModalComponent((function(t){return o()(g.a,{rootElementRef:t,displayName:e,onClose:a.closeDialog,navigationMenu:o()(h.a,{dataTestId:"user-drop-down-nav-menu",onRouterUpdate:k,currentPath:"",navItems:E,trackingContext:{moduleN
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 29 2c 61 3d 72 2e 6e 28 69 29 2c 6f 3d 28 72 28 22 71 31 74 49 22 29 2c 72 28 22 4d 53 68 47 22 29 29 2c 63 3d 72 28 22 2f 45 66 6c 22 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 6e 43 6c 69 63 6b 3b 72 65 74 75 72 6e 20 61 28 29 28 6f 2e 78 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 63 75 73 74 6f 6d 65 72 2d 63 61 72 65 2d 6c 69 6e 6b 22 2c 74 6f 3a 63 2e 62 2e 43 4f 4e 54 41 43 54 5f 55 53 5f 4c 49 4e 4b 2c 74 61 72 67 65 74 54 61 62 3a 6f 2e 64 62 2e 6e 65 77 54 61 62 2c 6f 6e 43 6c 69 63 6b 3a 74 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 6f 2e 4e 2e 74 65 78 74 2e 69 6e 74 65 72 61 63 74 69 76 65 49 6e 6c 69 6e 65 7d 2c 76 6f 69 64 20 30 2c 6e 7c 7c 28 6e 3d 61 28 29 28 63 2e 61 2c 7b 63 6f 70 79 3a 22 63 6f 6e 74 61 63 Data Ascii: ),a=r.n(i),o=(r("q1tI"),r("MShG")),c=r("/Efl"),s=function(e){var t=e.onClick;return a()(o.x,{dataTestId:"customer-care-link",to:c.b.CONTACT_US_LINK,targetTab:o.db.newTab,onClick:t,colorVariant:o.N.text.interactiveInline},void 0,n\|\|(n=a()(c.a,{copy:"contac
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 68 62 5b 2e 35 5d 2c 22 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 61 75 74 6f 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 22 2c 76 2e 68 62 5b 31 2e 35 5d 2c 22 3b 70 61 64 64 69 6e 67 3a 22 2c 76 2e 68 62 5b 33 5d 2c 22 20 22 2c 76 2e 68 62 5b 32 5d 2c 22 20 22 2c 76 2e 68 62 5b 33 5d 2c 22 20 22 2c 76 2e 68 62 5b 32 5d 2c 22 3b 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 76 2e 49 2e 4d 45 44 49 55 4d 2c 22 29 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 61 75 74 6f 20 22 2c 22 31 36 30 70 78 22 2c 22 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 22 2c 76 2e 68 62 5b 31 5d 2c 22 3b 7d 22 29 2c 52 3d 4f 62 6a 65 63 74 28 6b 2e 64 29 28 22 64 69 76 Data Ascii: hb[.5],";display:grid;grid-template-columns:auto;grid-row-gap:",v.hb[1.5],";padding:",v.hb[3]," ",v.hb[2]," ",v.hb[3]," ",v.hb[2],";@media (min-width:",v.I.MEDIUM,"){grid-template-columns:auto ","160px",";grid-column-gap:",v.hb[1],";}"),R=Object(k.d)("div
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 22 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 76 2e 49 2e 4d 45 44 49 55 4d 2c 22 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 22 29 2c 59 3d 4f 62 6a 65 63 74 28 6b 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 31 75 61 76 63 75 75 31 31 22 7d 29 28 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 22 2c 76 2e 68 62 5b 31 2e 35 5d 2c 22 3b 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 76 2e 49 2e 4d 45 44 49 55 4d 2c 22 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 30 70 78 3b 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 76 2e 49 2e 4c 41 52 47 45 2c 22 29 7b 6d 61 72 67 69 6e 3a 30 70 78 3b 7d 22 29 2c 4b 3d 4f 62 6a 65 63 74 28 6b 2e 64 29 28 22 64 69 76 22 2c Data Ascii: "display:block;@media (min-width:",v.I.MEDIUM,"){display:none;}"),Y=Object(k.d)("div",{target:"e1uavcuu11"})("margin-top:",v.hb[1.5],";@media (min-width:",v.I.MEDIUM,"){margin-left:30px;}@media (min-width:",v.I.LARGE,"){margin:0px;}"),K=Object(k.d)("div",
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 72 65 3d 4f 62 6a 65 63 74 28 6b 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 31 75 61 76 63 75 75 32 30 22 7d 29 28 22 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 22 2c 76 2e 68 62 5b 2e 35 5d 2c 22 3b 22 29 2c 6e 65 3d 4f 62 6a 65 63 74 28 6b 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 31 75 61 76 63 75 75 32 31 22 7d 29 28 22 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 20 31 66 72 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 22 2c 76 2e 68 62 5b 2e 35 5d 2c 22 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 Data Ascii: re=Object(k.d)("div",{target:"e1uavcuu20"})("display:grid;grid-row-gap:",v.hb[.5],";"),ne=Object(k.d)("div",{target:"e1uavcuu21"})("line-height:0;display:grid;grid-template-columns:max-content 1fr;grid-column-gap:",v.hb[.5],";align-items:center;white-spac
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 65 6c 3a 28 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 7c 7c 22 22 2c 65 6c 65 6d 65 6e 74 55 72 6c 3a 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 68 72 65 66 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 22 22 2c 6d 6f 64 75 6c 65 4c 61 62 65 6c 3a 22 73 74 65 70 30 22 7d 29 7d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 4f 62 6a 65 63 74 28 63 65 2e 71 29 28 7b 6d 6f 64 75 6c 65 4e 61 6d 65 3a 22 70 72 6f 64 75 63 74 2d 73 77 69 74 63 68 2d Data Ascii: el:(null==e\|\|null===(t=e.currentTarget)\|\|void 0===t?void 0:t.textContent)\|\|"",elementUrl:null==e\|\|null===(r=e.currentTarget)\|\|void 0===r?void 0:r.href,moduleContext:"",moduleLabel:"step0"})},me=function(e){var t,r;Object(ce.q)({moduleName:"product-switch-
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 66 65 72 2e 22 29 29 2c 53 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6a 2e 73 5b 65 5d 7c 7c 22 22 7d 29 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 59 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 75 70 64 61 74 65 64 20 74 6f 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 42 65 63 61 75 73 65 20 79 6f 75 20 63 68 61 6e 67 65 64 20 79 6f 75 72 20 70 61 79 6d 65 6e 74 20 6d 65 74 68 6f 64 2c 20 69 74 20 6d 61 79 20 74 61 6b 65 20 61 20 66 65 77 20 68 6f 75 72 73 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 73 75 62 73 63 Data Ascii: fer.")),Se=function(e){return e.map((function(e){return j.s[e]\|\|""}))},Ie=function(e){return"Your subscription has been updated to ".concat(e,".")},we=function(e){return"Because you changed your payment method, it may take a few hours to update your subsc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50235	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	960	OUT	GET /ads/adplatforms/cdn/ET/ad-tracking.js HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:50 UTC	1046	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 32 33 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 51 55 6f 44 63 5f 56 55 4c 58 79 61 77 61 32 78 41 41 7a 53 33 43 45 43 4b 4a 76 73 7a 5f 50 4d 78 55 6b 59 43 66 47 61 4a 61 66 68 4e 30 42 79 4f 33 6e 48 38 52 46 73 6c 76 45 6f 79 34 4f 37 50 6d 4f 70 53 6b 6f 6d 66 77 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 37 32 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 31 39 3a 32 34 3a 31 32 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 31 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 9231X-GUploader-UploadID: ABPtcPrQUoDc_VULXyawa2xAAzS3CECKJvsz_PMxUkYCfGaJafhN0ByO3nH8RFslvEoy4O7PmOpSkomfwACache-Control: max-age=7200Expires: Mon, 04 Dec 2023 19:24:12 GMTLast-Modified: Mon, 10
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 2f 2a 20 4e 59 54 20 41 64 20 54 72 61 63 6b 65 72 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 2f 2a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 31 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 2f 2a 20 54 65 61 6d 3a 20 43 72 65 61 74 69 76 65 20 54 65 63 68 6e 6f 6c 6f 67 Data Ascii: /* ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: // NYT Ad Tracker :::::::::::::::::::::::::::::::::::::::::::::::::::::: // Version: 1.0.1 :::::::::::::::::::::::::::::::::::::::::::::::::::::: // Team: Creative Technolog
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 20 74 72 79 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 63 6f 6e 74 61 69 6e 65 72 42 6f 64 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 62 6f 64 79 27 29 5b 30 5d 3b 20 2f 2a 20 3c 3c 20 74 68 69 73 20 69 73 20 6e 65 77 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 76 69 64 65 6f 53 74 61 74 73 20 3d 20 63 6f 6e 74 61 69 6e 65 72 42 6f 64 79 2e 64 61 74 61 73 65 74 2e 76 69 64 65 6f 73 74 61 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 76 69 64 65 6f 53 74 61 74 73 4f 62 6a 20 3d 20 74 79 70 65 6f 66 20 76 69 64 65 6f 53 74 61 74 73 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 76 69 64 65 6f 53 74 61 74 Data Ascii: try { let containerBody = document.getElementsByTagName('body')[0]; /* << this is new */ let videoStats = containerBody.dataset.videostats; let videoStatsObj = typeof videoStats !== "undefined" ? videoStat
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 20 20 20 20 6c 65 74 20 64 61 44 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 66 70 5f 63 72 65 61 74 69 76 65 69 64 22 3a 20 60 24 7b 63 72 65 61 74 69 76 65 69 64 7d 60 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 66 70 5f 6f 72 64 65 72 69 64 22 3a 20 60 24 7b 6f 72 64 65 72 69 64 7d 60 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 66 70 5f 70 76 69 64 22 3a 20 60 24 7b 70 76 5f 69 64 7d 60 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 64 66 70 5f 6c 69 6e 65 69 74 65 6d 69 64 22 3a 20 60 24 7b 6c 69 6e 65 69 74 65 6d 69 64 7d 60 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: let daData = { "dfp_creativeid": `${creativeid}`, "dfp_orderid": `${orderid}`, "dfp_pvid": `${pv_id}`, "dfp_lineitemid": `${lineitemid}`,
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 61 63 6b 69 6e 67 2c 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 20 74 6f 74 61 6c 20 6e 75 6d 62 65 72 20 6f 66 20 73 6c 69 64 65 20 74 6f 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 65 78 74 22 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 53 6c 69 64 65 2b 2b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 75 6d 62 65 72 4f 66 53 6c 69 64 65 73 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 74 53 6c 69 64 65 20 Data Ascii: acking, this function requires a total number of slide to work properly */ "next": function () { currentSlide++; if (numberOfSlides) { if (currentSlide
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 6f 74 20 77 6f 72 6b 69 6e 67 22 29 3b 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6c 69 73 74 65 6e 65 72 22 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 74 61 72 67 65 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 27 4e 59 54 41 64 54 72 61 63 6b 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 76 65 6e 74 54 79 70 65 20 3d 20 65 2e 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 65 76 65 6e 74 2d 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 4c 6f 63 61 74 69 6f 6e 20 3d Data Ascii: ot working"); } }, "listener": function (e) { if (e.target.className.includes('NYTAdTrack')) { const eventType = e.target.getAttribute('data-event-type'), eventLocation =
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 20 28 65 76 29 20 3d 3e 20 7b 72 65 6a 65 63 74 28 7b 73 74 61 74 75 73 3a 20 66 61 6c 73 65 2c 20 6d 65 73 73 61 67 65 3a 20 60 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 74 68 65 20 73 63 72 69 70 74 20 ef bc 84 7b 46 49 4c 45 5f 55 52 4c 7d 60 7d 29 3b 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 63 72 69 70 74 45 6c 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 74 63 68 Data Ascii: tListener("error", (ev) => {reject({status: false, message: `Failed to load the script {FILE_URL}`});}); document.body.appendChild(scriptEle); } catch
2023-12-05 18:13:50 UTC	957	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 53 6c 69 64 65 20 3d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 78 54 72 61 63 6b 65 72 20 3d 20 5b 63 75 72 72 65 6e 74 53 6c 69 64 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 5b 22 73 75 62 6a 65 63 74 22 5d 20 3f 20 73 75 62 6a 65 63 74 20 3d 20 64 61 74 61 5b 22 73 75 62 6a 65 63 74 22 5d 20 3a 20 73 75 62 6a 65 63 74 20 3d 20 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 65 20 3d 3e 20 7b 20 74 72 79 20 7b 20 45 54 2e 6c 69 73 74 65 6e 65 72 28 65 29 3b 20 7d 20 63 61 74 63 68 28 65 Data Ascii: currentSlide = 1; indexTracker = [currentSlide]; data["subject"] ? subject = data["subject"] : subject = "dfp-ad-events"; document.addEventListener('click', e => { try { ET.listener(e); } catch(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50232	8.28.7.83	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1056	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEO4HZyZ72dJGvMK1nyipGtU&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; chkChromeAb67Sec=3; DPSync3=1702944000%3A201_263%7C1701820800%3A248%7C1702339200%3A265; SyncRTB3=1702944000%3A220_21; ipc=163427^^2^0; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; PugT=1701766792
2023-12-05 18:13:50 UTC	754	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 38 30 3d 32 32 39 38 37 2d 43 41 45 53 45 4f 34 48 5a 79 5a 37 32 64 4a 47 76 4d 4b 31 6e 79 69 70 47 74 55 26 4b 52 54 42 26 32 33 30 32 35 2d 43 41 45 53 45 4f 34 48 5a 79 5a 37 32 64 4a 47 76 4d 4b 31 6e 79 69 70 47 74 55 26 4b 52 54 42 26 32 33 33 38 36 2d 43 41 45 53 45 4f 34 48 5a 79 5a 37 32 64 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:49 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72d
2023-12-05 18:13:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50233	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	2086	OUT	GET /vi-assets/static-assets/184-7a1dec688f12c0accc59.js?_sw-precache=bf88f3ee49d28fab903ef277e816bab1 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:50 UTC	1318	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 38 38 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 73 74 73 78 6e 6d 43 35 34 71 33 4b 74 79 51 61 4d 67 63 5f 78 62 57 68 70 51 39 4f 51 30 6d 47 49 5a 63 38 66 36 79 30 32 61 79 76 35 41 6f 62 72 6f 7a 4f 73 2d 53 46 33 78 6e 2d 62 69 77 4b 4f 48 69 74 6a 66 48 6b 35 70 77 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 39 3a 35 34 3a 33 31 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 8887X-GUploader-UploadID: ABPtcPrstsxnmC54q3KtyQaMgc_xbWhpQ9OQ0mGIZc8f6y02ayv5AobrozOs-SF3xn-biwKOHitjfHk5pwCache-Control: public,max-age=31536000Expires: Tue, 03 Dec 2024 19:54:31 GMTLast-Modifi
2023-12-05 18:13:50 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 34 5d 2c 7b 45 4f 61 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 2c 74 2e 64 28 6e 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 3b 76 61 72 20 72 3d 74 28 22 71 31 74 49 22 29 2c 61 3d 4f 62 6a 65 63 74 28 72 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 29 28 7b 65 6d 61 69 6c 41 64 64 72 65 73 73 3a 22 22 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 73 3a 5b 5d 7d 29 2c 69 3d 4f 62 6a 65 63 74 28 72 2e 63 72 65 61 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[184],{EOa1:function(e,n,t){"use strict";t.d(n,"b",(function(){return a})),t.d(n,"a",(function(){return i}));var r=t("q1tI"),a=Object(r.createContext)({emailAddress:"",subscriptions:[]}),i=Object(r.creat
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 74 2c 61 7c 7c 28 61 3d 63 28 29 28 49 2e 67 2c 7b 7d 29 29 2c 63 28 29 28 76 2c 7b 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 6d 2c 7b 7d 2c 76 6f 69 64 20 30 2c 69 7c 7c 28 69 3d 63 28 29 28 52 2e 61 2c 7b 7d 29 29 2c 63 28 29 28 4f 2e 61 2c 7b 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 6c 2e 72 2c 7b 74 79 70 65 53 74 79 6c 65 3a 6c 2e 5a 2e 64 69 73 70 6c 61 79 32 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 6c 2e 4e 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 7d 2c 76 6f 69 64 20 30 2c 75 7c 7c 28 75 3d 63 28 29 28 44 2e 61 2c 7b 63 6f 70 79 3a 41 2e 70 61 67 65 54 69 74 6c 65 53 65 74 74 69 6e 67 73 7d 29 29 29 2c 63 28 29 28 79 2e 61 2c 7b 61 63 63 6f 75 6e 74 49 6e 66 6f 3a 6e 7d 29 2c 63 28 29 28 5f 2e 61 2c 7b 61 63 Data Ascii: .Fragment,null,t,a\|\|(a=c()(I.g,{})),c()(v,{},void 0,c()(m,{},void 0,i\|\|(i=c()(R.a,{})),c()(O.a,{},void 0,c()(l.r,{typeStyle:l.Z.display2,colorVariant:l.N.text.primary},void 0,u\|\|(u=c()(D.a,{copy:A.pageTitleSettings}))),c()(y.a,{accountInfo:n}),c()(_.a,{ac
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 22 2c 53 4f 46 54 5f 43 41 4e 43 45 4c 3a 22 53 4f 46 54 5f 43 41 4e 43 45 4c 22 2c 43 41 4e 43 45 4c 45 44 3a 22 43 41 4e 43 45 4c 45 44 22 2c 51 55 45 55 45 44 3a 22 51 55 45 55 45 44 22 7d 2c 75 3d 7b 47 49 46 54 3a 22 47 49 46 54 22 2c 47 4f 4f 47 4c 45 5f 50 4c 41 59 3a 22 47 4f 4f 47 4c 45 5f 50 4c 41 59 22 2c 47 52 4f 55 50 3a 22 47 52 4f 55 50 22 2c 47 52 4f 55 50 5f 41 43 43 4f 55 4e 54 5f 41 44 4d 49 4e 3a 22 47 52 4f 55 50 5f 41 43 43 4f 55 4e 54 5f 41 44 4d 49 4e 22 2c 48 44 3a 22 48 44 22 2c 49 54 55 4e 45 53 3a 22 49 54 55 4e 45 53 22 2c 4b 49 4e 44 4c 45 3a 22 4b 49 4e 44 4c 45 22 2c 4e 4f 4f 4b 3a 22 4e 4f 4f 4b 22 2c 50 41 49 44 5f 44 49 47 49 3a 22 50 41 49 44 5f 44 49 47 49 22 2c 50 41 49 44 5f 47 52 4f 55 50 3a 22 50 41 49 44 5f 47 52 Data Ascii: ",SOFT_CANCEL:"SOFT_CANCEL",CANCELED:"CANCELED",QUEUED:"QUEUED"},u={GIFT:"GIFT",GOOGLE_PLAY:"GOOGLE_PLAY",GROUP:"GROUP",GROUP_ACCOUNT_ADMIN:"GROUP_ACCOUNT_ADMIN",HD:"HD",ITUNES:"ITUNES",KINDLE:"KINDLE",NOOK:"NOOK",PAID_DIGI:"PAID_DIGI",PAID_GROUP:"PAID_GR
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 53 61 6d 65 28 72 2e 65 6e 74 69 74 79 41 63 63 65 73 73 28 29 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 69 73 42 65 66 6f 72 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 65 2e 67 65 74 54 69 6d 65 4d 6f 6d 65 6e 74 28 6e 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 74 65 72 6e 61 6c 44 61 79 4a 73 49 6e 73 74 61 6e 63 65 2e 69 73 42 65 66 6f 72 65 28 72 2e 65 6e 74 69 74 79 41 63 63 65 73 73 28 29 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 69 73 41 66 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 65 2e 67 65 74 54 69 6d 65 4d 6f 6d 65 6e 74 28 6e 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: Same(r.entityAccess(),t)}},{key:"isBefore",value:function(n,t){if(!n)return!1;var r=e.getTimeMoment(n);return this.internalDayJsInstance.isBefore(r.entityAccess(),t)}},{key:"isAfter",value:function(n,t){if(!n)return!1;var r=e.getTimeMoment(n);return this.
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 3d 65 2e 67 65 74 54 69 6d 65 4d 6f 6d 65 6e 74 28 6e 29 2c 75 3d 65 2e 67 65 74 54 69 6d 65 4d 6f 6d 65 6e 74 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 74 65 72 6e 61 6c 44 61 79 4a 73 49 6e 73 74 61 6e 63 65 2e 69 73 42 65 74 77 65 65 6e 28 69 2e 65 6e 74 69 74 79 41 63 63 65 73 73 28 29 2c 75 2e 65 6e 74 69 74 79 41 63 63 65 73 73 28 29 2c 72 2c 61 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 54 69 6d 65 5a 6f 6e 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 74 68 69 73 2e 69 6e 74 65 72 6e 61 6c 44 61 79 4a 73 49 6e 73 74 61 6e 63 65 2e 74 7a 28 6e 29 29 7d 7d 2c 7b 6b 65 79 3a 22 66 6f 72 6d 61 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: =e.getTimeMoment(n),u=e.getTimeMoment(t);return this.internalDayJsInstance.isBetween(i.entityAccess(),u.entityAccess(),r,a)}},{key:"setTimeZone",value:function(n){return new e(this.internalDayJsInstance.tz(n))}},{key:"format",value:function(e){return this
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 6e 65 77 20 65 28 6f 2e 6b 2e 75 74 63 28 6e 29 29 3a 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 3f 6e 65 77 20 54 69 6d 65 4d 6f 6d 65 6e 74 6d 70 6c 28 6f 2e 6b 2e 75 74 63 28 6e 29 29 3a 6e 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 69 6d 65 4d 6f 6d 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 65 2e 70 61 72 73 65 44 61 74 65 28 6e 29 3a 22 65 6e 74 69 74 79 41 63 63 65 73 73 22 69 6e 20 6e 3f 6e 3a 65 2e 70 61 72 73 65 44 61 74 65 28 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 4c 61 74 65 73 74 54 69 6d 65 4d 6f 6d 65 6e 74 22 2c 76 Data Ascii: ue:function(n){return"string"==typeof n?new e(o.k.utc(n)):n instanceof Date?new TimeMomentmpl(o.k.utc(n)):n}},{key:"getTimeMoment",value:function(n){return"string"==typeof n?e.parseDate(n):"entityAccess"in n?n:e.parseDate(n)}},{key:"getLatestTimeMoment",v
2023-12-05 18:13:50 UTC	613	IN	Data Raw: 6c 65 4c 61 62 65 6c 3a 6e 2c 6d 6f 64 75 6c 65 52 65 67 69 6f 6e 3a 69 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 6f 2c 65 6c 65 6d 65 6e 74 4c 61 62 65 6c 3a 6e 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 6e 2c 74 2c 69 29 7b 76 61 72 20 6f 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 34 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 34 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 45 29 7b 76 61 72 20 41 3d 4f 62 6a 65 63 74 28 49 2e 75 73 65 51 75 65 72 79 29 28 65 2c 6e 29 2c 54 3d 41 2e 6c 6f 61 64 69 6e 67 2c 5f 3d 41 2e 65 72 72 6f 72 2c 64 3d 41 2e 64 61 74 61 2c 76 3d 28 76 6f 69 64 20 30 3d 3d 3d 64 3f 7b 7d 3a 64 29 2e 61 63 63 6f 75 6e 74 49 6e 66 Data Ascii: leLabel:n,moduleRegion:i,moduleContext:o,elementLabel:n})};function _(e,n,t,i){var o,s=arguments.length>4&&void 0!==arguments[4]?arguments[4]:{};return function(E){var A=Object(I.useQuery)(e,n),T=A.loading,_=A.error,d=A.data,v=(void 0===d?{}:d).accountInf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50239	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1047	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/audio-on.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:50 UTC	1105	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 34 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 32 4a 45 54 4d 43 2d 79 66 54 64 41 69 4c 39 45 73 76 30 76 32 4b 57 32 2d 77 42 33 62 58 4d 56 71 63 41 35 7a 52 70 30 45 58 73 65 6b 67 50 47 4a 6e 64 34 47 79 47 37 5f 71 53 79 70 66 68 41 32 34 42 57 55 52 62 56 42 50 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1046X-GUploader-UploadID: ADPycdv2JETMC-yfTdAiL9Esv0v2KW2-wB3bXMVqcA5zRp0EXsekgPGJnd4GyG7_qSypfhA24BWURbVBPQCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExp
2023-12-05 18:13:50 UTC	1046	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50234	54.157.75.191	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	619	OUT	GET /cookie-sync/rp?bee_sync_partners=rp HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	388	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 72 70 3f 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 72 73 3d 72 70 26 5f 62 65 65 5f 70 70 70 3d 31 0d 0a 53 65 72 76 65 72 3a 20 67 75 6e 69 63 6f 72 6e 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 68 65 63 6b 46 6f 72 50 65 72 6d 69 73 73 69 6f 6e 3d 6f 6b 3b 20 44 6f 6d 61 69 6e 3d 62 69 64 72 2e 69 6f 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 32 33 3a 35 30 20 47 4d 54 3b 20 50 Data Ascii: HTTP/1.1 303 See OtherDate: Tue, 05 Dec 2023 18:13:50 GMTlocation: https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp&_bee_ppp=1Server: gunicornset-cookie: checkForPermission=ok; Domain=bidr.io; expires=Tue, 05 Dec 2023 18:23:50 GMT; P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50241	3.225.218.10	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	847	OUT	GET /ups/55953/sync?uid=3a743bef-66ee-4af3-a0ea-a4634a63b535&_origin=1&redir=true&gdpr=0&gdpr_consent=&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
2023-12-05 18:13:50 UTC	793	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50236	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1048	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/audio-off.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:50 UTC	1104	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 38 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 35 5f 37 56 61 6e 51 4c 73 71 4b 76 37 78 4c 6d 62 68 6f 42 4a 4d 79 45 45 44 78 66 6d 6c 7a 39 6f 4b 72 30 4d 4b 63 33 55 34 59 63 46 6d 32 70 6c 69 56 76 44 33 65 78 45 68 68 4b 34 55 65 30 59 36 32 7a 6b 37 55 57 65 5f 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 880X-GUploader-UploadID: ABPtcPp5_7VanQLsqKv7xLmbhoBJMyEEDxfmlz9oKr0MKc3U4YcFm2pliVvD3exEhhK4Ue0Y62zk7UWe_gCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpi
2023-12-05 18:13:50 UTC	880	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50242	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	700	OUT	GET /ads/adplatforms/fonts/random1/cheltenham_normal_300.ttf HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	1215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 33 37 32 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 79 68 5a 68 72 4c 2d 44 34 4c 35 45 6d 44 65 4a 51 69 36 69 75 71 44 57 4c 4a 65 35 31 33 79 59 79 52 4e 2d 7a 78 34 61 47 7a 4b 56 49 42 59 66 44 41 4a 6b 73 4e 64 55 2d 71 79 37 4c 33 48 42 4f 6e 68 50 5f 43 48 65 4f 4f 77 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a 34 30 3a 35 35 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 39 20 4e 6f 76 20 32 30 32 33 20 31 35 3a 35 38 3a 35 31 20 47 4d 54 0d 0a 45 54 61 67 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 63728X-GUploader-UploadID: ABPtcPoyhZhrL-D4L5EmDeJQi6iuqDWLJe513yYyRN-zx4aGzKVIBYfDAJksNdU-qy7L3HBOnhP_CHeOOwExpires: Tue, 05 Dec 2023 17:40:55 GMTLast-Modified: Thu, 09 Nov 2023 15:58:51 GMTETag
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 46 46 54 4d 7e dd ba e4 00 00 f8 d4 00 00 00 1c 47 44 45 46 02 26 02 f9 00 00 de a0 00 00 00 2a 47 50 4f 53 6b 05 3c 57 00 00 df 54 00 00 19 7e 47 53 55 42 49 a1 54 93 00 00 de cc 00 00 00 86 4f 53 2f 32 96 d0 25 28 00 00 01 a8 00 00 00 60 63 6d 61 70 57 5c 27 38 00 00 06 10 00 00 02 d8 63 76 74 20 10 21 02 7a 00 00 0c 54 00 00 00 2c 66 70 67 6d 06 99 9c 37 00 00 08 e8 00 00 01 73 67 61 73 70 00 07 00 07 00 00 de 94 00 00 00 0c 67 6c 79 66 b7 30 1b 73 00 00 0e 88 00 00 ca 88 68 65 61 64 0b 66 96 e3 00 00 01 2c 00 00 00 36 68 68 65 61 10 22 07 47 00 00 01 64 00 00 00 24 68 6d 74 78 5a a1 4f d2 00 00 02 08 00 00 04 08 6c 6f 63 61 3d 1a 0b 8e 00 00 0c 80 00 00 02 06 6d 61 78 70 03 1c 02 dc 00 00 01 88 00 00 00 20 6e 61 6d Data Ascii: FFTM~GDEF&*GPOSk<WT~GSUBITOS/2%(`cmapW\'8cvt !zT,fpgm7sgaspglyf0sheadf,6hhea"Gd$hmtxZOloca=maxp nam
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 25 03 9c 00 39 03 9c 00 39 03 62 00 25 07 8f 00 cd 09 ae 00 7d 02 39 00 5c 02 39 00 4c 01 02 fe b0 04 71 00 2d 04 00 00 66 06 6a 00 a9 06 e1 00 8e 06 79 00 a9 07 0e 00 b0 06 f0 00 b4 06 5e 00 96 06 21 00 e9 03 cb ff ee 02 00 00 89 06 3d 00 be 06 e7 00 b6 06 21 00 fa 06 21 00 fc 06 21 00 f0 06 21 00 f0 04 48 00 6d 04 b0 00 29 04 d7 00 6d 04 b0 00 29 04 d7 00 00 04 a8 00 5c 06 0c 00 21 04 2f 00 42 04 2f 00 42 01 d7 00 00 00 00 00 00 05 9a 01 c1 05 9a 01 e1 05 9a 01 73 05 9a 01 62 05 9a 01 66 02 e5 00 10 03 48 00 5a 00 00 00 03 00 00 00 03 00 00 00 1c 00 01 00 00 00 00 01 d2 00 03 00 01 00 00 00 1c 00 04 01 b6 00 00 00 64 00 40 00 05 00 24 00 7e 00 a5 00 b4 00 cf 00 dd 00 ef 00 fd 00 ff 01 31 01 42 01 53 01 61 01 78 01 7e 01 92 02 bc 02 c7 02 c9 02 da 02 dc Data Ascii: %99b%}9\9Lq-fjy^!=!!!!Hm)m)\!/B/BsbfHZd@$~1BSax~
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 3d 00 27 00 00 00 08 2b bf 00 05 00 7e 00 67 00 52 00 3d 00 27 00 00 00 08 2b bf 00 06 00 75 00 67 00 52 00 3d 00 27 00 00 00 08 2b bf 00 07 00 5e 00 4d 00 3c 00 2d 00 1c 00 00 00 08 2b bf 00 08 00 30 00 28 00 1f 00 17 00 0f 00 00 00 08 2b bf 00 09 00 49 00 3c 00 2f 00 22 00 14 00 00 00 08 2b 00 ba 00 0c 00 05 00 07 2b b8 00 00 20 45 7d 69 18 44 ba 00 90 00 0e 00 01 73 ba 00 e0 00 0e 00 01 73 ba 00 e0 00 0e 00 01 74 ba 00 40 00 0e 00 01 73 ba 00 1f 00 10 00 01 73 ba 00 4f 00 10 00 01 73 ba 00 6f 00 10 00 01 73 ba 00 bf 00 10 00 01 73 ba 00 df 00 10 00 01 73 ba 00 2f 00 10 00 01 74 ba 00 4f 00 10 00 01 74 ba 00 7f 00 10 00 01 74 ba 00 9f 00 10 00 01 74 ba 00 bf 00 10 00 01 74 ba 00 ef 00 10 00 01 74 ba 00 0f 00 10 00 01 75 ba 00 3f 00 10 00 01 75 ba 00 5f Data Ascii: ='+~gR='+ugR='+^M<-+0(+I</"++ E}iDsst@ssOsosss/tOtttttu?u_
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 06 06 44 90 81 67 1d 31 40 40 00 00 02 00 be ff ee 05 56 05 7b 00 1b 00 1f 00 af ba 00 08 00 20 00 21 11 12 39 b8 00 08 10 b8 00 1f d0 00 b8 00 00 45 58 b8 00 16 2f 1b b9 00 16 00 12 3e 59 b8 00 00 45 58 b8 00 0b 2f 1b b9 00 0b 00 0c 3e 59 ba 00 17 00 16 00 0b 11 12 39 b8 00 17 2f b9 00 1d 00 09 f4 b8 00 02 d0 ba 00 1e 00 16 00 0b 11 12 39 b8 00 1e 2f b8 00 03 d0 b8 00 1e 10 b9 00 0a 00 09 f4 b8 00 06 d0 b8 00 0b 10 b8 00 08 d0 b8 00 08 2f b8 00 0a 10 b8 00 0d d0 b8 00 1e 10 b8 00 10 d0 b8 00 1d 10 b8 00 11 d0 b8 00 17 10 b8 00 14 d0 b8 00 16 10 b8 00 19 d0 b8 00 19 2f b8 00 17 10 b8 00 1b d0 30 31 01 07 21 03 21 07 21 03 23 13 23 03 23 13 21 37 21 13 21 37 21 13 33 03 33 13 33 03 07 23 03 33 05 56 17 fe aa 2f 01 56 16 fe a6 44 50 44 f0 41 52 41 fe b0 17 Data Ascii: Dg1@@V{ !9EX/>YEX/>Y9/9///01!!!###!7!!7!333#3V/VDPDARA
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 1f 2f 1b b9 00 1f 00 14 3e 59 b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 0c 3e 59 b8 00 00 45 58 b8 00 0d 2f 1b b9 00 0d 00 0c 3e 59 ba 00 0a 00 05 00 1f 11 12 39 ba 00 2f 00 05 00 1f 11 12 39 ba 00 3d 00 1f 00 05 11 12 39 b8 00 3d 2f b8 00 05 10 b9 00 4f 00 06 f4 ba 00 5b 00 1f 00 05 11 12 39 b8 00 0d 10 b9 00 65 00 07 f4 b8 00 1f 10 b9 00 6d 00 02 f4 ba 00 77 00 1f 00 05 11 12 39 30 31 25 0e 03 23 22 2e 02 27 0e 01 23 22 2e 02 35 34 36 37 2e 03 35 34 3e 02 33 32 1e 02 15 14 0e 02 07 1e 01 17 1e 01 17 3e 03 35 34 2e 02 27 2e 01 3d 01 21 15 14 0e 02 07 0e 03 07 0e 01 07 1e 01 33 32 3e 02 37 25 2e 01 27 2e 01 27 0e 03 15 14 1e 02 33 32 36 13 34 2e 02 23 22 0e 02 15 14 1e 02 17 3e 05 06 31 1f 3a 43 54 39 32 59 52 4f 28 63 d2 73 78 af 70 36 ca cc 18 28 1e 11 Data Ascii: />YEX/>YEX/>Y9/9=9=/O[9emw901%#".'#".5467.54>32>54.'.=!32>7%.'.'3264.#">1:CT92YRO(csxp6(
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 45 58 b8 00 0b 2f 1b b9 00 0b 00 0c 3e 59 b8 00 05 d0 b8 00 05 2f b8 00 0b 10 b9 00 15 00 08 f4 30 31 25 14 0e 02 07 27 3e 03 37 2e 03 35 34 3e 02 33 32 1e 02 01 6d 1f 40 65 45 2f 1f 40 3a 2f 0d 2e 3a 21 0c 13 20 2a 17 26 33 1e 0d 4c 2d 69 69 61 25 2d 15 34 40 52 33 01 14 1f 27 14 1d 2b 1d 0f 16 28 39 00 00 00 00 01 00 5a 01 87 02 3b 02 0c 00 03 00 15 ba 00 00 00 04 00 05 11 12 39 00 b8 00 02 2f b8 00 01 dc 30 31 01 21 35 21 02 3b fe 1f 01 e1 01 87 85 00 01 00 75 ff f4 01 68 00 df 00 13 00 24 ba 00 05 00 14 00 15 11 12 39 00 b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 0c 3e 59 b9 00 0f 00 08 f4 30 31 25 14 0e 02 23 22 2e 02 35 34 3e 02 33 32 1e 02 01 68 13 21 2d 1b 1a 2b 20 12 12 20 2b 1a 1b 2d 21 13 6a 18 2a 21 13 13 21 2a 18 18 2b 1f 13 13 1f 2b 00 01 Data Ascii: EX/>Y/01%'>7.54>32m@eE/@:/.:! &3L-iia%-4@R3'+(9Z;9/01!5!;uh$9EX/>Y01%#".54>32h!-+ +-!j!!*++
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 45 58 b8 00 09 2f 1b b9 00 09 00 0c 3e 59 ba 00 19 00 17 00 09 11 12 39 b8 00 19 2f 41 05 00 0f 00 19 00 1f 00 19 00 02 5d b9 00 00 00 06 f4 b8 00 14 d0 b8 00 19 10 b8 00 1d d0 b8 00 16 d0 ba 00 1c 00 17 00 09 11 12 39 30 31 01 23 15 14 16 17 1e 01 1d 01 21 35 34 36 37 3e 03 3d 01 21 35 01 33 11 33 21 11 01 04 1b e0 19 25 1a 13 fe 6c 21 13 10 1a 13 0a fd 65 02 eb 5e e0 fe 72 fd e0 01 77 e4 1b 1d 0f 0b 06 08 33 33 09 08 08 06 0a 0e 17 12 e4 54 03 c4 fc 50 02 c1 fd 3f 00 01 00 33 ff ec 03 e1 05 d5 00 41 00 89 ba 00 3d 00 42 00 43 11 12 39 00 b8 00 00 45 58 b8 00 2d 2f 1b b9 00 2d 00 12 3e 59 b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 0c 3e 59 ba 00 3d 00 2d 00 05 11 12 39 b8 00 3d 2f ba 00 0f 00 3d 00 05 11 12 39 b8 00 0f 2f b8 00 05 10 b9 00 1e 00 04 f4 Data Ascii: EX/>Y9/A]901#!5467>=!533!%l!e^rw33TP?3A=BC9EX-/->YEX/>Y=-9=/=9/
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 30 4f 83 5e 34 d9 28 48 67 3f 3c 64 49 28 38 5d 75 3e 28 50 40 27 33 19 2b 3c 23 35 6f 42 23 5c 52 39 2e 55 77 49 40 79 5e 39 01 7b 5c 94 69 39 38 61 85 4d 4a 7a 5f 44 14 1c 45 54 63 3a 52 87 60 35 2d 52 72 46 3c 6b 57 3f 11 20 4d 60 77 02 94 30 52 3e 23 21 3c 53 31 3f 5b 44 34 19 13 35 48 5d fd 34 2a 47 3a 2f 13 1c 2d 1c 0f 2f 4c 6f 51 40 69 4b 29 24 47 67 00 00 00 00 02 00 3d ff ec 04 33 05 8f 00 2e 00 44 00 71 ba 00 2a 00 45 00 46 11 12 39 b8 00 2a 10 b8 00 36 d0 00 b8 00 00 45 58 b8 00 2a 2f 1b b9 00 2a 00 12 3e 59 b8 00 00 45 58 b8 00 07 2f 1b b9 00 07 00 0c 3e 59 b8 00 0f dc b8 00 07 10 b9 00 16 00 04 f4 ba 00 20 00 2a 00 07 11 12 39 b8 00 20 2f ba 00 1b 00 20 00 2a 11 12 39 b8 00 2a 10 b9 00 36 00 03 f4 b8 00 20 10 b9 00 40 00 07 f4 30 31 01 14 0e Data Ascii: 0O^4(Hg?<dI(8]u>(P@'3+<#5oB#\R9.UwI@y^9{\i98aMJz_DETc:R`5-RrF<kW? M`w0R>#!<S1?[D45H]4G:/-/LoQ@iK)$Gg=3.DqEF96EX/>YEX/>Y 9 / 96 @01
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 33 d0 00 b8 00 50 2f b8 00 00 45 58 b8 00 11 2f 1b b9 00 11 00 0c 3e 59 b8 00 00 45 58 b8 00 44 2f 1b b9 00 44 00 0e 3e 59 b8 00 00 45 58 b8 00 07 2f 1b b9 00 07 00 0c 3e 59 b8 00 50 10 b9 00 32 00 05 f4 ba 00 1c 00 32 00 11 11 12 39 b8 00 1c 2f 41 03 00 2f 00 1c 00 01 5d ba 00 0c 00 11 00 1c 11 12 39 ba 00 1f 00 1c 00 11 11 12 39 b8 00 20 d0 b8 00 20 2f b8 00 07 10 b9 00 28 00 02 f4 b8 00 44 10 b9 00 3e 00 04 f4 ba 00 41 00 07 00 44 11 12 39 b8 00 1c 10 b9 00 58 00 01 f4 b8 00 11 10 b9 00 63 00 06 f4 30 31 01 14 0e 04 23 22 2e 02 27 0e 03 23 22 26 35 34 3e 02 37 3e 01 33 32 16 17 37 33 03 0e 01 15 14 16 33 32 3e 02 35 34 2e 02 23 22 0e 04 15 14 12 16 04 33 32 24 37 17 04 21 22 24 26 02 35 34 3e 04 33 32 04 1e 01 05 34 26 23 22 06 07 0e 03 15 14 16 33 32 Data Ascii: 3P/EX/>YEXD/D>YEX/>YP229/A/]99 /(D>AD9Xc01#".'#"&54>7>327332>54.#"32$7!"$&54>324&#"32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50237	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1044	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/pause.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:50 UTC	1115	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 30 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 54 6e 72 55 74 38 36 47 49 54 7a 4e 38 30 6d 50 44 42 4b 49 78 7a 67 54 34 78 57 59 38 48 4d 43 48 49 6d 4b 69 70 65 4e 33 45 7a 69 34 61 4d 39 6b 4c 7a 34 4c 6c 67 6f 4d 54 62 39 71 45 78 71 4b 37 47 59 6b 44 41 6d 31 72 71 6d 70 65 4c 33 58 56 72 45 66 46 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 702X-GUploader-UploadID: ADPycduTnrUt86GITzN80mPDBKIxzgT4xWY8HMCHImKipeN3Ezi4aM9kLz4LlgoMTb9qExqK7GYkDAm1rqmpeL3XVrEfFACache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30,
2023-12-05 18:13:50 UTC	702	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50238	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1043	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/play.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9
2023-12-05 18:13:50 UTC	1103	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 38 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 33 72 4b 4c 6c 68 6a 79 73 62 50 5a 5f 59 73 51 67 45 55 4a 34 39 2d 67 37 4d 38 5a 59 7a 53 6c 35 66 48 32 79 34 4c 66 6f 30 33 79 43 51 70 41 74 58 71 51 47 55 32 77 77 73 6f 41 75 56 50 68 6e 47 6f 65 68 67 37 34 4c 6d 77 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 681X-GUploader-UploadID: ADPycdv3rKLlhjysbPZ_YsQgEUJ49-g7M8ZYzSl5fH2y4Lfo03yCQpAtXqQGU2wwsoAuVPhnGoehg74LmwCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpi
2023-12-05 18:13:50 UTC	681	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50245	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	698	OUT	GET /ads/adplatforms/fonts/random1/franklin_normal_500.ttf HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	1100	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 31 34 34 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 42 46 6e 58 34 6a 70 59 6a 57 6b 34 69 4c 39 64 70 58 31 66 66 4b 51 7a 72 45 55 55 51 6f 76 4a 77 77 67 53 7a 4a 50 53 6a 6a 78 65 66 44 56 76 67 62 6c 75 57 6e 71 67 36 33 54 56 41 43 54 4d 42 4c 42 31 49 31 71 5f 67 75 41 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 34 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 32 34 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 39 20 4e 6f 76 20 32 30 32 33 20 31 35 3a 35 38 3a 35 32 20 47 4d 54 0d 0a 45 54 61 67 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 51448X-GUploader-UploadID: ABPtcPpBFnX4jpYjWk4iL9dpX1ffKQzrEUUQovJwwgSzJPSjjxefDVvgbluWnqg63TVACTMBLB1I1q_guAExpires: Mon, 04 Dec 2023 18:14:24 GMTLast-Modified: Thu, 09 Nov 2023 15:58:52 GMTETag
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 46 46 54 4d 80 25 8e 8e 00 00 c8 dc 00 00 00 1c 47 44 45 46 02 2f 03 03 00 00 a2 fc 00 00 00 2a 47 50 4f 53 21 41 6e 3c 00 00 a3 b0 00 00 25 2a 47 53 55 42 49 a5 54 97 00 00 a3 28 00 00 00 86 4f 53 2f 32 98 73 43 a5 00 00 01 a8 00 00 00 60 63 6d 61 70 76 57 3c 5a 00 00 06 18 00 00 03 00 63 76 74 20 03 b3 16 65 00 00 0c 50 00 00 00 32 66 70 67 6d 06 99 9c 37 00 00 09 18 00 00 01 73 67 61 73 70 00 07 00 07 00 00 a2 f0 00 00 00 0c 67 6c 79 66 73 36 9e d6 00 00 0e 90 00 00 8d b0 68 65 61 64 0c 78 6a b1 00 00 01 2c 00 00 00 36 68 68 65 61 0f 07 06 d8 00 00 01 64 00 00 00 24 68 6d 74 78 42 34 65 c8 00 00 02 08 00 00 04 10 6c 6f 63 61 06 e4 e4 f4 00 00 0c 84 00 00 02 0a 6d 61 78 70 03 1d 01 b9 00 00 01 88 00 00 00 20 6e 61 6d Data Ascii: FFTM%GDEF/GPOS!An<%GSUBIT(OS/2sC`cmapvW<Zcvt eP2fpgm7sgaspglyfs6headxj,6hhead$hmtxB4elocamaxp nam
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 68 03 3d 00 68 04 48 00 d7 04 48 00 d7 03 62 00 25 06 d7 00 b2 09 cf 00 96 02 98 00 79 02 98 00 71 01 6d fe 68 04 8f 00 48 03 d9 00 52 07 db 00 df 07 db 00 aa 07 db 00 df 07 db 00 89 07 db 00 a4 07 db 00 e9 00 00 00 00 00 00 00 00 04 8f 00 71 04 3f 00 08 02 71 00 ae 06 14 00 93 06 7d 00 87 00 00 00 00 04 8f 00 6f 04 8f 00 71 04 8f 00 6a 04 8f 00 68 04 48 00 6d 04 b0 00 29 04 d7 00 6d 04 b0 00 29 04 d7 00 00 03 e1 00 48 06 0c 00 21 04 39 00 1d 04 39 00 1d 02 48 00 00 04 8f 01 3c 04 8f 01 c5 04 8f 01 23 04 8f 01 3d 00 00 00 00 05 50 00 50 00 00 00 03 00 00 00 03 00 00 00 1c 00 01 00 00 00 00 01 fa 00 03 00 01 00 00 00 1c 00 04 01 de 00 00 00 6e 00 40 00 05 00 2e 00 7e 00 a5 00 b4 00 cf 00 dd 00 ef 00 fd 00 ff 01 31 01 42 01 53 01 61 01 78 01 7e 01 92 02 bc Data Ascii: h=hHHb%yqmhHRq?q}oqjhHm)m)H!99H<#=PPn@.~1BSax~
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 32 00 23 00 17 00 00 00 08 2b bf 00 04 00 4b 00 3e 00 32 00 23 00 17 00 00 00 08 2b bf 00 05 00 4b 00 3e 00 32 00 23 00 17 00 00 00 08 2b bf 00 06 00 4b 00 3e 00 32 00 23 00 17 00 00 00 08 2b bf 00 07 00 62 00 50 00 3e 00 2d 00 17 00 00 00 08 2b bf 00 08 00 6b 00 57 00 44 00 31 00 1d 00 00 00 08 2b bf 00 09 00 31 00 28 00 20 00 17 00 0e 00 00 00 08 2b bf 00 0a 00 31 00 28 00 20 00 17 00 0e 00 00 00 08 2b 00 ba 00 0b 00 07 00 07 2b b8 00 00 20 45 7d 69 18 44 ba 00 50 00 0d 00 01 73 ba 00 60 00 0d 00 01 73 ba 00 c0 00 0d 00 01 73 ba 00 9f 00 0f 00 01 73 ba 00 10 00 0f 00 01 74 ba 00 80 00 0f 00 01 74 ba 00 b0 00 0f 00 01 74 ba 00 20 00 0f 00 01 75 ba 00 70 00 11 00 01 73 ba 00 a0 00 11 00 01 73 ba 00 7f 00 13 00 01 75 ba 00 2f 00 15 00 01 73 ba 00 5f 00 15 Data Ascii: 2#+K>2#+K>2#+K>2#+bP>-+kWD1+1( +1( ++ E}iDPs`sssttt upssu/s_
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 07 23 07 33 07 23 03 23 13 21 03 23 13 23 37 33 37 23 37 33 13 33 03 21 13 33 03 37 21 07 03 62 cb 10 c9 27 cb 11 c8 33 77 33 fe fe 35 75 33 cb 11 ca 23 ca 10 c9 35 79 36 01 03 33 77 de 21 ff 00 23 03 56 71 fe 6e fe 87 01 79 fe 87 01 79 6e fe 71 01 77 fe 89 01 77 fd 1a fe fe 00 00 00 00 03 00 54 ff 2b 04 2d 05 e5 00 21 00 28 00 2f 00 9e ba 00 08 00 30 00 31 11 12 39 b8 00 08 10 b8 00 25 d0 b8 00 08 10 b8 00 29 d0 00 b8 00 17 2f b8 00 00 45 58 b8 00 09 2f 1b b9 00 09 00 0b 3e 59 ba 00 25 00 17 00 09 11 12 39 b8 00 25 10 b8 00 00 d0 b8 00 09 10 b8 00 06 d0 b8 00 09 10 b8 00 08 d0 b8 00 08 2f b8 00 09 10 b9 00 10 00 03 f4 ba 00 11 00 17 00 09 11 12 39 b8 00 17 10 b8 00 18 d0 b8 00 18 2f b8 00 17 10 b8 00 1a d0 b8 00 17 10 b9 00 26 00 03 f4 b8 00 21 d0 b8 00 Data Ascii: #3##!##737#733!37!b'3w35u3#5y63w!#VqnyynqwwT+-!(/019%)/EX/>Y%9%/9/&!
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 46 ba 00 05 00 0f 00 10 11 12 39 00 b8 00 00 45 58 b8 00 0c 2f 1b b9 00 0c 00 17 3e 59 ba 00 04 00 0f 00 0c 11 12 39 b8 00 04 2f ba 00 0a 00 0c 00 04 11 12 39 b8 00 0a 2f b8 00 00 d0 b8 00 04 10 b8 00 06 d0 30 31 01 17 05 17 07 0b 01 27 37 25 37 05 03 33 03 03 66 38 fe b8 f0 92 8d 91 92 f4 fe b4 37 01 27 3d b0 3e 04 ee a8 2d e2 6c 01 33 fe cd 6c e2 2d a8 9c 01 48 fe b8 00 00 00 00 01 00 64 00 44 04 2b 04 0a 00 0b 00 35 ba 00 04 00 0c 00 0d 11 12 39 00 b8 00 09 2f b8 00 03 2f ba 00 00 00 09 00 03 11 12 39 b8 00 00 2f b9 00 01 00 05 f4 b8 00 05 d0 b8 00 00 10 b8 00 07 d0 30 31 01 15 21 11 23 11 21 35 21 11 33 11 04 2b fe 66 93 fe 66 01 9a 93 02 71 94 fe 67 01 99 94 01 99 fe 67 00 00 00 00 01 00 9a fe f4 01 98 00 f0 00 06 00 2c ba 00 04 00 07 00 08 11 12 Data Ascii: F9EX/>Y9/9/01'7%73f87'=>-l3l-HdD+59//9/01!#!5!3+ffqgg,
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 6a 02 b9 00 00 00 01 00 4c ff e9 04 37 05 60 00 1e 00 79 ba 00 13 00 1f 00 20 11 12 39 00 b8 00 00 45 58 b8 00 18 2f 1b b9 00 18 00 15 3e 59 b8 00 00 45 58 b8 00 06 2f 1b b9 00 06 00 0b 3e 59 ba 00 00 00 18 00 06 11 12 39 b8 00 00 2f ba 00 0a 00 18 00 06 11 12 39 b8 00 06 10 b9 00 0d 00 05 f4 b8 00 00 10 b9 00 13 00 05 f4 ba 00 16 00 13 00 0d 11 12 39 b8 00 18 10 b9 00 1a 00 06 f4 ba 00 1c 00 00 00 06 11 12 39 30 31 01 32 16 15 14 00 23 22 26 27 37 1e 01 33 32 36 35 34 26 23 22 06 07 27 13 21 07 21 03 3e 01 02 66 d4 fd fe da e6 a7 ef 49 9b 35 a3 74 99 af a7 88 5d 9f 3c 81 44 03 25 13 fd 79 31 3a a6 03 93 fa c4 d0 fe e4 9f 93 47 66 7d b8 92 8f a4 49 42 52 02 9d a2 fe 65 2c 44 00 00 02 00 60 ff e9 04 44 05 79 00 18 00 24 00 77 ba 00 19 00 25 00 26 11 12 39 Data Ascii: jL7`y 9EX/>YEX/>Y9/999012#"&'732654&#"'!!>fI5t]<D%y1:Gf}IBRe,D`Dy$w%&9
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 30 31 25 15 01 35 01 15 01 03 f2 fc 85 03 7b fd 50 a6 b0 02 00 64 01 fc b0 fe 81 00 00 00 00 02 00 71 01 31 04 21 03 23 00 03 00 07 00 4c ba 00 02 00 08 00 09 11 12 39 b8 00 02 10 b8 00 06 d0 00 b8 00 03 2f 41 03 00 c0 00 03 00 01 5d b9 00 02 00 05 f4 b8 00 03 10 b8 00 07 d0 b8 00 07 2f 41 03 00 5f 00 07 00 01 5d 41 03 00 bf 00 07 00 01 5d b9 00 06 00 05 f4 30 31 01 15 21 35 01 15 21 35 04 21 fc 50 03 b0 fc 50 01 c7 96 96 01 5c 96 96 00 01 00 9e ff f6 04 19 04 56 00 06 00 26 ba 00 04 00 07 00 08 11 12 39 00 b8 00 00 45 58 b8 00 02 2f 1b b9 00 02 00 0b 3e 59 b8 00 06 d0 b8 00 06 2f 30 31 01 15 01 35 09 01 35 04 19 fc 85 02 b0 fd 50 02 5a 64 fe 00 b0 01 81 01 7f b0 00 00 00 02 00 50 00 00 03 e9 05 b2 00 21 00 25 00 55 ba 00 1b 00 26 00 27 11 12 39 b8 00 1b Data Ascii: 01%5{Pdq1!#L9/A]/A_]A]01!5!5!PP\V&9EX/>Y/0155PZdP!%U&'9
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 23 20 00 11 10 00 21 32 04 17 07 2e 01 23 22 02 11 10 12 33 32 36 04 29 9a 3c fe e0 c7 fe f7 fe b9 01 48 01 0c d1 01 0e 2f c2 1a b0 86 ad d2 da ab 91 c7 01 e5 29 ed e6 01 85 01 5d 01 48 01 9f f5 dc 1c 91 bc fe cb fe f0 fe e5 fe d5 b3 00 00 02 00 a4 00 00 05 06 05 9a 00 0e 00 1d 00 4b ba 00 1c 00 1e 00 1f 11 12 39 b8 00 1c 10 b8 00 0d d0 00 b8 00 00 45 58 b8 00 0b 2f 1b b9 00 0b 00 17 3e 59 b8 00 00 45 58 b8 00 09 2f 1b b9 00 09 00 0b 3e 59 b8 00 0b 10 b9 00 18 00 06 f4 b8 00 09 10 b9 00 1a 00 06 f4 30 31 01 16 12 15 14 02 07 0e 01 23 21 11 21 32 16 13 3e 01 35 34 26 27 2e 01 2b 01 11 33 32 36 04 00 80 86 62 5c 59 fb 9c fe 4c 01 c0 83 cd 31 28 26 1e 1f 39 d8 97 e8 ec 8b cd 05 1f 66 fe d0 bc a3 fe f1 5d 5b 63 05 9a 3f fc 14 45 ae 6b 5f 9b 3f 79 7b fb a6 68 Data Ascii: # !2.#"326)<H/)]HK9EX/>YEX/>Y01#!!2>54&'.+326b\YL1(&9f][c?Ek_?y{h
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 0b 00 0d 00 0e 11 12 39 00 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 17 3e 59 b8 00 00 45 58 b8 00 09 2f 1b b9 00 09 00 17 3e 59 b8 00 00 45 58 b8 00 01 2f 1b b9 00 01 00 0b 3e 59 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 0b 3e 59 b8 00 00 45 58 b8 00 07 2f 1b b9 00 07 00 0b 3e 59 ba 00 03 00 00 00 01 11 12 39 ba 00 06 00 00 00 01 11 12 39 ba 00 0b 00 00 00 01 11 12 39 30 31 01 11 23 11 01 23 01 11 23 11 21 09 01 06 0e bc fe 3d 8b fe 44 a4 01 18 01 a0 01 9c 05 9a fa 66 04 dd fb 23 04 e9 fb 17 05 9a fb 78 04 88 00 01 00 a4 00 00 04 c3 05 9a 00 09 00 65 ba 00 07 00 0a 00 0b 11 12 39 00 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 17 3e 59 b8 00 00 45 58 b8 00 06 2f 1b b9 00 06 00 17 3e 59 b8 00 00 45 58 b8 00 01 2f 1b b9 00 01 00 0b 3e 59 b8 00 00 45 58 b8 00 Data Ascii: 9EX/>YEX/>YEX/>YEX/>YEX/>Y99901###!=Df#xe9EX/>YEX/>YEX/>YEX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50243	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	629	OUT	POST /report HTTP/1.1 Host: csp.dev.nytimes.com Connection: keep-alive Content-Length: 1838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	1838	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 61 75 74 68 2f 69 66 72 61 6d 65 2f 65 6e 74 65 72 2d 65 6d 61 69 6c 3f 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 6f 6b 69 65 26 63 6c 69 65 6e 74 5f 69 64 3d 66 72 65 65 78 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 73 75 62 73 63 72 69 70 74 69 6f 6e 25 32 46 6f 6e 62 6f 61 72 64 69 6e 67 2d 6f 66 66 65 72 25 33 46 63 61 6d 70 61 69 67 6e 49 64 25 33 44 37 4a 46 4a 58 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 Data Ascii: {"csp-report":{"document-uri":"https://myaccount.nytimes.com/auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%25
2023-12-05 18:13:50 UTC	361	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 32 35 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 63 67 73 37 32 30 30 31 31 36 2d 49 41 44 0d 0a 58 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 425Server: VarnishRetry-After: 0Content-Type: text/html; charset=utf-8Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:50 GMTVia: 1.1 varnishX-Served-By: cache-iad-kcgs7200116-IADX
2023-12-05 18:13:50 UTC	425	IN	Data Raw: 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 68 31 3e 45 72 72 6f 72 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html> <head> <title>403 Forbidden</title> </head> <body> <h1>Error 403 Forbidden</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50253	52.73.239.53	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	733	OUT	GET /sync/rubicon/FORfFIObwmMtoclO3LSTVQ?csrc= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
2023-12-05 18:13:50 UTC	872	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 33 31 39 35 30 26 6e 69 64 3d 32 39 37 34 26 70 75 74 3d 79 2d 44 5a 5a 47 42 45 5a 45 32 6f 4c 4a 34 78 7a 44 41 76 71 51 6f 72 37 39 5a 6f 45 42 57 53 6c 79 70 6a 72 49 4f 41 2d 2d 7e 41 0d 0a 41 67 65 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Length: 0Connection: closeLocation: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-DZZGBEZE2oLJ4xzDAvqQor79ZoEBWSlypjrIOA--~AAge: 0Strict-Transport-Security: max-age

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50252	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	853	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:50 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 57 44 59 4d 45 30 4d 4a 57 4a 4b 39 41 52 34 33 38 59 45 36 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: WDYME0MJWJK9AR438YE6Set-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50244	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	698	OUT	GET /ads/adplatforms/fonts/random1/franklin-normal-700.ttf HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	1215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 34 31 37 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 34 6f 44 49 41 4c 44 2d 6e 39 7a 76 4e 61 77 70 77 2d 49 68 41 55 6c 51 71 4c 39 32 55 47 74 67 5f 79 57 51 53 56 5a 50 4c 37 4c 52 6f 2d 7a 4e 64 44 70 38 46 69 7a 4b 69 72 78 56 35 4b 47 61 37 52 62 71 64 39 6d 5f 39 44 41 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a 34 30 3a 35 35 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 39 20 4e 6f 76 20 32 30 32 33 20 31 35 3a 35 38 3a 35 33 20 47 4d 54 0d 0a 45 54 61 67 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 54172X-GUploader-UploadID: ABPtcPq4oDIALD-n9zvNawpw-IhAUlQqL92UGtg_yWQSVZPL7LRo-zNdDp8FizKirxV5KGa7Rbqd9m_9DAExpires: Tue, 05 Dec 2023 17:40:55 GMTLast-Modified: Thu, 09 Nov 2023 15:58:53 GMTETag
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 01 00 00 00 10 01 00 00 04 00 00 47 50 4f 53 32 56 3d 07 00 00 01 0c 00 00 2c 38 47 53 55 42 4a 38 54 10 00 00 2d 44 00 00 00 86 4f 53 2f 32 9b 3b 43 a3 00 00 2d cc 00 00 00 60 63 6d 61 70 e4 db ea c5 00 00 2e 2c 00 00 06 1e 63 76 74 20 07 54 19 56 00 00 34 4c 00 00 00 3a 66 70 67 6d 06 99 9c 37 00 00 34 88 00 00 01 73 67 61 73 70 00 07 00 07 00 00 35 fc 00 00 00 0c 67 6c 79 66 9b 1c 9e e0 00 00 36 08 00 00 8f 60 68 65 61 64 15 17 39 ac 00 00 c7 64 00 00 00 36 68 68 65 61 0f 89 07 22 00 00 c7 9c 00 00 00 24 68 6d 74 78 45 a5 4b b8 00 00 c7 c0 00 00 03 f4 6c 6f 63 61 27 3d 4c ca 00 00 c5 68 00 00 01 fc 6d 61 78 70 03 16 02 d0 00 00 cb b4 00 00 00 20 6e 61 6d 65 9f b8 6c 50 00 00 cb d4 00 00 02 c4 70 6f 73 74 14 ca a3 a8 00 00 ce 98 00 00 02 de 70 72 65 Data Ascii: GPOS2V=,8GSUBJ8T-DOS/2;C-`cmap.,cvt TV4L:fpgm74sgasp5glyf6`head9d6hhea"$hmtxEKloca'=Lhmaxp namelPpostpre
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: e2 00 b1 ff e2 00 b2 ff e2 00 b3 ff e2 00 b4 ff 90 00 d2 ff f6 00 d3 ff f0 00 e0 ff e8 00 ec ff e8 00 0f 00 0e 00 12 00 2b ff ec 00 34 ff f6 00 35 ff e4 00 37 ff d5 00 38 ff d5 00 39 ff d5 00 3a ff bd 00 3b ff e0 00 69 ff f6 00 6c ff e0 00 72 00 12 00 73 00 12 00 7a ff bd 00 b4 ff bd 00 20 00 0e 00 24 00 24 ff f8 00 28 ff f8 00 2b ff ec 00 30 ff f8 00 32 ff f8 00 34 ff fa 00 35 ff f8 00 37 ff f6 00 38 ff f4 00 39 ff c9 00 3a ff cb 00 3b ff e0 00 57 00 12 00 58 00 12 00 5a 00 12 00 69 ff fa 00 6b ff f8 00 6c ff e0 00 72 00 24 00 73 00 24 00 7a ff cb 00 9f ff f8 00 a9 ff f8 00 aa ff f8 00 ab ff f8 00 ac ff f8 00 ad ff f8 00 af ff f8 00 b4 ff cb 00 c4 00 37 00 d2 00 12 00 19 00 0d ff aa 00 0e 00 24 00 0f ff aa 00 22 ff e6 00 2b ff c7 00 34 ff f2 00 35 ff d5 Data Ascii: +45789:;ilrsz $$(+0245789:;WXZiklr$s$z7$"+45
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 50 ff ee 00 54 ff ee 00 57 ff 8c 00 58 ff a6 00 5a ff 90 00 5e ff ee 00 6b ff d8 00 6e ff 34 00 70 ff 0b 00 72 ff dc 00 73 ff dc 00 76 ff ee 00 78 ff ee 00 7a ff 1f 00 8f fe 52 00 98 00 0a 00 99 00 0a 00 9a 00 0a 00 9b 00 0a 00 9c 00 0a 00 9d 00 0a 00 9e 00 16 00 9f ff d8 00 a9 ff d8 00 aa ff d8 00 ab ff d8 00 ac ff d8 00 ad ff d8 00 af ff d8 00 b0 ff e0 00 b1 ff e0 00 b2 ff e0 00 b3 ff e0 00 b4 ff 1f 00 be ff ee 00 bf ff ee 00 c0 ff ee 00 c1 ff ee 00 cd ff ee 00 d2 ff 90 00 0b 00 42 ff f2 00 44 ff f4 00 46 ff f2 00 50 ff f2 00 54 ff f2 00 5a ff ec 00 76 ff f2 00 78 ff f2 00 bc ff f2 00 cd ff f2 00 d2 ff ec 00 17 00 42 ff f2 00 46 ff f2 00 48 ff f8 00 50 ff f2 00 54 ff f2 00 5a ff ec 00 76 ff f2 00 78 ff f2 00 bc ff f2 00 be ff f2 00 bf ff f2 00 c0 ff Data Ascii: PTWXZ^kn4prsvxzRBDFPTZvxBFHPTZvx
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: bc ff f0 00 d2 ff f8 00 4d 00 07 ff cf 00 0a 00 12 00 0d ff 13 00 0e ff b7 00 0f ff 13 00 1b ff dc 00 22 ff d8 00 24 ff e4 00 28 ff e4 00 2b ff 9e 00 30 ff e4 00 32 ff e4 00 34 ff f4 00 35 00 06 00 37 00 1c 00 38 00 10 00 39 00 10 00 3a 00 2b 00 3b ff e6 00 3e 00 12 00 42 ff a8 00 46 ff a8 00 50 ff a8 00 53 ff dc 00 56 ff dc 00 5a ff ec 00 5e 00 12 00 69 ff f4 00 6b ff e4 00 6c ff e6 00 6e 00 12 00 70 00 12 00 72 ff b7 00 73 ff b7 00 78 ff a8 00 7a 00 2b 00 98 ff d8 00 99 ff d8 00 9a ff d8 00 9b ff d8 00 9c ff d8 00 9d ff d8 00 9e ff a6 00 9f ff e4 00 a9 ff e4 00 aa ff e4 00 ab ff e4 00 ac ff e4 00 ad ff e4 00 af ff e4 00 b4 00 2b 00 b6 ff af 00 b7 ff a8 00 b8 ff b9 00 b9 ff c3 00 ba ff c3 00 bb ff af 00 bc ff a8 00 be ff af 00 bf ff a8 00 c0 ff c7 00 c1 Data Ascii: M"$(+0245789:+;>BFPSVZ^iklnprsxz++
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 20 ff dc 00 59 ff ec 00 6e ff c9 00 70 ff c9 00 72 00 1a 00 73 00 1a 00 11 00 0e 00 1a 00 20 ff dc 00 35 ff a4 00 37 ff d3 00 38 ff d3 00 44 ff f2 00 48 00 08 00 57 00 14 00 58 00 14 00 5a 00 14 00 6e ff ee 00 70 ff ee 00 72 00 1a 00 73 00 1a 00 bd ff f2 00 d2 00 14 00 d3 00 14 00 02 00 c4 00 14 00 c5 00 14 00 0b 00 0d ff f8 00 0e 00 1c 00 0f ff f8 00 20 ff dc 00 47 ff f4 00 48 00 0c 00 55 ff f6 00 6e ff dc 00 70 ff dc 00 72 00 1c 00 73 00 1c 00 22 00 02 00 47 00 03 00 39 00 08 00 39 00 09 00 28 00 0a 00 47 00 0d ff a6 00 0e ff f0 00 0f ff a6 00 20 00 66 00 3e 00 47 00 42 ff fa 00 43 00 14 00 49 00 14 00 4a 00 14 00 4b 00 14 00 4c 00 14 00 4d 00 14 00 57 00 0c 00 58 00 04 00 59 00 06 00 5a 00 0c 00 5e 00 47 00 6e 00 39 00 70 00 39 00 72 ff dc 00 73 ff Data Ascii: Ynprs 578DHWXZnprs GHUnprs"G99(G f>GBCIJKLMWXYZ^Gn9p9rs
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 6e ff dc 00 70 ff dc 00 72 00 2d 00 73 00 2d 00 78 00 14 00 bc 00 04 00 10 00 24 ff ea 00 28 ff ea 00 30 ff ea 00 32 ff ea 00 34 ff ec 00 44 ff e6 00 45 ff e6 00 46 ff e6 00 50 ff e6 00 52 ff e6 00 54 ff dc 00 56 ff f4 00 57 ff de 00 58 ff de 00 5a ff de 00 af ff ea 00 10 00 0e ff c9 00 34 ff f4 00 35 00 08 00 3a 00 0a 00 46 ff ea 00 50 ff ea 00 54 ff ee 00 56 ff ee 00 57 ff b9 00 58 ff b9 00 5a ff cd 00 6e 00 12 00 70 00 12 00 72 ff c9 00 73 ff c9 00 78 ff ea 00 14 00 0d ff 34 00 0f ff 23 00 22 ff a4 00 2b ff 7f 00 3b ff ee 00 42 ff ee 00 6e 00 37 00 70 00 37 00 98 ff a4 00 99 ff a4 00 9a ff a4 00 9b ff a4 00 9c ff a4 00 9d ff a4 00 b6 ff ee 00 b7 ff ee 00 b8 ff ee 00 b9 ff ee 00 ba ff ee 00 bb ff ee 00 40 00 01 ff 86 00 0d ff 23 00 0e ff 7f 00 0f ff 23 Data Ascii: npr-s-x$(024DEFPRTVWXZ45:FPTVWXZnprsx4#"+;Bn7p7@##
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 1c ff 9a 00 22 ff 90 00 24 ff ad 00 28 ff ad 00 2b ff 90 00 30 ff ad 00 32 ff ad 00 34 ff c3 00 35 00 14 00 37 00 2b 00 38 00 22 00 39 00 18 00 3a 00 37 00 3b ff d1 00 3e 00 12 00 42 ff 42 00 44 ff 42 00 45 ff 54 00 46 ff 6b 00 48 ff 54 00 4e ff 5d 00 4f ff 5d 00 50 ff 6b 00 51 ff 5d 00 52 ff 54 00 53 ff 5d 00 54 ff 42 00 55 ff cb 00 56 ff 5d 00 57 ff 71 00 58 ff 71 00 59 ff 71 00 5b ff 6f 00 5e 00 12 00 64 fe da 00 6e 00 12 00 70 00 12 00 72 ff 7f 00 73 ff 7f 00 bc ff 6b 00 d5 ff 5d 00 02 00 0d fe ec 00 0f fe ec 00 02 00 2d ff cb 00 4d ff a4 00 02 00 0d ff c3 00 0f ff c3 00 02 00 2b 00 24 00 4b 00 6e 00 19 00 0e ff dc 00 22 00 24 00 24 ff e4 00 28 ff e4 00 2b 00 14 00 30 ff e4 00 32 ff e4 00 34 ff f4 00 35 ff a4 00 36 ff e2 00 37 ff d8 00 38 ff e0 00 Data Ascii: "$(+02457+8"9:7;>BBDBETFkHTN]O]PkQ]RTS]TBUV]WqXqYq[o^dnprsk]-M+$Kn"$$(+0245678
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: ee 00 5a ff ec 00 0e 00 42 ff f2 00 43 00 1a 00 44 ff f4 00 45 ff f6 00 46 ff f2 00 49 00 1a 00 4c 00 1a 00 4d 00 1a 00 50 ff f2 00 52 ff f6 00 54 ff f2 00 57 ff ec 00 58 ff ee 00 5a ff ec 00 0e 00 42 ff f2 00 43 00 1a 00 44 ff f4 00 45 ff f6 00 46 ff f2 00 49 00 1a 00 4c 00 1a 00 4d 00 1a 00 50 ff f2 00 52 ff f6 00 54 ff f2 00 57 ff ec 00 58 ff ee 00 5a ff ec 00 06 00 42 ff f2 00 46 ff f2 00 48 ff f8 00 50 ff f2 00 54 ff f2 00 5a ff ec 00 0e 00 0d ff aa 00 0e 00 24 00 0f ff aa 00 22 ff e6 00 2b ff e2 00 35 ff d5 00 37 ff e6 00 38 ff ea 00 39 ff d8 00 3a ff af 00 3b ff f4 00 64 ff c9 00 72 00 24 00 73 00 24 00 0e 00 0d ff aa 00 0e 00 24 00 0f ff aa 00 22 ff e6 00 2b ff e2 00 35 ff d5 00 37 ff e6 00 38 ff ea 00 39 ff d8 00 3a ff af 00 3b ff f4 00 64 ff c9 Data Ascii: ZBCDEFILMPRTWXZBCDEFILMPRTWXZBFHPTZ$"+5789:;dr$s$$"+5789:;d
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 00 20 ff dc 00 47 ff f4 00 55 ff f6 00 59 ff f6 00 5b ff f6 00 6e ff c9 00 70 ff c9 00 72 00 1a 00 73 00 1a 00 0c 00 0d ff f8 00 0e 00 1a 00 0f ff f8 00 20 ff dc 00 47 ff f4 00 55 ff f6 00 59 ff f6 00 5b ff f6 00 6e ff c9 00 70 ff c9 00 72 00 1a 00 73 00 1a 00 0c 00 0d ff f8 00 0e 00 1a 00 0f ff f8 00 20 ff dc 00 47 ff f4 00 55 ff f6 00 59 ff f6 00 5b ff f6 00 6e ff c9 00 70 ff c9 00 72 00 1a 00 73 00 1a 00 0c 00 0d ff f8 00 0e 00 1a 00 0f ff f8 00 20 ff dc 00 47 ff f4 00 55 ff f6 00 59 ff f6 00 5b ff f6 00 6e ff c9 00 70 ff c9 00 72 00 1a 00 73 00 1a 00 02 00 6e ff c9 00 70 ff c9 00 02 00 6e ff dc 00 70 ff dc 00 02 00 6e ff dc 00 70 ff dc 00 02 00 6e ff dc 00 70 ff dc 00 02 00 6e ff dc 00 70 ff dc 00 09 00 0d ff 6b 00 0f ff 6b 00 47 00 10 00 55 00 10 00 Data Ascii: GUY[nprs GUY[nprs GUY[nprs GUY[nprsnpnpnpnpnpkkGU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50260	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	803	OUT	GET /ecm3?ex=pubmatic.com&id=PM_UID40D3C5B1-C944-4FD5-B1BE-0A313CAD2333 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:50 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 32 36 35 57 44 57 58 41 47 38 44 59 35 56 4d 51 45 44 39 45 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 265WDWXAG8DY5VMQED9ECache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50257	34.200.65.202	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	842	OUT	GET /ups/58824/sync?_origin=0&dpid=55953&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
2023-12-05 18:13:50 UTC	815	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50247	52.5.231.5	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	697	OUT	GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30 HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	488	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 37 31 34 39 26 6e 69 64 3d 32 38 36 31 26 70 75 74 3d 64 39 64 65 36 61 36 39 2d 63 39 38 65 2d 34 65 61 63 2d 38 66 62 38 2d 64 66 63 33 62 66 61 63 33 32 36 30 26 65 78 70 69 72 65 73 3d 33 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 75 3d 64 39 64 65 36 61 36 39 2d 63 39 38 65 2d 34 65 61 63 2d 38 66 62 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Date: Tue, 05 Dec 2023 18:13:50 GMTLocation: https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&expires=30Set-Cookie: cu=d9de6a69-c98e-4eac-8fb
2023-12-05 18:13:50 UTC	144	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 37 31 34 39 26 61 6d 70 3b 6e 69 64 3d 32 38 36 31 26 61 6d 70 3b 70 75 74 3d 64 39 64 65 36 61 36 39 2d 63 39 38 65 2d 34 65 61 63 2d 38 66 62 38 2d 64 66 63 33 62 66 61 63 33 32 36 30 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&expires=30">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50251	35.194.66.159	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	769	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=62D0F5E82D1A4ED6B3E32459FF4A59CA
2023-12-05 18:13:50 UTC	693	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 67 77 4e 69 5a 30 62 44 30 31 4d 54 67 30 4d 44 41 3d 26 70 69 67 67 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: openrestyDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: text/htmlContent-Length: 142Connection: closeLocation: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&pigg
2023-12-05 18:13:50 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50250	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	2214	OUT	GET /vi-assets/static-assets/185-5a3b79db604b7e400e35.js?_sw-precache=63ec24591a492ae4bbc17c099b85937c HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:50 UTC	1313	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 38 32 36 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 41 44 69 41 6b 45 49 5a 57 72 45 79 61 57 52 45 50 69 76 73 36 6e 51 51 38 4e 4f 50 55 69 77 43 44 2d 73 6d 30 44 67 39 2d 65 30 37 72 6e 30 6d 6e 4c 42 63 52 42 37 34 55 41 62 79 30 70 53 42 42 36 5a 55 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 37 35 39 32 30 31 38 30 38 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 18269X-GUploader-UploadID: ABPtcPrADiAkEIZWrEyaWREPivs6nQQ8NOPUiwCD-sm0Dg9-e07rn0mnLBcRB74UAby0pSBB6ZUx-goog-generation: 1701718759201808x-goog-metageneration: 1x-goog-stored-content-encoding: id
2023-12-05 18:13:50 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 35 5d 2c 7b 22 32 50 37 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 29 3b 76 61 72 20 61 2c 72 2c 69 3d 6e 28 22 67 63 52 2f 22 29 2c 6f 3d 6e 2e 6e 28 69 29 2c 6c 3d 6e 28 22 4a 34 7a 70 22 29 2c 75 3d 6e 2e 6e 28 6c 29 2c 63 3d 6e 28 22 71 31 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[185],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return O})),n.d(t,"c",(function(){return C})),n.d(t,"a",(function(){return I}));var a,r,i=n("gcR/"),o=n.n(i),l=n("J4zp"),u=n.n(l),c=n("q1t
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 22 22 3b 69 2e 64 69 73 70 6c 61 79 43 75 73 74 6f 6d 4d 6f 64 61 6c 43 6f 6d 70 6f 6e 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 29 28 79 2e 61 2c 7b 72 6f 6f 74 45 6c 65 6d 65 6e 74 52 65 66 3a 74 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2c 6f 6e 43 6c 6f 73 65 3a 69 2e 63 6c 6f 73 65 44 69 61 6c 6f 67 2c 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 3a 6f 28 29 28 68 2e 61 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 75 73 65 72 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6e 61 76 2d 6d 65 6e 75 22 2c 6f 6e 52 6f 75 74 65 72 55 70 64 61 74 65 3a 53 2c 63 75 72 72 65 6e 74 50 61 74 68 3a 22 22 2c 6e 61 76 49 74 65 6d 73 3a 6b 2c 74 72 61 63 6b 69 6e 67 43 6f 6e 74 65 78 74 3a 7b 6d 6f 64 75 6c 65 4e Data Ascii: splayName)\|\|"";i.displayCustomModalComponent((function(t){return o()(y.a,{rootElementRef:t,displayName:e,onClose:i.closeDialog,navigationMenu:o()(h.a,{dataTestId:"user-drop-down-nav-menu",onRouterUpdate:S,currentPath:"",navItems:k,trackingContext:{moduleN
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 72 66 61 63 65 43 6f 64 65 29 20 7b 5c 6e 20 20 20 20 65 6d 61 69 6c 41 64 64 72 65 73 73 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 4e 61 6d 65 5c 6e 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4c 61 62 65 6c 73 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 44 69 67 69 74 61 6c 50 61 75 73 65 45 6c 69 67 69 62 69 6c 69 74 79 20 7b 5c 6e 20 20 20 20 20 20 20 20 65 6c 69 67 69 62 6c 65 5c 6e 20 20 20 20 20 20 20 20 72 65 61 73 6f 6e 5c 6e 20 20 20 20 20 20 20 20 61 76 61 69 6c 61 62 6c 65 50 61 75 73 65 44 75 72 61 74 69 6f 6e 73 20 7b 5c Data Ascii: rfaceCode) {\n emailAddress\n displayName\n subscriptions {\n subscriptionId\n subscriptionName\n subscriptionLabels\n subscriptionDigitalPauseEligibility {\n eligible\n reason\n availablePauseDurations {\
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 22 2c 63 2e 68 62 5b 2e 35 5d 2c 22 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 22 2c 63 2e 68 62 5b 31 2e 35 5d 2c 22 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 22 2c 63 2e 68 62 5b 31 5d 2c 22 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 49 2c 22 29 7b 66 6c 65 78 3a 35 30 25 3b 6d 61 72 67 69 6e 3a 30 20 22 2c 63 2e 68 62 5b 2e 35 5d 2c 22 3b 7d 22 29 2c 54 3d 4f 62 6a 65 63 74 28 4f 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 63 77 65 7a 62 31 22 Data Ascii: er-radius:",c.hb[.5],";cursor:pointer;display:flex;align-items:center;padding:",c.hb[1.5],";margin-top:",c.hb[1],";text-align:left;width:100%;@media only screen and (min-width:",I,"){flex:50%;margin:0 ",c.hb[.5],";}"),T=Object(O.d)("div",{target:"ecwezb1"
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 29 28 63 2e 44 2c 7b 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 63 2e 4e 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 2c 64 61 74 61 54 65 73 74 49 64 3a 22 64 75 72 61 74 69 6f 6e 2d 70 65 72 69 6f 64 22 2c 6c 65 76 65 6c 3a 22 32 22 7d 2c 76 6f 69 64 20 30 2c 72 29 2c 6f 28 29 28 63 2e 62 2c 7b 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 63 2e 4e 2e 74 65 78 74 2e 73 65 63 6f 6e 64 61 72 79 2c 64 61 74 61 54 65 73 74 49 64 3a 22 72 65 73 75 6d 65 2d 64 61 74 65 2d 22 2e 63 6f 6e 63 61 74 28 74 29 2c 6c 65 76 65 6c 3a 22 32 22 7d 2c 76 6f 69 64 20 30 2c 22 45 6e 64 73 20 6f 6e 20 22 2c 69 29 29 29 7d 3b 4d 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 44 75 72 61 74 69 6f 6e 4f 70 74 69 6f 6e 22 3b 76 61 72 20 47 2c 56 2c 55 2c 71 3d 4d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: )(c.D,{colorVariant:c.N.text.primary,dataTestId:"duration-period",level:"2"},void 0,r),o()(c.b,{colorVariant:c.N.text.secondary,dataTestId:"resume-date-".concat(t),level:"2"},void 0,"Ends on ",i)))};M.displayName="DurationOption";var G,V,U,q=M,W=function(
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 3d 73 29 7b 76 61 72 20 65 3d 28 70 5b 73 5d 7c 7c 7b 7d 29 2e 64 75 72 61 74 69 6f 6e 44 61 79 73 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 30 3a 65 3b 4f 62 6a 65 63 74 28 77 2e 71 29 28 7b 6d 6f 64 75 6c 65 4e 61 6d 65 3a 22 70 61 75 73 65 2d 64 75 72 61 74 69 6f 6e 22 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 41 28 6e 29 2c 65 6c 65 6d 65 6e 74 4e 61 6d 65 3a 22 67 6f 2d 74 6f 2d 70 61 75 73 65 2d 72 65 76 69 65 77 2d 61 6e 64 2d 63 6f 6e 66 69 72 6d 22 2c 65 6c 65 6d 65 6e 74 4c 61 62 65 6c 3a 22 63 6f 6e 74 69 6e 75 65 22 7d 29 2c 74 28 6e 29 7d 7d 2c 76 61 72 69 61 6e 74 3a 63 2e 4c 2e 66 69 6c 6c 65 64 2c 68 65 69 67 68 74 56 61 72 69 61 6e 74 3a 63 2e 4b 2e 73 74 61 6e 64 61 72 64 2c 77 69 64 74 68 56 61 72 69 61 6e 74 3a 7b 73 6d 61 6c 6c 3a Data Ascii: =s){var e=(p[s]\|\|{}).durationDays,n=void 0===e?0:e;Object(w.q)({moduleName:"pause-duration",moduleContext:A(n),elementName:"go-to-pause-review-and-confirm",elementLabel:"continue"}),t(n)}},variant:c.L.filled,heightVariant:c.K.standard,widthVariant:{small:
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 6d 65 2c 75 3d 4f 62 6a 65 63 74 28 58 2e 75 73 65 41 70 6f 6c 6c 6f 43 6c 69 65 6e 74 29 28 29 2c 73 3d 4f 62 6a 65 63 74 28 66 2e 63 29 28 29 2c 64 3d 4f 62 6a 65 63 74 28 6c 2e 75 73 65 43 6f 6e 74 65 78 74 29 28 77 2e 66 29 2c 70 3d 4f 62 6a 65 63 74 28 58 2e 75 73 65 4d 75 74 61 74 69 6f 6e 29 28 78 2c 7b 6f 6e 43 6f 6d 70 6c 65 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 63 6c 65 61 72 53 74 6f 72 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 64 69 73 70 6c 61 79 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 6f 28 29 28 65 65 2e 61 2c 7b 63 6f 70 79 3a 6f 65 2c 70 61 72 61 6d 73 3a 7b 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 3a 69 2c 65 6d 61 69 6c 41 64 64 72 65 73 73 3a 74 7d 7d 29 2c 7b 64 61 74 61 54 65 73 74 49 64 Data Ascii: me,u=Object(X.useApolloClient)(),s=Object(f.c)(),d=Object(l.useContext)(w.f),p=Object(X.useMutation)(x,{onCompleted:function(){u.clearStore().then((function(){d.displayNotification(o()(ee.a,{copy:oe,params:{subscriptionName:i,emailAddress:t}}),{dataTestId
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 74 53 70 61 63 65 3a 22 30 2e 35 22 7d 29 29 2c 6f 28 29 28 63 2e 62 2c 7b 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 63 2e 4e 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 2c 64 61 74 61 54 65 73 74 49 64 3a 22 62 69 6c 6c 69 6e 67 2d 69 6e 66 6f 2d 6f 6e 65 22 2c 6c 65 76 65 6c 3a 22 33 22 7d 2c 76 6f 69 64 20 30 2c 22 59 6f 75 72 20 63 72 65 64 69 74 20 77 69 6c 6c 20 61 70 70 65 61 72 20 6f 6e 20 79 6f 75 72 20 6e 65 78 74 20 62 69 6c 6c 2e 20 49 66 20 79 6f 75 20 6d 61 6e 75 61 6c 6c 79 20 72 65 73 74 61 72 74 20 79 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 2c 20 79 6f 75 72 20 63 72 65 64 69 74 20 77 69 6c 6c 20 62 65 20 61 64 6a 75 73 74 65 64 2e 22 29 2c 4a 7c 7c 28 4a 3d 6f 28 29 28 63 2e 65 2c 7b 64 65 66 61 75 6c 74 53 70 61 63 65 3a 22 30 2e 35 22 Data Ascii: tSpace:"0.5"})),o()(c.b,{colorVariant:c.N.text.primary,dataTestId:"billing-info-one",level:"3"},void 0,"Your credit will appear on your next bill. If you manually restart your subscription, your credit will be adjusted."),J\|\|(J=o()(c.e,{defaultSpace:"0.5"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50255	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	697	OUT	GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:50 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 34 47 47 54 33 4e 43 45 4e 45 4a 36 39 33 36 46 44 31 54 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 4GGT3NCENEJ6936FD1T3Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50256	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1001	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCPb6-ef-8bo8EAUSGQoKcmlnaHRtZWRpYRILCISf-uf-8bo8EAUYBSACKAEyCwi09ervlPK6PBAFQg8iDQgBEgkKBXRpZXIxEAFaB2JvbW44Mm9gAXIKcmlnaHRtZWRpYQ..
2023-12-05 18:13:50 UTC	783	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 35 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 74 74 64 5f 70 75 69 64 3d 35 32 33 37 32 35 32 39 2d Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Length: 359Connection: closeserver: Kestrellocation: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=52372529-
2023-12-05 18:13:50 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 74 74 64 5f 70 75 69 64 3d 35 32 33 37 32 35 32 39 2d 36 37 33 39 2d 34 36 36 38 2d 38 35 37 37 2d 39 62 36 37 36 64 39 66 33 30 65 37 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50261	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	848	OUT	GET /w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
2023-12-05 18:13:50 UTC	366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKVary: AcceptServer: OXGW/0.0.0Pragma: no-cacheP3P: CP="CUR ADM OUR NOR STA NID"Expires: Mon, 26 Jul 1997 05:00:00 GMTDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: image/gifContent-Length: 43Cache-Control: private, max-a
2023-12-05 18:13:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50264	8.28.7.84	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1204	OUT	GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; PugT=1701800030
2023-12-05 18:13:50 UTC	408	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 38 3a 34 38 3a 30 37 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 53 50 75 67 54 3d 31 37 30 31 37 36 36 30 38 37 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 2d 4a 61 6e 2d 32 30 32 34 20 30 38 3a 34 38 3a 30 37 20 47 4d 54 3b 20 70 61 74 68 3d 2f 0d 0a 50 33 50 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Tue, 05 Dec 2023 08:48:07 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: SPugT=1701766087; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 04-Jan-2024 08:48:07 GMT; path=/P3P: CP="NOI DSP C
2023-12-05 18:13:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50259	68.67.160.76	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	901	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
2023-12-05 18:13:50 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 35 20 4e 6f 76 20 32 30 30 38 20 31 36 3a 30 30 3a 30 30 20 47 Data Ascii: HTTP/1.1 302 FoundServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: text/html; charset=utf-8Content-Length: 0Connection: closeCache-Control: no-store, no-cache, privatePragma: no-cacheExpires: Sat, 15 Nov 2008 16:00:00 G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50262	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1263	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; PugT=1701800030
2023-12-05 18:13:50 UTC	620	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 70 63 3d 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 30 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 3d 31 36 33 34 32 37 3a 33 Data Ascii: HTTP/1.1 204 No ContentP3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure;Set-Cookie: pi=163427:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50258	52.46.155.104	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	691	OUT	GET /ecm3?ex=rubiconprojectHMT&id=kJbBhtoqQaWo41VYJ3lV3w HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:50 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 33 44 30 51 59 42 4e 4b 38 58 42 5a 34 59 52 35 4b 5a 31 34 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 3D0QYBNK8XBZ4YR5KZ14Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50265	44.217.198.78	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 55 54 43 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 74 2d 43 6f 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: image/gifContent-Length: 43Connection: closeCache-Control: no-cache, no-store, must-revalidate, private, max-age=0Expires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheSet-Coo
2023-12-05 18:13:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50269	142.251.111.154	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	739	OUT	GET /pixel?google_nid=rp&google_hm=TFBTTlM5VFgtMS1CVDgy&google_push= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:50 UTC	374	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 48 54 54 50 20 73 65 72 76 65 72 20 28 75 6e 6b 6e 6f 77 6e 29 0d 0a 43 Data Ascii: HTTP/1.1 200 OKContent-Type: image/pngDate: Tue, 05 Dec 2023 18:13:50 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidateCross-Origin-Resource-Policy: cross-originServer: HTTP server (unknown)C
2023-12-05 18:13:50 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50268	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	2214	OUT	GET /vi-assets/static-assets/186-e6ce936346f6f641e401.js?_sw-precache=592a70617459f3acd3e93e0dec463915 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:50 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 37 38 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 52 4a 62 56 52 4e 38 41 55 37 54 37 4c 72 6f 70 55 74 66 37 69 57 54 66 6a 47 74 46 66 50 6d 6b 34 73 35 6d 39 30 63 2d 2d 65 70 55 43 66 46 46 6f 51 57 57 5f 67 74 46 77 4a 36 66 69 39 4d 50 38 64 50 4e 62 34 4d 50 6e 5a 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 34 39 36 38 36 38 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 43786X-GUploader-UploadID: ABPtcPoRJbVRN8AU7T7LropUtf7iWTfjGtFfPmk4s5m90c--epUCfFFoQWW_gtFwJ6fi9MP8dPNb4MPnZgx-goog-generation: 1701718545496868x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:50 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 36 5d 2c 7b 22 32 50 37 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 3b 76 61 72 20 6f 2c 69 2c 61 3d 6e 28 22 67 63 52 2f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 6c 3d 6e 28 22 4a 34 7a 70 22 29 2c 64 3d 6e 2e 6e 28 6c 29 2c 63 3d 6e 28 22 71 31 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[186],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return E})),n.d(t,"c",(function(){return R})),n.d(t,"a",(function(){return h}));var o,i,a=n("gcR/"),r=n.n(a),l=n("J4zp"),d=n.n(l),c=n("q1t
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 22 22 3b 61 2e 64 69 73 70 6c 61 79 43 75 73 74 6f 6d 4d 6f 64 61 6c 43 6f 6d 70 6f 6e 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 29 28 53 2e 61 2c 7b 72 6f 6f 74 45 6c 65 6d 65 6e 74 52 65 66 3a 74 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2c 6f 6e 43 6c 6f 73 65 3a 61 2e 63 6c 6f 73 65 44 69 61 6c 6f 67 2c 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 3a 72 28 29 28 44 2e 61 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 75 73 65 72 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6e 61 76 2d 6d 65 6e 75 22 2c 6f 6e 52 6f 75 74 65 72 55 70 64 61 74 65 3a 4d 2c 63 75 72 72 65 6e 74 50 61 74 68 3a 22 22 2c 6e 61 76 49 74 65 6d 73 3a 4e 2c 74 72 61 63 6b 69 6e 67 43 6f 6e 74 65 78 74 3a 7b 6d 6f 64 75 6c 65 4e Data Ascii: splayName)\|\|"";a.displayCustomModalComponent((function(t){return r()(S.a,{rootElementRef:t,displayName:e,onClose:a.closeDialog,navigationMenu:r()(D.a,{dataTestId:"user-drop-down-nav-menu",onRouterUpdate:M,currentPath:"",navItems:N,trackingContext:{moduleN
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 72 6d 61 74 46 75 6c 6c 44 61 74 65 28 29 7d 7d 29 29 2c 73 28 29 28 66 2e 62 2c 7b 6c 65 76 65 6c 3a 22 32 22 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 66 2e 4e 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 7d 2c 76 6f 69 64 20 30 2c 6f 7c 7c 28 6f 3d 73 28 29 28 44 2e 61 2c 7b 63 6f 70 79 3a 50 2e 69 6e 66 6f 56 69 73 69 74 4e 79 54 69 6d 65 73 48 44 53 75 62 7d 29 29 29 29 7d 3b 4d 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 50 72 65 53 74 61 72 74 22 3b 76 61 72 20 6a 2c 5f 2c 56 2c 4c 2c 77 2c 78 2c 6b 3d 4d 2c 57 3d 6e 28 22 56 6b 41 4e 22 29 2c 59 3d 6e 2e 6e 28 57 29 2c 7a 3d 6e 28 22 65 46 63 2b 22 29 2c 55 3d 6e 2e 6e 28 7a 29 2e 61 2c 47 3d 55 28 6a 7c 7c 28 6a 3d 59 28 29 28 5b 27 5c 6e 20 20 71 75 65 72 79 20 67 65 74 48 64 44 65 6c 69 76 65 72 79 43 Data Ascii: rmatFullDate()}})),s()(f.b,{level:"2",colorVariant:f.N.text.primary},void 0,o\|\|(o=s()(D.a,{copy:P.infoVisitNyTimesHDSub}))))};M.displayName="PreStart";var j,_,V,L,w,x,k=M,W=n("VkAN"),Y=n.n(W),z=n("eFc+"),U=n.n(z).a,G=U(j\|\|(j=Y()(['\n query getHdDeliveryC
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 72 79 57 69 6e 64 6f 77 45 6e 64 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 70 6f 72 74 57 69 6e 64 6f 77 53 74 61 72 74 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 70 6f 72 74 57 69 6e 64 6f 77 45 6e 64 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 72 65 70 6f 72 74 65 64 43 6f 6d 70 6c 61 69 6e 74 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 6c 61 69 6e Data Ascii: ryWindowEnd\n reportWindowStart\n reportWindowEnd\n }\n sections {\n code\n name\n }\n }\n reportedComplaint {\n complain
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 45 4c 49 56 45 52 59 5f 4d 49 53 53 45 44 3a 22 44 45 4c 49 56 45 52 59 5f 4d 49 53 53 45 44 22 2c 57 45 54 3a 22 57 45 54 22 2c 4c 41 54 45 3a 22 4c 41 54 45 22 2c 53 45 43 54 49 4f 4e 53 5f 4d 49 53 53 45 44 3a 22 53 45 43 54 49 4f 4e 53 5f 4d 49 53 53 45 44 22 2c 44 41 4d 41 47 45 44 3a 22 44 41 4d 41 47 45 44 22 2c 50 52 4f 50 45 52 54 59 5f 44 41 4d 41 47 45 44 3a 22 50 52 4f 50 45 52 54 59 5f 44 41 4d 41 47 45 44 22 2c 50 41 50 45 52 5f 44 45 4c 49 56 45 52 45 44 5f 44 55 52 49 4e 47 5f 56 41 43 41 54 49 4f 4e 5f 53 54 4f 50 3a 22 50 41 50 45 52 5f 44 45 4c 49 56 45 52 45 44 5f 44 55 52 49 4e 47 5f 56 41 43 41 54 49 4f 4e 5f 53 54 4f 50 22 2c 49 4e 41 43 43 55 52 41 54 45 5f 50 52 4f 44 55 43 54 5f 44 45 4c 49 56 45 52 45 44 3a 22 49 4e 41 43 43 55 Data Ascii: ELIVERY_MISSED:"DELIVERY_MISSED",WET:"WET",LATE:"LATE",SECTIONS_MISSED:"SECTIONS_MISSED",DAMAGED:"DAMAGED",PROPERTY_DAMAGED:"PROPERTY_DAMAGED",PAPER_DELIVERED_DURING_VACATION_STOP:"PAPER_DELIVERED_DURING_VACATION_STOP",INACCURATE_PRODUCT_DELIVERED:"INACCU
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 66 2e 68 62 5b 33 5d 2c 22 3b 22 29 2c 74 65 3d 4f 62 6a 65 63 74 28 51 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 31 67 66 72 76 70 69 34 22 7d 29 28 22 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 61 75 74 6f 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 22 2c 66 2e 68 62 5b 33 5d 2c 22 3b 22 29 2c 6e 65 3d 4f 62 6a 65 63 74 28 51 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 31 67 66 72 76 70 69 35 22 7d 29 28 22 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 67 61 70 3a 22 2c 66 2e 68 62 5b 31 5d 2c 22 3b 22 29 2c 6f 65 3d 4f 62 6a 65 63 74 28 51 2e 64 29 28 22 Data Ascii: f.hb[3],";"),te=Object(Q.d)("div",{target:"e1gfrvpi4"})("display:grid;grid-template-columns:auto;grid-row-gap:",f.hb[3],";"),ne=Object(Q.d)("div",{target:"e1gfrvpi5"})("display:flex;align-items:center;flex-direction:row;gap:",f.hb[1],";"),oe=Object(Q.d)("
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 2e 47 2c 7b 6c 65 76 65 6c 3a 22 33 22 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 22 70 72 69 6d 61 72 79 22 2c 64 61 74 61 54 65 73 74 49 64 3a 22 64 65 6c 69 76 65 72 79 2d 61 64 64 72 65 73 73 3a 68 65 61 64 65 72 22 7d 2c 76 6f 69 64 20 30 2c 73 28 29 28 44 2e 61 2c 7b 63 6f 70 79 3a 50 2e 6c 61 62 65 6c 44 65 6c 69 76 65 72 79 41 64 64 72 65 73 73 48 44 53 75 62 7d 29 29 29 29 2c 78 7c 7c 28 78 3d 73 28 29 28 66 2e 48 2c 7b 73 70 61 63 65 3a 22 31 2e 35 22 7d 29 29 2c 73 28 29 28 22 64 69 76 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 73 28 29 28 66 2e 62 2c 7b 6c 65 76 65 6c 3a 22 33 22 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 22 70 72 69 6d 61 72 79 22 2c 64 61 74 61 54 65 73 74 49 64 3a 22 64 65 6c 69 76 65 72 79 2d 61 64 64 72 65 73 73 3a 6e 61 6d 65 22 Data Ascii: .G,{level:"3",colorVariant:"primary",dataTestId:"delivery-address:header"},void 0,s()(D.a,{copy:P.labelDeliveryAddressHDSub})))),x\|\|(x=s()(f.H,{space:"1.5"})),s()("div",{},void 0,s()(f.b,{level:"3",colorVariant:"primary",dataTestId:"delivery-address:name"
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 72 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 63 2c 75 3d 73 28 29 28 66 2e 78 2c 7b 74 6f 3a 76 65 2e 48 44 5f 4d 45 54 48 4f 44 53 5f 4c 49 4e 4b 2c 74 61 72 67 65 74 54 61 62 3a 66 2e 64 62 2e 6e 65 77 54 61 62 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 66 2e 4e 2e 74 65 78 74 2e 69 6e 74 65 72 61 63 74 69 76 65 49 6e 6c 69 6e 65 7d 2c 76 6f 69 64 20 30 2c 75 65 7c 7c 28 75 65 3d 73 28 29 28 44 2e 61 2c 7b 63 6f 70 79 3a 50 2e 68 65 6c 70 43 65 6e 74 65 72 4c 69 6e 6b 4c 61 62 65 6c 7d 29 29 29 2c 76 3d 73 28 29 28 66 2e 73 2c 7b 74 79 70 65 53 74 79 6c 65 3a 66 2e 5a 2e 74 69 74 6c 65 32 7d 2c 76 6f 69 64 20 30 2c 28 63 3d 65 2e 64 65 6c 69 76 65 72 79 44 61 79 73 2c 44 65 28 63 Data Ascii: length)return null;if(r)return null;var c,u=s()(f.x,{to:ve.HD_METHODS_LINK,targetTab:f.db.newTab,colorVariant:f.N.text.interactiveInline},void 0,ue\|\|(ue=s()(D.a,{copy:P.helpCenterLinkLabel}))),v=s()(f.s,{typeStyle:f.Z.title2},void 0,(c=e.deliveryDays,De(c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50231	162.248.18.37	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	1624	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3114214532401325210&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
2023-12-05 18:13:50 UTC	705	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 34 39 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 35 37 3d 32 32 37 37 36 2d 33 31 31 34 32 31 34 35 33 32 34 30 31 33 32 35 32 31 30 26 4b 52 54 42 26 32 33 33 33 39 2d 33 31 31 34 32 31 34 35 33 32 34 30 31 33 32 35 32 31 30 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:49 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; domain=pubmatic.com; SameSite=None; secu
2023-12-05 18:13:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50266	44.218.177.189	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:50 UTC	570	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 76 78 69 69 5f 70 64 69 64 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 26 76 78 69 69 5f 70 69 64 3d 31 32 26 76 78 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Type: text/html; charset=utf-8Content-Length: 211Connection: closeLocation: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&vxii_pid=12&vx
2023-12-05 18:13:50 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 65 62 65 33 30 38 64 64 2d 64 37 30 39 2d 34 36 38 39 2d 38 62 36 30 2d 64 38 33 63 61 36 38 64 33 34 32 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&vxii_pid=12&vxii_pid1=10067&vxii_rcid=ebe308dd-d709-4689-8b60-d83ca68d342e">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50267	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	2214	OUT	GET /vi-assets/static-assets/187-614d260c892ee1a95276.js?_sw-precache=3b48d4751c8f3368428635df5a4c3689 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:50 UTC	1318	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 37 35 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 4c 71 66 55 75 61 32 4b 4a 39 38 33 4d 32 75 36 7a 6c 66 4c 39 68 6d 74 72 43 46 59 44 51 36 6a 4d 59 68 75 71 63 4b 59 4d 74 7a 4e 59 6c 32 2d 53 6b 51 35 50 79 30 7a 54 4a 44 53 55 78 35 2d 4c 39 68 53 79 4b 6e 6b 49 39 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 34 35 31 32 32 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 8755X-GUploader-UploadID: ABPtcPqLqfUua2KJ983M2u6zlfL9hmtrCFYDQ6jMYhuqcKYMtzNYl2-SkQ5Py0zTJDSUx5-L9hSyKnkI9wx-goog-generation: 1701718545451224x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:50 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 37 5d 2c 7b 22 32 50 37 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 3b 76 61 72 20 6f 2c 69 2c 72 3d 6e 28 22 67 63 52 2f 22 29 2c 75 3d 6e 2e 6e 28 72 29 2c 63 3d 6e 28 22 4a 34 7a 70 22 29 2c 61 3d 6e 2e 6e 28 63 29 2c 6c 3d 6e 28 22 71 31 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[187],{"2P7h":function(e,t,n){"use strict";n.d(t,"b",(function(){return O})),n.d(t,"c",(function(){return N})),n.d(t,"a",(function(){return j}));var o,i,r=n("gcR/"),u=n.n(r),c=n("J4zp"),a=n.n(c),l=n("q1t
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 22 22 3b 72 2e 64 69 73 70 6c 61 79 43 75 73 74 6f 6d 4d 6f 64 61 6c 43 6f 6d 70 6f 6e 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 28 29 28 70 2e 61 2c 7b 72 6f 6f 74 45 6c 65 6d 65 6e 74 52 65 66 3a 74 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2c 6f 6e 43 6c 6f 73 65 3a 72 2e 63 6c 6f 73 65 44 69 61 6c 6f 67 2c 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 3a 75 28 29 28 79 2e 61 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 75 73 65 72 2d 64 72 6f 70 2d 64 6f 77 6e 2d 6e 61 76 2d 6d 65 6e 75 22 2c 6f 6e 52 6f 75 74 65 72 55 70 64 61 74 65 3a 49 2c 63 75 72 72 65 6e 74 50 61 74 68 3a 22 22 2c 6e 61 76 49 74 65 6d 73 3a 54 2c 74 72 61 63 6b 69 6e 67 43 6f 6e 74 65 78 74 3a 7b 6d 6f 64 75 6c 65 4e Data Ascii: splayName)\|\|"";r.displayCustomModalComponent((function(t){return u()(p.a,{rootElementRef:t,displayName:e,onClose:r.closeDialog,navigationMenu:u()(y.a,{dataTestId:"user-drop-down-nav-menu",onRouterUpdate:I,currentPath:"",navItems:T,trackingContext:{moduleN
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 2c 61 3d 22 44 65 6c 65 74 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 22 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 75 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 75 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 59 6f 75 20 68 61 76 65 20 61 6e 20 61 63 74 69 76 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 22 2c 69 28 29 28 63 2e 62 2c 7b 7d 2c 76 6f 69 64 20 30 2c 65 29 2c 22 2e 22 29 7d 2c 64 3d 22 59 6f 75 20 6d 75 73 74 20 63 61 6e 63 65 6c 20 74 68 65 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 61 6e 64 20 77 61 69 74 20 Data Ascii: ,a="Delete your account",l=function(e){return u.a.createElement(u.a.Fragment,null,"You have an active New York Times subscription associated with ",i()(c.b,{},void 0,e),".")},d="You must cancel the subscription associated with this email address and wait
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 59 6f 75 20 6d 61 79 20 63 6c 6f 73 65 20 74 68 69 73 20 77 69 6e 64 6f 77 2e 22 2c 44 3d 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 6c 65 74 65 20 61 63 63 6f 75 6e 74 2e 20 57 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 7d 2c 4b 48 52 59 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: You may close this window.",D="Unable to delete account. Were having a technical issue right now. Please try again later."},KHRY:function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return u})),n.d(t,"d",(function(){retu
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 29 2c 66 3d 6e 28 22 32 69 34 34 22 29 2c 67 3d 6e 28 22 6d 34 72 2b 22 29 2c 62 3d 6e 28 22 42 6b 32 38 22 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 73 2e 63 29 28 29 2e 67 65 74 53 74 61 74 65 28 29 2c 74 3d 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 65 6d 61 69 6c 41 64 64 72 65 73 73 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 6c 6c 21 3d 65 26 26 65 2e 61 63 63 6f 75 6e 74 44 65 6c 65 74 65 64 3f 28 4f 62 6a 65 63 74 28 67 2e 62 29 28 29 2c 77 69 6e 64 6f 77 2e 6f 6e 70 6f 70 73 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 67 6f 28 31 29 7d 29 3a 4f 62 6a 65 63 74 28 6d 2e Data Ascii: ),f=n("2i44"),g=n("m4r+"),b=n("Bk28"),v=function(){var e=Object(s.c)().getState(),t=null==e?void 0:e.emailAddress;return Object(a.useEffect)((function(){null!=e&&e.accountDeleted?(Object(g.b)(),window.onpopstate=function(){window.history.go(1)}):Object(m.
2023-12-05 18:13:50 UTC	1379	IN	Data Raw: 4e 61 6d 65 3a 22 44 65 6c 65 74 65 41 63 63 6f 75 6e 74 50 61 67 65 22 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 22 45 6c 69 67 69 62 6c 65 41 63 63 6f 75 6e 74 44 65 6c 65 74 69 6f 6e 56 69 65 77 22 7d 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 64 65 70 61 72 74 75 72 65 53 74 61 74 75 73 3a 65 3f 22 63 68 65 63 6b 65 64 22 3a 22 75 6e 63 68 65 63 6b 65 64 22 7d 3b 4f 62 6a 65 63 74 28 6f 2e 71 29 28 7b 6d 6f 64 75 6c 65 4e 61 6d 65 3a 22 44 65 6c 65 74 65 41 63 63 6f 75 6e 74 50 61 67 65 22 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 22 45 6c 69 67 69 62 6c 65 41 63 63 6f 75 6e 74 44 65 6c 65 74 69 6f 6e 56 69 65 77 22 2c 6d 6f 64 75 6c 65 4c 61 62 65 6c 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2c 65 6c 65 Data Ascii: Name:"DeleteAccountPage",moduleContext:"EligibleAccountDeletionView"})},u=function(e){var t={departureStatus:e?"checked":"unchecked"};Object(o.q)({moduleName:"DeleteAccountPage",moduleContext:"EligibleAccountDeletionView",moduleLabel:JSON.stringify(t),ele
2023-12-05 18:13:50 UTC	481	IN	Data Raw: 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 68 72 65 66 7d 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 4f 62 6a 65 63 74 28 6f 2e 71 29 28 7b 6d 6f 64 75 6c 65 4e 61 6d 65 3a 22 44 65 6c 65 74 65 41 63 63 6f 75 6e 74 50 61 67 65 22 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 22 49 6e 65 6c 69 67 69 62 6c 65 41 63 63 6f 75 6e 74 44 65 6c 65 74 69 6f 6e 56 69 65 77 22 2c 65 6c 65 6d 65 6e 74 4e 61 6d 65 3a 22 52 65 74 75 72 6e 54 6f 41 63 63 6f 75 6e 74 4c 6e 6b 22 2c 65 6c 65 6d 65 6e 74 4c 61 62 65 6c 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2c 65 6c 65 6d 65 6e 74 55 72 6c 3a 6e 75 6c 6c Data Ascii: ===n?void 0:n.href})},m=function(e){var t,n;Object(o.q)({moduleName:"DeleteAccountPage",moduleContext:"IneligibleAccountDeletionView",elementName:"ReturnToAccountLnk",elementLabel:null===(t=e.currentTarget)\|\|void 0===t?void 0:t.textContent,elementUrl:null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50274	34.200.65.202	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	801	OUT	GET /ups/58160/sync?_origin=1&uid=LPSNS9TX-1-BT82&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
2023-12-05 18:13:51 UTC	775	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 3a 31 38 76 6b 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu:18vk~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50278	34.200.65.202	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	837	OUT	GET /ups/58292/sync?_origin=1&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
2023-12-05 18:13:51 UTC	771	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:50 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50272	54.157.75.191	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:50 UTC	661	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2023-12-05 18:13:51 UTC	653	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 38 33 34 36 32 26 6e 69 64 3d 34 31 31 34 26 70 75 74 3d 41 41 45 46 33 6b 37 4b 33 74 45 41 41 42 4c 53 44 76 33 41 59 41 26 65 78 70 69 72 65 73 3d 33 30 0d 0a 53 65 72 76 65 72 3a 20 67 75 6e 69 63 6f 72 6e 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 62 69 74 6f 3d 41 41 45 46 33 6b 37 4b 33 74 45 41 41 42 4c 53 44 76 33 41 59 41 3b 20 44 6f 6d 61 69 6e 3d 62 69 64 72 2e 69 6f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 Data Ascii: HTTP/1.1 303 See OtherDate: Tue, 05 Dec 2023 18:13:51 GMTlocation: https://pixel.rubiconproject.com/tap.php?v=183462&nid=4114&put=AAEF3k7K3tEAABLSDv3AYA&expires=30Server: gunicornset-cookie: bito=AAEF3k7K3tEAABLSDv3AYA; Domain=bidr.io; expires=Fri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50282	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	484	OUT	GET /crum?cm_dsp_id=196&external_user_id=4541600553641608635&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:51 UTC	981	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 66 33 33 61 32 62 33 38 31 32 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43f33a2b3812-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50270	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1630	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029; pi=163427:3; chkChromeAb67Sec=5; SPugT=1701766087; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210
2023-12-05 18:13:51 UTC	981	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 76 65 72 73 69 6f 6e 3d 31 26 6e 75 69 64 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Location: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=P3p: CP="NOI DSP COR LAW CUR ADMo DEVo T
2023-12-05 18:13:51 UTC	182	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 75 62 6d 61 74 69 63 2d 6d 61 74 63 68 2e 64 6f 74 6f 6d 69 2e 63 6f 6d 2f 6d 61 74 63 68 2f 62 6f 75 6e 63 65 2f 63 75 72 72 65 6e 74 3f 6e 65 74 77 6f 72 6b 49 64 3d 31 37 31 30 30 26 61 6d 70 3b 76 65 72 73 69 6f 6e 3d 31 26 61 6d 70 3b 6e 75 69 64 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50287	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	2214	OUT	GET /vi-assets/static-assets/188-340a3336cbd15c2795ac.js?_sw-precache=a75698f6c043e733aac7440d50652918 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:51 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 34 38 31 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 42 72 35 30 50 45 45 34 53 74 47 37 35 5a 79 4a 62 79 76 77 65 56 48 54 39 54 71 47 61 42 6b 68 50 46 66 52 56 72 4b 78 56 36 54 30 39 69 75 39 7a 52 79 49 74 34 30 53 68 62 63 6f 58 42 62 76 75 6f 31 70 4f 44 45 36 4a 49 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 37 35 39 32 30 33 35 31 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 34818X-GUploader-UploadID: ABPtcPrBr50PEE4StG75ZyJbyvweVHT9TqGaBkhPFfRVrKxV6T09iu9zRyIt40ShbcoXBbvuo1pODE6JIQx-goog-generation: 1701718759203514x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:51 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 38 5d 2c 7b 44 69 6b 59 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 2c 61 2e 64 28 74 2c 22 63 68 61 6e 67 65 44 65 6c 69 76 65 72 79 41 64 64 72 65 73 73 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 2c 61 2e 64 28 74 2c 22 61 76 61 69 6c 61 62 69 6c 69 74 79 44 69 73 63 6c 61 69 6d 65 72 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 61 2e 64 28 74 2c 22 63 75 72 72 65 6e 74 41 64 64 72 65 73 73 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[188],{DikY:function(e,t,a){"use strict";a.r(t),a.d(t,"changeDeliveryAddressHDSub",(function(){return i})),a.d(t,"availabilityDisclaimerHDSub",(function(){return d})),a.d(t,"currentAddressHDSub",(functio
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 6c 69 64 46 75 74 75 72 65 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 2c 61 2e 64 28 74 2c 22 64 61 74 65 49 6e 76 61 6c 69 64 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 61 2e 64 28 74 2c 22 64 61 74 65 49 6e 76 61 6c 69 64 50 61 73 74 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 29 2c 61 2e 64 28 74 2c 22 73 75 62 6d 69 74 41 64 64 72 65 73 73 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 29 29 2c 61 2e 64 28 74 2c 22 64 69 73 63 61 72 64 41 64 64 72 65 73 73 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 29 2c 61 2e 64 28 74 2c 22 76 65 72 Data Ascii: lidFutureHDSub",(function(){return O})),a.d(t,"dateInvalidHDSub",(function(){return E})),a.d(t,"dateInvalidPastHDSub",(function(){return w})),a.d(t,"submitAddressHDSub",(function(){return k})),a.d(t,"discardAddressHDSub",(function(){return L})),a.d(t,"ver
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 65 7d 29 29 2c 61 2e 64 28 74 2c 22 74 65 63 68 6e 69 63 61 6c 45 72 72 6f 72 41 6c 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 65 7d 29 29 2c 61 2e 64 28 74 2c 22 63 68 61 6e 67 65 53 63 68 65 64 75 6c 65 64 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 7d 29 29 2c 61 2e 64 28 74 2c 22 64 61 79 73 43 68 61 6e 67 65 64 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 7d 29 29 2c 61 2e 64 28 74 2c 22 63 68 61 6e 67 65 57 69 6c 6c 54 61 6b 65 45 66 66 65 63 74 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 7d 29 29 3b 76 61 72 20 6e 3d 61 28 22 71 31 74 49 22 29 2c 72 3d 61 2e 6e 28 6e 29 2c 69 3d 22 43 68 61 6e 67 65 20 64 Data Ascii: e})),a.d(t,"technicalErrorAll",(function(){return te})),a.d(t,"changeScheduledHDSub",(function(){return ae})),a.d(t,"daysChangedHDSub",(function(){return ne})),a.d(t,"changeWillTakeEffectHDSub",(function(){return re}));var n=a("q1tI"),r=a.n(n),i="Change d
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 73 2e 20 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 74 68 65 20 6e 65 77 20 64 65 6c 69 76 65 72 79 20 64 61 79 73 20 74 68 61 74 20 77 6f 72 6b 20 66 6f 72 20 79 6f 75 2e 22 29 7d 2c 46 3d 22 59 6f 75 72 20 64 65 6c 69 76 65 72 79 20 6f 70 74 69 6f 6e 73 20 68 61 76 65 20 63 68 61 6e 67 65 64 20 61 74 20 79 6f 75 72 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 22 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 2c 61 3d 65 2e 6e 65 77 50 72 69 63 65 2c 6e 3d 65 2e 63 75 72 72 65 6e 74 52 61 74 65 57 65 65 6b 6c 79 41 6d 6f 75 6e 74 3b 72 65 74 75 72 6e 20 72 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 74 2c 22 20 69 73 20 61 76 61 69 Data Ascii: s. Please select the new delivery days that work for you.")},F="Your delivery options have changed at your new location",$=function(e){var t=e.subscriptionName,a=e.newPrice,n=e.currentRateWeeklyAmount;return r.a.createElement(r.a.Fragment,null,t," is avai
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 72 6f 64 75 63 74 4e 61 6d 65 3b 72 65 74 75 72 6e 20 72 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 59 6f 75 72 20 64 65 6c 69 76 65 72 79 20 64 61 79 73 20 68 61 76 65 20 62 65 65 6e 20 63 68 61 6e 67 65 64 20 74 6f 20 22 2c 74 2c 22 2e 22 29 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 65 66 66 65 63 74 69 76 65 44 61 74 65 3b 72 65 74 75 72 6e 20 72 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 59 6f 75 72 20 6e 65 77 20 64 65 6c 69 76 65 72 79 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 74 61 6b 65 20 65 66 66 65 63 74 20 6f 6e 20 22 2c 74 2c 22 2e 22 29 Data Ascii: on(e){var t=e.productName;return r.a.createElement(r.a.Fragment,null,"Your delivery days have been changed to ",t,".")},re=function(e){var t=e.effectiveDate;return r.a.createElement(r.a.Fragment,null,"Your new delivery address will take effect on ",t,".")
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 69 6e 65 32 3a 20 53 74 72 69 6e 67 5c 6e 20 20 20 20 24 63 69 74 79 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 20 20 24 73 74 61 74 65 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 20 20 24 7a 69 70 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 29 20 7b 5c 6e 20 20 20 20 76 61 6c 69 64 61 74 65 48 64 44 65 6c 69 76 65 72 79 41 64 64 72 65 73 73 28 5c 6e 20 20 20 20 20 20 76 61 6c 69 64 61 74 65 48 64 44 65 6c 69 76 65 72 79 41 64 64 72 65 73 73 49 6e 70 75 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3a 20 24 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 5c 6e 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 4c 69 6e 65 31 3a 20 24 61 64 64 72 65 73 73 4c 69 6e 65 31 5c 6e 20 20 20 20 20 20 20 20 61 64 64 72 65 73 73 4c 69 6e 65 32 3a 20 24 Data Ascii: ine2: String\n $city: String!\n $state: String!\n $zip: String!\n ) {\n validateHdDeliveryAddress(\n validateHdDeliveryAddressInput: {\n subscriptionId: $subscriptionId\n addressLine1: $addressLine1\n addressLine2: $
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 73 74 44 69 72 65 63 74 69 6f 6e 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 20 20 24 61 64 64 72 65 73 73 4c 69 6e 65 32 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 20 20 24 61 64 64 72 65 73 73 43 68 61 6e 67 65 44 61 74 65 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 20 20 24 70 68 6f 6e 65 3a 20 53 74 72 69 6e 67 21 5c 6e 20 20 29 7b 5c 6e 20 20 20 20 63 68 61 6e 67 65 48 64 44 65 6c 69 76 65 72 79 41 64 64 72 65 73 73 28 63 68 61 6e 67 65 48 64 44 65 6c 69 76 65 72 79 41 64 64 72 65 73 73 49 6e 70 75 74 3a 7b 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3a 20 24 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 2c 5c 6e 20 20 20 20 20 20 6e 65 77 50 72 6f 64 75 63 74 43 6f 64 65 3a 20 24 6e 65 77 50 72 6f 64 75 63 74 43 6f 64 65 2c 5c 6e 20 20 20 20 20 Data Ascii: stDirection: String!\n $addressLine2: String!\n $addressChangeDate: String!\n $phone: String!\n ){\n changeHdDeliveryAddress(changeHdDeliveryAddressInput:{\n subscriptionId: $subscriptionId,\n newProductCode: $newProductCode,\n
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 31 63 6e 6b 61 33 22 7d 29 28 22 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 61 75 74 6f 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 22 2c 48 2e 68 62 5b 32 5d 2c 22 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 61 72 74 3b 22 29 2c 4a 3d 4f 62 6a 65 63 74 28 55 2e 64 29 28 22 73 70 61 6e 22 2c 7b 74 61 72 67 65 74 3a 22 65 61 31 63 6e 6b 61 34 22 7d 29 28 22 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 22 29 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 28 24 2e 73 29 28 7b 6d 6f 64 75 6c 65 4e 61 6d 65 3a 22 43 68 61 6e 67 65 41 64 64 72 65 73 73 22 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 22 43 68 61 Data Ascii: 1cnka3"})("display:grid;grid-template-columns:auto max-content;grid-column-gap:",H.hb[2],";align-items:start;"),J=Object(U.d)("span",{target:"ea1cnka4"})("text-transform:uppercase;"),Q=function(e){Object($.s)({moduleName:"ChangeAddress",moduleContext:"Cha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50279	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1137	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.26&x=0&m=0&y=1210&o=1263&w=907&j=30&R=1&W=0&I=0&E=6&e=5&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=3&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:51 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50281	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	521	OUT	GET /rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392024&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:51 UTC	983	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 66 32 62 38 63 31 35 62 30 61 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43f2b8c15b0a-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50275	147.75.198.144	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	615	OUT	GET /setuid/magnite?uid=LPSNS9TX-1-BT82 HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:51 UTC	702	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 5f 73 76 33 5f 37 3d 31 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 70 72 65 62 69 64 2e 61 2d 6d 6f 2e 6e 65 74 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 30 36 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 3b 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 Data Ascii: HTTP/1.1 204 No Contentcache-control: max-age=0, private, must-revalidatedate: Tue, 05 Dec 2023 18:13:50 GMTserver: envoyset-cookie: _sv3_7=1; path=/; domain=prebid.a-mo.net; expires=Wed, 06 Dec 2023 18:13:51 GMT; max-age=86400; secure; HttpOnly;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50283	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	512	OUT	GET /w/1.0/pd HTTP/1.1 Host: nytimes-d.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
2023-12-05 18:13:51 UTC	244	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKVary: Accept, Accept-EncodingServer: OXGW/0.0.0Date: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: text/htmlContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50276	52.45.125.152	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	648	OUT	GET /sync?pid=187&uid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:51 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 30 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 31 38 37 5f 63 69 64 3d 34 30 44 33 43 35 42 31 2d 43 39 34 34 2d 34 46 44 35 2d 42 31 42 45 2d 30 41 33 31 33 43 41 44 32 33 33 33 3b 20 44 6f 6d 61 69 6e 3d 2e 62 66 6d 69 6f 2e 63 6f 6d 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 30 32 34 20 31 33 3a 31 33 3a 35 31 20 47 4d 54 2d 30 35 30 30 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 69 6f 5f 63 69 64 3d 31 61 35 63 34 32 31 33 35 31 Data Ascii: HTTP/1.1 204 Date: Tue, 05 Dec 2023 18:13:50 GMTSet-Cookie: __187_cid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; Domain=.bfmio.com; Max-Age=31536000; Expires=Wed, 04-Dec-2024 13:13:51 GMT-0500; Path=/; SameSite=None; SecureSet-Cookie: __io_cid=1a5c421351

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50280	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	930	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=Farnaz%20Fassihi&n=1&f=00001&c=0&x=0&m=0&y=948&o=1263&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2Funited-nations-war-gaza-israel.html&b=7337&t=B4FYW8kZWmaBgsmf5Xj0TQBlCSN8&V=141&i=On%20the%20Ground%20in%20Wars%20and%20Disasters%2C%20the%20U.N.%20Plays%20a%20Vital%20Role&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=2&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:51 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50271	3.225.218.10	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	835	OUT	GET /ups/58824/sync?_origin=0&dpid=55953&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&gdpr=0&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu"
2023-12-05 18:13:51 UTC	815	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 78 70 69 72 65 73 3d 57 65 64 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50285	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1865	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:51 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:51 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50284	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	470	OUT	GET /rum?cm_dsp_id=123&external_user_id=ouSZFtWWWhZ1z51Vjhge9WalMFM HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:51 UTC	989	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 66 33 61 61 65 61 32 30 34 35 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43f3aaea2045-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50286	8.28.7.83	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1515	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:62D0F5E82D1A4ED6B3E32459FF4A59CA HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
2023-12-05 18:13:51 UTC	830	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 38 3a 34 37 3a 31 31 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 31 34 38 3d 31 39 34 32 31 2d 75 69 64 3a 36 32 44 30 46 35 45 38 32 44 31 41 34 45 44 36 42 33 45 33 32 34 35 39 46 46 34 41 35 39 43 41 26 4b 52 54 42 26 32 33 34 38 36 2d 75 69 64 3a 36 32 44 30 46 35 45 38 32 44 31 41 34 45 44 36 42 33 45 33 32 34 35 39 46 46 34 41 35 39 43 41 26 4b 52 54 42 26 32 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 08:47:11 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&2
2023-12-05 18:13:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50291	34.98.64.218	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	628	OUT	GET /w/1.0/sd?id=537072971&val=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=cb41ddf7-9503-3289-5193-e42d91a3be7b&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
2023-12-05 18:13:51 UTC	568	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 6e 69 76 5f 69 64 3d 35 33 37 30 37 32 39 37 31 7c 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 7c 31 37 30 31 38 30 30 30 33 31 34 36 30 35 38 36 3b 20 56 65 72 73 69 6f 6e 3d 31 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 44 65 63 2d 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 31 32 39 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 44 6f 6d 61 69 6e 3d 2e 6f 70 65 6e 78 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 Data Ascii: HTTP/1.1 200 OKVary: AcceptSet-Cookie: univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800031460586; Version=1; Expires=Wed, 20-Dec-2023 18:13:51 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=NoneServer: OXGW/0.0.0Pr
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50288	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1472	OUT	GET /AdServer/ImgSync?sec=1&gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
2023-12-05 18:13:51 UTC	620	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 70 63 3d 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 30 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 3d 31 36 33 34 32 37 3a 33 Data Ascii: HTTP/1.1 204 No ContentP3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure;Set-Cookie: pi=163427:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50300	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1466	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; ipc=163427^^1^0; chkChromeAb67Sec=4; pi=156011:4; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; SyncRTB3=1702944000%3A21_13_54_250_71_3_220%7C1702339200%3A223; SPugT=1701800030; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029
2023-12-05 18:13:51 UTC	620	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 70 63 3d 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 30 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 3d 31 36 33 34 32 37 3a 33 Data Ascii: HTTP/1.1 204 No ContentP3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure;Set-Cookie: pi=163427:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50292	34.98.64.218	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	566	OUT	GET /w/1.0/sd?id=537072991&val=CAESECAa8WLXRHlPGPDOW4QQem0&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800026948419
2023-12-05 18:13:51 UTC	366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKVary: AcceptServer: OXGW/0.0.0Pragma: no-cacheP3P: CP="CUR ADM OUR NOR STA NID"Expires: Mon, 26 Jul 1997 05:00:00 GMTDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Cache-Control: private, max-a
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50289	104.97.85.167	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	801	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
2023-12-05 18:13:51 UTC	680	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 74 74 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 7e 7e 36 33 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63;Expires=Tue, 19 Dec 2023 18:13:51 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=truep3p: CP="NON DSP COR
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:51 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50302	44.218.177.189	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&vxii_pid=12&vxii_pid1=10067&vxii_rcid=ebe308dd-d709-4689-8b60-d83ca68d342e HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImViZTMwOGRkLWQ3MDktNDY4OS04YjYwLWQ4M2NhNjhkMzQyZSIsImwiOjE3MDE4MDAwMzA5MDEsInQiOjF9
2023-12-05 18:13:51 UTC	353	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 4f 55 52 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6d 63 3d 65 79 4a 70 5a 43 49 36 49 6d 56 69 5a 54 4d 77 4f 47 52 6b 4c 57 51 33 4d 44 6b 74 4e 44 59 34 4f 53 30 34 59 6a 59 77 4c 57 51 34 4d 32 4e 68 4e 6a 68 6b 4d 7a 51 79 5a 53 49 73 49 6d 77 69 4f 6a 45 33 4d 44 45 34 4d 44 41 77 4d 7a 45 30 4e 44 6b 73 49 6e 51 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Connection: closeP3p: CP="NOI OUR BUS UNI COM NAV"Set-Cookie: mc=eyJpZCI6ImViZTMwOGRkLWQ3MDktNDY4OS04YjYwLWQ4M2NhNjhkMzQyZSIsImwiOjE3MDE4MDAwMzE0NDksInQ
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50290	34.111.113.62	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	747	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LPSNS9TX-1-BT82 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=
2023-12-05 18:13:51 UTC	1095	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 0d 0a 41 63 63 65 70 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTStrict-Transport-Security: max-age=31536000Access-Control-Allow-Origin: *Accept-CH: Sec-CH-UAAccept-CH: Sec-CH-UA-ArchAccept-CH: Sec-CH-UA-BitnessAccept-CH: Sec-CH-UA-Full-Version-ListAccep
2023-12-05 18:13:51 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50293	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	518	OUT	GET /usermatchredir?s=184023&gdpr_consent=&gdpr=&gpp=&gpp_sid=&google_gid=CAESELezj83S7KBI3Z4Ws1BVBdw&google_cver=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:51 UTC	987	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 66 34 61 63 38 31 38 32 34 32 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e43f4ac818242-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50304	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	2214	OUT	GET /vi-assets/static-assets/189-3e065270ece8c1d79bad.js?_sw-precache=7de843da5589f4c57725ee4b0d29b3fe HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:51 UTC	1321	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 31 38 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 61 71 50 50 5f 6a 30 63 58 76 5a 53 48 61 41 6d 30 4a 4a 6f 6a 77 46 4b 44 64 56 4e 6b 55 50 75 78 61 51 47 6c 34 48 32 5a 43 47 58 52 52 65 71 6b 67 73 4b 70 39 4e 5a 71 74 64 64 48 6b 38 49 6c 58 34 47 38 73 64 39 34 4b 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 34 37 38 33 35 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 13186X-GUploader-UploadID: ABPtcPraqPP_j0cXvZSHaAm0JJojwFKDdVNkUPuxaQGl4H2ZCGXRReqkgsKp9NZqtddHk8IlX4G8sd94Kwx-goog-generation: 1701718545478352x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:51 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 39 5d 2c 7b 22 32 69 70 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 63 68 61 6e 67 65 44 61 79 73 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 75 72 72 65 6e 74 53 75 62 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 2c 6e 2e 64 28 74 2c 22 70 72 69 63 65 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 70 72 6f 6d 6f 52 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[189],{"2ipm":function(e,t,n){"use strict";n.r(t),n.d(t,"changeDaysHDSub",(function(){return a})),n.d(t,"currentSubHDSub",(function(){return o})),n.d(t,"priceHDSub",(function(){return c})),n.d(t,"promoRa
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 6f 6e 74 61 63 74 43 61 72 65 41 6c 6c 22 3b 76 61 72 20 6d 3d 22 59 6f 75 72 20 48 6f 6d 65 20 44 65 6c 69 76 65 72 79 20 63 68 61 6e 67 65 20 68 61 73 20 62 65 65 6e 20 73 63 68 65 64 75 6c 65 64 2e 22 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 65 66 66 65 63 74 69 76 65 44 61 74 65 2c 6e 3d 65 2e 70 72 6f 64 75 63 74 4e 61 6d 65 3b 72 65 74 75 72 6e 20 69 28 29 28 22 73 70 61 6e 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 53 74 61 72 74 69 6e 67 20 22 2c 74 2c 22 20 79 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 22 2c 6e 2c 22 2e 20 49 74 20 6d 61 79 20 74 61 6b 65 20 61 20 66 65 77 20 64 61 79 73 20 61 66 74 65 72 20 74 68 61 74 20 64 61 74 65 20 66 6f 72 20 79 6f 75 72 20 66 69 72 73 74 20 70 61 70 65 72 20 74 6f 20 61 72 72 69 76 65 Data Ascii: ontactCareAll";var m="Your Home Delivery change has been scheduled.",b=function(e){var t=e.effectiveDate,n=e.productName;return i()("span",{},void 0,"Starting ",t," you will have ",n,". It may take a few days after that date for your first paper to arrive
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 74 20 6f 75 72 20 22 2c 69 2c 22 2e 22 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 68 65 6c 70 43 65 6e 74 65 72 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 64 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 2a 44 75 65 20 74 6f 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 69 6e 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 79 6f 75 72 20 61 72 65 61 2c 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 70 75 62 6c 69 63 61 74 69 6f 6e 20 64 61 79 73 20 6d 61 79 20 62 65 20 69 6d 70 61 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 64 65 6c 69 76 65 72 79 20 64 61 79 73 20 79 6f 75 20 73 65 6c 65 63 74 2e 20 54 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 2c 20 70 6c 65 61 73 65 20 76 69 Data Ascii: t our ",i,".")},A=function(e){var t=e.helpCenterLink;return d.a.createElement(d.a.Fragment,null,"*Due to limitations in distribution in your area, one or more publication days may be impacted based on the delivery days you select. To learn more, please vi
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 73 69 7a 65 3b 72 65 74 75 72 6e 20 6e 3f 31 3d 3d 3d 69 3f 22 75 70 20 74 6f 20 6f 6e 65 20 64 61 79 22 3a 22 75 70 20 74 6f 20 22 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 28 52 2e 61 29 28 69 29 2c 22 20 64 61 79 73 22 29 3a 61 3e 31 3f 22 75 70 20 74 6f 20 22 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 28 52 2e 61 29 28 69 29 2c 22 20 64 61 79 73 22 29 3a 31 3d 3d 3d 69 3f 22 74 68 65 20 64 61 79 22 3a 22 22 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 28 52 2e 61 29 28 69 29 2c 22 20 64 61 79 73 22 29 7d 28 65 29 29 7d 3b 71 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 67 65 74 44 65 6c 69 76 65 72 79 44 69 73 72 75 70 74 69 6f 6e 44 65 6c 61 79 22 3b 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 28 29 28 66 2e 61 2c 74 Data Ascii: size;return n?1===i?"up to one day":"up to ".concat(Object(R.a)(i)," days"):a>1?"up to ".concat(Object(R.a)(i)," days"):1===i?"the day":"".concat(Object(R.a)(i)," days")}(e))};q.displayName="getDeliveryDisruptionDelay";var B=function(e,t){return c()(f.a,t
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 22 2c 6c 2e 68 62 5b 31 2e 35 5d 2c 22 3b 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 6c 2e 49 2e 4d 45 44 49 55 4d 2c 22 29 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 61 75 74 6f 20 22 2c 4b 2e 64 2c 22 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 22 2c 6c 2e 68 62 5b 33 5d 2c 22 3b 7d 22 29 2c 24 3d 4f 62 6a 65 63 74 28 4a 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 63 6e 73 6f 6a 71 32 22 7d 29 28 22 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 22 2c 6c 2e 68 62 5b 31 5d 2c 22 3b 22 29 2c 5f 3d 4f 62 6a 65 63 74 28 4a 2e 64 29 28 22 73 70 61 6e Data Ascii: lay:grid;grid-row-gap:",l.hb[1.5],";@media only screen and (min-width:",l.I.MEDIUM,"){grid-template-columns:auto ",K.d,";grid-column-gap:",l.hb[3],";}"),$=Object(J.d)("div",{target:"ecnsojq2"})("display:grid;grid-row-gap:",l.hb[1],";"),_=Object(J.d)("span
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 64 50 72 6f 64 75 63 74 43 68 61 6e 67 65 45 6c 69 67 69 62 69 6c 69 74 79 20 7b 5c 6e 20 20 20 20 61 63 63 6f 75 6e 74 49 6e 66 6f 28 73 75 72 66 61 63 65 43 6f 64 65 3a 20 22 63 68 61 6e 67 65 2d 68 64 2d 70 72 6f 64 75 63 74 2d 70 61 67 65 22 29 20 7b 5c 6e 20 20 20 20 20 20 64 69 73 70 6c 61 79 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 5c 6e 20 20 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 43 6f 64 65 5c 6e 20 20 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 54 69 65 72 73 20 7b 5c Data Ascii: dProductChangeEligibility {\n accountInfo(surfaceCode: "change-hd-product-page") {\n displayName\n subscriptions {\n subscriptionId\n subscriptionName\n productCode\n billingInformation {\n billingTiers {\
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 5b 5d 29 3b 76 61 72 20 72 3d 7b 74 69 74 6c 65 3a 65 65 7c 7c 28 65 65 3d 63 28 29 28 66 2e 61 2c 7b 63 6f 70 79 3a 6a 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 54 69 74 6c 65 48 44 53 75 62 7d 29 29 2c 63 6f 70 79 3a 63 28 29 28 66 2e 61 2c 7b 63 6f 70 79 3a 6a 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 43 6f 70 79 48 44 53 75 62 2c 70 61 72 61 6d 73 3a 7b 65 66 66 65 63 74 69 76 65 44 61 74 65 3a 63 28 29 28 6c 2e 73 2c 7b 74 79 70 65 53 74 79 6c 65 3a 6c 2e 5a 2e 74 69 74 6c 65 31 7d 2c 76 6f 69 64 20 30 2c 4f 62 6a 65 63 74 28 44 2e 64 29 28 74 29 29 2c 70 72 6f 64 75 63 74 4e 61 6d 65 3a 6e 7d 7d 29 7d 3b 72 65 74 75 72 6e 20 63 28 29 28 67 2e 61 2c 7b 6d 65 73 73 61 67 65 3a 72 2c 74 72 61 63 6b 69 6e 67 4d 6f 64 Data Ascii: []);var r={title:ee\|\|(ee=c()(f.a,{copy:j.confirmationMessageTitleHDSub})),copy:c()(f.a,{copy:j.confirmationMessageCopyHDSub,params:{effectiveDate:c()(l.s,{typeStyle:l.Z.title1},void 0,Object(D.d)(t)),productName:n}})};return c()(g.a,{message:r,trackingMod
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 26 4c 29 7b 76 61 72 20 4a 3d 77 2e 63 68 61 6e 67 65 48 64 50 72 6f 64 75 63 74 2e 65 66 66 65 63 74 69 76 65 44 61 74 65 3b 72 65 74 75 72 6e 20 63 28 29 28 6a 65 2c 7b 65 66 66 65 63 74 69 76 65 44 61 74 65 3a 4a 2c 70 72 6f 64 75 63 74 4e 61 6d 65 3a 4c 2e 70 72 6f 64 75 63 74 4e 61 6d 65 7d 29 7d 76 61 72 20 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 6c 69 76 65 72 79 44 61 79 73 7d 29 29 2e 66 6c 61 74 28 29 3b 72 65 74 75 72 6e 20 78 28 74 29 7d 28 5a 29 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 72 6f 64 75 63 74 43 6f 64 65 3d Data Ascii: &L){var J=w.changeHdProduct.effectiveDate;return c()(je,{effectiveDate:J,productName:L.productName})}var K=function(e){var t=e.map((function(e){return e.deliveryDays})).flat();return x(t)}(Z),U=function(e,t){var n=e.find((function(e){return e.productCode=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50301	34.111.113.62	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=
2023-12-05 18:13:51 UTC	1101	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 0d 0a 41 63 63 65 70 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:51 GMTStrict-Transport-Security: max-age=31536000Access-Control-Allow-Origin: *Accept-CH: Sec-CH-UAAccept-CH: Sec-CH-UA-ArchAccept-CH: Sec-CH-UA-BitnessAccept-CH: Sec-CH-UA-Full-Version-ListAccep
2023-12-05 18:13:51 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50303	23.92.190.68	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	611	OUT	GET /merge?pid=80&3pid=LPSNS9TX-1-BT82 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:51 UTC	543	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 6a 74 5f 72 65 61 64 65 72 3d 48 78 59 46 61 51 5a 48 34 6b 4e 6b 5f 6d 73 6d 54 35 71 64 68 49 36 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6c 69 6a 69 74 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 30 32 34 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 53 65 63 75 72 65 3b 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 30 20 4d 61 72 20 32 30 30 39 Data Ascii: HTTP/1.1 302 FoundConnection: closeDate: Tue, 05 Dec 2023 18:13:51 GMTSet-Cookie: ljt_reader=HxYFaQZH4kNk_msmT5qdhI6D; Path=/; Domain=.lijit.com; Expires=Wed, 04-Dec-2024 18:13:51 GMT; Max-Age=31536000;Secure;SameSite=NoneExpires: Fri, 20 Mar 2009

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50298	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	629	OUT	POST /report HTTP/1.1 Host: csp.dev.nytimes.com Connection: keep-alive Content-Length: 1882 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:51 UTC	1882	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 61 75 74 68 2f 69 66 72 61 6d 65 2f 65 6e 74 65 72 2d 65 6d 61 69 6c 3f 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 6f 6b 69 65 26 63 6c 69 65 6e 74 5f 69 64 3d 66 72 65 65 78 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 73 75 62 73 63 72 69 70 74 69 6f 6e 25 32 46 6f 6e 62 6f 61 72 64 69 6e 67 2d 6f 66 66 65 72 25 33 46 63 61 6d 70 61 69 67 6e 49 64 25 33 44 37 4a 46 4a 58 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 Data Ascii: {"csp-report":{"document-uri":"https://myaccount.nytimes.com/auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%25
2023-12-05 18:13:51 UTC	361	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 32 34 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 30 35 33 2d 49 41 44 0d 0a 58 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 424Server: VarnishRetry-After: 0Content-Type: text/html; charset=utf-8Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:51 GMTVia: 1.1 varnishX-Served-By: cache-iad-kiad7000053-IADX
2023-12-05 18:13:51 UTC	424	IN	Data Raw: 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 68 31 3e 45 72 72 6f 72 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html> <head> <title>403 Forbidden</title> </head> <body> <h1>Error 403 Forbidden</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50305	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	2213	OUT	GET /vi-assets/static-assets/25-4442bfdc00564bf7dbda.js?_sw-precache=1bf7cf9b566ff27e7b0b5585d81425db HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:51 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 35 36 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 5f 79 6a 56 32 6c 72 55 51 76 65 48 50 2d 4d 30 79 39 47 6c 6f 5a 58 53 69 77 30 52 65 47 69 4b 6e 6e 4f 52 58 33 5f 2d 6f 36 6e 38 52 69 32 52 6a 67 42 55 75 79 37 71 49 31 71 5a 66 4b 32 6c 6b 4d 35 45 48 76 6c 47 6c 54 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 35 34 30 37 39 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 37561X-GUploader-UploadID: ABPtcPq_yjV2lrUQveHP-M0y9GloZXSiw0ReGiKnnORX3_-o6n8Ri2RjgBUuy7qI1qZfK2lkM5EHvlGlTAx-goog-generation: 1701369734540794x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:51 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 5d 2c 7b 22 2b 33 4d 34 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 2c 74 2e 64 28 6e 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 74 2e 64 28 6e 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 29 2c 74 2e 64 28 6e 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 29 29 2c 74 2e 64 28 6e 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"+3M4":function(e,n,t){"use strict";t.d(n,"f",(function(){return s})),t.d(n,"g",(function(){return p})),t.d(n,"a",(function(){return b})),t.d(n,"e",(function(){return y})),t.d(n,"d",(function(){ret
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 2c 22 62 75 74 74 6f 6e 4d 69 73 73 69 6e 67 50 61 70 65 72 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 29 29 2c 74 2e 64 28 6e 2c 22 62 75 74 74 6f 6e 4d 69 73 73 69 6e 67 52 65 64 65 6c 69 76 65 72 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 29 29 2c 74 2e 64 28 6e 2c 22 62 75 74 74 6f 6e 4d 69 73 73 69 6e 67 53 65 63 74 69 6f 6e 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 74 2e 64 28 6e 2c 22 62 75 74 74 6f 6e 4f 74 68 65 72 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 2c 74 2e 64 28 6e 2c 22 62 75 74 74 6f 6e 4f 74 68 65 72 50 72 6f 62 6c 65 6d 48 44 53 75 62 22 2c 28 66 75 6e Data Ascii: ,"buttonMissingPaperHDSub",(function(){return v})),t.d(n,"buttonMissingRedeliveryHDSub",(function(){return g})),t.d(n,"buttonMissingSectionHDSub",(function(){return S})),t.d(n,"buttonOtherHDSub",(function(){return h})),t.d(n,"buttonOtherProblemHDSub",(fun
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 2e 64 28 6e 2c 22 63 6f 70 79 53 63 68 65 64 75 6c 65 64 52 65 64 65 6c 69 76 65 72 79 54 6f 64 61 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 2c 74 2e 64 28 6e 2c 22 63 6f 70 79 53 63 68 65 64 75 6c 65 64 52 65 64 65 6c 69 76 65 72 79 54 6f 6d 6f 72 72 6f 77 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 2c 74 2e 64 28 6e 2c 22 63 6f 70 79 57 68 65 6e 54 61 6b 65 50 6c 61 63 65 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 29 29 2c 74 2e 64 28 6e 2c 22 63 6f 70 79 4e 6f 53 74 61 72 74 50 72 6f 63 65 73 73 65 64 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 7d 29 29 2c 74 2e 64 28 6e 2c 22 63 Data Ascii: .d(n,"copyScheduledRedeliveryTodayHDSub",(function(){return j})),t.d(n,"copyScheduledRedeliveryTomorrowHDSub",(function(){return U})),t.d(n,"copyWhenTakePlaceHDSub",(function(){return G})),t.d(n,"copyNoStartProcessedHDSub",(function(){return B})),t.d(n,"c
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 6e 66 6f 52 65 64 65 6c 69 76 65 72 79 57 69 6e 64 6f 77 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 69 6e 66 6f 57 65 74 50 61 70 65 72 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 69 6e 66 6f 4e 6f 53 74 61 72 74 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 69 6e 66 6f 4f 74 68 65 72 53 75 73 70 65 6e 73 69 6f 6e 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 69 6e 66 6f 50 72 65 53 74 61 72 74 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: nfoRedeliveryWindowHDSub",(function(){return de})),t.d(n,"infoWetPaperHDSub",(function(){return se})),t.d(n,"infoNoStartHDSub",(function(){return pe})),t.d(n,"infoOtherSuspensionHDSub",(function(){return be})),t.d(n,"infoPreStartHDSub",(function(){return
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 65 72 72 6f 72 41 64 74 41 72 72 69 76 65 42 79 4e 65 78 74 44 61 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 65 72 72 6f 72 53 75 73 70 65 6e 64 65 64 44 65 6c 69 76 65 72 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 65 72 72 6f 72 53 75 73 70 65 6e 64 65 64 44 65 6c 69 76 65 72 79 54 65 6d 70 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 65 7d 29 29 2c 74 2e 64 28 6e 2c 22 65 72 72 6f 72 41 64 74 57 65 61 74 68 65 72 53 61 6d 65 44 61 79 48 44 53 75 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 65 7d 29 29 2c 74 Data Ascii: e})),t.d(n,"errorAdtArriveByNextDayHDSub",(function(){return Me})),t.d(n,"errorSuspendedDeliveryHDSub",(function(){return Fe})),t.d(n,"errorSuspendedDeliveryTempHDSub",(function(){return _e})),t.d(n,"errorAdtWeatherSameDayHDSub",(function(){return We})),t
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 6e 67 20 73 65 63 74 69 6f 6e 22 2c 68 3d 22 4f 74 68 65 72 22 2c 44 3d 22 64 65 6c 69 76 65 72 79 20 70 72 6f 62 6c 65 6d 22 2c 43 3d 22 44 65 6c 69 76 65 72 79 20 64 75 72 69 6e 67 20 73 75 73 70 65 6e 73 69 6f 6e 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 66 72 6f 6d 2c 74 3d 65 2e 74 6f 2c 72 3d 65 2e 74 69 6d 65 7a 6f 6e 65 3b 72 65 74 75 72 6e 20 61 28 29 28 22 73 70 61 6e 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 52 65 64 65 6c 69 76 65 72 20 6d 79 20 70 61 70 65 72 20 74 6f 64 61 79 20 62 65 74 77 65 65 6e 20 22 2c 6e 2c 22 20 61 6e 64 20 22 2c 74 2c 72 29 7d 3b 45 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 62 75 74 74 6f 6e 52 65 64 65 6c 69 76 65 72 54 6f 64 61 79 48 44 53 75 62 22 3b 76 61 72 20 48 3d 22 57 65 74 20 70 Data Ascii: ng section",h="Other",D="delivery problem",C="Delivery during suspension",E=function(e){var n=e.from,t=e.to,r=e.timezone;return a()("span",{},void 0,"Redeliver my paper today between ",n," and ",t,r)};E.displayName="buttonRedeliverTodayHDSub";var H="Wet p
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 61 69 6c 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 74 20 22 2c 6e 2c 22 2e 22 29 7d 2c 5f 3d 22 57 65 e2 80 99 76 65 20 74 61 6b 65 6e 20 6e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 68 61 73 20 68 61 70 70 65 6e 65 64 2e 5c 6e 20 20 20 20 57 65 e2 80 99 6c 6c 20 66 6f 6c 6c 6f 77 20 75 70 20 77 69 74 68 20 79 6f 75 72 20 64 65 6c 69 76 65 72 79 20 73 65 72 76 69 63 65 20 61 6e 64 20 64 6f 20 6f 75 72 20 62 65 73 74 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 74 68 69 73 20 64 6f 65 73 6e e2 80 99 74 20 68 61 70 70 65 6e 20 61 67 61 69 6e 2e 22 2c 57 3d 22 59 6f 75 20 63 61 6e 20 72 65 70 6f 72 74 20 61 6e 79 20 64 65 6c 69 76 65 72 79 20 70 72 6f 62 6c 65 6d 73 20 66 72 6f Data Ascii: ail confirmation with this information at ",n,".")},_="Weve taken note that this has happened.\n Well follow up with your delivery service and do our best to make sure that this doesnt happen again.",W="You can report any delivery problems fro
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 65 72 65 64 20 64 75 72 69 6e 67 20 61 20 73 75 73 70 65 6e 73 69 6f 6e 2c 20 72 65 70 6f 72 74 20 69 74 20 6e 6f 77 2e 22 2c 51 3d 22 57 65 e2 80 99 76 65 20 65 73 63 61 6c 61 74 65 64 20 74 68 69 73 20 69 73 73 75 65 2e 22 2c 58 3d 22 59 6f 75 20 72 65 70 6f 72 74 65 64 20 61 6e 20 69 6e 63 6f 72 72 65 63 74 20 70 61 70 65 72 2e 22 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 75 73 70 65 6e 64 44 65 6c 69 76 65 72 79 4c 69 6e 6b 3b 72 65 74 75 72 6e 20 75 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 75 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 49 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 20 73 75 73 70 65 6e 64 65 64 20 79 6f 75 72 20 64 65 6c 69 76 65 72 79 2e 20 54 6f 20 6d 61 6b 65 20 63 68 61 6e 67 Data Ascii: ered during a suspension, report it now.",Q="Weve escalated this issue.",X="You reported an incorrect paper.",$=function(e){var n=e.suspendDeliveryLink;return u.a.createElement(u.a.Fragment,null,"It looks like you suspended your delivery. To make chang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50299	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	629	OUT	POST /report HTTP/1.1 Host: csp.dev.nytimes.com Connection: keep-alive Content-Length: 1882 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://myaccount.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://myaccount.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:51 UTC	1882	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 61 75 74 68 2f 69 66 72 61 6d 65 2f 65 6e 74 65 72 2d 65 6d 61 69 6c 3f 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 6f 6b 69 65 26 63 6c 69 65 6e 74 5f 69 64 3d 66 72 65 65 78 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 73 75 62 73 63 72 69 70 74 69 6f 6e 25 32 46 6f 6e 62 6f 61 72 64 69 6e 67 2d 6f 66 66 65 72 25 33 46 63 61 6d 70 61 69 67 6e 49 64 25 33 44 37 4a 46 4a 58 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 Data Ascii: {"csp-report":{"document-uri":"https://myaccount.nytimes.com/auth/iframe/enter-email?response_type=cookie&client_id=freex&redirect_uri=https%3A%2F%2Fwww.nytimes.com%2Fsubscription%2Fonboarding-offer%3FcampaignId%3D7JFJX%26redirect_uri%3Dhttps%253A%252F%25
2023-12-05 18:13:51 UTC	361	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 32 35 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 69 61 64 2d 6b 69 61 64 37 30 30 30 30 33 35 2d 49 41 44 0d 0a 58 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 425Server: VarnishRetry-After: 0Content-Type: text/html; charset=utf-8Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:51 GMTVia: 1.1 varnishX-Served-By: cache-iad-kiad7000035-IADX
2023-12-05 18:13:51 UTC	425	IN	Data Raw: 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 68 31 3e 45 72 72 6f 72 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html> <head> <title>403 Forbidden</title> </head> <body> <h1>Error 403 Forbidden</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50307	162.248.18.34	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1547	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; PugT=1701800029; SPugT=1701766087; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702944000%3A21_54_250_13_71_3_220%7C1702339200%3A223_15; ipc=0^^2^0; pi=0:3; chkChromeAb67Sec=6
2023-12-05 18:13:51 UTC	408	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 53 50 75 67 54 3d 31 37 30 31 38 30 30 30 33 31 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 2d 4a 61 6e 2d 32 30 32 34 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 3b 20 70 61 74 68 3d 2f 0d 0a 50 33 50 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Tue, 05 Dec 2023 18:13:51 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: SPugT=1701800031; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 04-Jan-2024 18:13:51 GMT; path=/P3P: CP="NOI DSP C
2023-12-05 18:13:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50308	34.200.65.202	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	824	OUT	GET /ups/58824/sync?_origin=0&dpid=58160&ovsid=LPSNS9TX-1-BT82&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA; IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu:18vk~2ffu"
2023-12-05 18:13:51 UTC	797	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 44 53 59 4e 43 3d 22 31 37 36 39 7e 32 66 66 75 3a 31 39 65 30 7e 32 66 66 75 3a 31 38 79 33 7e 32 66 66 75 3a 31 38 7a 38 7e 32 66 66 75 3a 31 38 76 6b 7e 32 66 66 75 22 3b 56 65 72 73 69 6f 6e 3d 31 3b 44 6f 6d 61 69 6e 3d 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 3b 50 61 74 68 3d 2f 3b 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 45 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:13:51 GMTContent-Length: 0Strict-Transport-Security: max-age=31536000Set-Cookie: IDSYNC="1769~2ffu:19e0~2ffu:18y3~2ffu:18z8~2ffu:18vk~2ffu";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50306	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1454	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 511 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad
2023-12-05 18:13:51 UTC	511	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 63 6f 6e 74 65 78 74 5f 69 64 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 74 6f 5f 6d 61 6b 65 5f 74 65 73 74 5f 63 6f 6e 74 65 78 74 5f 69 64 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 4b 6e 6b 5f 37 6d 41 4e 42 63 74 39 64 74 42 54 6e 4e 45 43 59 4d 45 53 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 61 74 69 76 65 5f 61 70 70 5f 61 64 73 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 Data Ascii: [{"context_id":"context_id_placeholder_to_make_test_context_id","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"Knk_7mANBct9dtBTnNECYMES","client_lib":"v1.3.0","sourceApp":"native_app_ads","subject":"dfp-ad-events","how":"beacon","client_ts":17018000
2023-12-05 18:13:51 UTC	758	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 35 31 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 41 63 74 69 76 65 3d 74 72 75 65 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 65 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 Data Ascii: HTTP/1.1 200 OKset-cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; Path=/; Domain=nytimes.com; Expires=Wed, 04 Dec 2024 18:13:51 GMT; Max-Age=31536000; Secure; SameSite=Noneset-cookie: sessionActive=true; Path=/; Domain=et.nytimes.com; Expires=Tue, 05 Dec 2023
2023-12-05 18:13:51 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50311	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	1530	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; SPugT=1701766087; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702944000%3A21_54_250_13_71_3_220%7C1702339200%3A223_15; ipc=0^^2^0; pi=0:3; chkChromeAb67Sec=6; PugT=1701766031
2023-12-05 18:13:51 UTC	1058	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 69 70 72 65 64 69 63 74 69 76 65 2e 63 6f 6d 2f 64 2f 73 79 6e 63 2f 63 6f 6f 6b 69 65 2f 67 65 6e 65 72 69 63 3f 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 24 7b 41 44 45 4c 50 48 49 43 5f 43 55 49 44 7d 26 67 64 70 72 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Location: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr
2023-12-05 18:13:51 UTC	236	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 69 70 72 65 64 69 63 74 69 76 65 2e 63 6f 6d 2f 64 2f 73 79 6e 63 2f 63 6f 6f 6b 69 65 2f 67 65 6e 65 72 69 63 3f 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 24 7b 41 44 45 4c 50 48 49 43 5f 43 55 49 44 7d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50312	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	2213	OUT	GET /vi-assets/static-assets/26-829d0d92ab50da3d5923.js?_sw-precache=089b1e142d629ea3bba142f182e4acf5 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:51 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 39 35 37 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 50 43 4d 57 59 67 70 5a 76 78 35 62 76 4d 2d 55 4d 6a 72 32 57 6e 30 47 39 79 32 5f 61 30 4c 4e 78 4e 47 33 62 4f 42 38 50 55 38 64 63 32 63 77 52 72 64 33 44 49 4b 6b 52 47 62 73 43 44 53 34 47 55 4f 30 6b 6e 4f 49 65 6f 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 36 38 32 37 36 38 30 36 32 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 49575X-GUploader-UploadID: ABPtcPpPCMWYgpZvx5bvM-UMjr2Wn0G9y2_a0LNxNG3bOB8PU8dc2cwRrd3DIKkRGbsCDS4GUO0knOIeogx-goog-generation: 1701376827680625x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:51 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 5d 2c 7b 22 36 5a 32 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 65 2e 64 28 6e 2c 22 41 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 2c 65 2e 64 28 6e 2c 22 7a 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 2c 65 2e 64 28 6e 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 29 29 2c 65 2e 64 28 6e 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"6Z20":function(t,n,e){"use strict";e.d(n,"a",(function(){return c})),e.d(n,"A",(function(){return o})),e.d(n,"z",(function(){return a})),e.d(n,"e",(function(){return u})),e.d(n,"d",(function(){ret
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 75 72 6e 7b 62 6e 64 3a 74 2e 70 72 6f 64 75 63 74 43 6f 64 65 2c 73 74 3a 74 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 75 73 2c 62 73 3a 74 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 42 69 6c 6c 69 6e 67 53 6f 75 72 63 65 7d 7d 29 29 7d 3b 4f 62 6a 65 63 74 28 69 2e 76 29 28 72 2c 6e 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 7b 63 75 72 50 72 6f 64 73 3a 74 2c 75 70 73 50 72 6f 64 73 3a 6e 7d 3b 4f 62 6a 65 63 74 28 69 2e 79 29 28 72 2c 22 42 65 6e 65 66 69 74 73 22 2c 65 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 28 69 2e 7a 29 28 72 2c 22 42 65 6e 65 66 69 74 73 22 2c 22 42 65 6e 65 66 69 74 4c 69 6e 6b 22 2c 74 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 7b Data Ascii: urn{bnd:t.productCode,st:t.subscriptionStatus,bs:t.subscriptionBillingSource}}))};Object(i.v)(r,n)},a=function(t,n){var e={curProds:t,upsProds:n};Object(i.y)(r,"Benefits",e)},u=function(t){Object(i.z)(r,"Benefits","BenefitLink",t)},l=function(t,n){var e={
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 61 6e 75 61 6c 50 61 79 6d 65 6e 74 4d 65 74 68 6f 64 22 2c 7b 7d 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 28 69 2e 7a 29 28 72 2c 22 50 61 79 6d 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 53 65 74 55 70 41 75 74 6f 70 61 79 42 74 6e 22 2c 74 29 7d 2c 4c 3d 7b 4e 4f 4e 45 3a 22 4e 4f 22 2c 4d 41 4e 41 47 45 5f 53 55 42 53 43 52 49 50 54 49 4f 4e 3a 22 4d 53 22 2c 53 55 42 53 43 52 49 50 54 49 4f 4e 5f 44 45 54 41 49 4c 53 3a 22 53 44 22 7d 2c 46 3d 7b 53 45 45 5f 4e 45 58 54 5f 50 41 59 4d 45 4e 54 3a 22 4e 50 4d 22 2c 50 52 4f 44 55 43 54 5f 53 57 49 54 43 48 3a 22 50 53 57 22 2c 43 48 41 4e 47 45 5f 48 44 5f 50 52 4f 44 55 43 54 3a 22 43 48 44 22 2c 44 49 47 49 54 41 4c 5f 50 41 55 53 45 3a 22 50 41 55 22 2c 53 55 53 Data Ascii: anualPaymentMethod",{})},M=function(t){Object(i.z)(r,"PaymentInformation","SetUpAutopayBtn",t)},L={NONE:"NO",MANAGE_SUBSCRIPTION:"MS",SUBSCRIPTION_DETAILS:"SD"},F={SEE_NEXT_PAYMENT:"NPM",PRODUCT_SWITCH:"PSW",CHANGE_HD_PRODUCT:"CHD",DIGITAL_PAUSE:"PAU",SUS
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 28 72 2c 22 52 65 61 63 74 69 76 61 74 65 53 75 62 73 63 72 69 70 74 69 6f 6e 44 69 61 6c 6f 67 22 2c 65 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 63 3d 7b 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3a 6e 2c 70 72 6f 64 75 63 74 3a 65 7d 3b 4f 62 6a 65 63 74 28 69 2e 77 29 28 72 2c 22 52 65 61 63 74 69 76 61 74 65 53 75 62 73 63 72 69 70 74 69 6f 6e 44 69 61 6c 6f 67 22 2c 22 52 65 61 63 74 69 76 61 74 65 53 75 62 73 63 72 69 70 74 69 6f 6e 43 6f 6e 66 69 72 6d 42 74 6e 22 2c 74 2c 63 29 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 63 3d 7b 73 75 62 73 63 72 69 70 74 69 6f 6e 49 64 3a 6e 2c 70 72 6f 64 75 63 74 3a 65 7d 3b 4f 62 6a 65 63 74 28 69 2e 77 29 28 72 2c 22 52 65 61 63 74 69 76 61 74 65 Data Ascii: (r,"ReactivateSubscriptionDialog",e)},E=function(t,n,e){var c={subscriptionId:n,product:e};Object(i.w)(r,"ReactivateSubscriptionDialog","ReactivateSubscriptionConfirmBtn",t,c)},T=function(t,n,e){var c={subscriptionId:n,product:e};Object(i.w)(r,"Reactivate
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 69 34 34 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 29 28 22 73 76 67 22 2c 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 69 64 3a 22 4c 61 79 65 72 5f 31 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 78 3a 22 30 70 78 22 2c 79 3a 22 30 70 78 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 38 20 31 38 22 2c 68 65 69 67 68 74 3a 22 31 38 70 78 22 2c 77 69 64 74 68 3a 22 32 34 70 78 22 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 22 67 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 22 70 61 74 68 22 2c 7b 73 74 79 6c 65 3a 7b 66 69 6c 6c 3a 22 23 32 44 37 37 42 42 22 7d 2c 64 3a 22 4d 33 2c 31 37 2e 35 63 2d 31 2e 34 2c 30 2d 32 2e 35 2d 31 2e 31 2d 32 2e 35 2d 32 2e Data Ascii: i44"),l=function(){return c()("svg",{version:"1.1",id:"Layer_1",xmlns:"http://www.w3.org/2000/svg",x:"0px",y:"0px",viewBox:"0 0 28 18",height:"18px",width:"24px"},void 0,c()("g",{},void 0,c()("path",{style:{fill:"#2D77BB"},d:"M3,17.5c-1.4,0-2.5-1.1-2.5-2.
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 36 2e 35 2c 31 37 2c 36 2e 38 63 30 2c 30 2e 33 2c 30 2e 31 2c 30 2e 35 2c 30 2e 32 2c 30 2e 36 20 63 30 2e 31 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 2c 30 2e 34 2c 30 2e 31 68 30 2e 33 6c 30 2e 39 2d 32 68 30 2e 39 6c 31 2c 32 2e 34 56 35 2e 35 68 30 2e 39 6c 31 2e 31 2c 31 2e 38 56 35 2e 35 68 30 2e 36 4c 32 33 2e 34 2c 38 2e 31 4c 32 33 2e 34 2c 38 2e 31 7a 20 4d 33 2e 31 2c 38 2e 36 68 31 4c 34 2e 34 2c 38 68 30 2e 35 6c 30 2e 32 2c 30 2e 36 68 32 2e 31 56 38 2e 31 20 6c 30 2e 32 2c 30 2e 34 68 31 2e 31 6c 30 2e 32 2d 30 2e 34 76 30 2e 34 68 35 2e 31 6c 30 2d 30 2e 39 68 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 31 2c 30 2c 30 2e 31 2c 30 2e 31 76 30 2e 38 68 32 2e 37 56 38 2e 34 63 30 2e 32 2c 30 2e 31 2c 30 2e 35 2c 30 2e 32 2c 31 2c 30 2e 32 68 31 2e 31 4c Data Ascii: 6.5,17,6.8c0,0.3,0.1,0.5,0.2,0.6 c0.1,0.1,0.3,0.1,0.4,0.1h0.3l0.9-2h0.9l1,2.4V5.5h0.9l1.1,1.8V5.5h0.6L23.4,8.1L23.4,8.1z M3.1,8.6h1L4.4,8h0.5l0.2,0.6h2.1V8.1 l0.2,0.4h1.1l0.2-0.4v0.4h5.1l0-0.9h0.1c0.1,0,0.1,0,0.1,0.1v0.8h2.7V8.4c0.2,0.1,0.5,0.2,1,0.2h1.1L
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 63 30 2c 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 31 2c 30 2e 32 63 30 2e 31 2c 30 2c 30 2e 31 2c 30 2c 30 2e 32 2c 30 6c 30 2e 33 2c 30 43 32 32 2e 31 2c 31 30 2e 39 2c 32 32 2e 33 2c 31 31 2c 32 32 2e 35 2c 31 31 2e 31 7a 20 4d 31 36 2e 39 2c 31 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 31 68 2d 30 2e 37 76 2d 30 2e 36 68 30 2e 38 20 63 30 2e 31 2c 30 2c 30 2e 32 2c 30 2c 30 2e 33 2c 30 63 30 2e 31 2c 30 2c 30 2e 31 2c 30 2e 31 2c 30 2e 31 2c 30 2e 32 53 31 37 2c 31 30 2e 39 2c 31 36 2e 39 2c 31 31 7a 20 4d 31 37 2e 33 2c 31 31 2e 33 63 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 31 2c 30 2e 33 2c 30 2e 32 63 30 2e 31 2c 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 31 2c 30 2e 35 76 30 2e 35 68 2d 30 2e 36 20 76 2d 30 2e 33 63 30 Data Ascii: c0,0.1,0.1,0.2,0.1,0.2c0.1,0,0.1,0,0.2,0l0.3,0C22.1,10.9,22.3,11,22.5,11.1z M16.9,11c-0.1,0-0.2,0.1-0.3,0.1h-0.7v-0.6h0.8 c0.1,0,0.2,0,0.3,0c0.1,0,0.1,0.1,0.1,0.2S17,10.9,16.9,11z M17.3,11.3c0.1,0.1,0.2,0.1,0.3,0.2c0.1,0.1,0.1,0.2,0.1,0.5v0.5h-0.6 v-0.3c0
2023-12-05 18:13:51 UTC	1379	IN	Data Raw: 38 33 39 36 36 20 38 2e 37 33 32 36 36 43 39 2e 30 34 34 38 36 20 38 2e 36 38 35 33 32 20 38 2e 33 36 39 30 39 20 39 2e 31 38 33 37 35 20 37 2e 39 38 39 35 34 20 39 2e 31 38 33 37 35 43 37 2e 36 30 39 37 37 20 39 2e 31 38 33 37 35 20 37 2e 30 32 38 35 35 20 38 2e 37 35 36 35 32 20 36 2e 33 39 39 39 31 20 38 2e 37 36 38 30 34 43 35 2e 35 38 31 37 20 38 2e 37 38 30 30 35 20 34 2e 38 32 32 34 39 20 39 2e 32 34 32 36 38 20 34 2e 34 30 37 32 38 20 39 2e 39 37 38 34 37 43 33 2e 35 35 33 32 36 20 31 31 2e 34 35 30 34 20 34 2e 31 38 31 39 20 31 33 2e 36 33 33 38 20 35 2e 30 31 32 33 39 20 31 34 2e 38 33 32 36 43 35 2e 34 31 35 36 39 20 31 35 2e 34 32 35 37 20 35 2e 39 30 31 37 34 20 31 36 2e 30 37 38 38 20 36 2e 35 34 32 31 38 20 31 36 2e 30 35 35 33 43 37 2e 31 Data Ascii: 83966 8.73266C9.04486 8.68532 8.36909 9.18375 7.98954 9.18375C7.60977 9.18375 7.02855 8.75652 6.39991 8.76804C5.5817 8.78005 4.82249 9.24268 4.40728 9.97847C3.55326 11.4504 4.1819 13.6338 5.01239 14.8326C5.41569 15.4257 5.90174 16.0788 6.54218 16.0553C7.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50314	23.92.190.68	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	662	OUT	GET /merge?pid=80&3pid=LPSNS9TX-1-BT82&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=HxYFaQZH4kNk_msmT5qdhI6D
2023-12-05 18:13:52 UTC	639	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 30 20 4d 61 72 20 32 30 30 39 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 6a 74 72 74 62 5f 38 30 3d 4c 50 53 4e 53 39 54 58 2d 31 2d 42 54 38 32 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6c 69 6a 69 74 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 2d 44 65 63 2d 32 30 32 34 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 53 65 63 75 72 65 3b 53 61 6d 65 53 69 74 65 3d 4e 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeDate: Tue, 05 Dec 2023 18:13:52 GMTExpires: Fri, 20 Mar 2009 00:00:00 GMTSet-Cookie: _ljtrtb_80=LPSNS9TX-1-BT82; Path=/; Domain=.lijit.com; Expires=Wed, 04-Dec-2024 18:13:52 GMT; Max-Age=31536000;Secure;SameSite=Non
2023-12-05 18:13:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50315	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	2213	OUT	GET /vi-assets/static-assets/27-0a22638425338ab5880d.js?_sw-precache=e20139d108ee9cd9cf7b667a2b071c6f HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:52 UTC	1312	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 31 39 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 37 49 79 5a 50 5a 64 44 69 6e 32 61 6b 6e 42 33 6a 30 4a 7a 71 61 69 58 72 57 35 32 36 48 35 42 32 70 71 4e 69 51 2d 31 59 69 4f 7a 51 68 73 46 55 56 54 4e 52 58 51 73 56 39 48 50 31 34 44 77 36 38 6e 38 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 30 38 37 33 32 33 32 36 39 39 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 19193X-GUploader-UploadID: ABPtcPr7IyZPZdDin2aknB3j0JzqaiXrW526H5B2pqNiQ-1YiOzQhsFUVTNRXQsV9HP14Dw68n8x-goog-generation: 1701708732326990x-goog-metageneration: 1x-goog-stored-content-encoding: id
2023-12-05 18:13:52 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 5d 2c 7b 22 53 44 2f 6c 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 3b 76 61 72 20 72 2c 6f 2c 69 2c 63 2c 61 2c 73 2c 75 2c 6c 2c 64 3d 6e 28 22 67 63 52 2f 22 29 2c 66 3d 6e 2e 6e 28 64 29 2c 70 3d 6e 28 22 4a 34 7a 70 22 29 2c 6d 3d 6e 2e 6e 28 70 29 2c 76 3d 6e 28 22 71 31 74 49 22 29 2c 62 3d 6e 28 22 4b 78 79 74 22 29 2c 77 3d 6e 28 22 4d 53 68 47 22 29 2c 67 3d 6e 28 22 66 54 78 6e 22 29 2c 4f 3d 6e 28 22 2f 45 66 6c 22 29 2c 41 3d 6e 28 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"SD/l":function(e,t,n){"use strict";n.d(t,"a",(function(){return j}));var r,o,i,c,a,s,u,l,d=n("gcR/"),f=n.n(d),p=n("J4zp"),m=n.n(p),v=n("q1tI"),b=n("Kxyt"),w=n("MShG"),g=n("fTxn"),O=n("/Efl"),A=n("
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 29 2c 7a 2e 64 69 73 70 6c 61 79 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 69 7c 7c 28 69 3d 66 28 29 28 4f 2e 61 2c 7b 63 6f 70 79 3a 6b 2e 74 65 63 68 6e 69 63 61 6c 45 72 72 6f 72 41 6c 6c 7d 29 29 2c 7b 7d 29 7d 7d 29 2c 5b 78 5d 29 2c 4f 62 6a 65 63 74 28 76 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 46 29 7b 69 66 28 46 2e 6e 65 74 77 6f 72 6b 45 72 72 6f 72 29 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 68 2e 6d 29 28 22 6e 65 74 77 6f 72 6b 5f 65 72 72 6f 72 22 29 2c 76 6f 69 64 20 7a 2e 64 69 73 70 6c 61 79 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 63 7c 7c 28 63 3d 66 28 29 28 4f 2e 61 2c 7b 63 6f 70 79 3a 6b 2e 74 65 63 68 6e 69 63 61 6c 45 72 72 6f 72 41 6c 6c 7d 29 29 2c 7b 7d 29 3b 76 61 72 20 65 3d 6d 28 29 28 Data Ascii: ),z.displayNotification(i\|\|(i=f()(O.a,{copy:k.technicalErrorAll})),{})}}),[x]),Object(v.useEffect)((function(){if(F){if(F.networkError)return Object(h.m)("network_error"),void z.displayNotification(c\|\|(c=f()(O.a,{copy:k.technicalErrorAll})),{});var e=m()(
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 2e 61 2c 7b 63 6f 70 79 3a 6b 2e 73 65 63 74 69 6f 6e 44 65 73 63 72 69 70 74 69 6f 6e 4d 61 72 6b 65 74 69 6e 67 2c 70 61 72 61 6d 73 3a 7b 65 6d 61 69 6c 41 64 64 72 65 73 73 43 6f 6d 70 6f 6e 65 6e 74 3a 57 7d 7d 29 7d 2c 76 6f 69 64 20 30 2c 66 28 29 28 77 2e 41 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 22 75 70 64 61 74 65 73 2d 73 70 65 63 69 61 6c 2d 6f 66 66 65 72 73 22 2c 6c 69 73 74 49 74 65 6d 48 65 61 64 65 72 3a 6b 2e 6c 69 41 63 74 69 6f 6e 54 69 74 6c 65 55 70 64 61 74 65 73 4f 66 66 65 72 73 2c 74 79 70 65 3a 77 2e 65 62 2e 61 63 74 69 6f 6e 2c 61 63 74 69 6f 6e 54 69 74 6c 65 3a 47 2e 61 63 74 69 6f 6e 54 69 74 6c 65 2c 6f 6e 43 6c 69 63 6b 3a 47 2e 6f 6e 43 6c 69 63 6b 2c 70 72 6f 63 65 73 73 69 6e 67 3a 42 7c 7c 71 2c 72 6f 6c 65 3a 22 67 Data Ascii: .a,{copy:k.sectionDescriptionMarketing,params:{emailAddressComponent:W}})},void 0,f()(w.A,{dataTestId:"updates-special-offers",listItemHeader:k.liActionTitleUpdatesOffers,type:w.eb.action,actionTitle:G.actionTitle,onClick:G.onClick,processing:B\|\|q,role:"g
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 72 72 6f 72 22 7d 3a 65 29 2e 6d 65 73 73 61 67 65 3b 69 66 28 6e 3d 3d 3d 6b 2e 67 29 72 65 74 75 72 6e 20 76 6f 69 64 20 4f 62 6a 65 63 74 28 45 2e 72 65 64 69 72 65 63 74 54 6f 4c 6f 67 69 6e 29 28 29 3b 4f 62 6a 65 63 74 28 41 2e 73 29 28 74 2c 6e 29 2c 44 2e 64 69 73 70 6c 61 79 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 6f 7c 7c 28 6f 3d 64 28 29 28 22 73 70 61 6e 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 67 2e 74 65 63 68 6e 69 63 61 6c 45 72 72 6f 72 41 6c 6c 29 29 2c 7b 7d 29 7d 7d 29 2c 5b 4c 5d 29 2c 4f 62 6a 65 63 74 28 6d 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 50 29 7b 4f 62 6a 65 63 74 28 41 2e 74 29 28 74 29 3b 76 61 72 20 65 3d 50 2e 75 6e 53 75 62 73 63 72 69 62 65 4e 65 77 73 6c 65 74 74 65 72 2e 70 72 6f Data Ascii: rror"}:e).message;if(n===k.g)return void Object(E.redirectToLogin)();Object(A.s)(t,n),D.displayNotification(o\|\|(o=d()("span",{},void 0,g.technicalErrorAll)),{})}}),[L]),Object(m.useEffect)((function(){if(P){Object(A.t)(t);var e=P.unSubscribeNewsletter.pro
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 29 29 2c 63 7c 7c 28 63 3d 64 28 29 28 62 2e 75 2c 7b 61 72 69 61 4c 61 62 65 6c 3a 67 2e 6c 69 4e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 62 65 72 45 78 63 6c 75 73 69 76 65 50 69 6c 6c 41 72 69 61 7d 2c 76 6f 69 64 20 30 2c 64 28 29 28 77 2e 61 2c 7b 63 6f 70 79 3a 67 2e 6c 69 4e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 62 65 72 45 78 63 6c 75 73 69 76 65 50 69 6c 6c 7d 29 29 29 29 29 7d 3b 53 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 4e 65 77 73 6c 65 74 74 65 72 4c 69 73 74 49 74 65 6d 22 3b 76 61 72 20 49 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 29 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 2d 28 65 2e 61 63 74 69 76 61 74 69 6f 6e 45 6e 74 69 74 6c 65 6d Data Ascii: )),c\|\|(c=d()(b.u,{ariaLabel:g.liNewsletterSubscriberExclusivePillAria},void 0,d()(w.a,{copy:g.liNewsletterSubscriberExclusivePill})))))};S.displayName="NewsletterListItem";var I=function(e){return e.slice().sort((function(e,t){return-(e.activationEntitlem
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 3e 30 3b 4f 62 6a 65 63 74 28 6d 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 28 41 2e 76 29 28 6e 29 7d 29 2c 5b 5d 29 3b 76 61 72 20 75 3d 64 28 29 28 62 2e 44 2c 7b 6c 65 76 65 6c 3a 22 32 22 2c 63 6f 6c 6f 72 56 61 72 69 61 6e 74 3a 62 2e 4e 2e 74 65 78 74 2e 70 72 69 6d 61 72 79 7d 2c 76 6f 69 64 20 30 2c 64 28 29 28 4f 2e 62 2c 7b 7d 2c 76 6f 69 64 20 30 2c 72 29 29 2c 6c 3d 64 28 29 28 77 2e 61 2c 7b 63 6f 70 79 3a 67 2e 73 65 63 74 69 6f 6e 44 65 73 63 72 69 70 74 69 6f 6e 4e 65 77 73 6c 65 74 74 65 72 45 6d 70 74 79 2c 70 61 72 61 6d 73 3a 7b 65 6d 61 69 6c 41 64 64 72 65 73 73 43 6f 6d 70 6f 6e 65 6e 74 3a 75 7d 7d 29 2c 66 3d 64 28 29 28 77 2e 61 2c 7b 63 6f 70 79 3a 67 2e 73 65 63 74 69 6f 6e 44 65 Data Ascii: >0;Object(m.useEffect)((function(){Object(A.v)(n)}),[]);var u=d()(b.D,{level:"2",colorVariant:b.N.text.primary},void 0,d()(O.b,{},void 0,r)),l=d()(w.a,{copy:g.sectionDescriptionNewsletterEmpty,params:{emailAddressComponent:u}}),f=d()(w.a,{copy:g.sectionDe
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 74 68 65 6e 74 69 63 61 74 69 6f 6e 4d 65 74 68 6f 64 73 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4c 61 62 65 6c 73 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 6d 61 72 6b 65 74 69 6e 67 45 6d 61 69 6c 73 50 72 65 66 5c 6e 20 20 20 20 20 20 6e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 43 6f 64 65 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 4e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 49 63 6f 6e 55 72 6c 5c 6e 20 20 20 20 20 20 20 20 6c 61 74 65 73 74 4e 65 77 73 6c 65 74 74 65 72 55 72 6c 5c 6e 20 20 20 20 20 20 20 20 66 72 65 71 75 65 6e 63 79 5c 6e Data Ascii: thenticationMethods\n subscriptions {\n subscriptionLabels\n }\n marketingEmailsPref\n newsletterSubscriptions {\n productCode\n productName\n productIconUrl\n latestNewsletterUrl\n frequency\n
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 69 41 63 74 69 6f 6e 42 75 74 74 6f 6e 4e 65 77 73 6c 65 74 74 65 72 41 72 69 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 65 63 74 69 6f 6e 44 65 73 63 72 69 70 74 69 6f 6e 4e 65 77 73 6c 65 74 74 65 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 66 72 65 71 75 65 6e 63 79 41 72 69 61 41 6c 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 69 4e 65 77 73 6c 65 74 74 65 72 4c 69 6e 6b 53 65 65 4c 61 74 65 73 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 69 4e 65 77 73 6c 65 74 74 65 72 4c 69 6e 6b 52 65 6d 6f 76 65 22 2c 28 66 75 Data Ascii: iActionButtonNewsletterAria",(function(){return d})),n.d(t,"sectionDescriptionNewsletter",(function(){return f})),n.d(t,"frequencyAriaAll",(function(){return p})),n.d(t,"liNewsletterLinkSeeLatest",(function(){return m})),n.d(t,"liNewsletterLinkRemove",(fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50313	23.218.218.72	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	794	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
2023-12-05 18:13:52 UTC	680	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 74 74 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 7e 7e 36 33 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63;Expires=Tue, 19 Dec 2023 18:13:52 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=truep3p: CP="NON DSP COR
2023-12-05 18:13:52 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:52 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50310	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:51 UTC	655	OUT	GET /video/2023/11/08/113087_1_MKTG-BAU-USAllAccessCrisisRefresh-Nov2023_wg_360p.mp4 HTTP/1.1 Host: vp.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2023-12-05 18:13:52 UTC	1098	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 36 20 50 61 72 74 69 61 6c 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 39 36 39 36 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 63 6e 78 36 56 6b 4e 56 64 43 4f 42 30 55 37 37 45 76 7a 74 63 39 52 5f 77 54 69 79 39 2d 6d 4b 4e 46 78 79 48 45 59 6a 5a 43 79 4a 6c 38 5a 64 79 64 6e 65 32 6b 4e 54 37 30 30 38 57 48 32 51 2d 53 7a 55 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 30 20 4e 6f 76 20 32 30 32 33 20 31 35 3a 31 35 3a 31 35 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c 20 30 38 20 4e 6f 76 20 32 30 32 33 20 32 31 3a 32 35 3a 32 30 20 47 Data Ascii: HTTP/1.1 206 Partial ContentConnection: closeContent-Length: 1696962X-GUploader-UploadID: ABPtcPrcnx6VkNVdCOB0U77Evztc9R_wTiy9-mKNFxyHEYjZCyJl8Zdydne2kNT7008WH2Q-SzUExpires: Mon, 20 Nov 2023 15:15:15 GMTLast-Modified: Wed, 08 Nov 2023 21:25:20 G
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 00 00 00 1c 66 74 79 70 69 73 6f 6d 00 00 00 01 69 73 6f 6d 61 76 63 31 6d 70 34 32 00 00 20 55 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e1 71 ad 3b e1 71 ad 3b 00 00 02 58 00 00 1e c6 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 15 69 6f 64 73 00 00 00 00 10 07 00 4f ff ff 29 15 ff 00 00 13 ad 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 01 e1 71 ad 38 e1 71 ad 3b 00 00 00 01 00 00 00 00 00 00 1e bb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 Data Ascii: ftypisomisomavc1mp42 Umoovlmvhdq;q;X@iodsO)trak\tkhdq8q;@
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0f a4 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 Data Ascii:
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 00 00 07 d2 00 00 00 01 00 00 0f a4 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0b bb 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0f a4 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0f a4 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 Data Ascii:
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 6d 00 00 4d ab 00 00 15 7e 00 00 39 c2 00 00 0d f3 00 00 3a f8 00 00 0c dc 00 00 42 1f 00 00 0f 90 00 00 40 92 00 00 0d 36 00 00 3e 71 00 00 0b 83 00 00 37 7d 00 00 09 0b 00 00 2f 14 00 00 08 47 00 00 2f 5e 00 00 09 20 00 00 32 84 00 00 09 49 00 00 0d df 00 00 c0 25 00 00 96 f8 00 00 10 d3 00 00 34 e6 00 00 04 5d 00 00 04 41 00 00 2d 19 00 00 05 00 00 00 05 23 00 00 30 08 00 00 07 93 00 00 2f ff 00 00 06 35 00 00 27 c9 00 00 05 24 00 00 29 ef 00 00 06 d7 00 00 08 55 00 00 22 a4 00 00 06 f6 00 00 05 ff 00 00 11 f8 00 00 06 bc 00 00 05 2a 00 00 62 e7 00 00 07 17 00 00 00 25 00 00 00 17 00 00 24 26 00 00 22 55 00 00 00 cd 00 00 00 24 00 00 01 14 00 00 00 2f 00 00 00 1e 00 00 22 99 00 00 01 82 00 00 00 21 00 00 21 f3 00 00 00 fb 00 00 00 2a 00 00 00 1b 00 00 Data Ascii: mM~9:B@6>q7}/G/^ 2I%4]A-#0/5'$)U"b%$&"U$/"!!
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 00 00 00 00 02 00 10 00 00 00 00 bb 80 00 00 00 00 00 2a 65 73 64 73 00 00 00 00 03 1c 00 00 00 04 14 40 15 00 02 3b 00 02 2c 40 00 01 dd 20 05 05 11 90 56 e5 00 06 01 02 00 00 00 18 73 74 74 73 00 00 00 00 00 00 00 01 00 00 02 6a 00 00 04 00 00 00 00 58 73 74 73 63 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 18 00 00 00 01 00 00 00 02 00 00 00 17 00 00 00 01 00 00 00 17 00 00 00 16 00 00 00 01 00 00 00 18 00 00 00 15 00 00 00 01 00 00 00 19 00 00 00 16 00 00 00 01 00 00 00 1c 00 00 00 02 00 00 00 01 00 00 09 bc 73 74 73 7a 00 00 00 00 00 00 00 00 00 00 02 6a 00 00 00 11 00 00 00 14 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 00 0a 00 00 Data Ascii: *esds@;,@ VsttsjXstscstszj
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 01 f3 00 00 02 11 00 00 01 63 00 00 01 56 00 00 01 31 00 00 01 36 00 00 01 2f 00 00 01 2e 00 00 01 e3 00 00 01 5f 00 00 01 3a 00 00 01 38 00 00 01 91 00 00 01 a2 00 00 01 6a 00 00 01 36 00 00 01 38 00 00 01 35 00 00 01 35 00 00 02 07 00 00 01 4b 00 00 01 25 00 00 01 34 00 00 01 37 00 00 02 03 00 00 02 04 00 00 01 71 00 00 01 59 00 00 01 37 00 00 01 32 00 00 01 36 00 00 01 44 00 00 01 32 00 00 01 30 00 00 01 35 00 00 01 23 00 00 01 44 00 00 01 34 00 00 01 28 00 00 01 29 00 00 01 32 00 00 01 31 00 00 01 e5 00 00 01 e1 00 00 01 3f 00 00 01 26 00 00 01 2d 00 00 01 2e 00 00 01 fd 00 00 01 96 00 00 01 3d 00 00 01 2b 00 00 01 2f 00 00 01 32 00 00 01 db 00 00 01 51 00 00 01 3b 00 00 01 36 00 00 01 3a 00 00 01 3e 00 00 01 4b 00 00 02 12 00 00 01 78 00 00 01 51 00 Data Ascii: cV16/._:8j6855K%47qY726D205#D4()21?&-.=+/2Q;6:>KxQ
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 17 94 15 00 18 28 d4 00 19 05 54 00 19 69 d6 00 19 86 1a 00 19 d0 5d 00 19 e2 d4 00 19 e4 ae 00 19 c4 51 6d 64 61 74 00 00 00 33 06 05 2f dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 5a 65 6e 63 6f 64 65 72 20 56 69 64 65 6f 20 45 6e 63 6f 64 69 6e 67 20 53 79 73 74 65 6d 00 80 00 00 14 92 65 88 84 00 33 ff f9 e0 52 6e 14 a8 61 ae 6c 39 b3 67 bf 5d 4e 89 a8 d1 b1 0e 1e e7 e6 53 10 f0 41 94 02 29 e4 00 00 03 00 00 03 00 00 b0 27 0f 61 8a 07 f3 17 a9 30 00 00 03 03 85 17 78 06 ea 9f 3d c0 64 3b 8b 39 b4 a1 9d 31 e7 ec a0 73 d1 9b 4d f4 f3 8b 23 9c 5a 60 de 2a a2 2a 97 f1 36 4a 92 f9 ac 91 d8 b5 ee d8 41 cc 6c e7 5f de 13 78 bb 40 02 16 67 98 f6 47 48 62 1a a3 67 ff b7 48 74 6c 06 c3 51 0a 9d 57 8b 08 04 d2 77 55 48 d9 05 e8 70 b7 ca 02 35 15 87 ed c0 7e Data Ascii: (Ti]Qmdat3/EH, #Zencoder Video Encoding Systeme3Rnal9g]NSA)'a0x=d;91sM#Z`**6JAl_x@gGHbgHtlQWwUHp5~
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 6f 9e 4a 4c fc a3 2f 39 b3 63 ac b5 b1 e5 53 bc 8f a4 2c 53 cb 42 63 65 f3 23 df 1c a7 18 b4 aa af ec e7 5d 68 16 27 bc e2 c6 4a f7 6b 8f 3e 96 cd 24 19 3e 33 bf d5 bc f4 92 48 97 1a 88 db d8 09 ec 97 3f 8a 93 15 22 de 77 fa b6 41 a4 f2 02 ff 98 10 e4 56 7b a1 89 44 39 01 73 67 b5 01 5f 75 cb b0 c6 4d be 86 9b 14 a4 b1 31 ac d9 f9 bd f3 29 22 09 12 bf 75 82 89 b5 62 3e 43 9b d0 10 f9 98 6c 93 2e 10 2e 6a 22 b7 e5 3b 13 cd f6 6a 7e 1c a0 a6 26 d9 bb f5 99 e4 bd 6e 2e bb 1b 80 14 3a 82 ac 26 41 c2 ca 9a 52 6c a9 d9 8a 68 9d 32 98 e5 15 cd 75 e3 84 f9 db 8d 18 d9 aa f5 b8 83 fd 81 06 8a 0c 61 41 f1 70 e6 c1 ef 96 1b 50 15 60 82 b3 1d 76 0b ac 59 4a f6 1e 97 ba 7a 33 cb 8d d3 16 6b e5 09 86 34 70 59 9f 3a 25 1b 19 0f 21 0e a8 29 3b 82 ac 9a 2f e3 aa e9 ea 82 Data Ascii: oJL/9cS,SBce#]h'Jk>$>3H?"wAV{D9sg_uM1)"ub>Cl..j";j~&n.:&ARlh2uaApP`vYJz3k4pY:%!);/
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: b5 43 04 56 5e ad a5 87 a9 07 c9 d8 64 17 bf 8d a3 28 e2 fd 17 d1 e5 42 66 2c ab 73 01 5e e9 64 87 c9 66 06 4d b6 ad e9 eb 63 2c d4 e6 13 83 a2 ad c2 75 04 dc 68 e1 e6 6c fa 7a 9b ab ce c3 6b 75 ea 15 f9 3f ba d7 d3 6a 22 3a ec 8d 57 07 d0 b3 e9 36 7f 13 ca ac a2 99 9e 72 f5 36 6d 40 1e f9 df 82 6d 61 94 6d 18 67 43 68 d0 8e 13 d2 1e d1 d7 b9 76 83 f6 a5 1c 22 37 8b 81 3b 8c cf ea a3 a9 9c fa f1 55 3e 01 47 f2 f0 8c be 6f 51 a7 ea f5 56 14 e3 90 01 0a cd 11 48 5f a0 41 7f e3 99 96 a8 94 f1 5d af fc 6a 94 49 a5 8d b0 07 19 7f 1b 57 34 8a 6b f3 c9 19 54 33 c2 c9 2c 7e 6e 05 ae 52 94 47 3a b8 04 d6 91 10 75 e5 9c 99 e3 05 7b 37 b5 52 23 5f ae 7d 2a af a4 23 ac 57 52 57 a4 cc e6 67 cd 3f 9e 62 24 ac 53 b7 50 e6 bb ef 17 06 bf 81 8e 7e 49 35 07 24 76 c8 8c af Data Ascii: CV^d(Bf,s^dfMc,uhlzku?j":W6r6m@mamgChv"7;U>GoQVH_A]jIW4kT3,~nRG:u{7R#_}*#WRWg?b$SP~I5$v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50316	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	2212	OUT	GET /vi-assets/static-assets/4-24263788fe90843adf10.js?_sw-precache=e4506aa7da56f4c7d46b6faceeddb4a4 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:52 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 30 30 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 49 52 30 43 79 33 30 6f 67 7a 2d 5a 54 5f 57 77 77 32 78 52 61 50 50 76 7a 2d 70 4b 5a 57 6f 69 64 5a 59 78 52 4e 45 46 6c 7a 70 65 36 4d 56 47 6c 6d 41 7a 68 56 4d 6a 42 58 45 79 71 45 69 4b 70 65 32 6f 5f 39 4a 50 5a 6e 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 31 32 30 35 32 34 36 34 32 38 35 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 26001X-GUploader-UploadID: ABPtcPqIR0Cy30ogz-ZT_Www2xRaPPvz-pKZWoidZYxRNEFlzpe6MVGlmAzhVMjBXEyqEiKpe2o_9JPZngx-goog-generation: 1701120524642851x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:52 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 22 2b 79 43 7a 22 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 3b 76 61 72 20 72 2c 69 2c 75 2c 6f 2c 61 2c 63 2c 6c 2c 73 3d 74 28 22 67 63 52 2f 22 29 2c 66 3d 74 2e 6e 28 73 29 2c 64 3d 28 74 28 22 71 31 74 49 22 29 2c 74 28 22 4d 53 68 47 22 29 29 2c 6d 3d 74 28 22 2f 45 66 6c 22 29 2c 76 3d 74 28 22 32 69 34 34 22 29 2c 45 3d 74 28 22 35 6c 66 68 22 29 2c 79 3d 4f 62 6a 65 63 74 28 45 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{"+yCz":function(n,e,t){"use strict";t.d(e,"a",(function(){return p}));var r,i,u,o,a,c,l,s=t("gcR/"),f=t.n(s),d=(t("q1tI"),t("MShG")),m=t("/Efl"),v=t("2i44"),E=t("5lfh"),y=Object(E.d)("div",{target:"
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 2c 74 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 3b 76 61 72 20 72 3d 74 28 22 6a 44 53 67 22 29 2c 69 3d 74 28 22 51 4d 76 4b 22 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 6f 3d 5b 7b 69 64 3a 22 61 63 63 6f 75 6e 74 22 2c 73 65 63 74 69 6f 6e 4e 61 6d 65 3a 69 2e 6c 69 6e 6b 41 63 63 6f 75 6e 74 2c 74 61 72 67 65 74 3a 22 2f 22 2c 74 72 61 63 6b 69 6e 67 45 6c 65 6d 65 6e 74 4e 61 6d 65 3a 22 41 63 63 74 48 6f 6d 65 50 61 67 65 4c 6e 6b 22 2c 73 68 6f 75 6c 64 42 65 41 76 61 69 6c 61 62 6c 65 3a 75 7d 2c 7b 69 64 3a 22 73 75 62 73 63 72 69 70 74 69 6f 6e 22 2c 73 65 63 74 69 6f 6e 4e 61 6d 65 3a 69 2e 6c 69 6e 6b 53 75 62 73 63 Data Ascii: (){return a})),t.d(e,"b",(function(){return c}));var r=t("jDSg"),i=t("QMvK"),u=function(){return!0},o=[{id:"account",sectionName:i.linkAccount,target:"/",trackingElementName:"AcctHomePageLnk",shouldBeAvailable:u},{id:"subscription",sectionName:i.linkSubsc
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 73 74 72 69 63 74 22 3b 74 2e 64 28 65 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 3b 76 61 72 20 72 3d 74 28 22 51 53 30 6e 22 29 3b 74 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 75 73 65 4c 6f 63 61 74 69 6f 6e 7d 29 29 2c 74 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 75 73 65 48 69 73 74 6f 72 79 7d 29 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 72 2e 75 73 65 48 69 73 74 6f 72 79 29 28 29 3b 72 65 74 75 72 6e 7b 74 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 70 75 73 68 28 65 2c 74 29 7d 2c 67 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: strict";t.d(e,"c",(function(){return i}));var r=t("QS0n");t.d(e,"b",(function(){return r.useLocation})),t.d(e,"a",(function(){return r.useHistory}));var i=function(){var n=Object(r.useHistory)();return{to:function(e,t){n.push(e,t)},getState:function(){ret
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 4e 43 45 4c 22 2c 50 52 4f 44 55 43 54 5f 53 54 41 52 54 3a 22 50 52 4f 44 55 43 54 5f 53 54 41 52 54 22 2c 44 49 47 49 54 41 4c 5f 50 52 4f 44 55 43 54 5f 53 54 41 52 54 3a 22 44 49 47 49 54 41 4c 5f 50 52 4f 44 55 43 54 5f 53 54 41 52 54 22 2c 47 49 46 54 5f 53 55 42 53 43 52 49 50 54 49 4f 4e 3a 22 47 49 46 54 5f 53 55 42 53 43 52 49 50 54 49 4f 4e 22 2c 4f 54 48 45 52 3a 22 4f 54 48 45 52 22 7d 2c 69 3d 7b 42 41 44 5f 57 45 41 54 48 45 52 5f 44 45 4c 41 59 3a 22 42 41 44 5f 57 45 41 54 48 45 52 5f 44 45 4c 41 59 22 2c 47 45 4e 45 52 41 4c 5f 44 45 4c 41 59 3a 22 47 45 4e 45 52 41 4c 5f 44 45 4c 41 59 22 2c 49 4e 5f 47 52 41 43 45 3a 22 49 4e 5f 47 52 41 43 45 22 2c 4d 41 49 4c 45 44 5f 43 4f 50 59 3a 22 4d 41 49 4c 45 44 5f 43 4f 50 59 22 2c 50 52 49 Data Ascii: NCEL",PRODUCT_START:"PRODUCT_START",DIGITAL_PRODUCT_START:"DIGITAL_PRODUCT_START",GIFT_SUBSCRIPTION:"GIFT_SUBSCRIPTION",OTHER:"OTHER"},i={BAD_WEATHER_DELAY:"BAD_WEATHER_DELAY",GENERAL_DELAY:"GENERAL_DELAY",IN_GRACE:"IN_GRACE",MAILED_COPY:"MAILED_COPY",PRI
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 62 6a 65 63 74 28 64 2e 64 29 28 22 6e 61 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 6f 61 31 68 6d 70 30 22 7d 29 28 22 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 22 2c 63 2e 68 62 5b 2e 35 5d 2c 22 3b 77 69 64 74 68 3a 22 2c 22 32 34 34 70 78 22 2c 22 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 2c 63 2e 4f 2e 62 61 63 6b 67 72 6f 75 6e 64 2e 70 72 69 6d 61 72 79 2c 22 3b 22 29 2c 76 3d 4f 62 6a 65 63 74 28 64 2e 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 6f 61 31 68 6d 70 31 22 7d 29 28 22 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 22 2c 63 2e 68 62 5b 32 5d 2c 22 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 22 2c 63 2e 68 62 5b 32 5d 2c 22 3b 22 29 2c 45 3d 63 2e 66 62 2e 61 63 74 69 Data Ascii: bject(d.d)("nav",{target:"eoa1hmp0"})("display:grid;grid-row-gap:",c.hb[.5],";width:","244px",";background:",c.O.background.primary,";"),v=Object(d.d)("div",{target:"eoa1hmp1"})("display:grid;grid-row-gap:",c.hb[2],";padding-top:",c.hb[2],";"),E=c.fb.acti
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 44 65 66 61 75 6c 74 28 29 2c 45 2e 74 6f 28 65 29 2c 72 26 26 72 28 29 7d 2c 70 3d 66 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 2e 69 64 2c 74 3d 6e 2e 74 61 72 67 65 74 2c 72 3d 6e 2e 73 65 63 74 69 6f 6e 4e 61 6d 65 2c 6f 3d 6e 2e 74 72 61 63 6b 69 6e 67 45 6c 65 6d 65 6e 74 4e 61 6d 65 3b 72 65 74 75 72 6e 20 75 28 29 28 63 2e 70 2c 7b 64 61 74 61 54 65 73 74 49 64 3a 65 2c 6c 69 73 74 49 74 65 6d 54 79 70 65 3a 49 2c 68 72 65 66 3a 22 2f 61 63 63 6f 75 6e 74 22 2e 63 6f 6e 63 61 74 28 74 29 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 79 28 6e 2c 74 2c 6f 29 7d 2c 61 63 74 69 76 65 3a 74 3d 3d 3d 69 7d 2c 65 2c 75 28 29 28 6c 2e 61 2c 7b 63 6f 70 79 3a 72 7d 29 29 7d 29 29 3b 72 Data Ascii: Default(),E.to(e),r&&r()},p=f.map((function(n){var e=n.id,t=n.target,r=n.sectionName,o=n.trackingElementName;return u()(c.p,{dataTestId:e,listItemType:I,href:"/account".concat(t),onClick:function(n){return y(n,t,o)},active:t===i},e,u()(l.a,{copy:r}))}));r
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 72 65 74 75 72 6e 20 41 7d 29 29 2c 74 2e 64 28 65 2c 22 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 2c 74 2e 64 28 65 2c 22 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 2c 74 2e 64 28 65 2c 22 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 3b 74 28 22 6c 53 4e 41 22 29 2c 74 28 22 67 63 52 2f 22 29 2c 74 28 22 4a 34 7a 70 22 29 2c 74 28 22 71 31 74 49 22 29 2c 74 28 22 2f 45 66 6c 22 29 2c 74 28 22 6d 49 4a 57 22 29 3b 76 61 72 20 72 3d 74 28 22 71 53 64 73 22 29 2c 69 3d 74 28 22 66 75 31 30 22 29 2c 75 3d 5b 69 2e 66 2e 4e 4f 4f 4b 2c 69 2e 66 2e 4b 49 4e 44 4c 45 2c 69 2e 66 2e 49 54 55 4e 45 53 2c 69 2e 66 2e 47 4f 4f 47 4c 45 5f 50 4c 41 59 2c 69 2e 66 Data Ascii: return A})),t.d(e,"m",(function(){return O})),t.d(e,"l",(function(){return h})),t.d(e,"i",(function(){return T}));t("lSNA"),t("gcR/"),t("J4zp"),t("q1tI"),t("/Efl"),t("mIJW");var r=t("qSds"),i=t("fu10"),u=[i.f.NOOK,i.f.KINDLE,i.f.ITUNES,i.f.GOOGLE_PLAY,i.f
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 29 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 21 28 22 46 72 65 65 22 3d 3d 3d 6e 2e 74 69 65 72 43 79 63 6c 65 41 6d 6f 75 6e 74 29 7d 29 29 7c 7c 6e 75 6c 6c 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6d 28 6e 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 74 3d 65 2e 74 69 65 72 43 79 63 6c 65 41 6d 6f 75 6e 74 2c 69 3d 65 2e 74 69 65 72 43 79 63 6c 65 44 75 72 61 74 69 6f 6e 53 74 72 3b 72 65 74 75 72 6e 20 74 3f 22 46 72 65 65 22 3d 3d 3d 74 3f 22 46 72 65 65 22 3a 22 22 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 28 72 2e 75 29 28 74 29 2c 22 20 65 76 65 72 79 20 22 29 2e 63 6f 6e 63 61 74 28 69 29 3a 22 22 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6d 28 6e Data Ascii: ).find((function(n){return!("Free"===n.tierCycleAmount)}))\|\|null},S=function(n){var e=m(n);if(!e)return"";var t=e.tierCycleAmount,i=e.tierCycleDurationStr;return t?"Free"===t?"Free":"".concat(Object(r.u)(t)," every ").concat(i):""},g=function(n){var e=m(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50317	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	2225	OUT	GET /vi-assets/static-assets/ChineseHanLogo-8e84986353404735d8b1.js?_sw-precache=fe1ff79b4e18e86237d737e3ee7838e4 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:52 UTC	1332	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 30 32 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 51 37 6c 4d 49 72 77 37 4f 76 58 6d 47 39 6b 4e 36 32 2d 43 53 73 4d 4c 69 62 41 70 2d 48 50 38 74 2d 64 4a 6d 66 7a 4e 76 49 52 7a 74 53 67 71 48 68 79 54 34 66 4d 42 31 4d 4b 67 36 6e 33 4a 4a 30 44 34 78 7a 70 34 61 64 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 30 33 35 31 36 38 33 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 44029X-GUploader-UploadID: ABPtcPqQ7lMIrw7OvXmG9kN62-CSsMLibAp-HP8t-dJmfzNvIRztSgqHhyT4fMB1MKg6n3JJ0D4xzp4adwx-goog-generation: 1701370603516830x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:52 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 5d 2c 7b 55 72 36 48 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 4c 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 4c 29 2c 69 2e 64 28 4c 2c 22 43 68 69 6e 65 73 65 53 69 6d 70 6c 69 66 69 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 2c 69 2e 64 28 4c 2c 22 43 68 69 6e 65 73 65 54 72 61 64 69 74 69 6f 6e 61 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 3b 76 61 72 20 6c 2c 5a 2c 4d 2c 65 2c 64 3d 69 28 22 67 63 52 2f 22 29 2c 74 3d 69 2e 6e 28 64 29 2c 6e 3d 28 69 28 22 71 31 74 49 22 29 2c 69 28 22 4b 68 5a 53 22 29 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{Ur6H:function(C,L,i){"use strict";i.r(L),i.d(L,"ChineseSimplified",(function(){return o})),i.d(L,"ChineseTraditional",(function(){return a}));var l,Z,M,e,d=i("gcR/"),t=i.n(d),n=(i("q1tI"),i("KhZS")
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 2c 31 37 2e 31 34 35 38 33 31 35 20 39 2e 36 34 38 33 35 33 38 32 2c 31 38 2e 34 36 33 36 37 30 34 20 43 39 2e 36 34 38 33 35 33 38 32 2c 31 38 2e 34 36 33 36 37 30 34 20 39 2e 37 39 37 37 37 32 34 37 2c 31 38 2e 35 31 36 36 39 36 38 20 31 30 2e 30 36 39 33 30 31 32 2c 31 38 2e 36 33 38 38 31 38 31 20 43 39 2e 33 35 39 33 38 30 38 34 2c 31 38 2e 37 35 37 38 33 32 38 20 37 2e 39 32 34 38 39 39 34 38 2c 31 38 2e 36 38 37 37 37 33 37 20 36 2e 30 38 39 38 32 32 34 36 2c 31 37 2e 38 36 34 33 31 31 39 20 43 34 2e 37 30 36 37 33 39 34 35 2c 31 37 2e 32 34 32 38 38 35 38 20 33 2e 33 37 30 31 37 34 35 36 2c 31 36 2e 31 30 39 31 39 33 20 32 2e 36 30 35 39 34 38 35 31 2c 31 34 2e 36 38 39 32 36 35 20 43 31 2e 37 32 38 31 32 36 39 31 2c 31 33 2e 30 35 33 32 36 38 20 Data Ascii: ,17.1458315 9.64835382,18.4636704 C9.64835382,18.4636704 9.79777247,18.5166968 10.0693012,18.6388181 C9.35938084,18.7578328 7.92489948,18.6877737 6.08982246,17.8643119 C4.70673945,17.2428858 3.37017456,16.109193 2.60594851,14.689265 C1.72812691,13.053268
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 36 35 2c 33 2e 31 34 37 30 38 37 35 31 20 43 31 38 2e 37 38 36 38 37 37 35 2c 33 2e 32 36 31 31 37 34 35 32 20 31 38 2e 35 36 38 36 31 36 32 2c 33 2e 35 32 30 33 30 37 33 37 20 31 38 2e 33 36 36 38 36 34 37 2c 33 2e 37 32 30 34 31 34 39 31 20 43 31 38 2e 33 36 36 38 36 34 37 2c 33 2e 37 32 30 34 31 34 39 31 20 31 38 2e 33 38 35 33 34 37 33 2c 33 2e 34 39 30 33 31 32 36 36 20 31 38 2e 36 32 34 38 39 34 38 2c 33 2e 30 36 32 39 39 35 32 31 20 43 31 39 2e 30 36 30 33 37 39 2c 32 2e 33 31 31 35 32 30 36 37 20 31 39 2e 39 32 37 35 30 35 36 2c 31 2e 37 33 38 31 39 33 32 37 20 32 30 2e 39 39 31 33 39 39 37 2c 31 2e 36 36 39 30 39 38 33 32 20 43 32 32 2e 33 36 39 37 30 36 32 2c 31 2e 35 38 32 31 31 33 36 37 20 32 33 2e 36 32 33 37 32 32 33 2c 32 2e 31 36 39 34 37 Data Ascii: 65,3.14708751 C18.7868775,3.26117452 18.5686162,3.52030737 18.3668647,3.72041491 C18.3668647,3.72041491 18.3853473,3.49031266 18.6248948,3.06299521 C19.060379,2.31152067 19.9275056,1.73819327 20.9913997,1.66909832 C22.3697062,1.58211367 23.6237223,2.16947
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 31 39 20 32 35 2e 34 34 39 32 34 36 35 2c 35 33 2e 33 30 31 36 36 35 37 20 43 32 34 2e 37 33 31 35 33 38 35 2c 35 34 2e 32 36 38 33 35 32 32 20 32 33 2e 39 38 36 36 32 35 38 2c 35 35 2e 32 33 36 39 36 37 20 32 33 2e 31 33 33 31 30 31 36 2c 35 36 2e 32 36 31 36 30 37 36 20 43 32 32 2e 36 39 30 38 36 38 31 2c 35 35 2e 38 39 31 32 38 30 31 20 32 32 2e 32 35 30 35 30 33 36 2c 35 35 2e 35 32 31 30 35 39 37 20 32 31 2e 38 33 36 33 30 35 35 2c 35 35 2e 30 39 33 38 34 39 34 20 43 31 36 2e 30 39 39 33 31 34 36 2c 35 34 2e 36 39 35 35 36 32 36 20 39 2e 37 30 32 37 36 33 33 39 2c 35 34 2e 31 32 36 31 39 38 37 20 32 2e 37 37 38 36 32 36 32 32 2c 35 33 2e 34 31 34 37 38 38 36 20 4c 32 2e 37 37 38 36 32 36 32 32 2c 35 33 2e 36 37 30 39 32 31 39 20 43 33 2e 36 33 34 31 Data Ascii: 19 25.4492465,53.3016657 C24.7315385,54.2683522 23.9866258,55.236967 23.1331016,56.2616076 C22.6908681,55.8912801 22.2505036,55.5210597 21.8363055,55.0938494 C16.0993146,54.6955626 9.70276339,54.1261987 2.77862622,53.4147886 L2.77862622,53.6709219 C3.6341
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 2e 30 33 35 32 31 30 34 20 43 31 33 2e 35 39 31 31 37 38 37 2c 33 35 2e 38 38 37 38 31 20 31 35 2e 31 30 37 31 37 30 36 2c 33 37 2e 30 38 32 35 36 33 35 20 31 36 2e 38 34 34 32 32 37 33 2c 33 38 2e 31 33 35 31 36 33 34 20 43 31 36 2e 30 39 39 33 31 34 36 2c 33 36 2e 39 31 32 34 35 30 36 20 31 35 2e 32 37 32 39 39 35 32 2c 33 35 2e 34 36 31 35 36 33 38 20 31 34 2e 36 33 37 37 33 32 33 2c 33 34 2e 33 35 32 38 33 30 39 20 43 31 34 2e 33 33 34 31 31 38 36 2c 33 33 2e 38 31 31 35 33 33 35 20 31 34 2e 31 36 39 32 32 38 35 2c 33 33 2e 35 32 36 32 36 32 34 20 31 33 2e 37 38 33 31 36 39 38 2c 33 33 2e 32 37 31 32 30 30 33 20 43 31 34 2e 38 38 36 30 30 31 39 2c 33 32 2e 37 35 38 38 32 36 34 20 31 36 2e 30 37 32 32 31 33 37 2c 33 32 2e 33 30 32 35 38 35 35 20 31 37 Data Ascii: .0352104 C13.5911787,35.88781 15.1071706,37.0825635 16.8442273,38.1351634 C16.0993146,36.9124506 15.2729952,35.4615638 14.6377323,34.3528309 C14.3341186,33.8115335 14.1692285,33.5262624 13.7831698,33.2712003 C14.8860019,32.7588264 16.0722137,32.3025855 17
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 34 34 36 35 20 43 36 2e 30 33 33 39 35 39 32 2c 36 31 2e 31 32 38 37 38 34 35 20 36 2e 31 31 36 34 30 34 32 34 2c 36 31 2e 39 32 34 32 38 37 20 36 2e 32 32 35 39 35 30 32 32 2c 36 32 2e 35 37 38 37 30 37 32 20 43 36 2e 37 32 32 35 39 33 33 32 2c 36 35 2e 34 38 31 35 35 32 31 20 37 2e 35 32 32 37 34 36 32 39 2c 36 39 2e 32 39 32 39 31 35 32 20 38 2e 33 34 39 30 36 35 37 2c 37 32 2e 36 35 31 30 33 36 39 20 4c 38 2e 32 39 34 37 35 39 39 37 2c 37 32 2e 36 38 30 30 36 37 35 20 5a 20 4d 31 32 2e 31 38 33 31 37 35 33 2c 37 31 2e 33 31 34 32 33 37 31 20 43 31 30 2e 36 33 39 30 34 34 31 2c 36 38 2e 36 39 35 35 39 32 31 20 39 2e 32 35 37 39 33 33 39 39 2c 36 36 2e 30 37 38 38 37 35 33 20 38 2e 35 34 32 30 39 35 30 38 2c 36 34 2e 35 39 38 39 35 37 38 20 43 38 2e 33 Data Ascii: 4465 C6.0339592,61.1287845 6.11640424,61.924287 6.22595022,62.5787072 C6.72259332,65.4815521 7.52274629,69.2929152 8.3490657,72.6510369 L8.29475997,72.6800675 Z M12.1831753,71.3142371 C10.6390441,68.6955921 9.25793399,66.0788753 8.54209508,64.5989578 C8.3
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 20 32 35 2e 39 34 36 30 39 37 32 2c 37 33 2e 38 31 38 37 39 35 32 20 32 36 2e 34 31 33 35 36 32 37 2c 37 33 2e 37 30 33 37 34 34 20 43 32 35 2e 39 31 37 30 32 33 34 2c 37 35 2e 30 34 31 35 30 38 20 32 35 2e 33 31 30 38 33 34 33 2c 37 36 2e 36 33 35 35 31 32 34 20 32 34 2e 34 32 38 32 33 36 33 2c 37 38 2e 34 35 36 36 31 39 36 20 43 32 34 2e 32 30 39 30 34 30 35 2c 37 37 2e 39 34 32 33 31 37 35 20 32 33 2e 38 37 37 32 38 37 35 2c 37 37 2e 36 33 31 31 32 32 34 20 32 33 2e 32 31 36 37 39 32 37 2c 37 37 2e 32 33 31 38 37 31 35 20 43 32 32 2e 33 30 35 31 32 30 38 2c 37 36 2e 36 39 31 35 33 38 32 20 32 31 2e 34 34 39 36 32 33 38 2c 37 36 2e 31 35 31 32 30 35 20 32 30 2e 35 39 35 31 36 35 31 2c 37 35 2e 36 31 30 38 37 31 38 20 4c 32 30 2e 35 39 35 31 36 35 31 2c Data Ascii: 25.9460972,73.8187952 26.4135627,73.703744 C25.9170234,75.041508 25.3108343,76.6355124 24.4282363,78.4566196 C24.2090405,77.9423175 23.8772875,77.6311224 23.2167927,77.2318715 C22.3051208,76.6915382 21.4496238,76.151205 20.5951651,75.6108718 L20.5951651,
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 31 32 2c 37 30 2e 31 34 37 34 34 33 20 43 31 35 2e 36 38 35 34 32 38 31 2c 37 30 2e 38 30 32 38 32 37 34 20 31 37 2e 31 37 35 32 35 33 35 2c 37 31 2e 33 34 32 31 39 36 35 20 31 38 2e 36 30 38 38 30 30 34 2c 37 31 2e 38 32 36 35 30 33 39 20 43 31 38 2e 34 31 36 37 30 35 35 2c 37 31 2e 33 37 31 32 32 37 31 20 31 38 2e 30 30 32 36 31 31 33 2c 37 31 2e 30 30 31 30 30 36 37 20 31 37 2e 35 38 39 34 35 31 36 2c 37 30 2e 35 37 33 36 38 39 32 20 43 31 35 2e 32 34 34 31 32 39 31 2c 36 38 2e 33 35 34 32 39 35 32 20 31 33 2e 33 34 32 31 38 32 33 2c 36 36 2e 33 30 36 30 38 35 32 20 31 31 2e 34 31 31 30 35 37 38 2c 36 33 2e 32 33 33 31 32 37 34 20 43 31 31 2e 36 30 34 30 38 37 32 2c 36 35 2e 34 32 34 34 35 35 20 31 31 2e 39 30 36 37 36 36 34 2c 36 38 2e 34 31 31 33 39 Data Ascii: 12,70.147443 C15.6854281,70.8028274 17.1752535,71.3421965 18.6088004,71.8265039 C18.4167055,71.3712271 18.0026113,71.0010067 17.5894516,70.5736892 C15.2441291,68.3542952 13.3421823,66.3060852 11.4110578,63.2331274 C11.6040872,65.424455 11.9067664,68.41139

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50320	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	2504	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 2320 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:52 UTC	2320	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 6f 30 2d 30 76 7a 65 6c 67 6f 59 64 52 57 6d 59 78 55 63 4f 47 5a 64 65 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 32 36 38 33 30 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"o0-0vzelgoYdRWmYxUcOGZde","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800026830,"data":{"event":"impression
2023-12-05 18:13:52 UTC	1398	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:52 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50322	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	2223	OUT	GET /vi-assets/static-assets/DealbookLogo-85c9c99a372cbf774226.js?_sw-precache=a8f57f9443d5cf6b10360a51d88f3dec HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:52 UTC	1347	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 37 30 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 4b 53 30 55 72 46 6d 47 30 44 59 5f 41 50 57 74 4a 37 54 49 50 7a 68 4b 2d 30 72 52 72 31 44 41 43 5f 4c 58 6f 32 47 43 76 6c 47 51 48 7a 47 47 32 31 37 45 34 6c 59 47 42 70 78 30 38 4d 61 7a 46 34 6c 77 4d 31 39 53 4f 46 62 4f 69 6b 74 58 79 44 5f 50 78 34 39 43 70 37 46 79 6d 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 39 38 38 35 35 31 33 34 39 33 39 30 30 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 9705X-GUploader-UploadID: ABPtcPpKS0UrFmG0DY_APWtJ7TIPzhK-0rRr1DAC_LXo2GCvlGQHzGG217E4lYGBpx08MazF4lwM19SOFbOiktXyD_Px49Cp7Fymx-goog-generation: 1698855134939003x-goog-metageneration: 1x-goog-sto
2023-12-05 18:13:52 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 5d 2c 7b 41 69 53 41 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 61 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 72 28 61 29 3b 76 61 72 20 56 2c 5a 2c 74 2c 64 2c 70 2c 4d 2c 6c 2c 73 2c 48 2c 76 2c 65 2c 6f 2c 72 2c 6d 2c 69 2c 6e 2c 43 2c 77 2c 53 2c 75 2c 4c 2c 66 2c 41 2c 67 2c 4e 2c 62 2c 78 2c 6b 2c 50 2c 42 2c 79 2c 4a 2c 52 2c 6a 2c 71 2c 44 2c 45 2c 49 2c 4b 3d 63 28 22 67 63 52 2f 22 29 2c 4f 3d 63 2e 6e 28 4b 29 2c 7a 3d 28 63 28 22 71 31 74 49 22 29 2c 63 28 22 4b 68 5a 53 22 29 29 2c 46 3d 4f 28 29 28 22 74 69 74 6c 65 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 44 65 61 6c 42 6f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{AiSA:function(h,a,c){"use strict";c.r(a);var V,Z,t,d,p,M,l,s,H,v,e,o,r,m,i,n,C,w,S,u,L,f,A,g,N,b,x,k,P,B,y,J,R,j,q,D,E,I,K=c("gcR/"),O=c.n(K),z=(c("q1tI"),c("KhZS")),F=O()("title",{},void 0,"DealBo
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 2d 33 2e 38 35 56 33 2e 36 31 48 31 32 37 56 34 33 2e 33 68 34 76 36 2e 30 38 48 31 31 34 2e 33 37 56 34 33 2e 33 5a 22 7d 29 29 2c 70 7c 7c 28 70 3d 4f 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 33 38 2e 31 33 2c 34 32 2e 34 36 56 31 30 2e 35 33 68 2d 34 2e 33 37 56 33 2e 36 31 68 32 32 2e 34 36 63 39 2e 37 39 2c 30 2c 31 35 2e 38 36 2c 34 2e 33 37 2c 31 35 2e 38 36 2c 31 31 2e 37 35 2c 30 2c 35 2d 32 2e 38 37 2c 38 2e 32 39 2d 38 2c 31 30 2e 31 32 76 2e 30 36 63 33 2e 33 33 2e 37 32 2c 35 2e 32 39 2c 31 2e 36 34 2c 37 2c 33 2e 32 37 61 31 31 2e 31 39 2c 31 31 2e 31 39 2c 30 2c 30 2c 31 2c 33 2e 32 2c 38 2e 31 63 30 2c 33 2e 36 35 2d 31 2e 32 34 2c 37 2d 34 2e 30 35 2c 39 2e 31 34 73 2d 35 2e 38 38 2c 33 2e 33 33 2d 31 34 2e 31 37 2c 33 2e 33 33 48 Data Ascii: -3.85V3.61H127V43.3h4v6.08H114.37V43.3Z"})),p\|\|(p=O()("path",{d:"M138.13,42.46V10.53h-4.37V3.61h22.46c9.79,0,15.86,4.37,15.86,11.75,0,5-2.87,8.29-8,10.12v.06c3.33.72,5.29,1.64,7,3.27a11.19,11.19,0,0,1,3.2,8.1c0,3.65-1.24,7-4.05,9.14s-5.88,3.33-14.17,3.33H
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 2c 36 2e 39 35 2d 32 36 2e 39 34 5a 22 7d 29 29 2c 65 7c 7c 28 65 3d 4f 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 33 37 36 2e 31 35 2c 32 31 2e 37 68 2d 32 2e 38 36 56 31 37 2e 36 35 68 32 2e 38 36 5a 4d 33 37 36 2c 34 39 2e 34 35 68 2d 32 2e 35 39 56 32 36 2e 33 37 48 33 37 36 5a 22 7d 29 29 2c 6f 7c 7c 28 6f 3d 4f 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 33 39 32 2e 32 33 2c 34 39 2e 33 31 61 39 2e 32 2c 39 2e 32 2c 30 2c 30 2c 31 2d 33 2c 2e 35 35 63 2d 32 2e 35 2c 30 2d 34 2e 39 2d 31 2e 31 34 2d 34 2e 39 2d 36 2e 30 39 56 32 38 2e 34 36 68 2d 33 2e 35 35 56 32 36 2e 33 37 68 33 2e 35 6c 2e 34 31 2d 37 2e 30 38 68 32 2e 32 33 76 37 2e 30 38 68 35 2e 33 31 76 32 2e 30 39 68 2d 35 2e 33 31 76 31 36 63 30 2c 32 2e 36 33 2c 31 2e 37 32 2c 33 2c 32 Data Ascii: ,6.95-26.94Z"})),e\|\|(e=O()("path",{d:"M376.15,21.7h-2.86V17.65h2.86ZM376,49.45h-2.59V26.37H376Z"})),o\|\|(o=O()("path",{d:"M392.23,49.31a9.2,9.2,0,0,1-3,.55c-2.5,0-4.9-1.14-4.9-6.09V28.46h-3.55V26.37h3.5l.41-7.08h2.23v7.08h5.31v2.09h-5.31v16c0,2.63,1.72,3,2
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 39 2c 30 2c 36 2e 34 31 2c 31 2e 34 31 2c 38 2c 34 2e 32 33 61 31 34 2e 38 2c 31 34 2e 38 2c 30 2c 30 2c 31 2c 31 2e 36 39 2c 37 2e 34 39 76 2e 33 32 48 35 31 39 2e 35 31 63 30 2c 35 2e 38 31 2c 33 2e 30 39 2c 39 2e 33 31 2c 37 2e 36 37 2c 39 2e 33 31 61 38 2e 31 36 2c 38 2e 31 36 2c 30 2c 30 2c 30 2c 37 2e 34 35 2d 34 2e 32 32 5a 4d 35 33 34 2c 33 35 2e 38 37 63 30 2d 33 2e 39 35 2d 31 2e 39 2d 37 2e 34 31 2d 36 2e 36 37 2d 37 2e 34 31 61 37 2e 33 34 2c 37 2e 33 34 2c 30 2c 30 2c 30 2d 37 2e 36 38 2c 37 2e 34 31 5a 22 7d 29 29 2c 53 7c 7c 28 53 3d 4f 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 35 36 38 2e 36 36 2c 32 36 2e 33 37 6c 2d 37 2e 31 38 2c 32 33 2e 30 38 68 2d 32 2e 32 33 4c 35 35 34 2c 33 30 2e 33 33 6c 2d 35 2e 34 35 2c 31 39 2e 31 32 68 2d Data Ascii: 9,0,6.41,1.41,8,4.23a14.8,14.8,0,0,1,1.69,7.49v.32H519.51c0,5.81,3.09,9.31,7.67,9.31a8.16,8.16,0,0,0,7.45-4.22ZM534,35.87c0-3.95-1.9-7.41-6.67-7.41a7.34,7.34,0,0,0-7.68,7.41Z"})),S\|\|(S=O()("path",{d:"M568.66,26.37l-7.18,23.08h-2.23L554,30.33l-5.45,19.12h-
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 34 36 2c 30 2c 35 2e 38 32 2d 31 2c 35 2e 38 32 2d 34 2e 30 39 2c 30 2d 32 2d 31 2e 33 32 2d 33 2d 33 2e 35 2d 33 2e 36 38 2d 31 2e 30 39 2d 2e 33 31 2d 33 2e 34 31 2d 2e 37 37 2d 35 2d 31 2e 32 37 2d 34 2e 30 39 2d 31 2e 32 37 2d 35 2e 33 32 2d 33 2e 33 31 2d 35 2e 33 32 2d 36 61 35 2e 37 31 2c 35 2e 37 31 2c 30 2c 30 2c 31 2c 32 2e 34 31 2d 34 2e 35 34 41 39 2c 39 2c 30 2c 30 2c 31 2c 36 35 39 2e 30 35 2c 32 36 63 33 2e 33 36 2c 30 2c 36 2e 35 2c 31 2e 32 37 2c 38 2e 32 32 2c 34 2e 35 39 6c 2d 32 2e 33 36 2c 31 2e 35 34 61 36 2e 34 31 2c 36 2e 34 31 2c 30 2c 30 2c 30 2d 35 2e 35 39 2d 33 2e 37 32 63 2d 32 2e 34 39 2c 30 2d 35 2e 31 37 2c 31 2e 31 38 2d 35 2e 31 37 2c 33 2e 39 35 2c 30 2c 31 2e 38 36 2c 31 2e 34 35 2c 33 2c 33 2e 32 37 2c 33 2e 35 34 2e Data Ascii: 46,0,5.82-1,5.82-4.09,0-2-1.32-3-3.5-3.68-1.09-.31-3.41-.77-5-1.27-4.09-1.27-5.32-3.31-5.32-6a5.71,5.71,0,0,1,2.41-4.54A9,9,0,0,1,659.05,26c3.36,0,6.5,1.27,8.22,4.59l-2.36,1.54a6.41,6.41,0,0,0-5.59-3.72c-2.49,0-5.17,1.18-5.17,3.95,0,1.86,1.45,3,3.27,3.54.
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 37 32 5a 22 7d 29 29 2c 50 7c 7c 28 50 3d 4f 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 37 39 36 2e 36 34 2c 34 39 2e 34 35 68 2d 32 2e 35 39 56 33 33 2e 36 34 63 30 2d 33 2e 31 33 2d 31 2e 32 37 2d 35 2e 31 33 2d 35 2d 35 2e 31 33 2d 33 2e 33 31 2c 30 2d 35 2e 38 31 2c 32 2e 33 36 2d 37 2e 31 37 2c 33 2e 34 31 56 34 39 2e 34 35 68 2d 32 2e 35 39 56 32 36 2e 33 37 68 32 2e 35 76 33 2e 34 31 61 31 30 2e 36 38 2c 31 30 2e 36 38 2c 30 2c 30 2c 31 2c 38 2d 33 2e 38 31 2c 36 2e 33 34 2c 36 2e 33 34 2c 30 2c 30 2c 31 2c 36 2c 33 2e 34 39 2c 31 31 2c 31 31 2c 30 2c 30 2c 31 2c 2e 37 37 2c 34 2e 33 32 5a 22 7d 29 29 29 7d 3b 47 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 45 78 70 61 6e 64 65 64 22 2c 47 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7a 2e 62 2e 64 65 Data Ascii: 72Z"})),P\|\|(P=O()("path",{d:"M796.64,49.45h-2.59V33.64c0-3.13-1.27-5.13-5-5.13-3.31,0-5.81,2.36-7.17,3.41V49.45h-2.59V26.37h2.5v3.41a10.68,10.68,0,0,1,8-3.81,6.34,6.34,0,0,1,6,3.49,11,11,0,0,1,.77,4.32Z"})))};G.displayName="Expanded",G.defaultProps=z.b.de
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 2e 34 76 38 2e 32 33 68 2d 32 32 2e 35 56 35 37 5a 22 7d 29 29 2c 6a 7c 7c 28 6a 3d 4f 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 38 37 2e 38 33 2c 35 35 2e 37 39 56 31 32 2e 34 37 68 2d 35 2e 39 34 56 33 2e 30 38 68 33 30 2e 34 38 63 31 33 2e 32 39 2c 30 2c 32 31 2e 35 33 2c 35 2e 39 34 2c 32 31 2e 35 33 2c 31 36 2c 30 2c 36 2e 37 33 2d 33 2e 39 2c 31 31 2e 32 35 2d 31 30 2e 38 31 2c 31 33 2e 37 33 76 2e 30 39 63 34 2e 35 32 2c 31 2c 37 2e 31 37 2c 32 2e 32 31 2c 39 2e 35 37 2c 34 2e 34 33 61 31 35 2e 31 37 2c 31 35 2e 31 37 2c 30 2c 30 2c 31 2c 34 2e 33 34 2c 31 31 63 30 2c 35 2d 31 2e 36 39 2c 39 2e 34 38 2d 35 2e 35 2c 31 32 2e 34 31 73 2d 38 2c 34 2e 35 31 2d 31 39 2e 32 32 2c 34 2e 35 31 48 31 38 31 2e 38 39 56 35 35 2e 37 39 5a 6d 31 33 2e 32 Data Ascii: .4v8.23h-22.5V57Z"})),j\|\|(j=O()("path",{d:"M187.83,55.79V12.47h-5.94V3.08h30.48c13.29,0,21.53,5.94,21.53,16,0,6.73-3.9,11.25-10.81,13.73v.09c4.52,1,7.17,2.21,9.57,4.43a15.17,15.17,0,0,1,4.34,11c0,5-1.69,9.48-5.5,12.41s-8,4.51-19.22,4.51H181.89V55.79Zm13.2
2023-12-05 18:13:52 UTC	52	IN	Data Raw: 65 4d 61 70 70 69 6e 67 55 52 4c 3d 44 65 61 6c 62 6f 6f 6b 4c 6f 67 6f 2d 38 35 63 39 63 39 39 61 33 37 32 63 62 66 37 37 34 32 32 36 2e 6a 73 2e 6d 61 70 Data Ascii: eMappingURL=DealbookLogo-85c9c99a372cbf774226.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50325	8.28.7.84	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	1491	OUT	GET /AdServer/SPug?partnerID=156011&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SPugT=1701800031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7
2023-12-05 18:13:52 UTC	408	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 53 50 75 67 54 3d 31 37 30 31 38 30 30 30 33 32 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 2d 4a 61 6e 2d 32 30 32 34 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 3b 20 70 61 74 68 3d 2f 0d 0a 50 33 50 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Tue, 05 Dec 2023 18:13:52 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: SPugT=1701800032; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 04-Jan-2024 18:13:52 GMT; path=/P3P: CP="NOI DSP C
2023-12-05 18:13:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50318	52.4.98.207	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	814	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=d9de6a69-c98e-4eac-8fb8-dfc3bfac3260\|1701800030698
2023-12-05 18:13:52 UTC	549	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 64 39 64 65 36 61 36 39 2d 63 39 38 65 2d 34 65 61 63 2d 38 66 62 38 2d 64 66 63 33 62 66 61 63 33 32 36 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Date: Tue, 05 Dec 2023 18:13:52 GMTLocation: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d9de6a69-c98e-4eac-8fb8-dfc3bfac326
2023-12-05 18:13:52 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 64 39 64 65 36 61 36 39 2d 63 39 38 65 2d 34 65 61 63 2d 38 66 62 38 2d 64 66 63 33 62 66 61 63 33 32 36 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50324	104.97.85.167	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	773	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&ovsid=LPSNS9TX-1-BT82&dpid=58160 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63
2023-12-05 18:13:53 UTC	659	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 6d 61 67 3d 4c 50 53 4e 53 39 54 58 2d 31 2d 42 54 38 32 7e 7e 36 33 3b 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 44 45 56 6f 20 54 41 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-mag=LPSNS9TX-1-BT82~~63;Expires=Wed, 04 Dec 2024 18:13:52 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID CUR ADMa DEVo TA
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:53 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50326	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	2222	OUT	GET /vi-assets/static-assets/InsiderLogo-c49a1384c9b2a921a374.js?_sw-precache=9656013fbf712008dc1c4bb2d1732352 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:52 UTC	1327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 35 32 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 4f 63 78 5a 31 46 47 78 5a 51 61 47 6f 45 4b 55 48 6b 65 52 76 68 6b 6b 6d 57 54 69 65 62 41 46 48 35 30 51 69 47 5f 51 44 78 5a 71 51 49 7a 70 32 32 6c 52 66 63 32 4f 71 56 6e 32 64 7a 5f 56 44 47 61 56 6e 69 35 50 62 78 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 32 32 31 36 39 39 30 33 34 37 32 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 2529X-GUploader-UploadID: ABPtcPpOcxZ1FGxZQaGoEKUHkeRvhkkmWTiebAFH50QiG_QDxZqQIzp22lRfc2OqVn2dz_VDGaVni5Pbxwx-goog-generation: 1701221699034725x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:52 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:52 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 5d 2c 7b 57 66 74 31 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6c 29 3b 76 61 72 20 70 2c 74 2c 61 2c 6e 2c 73 2c 65 2c 64 2c 69 2c 68 2c 72 2c 56 2c 4d 2c 76 2c 67 2c 75 2c 77 2c 43 3d 6f 28 22 67 63 52 2f 22 29 2c 66 3d 6f 2e 6e 28 43 29 2c 4c 3d 28 6f 28 22 71 31 74 49 22 29 2c 6f 28 22 4b 68 5a 53 22 29 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 6c 3d 63 2e 63 6c 61 73 73 4e 61 6d 65 3b 72 65 74 75 72 6e 20 66 28 29 28 22 73 76 67 22 2c 7b 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 34 30 20 37 32 22 2c 78 6d 6c 53 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[30],{Wft1:function(c,l,o){"use strict";o.r(l);var p,t,a,n,s,e,d,i,h,r,V,M,v,g,u,w,C=o("gcR/"),f=o.n(C),L=(o("q1tI"),o("KhZS")),m=function(c){var l=c.className;return f()("svg",{viewBox:"0 0 240 72",xmlS
2023-12-05 18:13:52 UTC	1150	IN	Data Raw: 2c 36 2e 31 63 2d 33 2e 37 2d 30 2e 31 2d 35 2e 38 2d 33 2e 34 2d 37 2e 31 2d 35 2e 34 6c 2d 38 2e 33 2c 36 2e 36 63 31 2e 39 2c 33 2e 38 2c 36 2e 32 2c 36 2e 32 2c 39 2e 39 2c 36 2e 32 63 33 2e 36 2c 30 2c 36 2e 36 2d 31 2e 37 2c 38 2e 34 2d 34 20 43 32 34 30 2e 39 2c 32 36 2e 32 2c 32 33 39 2e 38 2c 32 31 2e 31 2c 32 33 39 2e 37 2c 32 30 2e 36 22 7d 29 29 2c 56 7c 7c 28 56 3d 66 28 29 28 22 70 6f 6c 79 67 6f 6e 22 2c 7b 70 6f 69 6e 74 73 3a 22 31 33 37 2e 33 2c 32 37 2e 34 20 31 32 35 2e 33 2c 33 34 2e 32 20 31 32 35 2e 33 2c 35 39 2e 37 20 31 33 37 2e 35 2c 36 39 2e 37 20 31 34 38 2e 33 2c 36 33 2e 36 20 31 33 37 2e 33 2c 35 34 2e 33 20 22 7d 29 29 2c 4d 7c 7c 28 4d 3d 66 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 32 39 2e 32 2c 30 2e 31 56 31 36 Data Ascii: ,6.1c-3.7-0.1-5.8-3.4-7.1-5.4l-8.3,6.6c1.9,3.8,6.2,6.2,9.9,6.2c3.6,0,6.6-1.7,8.4-4 C240.9,26.2,239.8,21.1,239.7,20.6"})),V\|\|(V=f()("polygon",{points:"137.3,27.4 125.3,34.2 125.3,59.7 137.5,69.7 148.3,63.6 137.3,54.3 "})),M\|\|(M=f()("path",{d:"M129.2,0.1V16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50328	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	2687	OUT	GET /svc/nyt/data-layer?sourceApp=nyt-lire&referrer=https%3A%2F%2Fwww.nytimes.com%2F&assetUrl=https%3A%2F%2Fmyaccount.nytimes.com%2Fauth%2Fiframe%2Fenter-email%3Fresponse_type%3Dcookie%26client_id%3Dfreex%26redirect_uri%3Dhttps%253A%252F%252Fwww.nytimes.com%252Fsubscription%252Fonboarding-offer%253FcampaignId%253D7JFJX%2526redirect_uri%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%2526EXIT_URI%253Dhttps%25253A%25252F%25252Fwww.nytimes.com%25252F2023%25252F12%25252F05%25252Fworld%25252Fmiddleeast%25252Funited-nations-war-gaza-israel.html%26display%3Dregiwall_lire%26asset%3DRegiWall%26application%3DFree_Experience%26preloaded%3Dtrue%23lire-ui-261522 HTTP/1.1 Host: a.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=4; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:53 UTC	867	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6a 6b 69 64 64 2d 73 3d 72 65 66 65 72 72 65 72 3d 26 6c 61 6e 64 69 6e 67 3d 26 73 74 61 72 74 3d 31 37 30 31 38 30 30 30 30 39 32 38 32 26 69 73 4e 65 77 3d 30 26 70 61 67 65 49 6e 64 65 78 3d 35 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6a 6b 69 64 64 2d 70 3d 70 72 65 76 50 61 67 65 3d 26 63 75 72 72 50 61 67 65 3d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d Data Ascii: HTTP/1.1 200 OKcontent-type: application/json; charset=UTF-8set-cookie: jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=5; Path=/; HttpOnlyset-cookie: jkidd-p=prevPage=&currPage=; Path=/; Max-Age=31536000; HttpOnlyset-cookie: nyt-
2023-12-05 18:13:53 UTC	1014	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 33 33 30 35 39 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800033059,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50329	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	427	OUT	GET /ium?sourceid=3&uid= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:53 UTC	642	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 33 66 65 64 65 38 30 32 30 36 33 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 52 65 70 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Length: 0Connection: closeCF-Ray: 830e43fede802063-IADCF-Cache-Status: DYNAMICCache-Control: max-age=0, no-cache, no-storeExpires: Tue, 05 Dec 2023 18:13:53 GMTPragma: no-cacheRep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50330	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:52 UTC	1454	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad
2023-12-05 18:13:52 UTC	504	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 63 6f 6e 74 65 78 74 5f 69 64 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 74 6f 5f 6d 61 6b 65 5f 74 65 73 74 5f 63 6f 6e 74 65 78 74 5f 69 64 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 69 31 6b 62 35 6c 4b 61 44 7a 47 32 43 4c 59 45 4e 68 46 4a 4b 6e 6f 62 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 61 74 69 76 65 5f 61 70 70 5f 61 64 73 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 Data Ascii: [{"context_id":"context_id_placeholder_to_make_test_context_id","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"i1kb5lKaDzG2CLYENhFJKnob","client_lib":"v1.3.0","sourceApp":"native_app_ads","subject":"dfp-ad-events","how":"beacon","client_ts":17018000
2023-12-05 18:13:53 UTC	758	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 41 63 74 69 76 65 3d 74 72 75 65 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 65 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 Data Ascii: HTTP/1.1 200 OKset-cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; Path=/; Domain=nytimes.com; Expires=Wed, 04 Dec 2024 18:13:52 GMT; Max-Age=31536000; Secure; SameSite=Noneset-cookie: sessionActive=true; Path=/; Domain=et.nytimes.com; Expires=Tue, 05 Dec 2023
2023-12-05 18:13:53 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50327	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1865	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:53 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:13:53 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50331	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	2201	OUT	GET /vi-assets/static-assets/NYT-BestSeller-1200x675-699eb842421d5076f318fe0df3d903a5.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:53 UTC	1347	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 36 30 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 42 48 6e 58 75 72 77 4e 65 4e 66 51 67 55 6b 70 31 6d 51 63 45 69 45 35 66 5a 70 76 65 61 45 38 39 70 42 78 6f 34 59 39 65 6c 62 44 51 33 65 31 70 53 35 34 6d 47 58 4a 36 64 55 45 77 68 37 41 71 69 49 7a 5a 37 4a 6f 63 4a 47 30 78 64 74 6b 41 55 6d 77 32 5f 39 61 31 30 68 39 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 32 20 4f 63 74 20 32 30 32 33 20 31 35 3a 34 39 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 11605X-GUploader-UploadID: ADPycduBHnXurwNeNfQgUkp1mQcEiE5fZpveaE89pBxo4Y9elbDQ3e1pS54mGXJ6dUEwh7AqiIzZ7JocJG0xdtkAUmw2_9a10h9CCache-Control: public,max-age=31536000Expires: Thu, 12 Oct 2023 15:49:
2023-12-05 18:13:53 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 02 a3 08 03 00 00 00 3a 6d 06 f2 00 00 00 7b 50 4c 54 45 ee 9b 2d f0 a8 47 f1 ae 55 f2 b4 61 f3 ba 6f f4 c0 7c f6 cd 96 f5 c7 89 f8 d3 a3 f8 da b0 fb e6 cb fc ec d8 fd f2 e5 ff ff ff fd f3 e5 ef a1 3a fe f9 f2 f2 b4 62 f1 ad 54 f4 c1 7c f1 ae 54 f0 a7 47 f7 cd 96 f9 e0 bd f9 d9 b0 fa e0 be fa df bd f5 c6 89 f7 d3 a3 f8 d4 a3 f4 c1 7b f3 ba 6e fa e0 bd fc ec d7 f3 bb 6f fc ed d8 f9 da b0 f9 d9 b1 f6 c7 89 f7 ce 96 fb e6 ca 94 8d 19 df 00 00 2c 95 49 44 41 54 78 01 ec c1 81 00 00 00 08 c0 b0 9e 3f 74 00 29 6c 9b 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR:m{PLTE-GUao\|:bT\|TG{no,IDATx?t)l
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 17 47 f1 f3 d8 b1 3c b2 37 07 56 42 17 62 59 29 1d 9d 5c 99 4a 7d f2 a0 db 79 1e f9 fc cd 5a d2 4a 9e b1 42 8f 05 00 e7 02 cd 42 d3 12 b5 dc 32 d1 05 98 8d bf 9d 66 ce 9b 19 6a b3 af aa b7 3c cf b2 ac a1 40 56 73 c0 a4 b1 f9 56 5d 16 2e 3e c7 f7 3c b2 99 23 a2 84 14 b9 a4 b0 e5 40 29 b4 7a 00 b0 e7 51 1b 6d 5a d5 6c ca 9e aa 6e 15 e4 d3 41 df a1 b9 24 a1 eb ba dc f0 91 37 79 b2 38 fd 5f 1e 49 e9 a8 d3 2c 9f 14 24 87 07 eb 85 00 20 5e 1d b3 19 7c aa 18 6b 66 33 a4 8c 03 7b bd 37 a1 a2 7f 2e 49 12 a7 6b 5f a8 a6 51 1d 59 60 f9 94 14 15 6f 76 5e 40 3f 85 00 60 e5 0a 66 36 1c d9 88 c5 d3 3b 83 61 f6 21 76 0a ba 54 4b a1 6d 46 3f e8 df 35 eb 74 3c c9 c3 6d a8 7e a3 b7 54 cc 3d d9 a0 e6 b6 3c b1 23 00 58 39 63 53 32 f3 8d 58 4d 58 ed dc ce 8e 93 6c 89 4e c0 f2 Data Ascii: G<7VBbY)\J}yZJBB2fj<@VsV].><#@)zQmZlnA$7y8_I,$ ^\|kf3{7.Ik_QY`ov^@?`f6;a!vTKmF?5t<m~T=<#X9cS2XMXlN
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: d5 4f 2f 6e a3 19 cf f2 86 3e 80 bc 6a 49 ac 65 e1 e4 0d c2 b2 65 cd bb 5b f5 90 57 00 6d 19 b6 0f 74 4f 78 3b 97 0f ee 45 37 f9 fa 6e 16 04 c0 91 05 6d b3 92 0e 68 64 95 f1 98 d8 62 15 04 c0 49 de b3 b2 f7 f9 bd 5d cf ab 5b d9 05 c1 7e 1e 9c 67 a1 3d af 38 19 02 c7 37 db f8 dd 2a 62 5e 15 de 09 f6 36 b2 8c 88 54 6a c7 5e 37 79 12 0b 38 0d b3 d9 3f ae 3e f3 6a ff f3 f3 28 d4 86 d8 6b 8f 4c e6 24 58 ee 5d 02 27 ec 60 79 79 57 ac e5 95 4e 04 7b e4 21 f6 da a3 c5 97 75 3c 99 00 38 96 71 0c ac af 79 a5 b5 74 c3 5e c3 e8 49 3e e8 3b 52 1f 38 cd 17 fa 8d bc 2a f5 8d 15 ec f7 a4 9b fc d3 d6 a7 57 2b 00 8e 65 12 2b ac 98 57 52 28 15 56 e7 bc 8f fc ad fc b6 22 b0 80 13 06 96 2e d6 f2 4a 4a 1a c6 7f 91 58 f6 36 fe b3 04 d6 49 81 d5 c7 26 e6 95 ac d8 38 d0 d5 43 cb Data Ascii: O/n>jIee[WmtOx;E7nmhdbI][~g=87b^6Tj^7y8?>j(kL$X]'`yyWN{!u<8qyt^I>;R8W+e+WR(V".JJX6I&8C
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 3b 4d 60 e9 fc 7c ef 14 fa 20 c1 93 57 c0 4a 35 d9 85 57 c1 e8 51 d8 d5 8d fc 83 1f da ce c8 a9 15 eb 07 d0 52 75 e9 04 a0 c0 6a 11 17 13 98 d9 c5 96 57 91 ad c2 51 36 bd 6c 28 cf f8 d8 5a 26 f2 23 97 df dc 4d 76 23 00 05 d6 76 64 cd 62 23 fe bc 2a 3d ae 7a 16 fe 36 d3 fb db 56 1c 5e 37 bf 4a c6 cf 10 76 15 04 a0 c0 fa 12 59 56 b5 8f c8 72 2f 7a 7c 66 16 8e 9a e9 0b 39 bd 90 2f 8d 59 16 d9 f6 39 d1 66 02 50 60 ad 59 85 71 3f cf 4b 05 ab a7 71 37 73 c7 fb 7f e2 7b de 77 f3 24 c0 10 0b ac 90 5b 6d e7 f5 43 7e e9 79 15 dd 8d 8f 76 32 fd 29 67 e4 b6 6a 62 1f 04 18 5e 81 35 89 0b cc 77 b0 57 90 57 91 5f 8d a5 a3 9f ba 8f 91 73 71 33 63 e5 97 92 67 55 41 81 25 f2 4d 64 e5 d7 91 57 91 ef 76 36 0c 5e f7 72 72 16 6e e1 7f ef 46 36 ba 21 13 60 88 05 d6 bb c2 6a 3b Data Ascii: ;M`\| WJ5WQRujWQ6l(Z&#Mv#vdb#*=z6V^7JvYVr/z\|f9/Y9fP`Yq?Kq7s{w$[mC~yv2)gjb^5wWW_sq3cgUA%MdWv6^rrnF6!`j;
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 35 07 96 bb c9 2b e3 75 8b af 4b 19 00 70 40 ac 24 3d 8d d7 56 a1 43 eb ea 6a 03 6b 34 2e 27 53 dd 36 5d 3e e6 23 19 06 70 40 1c 4b 72 0a 6d b7 e8 d0 ba ba ca c0 ba c9 ab 3b af db ea c9 fd b3 93 c1 00 5c 13 24 31 6e a5 ed 4c 87 d6 d5 55 06 96 d3 2d de 3c e6 73 27 fd 02 10 5e b4 9d 0f 1d 5a 57 d7 59 61 d5 9b 1b 70 ee d3 d8 2a 01 e0 d6 ea 0e 8b bd ad ab ab 0e ac 07 7d e7 6b ca 2a 20 e5 76 7b 64 f7 b4 ae ae 3d b0 f2 b7 ce 7a 62 65 15 80 a7 ee b1 13 5b 57 d7 1f 58 e2 24 35 00 4a dd 69 b2 b3 75 d5 43 60 01 40 a1 bb 85 f6 d6 15 81 05 20 b9 bc 9a b4 b7 ae 08 2c 00 c9 e5 95 86 f6 d6 55 1f 81 05 00 a5 ee 31 f9 da ba ea 2f b0 00 e0 a7 ee 13 36 5b 57 be b8 ed 2b b0 00 e0 d6 eb 1e 93 8d d6 95 19 8b 84 9e 02 0b 00 82 fd 26 72 62 eb ca 64 22 d7 16 58 00 0a 33 29 ca 71 Data Ascii: 5+uKp@$=VCjk4.'S6]>#p@Krm;\$1nLU-<s'^ZWYap}k v{d=zbe[WX$5JiuC`@ ,U1/6[W+&rbd"X3)q
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: ac e7 02 c0 dd e4 95 f1 bd fd f6 e5 7a a0 45 1a 81 15 7c 6c aa 9d 01 80 d1 b8 9c 4c 75 5d 96 ea c3 84 91 77 49 04 d6 4a 3f d4 02 e0 d4 62 59 b5 61 91 ec 5c 43 54 a6 10 58 b3 b8 05 f5 cc c2 f8 46 80 c1 70 4d 39 a9 75 9b 37 8f f9 5c ce 6f aa 07 b2 09 04 56 b0 bd 2d ca 1b ab 7a 53 64 4e ae 1c 30 ca df 3a eb db a6 93 fb e7 91 f4 64 a2 87 2a fb 0f ac ff e9 1f e3 be be 52 d4 77 65 26 d7 0a 08 b5 df 51 56 39 e9 53 a9 87 f2 ee af 03 cb 64 72 8c c0 2a 7a ec fa 19 5d 63 aa d9 8d 00 03 98 29 9f 2e 8b e7 91 f4 af d1 83 2d fe 2e b0 7c e1 44 8e 11 58 41 23 27 67 66 f5 0b 6f 8a b1 93 2b 03 98 f8 a8 ca e4 3e 9d 1e 88 f3 7a 28 1f 64 43 38 62 5c 75 08 ac 60 f5 53 2d 67 e7 9e 0b e3 f5 0b 7b 57 5e 55 5b 0b 78 78 2f ab 1e f3 51 aa 41 da 9d 91 0d e1 38 67 c1 ae 81 65 34 5a 4a Data Ascii: zE\|lLu]wIJ?bYa\CTXFpM9u7\oV-zSdN0:dRwe&QV9Sdrz]c).-.\|DXA#'gfo+>z(dC8b\u`S-g{W^U[xx/QA8ge4ZJ
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: b8 b4 b8 8a 42 ad 67 56 39 e9 cf 4c df ed fd 4a 0b 20 ac f4 83 cd 25 2d b9 d5 33 b2 99 f4 e9 f9 73 95 bb ec 00 c0 55 fa c1 97 92 1c 57 5c 7d 79 15 85 42 bf 89 2c 80 c1 ab b4 97 ce 84 57 3d 0b 73 9b d2 5f ac 09 02 a0 9f b8 4a 3f b2 92 39 0c 07 d3 fe 5e 0e 80 d2 6f 9c 86 06 1b 59 be 70 09 f6 ed aa 20 5f 01 cc 89 ea 24 48 ea c2 ab bf f6 b8 8a f2 e4 bb ef 00 93 0c fb 85 dc 5e 79 5c 45 8e ee 3b 70 b9 71 15 df bd 3a 36 73 9f f8 a7 06 9b c9 25 01 88 ab 28 e4 b5 1e 8f 7f cc 92 ef db c5 ee 3b c0 9c e8 e5 09 8f f6 aa 8b ab 68 6c 89 2c c0 f9 38 27 7a 99 e6 f7 a6 87 b4 ea b3 fb be 10 60 a8 8a ce bd 66 27 a9 0a cf af 56 ff 92 9f e4 4e 2e 44 c1 07 43 50 62 75 8b ab 60 ac 4b bb a1 f5 5a eb 81 a6 93 fb 91 5c 92 d8 7d ff 29 c0 20 15 95 eb 38 55 fa 43 12 e7 9a fb 57 e3 bb Data Ascii: BgV9LJ %-3sUW\}yB,W=s_J?9^oYp _$H^y\E;pq:6s%(;hl,8'z`f'VN.DCPbu`KZ\}) 8UCW
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: b7 1e d9 4c ee bc 46 b3 18 57 6b 25 89 5d 84 6b 9b 9a 0d fb 56 46 57 4e 00 24 a2 b1 ba cb 78 e3 88 14 d9 85 a4 a9 59 18 23 5d 18 dd b0 f3 5f f6 a6 70 02 20 1d e1 55 77 08 f1 21 99 0b b8 5e d8 54 be 73 e3 2d e8 86 ac fd 1e 80 1d 09 80 a4 07 1c 22 bb e7 1a 8f 9d 4b 4a 5c 3e f1 07 2d 1b 2c d4 96 7b b6 5d 3d 27 bb b8 10 40 30 da 22 df 6c cc a7 5b 63 3d 9b ef d7 2a dc e4 45 51 8e e3 70 68 e1 c4 ec d9 76 f5 90 ee d6 3e 00 c5 ee fd 04 95 b6 aa 25 01 ff cf de 7d ed 27 8f 33 61 00 1f c7 0d cb 1e 95 60 01 ef 92 ba fd fe 6f f0 2b eb 98 c8 33 c2 29 db 5e c8 f3 3f a3 c3 c9 f3 1b c6 23 c9 dd dc ca 1e ba 27 2d 18 7f 1a de 88 af 31 bd 52 62 b9 67 f6 25 01 c0 f7 29 da 33 25 54 e4 57 be 09 e1 e7 ef 64 d7 e0 a2 6a bb 81 79 af 3a 52 e5 7a fd 68 db a4 8c 9a f9 a8 5f 14 09 00 Data Ascii: LFWk%]kVFWN$xY#]_p Uw!^Ts-"KJ\>-,{]='@0"l[c=*EQphv>%}'3a`o+3)^?#'-1Rbg%)3%TWdjy:Rzh_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50332	162.248.18.37	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1795	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAB9mE5p6zvZQM1GvWLAAAAAAA&expiration=1701886432&nuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032
2023-12-05 18:13:53 UTC	793	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 33 32 3d 31 31 31 37 35 2d 41 41 41 42 39 6d 45 35 70 36 7a 76 5a 51 4d 31 47 76 57 4c 41 41 41 41 41 41 41 26 4b 52 54 42 26 32 32 37 31 33 2d 41 41 41 42 39 6d 45 35 70 36 7a 76 5a 51 4d 31 47 76 57 4c 41 41 41 41 41 41 41 26 4b 52 54 42 26 32 32 37 31 35 2d 41 41 41 42 39 6d 45 35 70 36 7a 76 5a 51 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:53 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQ
2023-12-05 18:13:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50333	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	2199	OUT	GET /vi-assets/static-assets/NYT-BestSeller-Orange-ad8203552f20bd135b7419d88e7d0c58.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:53 UTC	1343	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 33 35 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 78 43 4b 36 4e 71 6c 67 52 64 42 6a 50 74 64 6e 75 31 69 70 4a 58 36 4a 57 6a 32 38 54 41 4f 5f 77 50 56 58 67 45 54 58 6d 53 55 30 71 41 32 6d 6e 4b 72 54 32 6f 64 78 44 52 51 38 7a 70 53 73 74 48 56 4a 65 4f 5f 4a 38 32 33 58 61 45 38 48 6f 48 71 44 79 4d 77 42 78 50 62 48 48 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 32 20 4f 63 74 20 32 30 32 33 20 31 35 3a 34 39 3a 35 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 9358X-GUploader-UploadID: ADPycdvxCK6NqlgRdBjPtdnu1ipJX6JWj28TAO_wPVXgETXmSU0qA2mnKrT2odxDRQ8zpSstHVJeO_J823XaE8HoHqDyMwBxPbHHCache-Control: public,max-age=31536000Expires: Thu, 12 Oct 2023 15:49:5
2023-12-05 18:13:53 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 0e 00 00 02 0e 08 03 00 00 00 e7 65 75 0b 00 00 00 3c 50 4c 54 45 ee 9b 2d ee 9b 2d ee 9b 2d ee 9b 2d f1 ab 54 f2 b1 60 f6 bd 78 f8 c9 90 f1 a5 46 f8 cf 9d fc e2 c3 ff ff ff fc ea d1 f7 c3 84 fc f1 e0 fe f8 f0 f4 b7 6d f9 d5 a9 f0 a0 39 fb db b6 c4 81 39 c6 00 00 00 04 74 52 4e 53 80 20 ff 40 83 7f 2a a3 00 00 23 fd 49 44 41 54 78 01 ec d2 41 01 00 00 04 04 b0 43 ff ce 5e a4 d8 32 2c 0f 2a 0d 67 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 74 40 07 d0 01 1d d0 01 1d d0 01 1d d0 01 1d d0 01 1d d0 61 d9 35 1b dd 56 79 18 0c 4b 51 fe 1d 62 12 ee ff 5e bf 43 bb 03 6f 5c 58 39 9b 3e ad 53 fd e8 6f a4 02 4d f2 83 6d 9c fc 10 d6 ad f8 10 bc ea f0 4e c4 Data Ascii: PNGIHDReu<PLTE----T`xFm99tRNS @#IDATxAC^2,gt@t@t@t@t@t@t@t@t@t@t@t@a5VyKQb^Co\X9>SoMmN
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: bd f3 d0 95 5c 85 01 a8 64 d1 0d 18 c8 ff 7f eb 2b 5b 3c c1 29 b7 48 77 94 10 8e ea f6 9d e8 8c 31 36 38 42 87 9f 42 b9 6d 7a a9 57 d1 c9 7d 6d 02 8d 2c 42 4c 1d ec de 9d 48 27 96 7e c2 15 a1 bc d2 c9 24 fe 40 6e ef 3c c1 cf ce da cf e5 2a 11 f7 58 dc d4 61 ef 5a 24 d9 8d 24 4a 1e 7b fa bb ac 34 11 0c 3c e7 0a ef 81 9b ab e8 57 36 62 fe c0 7c 26 93 6c 70 4c 1d 9a c7 9e cc b9 76 9f b9 99 4d 5d c9 8a 96 44 63 15 de 04 f7 ac 9c bc 96 71 84 23 7c a1 da 82 5d af 6e ea a0 f3 f1 52 aa ba e8 db e4 57 29 5d e2 7b e5 52 c4 d8 fb 1a 3e 77 b2 d3 af 3e 7e 82 a9 03 87 86 0d 41 af 23 2b 39 99 c9 07 a3 53 bc cc f7 4a 69 e1 6b 2c b0 4f 41 59 81 cf 1c 00 a7 0e 9a f0 88 a0 56 f5 c9 c0 85 c7 2d e6 8a cd b7 fa 71 bd 15 cb 4a 78 3d 75 38 d8 74 75 f9 a2 ee 2a bf 05 b7 54 b8 0e Data Ascii: \d+[<)Hw168BBmzW}m,BLH'~$@n<XaZ$$J{4<W6b\|&lpLvM]Dcq#\|]nRW)]{R>w>~A#+9SJik,OAYV-qJx=u8tuT
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 76 56 6c db a3 64 fe ea 3a 30 fe b0 c8 e0 bf 95 38 4c 1f ca ce ee ac de 45 07 28 74 34 a2 a0 d0 d7 13 87 e9 83 d9 ad f0 d6 eb ea e0 da de a1 17 a6 36 68 bf 9d 70 05 be c0 c4 20 92 e1 88 db 93 2e ab 43 20 db ce ce 4c 47 55 6f 3f 37 54 27 1f 22 7f a0 e0 93 7e 8b 0f a4 f8 32 b7 80 dc 45 75 d0 88 28 84 d0 62 c1 b8 7d 7b 3b e0 96 68 15 fc 34 dc 0c dc 52 af a5 83 78 54 d9 c8 c1 89 12 03 f7 c5 58 ab ff 27 59 71 0d e2 0d 92 bb ee 1f d4 ae 64 fc 45 bb a0 0e 1c ca a4 10 76 d8 0b 36 a5 6f 3c 9b 77 be 89 d3 8a 73 25 d7 d3 21 20 ee 0a a1 f2 b0 17 6c 5a 27 04 d9 9f bf be c9 a8 97 20 cb 15 75 d0 b8 26 3b 31 28 6f cc 17 96 88 e4 28 9b 77 e4 2d 71 41 c4 f8 7a e6 e1 8a 3a 84 5e 87 c3 30 a7 46 6e 40 63 70 3f ae 43 6e 8e 10 31 bd e2 c5 05 75 e0 81 fb bb e9 a2 8a c3 de cc 75 Data Ascii: vVld:08LE(t46hp .C LGUo?7T'"~2Eu(b}{;h4RxTX'YqdEv6o<ws%! lZ' u&;1(o(w-qAz:^0Fn@cp?Cn1uu
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 09 a7 80 41 93 03 88 b4 65 2a 49 3a fd e4 19 67 f3 f2 d1 19 1f 0c c0 e4 c0 23 85 35 bf 0d 43 ca df 83 a7 f4 d2 a2 48 4e 67 82 da 35 39 18 c3 d4 03 c1 a3 54 fa d6 46 91 78 fe 3e ef a0 b5 c3 22 25 d4 ae cc c1 61 72 3a 1b 7e 1e d4 93 f7 a5 ed d7 40 21 3a 78 95 46 0d 30 39 fc b3 37 1c 17 2d 09 18 94 d3 d3 a7 4e 8c fb ce 03 11 c6 26 c4 c9 61 ff 62 9f 87 09 e3 9f 3c be ac b1 29 19 80 8d bb 13 93 c3 b6 84 c3 a6 58 82 64 f1 dc 64 a4 f6 3a b1 fb 4a a1 1c e2 87 71 10 74 38 87 f5 1f 2d f8 a1 26 cc d2 ae 35 c9 e2 6e 0d 75 77 e2 43 38 90 0c c5 23 ea 1e 0b 4d a1 8a c7 26 6f 95 80 31 49 77 e7 41 c6 dd af 9f 31 3a 21 7e 0a 07 93 75 7d cf 42 e9 b6 ef f0 8b 5f 13 0c a8 5e f4 17 7a fa d4 bd 5e 7f db d8 47 70 90 a1 19 bb 7d 2f 0e d5 44 c4 5a 84 61 19 1d 71 01 00 72 7b df 5c Data Ascii: Ae*I:g#5CHNg59TFx>"%ar:~@!:xF097-N&ab<)Xdd:Jqt8-&5nuwC8#M&o1IwA1:!~u}B_^z^Gp}/DZaqr{\
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 59 d7 fb 3c 3d 81 db 53 43 38 50 c4 5f d9 0b 71 90 a1 4a e8 cb 01 70 7b 71 08 07 db f1 d3 d0 5a d2 58 0e 24 43 f1 d8 e6 6c 90 6c 56 9a 35 39 80 83 ac ff f1 4e bf 3a f1 25 88 21 1c e8 d7 84 b1 29 39 ab 04 cf a5 05 fa fe 1c a8 7e 40 02 4e cf fc f3 75 54 a6 37 07 f7 45 82 ce 86 d7 81 d4 4d ea 1b 1c 8a fc 26 87 46 6b f7 79 75 72 3a 53 47 0e 16 6b 71 d1 92 d8 1e f0 50 8b b4 93 43 b2 06 e0 07 1c 54 d7 73 26 4d bd 6e df fd c5 f4 e0 50 ff ac be 0c 91 50 4b b8 23 bd 8b 43 54 04 f0 13 0e 02 6b 0b f4 e9 eb 15 bc 4e 27 4e e6 20 5c 09 12 46 b7 e0 9e c4 76 0e 2e 43 d3 5e 0e 94 1a 88 1d 6a 37 7f 6a ce 66 73 81 d7 9b 04 dc 93 df ca a1 08 80 1f 72 20 df ae 6a ba 26 94 f5 78 57 ba 00 07 83 bb d2 5b 38 24 6d 00 7e cc 61 69 ef af 0f 48 86 12 db 0b d6 47 73 80 88 bb 92 ab 1c Data Ascii: Y<=SC8P_qJp{qZX$CllV59N:%!)9~@NuT7EM&Fkyur:SGkqPCTs&MnPPK#CTkN'N \Fv.C^j7jfsr j&xW[8$m~aiHGs
2023-12-05 18:13:53 UTC	1379	IN	Data Raw: 2a 45 0c 38 cc a1 a1 df 93 7e 51 be cb c9 71 73 68 e8 72 bd b5 ef c3 61 0e 0d 1d 2e b9 5e bc 29 87 39 34 9c f3 90 99 e6 cf 61 0e 0d 3d ca a9 3e ba cd 9d c3 1c 1a 3a 44 4b 7d 08 8a 3d 87 39 34 74 48 25 fc 7f ce bc 17 07 19 4f 79 76 6b 66 5c 3b e6 f2 e7 40 76 ed b1 0c 41 f0 bd 66 a1 1d 76 b9 73 c8 71 6d d3 44 a1 83 9f 35 f7 a4 92 7c 0b 0e b4 ac 3e b1 55 7e f4 1b f8 99 ae 9f 30 7f 0e cb da d0 40 6e d3 f9 ac 33 a5 e0 49 a2 8e bf ec 39 88 15 b8 22 6e 3a f3 61 a6 10 ed da ec 4c b3 e7 00 1a a3 5c db 4b 49 02 66 1b 8e c8 2c b4 be 69 cd 9c 03 04 7a 61 65 e3 c6 da 4c d5 43 a7 5e cf d1 32 73 0e eb d3 cc 42 b0 da 4c d6 71 f4 d5 40 9b cc db 72 30 7e c7 05 6f 26 e2 ca 8e 13 39 c4 00 ef c9 a1 72 cf 30 db 75 82 6e 80 a7 85 05 de 95 83 da 3d f7 99 95 8e e7 14 56 0e 1d ff Data Ascii: *E8~Qqshra.^)94a=>:DK}=94tH%Oyvkf\;@vAfvsqmD5\|>U~0@n3I9"n:aL\KIf,izaeLC^2sBLq@r0~o&9r0un=V
2023-12-05 18:13:53 UTC	1084	IN	Data Raw: 0d 6e ff 82 ff d0 8c 6b b0 16 6c d4 98 71 88 0e 3f 05 62 42 5c 2f 76 27 3d c9 9a 48 53 3d db fc dd fe ac a9 dd c0 cf 53 18 2d b6 fd e4 71 b7 a7 e9 79 11 5f 42 c9 27 a4 79 19 1a 08 f2 fe 99 4b ee de 75 f4 31 34 94 b9 10 88 79 4a 32 5a df 57 ce be bd 16 55 61 32 4a e3 6c 90 88 4d 8a 63 65 92 a8 3d 6b f9 4d 74 e8 e3 63 be 0a e1 f7 3a 2c f7 02 45 1b 03 b7 76 f6 94 27 1e 56 c7 be 5d 7b b0 98 6d b8 31 38 f0 ab 61 c1 10 51 ed 61 98 a2 3c 93 e8 f0 9c d9 82 69 2f 84 db 47 08 ed 3e 9f d7 31 31 cc be 32 dd b1 18 de bb 6f ea 10 20 96 ac 8f 97 d9 4a 53 44 bc e4 18 c3 ee ff 0d 4e 8e 19 fd bf f1 fb 49 b7 5a fe 10 a2 8d 43 f6 b2 de a1 32 b7 eb 87 c3 8a 92 1e ae 14 fa 02 8f a9 04 6c 11 eb 71 47 5e 78 53 a0 6d 93 4b ae 72 ea ec 53 8f 02 c9 21 7f 6e bc 30 0e 9e d1 c6 54 f3 Data Ascii: nklq?bB\/v'=HS=S-qy_B'yKu14yJ2ZWUa2JlMce=kMtc:,Ev'V]{m18aQa<i/G>112o JSDNIZC2lqG^xSmKrS!n0T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50348	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	455	OUT	GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:53 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 53 39 48 32 56 48 32 58 54 4e 32 43 39 4d 57 57 47 36 47 4a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: S9H2VH2XTN2C9MWWG6GJCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50343	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	449	OUT	GET /ecm3?ex=rubiconprojectHMT&id=kJbBhtoqQaWo41VYJ3lV3w HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:53 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 5a 48 32 56 4d 31 37 47 41 54 47 30 4b 44 56 50 39 42 50 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: ZH2VM17GATG0KDVP9BPACache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50336	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	463	OUT	GET /xuid?mid=7976&xuid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:53 UTC	449	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 33 63 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 4f 55 52 20 44 45 4c 20 53 41 4d 20 4f 54 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OT
2023-12-05 18:13:53 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50346	34.98.64.218	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	582	OUT	GET /w/1.0/sd?id=540245193&val=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800031460586
2023-12-05 18:13:53 UTC	366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKVary: AcceptServer: OXGW/0.0.0Pragma: no-cacheP3P: CP="CUR ADM OUR NOR STA NID"Expires: Mon, 26 Jul 1997 05:00:00 GMTDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Cache-Control: private, max-a
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50334	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	2235	OUT	GET /vi-assets/static-assets/NYTCommunitiesFundHeader-d4499c07bbe7d7de8ad6.js?_sw-precache=7696c902100627070a9d09d7425908e9 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; _dd_s=rum=0&expire=1701800927107
2023-12-05 18:13:53 UTC	1340	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 36 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 6d 4f 79 4d 52 7a 4e 2d 48 35 56 54 64 68 57 4e 33 56 56 56 48 6e 5f 52 5f 32 38 71 48 51 51 52 61 62 34 6d 4d 73 45 52 43 59 63 38 6a 4a 62 70 4c 5a 72 54 67 52 52 32 4e 67 64 31 33 30 6c 5f 4c 54 54 38 66 54 76 62 42 4f 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 33 36 39 36 37 30 35 35 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1266X-GUploader-UploadID: ABPtcPomOyMRzN-H5VTdhWN3VVVHn_R_28qHQQRab4mMsERCYc8jJbpLZrTgRR2Ngd130l_LTT8fTvbBOwx-goog-generation: 1701370369670556x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:53 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:53 UTC	1266	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 5d 2c 7b 22 31 6b 57 47 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 69 29 3b 76 61 72 20 74 2c 6f 2c 61 3d 6e 28 22 67 63 52 2f 22 29 2c 73 3d 6e 2e 6e 28 61 29 2c 72 3d 6e 28 22 71 31 74 49 22 29 2c 64 3d 6e 2e 6e 28 72 29 2c 63 3d 6e 28 22 4a 71 70 39 22 29 2c 70 3d 4f 62 6a 65 63 74 28 63 2e 63 73 73 29 28 22 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 23 65 35 65 35 65 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 78 2d 77 69 64 74 68 3a Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[31],{"1kWG":function(e,i,n){"use strict";n.r(i);var t,o,a=n("gcR/"),s=n.n(a),r=n("q1tI"),d=n.n(r),c=n("Jqp9"),p=Object(c.css)("border:solid 1px #e5e5e5;border-radius:3px;box-sizing:border-box;max-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50342	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	463	OUT	GET /crum?cm_dsp_id=17&external_user_id=0ve4IDJUsd2OZC0HsNGu HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:53 UTC	981	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 34 30 32 36 65 38 32 30 35 63 64 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e44026e8205cd-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50339	34.202.221.201	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	521	OUT	GET /sync/pubmatic/40D3C5B1-C944-4FD5-B1BE-0A313CAD2333?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBE1ob2UCEK43YkV_P3PZh3XpgwCAb5cFEgEBAQG5cGV5Zdw90iMA_eMAAA&S=AQAAAuVtD-61bv1oVGqYMY4CfqA
2023-12-05 18:13:53 UTC	777	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 67 65 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 72 76 65 72 3a 20 41 54 53 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Connection: closeAge: 0Strict-Transport-Security: max-age=31536000Server: ATSExpect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/cs
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50364	44.217.198.78	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3234567c-3640-0686-54f2-fa4f8c223b8f
2023-12-05 18:13:53 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 55 54 43 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 74 2d 43 6f 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Connection: closeCache-Control: no-cache, no-store, must-revalidate, private, max-age=0Expires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheSet-Coo
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50337	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	485	OUT	GET /crum?cm_dsp_id=111&external_user_id=7523681944929849834&expiration=1703009624 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:13:53 UTC	979	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 34 30 32 37 62 33 30 35 38 37 65 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e44027b30587e-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50335	104.36.113.107	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1629	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SPugT=1701800031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7
2023-12-05 18:13:53 UTC	782	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 32 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4b 52 54 42 43 4f 4f 4b 49 45 5f 32 37 39 3d 32 32 38 39 30 2d 64 39 64 65 36 61 36 39 2d 63 39 38 65 2d 34 65 61 63 2d 38 66 62 38 2d 64 66 63 33 62 66 61 63 33 32 36 30 26 4b 52 54 42 26 32 33 30 31 31 2d 64 39 64 65 36 61 36 39 2d 63 39 38 65 2d 34 65 61 63 2d 38 66 62 38 2d 64 66 63 33 62 66 61 63 33 32 36 30 26 4b 52 54 42 26 32 Data Ascii: HTTP/1.1 302 Moved TemporarilyServer: nginxDate: Tue, 05 Dec 2023 18:13:52 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: KRTBCOOKIE_279=22890-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23011-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&2
2023-12-05 18:13:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50341	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	400	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:13:53 UTC	172	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidate
2023-12-05 18:13:53 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50352	54.86.106.102	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	464	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-ODX-uF7WlShvkjgr9QOPJdrpy5Ch5HpHvA8ppQ HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=30d734a5-0f7e-4e05-b715-ac1826c2c216
2023-12-05 18:13:53 UTC	226	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 52 65 71 75 65 73 74 2d 54 69 6d 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:53 GMTContent-Type: image/gifContent-Length: 43Connection: closeRequest-Time: 0Cache-Control: no-storeStrict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-05 18:13:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50360	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1911	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/audio-on.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:53 UTC	1059	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 34 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 56 6c 31 52 4e 62 50 77 37 6b 78 4e 4c 4e 67 51 76 56 65 6e 61 65 79 52 76 7a 74 38 75 37 41 68 66 7a 38 4e 6f 41 4d 45 68 6c 58 54 47 6c 4b 48 67 7a 42 75 70 65 54 30 75 66 66 36 4b 6a 61 4f 76 56 32 42 59 55 56 63 58 51 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1046X-GUploader-UploadID: ABPtcPoVl1RNbPw7kxNLNgQvVenaeyRvzt8u7Ahfz8NoAMEhlXTGlKHgzBupeT0uff6KjaOvV2BYUVcXQgCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExp
2023-12-05 18:13:53 UTC	1046	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50338	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1844	OUT	GET /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:53 UTC	477	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 6e 6f 2d 63 61 63 68 65 2c 6e 6f 2d 73 74 6f 72 65 0d 0a 58 2d 43 61 63 68 65 3a 20 45 72 72 6f 72 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 39 37 39 30 38 34 61 39 30 62 Data Ascii: HTTP/1.1 405 Method Not AllowedContent-Type: text/html;charset=iso-8859-1Content-Length: 319Connection: closeDate: Tue, 05 Dec 2023 18:13:53 GMTCache-Control: must-revalidate,no-cache,no-storeX-Cache: Error from cloudfrontVia: 1.1 979084a90b
2023-12-05 18:13:53 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50345	142.251.167.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	620	OUT	GET /pixel?google_nid=rubicon&google_hm=Mjk2ODgyNTJiY2IwMzNjMjdiYzlmNGYzOTNkNGI4ZTMxZjc2YzhjZA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:53 UTC	374	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 48 54 54 50 20 73 65 72 76 65 72 20 28 75 6e 6b 6e 6f 77 6e 29 0d 0a 43 Data Ascii: HTTP/1.1 200 OKContent-Type: image/pngDate: Tue, 05 Dec 2023 18:13:53 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidateCross-Origin-Resource-Policy: cross-originServer: HTTP server (unknown)C
2023-12-05 18:13:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50357	8.28.7.84	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1330	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; PugT=1701766031; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032
2023-12-05 18:13:53 UTC	408	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 39 3a 30 30 3a 32 31 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 53 50 75 67 54 3d 31 37 30 31 37 36 36 38 32 31 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 2d 4a 61 6e 2d 32 30 32 34 20 30 39 3a 30 30 3a 32 31 20 47 4d 54 3b 20 70 61 74 68 3d 2f 0d 0a 50 33 50 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Tue, 05 Dec 2023 09:00:21 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: SPugT=1701766821; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 04-Jan-2024 09:00:21 GMT; path=/P3P: CP="NOI DSP C
2023-12-05 18:13:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50361	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1912	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/audio-off.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:53 UTC	1060	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 38 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 35 5f 37 56 61 6e 51 4c 73 71 4b 76 37 78 4c 6d 62 68 6f 42 4a 4d 79 45 45 44 78 66 6d 6c 7a 39 6f 4b 72 30 4d 4b 63 33 55 34 59 63 46 6d 32 70 6c 69 56 76 44 33 65 78 45 68 68 4b 34 55 65 30 59 36 32 7a 6b 37 55 57 65 5f 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 880X-GUploader-UploadID: ABPtcPp5_7VanQLsqKv7xLmbhoBJMyEEDxfmlz9oKr0MKc3U4YcFm2pliVvD3exEhhK4Ue0Y62zk7UWe_gCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpi
2023-12-05 18:13:53 UTC	880	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50359	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1908	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/pause.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:53 UTC	1072	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 30 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 54 6e 72 55 74 38 36 47 49 54 7a 4e 38 30 6d 50 44 42 4b 49 78 7a 67 54 34 78 57 59 38 48 4d 43 48 49 6d 4b 69 70 65 4e 33 45 7a 69 34 61 4d 39 6b 4c 7a 34 4c 6c 67 6f 4d 54 62 39 71 45 78 71 4b 37 47 59 6b 44 41 6d 31 72 71 6d 70 65 4c 33 58 56 72 45 66 46 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 702X-GUploader-UploadID: ADPycduTnrUt86GITzN80mPDBKIxzgT4xWY8HMCHImKipeN3Ezi4aM9kLz4LlgoMTb9qExqK7GYkDAm1rqmpeL3XVrEfFACache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30,
2023-12-05 18:13:53 UTC	702	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50362	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1907	OUT	GET /ads/adplatforms/user-interface-elements/video-icons/play.svg HTTP/1.1 Host: static01.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; nyt-jkidd=uid=0&lastRequest=1701800026695&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"
2023-12-05 18:13:53 UTC	1060	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 38 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 76 33 72 4b 4c 6c 68 6a 79 73 62 50 5a 5f 59 73 51 67 45 55 4a 34 39 2d 67 37 4d 38 5a 59 7a 53 6c 35 66 48 32 79 34 4c 66 6f 30 33 79 43 51 70 41 74 58 71 51 47 55 32 77 77 73 6f 41 75 56 50 68 6e 47 6f 65 68 67 37 34 4c 6d 77 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 78 70 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 681X-GUploader-UploadID: ADPycdv3rKLlhjysbPZ_YsQgEUJ49-g7M8ZYzSl5fH2y4Lfo03yCQpAtXqQGU2wwsoAuVPhnGoehg74LmwCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicExpi
2023-12-05 18:13:53 UTC	681	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50367	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1819	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; PugT=1701800033
2023-12-05 18:13:54 UTC	615	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 70 63 3d 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 30 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 3d 30 3a 33 3b 20 64 6f 6d Data Ascii: HTTP/1.1 204 No ContentP3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure;Set-Cookie: pi=0:3; dom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50351	52.94.220.185	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	453	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:54 UTC	807	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 32 4b 43 47 56 34 44 4a 42 31 39 51 42 48 4b 34 54 42 52 47 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 61 64 2d 69 64 3d 41 79 4c 52 4c 63 4f 2d 65 55 46 53 70 67 76 6e 6b 76 33 56 4d 4a 55 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 4d 6f 6e 2c 20 30 31 2d Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:54 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 2KCGV4DJB19QBHK4TBRGSet-Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; Domain=.amazon-adsystem.com; Expires=Mon, 01-
2023-12-05 18:13:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50366	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	1454	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad
2023-12-05 18:13:53 UTC	507	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 63 6f 6e 74 65 78 74 5f 69 64 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 74 6f 5f 6d 61 6b 65 5f 74 65 73 74 5f 63 6f 6e 74 65 78 74 5f 69 64 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 45 6b 69 77 4e 33 59 64 41 6a 71 68 4a 6b 4e 6e 52 71 31 6a 64 76 5a 39 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 61 74 69 76 65 5f 61 70 70 5f 61 64 73 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 Data Ascii: [{"context_id":"context_id_placeholder_to_make_test_context_id","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"EkiwN3YdAjqhJkNnRq1jdvZ9","client_lib":"v1.3.0","sourceApp":"native_app_ads","subject":"dfp-ad-events","how":"beacon","client_ts":17018000
2023-12-05 18:13:54 UTC	758	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 35 33 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 41 63 74 69 76 65 3d 74 72 75 65 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 65 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 Data Ascii: HTTP/1.1 200 OKset-cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; Path=/; Domain=nytimes.com; Expires=Wed, 04 Dec 2024 18:13:53 GMT; Max-Age=31536000; Secure; SameSite=Noneset-cookie: sessionActive=true; Path=/; Domain=et.nytimes.com; Expires=Tue, 05 Dec 2023
2023-12-05 18:13:54 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50368	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	2218	OUT	GET /vi-assets/static-assets/Rio2016-f600e68f03ca5de89a5f.js?_sw-precache=57d95bfdf2be29bd5fef63cf0b5fe745 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932378
2023-12-05 18:13:54 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 39 31 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 48 34 65 39 4a 4a 74 51 30 31 66 53 79 77 63 42 4e 51 67 62 78 4b 66 41 31 74 35 74 4b 44 32 43 54 6b 4f 43 59 71 4e 4f 43 52 74 58 51 79 38 33 53 44 69 43 41 69 72 31 57 35 41 34 4f 46 4c 63 62 78 6d 68 4f 36 37 4d 6c 74 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 30 33 35 31 39 34 37 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 6914X-GUploader-UploadID: ABPtcPqH4e9JJtQ01fSywcBNQgbxKfA1t5tKD2CTkOCYqNOCRtXQy83SDiCAir1W5A4OFLcbxmhO67Mltgx-goog-generation: 1701370603519475x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:54 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 5d 2c 7b 22 31 43 6c 77 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 69 29 2c 74 2e 64 28 69 2c 22 64 65 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 29 29 3b 76 61 72 20 6f 2c 73 3d 74 28 22 67 63 52 2f 22 29 2c 6c 3d 74 2e 6e 28 73 29 2c 68 3d 28 74 28 22 71 31 74 49 22 29 2c 74 28 22 4a 71 70 39 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 28 6f 3d 6c 28 29 28 22 73 76 67 22 2c 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[32],{"1Clw":function(e,i,t){"use strict";t.r(i),t.d(i,"default",(function(){return y}));var o,s=t("gcR/"),l=t.n(s),h=(t("q1tI"),t("Jqp9"));function c(){return o\|\|(o=l()("svg",{xmlns:"http://www.w3.org/2
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 35 35 2d 37 2e 39 36 32 33 32 38 38 63 30 2d 31 32 2e 31 37 34 36 35 37 35 2d 39 2e 39 35 39 36 37 37 2d 31 38 2e 35 37 30 32 30 35 35 2d 32 31 2e 31 37 30 36 39 39 2d 31 38 2e 35 37 30 32 30 35 35 2d 31 31 2e 30 35 37 37 39 35 33 20 30 2d 32 31 2e 32 34 37 33 31 31 34 20 36 2e 34 39 38 32 38 37 37 2d 32 31 2e 32 34 37 33 31 31 34 20 31 38 2e 34 39 33 31 35 30 37 20 30 20 31 31 2e 39 34 33 34 39 33 31 20 31 30 2e 34 31 39 33 35 34 38 20 31 38 2e 33 36 34 37 32 36 20 32 31 2e 33 32 33 39 32 34 34 20 31 38 2e 33 36 34 37 32 36 20 31 30 2e 39 30 34 35 37 20 30 20 32 31 2e 30 39 34 30 38 36 2d 36 2e 33 34 34 31 37 38 31 20 32 31 2e 30 39 34 30 38 36 2d 31 38 2e 32 38 37 36 37 31 32 7a 6d 2d 31 36 2e 33 31 38 35 34 38 2e 31 35 34 31 30 39 36 63 30 20 33 2e 31 Data Ascii: 55-7.9623288c0-12.1746575-9.959677-18.5702055-21.170699-18.5702055-11.0577953 0-21.2473114 6.4982877-21.2473114 18.4931507 0 11.9434931 10.4193548 18.364726 21.3239244 18.364726 10.90457 0 21.094086-6.3441781 21.094086-18.2876712zm-16.318548.1541096c0 3.1
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 7a 6d 32 31 2e 30 33 37 39 32 39 33 2d 32 35 2e 35 34 34 36 36 32 33 63 2d 31 30 2e 39 34 38 38 32 36 34 20 30 2d 32 31 2e 30 33 37 39 32 39 33 20 36 2e 35 32 33 33 34 34 39 2d 32 31 2e 30 33 37 39 32 39 33 20 31 38 2e 35 36 34 34 35 39 39 20 30 20 31 31 2e 39 38 39 35 34 37 20 31 30 2e 33 31 36 36 37 36 37 20 31 38 2e 34 33 35 35 34 30 31 20 32 31 2e 31 31 33 37 38 37 33 20 31 38 2e 34 33 35 35 34 30 31 20 31 30 2e 37 39 37 31 31 20 30 20 32 30 2e 38 38 36 32 31 33 2d 36 2e 33 36 38 36 34 31 32 20 32 30 2e 38 38 36 32 31 33 2d 31 38 2e 33 35 38 31 38 38 32 20 30 2d 31 32 2e 32 32 31 36 30 32 38 2d 39 2e 38 36 31 35 33 2d 31 38 2e 36 34 31 38 31 31 38 2d 32 30 2e 39 36 32 30 37 31 2d 31 38 2e 36 34 31 38 31 31 38 7a 4d 31 30 37 20 33 35 2e 30 30 35 39 35 Data Ascii: zm21.0379293-25.5446623c-10.9488264 0-21.0379293 6.5233449-21.0379293 18.5644599 0 11.989547 10.3166767 18.4355401 21.1137873 18.4355401 10.79711 0 20.886213-6.3686412 20.886213-18.3581882 0-12.2216028-9.86153-18.6418118-20.962071-18.6418118zM107 35.00595
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 2e 38 35 30 38 30 33 34 76 38 2e 32 32 30 33 35 31 39 7a 6d 34 35 20 31 31 2e 36 39 34 32 35 32 33 68 2d 35 2e 39 36 32 39 36 33 56 31 68 2d 31 36 2e 30 37 34 30 37 34 4c 32 31 35 20 33 2e 37 33 39 35 36 32 36 32 76 38 2e 36 38 33 38 39 36 35 38 68 35 2e 39 36 32 39 36 33 76 33 30 2e 33 34 31 39 34 38 34 48 32 31 35 56 35 33 68 32 37 2e 39 37 34 30 37 34 56 34 32 2e 37 36 35 34 30 37 36 48 32 34 33 7a 6d 34 31 2d 38 2e 39 34 31 31 30 33 31 63 30 2d 39 2e 34 31 35 33 32 34 35 2d 36 2e 35 38 36 35 35 2d 31 36 2e 35 35 34 34 31 36 37 2d 31 34 2e 35 37 37 32 31 2d 31 36 2e 35 35 34 34 31 36 37 2d 31 2e 34 35 35 31 36 39 20 30 2d 34 2e 31 38 36 38 20 30 2d 35 2e 38 37 31 37 33 31 2e 36 37 32 35 32 33 31 20 33 2e 30 31 32 34 35 33 2d 35 2e 39 34 39 32 34 33 35 Data Ascii: .8508034v8.2203519zm45 11.6942523h-5.962963V1h-16.074074L215 3.73956262v8.68389658h5.962963v30.3419484H215V53h27.974074V42.7654076H243zm41-8.9411031c0-9.4153245-6.58655-16.5544167-14.57721-16.5544167-1.455169 0-4.1868 0-5.871731.6725231 3.012453-5.9492435
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 6d 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 62 6f 6f 6b 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 26 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 22 29 2c 56 3d 4f 62 6a 65 63 74 28 68 2e 63 73 73 29 28 22 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 32 30 70 78 20 30 20 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 77 69 64 74 68 3a 37 2e 35 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 73 76 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 Data Ascii: ize:14px;font-weight:",m.a.font.weight.book,";line-height:16px;&:hover{text-decoration:underline;}"),V=Object(h.css)("float:left;height:2rem;margin:0 20px 0 0;cursor:pointer;text-indent:-9999px;width:7.5rem;position:relative;color:inherit;svg{position:abs
2023-12-05 18:13:54 UTC	19	IN	Data Raw: 30 33 63 61 35 64 65 38 39 61 35 66 2e 6a 73 2e 6d 61 70 Data Ascii: 03ca5de89a5f.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50371	23.218.218.72	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	589	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63; data-mag=LPSNS9TX-1-BT82~~63
2023-12-05 18:13:54 UTC	680	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 74 74 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 7e 7e 36 33 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63;Expires=Tue, 19 Dec 2023 18:13:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=truep3p: CP="NON DSP COR
2023-12-05 18:13:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50369	142.251.167.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	594	OUT	GET /pixel?google_nid=rp&google_hm=TFBTTlM5VFgtMS1CVDgy&google_push= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:13:54 UTC	374	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 48 54 54 50 20 73 65 72 76 65 72 20 28 75 6e 6b 6e 6f 77 6e 29 0d 0a 43 Data Ascii: HTTP/1.1 200 OKContent-Type: image/pngDate: Tue, 05 Dec 2023 18:13:54 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidateCross-Origin-Resource-Policy: cross-originServer: HTTP server (unknown)C
2023-12-05 18:13:54 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50365	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	2236	OUT	GET /vi-assets/static-assets/SportsFromTheAthleticLogo-e587aa02e1b6ef4fde30.js?_sw-precache=e5ef7cc08b56313d98540823fbf010cc HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:54 UTC	1343	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 38 30 36 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 4a 46 55 64 49 38 4b 2d 50 7a 63 41 6d 4e 77 32 76 74 78 57 6c 73 4d 2d 75 6a 4c 41 6d 69 71 56 64 47 6c 62 57 65 52 32 69 74 41 4b 71 4a 69 78 64 57 30 72 54 44 73 34 6f 67 6e 68 76 53 44 6f 49 48 67 54 7a 41 77 6a 2d 43 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 35 33 34 35 31 38 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 18065X-GUploader-UploadID: ABPtcPpJFUdI8K-PzcAmNw2vtxWlsM-ujLAmiqVdGlbWeR2itAKqJixdW0rTDs4ognhvSDoIHgTzAwj-CQx-goog-generation: 1701369734534518x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:54 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 33 5d 2c 7b 7a 62 39 47 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 56 2c 48 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 48 2e 72 28 56 29 3b 76 61 72 20 6c 2c 61 2c 4d 2c 5a 2c 74 2c 69 2c 70 2c 63 2c 64 2c 68 2c 66 2c 62 2c 4c 2c 65 2c 6b 2c 73 2c 6f 2c 72 2c 6e 2c 77 2c 76 2c 75 2c 6d 2c 67 2c 4e 2c 78 2c 50 3d 48 28 22 67 63 52 2f 22 29 2c 53 3d 48 2e 6e 28 50 29 2c 79 3d 28 48 28 22 71 31 74 49 22 29 2c 48 28 22 4b 68 5a 53 22 29 29 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 76 61 72 20 56 3d 43 2e 63 6c 61 73 73 4e 61 6d 65 3b 72 65 74 75 72 6e 20 53 28 29 28 22 73 76 67 22 2c 7b 77 69 64 74 68 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[33],{zb9G:function(C,V,H){"use strict";H.r(V);var l,a,M,Z,t,i,p,c,d,h,f,b,L,e,k,s,o,r,n,w,v,u,m,g,N,x,P=H("gcR/"),S=H.n(P),y=(H("q1tI"),H("KhZS")),A=function(C){var V=C.className;return S()("svg",{width
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 34 34 2e 38 31 33 37 20 32 31 2e 36 31 36 5a 4d 35 36 2e 31 37 36 37 20 32 31 2e 34 38 34 43 35 36 2e 31 37 36 37 20 31 34 2e 33 31 32 20 36 32 2e 32 39 32 37 20 31 30 2e 34 34 20 36 38 2e 39 33 36 37 20 31 30 2e 34 34 43 37 35 2e 36 36 38 37 20 31 30 2e 34 34 20 38 31 2e 36 35 32 37 20 31 34 2e 32 36 38 20 38 31 2e 36 35 32 37 20 32 31 2e 35 32 38 43 38 31 2e 36 35 32 37 20 32 38 2e 36 35 36 20 37 35 2e 35 33 36 37 20 33 32 2e 34 34 20 36 38 2e 39 38 30 37 20 33 32 2e 34 34 43 36 32 2e 34 32 34 37 20 33 32 2e 34 34 20 35 36 2e 31 37 36 37 20 32 38 2e 36 31 32 20 35 36 2e 31 37 36 37 20 32 31 2e 34 38 34 5a 4d 37 31 2e 37 30 38 37 20 32 31 2e 36 31 36 43 37 31 2e 37 30 38 37 20 31 39 2e 36 33 36 20 37 31 2e 35 37 36 37 20 31 36 2e 31 36 20 36 38 2e 38 34 Data Ascii: 44.8137 21.616ZM56.1767 21.484C56.1767 14.312 62.2927 10.44 68.9367 10.44C75.6687 10.44 81.6527 14.268 81.6527 21.528C81.6527 28.656 75.5367 32.44 68.9807 32.44C62.4247 32.44 56.1767 28.612 56.1767 21.484ZM71.7087 21.616C71.7087 19.636 71.5767 16.16 68.84
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 34 34 20 31 33 32 2e 36 37 33 20 33 32 2e 34 34 43 31 33 30 2e 34 37 33 20 33 32 2e 34 34 20 31 32 38 2e 39 33 33 20 33 32 2e 30 38 38 20 31 32 35 2e 38 30 39 20 33 30 2e 39 34 34 5a 22 2c 66 69 6c 6c 3a 22 62 6c 61 63 6b 22 7d 29 29 2c 61 7c 7c 28 61 3d 53 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 36 30 2e 38 36 34 20 32 30 2e 38 31 36 56 32 31 2e 39 32 43 31 36 30 2e 36 32 34 20 32 31 2e 38 38 38 20 31 36 30 2e 32 34 20 32 31 2e 38 34 20 31 35 39 2e 39 38 34 20 32 31 2e 38 34 43 31 35 39 2e 33 32 38 20 32 31 2e 38 34 20 31 35 38 2e 38 31 36 20 32 32 2e 30 31 36 20 31 35 38 2e 38 31 36 20 32 32 2e 37 38 34 56 32 33 2e 38 37 32 48 31 36 30 2e 34 31 36 56 32 34 2e 38 36 34 48 31 35 38 2e 38 36 34 56 33 32 48 31 35 37 2e 35 30 34 56 32 34 2e 38 36 34 Data Ascii: 44 132.673 32.44C130.473 32.44 128.933 32.088 125.809 30.944Z",fill:"black"})),a\|\|(a=S()("path",{d:"M160.864 20.816V21.92C160.624 21.888 160.24 21.84 159.984 21.84C159.328 21.84 158.816 22.016 158.816 22.784V23.872H160.416V24.864H158.864V32H157.504V24.864
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 33 2e 37 32 38 43 31 38 35 2e 33 38 31 20 32 33 2e 37 32 38 20 31 38 36 2e 30 36 39 20 32 34 2e 32 37 32 20 31 38 36 2e 33 35 37 20 32 34 2e 39 34 34 43 31 38 36 2e 35 34 39 20 32 35 2e 34 30 38 20 31 38 36 2e 35 39 37 20 32 35 2e 39 35 32 20 31 38 36 2e 35 39 37 20 32 36 2e 34 5a 22 2c 66 69 6c 6c 3a 22 62 6c 61 63 6b 22 7d 29 29 2c 4d 7c 7c 28 4d 3d 53 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 32 32 2e 33 39 20 32 37 2e 30 38 31 35 43 32 32 32 2e 35 36 34 20 32 38 2e 34 30 39 31 20 32 32 33 2e 35 37 32 20 32 39 2e 36 30 31 37 20 32 32 35 2e 30 33 20 32 39 2e 36 30 31 37 43 32 32 35 2e 39 38 36 20 32 39 2e 36 30 31 37 20 32 32 36 2e 38 39 20 32 39 2e 31 38 35 39 20 32 32 37 2e 33 34 33 20 32 38 2e 33 37 38 35 4c 32 33 30 2e 37 33 37 20 32 38 2e 37 Data Ascii: 3.728C185.381 23.728 186.069 24.272 186.357 24.944C186.549 25.408 186.597 25.952 186.597 26.4Z",fill:"black"})),M\|\|(M=S()("path",{d:"M222.39 27.0815C222.564 28.4091 223.572 29.6017 225.03 29.6017C225.986 29.6017 226.89 29.1859 227.343 28.3785L230.737 28.7
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 32 31 37 2e 33 33 37 20 32 34 2e 31 32 32 56 32 39 2e 34 36 38 35 48 32 31 38 2e 34 39 34 56 33 32 2e 31 37 36 48 32 31 32 2e 39 31 33 56 32 39 2e 34 36 38 35 48 32 31 34 2e 30 36 39 56 32 34 2e 39 38 31 35 43 32 31 34 2e 30 36 39 20 32 33 2e 34 37 31 32 20 32 31 33 2e 31 33 39 20 32 32 2e 38 34 36 35 20 32 31 32 2e 31 30 38 20 32 32 2e 38 34 36 35 43 32 31 31 2e 31 35 32 20 32 32 2e 38 34 36 35 20 32 31 30 2e 32 39 38 20 32 33 2e 33 39 32 39 20 32 30 39 2e 36 37 20 32 34 2e 31 39 36 37 56 32 39 2e 34 36 38 35 48 32 31 31 2e 30 37 39 56 33 32 2e 31 37 36 48 32 30 35 2e 32 34 35 5a 22 2c 66 69 6c 6c 3a 22 62 6c 61 63 6b 22 7d 29 29 2c 69 7c 7c 28 69 3d 53 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 35 38 2e 38 37 34 20 33 32 2e 31 37 36 56 32 39 2e 34 Data Ascii: 217.337 24.122V29.4685H218.494V32.176H212.913V29.4685H214.069V24.9815C214.069 23.4712 213.139 22.8465 212.108 22.8465C211.152 22.8465 210.298 23.3929 209.67 24.1967V29.4685H211.079V32.176H205.245Z",fill:"black"})),i\|\|(i=S()("path",{d:"M258.874 32.176V29.4
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 34 34 4c 32 34 32 2e 35 30 36 20 31 38 2e 34 30 38 32 4c 32 34 34 2e 34 35 31 20 32 34 2e 32 34 34 34 48 32 34 30 2e 35 38 31 5a 22 2c 66 69 6c 6c 3a 22 62 6c 61 63 6b 22 7d 29 29 2c 64 7c 7c 28 64 3d 53 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 39 34 2e 32 33 34 20 33 32 2e 31 37 36 56 32 39 2e 34 36 38 35 48 31 39 35 2e 39 30 32 56 31 38 2e 32 38 30 34 48 31 39 33 2e 39 33 33 56 32 30 2e 35 34 31 34 48 31 39 31 56 31 35 2e 31 36 39 37 48 32 30 34 2e 32 39 39 56 32 30 2e 35 34 31 34 48 32 30 31 2e 33 36 35 56 31 38 2e 32 38 30 34 48 31 39 39 2e 33 39 37 56 32 39 2e 34 36 38 35 48 32 30 31 2e 30 36 34 56 33 32 2e 31 37 36 48 31 39 34 2e 32 33 34 5a 22 2c 66 69 6c 6c 3a 22 62 6c 61 63 6b 22 7d 29 29 2c 68 7c 7c 28 68 3d 53 28 29 28 22 70 61 74 68 22 Data Ascii: 44L242.506 18.4082L244.451 24.2444H240.581Z",fill:"black"})),d\|\|(d=S()("path",{d:"M194.234 32.176V29.4685H195.902V18.2804H193.933V20.5414H191V15.1697H204.299V20.5414H201.365V18.2804H199.397V29.4685H201.064V32.176H194.234Z",fill:"black"})),h\|\|(h=S()("path"
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 56 33 32 2e 31 37 36 48 32 39 34 2e 30 30 32 43 32 39 33 2e 37 37 20 33 32 2e 31 37 35 36 20 32 39 33 2e 35 34 20 33 32 2e 31 32 37 39 20 32 39 33 2e 33 32 36 20 33 32 2e 30 33 35 34 43 32 39 33 2e 31 31 32 20 33 31 2e 39 34 33 20 32 39 32 2e 39 31 37 20 33 31 2e 38 30 37 37 20 32 39 32 2e 37 35 34 20 33 31 2e 36 33 37 33 43 32 39 32 2e 35 39 20 33 31 2e 34 36 36 39 20 32 39 32 2e 34 36 20 33 31 2e 32 36 34 37 20 32 39 32 2e 33 37 32 20 33 31 2e 30 34 32 34 43 32 39 32 2e 32 38 34 20 33 30 2e 38 32 30 31 20 32 39 32 2e 32 33 39 20 33 30 2e 35 38 31 39 20 32 39 32 2e 32 34 20 33 30 2e 33 34 31 36 56 32 32 2e 37 31 36 48 32 39 30 2e 36 36 35 56 32 30 2e 30 30 38 36 48 32 39 32 2e 32 34 56 31 35 2e 31 36 39 37 48 32 39 35 2e 35 30 38 56 32 30 2e 30 30 38 36 Data Ascii: V32.176H294.002C293.77 32.1756 293.54 32.1279 293.326 32.0354C293.112 31.943 292.917 31.8077 292.754 31.6373C292.59 31.4669 292.46 31.2647 292.372 31.0424C292.284 30.8201 292.239 30.5819 292.24 30.3416V22.716H290.665V20.0086H292.24V15.1697H295.508V20.0086
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 33 37 36 20 38 2e 31 39 32 20 31 30 2e 32 37 32 20 38 2e 36 34 4c 31 34 2e 37 38 34 20 31 30 2e 38 38 43 31 37 2e 33 31 32 20 31 32 2e 31 32 38 20 31 39 2e 30 34 20 31 34 2e 35 39 32 20 31 39 2e 30 34 20 31 37 2e 33 37 36 43 31 39 2e 30 34 20 32 31 2e 31 35 32 20 31 36 2e 33 35 32 20 32 34 2e 34 31 36 20 31 31 2e 32 20 32 34 2e 34 31 36 43 39 2e 31 35 32 20 32 34 2e 34 31 36 20 38 2e 31 36 20 32 34 2e 31 32 38 20 35 2e 33 31 32 20 32 32 2e 36 35 36 5a 4d 31 39 2e 38 35 35 38 20 32 35 2e 36 36 34 48 32 31 2e 31 33 35 38 56 31 32 2e 38 48 31 39 2e 38 35 35 38 56 38 2e 36 34 48 32 38 2e 33 36 37 38 56 31 30 2e 30 38 43 33 30 2e 32 32 33 38 20 38 2e 38 20 33 31 2e 35 39 39 38 20 38 2e 33 32 20 33 33 2e 32 33 31 38 20 38 2e 33 32 43 33 37 2e 36 31 35 38 20 38 Data Ascii: 376 8.192 10.272 8.64L14.784 10.88C17.312 12.128 19.04 14.592 19.04 17.376C19.04 21.152 16.352 24.416 11.2 24.416C9.152 24.416 8.16 24.128 5.312 22.656ZM19.8558 25.664H21.1358V12.8H19.8558V8.64H28.3678V10.08C30.2238 8.8 31.5998 8.32 33.2318 8.32C37.6158 8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50372	52.46.130.91	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:53 UTC	455	OUT	GET /ecm3?id=LPSNS9TX-1-BT82&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:13:54 UTC	431	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 39 4a 53 42 53 34 31 48 46 53 39 32 47 45 41 41 5a 4a 53 4a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 70 72 69 76 61 74 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 73 2d 6d 61 78 61 67 65 3d 30 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 200 OKServer: ServerDate: Tue, 05 Dec 2023 18:13:54 GMTContent-Type: image/gifContent-Length: 43Connection: closex-amz-rid: 9JSBS41HFS92GEAAZJSJCache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0Prag
2023-12-05 18:13:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50378	23.92.190.74	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	448	OUT	GET /merge?pid=80&3pid=LPSNS9TX-1-BT82&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=HxYFaQZH4kNk_msmT5qdhI6D; _ljtrtb_80=LPSNS9TX-1-BT82
2023-12-05 18:13:54 UTC	922	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 30 20 4d 61 72 20 32 30 30 39 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 6c 6a 74 72 74 62 5f 38 30 3d 4c 50 53 4e 53 39 54 58 2d 31 2d 42 54 38 32 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 2d 4a 61 6e 2d 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 53 65 63 75 72 65 3b 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 6a 74 72 74 62 3d 65 4a 79 72 56 72 49 77 55 4c 4a 53 Data Ascii: HTTP/1.1 200 OKConnection: closeDate: Tue, 05 Dec 2023 18:13:54 GMTExpires: Fri, 20 Mar 2009 00:00:00 GMTSet-Cookie: _ljtrtb_80=LPSNS9TX-1-BT82; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=NoneSet-Cookie: ljtrtb=eJyrVrIwULJS
2023-12-05 18:13:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50374	34.111.113.62	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	511	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LPSNS9TX-1-BT82 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=1!8154
2023-12-05 18:13:54 UTC	1101	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 0d 0a 41 63 63 65 70 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:54 GMTStrict-Transport-Security: max-age=31536000Access-Control-Allow-Origin: *Accept-CH: Sec-CH-UAAccept-CH: Sec-CH-UA-ArchAccept-CH: Sec-CH-UA-BitnessAccept-CH: Sec-CH-UA-Full-Version-ListAccep
2023-12-05 18:13:54 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50380	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	1870	OUT	GET /AdServer/ImgSync?gdpr=0&gdpr_consent=&us_privacy=${US_PRIVACY} HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; KRTBCOOKIE_279=22890-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23011-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23355-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260; PugT=1701800032
2023-12-05 18:13:54 UTC	615	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 20 4c 4f 43 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 69 70 63 3d 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 30 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 69 3d 30 3a 33 3b 20 64 6f 6d Data Ascii: HTTP/1.1 204 No ContentP3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"Set-Cookie: ipc=; domain=pubmatic.com; path=/; max-age=0; SameSite=None; secure;Set-Cookie: pi=0:3; dom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50373	34.111.113.62	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	584	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&ttd_puid=52372529-6739-4668-8577-9b676d9f30e7%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1701800028997; TapAd_DID=52372529-6739-4668-8577-9b676d9f30e7; TapAd_3WAY_SYNCS=1!8154
2023-12-05 18:13:54 UTC	1101	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 0d 0a 41 63 63 65 70 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:54 GMTStrict-Transport-Security: max-age=31536000Access-Control-Allow-Origin: *Accept-CH: Sec-CH-UAAccept-CH: Sec-CH-UA-ArchAccept-CH: Sec-CH-UA-BitnessAccept-CH: Sec-CH-UA-Full-Version-ListAccep
2023-12-05 18:13:54 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50382	8.28.7.84	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	1496	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-tKAUr2tE2uU3jPvIiJUqaFBBYn76Rzc-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; ipc=0^^1^0; pi=0:3; chkChromeAb67Sec=7; SPugT=1701800032; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; PugT=1701800033
2023-12-05 18:13:54 UTC	408	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 30 38 3a 34 38 3a 31 31 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 53 50 75 67 54 3d 31 37 30 31 37 36 36 30 39 31 3b 20 64 6f 6d 61 69 6e 3d 70 75 62 6d 61 74 69 63 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 34 2d 4a 61 6e 2d 32 30 32 34 20 30 38 3a 34 38 3a 31 31 20 47 4d 54 3b 20 70 61 74 68 3d 2f 0d 0a 50 33 50 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Tue, 05 Dec 2023 08:48:11 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: SPugT=1701766091; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 04-Jan-2024 08:48:11 GMT; path=/P3P: CP="NOI DSP C
2023-12-05 18:13:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50376	3.232.123.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333&vxii_pid=12&vxii_pid1=10067&vxii_rcid=ebe308dd-d709-4689-8b60-d83ca68d342e HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImViZTMwOGRkLWQ3MDktNDY4OS04YjYwLWQ4M2NhNjhkMzQyZSIsImwiOjE3MDE4MDAwMzE0NDksInQiOjF9
2023-12-05 18:13:54 UTC	353	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 4f 55 52 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6d 63 3d 65 79 4a 70 5a 43 49 36 49 6d 56 69 5a 54 4d 77 4f 47 52 6b 4c 57 51 33 4d 44 6b 74 4e 44 59 34 4f 53 30 34 59 6a 59 77 4c 57 51 34 4d 32 4e 68 4e 6a 68 6b 4d 7a 51 79 5a 53 49 73 49 6d 77 69 4f 6a 45 33 4d 44 45 34 4d 44 41 77 4d 7a 51 79 4d 44 59 73 49 6e 51 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:54 GMTContent-Type: image/gifContent-Length: 43Connection: closeP3p: CP="NOI OUR BUS UNI COM NAV"Set-Cookie: mc=eyJpZCI6ImViZTMwOGRkLWQ3MDktNDY4OS04YjYwLWQ4M2NhNjhkMzQyZSIsImwiOjE3MDE4MDAwMzQyMDYsInQ
2023-12-05 18:13:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50381	23.218.218.72	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	561	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&ovsid=LPSNS9TX-1-BT82&dpid=58160 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63; data-mag=LPSNS9TX-1-BT82~~63
2023-12-05 18:13:54 UTC	659	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 6d 61 67 3d 4c 50 53 4e 53 39 54 58 2d 31 2d 42 54 38 32 7e 7e 36 33 3b 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 43 55 52 20 41 44 4d 61 20 44 45 56 6f 20 54 41 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-mag=LPSNS9TX-1-BT82~~63;Expires=Wed, 04 Dec 2024 18:13:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=truep3p: CP="NON DSP COR NID CUR ADMa DEVo TA
2023-12-05 18:13:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50379	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2224	OUT	GET /vi-assets/static-assets/TMagazineLogo-60522d4a2b54b2e7ab89.js?_sw-precache=5b920a0788a3bc552fb9179e303fa217 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:54 UTC	1329	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 38 33 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 47 5a 4c 47 64 67 38 6f 74 43 66 4a 56 42 64 41 77 58 67 6b 62 6b 79 35 32 5f 57 6d 34 48 6d 39 76 4c 75 6f 74 55 33 71 39 4a 7a 71 79 70 67 37 49 38 72 63 70 51 74 65 34 59 7a 44 42 73 6f 48 75 52 7a 57 4b 50 4c 45 4a 59 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 39 32 38 34 35 38 31 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 6835X-GUploader-UploadID: ABPtcPqGZLGdg8otCfJVBdAwXgkbky52_Wm4Hm9vLuotU3q9Jzqypg7I8rcpQte4YzDBsoHuRzWKPLEJYAx-goog-generation: 1701370692845810x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:54 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 5d 2c 7b 4f 77 63 47 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 76 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 72 28 76 29 3b 76 61 72 20 61 2c 56 2c 74 2c 5a 2c 70 2c 64 2c 48 2c 4d 2c 6c 2c 73 2c 65 2c 6f 2c 6d 2c 69 2c 6e 2c 77 2c 72 2c 4c 2c 75 2c 67 2c 43 2c 53 2c 66 2c 41 2c 4e 2c 62 2c 6b 2c 54 2c 71 2c 78 2c 79 2c 7a 2c 4a 2c 50 3d 63 28 22 67 63 52 2f 22 29 2c 42 3d 63 2e 6e 28 50 29 2c 47 3d 28 63 28 22 71 31 74 49 22 29 2c 63 28 22 4b 68 5a 53 22 29 29 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 76 3d 68 2e 63 6c 61 73 73 4e 61 6d 65 3b 72 65 74 75 72 6e 20 42 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[34],{OwcG:function(h,v,c){"use strict";c.r(v);var a,V,t,Z,p,d,H,M,l,s,e,o,m,i,n,w,r,L,u,g,C,S,f,A,N,b,k,T,q,x,y,z,J,P=c("gcR/"),B=c.n(P),G=(c("q1tI"),c("KhZS")),I=function(h){var v=h.className;return B(
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 35 38 2d 31 2e 32 33 2d 33 2e 35 38 2d 33 2e 39 33 56 32 32 2e 31 33 63 30 2d 32 2e 35 38 2c 31 2e 32 39 2d 33 2e 39 33 2c 33 2e 34 36 2d 33 2e 39 33 68 31 2e 35 38 63 32 2e 31 31 2c 30 2c 33 2e 33 34 2c 31 2e 31 37 2c 33 2e 33 34 2c 33 2e 38 31 76 32 2e 34 48 38 34 2e 33 32 76 31 2e 31 37 63 30 2c 31 2e 37 2e 35 39 2c 32 2e 34 36 2c 31 2e 38 32 2c 32 2e 34 36 53 38 37 2e 36 36 2c 32 37 2e 32 33 2c 38 37 2e 37 32 2c 32 36 2e 32 33 5a 6d 2d 33 2e 34 36 2d 33 2e 35 38 68 33 2e 34 36 76 2d 2e 38 38 63 30 2d 31 2e 35 32 2d 2e 35 39 2d 32 2e 31 37 2d 31 2e 37 2d 32 2e 31 37 73 2d 31 2e 37 36 2e 37 2d 31 2e 37 36 2c 32 2e 34 5a 22 7d 29 29 2c 65 7c 7c 28 65 3d 42 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 39 33 2e 32 39 2c 32 39 2e 33 38 6c 2d 32 2d 31 31 2e Data Ascii: 58-1.23-3.58-3.93V22.13c0-2.58,1.29-3.93,3.46-3.93h1.58c2.11,0,3.34,1.17,3.34,3.81v2.4H84.32v1.17c0,1.7.59,2.46,1.82,2.46S87.66,27.23,87.72,26.23Zm-3.46-3.58h3.46v-.88c0-1.52-.59-2.17-1.7-2.17s-1.76.7-1.76,2.4Z"})),e\|\|(e=B()("path",{d:"M93.29,29.38l-2-11.
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 35 2c 31 2e 38 32 76 37 2e 38 48 31 36 35 2e 38 56 32 31 2e 35 34 5a 22 7d 29 29 2c 75 7c 7c 28 75 3d 42 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 38 31 2c 32 36 2e 32 33 76 2d 2e 35 39 68 32 2e 34 76 2e 38 38 63 30 2c 31 2e 38 38 2d 31 2e 32 33 2c 33 2d 33 2e 32 38 2c 33 68 2d 31 2e 34 37 63 2d 32 2e 31 37 2c 30 2d 33 2e 35 38 2d 31 2e 32 33 2d 33 2e 35 38 2d 33 2e 39 33 56 32 32 2e 31 33 63 30 2d 32 2e 35 38 2c 31 2e 32 39 2d 33 2e 39 33 2c 33 2e 34 36 2d 33 2e 39 33 68 31 2e 35 38 63 32 2e 31 31 2c 30 2c 33 2e 33 34 2c 31 2e 31 37 2c 33 2e 33 34 2c 33 2e 38 31 76 32 2e 34 68 2d 35 2e 38 36 76 31 2e 31 37 63 30 2c 31 2e 37 2e 35 39 2c 32 2e 34 36 2c 31 2e 38 32 2c 32 2e 34 36 53 31 38 31 2c 32 37 2e 32 33 2c 31 38 31 2c 32 36 2e 32 33 5a 6d 2d 33 Data Ascii: 5,1.82v7.8H165.8V21.54Z"})),u\|\|(u=B()("path",{d:"M181,26.23v-.59h2.4v.88c0,1.88-1.23,3-3.28,3h-1.47c-2.17,0-3.58-1.23-3.58-3.93V22.13c0-2.58,1.29-3.93,3.46-3.93h1.58c2.11,0,3.34,1.17,3.34,3.81v2.4h-5.86v1.17c0,1.7.59,2.46,1.82,2.46S181,27.23,181,26.23Zm-3
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 2e 37 34 68 32 2e 32 39 6c 2d 33 2e 31 31 2c 31 33 63 2d 2e 33 35 2c 31 2e 34 37 2d 2e 38 38 2c 31 2e 37 36 2d 32 2e 31 37 2c 31 2e 37 36 68 2d 32 2e 31 31 56 33 31 2e 34 33 68 2e 38 32 63 2e 39 34 2c 30 2c 31 2e 32 39 2d 2e 31 38 2c 31 2e 35 32 2d 31 2e 31 37 5a 22 7d 29 29 2c 41 7c 7c 28 41 3d 42 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 32 37 2e 33 36 2c 31 34 56 32 39 2e 33 36 48 32 32 34 2e 39 56 31 34 5a 22 7d 29 29 2c 4e 7c 7c 28 4e 3d 42 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 33 34 2e 37 32 2c 32 36 2e 32 39 76 2d 2e 35 39 68 32 2e 34 76 2e 38 32 63 30 2c 31 2e 38 38 2d 31 2e 32 33 2c 33 2d 33 2e 32 38 2c 33 68 2d 31 2e 34 37 63 2d 32 2e 31 37 2c 30 2d 33 2e 35 38 2d 31 2e 32 33 2d 33 2e 35 38 2d 33 2e 39 33 56 32 32 2e 31 33 63 30 Data Ascii: .74h2.29l-3.11,13c-.35,1.47-.88,1.76-2.17,1.76h-2.11V31.43h.82c.94,0,1.29-.18,1.52-1.17Z"})),A\|\|(A=B()("path",{d:"M227.36,14V29.36H224.9V14Z"})),N\|\|(N=B()("path",{d:"M234.72,26.29v-.59h2.4v.82c0,1.88-1.23,3-3.28,3h-1.47c-2.17,0-3.58-1.23-3.58-3.93V22.13c0
2023-12-05 18:13:54 UTC	1319	IN	Data Raw: 36 2d 31 2e 36 34 2c 32 2e 35 32 76 32 2e 39 33 43 32 36 38 2e 33 32 2c 32 37 2c 32 36 38 2e 38 35 2c 32 37 2e 37 36 2c 32 36 39 2e 39 31 2c 32 37 2e 37 36 5a 22 7d 29 29 2c 71 7c 7c 28 71 3d 42 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 38 31 2e 32 31 2c 32 38 2e 32 61 32 2e 34 36 2c 32 2e 34 36 2c 30 2c 30 2c 31 2d 32 2e 32 39 2c 31 2e 32 33 68 2d 2e 35 39 61 32 2e 33 36 2c 32 2e 33 36 2c 30 2c 30 2c 31 2d 32 2e 36 34 2d 32 2e 35 38 56 32 35 2e 35 41 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 31 2c 32 37 38 2c 32 32 2e 38 37 61 32 31 2e 33 31 2c 32 31 2e 33 31 2c 30 2c 30 2c 30 2c 32 2e 32 39 2d 2e 32 33 63 2e 35 39 2d 2e 31 32 2e 38 32 2d 2e 35 33 2e 38 32 2d 31 2e 31 37 76 2d 2e 35 33 63 30 2d 2e 39 34 2d 2e 33 35 2d 31 2e 34 37 2d 31 2e 34 37 2d Data Ascii: 6-1.64,2.52v2.93C268.32,27,268.85,27.76,269.91,27.76Z"})),q\|\|(q=B()("path",{d:"M281.21,28.2a2.46,2.46,0,0,1-2.29,1.23h-.59a2.36,2.36,0,0,1-2.64-2.58V25.5A2.39,2.39,0,0,1,278,22.87a21.31,21.31,0,0,0,2.29-.23c.59-.12.82-.53.82-1.17v-.53c0-.94-.35-1.47-1.47-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50383	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2221	OUT	GET /vi-assets/static-assets/UpshotLogo-cae1c9a0f5f4fb8229c4.js?_sw-precache=ba894baad4421b4eef386a2ad10bca76 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:54 UTC	1325	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 38 30 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 6e 51 70 73 71 4a 68 6c 63 4d 53 4a 4b 55 54 67 30 30 2d 70 6e 32 49 52 73 42 32 5f 59 39 31 73 53 69 7a 70 42 62 4b 75 39 58 55 77 30 5f 50 63 4b 59 35 6a 70 78 30 79 5f 67 52 55 6d 4a 52 70 48 68 5f 48 6a 56 7a 77 5f 75 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 35 37 30 32 36 37 34 32 39 30 35 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3804X-GUploader-UploadID: ABPtcPqnQpsqJhlcMSJKUTg00-pn2IRsB2_Y91sSizpBbKu9XUw0_PcKY5jpx0y_gRUmJRpHh_HjVzw_uwx-goog-generation: 1701570267429059x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:54 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 5d 2c 7b 22 32 64 6b 47 22 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 68 2c 76 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 2e 72 28 68 29 3b 76 61 72 20 61 2c 70 2c 74 3d 76 28 22 67 63 52 2f 22 29 2c 56 3d 76 2e 6e 28 74 29 2c 64 3d 28 76 28 22 71 31 74 49 22 29 2c 76 28 22 4b 68 5a 53 22 29 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 68 3d 63 2e 63 6c 61 73 73 4e 61 6d 65 3b 72 65 74 75 72 6e 20 56 28 29 28 22 73 76 67 22 2c 7b 78 3a 22 30 70 78 22 2c 79 3a 22 30 70 78 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 38 35 20 35 34 22 2c 78 6d 6c 53 70 61 63 65 3a 22 70 72 65 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"2dkG":function(c,h,v){"use strict";v.r(h);var a,p,t=v("gcR/"),V=v.n(t),d=(v("q1tI"),v("KhZS")),e=function(c){var h=c.className;return V()("svg",{x:"0px",y:"0px",viewBox:"0 0 285 54",xmlSpace:"pres
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 63 32 2e 38 33 33 2c 32 2e 31 36 2c 34 2e 35 36 31 2c 35 2e 39 30 34 2c 34 2e 35 36 31 2c 39 2e 34 30 39 43 31 31 36 2e 39 31 34 2c 33 30 2e 31 34 33 2c 31 31 36 2e 38 36 36 2c 33 30 2e 38 36 33 2c 31 31 36 2e 38 31 38 2c 33 31 2e 36 33 31 7a 20 4d 31 30 37 2e 33 36 31 2c 32 38 2e 30 37 39 76 2d 30 2e 35 37 36 20 63 30 2d 31 2e 39 36 39 2d 30 2e 34 37 39 2d 33 2e 39 38 34 2d 32 2e 38 33 32 2d 33 2e 39 38 34 63 2d 31 2e 32 34 38 2c 30 2d 32 2e 31 36 2c 30 2e 36 37 32 2d 32 2e 35 39 32 2c 31 2e 38 32 34 63 2d 30 2e 33 33 36 2c 30 2e 38 31 35 2d 30 2e 32 34 2c 31 2e 38 37 32 2d 30 2e 32 34 2c 32 2e 37 33 36 48 31 30 37 2e 33 36 31 7a 22 7d 29 2c 56 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 35 31 2e 31 38 37 2c 31 34 2e 35 34 32 68 2d 32 2e 36 34 76 31 Data Ascii: c2.833,2.16,4.561,5.904,4.561,9.409C116.914,30.143,116.866,30.863,116.818,31.631z M107.361,28.079v-0.576 c0-1.969-0.479-3.984-2.832-3.984c-1.248,0-2.16,0.672-2.592,1.824c-0.336,0.815-0.24,1.872-0.24,2.736H107.361z"}),V()("path",{d:"M151.187,14.542h-2.64v1
2023-12-05 18:13:54 UTC	1046	IN	Data Raw: 33 32 2d 32 2e 33 30 34 2d 31 2e 32 39 36 2d 33 2e 35 35 32 2d 33 2e 30 32 34 2d 33 2e 35 35 32 20 63 2d 31 2e 32 34 38 2c 30 2d 32 2e 32 30 38 2c 30 2e 37 36 38 2d 32 2e 32 30 38 2c 31 2e 37 37 35 63 30 2c 30 2e 38 36 34 2c 30 2e 35 37 36 2c 31 2e 35 38 34 2c 31 2e 37 37 36 2c 32 2e 30 36 34 6c 34 2e 38 39 36 2c 31 2e 39 32 63 33 2e 32 31 36 2c 31 2e 32 34 38 2c 34 2e 37 30 34 2c 33 2e 33 31 32 2c 34 2e 37 30 34 2c 36 2e 30 39 37 20 43 32 30 34 2e 39 34 34 2c 33 37 2e 38 37 31 2c 32 30 31 2e 32 2c 34 31 2e 32 38 2c 31 39 35 2e 37 37 35 2c 34 31 2e 32 38 7a 22 7d 29 2c 56 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 32 33 36 2e 31 34 35 2c 34 30 2e 38 68 2d 31 32 2e 37 36 39 56 32 37 2e 32 36 33 63 30 2d 32 2e 31 31 32 2d 31 2e 30 30 38 2d 33 2e 32 36 35 Data Ascii: 32-2.304-1.296-3.552-3.024-3.552 c-1.248,0-2.208,0.768-2.208,1.775c0,0.864,0.576,1.584,1.776,2.064l4.896,1.92c3.216,1.248,4.704,3.312,4.704,6.097 C204.944,37.871,201.2,41.28,195.775,41.28z"}),V()("path",{d:"M236.145,40.8h-12.769V27.263c0-2.112-1.008-3.265

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50385	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2227	OUT	GET /vi-assets/static-assets/WorldCupLogo2018-a56fb1eb76c9f639508c.js?_sw-precache=5189da5aa9659224ddacad70f91a93e4 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:54 UTC	1334	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 31 36 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 49 4a 74 32 71 4e 32 71 69 57 59 75 31 64 7a 62 72 66 31 47 53 4e 45 64 77 46 45 6f 2d 78 70 57 36 59 43 67 36 54 56 55 59 32 51 47 54 36 31 63 63 4a 54 57 47 7a 42 67 6b 6a 34 46 58 65 39 4f 4b 4d 78 70 43 59 71 4c 64 4b 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 35 34 33 31 32 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 13169X-GUploader-UploadID: ABPtcPrIJt2qN2qiWYu1dzbrf1GSNEdwFEo-xpW6YCg6TVUY2QGT61ccJTWGzBgkj4FXe9OKMxpCYqLdKwx-goog-generation: 1701369734543122x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:54 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 5d 2c 7b 7a 48 37 4e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 43 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 43 29 3b 76 61 72 20 74 2c 72 2c 56 2c 48 2c 73 2c 6e 2c 6c 2c 6f 2c 64 2c 70 2c 4c 2c 66 2c 5a 2c 4d 2c 6d 2c 68 2c 69 2c 77 2c 63 2c 75 2c 76 2c 67 2c 4e 2c 62 2c 78 2c 41 2c 42 2c 50 2c 45 2c 6b 2c 79 3d 61 28 22 67 63 52 2f 22 29 2c 44 3d 61 2e 6e 28 79 29 2c 4a 3d 28 61 28 22 71 31 74 49 22 29 2c 61 28 22 4b 68 5a 53 22 29 29 2c 6a 3d 44 28 29 28 22 74 69 74 6c 65 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 57 6f 72 6c 64 20 43 75 70 20 32 30 31 38 22 29 2c 71 3d 66 75 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[36],{zH7N:function(e,C,a){"use strict";a.r(C);var t,r,V,H,s,n,l,o,d,p,L,f,Z,M,m,h,i,w,c,u,v,g,N,b,x,A,B,P,E,k,y=a("gcR/"),D=a.n(y),J=(a("q1tI"),a("KhZS")),j=D()("title",{},void 0,"World Cup 2018"),q=fun
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 30 37 20 31 34 2e 39 31 31 31 20 2d 32 2e 39 34 32 34 37 65 2d 30 37 20 31 35 2e 32 31 38 35 20 2d 32 2e 39 34 32 34 37 65 2d 30 37 56 35 2e 35 35 33 37 32 43 31 33 2e 33 37 33 38 20 35 2e 35 35 33 37 32 20 31 32 2e 36 30 35 32 20 35 2e 35 35 33 37 32 20 31 31 2e 36 38 32 39 20 35 2e 38 36 32 32 36 43 31 30 2e 36 30 36 38 20 36 2e 31 37 30 38 20 39 2e 38 33 38 32 33 20 36 2e 36 33 33 36 31 20 39 2e 33 37 37 30 36 20 37 2e 34 30 34 39 36 43 39 2e 30 36 39 36 32 20 38 2e 30 32 32 30 34 20 38 2e 39 31 35 38 39 20 38 2e 36 33 39 31 32 20 38 2e 39 31 35 38 39 20 31 30 2e 34 39 30 34 56 31 32 2e 30 33 33 31 48 31 30 2e 37 36 30 36 56 31 36 2e 33 35 32 36 48 34 2e 36 39 31 32 33 65 2d 30 36 56 31 32 2e 30 33 33 31 48 31 2e 35 33 37 32 33 5a 22 2c 74 72 61 6e 73 Data Ascii: 07 14.9111 -2.94247e-07 15.2185 -2.94247e-07V5.55372C13.3738 5.55372 12.6052 5.55372 11.6829 5.86226C10.6068 6.1708 9.83823 6.63361 9.37706 7.40496C9.06962 8.02204 8.91589 8.63912 8.91589 10.4904V12.0331H10.7606V16.3526H4.69123e-06V12.0331H1.53723Z",trans
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 2e 30 34 39 36 20 31 35 2e 30 37 37 37 20 31 38 2e 30 34 39 36 43 31 36 2e 36 31 34 39 20 31 38 2e 30 34 39 36 20 31 37 2e 38 34 34 37 20 31 37 2e 35 38 36 38 20 32 30 2e 36 31 31 37 20 31 36 2e 30 34 34 31 56 32 32 2e 35 32 33 34 43 31 37 2e 36 39 31 20 32 33 2e 39 31 31 38 20 31 35 2e 36 39 32 36 20 32 34 2e 33 37 34 37 20 31 32 2e 36 31 38 31 20 32 34 2e 33 37 34 37 43 35 2e 30 38 35 37 33 20 32 34 2e 33 37 34 37 20 30 2e 30 31 32 38 39 35 31 20 31 39 2e 32 38 33 37 20 30 2e 30 31 32 38 39 35 31 20 31 31 2e 34 31 36 43 2d 30 2e 31 34 30 38 32 37 20 37 2e 37 31 33 35 20 31 2e 30 38 38 39 34 20 34 2e 37 38 32 33 37 20 33 2e 32 34 31 30 35 20 32 2e 37 37 36 38 36 5a 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 32 33 36 2e 34 31 32 Data Ascii: .0496 15.0777 18.0496C16.6149 18.0496 17.8447 17.5868 20.6117 16.0441V22.5234C17.691 23.9118 15.6926 24.3747 12.6181 24.3747C5.08573 24.3747 0.0128951 19.2837 0.0128951 11.416C-0.140827 7.7135 1.08894 4.78237 3.24105 2.77686Z",transform:"translate(236.412
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 36 38 36 31 31 20 35 2e 32 34 35 31 38 20 35 2e 36 38 37 37 32 20 35 2e 32 34 35 31 38 43 34 2e 31 35 30 34 39 20 35 2e 32 34 35 31 38 20 32 2e 37 36 37 30 31 20 35 2e 37 30 37 39 39 20 30 2e 39 32 32 33 33 39 20 36 2e 34 37 39 33 34 56 31 2e 30 37 39 38 39 43 33 2e 33 38 31 39 20 30 2e 34 36 32 38 30 39 20 34 2e 39 31 39 31 32 20 2d 32 2e 39 34 32 34 37 65 2d 30 37 20 37 2e 33 37 38 36 37 20 2d 32 2e 39 34 32 34 37 65 2d 30 37 43 31 32 2e 39 31 32 37 20 2d 32 2e 39 34 32 34 37 65 2d 30 37 20 31 36 2e 34 34 38 33 20 32 2e 37 37 36 38 36 20 31 36 2e 34 34 38 33 20 37 2e 32 35 30 36 39 43 31 36 2e 34 34 38 33 20 39 2e 38 37 33 32 38 20 31 34 2e 39 31 31 31 20 31 32 2e 38 30 34 34 20 31 32 2e 37 35 39 20 31 34 2e 38 30 39 39 4c 37 2e 38 33 39 38 35 20 31 39 Data Ascii: 68611 5.24518 5.68772 5.24518C4.15049 5.24518 2.76701 5.70799 0.922339 6.47934V1.07989C3.3819 0.462809 4.91912 -2.94247e-07 7.37867 -2.94247e-07C12.9127 -2.94247e-07 16.4483 2.77686 16.4483 7.25069C16.4483 9.87328 14.9111 12.8044 12.759 14.8099L7.83985 19
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 2e 39 35 33 32 43 31 36 2e 36 30 32 20 31 31 2e 37 32 34 35 20 31 38 2e 32 39 33 20 31 33 2e 35 37 35 38 20 31 38 2e 32 39 33 20 31 36 2e 38 31 35 34 43 31 38 2e 32 39 33 20 31 39 2e 37 34 36 36 20 31 36 2e 36 30 32 20 32 34 2e 32 32 30 34 20 39 2e 35 33 30 37 39 20 32 34 2e 32 32 30 34 43 33 2e 36 38 39 33 34 20 32 34 2e 32 32 30 34 20 39 2e 33 38 32 34 37 65 2d 30 36 20 32 31 2e 34 34 33 35 20 39 2e 33 38 32 34 37 65 2d 30 36 20 31 36 2e 39 36 39 37 5a 4d 31 30 2e 39 31 34 33 20 31 36 2e 33 35 32 36 43 31 30 2e 39 31 34 33 20 31 33 2e 35 37 35 38 20 31 30 2e 32 39 39 34 20 31 32 2e 38 30 34 34 20 39 2e 30 36 39 36 32 20 31 32 2e 38 30 34 34 43 37 2e 38 33 39 38 34 20 31 32 2e 38 30 34 34 20 37 2e 32 32 34 39 35 20 31 33 2e 34 32 31 35 20 37 2e 32 32 34 Data Ascii: .9532C16.602 11.7245 18.293 13.5758 18.293 16.8154C18.293 19.7466 16.602 24.2204 9.53079 24.2204C3.68934 24.2204 9.38247e-06 21.4435 9.38247e-06 16.9697ZM10.9143 16.3526C10.9143 13.5758 10.2994 12.8044 9.06962 12.8044C7.83984 12.8044 7.22495 13.4215 7.224
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 38 2e 38 35 33 39 36 4c 31 30 2e 33 34 33 37 20 33 2e 38 38 32 32 31 65 2d 30 37 48 31 34 2e 35 30 31 34 4c 31 37 2e 30 33 36 36 20 39 2e 31 35 39 32 38 4c 31 38 2e 35 35 37 37 20 33 2e 33 35 38 34 48 31 37 2e 34 34 32 33 56 33 2e 38 38 32 32 31 65 2d 30 37 48 32 32 2e 36 31 34 31 56 33 2e 33 35 38 34 48 32 31 2e 39 30 34 32 4c 31 38 2e 34 35 36 33 20 31 35 2e 34 36 39 48 31 33 2e 34 38 37 33 4c 31 31 2e 35 36 30 36 20 37 2e 38 33 36 32 37 4c 39 2e 36 33 33 38 20 31 35 2e 34 36 39 48 34 2e 32 35 39 31 36 4c 30 2e 38 31 31 32 36 38 20 33 2e 33 35 38 34 48 2d 33 2e 30 39 34 37 34 65 2d 30 36 56 33 2e 33 35 38 34 5a 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 38 33 2e 38 36 34 38 20 31 31 2e 32 39 36 39 29 22 7d 29 29 2c 69 7c 7c 28 Data Ascii: 8.85396L10.3437 3.88221e-07H14.5014L17.0366 9.15928L18.5577 3.3584H17.4423V3.88221e-07H22.6141V3.3584H21.9042L18.4563 15.469H13.4873L11.5606 7.83627L9.6338 15.469H4.25916L0.811268 3.3584H-3.09474e-06V3.3584Z",transform:"translate(83.8648 11.2969)"})),i\|\|(
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 7c 28 75 3d 44 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 34 2e 36 36 39 30 32 20 34 2e 35 37 39 36 34 43 35 2e 38 38 35 39 33 20 34 2e 35 37 39 36 34 20 36 2e 37 39 38 36 31 20 34 2e 39 38 36 37 32 20 37 2e 38 31 32 36 39 20 35 2e 36 39 39 31 56 32 2e 38 34 39 35 35 48 36 2e 35 39 35 37 38 56 2d 31 2e 39 34 31 31 65 2d 30 37 48 31 32 2e 37 38 31 37 56 31 32 2e 36 31 39 34 48 31 33 2e 36 39 34 34 56 31 35 2e 34 36 39 48 37 2e 38 31 32 36 39 56 31 34 2e 34 35 31 33 43 36 2e 36 39 37 32 20 31 35 2e 31 36 33 37 20 35 2e 38 38 35 39 32 20 31 35 2e 36 37 32 35 20 34 2e 35 36 37 36 31 20 31 35 2e 36 37 32 35 43 31 2e 35 32 35 33 36 20 31 35 2e 36 37 32 35 20 30 2e 30 30 34 32 33 30 30 39 20 31 32 2e 38 32 33 20 30 2e 30 30 34 32 33 30 30 39 20 31 30 2e 30 37 Data Ascii: \|(u=D()("path",{d:"M4.66902 4.57964C5.88593 4.57964 6.79861 4.98672 7.81269 5.6991V2.84955H6.59578V-1.9411e-07H12.7817V12.6194H13.6944V15.469H7.81269V14.4513C6.6972 15.1637 5.88592 15.6725 4.56761 15.6725C1.52536 15.6725 0.00423009 12.823 0.00423009 10.07
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 37 48 31 32 2e 39 38 30 33 56 37 2e 38 33 36 32 37 48 31 33 2e 38 39 33 56 31 30 2e 36 38 35 38 48 38 2e 30 31 31 32 37 56 39 2e 34 36 34 35 39 43 37 2e 32 20 31 30 2e 30 37 35 32 20 35 2e 39 38 33 31 20 31 30 2e 38 38 39 34 20 34 2e 36 36 34 37 39 20 31 30 2e 38 38 39 34 43 32 2e 33 33 32 33 39 20 31 30 2e 38 38 39 34 20 30 2e 38 31 31 32 36 31 20 39 2e 35 36 36 33 36 20 30 2e 38 31 31 32 36 31 20 37 2e 33 32 37 34 32 56 32 2e 38 34 39 35 35 48 30 2e 39 31 32 36 37 36 5a 22 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 28 31 37 30 2e 34 36 38 20 31 36 2e 31 38 31 36 29 22 7d 29 29 2c 4e 7c 7c 28 4e 3d 44 28 29 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 30 2e 39 31 32 36 38 32 20 31 31 2e 39 30 37 31 56 33 2e 30 35 33 30 39 48 2d 33 2e 30 39 Data Ascii: 7H12.9803V7.83627H13.893V10.6858H8.01127V9.46459C7.2 10.0752 5.9831 10.8894 4.66479 10.8894C2.33239 10.8894 0.811261 9.56636 0.811261 7.32742V2.84955H0.912676Z",transform:"translate(170.468 16.1816)"})),N\|\|(N=D()("path",{d:"M0.912682 11.9071V3.05309H-3.09

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50384	23.218.218.72	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	589	OUT	GET /cksync?cs=63&axid_e=eS1zWngxdXBGRTJ1SGJncVRObGlCZ1haOXBFU0QxSUZ4Mn5B&gdpr=0&ovsid=3a743bef-66ee-4af3-a0ea-a4634a63b535&dpid=55953 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016160184380000V10; data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63; data-mag=LPSNS9TX-1-BT82~~63
2023-12-05 18:13:54 UTC	680	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 61 74 61 2d 74 74 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 7e 7e 36 33 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 3b 20 73 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3d 74 72 75 65 0d 0a 70 33 70 3a 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 Data Ascii: HTTP/1.1 200 OKServer: ApacheContent-Length: 53Content-Type: image/gifSet-Cookie: data-ttd=3a743bef-66ee-4af3-a0ea-a4634a63b535~~63;Expires=Tue, 19 Dec 2023 18:13:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=truep3p: CP="NON DSP COR
2023-12-05 18:13:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-05 18:13:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50386	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2451	OUT	GET //.status HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: / content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:54 UTC	469	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 32 38 35 61 37 34 63 64 64 35 34 63 65 36 33 30 36 35 30 63 64 33 31 33 61 30 37 38 63 34 63 36 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 33 34 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 Data Ascii: HTTP/1.1 200 OKx-content-type-options: nosniffcontent-type: text/plain; charset=utf-8x-cloud-trace-context: 285a74cdd54ce630650cd313a078c4c6date: Tue, 05 Dec 2023 18:13:54 GMTserver: envoycontent-length: 34via: 1.1 googlex-envoy-upstream-s
2023-12-05 18:13:54 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50387	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	586	OUT	GET /c2/3005403/cs.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
2023-12-05 18:13:54 UTC	378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 69 6e 74 65 72 6e 61 6c 2d 63 32 2f 33 30 30 35 34 30 33 2f 63 73 2e 6a 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 55 41 2c 20 50 6c 61 74 66 6f 72 6d 2c 20 41 72 63 68 2c 20 4d 6f 64 65 6c 2c 20 4d 6f 62 69 6c 65 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 69 73 73 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 62 38 36 38 32 65 39 31 30 34 64 34 63 65 31 64 30 34 35 35 34 64 61 33 30 31 64 63 39 64 36 34 2e 63 6c 6f Data Ascii: HTTP/1.1 302 FoundContent-Length: 0Connection: closeDate: Tue, 05 Dec 2023 18:13:54 GMTLocation: /internal-c2/3005403/cs.jsAccept-CH: UA, Platform, Arch, Model, MobileX-Cache: Miss from cloudfrontVia: 1.1 b8682e9104d4ce1d04554da301dc9d64.clo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50388	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2232	OUT	GET /vi-assets/static-assets/accessCodeLPAllAccess-331bb86cf1a4f5301fbd.js?_sw-precache=fb38989d44bfbc4344e8bbbaa8802710 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:54 UTC	1337	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 37 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 56 55 36 65 54 54 35 65 6e 69 65 56 63 72 32 48 7a 41 68 54 5a 62 5a 45 32 52 41 69 4d 6f 6f 6a 61 47 79 32 4f 47 4a 74 67 4d 33 70 77 6b 37 4f 66 64 75 68 73 35 48 68 4f 51 44 4b 76 58 48 66 38 64 77 35 77 6f 6d 33 51 6f 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 30 31 20 44 65 63 20 32 30 32 34 20 31 38 3a 35 36 3a 31 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4470X-GUploader-UploadID: ABPtcPrVU6eTT5enieVcr2HzAhTZbZE2RAiMoojaGy2OGJtgM3pwk7Ofduhs5HhOQDKvXHf8dw5wom3QoQCache-Control: public,max-age=31536000Expires: Sun, 01 Dec 2024 18:56:10 GMTLast-Modifi
2023-12-05 18:13:54 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 37 5d 2c 7b 22 56 36 47 2b 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 3b 76 61 72 20 6e 3d 63 28 22 54 78 55 37 22 29 2c 72 3d 63 28 22 72 35 33 38 22 29 2c 61 3d 63 28 22 68 45 79 7a 22 29 2c 73 3d 63 28 22 7a 4a 36 68 22 29 2c 6f 3d 63 28 22 58 57 48 48 22 29 2c 69 3d 63 2e 6e 28 6f 29 2c 75 3d 63 28 22 69 56 69 2f 22 29 2c 64 3d 63 2e 6e 28 75 29 2c 6c 3d 63 28 22 66 54 78 6e 22 29 2c 66 3d 66 75 6e 63 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"V6G+":function(e,t,c){"use strict";(function(e){c.d(t,"a",(function(){return p}));var n=c("TxU7"),r=c("r538"),a=c("hEyz"),s=c("zJ6h"),o=c("XWHH"),i=c.n(o),u=c("iVi/"),d=c.n(u),l=c("fTxn"),f=functi
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 74 61 74 75 73 5c 6e 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 7d 5c 6e 7d 5c 6e 22 5d 29 29 29 2c 6d 3d 63 28 22 4a 71 70 39 22 29 2c 52 3d 4f 62 6a 65 63 74 28 6d 2e 73 74 79 6c 65 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 76 73 62 71 69 33 30 22 7d 29 28 22 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 22 29 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7c 7c 28 72 3d 69 28 29 28 52 2c 7b 7d 2c 76 6f 69 64 20 30 2c 69 28 29 28 76 2e 53 70 69 6e 6e 65 72 2c 7b 73 69 7a 65 3a 32 34 7d 29 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 28 65 Data Ascii: tatus\n subscriptionName\n }\n}\n"]))),m=c("Jqp9"),R=Object(m.styled)("div",{target:"evsbqi30"})("align-items:center;display:flex;height:100vh;justify-content:center;"),S=function(){return r\|\|(r=i()(R,{},void 0,i()(v.Spinner,{size:24})))};function P(e
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 69 6e 67 20 65 72 72 6f 72 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3a 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 45 58 50 49 52 45 44 22 3a 72 65 74 75 72 6e 22 43 6f 64 65 20 68 61 73 20 65 78 70 69 72 65 64 2e 22 3b 63 61 73 65 22 45 58 48 41 55 53 54 45 44 22 3a 72 65 74 75 72 6e 22 43 6f 64 65 20 68 61 73 20 62 65 65 6e 20 65 78 68 61 75 73 74 65 64 2e 22 3b 63 61 73 65 22 49 4e 41 43 54 49 56 45 22 3a 72 65 Data Ascii: ternal networking error. Please try again later.":"Were sorry, but were having a technical issue right now. Please try again later.";switch(e){case"EXPIRED":return"Code has expired.";case"EXHAUSTED":return"Code has been exhausted.";case"INACTIVE":re
2023-12-05 18:13:54 UTC	333	IN	Data Raw: 2c 7b 7d 29 29 29 7d 3b 5f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 63 65 73 73 43 6f 64 65 52 65 64 65 65 6d 4c 50 22 3b 74 2e 61 3d 5f 7d 2c 72 77 4a 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 72 28 74 29 3b 76 61 72 20 6e 2c 72 3d 63 28 22 67 63 52 2f 22 29 2c 61 3d 63 2e 6e 28 72 29 2c 73 3d 28 63 28 22 71 31 74 49 22 29 2c 63 28 22 6d 4c 73 50 22 29 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 61 28 29 28 73 2e 61 2c 7b 75 73 65 43 61 73 65 3a 22 61 6c 6c 5f 61 63 63 65 73 73 22 7d 29 29 7d 3b 6f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 63 65 73 73 43 6f 64 65 41 6c 6c 41 63 63 65 73 73 52 65 64 65 65 6d 4c 50 22 2c 74 2e 64 65 66 61 75 6c 74 Data Ascii: ,{})))};_.displayName="AccessCodeRedeemLP";t.a=_},rwJt:function(e,t,c){"use strict";c.r(t);var n,r=c("gcR/"),a=c.n(r),s=(c("q1tI"),c("mLsP")),o=function(){return n\|\|(n=a()(s.a,{useCase:"all_access"}))};o.displayName="AccessCodeAllAccessRedeemLP",t.default

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50389	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	842	OUT	POST /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive Content-Length: 337 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:54 UTC	337	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 7d 2c 22 75 73 65 72 5f 74 72 61 69 74 73 22 3a 7b 22 65 64 75 53 75 62 73 63 72 69 62 65 72 22 3a 22 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 22 22 2c 22 61 67 65 6e 74 49 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 5f 75 70 64 61 74 65 64 22 3a 31 37 30 31 38 30 30 30 31 39 7d 2c 22 61 Data Ascii: {"browser":{"url":"https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html"},"user_traits":{"eduSubscriber":"","userType":"anon","external_id":"","agentId":"XbK7A_KO3s8XVA_FdXv5zD"},"tracking":{"last_updated":1701800019},"a
2023-12-05 18:13:54 UTC	669	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:54 GMTContent-Type: application/jsonContent-Length: 14Connection: closeaccess-control-allow-credentials: trueaccess-control-allow-origin: *vary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpo
2023-12-05 18:13:54 UTC	14	IN	Data Raw: 7b 22 72 65 73 75 6c 74 73 22 3a 7b 7d 7d Data Ascii: {"results":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50392	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2320	OUT	GET /vi-assets/static-assets/accessCodeLPAllAccess~accessCodeLPCooking~accessCodeLPGames~accessCodeLPNews~account~activateaccess~~44777ebe-5561fb88a80831cc4174.js?_sw-precache=3dc7d37664faa6e00e75b0b3683bf7c5 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:54 UTC	1378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 39 35 33 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 79 49 78 5f 48 44 62 73 63 39 79 51 48 39 36 39 64 71 36 2d 42 42 53 52 79 62 35 36 77 4d 57 63 39 48 51 6a 66 58 77 79 74 41 45 48 4e 38 76 45 79 72 36 5a 33 46 38 46 79 72 30 4f 32 65 63 31 39 75 58 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 31 31 39 39 31 34 34 33 38 30 36 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 119535X-GUploader-UploadID: ABPtcPoyIx_HDbsc9yQH969dq6-BBSRyb56wMWc9HQjfXwytAEHN8vEyr6Z3F8Fyr0O2ec19uXgx-goog-generation: 1701119914438066x-goog-metageneration: 1x-goog-stored-content-encoding: i
2023-12-05 18:13:54 UTC	612	IN	Data Raw: 58 2d 41 50 49 2d 56 65 72 73 69 6f 6e 3a 20 46 2d 58 0d 0a 78 2d 6e 79 74 2d 72 6f 75 74 65 3a 20 76 69 2d 61 73 73 65 74 73 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d Data Ascii: X-API-Version: F-Xx-nyt-route: vi-assetsContent-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; im
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 5d 2c 7b 22 2f 45 66 6c 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 3b 76 61 72 20 72 3d 6e 28 22 71 31 74 49 22 29 2c 69 3d 6e 2e 6e 28 72 29 2c 6f 3d 6e 28 22 39 74 31 38 22 29 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 34 51 4d 33 22 29 3b 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 3b 76 61 72 20 63 3d 66 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[6],{"/Efl":function(e,t,n){"use strict";n.d(t,"a",(function(){return c}));var r=n("q1tI"),i=n.n(r),o=n("9t18");n.d(t,"b",(function(){return o}));var a=n("4QM3");n.d(t,"c",(function(){return a}));var c=f
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2e 61 2e 4d 59 41 43 43 4f 55 4e 54 5f 42 41 53 45 5f 55 52 4c 2c 22 2f 61 75 74 68 2f 6c 69 6e 6b 2d 67 6f 6f 67 6c 65 2d 61 63 63 6f 75 6e 74 3f 72 65 64 69 72 65 63 74 5f 75 72 69 3d 3a 72 65 64 69 72 65 63 74 5f 75 72 69 22 29 2c 6c 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2e 61 2e 4d 59 41 43 43 4f 55 4e 54 5f 42 41 53 45 5f 55 52 4c 2c 22 2f 61 75 74 68 2f 6c 69 6e 6b 2d 66 61 63 65 62 6f 6f 6b 2d 61 63 63 6f 75 6e 74 3f 72 65 64 69 72 65 63 74 5f 75 72 69 3d 3a 72 65 64 69 72 65 63 74 5f 75 72 69 22 29 2c 64 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2e 61 2e 4d 59 41 43 43 4f 55 4e 54 5f 42 41 53 45 5f 55 52 4c 2c 22 2f 61 75 74 68 2f 6c 69 6e 6b 2d 61 70 70 6c 65 2d 61 63 63 6f 75 6e 74 3f 72 65 64 69 72 65 63 74 5f 75 72 Data Ascii: ="".concat(r.a.MYACCOUNT_BASE_URL,"/auth/link-google-account?redirect_uri=:redirect_uri"),l="".concat(r.a.MYACCOUNT_BASE_URL,"/auth/link-facebook-account?redirect_uri=:redirect_uri"),d="".concat(r.a.MYACCOUNT_BASE_URL,"/auth/link-apple-account?redirect_ur
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 72 65 64 69 72 65 63 74 55 72 6c 29 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6e 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6c 69 65 6e 74 49 64 29 7c 7c 22 61 63 63 74 22 3b 72 65 74 75 72 6e 20 75 2e 72 65 70 6c 61 63 65 28 22 3a 63 6c 69 65 6e 74 5f 69 64 22 2c 6e 29 2e 72 65 70 6c 61 63 65 28 22 3a 72 65 64 69 72 65 63 74 5f 75 72 69 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: x=function(e){var t=(null==e?void 0:e.redirectUrl)\|\|window.location.href,n=(null==e?void 0:e.clientId)\|\|"acct";return u.replace(":client_id",n).replace(":redirect_uri",encodeURIComponent(t))},O=function(){return s},k=function(){return p},I=function(){retu
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 55 42 53 43 52 49 42 45 5f 4e 45 57 53 4c 45 54 54 45 52 53 5f 50 41 47 45 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 45 57 53 5f 53 55 42 53 43 52 49 42 45 52 5f 4e 45 57 53 4c 45 54 54 45 52 53 5f 50 41 47 45 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 4d 41 4e 41 47 45 5f 4e 45 57 53 4c 45 54 54 45 52 53 5f 50 41 47 45 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 29 29 2c 6e 2e 64 28 74 2c 22 53 41 56 45 44 5f 41 52 54 49 43 4c 45 53 5f 50 41 47 45 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 4f 4f 4b Data Ascii: UBSCRIBE_NEWSLETTERS_PAGE_LINK",(function(){return l})),n.d(t,"NEWS_SUBSCRIBER_NEWSLETTERS_PAGE_LINK",(function(){return d})),n.d(t,"MANAGE_NEWSLETTERS_PAGE_LINK",(function(){return u})),n.d(t,"SAVED_ARTICLES_PAGE_LINK",(function(){return s})),n.d(t,"COOK
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 7d 29 29 2c 6e 2e 64 28 74 2c 22 47 4f 4f 47 4c 45 5f 43 4f 4f 4b 49 4e 47 5f 41 50 50 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 6e 2e 64 28 74 2c 22 47 4f 4f 47 4c 45 5f 43 52 4f 53 53 57 4f 52 44 53 5f 41 50 50 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 29 29 2c 6e 2e 64 28 74 2c 22 47 4f 4f 47 4c 45 5f 41 54 48 4c 45 54 49 43 5f 41 50 50 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 6e 2e 64 28 74 2c 22 41 4d 41 5a 4f 4e 5f 53 55 42 53 43 52 49 50 54 49 4f 4e 53 5f 4c 49 4e 4b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 Data Ascii: on(){return A})),n.d(t,"GOOGLE_COOKING_APP_LINK",(function(){return T})),n.d(t,"GOOGLE_CROSSWORDS_APP_LINK",(function(){return H})),n.d(t,"GOOGLE_ATHLETIC_APP_LINK",(function(){return S})),n.d(t,"AMAZON_SUBSCRIPTIONS_LINK",(function(){return M})),n.d(t,"g
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 63 79 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 23 68 6f 77 2d 64 6f 2d 69 2d 6d 61 6e 61 67 65 2d 74 72 61 63 6b 65 72 73 22 2c 43 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2f 63 61 6c 69 66 6f 72 6e 69 61 2d 6e 6f 74 69 63 65 22 2c 78 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 2c 4f 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 61 70 70 6c 65 2e 63 6f 6d 2f 69 74 75 6e 65 73 22 2c 6b 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 75 73 2f 61 70 70 2f 74 68 65 2d 6e 65 77 2d 79 6f 72 6b 2d 74 69 6d 65 73 2f 69 64 32 38 34 38 36 32 30 38 33 22 2c 49 3d 22 68 74 74 70 Data Ascii: cy/cookie-policy#how-do-i-manage-trackers",C="https://www.nytimes.com/privacy/california-notice",x="https://apps.apple.com/account/subscriptions",O="https://support.apple.com/itunes",k="https://apps.apple.com/us/app/the-new-york-times/id284862083",I="http
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 73 63 72 69 70 74 69 6f 6e 2f 77 69 72 65 63 75 74 74 65 72 3f 73 6f 75 72 63 65 3d 22 2e 63 6f 6e 63 61 74 28 65 2c 22 26 63 61 6d 70 61 69 67 6e 49 64 3d 22 29 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 68 6f 6d 65 2d 64 65 6c 69 76 65 72 79 3f 73 6f 75 72 63 65 3d 22 2e 63 6f 6e 63 61 74 28 65 2c 22 26 63 61 6d 70 61 69 67 6e 49 64 3d 22 29 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 75 70 67 72 61 64 65 74 6f 61 6c 6c 61 63 Data Ascii: scription/wirecutter?source=".concat(e,"&campaignId=").concat(t)},z=function(e,t){return"https://www.nytimes.com/subscription/home-delivery?source=".concat(e,"&campaignId=").concat(t)},U=function(e,t){return"https://nytimes.com/subscription/upgradetoallac
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 2c 65 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 73 63 72 6f 6c 6c 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 76 61 72 20 6e 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 74 2e 6f 66 66 73 65 74 57 69 64 74 68 3b 72 65 74 Data Ascii: nction(){return void 0===r&&(r=function(){try{var e=document.createElement("div");e.style.visibility="hidden",e.style.overflow="scroll",document.body.appendChild(e);var t=document.createElement("div");e.appendChild(t);var n=e.offsetWidth-t.offsetWidth;ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50393	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2230	OUT	GET /vi-assets/static-assets/accessCodeLPCooking-1ed9fb47e963dd322707.js?_sw-precache=8ab96cf955cac65b2919817b7a17a03f HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:54 UTC	1335	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 36 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 6c 6d 4b 59 41 74 65 38 7a 44 72 47 46 78 30 6b 39 78 77 6a 46 43 58 6f 4e 6a 70 77 34 32 38 4c 5f 6f 65 33 69 4c 6e 62 48 76 78 67 64 4c 62 54 62 4c 50 34 42 45 47 41 50 5a 6d 4e 6e 33 6f 58 7a 4e 6d 2d 79 51 46 68 36 5f 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 33 36 39 37 34 36 32 36 37 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4463X-GUploader-UploadID: ABPtcPqlmKYAte8zDrGFx0k9xwjFCXoNjpw428L_oe3iLnbHvxgdLbTbLP4BEGAPZmNn3oXzNm-yQFh6_Qx-goog-generation: 1701370369746267x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:54 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 5d 2c 7b 22 56 36 47 2b 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 3b 76 61 72 20 6e 3d 63 28 22 54 78 55 37 22 29 2c 72 3d 63 28 22 72 35 33 38 22 29 2c 61 3d 63 28 22 68 45 79 7a 22 29 2c 73 3d 63 28 22 7a 4a 36 68 22 29 2c 6f 3d 63 28 22 58 57 48 48 22 29 2c 69 3d 63 2e 6e 28 6f 29 2c 75 3d 63 28 22 69 56 69 2f 22 29 2c 64 3d 63 2e 6e 28 75 29 2c 6c 3d 63 28 22 66 54 78 6e 22 29 2c 66 3d 66 75 6e 63 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[38],{"V6G+":function(e,t,c){"use strict";(function(e){c.d(t,"a",(function(){return O}));var n=c("TxU7"),r=c("r538"),a=c("hEyz"),s=c("zJ6h"),o=c("XWHH"),i=c.n(o),u=c("iVi/"),d=c.n(u),l=c("fTxn"),f=functi
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 74 61 74 75 73 5c 6e 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 7d 5c 6e 7d 5c 6e 22 5d 29 29 29 2c 6d 3d 63 28 22 4a 71 70 39 22 29 2c 52 3d 4f 62 6a 65 63 74 28 6d 2e 73 74 79 6c 65 64 29 28 22 64 69 76 22 2c 7b 74 61 72 67 65 74 3a 22 65 76 73 62 71 69 33 30 22 7d 29 28 22 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 22 29 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7c 7c 28 72 3d 69 28 29 28 52 2c 7b 7d 2c 76 6f 69 64 20 30 2c 69 28 29 28 43 2e 53 70 69 6e 6e 65 72 2c 7b 73 69 7a 65 3a 32 34 7d 29 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 50 28 65 Data Ascii: tatus\n subscriptionName\n }\n}\n"]))),m=c("Jqp9"),R=Object(m.styled)("div",{target:"evsbqi30"})("align-items:center;display:flex;height:100vh;justify-content:center;"),S=function(){return r\|\|(r=i()(R,{},void 0,i()(C.Spinner,{size:24})))};function P(e
2023-12-05 18:13:54 UTC	1379	IN	Data Raw: 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 69 6e 67 20 65 72 72 6f 72 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3a 22 57 65 e2 80 99 72 65 20 73 6f 72 72 79 2c 20 62 75 74 20 77 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 45 58 50 49 52 45 44 22 3a 72 65 74 75 72 6e 22 43 6f 64 65 20 68 61 73 20 65 78 70 69 72 65 64 2e 22 3b 63 61 73 65 22 45 58 48 41 55 53 54 45 44 22 3a 72 65 74 75 72 6e 22 43 6f 64 65 20 68 61 73 20 62 65 65 6e 20 65 78 68 61 75 73 74 65 64 2e 22 3b 63 61 73 65 22 49 4e 41 43 54 49 56 45 22 3a 72 65 Data Ascii: ternal networking error. Please try again later.":"Were sorry, but were having a technical issue right now. Please try again later.";switch(e){case"EXPIRED":return"Code has expired.";case"EXHAUSTED":return"Code has been exhausted.";case"INACTIVE":re
2023-12-05 18:13:54 UTC	326	IN	Data Raw: 2c 7b 7d 29 29 29 7d 3b 41 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 63 65 73 73 43 6f 64 65 52 65 64 65 65 6d 4c 50 22 3b 74 2e 61 3d 41 7d 2c 6f 63 6e 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 72 28 74 29 3b 76 61 72 20 6e 2c 72 3d 63 28 22 67 63 52 2f 22 29 2c 61 3d 63 2e 6e 28 72 29 2c 73 3d 28 63 28 22 71 31 74 49 22 29 2c 63 28 22 6d 4c 73 50 22 29 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 61 28 29 28 73 2e 61 2c 7b 75 73 65 43 61 73 65 3a 22 63 6f 6f 6b 69 6e 67 22 7d 29 29 7d 3b 6f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 63 65 73 73 43 6f 64 65 43 6f 6f 6b 69 6e 67 52 65 64 65 65 6d 4c 50 22 2c 74 2e 64 65 66 61 75 6c 74 3d 6f 7d 7d 5d Data Ascii: ,{})))};A.displayName="AccessCodeRedeemLP";t.a=A},ocnO:function(e,t,c){"use strict";c.r(t);var n,r=c("gcR/"),a=c.n(r),s=(c("q1tI"),c("mLsP")),o=function(){return n\|\|(n=a()(s.a,{useCase:"cooking"}))};o.displayName="AccessCodeCookingRedeemLP",t.default=o}}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50394	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2238	OUT	GET //.status HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:55 UTC	469	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 61 33 62 36 64 37 36 32 65 65 30 64 64 63 31 35 36 64 35 36 64 31 32 33 66 34 30 63 37 36 33 61 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 35 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 33 34 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 Data Ascii: HTTP/1.1 200 OKx-content-type-options: nosniffcontent-type: text/plain; charset=utf-8x-cloud-trace-context: a3b6d762ee0ddc156d56d123f40c763adate: Tue, 05 Dec 2023 18:13:55 GMTserver: envoycontent-length: 34via: 1.1 googlex-envoy-upstream-s
2023-12-05 18:13:55 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50395	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:54 UTC	2228	OUT	GET /vi-assets/static-assets/accessCodeLPGames-31a59c4c49841febf334.js?_sw-precache=f6e4d4401c739bc293705986605aa917 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:55 UTC	1333	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 35 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 49 41 55 53 7a 51 6c 33 4b 7a 65 72 47 36 4a 59 4a 56 6b 46 69 36 39 38 56 4b 42 49 6f 49 76 66 37 31 74 61 71 70 30 61 52 37 62 55 64 51 63 4b 4c 51 6c 49 54 71 53 77 4f 56 34 4a 43 55 35 43 73 5a 79 68 46 50 69 78 4e 78 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 33 36 39 36 38 34 30 37 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4457X-GUploader-UploadID: ABPtcPoIAUSzQl3KzerG6JYJVkFi698VKBIoIvf71taqp0aR7bUdQcKLQlITqSwOV4JCU5CsZyhFPixNxgx-goog-generation: 1701370369684072x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:55 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 5d 2c 7b 22 56 36 47 2b 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 3b 76 61 72 20 6e 3d 63 28 22 54 78 55 37 22 29 2c 72 3d 63 28 22 72 35 33 38 22 29 2c 61 3d 63 28 22 68 45 79 7a 22 29 2c 73 3d 63 28 22 7a 4a 36 68 22 29 2c 6f 3d 63 28 22 58 57 48 48 22 29 2c 69 3d 63 2e 6e 28 6f 29 2c 75 3d 63 28 22 69 56 69 2f 22 29 2c 64 3d 63 2e 6e 28 75 29 2c 6c 3d 63 28 22 66 54 78 6e 22 29 2c 66 3d 66 75 6e 63 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"V6G+":function(e,t,c){"use strict";(function(e){c.d(t,"a",(function(){return p}));var n=c("TxU7"),r=c("r538"),a=c("hEyz"),s=c("zJ6h"),o=c("XWHH"),i=c.n(o),u=c("iVi/"),d=c.n(u),l=c("fTxn"),f=functi
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 22 65 46 63 2b 22 29 2c 6d 3d 28 30 2c 63 2e 6e 28 77 29 2e 61 29 28 6e 7c 7c 28 6e 3d 45 28 29 28 5b 22 5c 6e 71 75 65 72 79 20 43 68 65 63 6b 41 63 63 65 73 73 43 6f 64 65 28 24 73 75 72 66 61 63 65 43 6f 64 65 3a 20 53 74 72 69 6e 67 21 2c 20 24 61 63 63 65 73 73 43 6f 64 65 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 61 63 63 65 73 73 43 6f 64 65 28 73 75 72 66 61 63 65 43 6f 64 65 3a 20 24 73 75 72 66 61 63 65 43 6f 64 65 2c 20 61 63 63 65 73 73 43 6f 64 65 3a 20 24 61 63 63 65 73 73 43 6f 64 65 29 20 7b 5c 6e 20 20 20 20 65 78 70 69 72 61 74 69 6f 6e 44 61 74 65 5c 6e 20 20 20 20 73 74 61 74 75 73 5c 6e 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 7d 5c 6e 7d 5c 6e 22 5d 29 29 29 2c 6a 3d 63 28 22 4a 71 70 39 22 29 2c Data Ascii: "eFc+"),m=(0,c.n(w).a)(n\|\|(n=E()(["\nquery CheckAccessCode($surfaceCode: String!, $accessCode: String!) {\n accessCode(surfaceCode: $surfaceCode, accessCode: $accessCode) {\n expirationDate\n status\n subscriptionName\n }\n}\n"]))),j=c("Jqp9"),
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 65 64 69 72 65 63 74 3a 21 31 7d 29 2c 72 3d 66 28 29 28 6e 2c 32 29 2c 6f 3d 72 5b 30 5d 2c 75 3d 72 5b 31 5d 2c 64 3d 4f 62 6a 65 63 74 28 4f 2e 75 73 65 4c 61 7a 79 51 75 65 72 79 29 28 6d 2c 7b 63 6c 69 65 6e 74 3a 63 7d 29 2c 6c 3d 66 28 29 28 64 2c 32 29 2c 43 3d 6c 5b 30 5d 2c 79 3d 6c 5b 31 5d 2c 45 3d 79 2e 64 61 74 61 2c 77 3d 79 2e 65 72 72 6f 72 2c 6a 3d 79 2e 6c 6f 61 64 69 6e 67 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 6d 65 73 73 61 67 65 2e 69 6e 63 6c 75 64 65 73 28 22 4e 65 74 77 6f 72 6b 20 65 72 72 6f 72 22 29 3f 22 49 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 69 6e 67 20 65 72 72 6f 72 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3a 22 57 65 e2 80 Data Ascii: edirect:!1}),r=f()(n,2),o=r[0],u=r[1],d=Object(O.useLazyQuery)(m,{client:c}),l=f()(d,2),C=l[0],y=l[1],E=y.data,w=y.error,j=y.loading,R=function(e,t){if(t)return t.message.includes("Network error")?"Internal networking error. Please try again later.":"We
2023-12-05 18:13:55 UTC	320	IN	Data Raw: 74 2c 7b 7d 2c 76 6f 69 64 20 30 2c 69 28 29 28 62 2e 61 2c 7b 65 72 72 6f 72 4d 73 67 3a 52 2c 68 61 6e 64 6c 65 43 68 65 63 6b 43 6f 64 65 53 74 61 74 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 41 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 61 63 63 65 73 73 43 6f 64 65 3a 65 7d 29 7d 29 29 2c 43 28 7b 76 61 72 69 61 62 6c 65 73 3a 7b 61 63 63 65 73 73 43 6f 64 65 3a 65 2c 73 75 72 66 61 63 65 43 6f 64 65 3a 74 7d 7d 29 7d 2c 6c 6f 61 64 69 6e 67 3a 6a 2c 75 73 65 43 61 73 65 3a 74 7d 29 2c 73 7c 7c 28 73 3d 69 28 29 28 68 2e 61 2c 7b 7d 29 29 29 7d 3b 44 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 63 65 73 73 43 6f 64 65 52 65 64 65 65 6d 4c 50 22 3b 74 2e 61 3d 44 7d 7d 5d 29 3b 0a 2f Data Ascii: t,{},void 0,i()(b.a,{errorMsg:R,handleCheckCodeStatus:function(e){u((function(t){return A(A({},t),{},{accessCode:e})})),C({variables:{accessCode:e,surfaceCode:t}})},loading:j,useCase:t}),s\|\|(s=i()(h.a,{})))};D.displayName="AccessCodeRedeemLP";t.a=D}}]);/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50396	104.26.7.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	357	OUT	GET /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:55 UTC	614	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:13:55 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closevary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3
2023-12-05 18:13:55 UTC	117	IN	Data Raw: 36 66 0d 0a 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 31 31 32 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 74 79 70 65 22 3a 22 6e 6f 74 5f 66 6f 75 6e 64 22 2c 22 75 73 65 72 5f 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 5d 7d 0d 0a Data Ascii: 6f{"errors":[{"code":112,"message":"Endpoint not found","type":"not_found","user_message":"Endpoint not found"}]}
2023-12-05 18:13:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50397	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	842	OUT	POST /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive Content-Length: 398 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:55 UTC	398	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 6d 69 64 64 6c 65 65 61 73 74 2f 75 6e 69 74 65 64 2d 6e 61 74 69 6f 6e 73 2d 77 61 72 2d 67 61 7a 61 2d 69 73 72 61 65 6c 2e 68 74 6d 6c 22 7d 2c 22 75 73 65 72 5f 74 72 61 69 74 73 22 3a 7b 22 65 64 75 53 75 62 73 63 72 69 62 65 72 22 3a 22 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 22 22 2c 22 61 67 65 6e 74 49 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 5f 75 70 64 61 74 65 64 22 3a 31 37 30 31 38 30 30 30 31 39 7d 2c 22 61 Data Ascii: {"browser":{"url":"https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html"},"user_traits":{"eduSubscriber":"","userType":"anon","external_id":"","agentId":"XbK7A_KO3s8XVA_FdXv5zD"},"tracking":{"last_updated":1701800019},"a
2023-12-05 18:13:55 UTC	679	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:13:55 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeaccess-control-allow-credentials: trueaccess-control-allow-origin: *vary: OriginCF-Cache-Status: DYNAMICReport-To:
2023-12-05 18:13:55 UTC	70	IN	Data Raw: 34 30 0d 0a 7b 22 65 72 72 6f 72 22 3a 22 49 6e 76 61 6c 69 64 20 63 6f 6e 74 65 78 74 3a 20 69 6e 76 61 6c 69 64 20 4f 62 6a 65 63 74 49 64 20 69 6e 20 4a 53 4f 4e 3a 20 5c 22 66 61 6c 73 65 5c 22 22 7d 0d 0a Data Ascii: 40{"error":"Invalid context: invalid ObjectId in JSON: \"false\""}
2023-12-05 18:13:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50398	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	2227	OUT	GET /vi-assets/static-assets/accessCodeLPNews-c4ce21c894f39cd01056.js?_sw-precache=4e7707bb284e0c9628a7d180424e4eef HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:55 UTC	1332	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 35 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 5f 6b 5f 57 61 6a 39 52 36 4c 63 73 66 6c 34 6d 69 74 50 56 64 4c 44 45 55 76 68 61 7a 65 46 54 73 37 45 35 5f 44 33 49 63 46 47 34 41 33 36 4e 73 7a 6a 37 62 65 39 44 34 4f 48 30 66 65 6a 41 69 7a 37 70 70 4a 4b 49 70 57 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 33 36 39 37 37 33 33 34 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4454X-GUploader-UploadID: ABPtcPo_k_Waj9R6Lcsfl4mitPVdLDEUvhazeFTs7E5_D3IcFG4A36Nszj7be9D4OH0fejAiz7ppJKIpWwx-goog-generation: 1701370369773340x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:55 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 5d 2c 7b 54 5a 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 72 28 74 29 3b 76 61 72 20 6e 2c 72 3d 63 28 22 67 63 52 2f 22 29 2c 61 3d 63 2e 6e 28 72 29 2c 73 3d 28 63 28 22 71 31 74 49 22 29 2c 63 28 22 6d 4c 73 50 22 29 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 61 28 29 28 73 2e 61 2c 7b 75 73 65 43 61 73 65 3a 22 6e 65 77 73 22 7d 29 29 7d 3b 6f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 63 65 73 73 43 6f 64 65 4e 65 77 73 52 65 64 65 65 6d 4c 50 22 2c 74 2e 64 65 66 61 75 6c 74 3d 6f 7d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[40],{TZ06:function(e,t,c){"use strict";c.r(t);var n,r=c("gcR/"),a=c.n(r),s=(c("q1tI"),c("mLsP")),o=function(){return n\|\|(n=a()(s.a,{useCase:"news"}))};o.displayName="AccessCodeNewsRedeemLP",t.default=o}
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 46 63 2b 22 29 2c 6a 3d 28 30 2c 63 2e 6e 28 45 29 2e 61 29 28 6e 7c 7c 28 6e 3d 79 28 29 28 5b 22 5c 6e 71 75 65 72 79 20 43 68 65 63 6b 41 63 63 65 73 73 43 6f 64 65 28 24 73 75 72 66 61 63 65 43 6f 64 65 3a 20 53 74 72 69 6e 67 21 2c 20 24 61 63 63 65 73 73 43 6f 64 65 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 61 63 63 65 73 73 43 6f 64 65 28 73 75 72 66 61 63 65 43 6f 64 65 3a 20 24 73 75 72 66 61 63 65 43 6f 64 65 2c 20 61 63 63 65 73 73 43 6f 64 65 3a 20 24 61 63 63 65 73 73 43 6f 64 65 29 20 7b 5c 6e 20 20 20 20 65 78 70 69 72 61 74 69 6f 6e 44 61 74 65 5c 6e 20 20 20 20 73 74 61 74 75 73 5c 6e 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 7d 5c 6e 7d 5c 6e 22 5d 29 29 29 2c 6d 3d 63 28 22 4a 71 70 39 22 29 2c 52 3d Data Ascii: Fc+"),j=(0,c.n(E).a)(n\|\|(n=y()(["\nquery CheckAccessCode($surfaceCode: String!, $accessCode: String!) {\n accessCode(surfaceCode: $surfaceCode, accessCode: $accessCode) {\n expirationDate\n status\n subscriptionName\n }\n}\n"]))),m=c("Jqp9"),R=
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 69 72 65 63 74 3a 21 31 7d 29 2c 72 3d 66 28 29 28 6e 2c 32 29 2c 6f 3d 72 5b 30 5d 2c 75 3d 72 5b 31 5d 2c 64 3d 4f 62 6a 65 63 74 28 4f 2e 75 73 65 4c 61 7a 79 51 75 65 72 79 29 28 6a 2c 7b 63 6c 69 65 6e 74 3a 63 7d 29 2c 6c 3d 66 28 29 28 64 2c 32 29 2c 43 3d 6c 5b 30 5d 2c 77 3d 6c 5b 31 5d 2c 79 3d 77 2e 64 61 74 61 2c 45 3d 77 2e 65 72 72 6f 72 2c 6d 3d 77 2e 6c 6f 61 64 69 6e 67 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 6d 65 73 73 61 67 65 2e 69 6e 63 6c 75 64 65 73 28 22 4e 65 74 77 6f 72 6b 20 65 72 72 6f 72 22 29 3f 22 49 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 69 6e 67 20 65 72 72 6f 72 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3a 22 57 65 e2 80 99 72 Data Ascii: irect:!1}),r=f()(n,2),o=r[0],u=r[1],d=Object(O.useLazyQuery)(j,{client:c}),l=f()(d,2),C=l[0],w=l[1],y=w.data,E=w.error,m=w.loading,R=function(e,t){if(t)return t.message.includes("Network error")?"Internal networking error. Please try again later.":"Wer
2023-12-05 18:13:55 UTC	317	IN	Data Raw: 7b 7d 2c 76 6f 69 64 20 30 2c 69 28 29 28 62 2e 61 2c 7b 65 72 72 6f 72 4d 73 67 3a 52 2c 68 61 6e 64 6c 65 43 68 65 63 6b 43 6f 64 65 53 74 61 74 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 54 28 54 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 61 63 63 65 73 73 43 6f 64 65 3a 65 7d 29 7d 29 29 2c 43 28 7b 76 61 72 69 61 62 6c 65 73 3a 7b 61 63 63 65 73 73 43 6f 64 65 3a 65 2c 73 75 72 66 61 63 65 43 6f 64 65 3a 74 7d 7d 29 7d 2c 6c 6f 61 64 69 6e 67 3a 6d 2c 75 73 65 43 61 73 65 3a 74 7d 29 2c 73 7c 7c 28 73 3d 69 28 29 28 68 2e 61 2c 7b 7d 29 29 29 7d 3b 41 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 63 63 65 73 73 43 6f 64 65 52 65 64 65 65 6d 4c 50 22 3b 74 2e 61 3d 41 7d 7d 5d 29 3b 0a 2f 2f 23 Data Ascii: {},void 0,i()(b.a,{errorMsg:R,handleCheckCodeStatus:function(e){u((function(t){return T(T({},t),{},{accessCode:e})})),C({variables:{accessCode:e,surfaceCode:t}})},loading:m,useCase:t}),s\|\|(s=i()(h.a,{})))};A.displayName="AccessCodeRedeemLP";t.a=A}}]);//#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50401	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	2218	OUT	GET /vi-assets/static-assets/account-0d5cbed5aea38cde65b4.js?_sw-precache=d091cb3780cccf4ddbe227b80e5acc89 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:55 UTC	1324	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 31 37 33 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 56 56 63 67 66 52 35 43 45 57 6e 50 34 63 4f 49 78 6c 63 34 66 52 69 6f 62 42 47 77 31 30 51 4c 62 42 6b 6f 47 36 5a 6f 7a 37 73 5a 79 4a 61 79 43 70 67 4f 2d 77 5a 38 32 7a 79 78 4e 67 66 67 55 4d 77 46 37 63 78 71 69 45 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 35 32 39 39 30 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 41737X-GUploader-UploadID: ABPtcPqVVcgfR5CEWnP4cOIxlc4fRiobBGw10QLbBkoG6Zoz7sZyJayCpgO-wZ82zyxNgfgUMwF7cxqiEAx-goog-generation: 1701718545529906x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:55 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 2c 31 31 31 2c 31 31 32 5d 2c 7b 22 2b 77 78 34 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[41,111,112],{"+wx4":function(e,t,n){"use strict";n.d(t,"f",(function(){return p})),n.d(t,"a",(function(){return m})),n.d(t,"b",(function(){return f})),n.d(t,"e",(function(){return b})),n.d(t,"d",(functi
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 43 6f 64 65 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 4e 61 6d 65 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 72 65 67 69 49 64 5c 6e 20 20 20 20 20 20 65 6d 61 69 6c 41 64 64 72 65 73 73 5c 6e 20 20 20 20 20 20 6e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 43 6f 64 65 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 4e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 70 72 6f 64 75 63 74 49 63 6f 6e 55 72 6c 5c 6e 20 20 20 20 20 20 20 20 6c 61 74 65 73 74 4e 65 77 73 6c 65 74 74 65 72 55 72 6c 5c 6e 20 20 20 20 20 20 20 20 66 72 65 71 75 65 6e 63 79 5c 6e 20 20 20 20 20 20 20 20 61 63 74 69 76 61 74 69 6f 6e 45 6e 74 69 74 6c Data Ascii: productCode\n productName\n }\n regiId\n emailAddress\n newsletterSubscriptions {\n productCode\n productName\n productIconUrl\n latestNewsletterUrl\n frequency\n activationEntitl
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 22 4b 78 79 74 22 29 2c 63 3d 6e 28 22 4a 71 70 39 22 29 2c 6c 3d 6e 28 22 69 56 69 2f 22 29 2c 75 3d 6e 2e 6e 28 6c 29 2c 64 3d 6e 28 22 66 54 78 6e 22 29 2c 70 3d 6e 28 22 4d 53 68 47 22 29 2c 6d 3d 6e 28 22 4a 55 46 4e 22 29 2c 66 3d 6e 28 22 55 59 46 76 22 29 2c 62 3d 6e 28 22 70 41 6e 57 22 29 2c 76 3d 6e 28 22 4a 34 7a 70 22 29 2c 67 3d 6e 2e 6e 28 76 29 2c 68 3d 6e 28 22 67 57 32 34 22 29 2c 79 3d 6e 28 22 6e 41 61 68 22 29 2c 77 3d 6e 28 22 52 47 4d 57 22 29 2c 4e 3d 6e 28 22 67 70 74 75 22 29 2c 4f 3d 6e 28 22 36 6c 44 74 22 29 2c 6b 3d 6e 28 22 2b 77 78 34 22 29 2c 54 3d 6e 28 22 6b 6d 30 76 22 29 2c 43 3d 6e 28 22 4d 63 4a 70 22 29 2c 53 3d 6e 2e 6e 28 43 29 2c 6a 3d 6e 28 22 66 5a 64 48 22 29 2c 78 3d 6e 28 22 6c 53 4e 41 22 29 2c 45 3d 6e 2e Data Ascii: "Kxyt"),c=n("Jqp9"),l=n("iVi/"),u=n.n(l),d=n("fTxn"),p=n("MShG"),m=n("JUFN"),f=n("UYFv"),b=n("pAnW"),v=n("J4zp"),g=n.n(v),h=n("gW24"),y=n("nAah"),w=n("RGMW"),N=n("gptu"),O=n("6lDt"),k=n("+wx4"),T=n("km0v"),C=n("McJp"),S=n.n(C),j=n("fZdH"),x=n("lSNA"),E=n.
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 6c 6f 77 65 64 45 6e 74 69 74 6c 65 6d 65 6e 74 3a 22 22 2c 69 73 4f 6e 73 69 74 65 46 72 65 65 54 72 69 61 6c 45 6e 61 62 6c 65 64 3a 30 7d 29 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 28 74 3d 7b 7d 2c 45 28 29 28 74 2c 41 2c 22 4e 45 22 29 2c 45 28 29 28 74 2c 49 2c 22 57 4b 44 52 22 29 2c 74 29 5b 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 65 5b 4d 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 76 61 72 69 61 6e 74 5d 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 2c 6e 3d 65 2e 61 62 72 61 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 74 7c 7c 21 74 2e 73 6f 6d 65 28 28 66 Data Ascii: lowedEntitlement:"",isOnsiteFreeTrialEnabled:0})},q=function(e){var t,n;return(t={},E()(t,A,"NE"),E()(t,I,"WKDR"),t)[null==e\|\|null===(n=e[M])\|\|void 0===n?void 0:n.variant]},L=function(e){var t=e.newsletterSubscriptions,n=e.abra;return!(null==t\|\|!t.some((f
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 6f 2c 69 3d 65 2e 61 62 72 61 2c 61 3d 65 2e 70 72 6f 64 75 63 74 43 6f 64 65 2c 73 3d 5f 28 61 29 3b 73 26 26 6e 75 6c 6c 21 3d 69 26 26 6e 75 6c 6c 21 3d 3d 28 74 3d 69 5b 4d 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 61 6c 6c 6f 63 61 74 65 64 26 26 4f 62 6a 65 63 74 28 64 2e 73 29 28 7b 70 61 67 65 54 79 70 65 3a 22 6f 70 74 6f 75 74 22 2c 6d 6f 64 75 6c 65 4e 61 6d 65 3a 4d 2c 6d 6f 64 75 6c 65 43 6f 6e 74 65 78 74 3a 22 75 6e 73 75 62 5f 6d 6f 72 6e 69 6e 67 22 2c 6d 6f 64 75 6c 65 4c 61 62 65 6c 3a 55 28 69 29 3f 22 63 6f 6e 74 72 6f 6c 5f 75 6e 73 75 62 22 3a 6e 75 6c 6c 3d 3d 69 7c 7c Data Ascii: seEffect)((function(){return function(e){var t,n,r,o,i=e.abra,a=e.productCode,s=_(a);s&&null!=i&&null!==(t=i[M])&&void 0!==t&&t.allocated&&Object(d.s)({pageType:"optout",moduleName:M,moduleContext:"unsub_morning",moduleLabel:U(i)?"control_unsub":null==i\|\|
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 79 52 65 63 65 69 76 69 6e 67 3a 63 7d 29 29 7d 2c 4a 3d 6e 28 22 2f 45 66 6c 22 29 2c 47 3d 6e 28 22 4f 79 78 36 22 29 2c 48 3d 6e 28 22 47 79 75 55 22 29 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 73 65 72 50 72 6f 66 69 6c 65 2c 6e 3d 74 2e 65 6d 61 69 6c 41 64 64 72 65 73 73 2c 72 3d 74 2e 72 65 67 69 49 64 3b 69 66 28 4f 62 6a 65 63 74 28 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 75 6e 73 75 62 73 63 72 69 62 65 64 50 72 6f 64 75 63 74 54 79 70 65 3d 3d 3d 68 2e 66 26 26 4f 62 6a 65 63 74 28 54 2e 62 29 28 72 29 7d 29 2c 5b 5d 29 2c 74 2e 75 6e 73 75 62 73 63 72 69 62 65 64 50 72 6f 64 75 63 74 54 79 70 65 21 3d 3d 68 2e 66 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 6f Data Ascii: yReceiving:c}))},J=n("/Efl"),G=n("Oyx6"),H=n("GyuU"),Q=function(e){var t=e.userProfile,n=t.emailAddress,r=t.regiId;if(Object(i.useEffect)((function(){t.unsubscribedProductType===h.f&&Object(T.b)(r)}),[]),t.unsubscribedProductType!==h.f)return null;var a=o
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 6e 61 6e 63 65 22 2c 54 45 41 44 3a 22 54 65 63 68 22 2c 43 55 41 44 3a 22 43 75 6c 74 75 72 65 22 2c 45 4e 41 44 3a 22 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 2c 47 4d 41 44 3a 22 47 65 6e 65 72 61 6c 20 4d 61 72 6b 65 74 22 2c 50 50 41 44 3a 22 50 75 62 6c 69 63 20 50 6f 6c 69 63 79 22 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 72 6f 64 75 63 74 43 6f 64 65 3b 69 66 28 21 69 65 5b 74 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 79 2e 61 29 28 29 2c 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6e 2e 73 65 61 72 63 68 29 3b 72 2e 64 65 6c 65 74 65 28 22 70 72 6f 64 75 63 74 22 29 3b 76 61 72 20 69 3d 22 68 74 74 70 73 3a 2f 2f 22 2e 63 6f 6e 63 61 74 28 77 69 6e Data Ascii: nance",TEAD:"Tech",CUAD:"Culture",ENAD:"Entertainment",GMAD:"General Market",PPAD:"Public Policy"},ae=function(e){var t=e.productCode;if(!ie[t])return null;var n=Object(y.a)(),r=new URLSearchParams(n.search);r.delete("product");var i="https://".concat(win
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 64 7c 7c 21 62 26 26 21 66 29 72 65 74 75 72 6e 20 65 65 7c 7c 28 65 65 3d 6f 28 29 28 4e 2e 61 2c 7b 7d 29 29 3b 69 66 28 66 29 7b 76 61 72 20 76 3d 67 28 29 28 66 2e 67 72 61 70 68 51 4c 45 72 72 6f 72 73 2c 31 29 5b 30 5d 3b 72 65 74 75 72 6e 22 74 6f 6b 65 6e 5f 69 6e 76 61 6c 69 64 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 76 3f 7b 6d 65 73 73 61 67 65 3a 22 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 7d 3a 76 29 2e 6d 65 73 73 61 67 65 3f 28 4f 62 6a 65 63 74 28 79 2e 62 29 28 29 2c 6e 75 6c 6c 29 3a 74 65 7c 7c 28 74 65 3d 6f 28 29 28 4f 2e 61 2c 7b 7d 29 29 7d 76 61 72 20 43 3d 28 62 7c 7c 7b 7d 29 2e 6f 70 74 4f 75 74 42 79 54 6f 6b 65 6e 2c 53 3d 76 6f 69 64 20 30 3d 3d 3d 43 3f 7b 7d 3a 43 3b 72 65 Data Ascii: )return null;if(d\|\|!b&&!f)return ee\|\|(ee=o()(N.a,{}));if(f){var v=g()(f.graphQLErrors,1)[0];return"token_invalid"===(void 0===v?{message:"unknown_error"}:v).message?(Object(y.b)(),null):te\|\|(te=o()(O.a,{}))}var C=(b\|\|{}).optOutByToken,S=void 0===C?{}:C;re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50402	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	2225	OUT	GET /vi-assets/static-assets/activateaccess-e88e470913eaaf28b000.js?_sw-precache=44f23b962029c4019df81ced6ef1d33b HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:55 UTC	1334	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 36 32 36 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 71 7a 6a 72 63 45 59 4d 76 32 70 63 5a 64 7a 70 6b 4c 53 74 51 69 65 31 78 50 2d 47 4a 44 6b 6c 68 34 75 73 38 30 51 45 6e 75 7a 6d 47 31 49 43 43 5a 46 79 68 4e 38 5f 53 54 46 70 53 41 6b 51 76 56 67 63 55 6e 73 78 6b 66 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 33 36 39 37 33 37 38 36 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 216266X-GUploader-UploadID: ABPtcPrqzjrcEYMv2pcZdzpkLStQie1xP-GJDklh4us80QEnuzmG1ICCZFyhN8_STFpSAkQvVgcUnsxkfwx-goog-generation: 1701370369737865x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:55 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 5d 2c 7b 22 30 7a 75 48 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 3b 76 61 72 20 6e 3d 69 28 22 67 63 52 2f 22 29 2c 61 3d 69 2e 6e 28 6e 29 2c 72 3d 69 28 22 71 31 74 49 22 29 2c 6f 3d 69 2e 6e 28 72 29 2c 73 3d 69 28 22 51 53 30 6e 22 29 2c 63 3d 69 28 22 4b 78 79 74 22 29 2c 64 3d 69 28 22 56 36 47 2b 22 29 2c 75 3d 6f 2e 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 6c 3d 69 28 22 50 67 4f 39 22 29 2c 6d 3d 69 28 22 4a 71 70 39 22 29 2c 70 3d 69 28 22 77 58 43 37 22 29 2c 66 3d 69 2e 6e 28 70 29 2c 67 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"0zuH":function(e,t,i){"use strict";i.r(t);var n=i("gcR/"),a=i.n(n),r=i("q1tI"),o=i.n(r),s=i("QS0n"),c=i("Kxyt"),d=i("V6G+"),u=o.a.createContext(null),l=i("PgO9"),m=i("Jqp9"),p=i("wXC7"),f=i.n(p),g
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 69 64 3a 61 2c 6f 66 66 65 72 5f 69 64 3a 72 2c 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 69 64 3a 6f 2c 62 75 6e 64 6c 65 5f 6e 61 6d 65 3a 73 2c 62 75 6e 64 6c 65 5f 74 79 70 65 3a 63 2c 70 72 69 6f 72 5f 62 75 6e 64 6c 65 73 3a 64 2e 6a 6f 69 6e 28 22 2c 22 29 7d 7d 29 7d 2c 55 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 65 28 7b 6d 6f 64 75 6c 65 4e 61 6d 65 3a 65 7d 29 7d 7d 2c 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6e 2c 61 3b 72 65 74 75 72 6e 20 46 65 28 7b 6d 6f 64 75 6c 65 4e 61 6d 65 3a 65 2c 65 6c 65 6d 65 6e 74 4e 61 6d 65 3a 74 2c 65 6c 65 6d 65 6e 74 4c 61 62 65 6c 3a 6e 75 6c 6c 3d 3d 3d Data Ascii: id:a,offer_id:r,subscription_id:o,bundle_name:s,bundle_type:c,prior_bundles:d.join(",")}})},Ue=function(e){return function(){return Ge({moduleName:e})}},Me=function(e,t){return function(i){var n,a;return Fe({moduleName:e,elementName:t,elementLabel:null===
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 22 3b 76 61 72 20 44 74 2c 41 74 2c 49 74 2c 6a 74 2c 52 74 2c 4c 74 2c 59 74 2c 7a 74 2c 47 74 2c 46 74 2c 56 74 3d 22 2f 61 63 74 69 76 61 74 65 2d 61 63 63 65 73 73 2f 69 6e 79 74 22 2c 55 74 3d 22 22 2e 63 6f 6e 63 61 74 28 56 74 2c 22 2f 66 69 6e 64 22 29 2c 4d 74 3d 22 22 2e 63 6f 6e 63 61 74 28 56 74 2c 22 2f 72 65 76 69 65 77 22 29 2c 71 74 3d 22 22 2e 63 6f 6e 63 61 74 28 56 74 2c 22 2f 63 6f 6e 66 69 72 6d 22 29 2c 48 74 3d 22 45 6e 6a 6f 79 20 61 63 63 65 73 73 20 74 6f 20 65 76 65 72 79 74 68 69 6e 67 20 54 68 65 20 54 69 6d 65 73 20 68 61 73 20 74 6f 20 6f 66 66 65 72 20 2d 20 69 6e 63 6c 75 64 69 6e 67 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 6a 6f 75 72 6e 61 6c 69 73 6d 20 6f 6e 20 61 6c 6c 20 79 6f 75 72 20 64 65 76 69 Data Ascii: ";var Dt,At,It,jt,Rt,Lt,Yt,zt,Gt,Ft,Vt="/activate-access/inyt",Ut="".concat(Vt,"/find"),Mt="".concat(Vt,"/review"),qt="".concat(Vt,"/confirm"),Ht="Enjoy access to everything The Times has to offer - including The New York Times journalism on all your devi
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 46 69 6e 64 20 59 6f 75 72 20 22 2e 63 6f 6e 63 61 74 28 22 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 4e 6f 6f 6b 22 2c 22 20 53 75 62 73 63 72 69 70 74 69 6f 6e 22 29 7d 2c 70 61 67 65 50 61 72 61 67 72 61 70 68 73 3a 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 55 6e 6c 69 6d 69 74 65 64 20 61 63 63 65 73 73 20 74 6f 20 4e 59 54 69 6d 65 73 2e 63 6f 6d 20 69 73 20 69 6e 63 6c 75 64 65 64 20 77 69 74 68 20 79 6f 75 72 20 22 2e 63 6f 6e 63 61 74 28 22 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 4e 6f 6f 6b 22 2c 22 20 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 74 68 65 20 72 Data Ascii: e:function(){return"Find Your ".concat("New York Times Nook"," Subscription")},pageParagraphs:[function(){return"Unlimited access to NYTimes.com is included with your ".concat("New York Times Nook"," subscription.")},function(){return"Please provide the r
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 65 69 67 68 74 2e 6d 65 64 69 75 6d 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 22 2c 66 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 32 30 2c 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 22 29 2c 4d 6e 3d 4f 62 6a 65 63 74 28 6d 2e 73 74 79 6c 65 64 29 28 22 70 22 2c 7b 74 61 72 67 65 74 3a 22 65 31 63 79 62 70 61 74 31 35 22 7d 29 28 22 63 6f 6c 6f 72 3a 22 2c 66 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 33 30 2c 22 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 66 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 66 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 6d 65 64 69 75 6d 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 66 2e 61 2e 66 6f 6e 74 2e Data Ascii: eight.medium,";line-height:16px;color:",f.a.color.gray20,";display:inline-flex;"),Mn=Object(m.styled)("p",{target:"e1cybpat15"})("color:",f.a.color.gray30,";font-family:",f.a.font.franklinBase,";font-weight:",f.a.font.weight.medium,";font-size:",f.a.font.
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 2f 64 69 67 69 74 61 6c 70 61 73 73 22 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 72 65 64 65 65 6d 2d 70 61 73 73 2d 6c 6e 6b 22 2c 6f 6e 43 6c 69 63 6b 3a 4f 61 2c 63 6f 6c 6f 72 3a 22 61 63 63 65 6e 74 22 7d 2c 76 6f 69 64 20 30 2c 22 4e 59 54 69 6d 65 73 2e 63 6f 6d 2f 44 69 67 69 74 61 6c 50 61 73 73 22 29 29 7d 2c 74 3d 65 2e 61 63 63 6f 75 6e 74 4c 69 6e 6b 2c 69 3d 65 2e 70 61 73 73 52 65 64 65 6d 70 74 69 6f 6e 4c 69 6e 6b 2c 6f 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 22 54 6f 20 64 6f 20 74 68 69 73 2c 20 76 69 73 69 74 20 79 6f 75 72 20 41 63 63 6f 75 6e 74 20 62 79 20 67 6f 69 6e 67 20 74 6f 20 22 2c 74 2c 22 2e 20 49 66 20 41 Data Ascii: /digitalpass",target:"_blank","data-testid":"redeem-pass-lnk",onClick:Oa,color:"accent"},void 0,"NYTimes.com/DigitalPass"))},t=e.accountLink,i=e.passRedemptionLink,o.a.createElement(o.a.Fragment,null,"To do this, visit your Account by going to ",t,". If A
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 69 64 22 3a 22 63 70 32 22 7d 2c 76 6f 69 64 20 30 2c 22 43 75 72 72 65 6e 74 20 73 75 62 73 63 72 69 62 65 72 73 20 61 72 65 20 6e 6f 74 20 65 6c 69 67 69 62 6c 65 20 74 6f 20 63 6c 61 69 6d 20 61 20 6e 65 77 20 70 61 73 73 2e 22 29 29 29 7d 3b 4a 73 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 41 6c 72 65 61 64 79 53 75 62 73 63 72 69 62 65 72 45 72 72 6f 72 56 69 65 77 22 3b 76 61 72 20 5a 73 2c 51 73 2c 4b 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 62 66 66 43 6c 69 65 6e 74 2c 69 3d 65 2e 69 70 41 64 64 72 65 73 73 54 6f 6b 65 6e 2c 6e 3d 4f 62 6a 65 63 74 28 63 2e 75 73 65 4d 75 74 61 74 69 6f 6e 29 28 4c 6f 2c 7b 63 6c 69 65 6e 74 3a 74 7d 29 2c 6f 3d 73 65 28 29 28 6e 2c 32 29 2c 73 3d 6f 5b 30 5d 2c 64 3d 6f 5b 31 5d 3b 69 66 Data Ascii: id":"cp2"},void 0,"Current subscribers are not eligible to claim a new pass.")))};Js.displayName="AlreadySubscriberErrorView";var Zs,Qs,Ks=function(e){var t=e.bffClient,i=e.ipAddressToken,n=Object(c.useMutation)(Lo,{client:t}),o=se()(n,2),s=o[0],d=o[1];if
2023-12-05 18:13:55 UTC	16384	IN	Data Raw: 77 65 6c 63 6f 6d 65 2d 73 75 62 73 63 72 69 62 65 72 3f 61 6c 6c 41 63 63 65 73 73 55 73 65 72 3d 74 72 75 65 22 3b 73 77 69 74 63 68 28 65 5b 30 5d 29 7b 63 61 73 65 22 4e 45 57 53 22 3a 72 65 74 75 72 6e 22 2f 77 65 6c 63 6f 6d 65 2d 73 75 62 73 63 72 69 62 65 72 22 3b 63 61 73 65 22 43 4f 4f 4b 49 4e 47 22 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 6e 67 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 3b 63 61 73 65 22 47 41 4d 45 53 22 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 63 72 6f 73 73 77 6f 72 64 73 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 7d 7d 28 63 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: welcome-subscriber?allAccessUser=true";switch(e[0]){case"NEWS":return"/welcome-subscriber";case"COOKING":return"https://cooking.nytimes.com";case"GAMES":return"https://www.nytimes.com/crosswords";default:return"https://www.nytimes.com"}}(c),f=function(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50403	104.26.7.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	357	OUT	GET /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:55 UTC	610	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:13:55 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closevary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3
2023-12-05 18:13:55 UTC	117	IN	Data Raw: 36 66 0d 0a 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 31 31 32 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 74 79 70 65 22 3a 22 6e 6f 74 5f 66 6f 75 6e 64 22 2c 22 75 73 65 72 5f 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 5d 7d 0d 0a Data Ascii: 6f{"errors":[{"code":112,"message":"Endpoint not found","type":"not_found","user_message":"Endpoint not found"}]}
2023-12-05 18:13:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50404	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	2230	OUT	GET /vi-assets/static-assets/additionalPlaylists-bb95ce52ed85fd8f45d0.js?_sw-precache=943364173fb0fc29c9d4dc82e4715519 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:55 UTC	1328	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 38 34 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 48 67 42 4d 70 4d 64 43 4d 5a 56 6c 57 57 61 67 55 43 57 66 35 36 4a 37 6b 49 49 4d 62 30 64 76 39 4f 5a 61 77 71 7a 37 6e 41 64 4e 65 70 41 38 35 47 4e 5a 57 56 72 75 4b 52 4c 51 44 58 5a 4f 4a 54 70 55 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 35 37 35 37 38 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4841X-GUploader-UploadID: ABPtcPpHgBMpMdCMZVlWWagUCWf56J7kIIMb0dv9OZawqz7nAdNepA85GNZWVruKRLQDXZOJTpUx-goog-generation: 1701369734575789x-goog-metageneration: 1x-goog-stored-content-encoding: ide
2023-12-05 18:13:55 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 6e 79 39 71 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 69 29 2c 65 2e 64 28 69 2c 22 6d 61 70 53 75 6d 6d 61 72 79 54 6f 50 6c 61 79 6c 69 73 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 2c 65 2e 64 28 69 2c 22 61 64 64 69 74 69 6f 6e 61 6c 50 6c 61 79 6c 69 73 74 73 51 75 65 72 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 7d 29 29 3b 76 61 72 20 74 2c 61 3d 65 28 22 67 63 52 2f 22 29 2c 6f 3d 65 2e 6e 28 61 29 2c 73 3d 65 28 22 56 6b 41 4e 22 29 2c 72 3d 65 2e 6e 28 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{ny9q:function(n,i,e){"use strict";e.r(i),e.d(i,"mapSummaryToPlaylist",(function(){return O})),e.d(i,"additionalPlaylistsQuery",(function(){return H}));var t,a=e("gcR/"),o=e.n(a),s=e("VkAN"),r=e.n(s
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 63 6c 61 73 73 4e 61 6d 65 3a 66 7d 29 2c 6f 28 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 68 7d 29 29 29 29 29 29 7d 3b 4e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 53 70 69 6e 6e 65 72 22 3b 76 61 72 20 41 2c 45 2c 78 2c 49 2c 6b 2c 53 3d 4e 2c 54 3d 65 28 22 65 76 72 64 22 29 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 73 70 6c 69 74 28 2f 5b 5c 73 2c 5d 2b 2f 29 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 76 69 64 65 6f 2f 22 2e 63 6f 6e 63 61 74 28 6e 29 7d 29 29 7d 2c 56 3d 79 28 29 28 41 7c 7c 28 41 3d 72 28 29 28 5b 27 5c 6e 20 20 66 72 61 67 6d 65 6e 74 20 41 64 64 69 74 69 6f 6e 61 Data Ascii: className:f}),o()("div",{className:h}))))))};N.displayName="Spinner";var A,E,x,I,k,S=N,T=e("evrd"),O=function(n){return null==n?void 0:n.split(/[\s,]+/).filter(Boolean).map((function(n){return"video/".concat(n)}))},V=y()(A\|\|(A=r()(['\n fragment Additiona
2023-12-05 18:13:55 UTC	1379	IN	Data Raw: 20 72 65 6e 64 69 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 77 69 64 74 68 5c 6e 20 20 20 20 20 20 75 72 6c 5c 6e 20 20 20 20 20 20 68 65 69 67 68 74 5c 6e 20 20 20 20 20 20 74 79 70 65 5c 6e 20 20 20 20 20 20 62 69 74 72 61 74 65 5c 6e 20 20 20 20 20 20 61 73 70 65 63 74 52 61 74 69 6f 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 70 72 6f 6d 6f 74 69 6f 6e 61 6c 48 65 61 64 6c 69 6e 65 5c 6e 20 20 20 20 73 65 63 74 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 69 64 5c 6e 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 64 69 73 70 6c 61 79 4e 61 6d 65 5c 6e 20 20 20 20 20 20 75 72 6c 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 73 75 62 73 65 63 74 69 6f 6e 20 7b 5c 6e 20 20 20 20 20 20 69 64 5c 6e 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 Data Ascii: renditions {\n width\n url\n height\n type\n bitrate\n aspectRatio\n }\n promotionalHeadline\n section {\n id\n name\n displayName\n url\n }\n subsection {\n id\n name\n }\n
2023-12-05 18:13:55 UTC	704	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6d 26 26 6d 2e 61 6e 79 57 6f 72 6b 73 3f 6c 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 6f 28 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 63 2e 61 2e 61 31 31 79 2e 76 69 73 75 61 6c 6c 79 48 69 64 64 65 6e 2c 72 6f 6c 65 3a 22 73 74 61 74 75 73 22 2c 22 61 72 69 61 2d 6c 69 76 65 22 3a 22 61 73 73 65 72 74 69 76 65 22 7d 2c 76 6f 69 64 20 30 2c 22 61 64 64 69 74 69 6f 6e 61 6c 20 70 6c 61 79 6c 69 73 74 73 20 6c 6f 61 64 65 64 22 29 2c 6e 75 6c 6c 3d 3d 3d 28 69 3d 6d 2e 61 6e 79 57 6f 72 6b 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 69 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 Data Ascii: ;return null!=m&&m.anyWorks?l.a.createElement(l.a.Fragment,null,o()("div",{className:c.a.a11y.visuallyHidden,role:"status","aria-live":"assertive"},void 0,"additional playlists loaded"),null===(i=m.anyWorks)\|\|void 0===i\|\|null===(e=i.filter((function(n){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50405	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:55 UTC	2217	OUT	GET /vi-assets/static-assets/adslot-c02e009c82341062ec30.js?_sw-precache=078400628199a3340ce1953af112096e HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:56 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 32 39 39 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 42 52 32 75 4a 39 38 36 64 6e 44 5a 35 5f 35 51 6d 62 64 41 2d 76 56 49 35 52 53 6e 64 50 4a 56 7a 57 49 63 37 37 6e 77 6b 68 6f 64 4a 65 49 31 37 2d 41 70 42 65 43 6c 6f 45 42 43 37 4a 4d 52 31 70 38 36 79 51 5a 56 2d 50 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 31 36 39 32 32 37 33 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 22998X-GUploader-UploadID: ABPtcPpBR2uJ986dnDZ5_5QmbdA-vVI5RSndPJVzWIc77nwkhodJeI17-ApBeCloEBC7JMR1p86yQZV-PQx-goog-generation: 1701718516922736x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:56 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 34 5d 2c 7b 22 31 69 79 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 6e 28 22 52 7a 71 47 22 29 7d 2c 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 22 31 69 79 4a 22 29 7d 2c 52 7a 71 47 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[44],{"1iyJ":function(e,t,n){"use strict";n.r(t);n("RzqG")},2:function(e,t,n){e.exports=n("1iyJ")},RzqG:function(e,t){!function(){"use strict";function e(e,t,n){return t in e?Object.defineProperty(e,t,{v
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 28 65 3d 65 2e 73 63 6f 70 65 29 3f 22 70 61 67 65 22 3a 65 3b 72 5b 6e 5d 7c 7c 28 72 5b 6e 5d 3d 7b 7d 29 2c 72 5b 6e 5d 5b 61 5d 7c 7c 28 72 5b 6e 5d 5b 61 5d 3d 5b 5d 29 3b 76 61 72 20 64 3d 72 5b 6e 5d 5b 61 5d 2e 70 75 73 68 28 69 29 2d 31 3b 72 65 74 75 72 6e 20 6f 5b 6e 5d 26 26 6f 5b 6e 5d 5b 61 5d 26 26 6f 5b 6e 5d 5b 61 5d 2e 6c 65 6e 67 74 68 26 26 6f 5b 6e 5d 5b 61 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 28 65 29 7d 29 29 2c 7b 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 5d 5b 61 5d 2e 73 70 6c 69 63 65 28 64 2c 31 29 7d 7d 7d 2c 75 6e 73 75 62 73 63 72 69 62 65 54 6f 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 Data Ascii: oid 0===(e=e.scope)?"page":e;r[n]\|\|(r[n]={}),r[n][a]\|\|(r[n][a]=[]);var d=r[n][a].push(i)-1;return o[n]&&o[n][a]&&o[n][a].length&&o[n][a].forEach((function(e){i(e)})),{remove:function(){return r[n][a].splice(d,1)}}},unsubscribeToAll:function(e){Object.keys
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 72 6e 69 61 4e 6f 74 69 63 65 73 55 49 3a 38 2c 50 55 52 52 5f 45 6d 61 69 6c 4d 61 72 6b 65 74 69 6e 67 4f 70 74 49 6e 55 49 3a 39 2c 50 55 52 52 5f 44 65 6c 65 74 65 49 50 41 64 64 72 65 73 73 3a 31 30 2c 50 55 52 52 5f 41 64 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 5f 76 33 3a 31 31 2c 50 55 52 52 5f 4c 69 6d 69 74 53 65 6e 73 69 74 69 76 65 50 49 3a 31 32 2c 50 55 52 52 5f 45 6d 61 69 6c 4d 61 72 6b 65 74 69 6e 67 4f 70 74 49 6e 55 49 5f 76 32 3a 31 33 2c 50 55 52 52 5f 41 64 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 5f 76 34 3a 31 34 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 32 3d 3d 3d 28 65 3d 22 3b 20 22 2e 63 6f 6e 63 61 74 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 73 70 6c 69 74 28 22 3b 20 22 2e 63 6f 6e 63 61 Data Ascii: rniaNoticesUI:8,PURR_EmailMarketingOptInUI:9,PURR_DeleteIPAddress:10,PURR_AdConfiguration_v3:11,PURR_LimitSensitivePI:12,PURR_EmailMarketingOptInUI_v2:13,PURR_AdConfiguration_v4:14},n=function(e){return 2===(e="; ".concat(document.cookie).split("; ".conca
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 5f 76 32 7d 76 61 72 20 76 3d 22 6d 65 73 73 61 67 65 22 2c 66 3d 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 67 3d 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 6d 3d 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 68 3d 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 62 3d 22 75 6e 6c 6f 61 64 22 2c 77 3d 22 73 6c 6f 74 52 65 71 75 65 73 74 65 64 22 2c 79 3d 22 73 6c 6f 74 52 65 73 70 6f 6e 73 65 52 65 63 65 69 76 65 64 22 2c 52 3d 22 73 6c 6f 74 52 65 6e 64 65 72 45 6e 64 65 64 22 2c 41 3d 22 73 6c 6f 74 4f 6e 6c 6f 61 64 22 2c 50 3d 22 69 6d 70 72 65 73 73 69 6f 6e 56 69 65 77 61 62 6c 65 22 2c 5f 3d 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 22 2c 4f 3d 22 74 69 6d 65 44 65 66 69 6e 65 64 22 2c 55 3d 22 74 69 6d 65 43 61 6c 6c 65 64 22 2c 49 3d Data Ascii: _v2}var v="message",f="visibilitychange",g="mouseenter",m="mouseleave",h="readystatechange",b="unload",w="slotRequested",y="slotResponseReceived",R="slotRenderEnded",A="slotOnload",P="impressionViewable",_="responseStart",O="timeDefined",U="timeCalled",I=
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 3a 22 68 22 2c 22 61 6c 6c 6f 77 2d 6f 70 74 2d 6f 75 74 22 3a 22 6f 22 2c 22 61 6c 6c 6f 77 2d 6f 70 74 2d 69 6e 22 3a 22 69 22 2c 22 61 6c 6c 6f 77 2d 6f 70 74 2d 69 6e 2d 6f 72 2d 6f 75 74 22 3a 22 61 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 50 55 52 52 5f 44 61 74 61 53 61 6c 65 4f 70 74 4f 75 74 55 49 5f 76 32 22 2c 76 61 6c 75 65 4d 61 70 70 69 6e 67 3a 7b 68 69 64 65 3a 22 68 22 2c 73 68 6f 77 3a 22 73 22 2c 22 73 68 6f 77 2d 6f 70 74 65 64 2d 6f 75 74 22 3a 22 6f 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 50 55 52 52 5f 43 61 6c 69 66 6f 72 6e 69 61 4e 6f 74 69 63 65 73 55 49 22 2c 76 61 6c 75 65 4d 61 70 70 69 6e 67 3a 7b 68 69 64 65 3a 22 68 22 2c 73 68 6f 77 3a 22 73 22 7d 7d 2c 7b 6e 61 6d 65 3a 22 50 55 52 52 5f 45 6d 61 69 6c 4d 61 72 6b 65 74 69 6e 67 4f 70 Data Ascii: :"h","allow-opt-out":"o","allow-opt-in":"i","allow-opt-in-or-out":"a"}},{name:"PURR_DataSaleOptOutUI_v2",valueMapping:{hide:"h",show:"s","show-opted-out":"o"}},{name:"PURR_CaliforniaNoticesUI",valueMapping:{hide:"h",show:"s"}},{name:"PURR_EmailMarketingOp
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 6f 67 6c 65 74 61 67 7c 7c 7b 7d 2c 65 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 3d 65 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 7c 7c 5b 5d 2c 65 2e 67 6f 6f 67 6c 65 74 61 67 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 65 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 3f 65 65 28 29 2e 63 6d 64 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 65 28 29 2e 5f 6c 6f 61 64 53 74 61 72 74 65 64 5f 7c 7c 61 2e 70 75 62 6c 69 73 68 28 7b 6e 61 6d 65 3a 43 2c 76 61 6c 75 65 3a 7b 74 79 70 65 3a 22 41 64 42 6c 6f 63 6b 4f 6e 22 7d 7d 29 7d 29 29 3a 61 2e 70 75 62 6c 69 73 68 28 7b 6e 61 6d 65 3a 43 2c 76 61 6c 75 65 3a 7b 74 79 70 65 3a 47 7d 7d 29 7d 2c 6f 3d 70 28 29 3d 3d 3d 59 3f Data Ascii: ogletag\|\|{},e.googletag.cmd=e.googletag.cmd\|\|[],e.googletag};function te(){var e,t,n,i=function(){window.googletag?ee().cmd.push((function(){ee()._loadStarted_\|\|a.publish({name:C,value:{type:"AdBlockOn"}})})):a.publish({name:C,value:{type:G}})},o=p()===Y?
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 61 72 20 6e 3d 65 2e 64 69 73 70 6c 61 79 65 64 2c 69 3d 65 2e 73 6c 6f 74 3b 74 2e 69 73 52 65 66 72 65 73 68 26 26 6e 3f 28 6f 65 28 5b 69 5d 2c 74 2e 63 68 61 6e 67 65 43 6f 72 72 65 6c 61 74 6f 72 3f 6e 75 6c 6c 3a 7b 63 68 61 6e 67 65 43 6f 72 72 65 6c 61 74 6f 72 3a 21 31 7d 29 2c 74 2e 63 68 61 6e 67 65 43 6f 72 72 65 6c 61 74 6f 72 3d 21 31 29 3a 28 69 65 28 65 29 2c 65 2e 64 69 73 70 6c 61 79 65 64 3d 21 30 29 7d 76 61 72 20 61 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 74 26 26 74 2e 75 6e 6f 62 73 65 72 76 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 75 6e 6f 62 73 65 72 76 65 29 26 26 28 74 2e 75 6e 6f 62 73 65 72 76 65 28 65 29 2c 21 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 Data Ascii: ar n=e.displayed,i=e.slot;t.isRefresh&&n?(oe([i],t.changeCorrelator?null:{changeCorrelator:!1}),t.changeCorrelator=!1):(ie(e),e.displayed=!0)}var ae=function(e,t){return!!(e&&t&&t.unobserve&&"function"==typeof t.unobserve)&&(t.unobserve(e),!0)};function d
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 74 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 5b 30 5d 2c 6e 28 65 2c 74 29 7d 29 2c 74 29 3b 72 65 74 75 72 6e 20 65 26 26 74 2e 6f 62 73 65 72 76 65 28 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 2c 74 29 7b 61 2e 70 75 62 6c 69 73 68 28 7b 6e 61 6d 65 3a 74 2c 73 63 6f 70 65 3a 65 2e 69 64 2c 76 61 6c 75 65 3a 7b 69 64 3a 65 2e 69 64 2c 70 6f 73 69 74 69 6f 6e 3a 65 2e 70 6f 73 69 74 69 6f 6e 2c 63 72 65 61 74 69 76 65 49 64 3a 65 2e 63 72 65 61 74 69 76 65 49 64 2c 6c 69 6e 65 Data Ascii: nts.length&&void 0!==arguments[2]?arguments[2]:function(){};t=new IntersectionObserver((function(e,t){e=e[0],n(e,t)}),t);return e&&t.observe(e),t}function ce(e,t){a.publish({name:t,scope:e.id,value:{id:e.id,position:e.position,creativeId:e.creativeId,line

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50408	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	2231	OUT	GET /vi-assets/static-assets/allAccessLandingPage-49658b8b29ff1f82e48c.js?_sw-precache=f6b120f6f543b14da8485d0fa412b2f4 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:56 UTC	1334	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 30 53 4f 74 6f 47 70 38 44 51 39 48 4c 68 43 45 57 6b 53 38 6d 6f 78 6f 6e 6f 5f 41 6d 4d 34 4f 66 32 62 5a 6b 65 63 65 73 33 4d 34 43 32 72 6e 73 59 65 73 51 4d 6e 6b 6c 45 5a 34 69 5a 37 57 41 35 54 50 63 51 6e 33 73 6d 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 39 20 4e 6f 76 20 32 30 32 34 20 31 39 3a 30 35 3a 34 38 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 446X-GUploader-UploadID: ABPtcPp0SOtoGp8DQ9HLhCEWkS8moxono_AmM4Of2bZkeces3M4C2rnsYesQMnklEZ4iZ7WA5TPcQn3smQCache-Control: public,max-age=31536000Expires: Fri, 29 Nov 2024 19:05:48 GMTLast-Modifie
2023-12-05 18:13:56 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:56 UTC	446	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 35 5d 2c 7b 47 78 52 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 6e 29 3b 76 61 72 20 61 2c 63 3d 73 28 22 67 63 52 2f 22 29 2c 69 3d 73 2e 6e 28 63 29 2c 6c 3d 28 73 28 22 71 31 74 49 22 29 2c 73 28 22 47 34 35 33 22 29 29 2c 74 3d 73 2e 6e 28 6c 29 2c 6f 3d 73 28 22 4b 35 48 32 22 29 2c 72 3d 73 28 22 71 73 32 6b 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 69 28 29 28 6f 2e 56 69 4d 65 73 73 61 67 69 6e 67 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 2c 7b 63 6c 69 65 6e 74 3a 6f 2e 63 6c 69 65 6e 74 73 2e 6c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[45],{GxRy:function(e,n,s){"use strict";s.r(n);var a,c=s("gcR/"),i=s.n(c),l=(s("q1tI"),s("G453")),t=s.n(l),o=s("K5H2"),r=s("qs2k");function d(){return i()(o.ViMessagingContextProvider,{client:o.clients.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50407	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	2194	OUT	GET /vi-assets/static-assets/apple-touch-icon-28865b72953380a40aa43318108876cb.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:56 UTC	1338	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 34 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 41 48 2d 6b 71 6f 4f 4e 4c 70 37 4b 69 4c 72 47 32 70 52 6f 30 68 41 51 66 38 33 6f 56 71 48 66 64 39 43 43 77 42 44 61 42 4b 63 62 69 5a 2d 71 5a 64 68 5f 49 57 55 62 6f 67 6d 30 72 6c 62 54 36 71 72 53 78 4a 6d 53 5f 54 63 6b 43 6d 53 2d 65 52 50 77 47 2d 65 4c 33 59 48 43 70 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 39 38 33 34 35 34 39 32 35 39 30 38 38 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3148X-GUploader-UploadID: ABPtcPpAH-kqoONLp7KiLrG2pRo0hAQf83oVqHfd9CCwBDaBKcbiZ-qZdh_IWUbogm0rlbT6qrSxJmS_TckCmS-eRPwG-eL3YHCpx-goog-generation: 1698345492590886x-goog-metageneration: 1x-goog-sto
2023-12-05 18:13:56 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 02 00 00 00 68 24 75 ef 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0b ee 49 44 41 54 78 da ec 9d bb 4f 14 5f 14 c7 77 0d 2d f2 07 88 7f 80 5a 50 82 06 63 03 fc 62 d0 06 30 be 1a 25 31 6a 83 1a 51 1b f1 b5 5a 88 2f a4 11 2d 94 42 41 23 58 48 4c 94 b5 80 10 23 6b 67 23 b5 89 76 6a 82 18 5b 7f df df 9c fc 6e ae 77 66 ee ce ce e3 de bb b3 e7 14 1b 1e b3 33 b3 e7 73 bf e7 9c fb 9a 2d fe fe fd bb c0 56 3f b6 8e 5d c0 c0 d8 18 18 1b 03 63 60 6c 26 ac e9 cf 9f 3f ec 05 56 18 1b 03 63 63 60 0c 8c 8d 81 b1 31 30 06 c6 c6 c0 d8 18 18 03 63 63 60 6c d5 8c c7 12 eb 0d 18 bb 80 4c 6e b8 c5 62 51 fc 51 fc cc c0 dc a2 15 08 Data Ascii: PNGIHDRh$utEXtSoftwareAdobe ImageReadyqe<IDATxO_w-ZPcb0%1jQZ/-BA#XHL#kg#vj[nwf3s-V?]c`l&?Vcc`10cc`lLnbQQ
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: b3 80 84 ee 73 a9 54 52 4a 12 79 7c 41 9f b7 a8 26 44 0b 48 7d ec c3 91 cd ce a6 37 f4 85 0d 69 13 36 b8 9b 3a 55 81 ef c5 01 9a e1 3b 10 02 72 11 fa 72 49 ab 60 65 07 66 18 33 70 3a 7a f4 a8 46 19 08 86 61 3d 33 44 bf aa 8b 3e f5 0c aa 6e 6d 6e 5c 60 81 d8 e0 74 94 67 1a 71 40 5b fe 31 ad c0 44 15 fd ea fe cd b8 f2 8e d8 82 93 d6 64 8b 96 22 11 3d 2d 54 22 a8 c8 95 9e 59 c2 44 15 b8 e9 cf 59 4e 16 ca 7a cd 50 93 9e 56 c1 1b 69 a4 ea 11 87 81 53 5b 5b 5b b9 5c 4e b7 ac f0 a3 72 f3 19 41 d6 80 91 3b 00 00 79 4b 4f 8b e4 05 3c a8 21 b7 6f df 4e a3 f2 28 26 13 f6 dc 03 ff 1b b8 d1 af d1 43 a2 9c 3c f4 55 06 19 52 17 1d 86 82 7e 69 69 29 f6 48 79 4d 8f 16 70 f0 a1 45 f6 ab 44 ea 2f 57 3d 1e 84 d0 b9 8e 38 6c 98 62 ed ea 26 b3 26 f3 f2 12 a9 6b 6c 6c ac ea f1 Data Ascii: sTRJy\|A&DH}7i6:U;rrI`ef3p:zFa=3D>nmn\`tgq@[1Dd"=-T"YDYNzPViS[[[\NrA;yKO<!oN(&C<UR~ii)HyMpED/W=8lb&&kll
2023-12-05 18:13:56 UTC	390	IN	Data Raw: 34 d6 39 79 f9 f2 a5 79 79 15 ac cf 38 9f 3f 7f 3e f6 88 b0 45 43 5f c2 0a 2d fb 0a a3 64 86 8e 0e aa f3 7a a1 85 16 36 37 37 67 eb ea f6 d7 74 20 bc 4c 4c 4c 38 b2 d5 20 ca dd de bb 77 cf e2 0d ac 73 a4 cd 3e 7e fc b8 2e 98 81 96 ad 60 e8 10 b0 82 37 a5 04 66 76 7d 51 d5 ae 5f bf 6e 72 26 c5 69 60 c4 0c a5 97 b3 35 08 68 25 1f 51 cb 15 30 ca 10 c8 e7 2e f8 c5 4d 5a 4e 54 89 61 7d ea 73 e7 ce b9 f0 0d a7 54 65 58 8f 84 8e 2a 4c 58 77 77 f7 c2 c2 42 8a eb 9c e2 19 38 21 4a bb 43 cb 5d 85 09 ab 54 2a e3 e3 e3 b1 9f 17 91 44 58 43 43 43 e8 20 bb e6 10 d7 81 91 cd ce ce 4e 4e 4e c6 7e 08 41 ad d6 d7 d7 27 af 8c 73 0b d8 b7 6f df ea 65 88 01 3a 03 b6 b7 6f df 66 a7 aa ae ae 2e a0 f2 0f 16 33 b0 f8 86 4a e4 c5 8b 17 c0 96 62 9c 44 5f 02 d1 0f b4 dc ef bc d7 1f Data Ascii: 49yyy8?>EC_-dz677gt LLL8 ws>~.`7fv}Q_nr&i`5h%Q0.MZNTa}sTeXLXwwB8!JC]TDXCCC NNN~A'soe:of.3JbD_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50409	172.253.115.99	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	983	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:13:56 UTC	847	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 45 6d 62 65 64 64 65 72 2d 50 6f 6c 69 63 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 72 65 63 61 70 74 63 68 61 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 72 65 70 6f 72 74 2d 74 Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=utf-8Cross-Origin-Resource-Policy: cross-originCross-Origin-Embedder-Policy: require-corpReport-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-t
2023-12-05 18:13:56 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4e 52 4f 74 75 35 78 33 65 38 53 30 66 61 6e 37 61 71 4d 43 47 67 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="NROtu5x3e8S0fan7aqMCGg">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2023-12-05 18:13:56 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2023-12-05 18:13:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50411	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	2199	OUT	GET /vi-assets/static-assets/apple-touch-icon-dark-f74e69bf6dae735169854a4126cebf8c.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:56 UTC	1344	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 34 32 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 73 48 66 44 75 73 6f 41 4b 39 55 74 35 59 57 31 33 4d 4b 75 76 4b 2d 4d 58 58 5a 49 79 79 41 38 42 50 75 6a 61 4d 59 41 64 76 50 76 55 62 6a 30 5a 32 4f 4c 73 69 68 52 52 4d 76 32 68 63 4a 36 41 62 72 78 35 50 41 48 6a 70 75 4d 48 57 6c 37 64 73 52 48 65 41 48 61 46 59 6a 37 59 4c 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 38 39 30 30 32 36 31 36 33 35 39 35 32 38 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 2424X-GUploader-UploadID: ADPycdsHfDusoAK9Ut5YW13MKuvK-MXXZIyyA8BPujaMYAdvPvUbj0Z2OLsihRRMv2hcJ6Abrx5PAHjpuMHWl7dsRHeAHaFYj7YLx-goog-generation: 1689002616359528x-goog-metageneration: 1x-goog-sto
2023-12-05 18:13:56 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 00 00 00 00 c2 2d bd 64 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 00 07 74 49 4d 45 07 e3 07 05 15 34 31 29 e3 7d f8 00 00 08 30 49 44 41 54 78 da ed 9b 3f 6c dc d6 19 c0 7f af 09 6a 14 ad 69 b4 45 a6 10 e8 7c 5c 9a 29 77 46 e1 3f 43 ee 52 c0 b0 87 9e 84 26 6a 86 9c 0a 44 c9 62 d9 ad a4 0c b5 db 22 e9 94 73 50 59 4b 23 04 90 b4 54 76 a0 3b 2d 8e 51 58 f2 92 d6 a8 79 63 06 93 5b 97 52 53 27 53 53 a6 d7 81 bc 3b f2 8e 3c 7e 8f 3e c1 1a ee 03 04 1d 1f 3f 92 3f 7e ef 7b df fb de f7 ee d4 0f 38 5d f2 bd Data Ascii: PNGIHDR-dgAMAa cHRMz&u0`:pQ<bKGDtIME41)}0IDATx?ljiE\|\)wF?CR&jDb"sPYK#Tv;-QXyc[RS'SS;<~>??~{8]
2023-12-05 18:13:56 UTC	1045	IN	Data Raw: 38 ca 14 54 c7 5b 75 6e 65 a5 77 38 d6 14 a5 06 d3 02 d2 3a ab a0 97 ef 15 e1 52 77 a4 c5 5b f0 e5 7d 26 ea b2 4a 06 e6 84 e2 d3 6a d8 4a f3 84 d3 0e 8c a6 25 cf 4f 57 13 07 ee 82 78 5d 2f 05 32 af 51 77 57 07 10 dd 85 10 93 48 2d a9 31 8e 01 59 51 fe 95 b9 71 1f a5 65 fb 7e 3c f6 bb 6b 4a 0f 77 60 a7 64 a1 31 71 14 79 6e 1d 65 41 4a fb 51 47 ad ad 0d 14 85 4c a5 80 ac 68 be cc 8e d5 3a fa 96 85 7f c9 87 b5 2e 44 93 ed 54 d7 f6 63 52 89 bb 2c e7 a5 a3 a5 fd f3 85 60 ad 1b 03 c6 30 f5 e2 d2 5f 31 50 a6 a3 54 89 2c 34 a9 1b 54 78 14 44 37 18 c8 a2 a0 00 5f 08 94 f9 d0 8a 46 e5 24 20 83 e2 8b 8e 6d 35 7c 1f a7 3a 95 1a 63 16 51 43 a1 73 bc a2 af 3d 5e ad a5 25 71 ec 72 df 41 ab 9e d5 4a 65 7f 5d 47 e7 7e aa 35 8b 6e 2b 05 ca 48 e9 9b 0a 9d 19 5d 74 ce 67 60 Data Ascii: 8T[unew8:Rw[}&JjJ%OWx]/2QwWH-1YQqe~<kJw`d1qyneAJQGLh:.DTcR,`0_1PT,4TxD7_F$ m5\|:cQCs=^%qrAJe]G~5n+H]tg`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50410	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	2214	OUT	GET /vi-assets/static-assets/ask-c408ff9a5a264659800d.js?_sw-precache=789f6d5a3fb3a851b4f4e9ccc16e8b02 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:56 UTC	1321	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 36 34 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 41 6e 74 32 54 71 4f 55 45 4b 32 49 5f 59 65 66 4d 6c 44 4e 4a 4c 43 42 59 75 2d 58 73 30 4b 4b 48 7a 59 65 53 4c 38 56 31 74 39 47 74 34 74 4c 46 6c 4d 6f 6d 47 30 48 77 48 4c 38 78 35 63 31 30 72 4a 79 51 46 67 36 39 50 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 35 32 31 31 36 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 29645X-GUploader-UploadID: ABPtcPqAnt2TqOUEK2I_YefMlDNJLCBYu-Xs0KKHzYeSL8V1t9Gt4tLFlMomG0HwHL8x5c10rJyQFg69PAx-goog-generation: 1701369734521160x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:56 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 5d 2c 7b 22 35 75 67 64 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 6f 28 22 54 71 52 74 22 29 2c 61 3d 6f 28 22 63 44 66 35 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 6e 28 6f 28 22 6c 77 73 45 22 29 29 2c 72 3d 6e 28 6f 28 22 57 38 4d 4a 22 29 29 2c 73 3d 6e 28 6f 28 22 37 57 32 69 22 29 29 2c 6c 3d 6e 28 6f 28 22 61 31 67 75 22 29 29 2c 63 3d 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[46],{"5ugd":function(t,e,o){"use strict";var n=o("TqRt"),a=o("cDf5");Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var i=n(o("lwsE")),r=n(o("W8MJ")),s=n(o("7W2i")),l=n(o("a1gu")),c=n
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 3b 72 65 74 75 72 6e 28 30 2c 6c 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 6f 29 7d 7d 64 2e 64 65 66 61 75 6c 74 2e 66 75 6e 63 2c 64 2e 64 65 66 61 75 6c 74 2e 6e 6f 64 65 2c 64 2e 64 65 66 61 75 6c 74 2e 73 74 72 69 6e 67 2c 64 2e 64 65 66 61 75 6c 74 2e 73 68 61 70 65 2c 64 2e 64 65 66 61 75 6c 74 2e 62 6f 6f 6c 3b 76 61 72 20 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 6f 2c 74 29 3b 76 61 72 20 65 3d 78 28 6f 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 74 3b 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 6f 29 3b 66 6f 72 28 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 61 5b 72 5d Data Ascii: ;return(0,l.default)(this,o)}}d.default.func,d.default.node,d.default.string,d.default.shape,d.default.bool;var w=function(t){(0,s.default)(o,t);var e=x(o);function o(){var t;(0,i.default)(this,o);for(var n=arguments.length,a=new Array(n),r=0;r<n;r++)a[r]
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 65 72 6c 61 79 43 6c 69 63 6b 3a 76 2c 73 68 6f 75 6c 64 43 6c 6f 73 65 4f 6e 45 73 63 3a 62 2c 73 68 6f 75 6c 64 52 65 74 75 72 6e 46 6f 63 75 73 41 66 74 65 72 43 6c 6f 73 65 3a 79 2c 61 72 69 61 3a 78 2c 6f 76 65 72 6c 61 79 52 65 66 3a 77 2c 63 6f 6e 74 65 6e 74 52 65 66 3a 6b 2c 61 72 69 61 48 69 64 65 41 70 70 3a 21 30 7d 2c 65 2c 75 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 75 74 74 6f 6e 22 2c 7b 74 79 70 65 3a 22 62 75 74 74 6f 6e 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 70 2e 63 78 29 28 67 2e 64 69 73 6d 69 73 73 43 6c 61 73 73 2c 73 29 2c 6f 6e 43 6c 69 63 6b 3a 6e 7d 2c 75 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 67 2e 64 69 73 6d 69 Data Ascii: erlayClick:v,shouldCloseOnEsc:b,shouldReturnFocusAfterClose:y,aria:x,overlayRef:w,contentRef:k,ariaHideApp:!0},e,u.default.createElement("button",{type:"button",className:(0,p.cx)(g.dismissClass,s),onClick:n},u.default.createElement("i",{className:g.dismi
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 69 73 69 6e 67 50 72 6f 70 65 72 74 69 65 73 2e 73 65 6e 73 69 74 69 76 69 74 79 3f 74 2e 61 64 76 65 72 74 69 73 69 6e 67 50 72 6f 70 65 72 74 69 65 73 2e 73 65 6e 73 69 74 69 76 69 74 79 3a 22 53 48 4f 57 5f 41 44 53 22 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6f 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 65 2e 63 72 65 61 74 6f 72 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 65 6e 67 74 68 29 3e 30 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: isingProperties.sensitivity?t.advertisingProperties.sensitivity:"SHOW_ADS"},r=function(t){var e,o;return(null==t\|\|null===(e=t[0])\|\|void 0===e\|\|null===(o=e.creators)\|\|void 0===o?void 0:o.length)>0},s=function(){var t=arguments.length>0&&void 0!==arguments[
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 69 2e 77 69 64 74 68 2c 22 77 22 29 29 7d 72 65 74 75 72 6e 20 6f 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 74 3b 69 66 28 74 2e 70 72 6f 6d 6f 74 69 6f 6e 61 6c 4d 65 64 69 61 26 26 28 65 3d 74 2e 70 72 6f 6d 6f 74 69 6f 6e 61 6c 4d 65 64 69 61 29 2c 21 65 2e 63 72 6f 70 73 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 63 28 65 2c 5b 22 6a 75 6d 62 6f 22 5d 29 3b 72 65 74 75 72 6e 21 21 6f 26 26 6f 2e 68 65 69 67 68 74 3e 6f 2e 77 69 64 74 68 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 74 5b 30 5d 2e 63 72 65 61 74 6f 72 73 3b 69 66 28 21 65 7c Data Ascii: i.width,"w"))}return o.join(", ")},p=function(t){if(!t)return!1;var e=t;if(t.promotionalMedia&&(e=t.promotionalMedia),!e.crops)return!1;var o=c(e,["jumbo"]);return!!o&&o.height>o.width},f=function(t){if(!t\|\|0===t.length)return!1;var e=t[0].creators;if(!e\|
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 73 57 69 74 68 28 22 65 73 22 29 26 26 6e 26 26 21 79 2e 69 6e 63 6c 75 64 65 73 28 6e 29 29 7b 76 61 72 20 6c 3d 22 70 72 64 22 3d 3d 3d 76 69 2e 65 6e 76 2e 45 4e 56 49 52 4f 4e 4d 45 4e 54 3f 22 70 72 64 22 3a 22 73 74 67 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 22 70 72 64 22 3d 3d 3d 6c 3f 22 68 74 74 70 73 3a 2f 2f 72 73 73 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 22 3a 22 68 74 74 70 73 3a 2f 2f 72 73 73 2e 73 74 67 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 22 2c 22 73 65 72 76 69 63 65 73 2f 78 6d 6c 2f 72 73 73 2f 6e 79 74 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 72 65 70 6c 61 63 65 28 22 65 73 70 61 6e 6f 6c 22 2c 22 65 73 22 29 2c 22 2e 78 6d 6c 22 29 7d 69 66 28 21 73 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 63 3d 73 2e 73 70 6c 69 74 Data Ascii: sWith("es")&&n&&!y.includes(n)){var l="prd"===vi.env.ENVIRONMENT?"prd":"stg";return"".concat("prd"===l?"https://rss.nytimes.com/":"https://rss.stg.nytimes.com/","services/xml/rss/nyt/").concat(n.replace("espanol","es"),".xml")}if(!s)return"";var c=s.split
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 65 61 6b 70 6f 69 6e 74 2e 73 6d 61 6c 6c 2c 22 7b 77 69 64 74 68 3a 34 35 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 3b 72 69 67 68 74 3a 75 6e 73 65 74 3b 62 6f 74 74 6f 6d 3a 75 6e 73 65 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 75 6e 73 65 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 30 20 38 70 78 20 30 3b 7d 22 29 2c 49 3d 4f 62 6a 65 63 74 28 42 2e 63 73 73 29 28 22 70 6f 73 69 74 69 6f 6e 3a 61 62 Data Ascii: eakpoint.small,"{width:450px;left:50%;top:50%;border-radius:3px;box-shadow:0 0 8px rgba(0,0,0,0.2);right:unset;bottom:unset;transform:translate(-50%,-50%);margin:0 auto;overflow:unset;position:absolute;padding:16px 0 8px 0;}"),I=Object(B.css)("position:ab
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 2e 39 2e 31 35 2d 2e 31 31 20 38 2e 30 37 2d 34 2e 36 33 68 2e 30 36 6c 2e 31 38 2d 2e 31 35 2e 35 31 2d 2e 36 2e 34 31 20 31 2e 31 39 61 33 2e 32 39 20 33 2e 32 39 20 30 20 30 20 30 20 33 2e 31 36 20 32 2e 33 33 20 33 2e 34 38 20 33 2e 34 38 20 30 20 30 20 30 20 31 2d 2e 31 35 20 37 2e 34 37 20 37 2e 34 37 20 30 20 30 20 30 20 34 2e 33 31 2d 33 2e 36 41 33 2e 32 36 20 33 2e 32 36 20 30 20 30 20 30 20 33 35 2e 39 32 20 35 39 61 33 2e 33 20 33 2e 33 20 30 20 30 20 30 20 31 2e 35 33 2e 33 38 20 33 2e 31 38 20 33 2e 31 38 20 30 20 30 20 30 20 31 2d 2e 31 36 20 37 2e 35 34 20 37 2e 35 34 20 30 20 30 20 30 20 34 2e 35 35 2d 34 63 32 2e 38 38 2e 30 39 20 35 2e 39 31 2e 31 35 20 38 2e 36 36 2e 31 35 73 35 2e 33 39 2d 2e 30 37 20 37 2e 30 39 2d 2e 32 36 61 38 39 Data Ascii: .9.15-.11 8.07-4.63h.06l.18-.15.51-.6.41 1.19a3.29 3.29 0 0 0 3.16 2.33 3.48 3.48 0 0 0 1-.15 7.47 7.47 0 0 0 4.31-3.6A3.26 3.26 0 0 0 35.92 59a3.3 3.3 0 0 0 1.53.38 3.18 3.18 0 0 0 1-.16 7.54 7.54 0 0 0 4.55-4c2.88.09 5.91.15 8.66.15s5.39-.07 7.09-.26a89

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50413	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	2192	OUT	GET /vi-assets/static-assets/athletic-image-48c84c9ba0e2ed07e6178913f3916ac8.jpg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:56 UTC	1320	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 35 39 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 69 43 47 39 77 72 72 58 6e 45 77 31 78 7a 4d 51 6d 42 52 57 6d 51 56 31 71 38 79 4a 62 43 56 68 59 4c 71 78 45 67 4a 64 72 35 6a 47 46 55 5a 72 62 5a 79 78 54 37 2d 34 36 68 4c 4f 55 57 57 44 71 52 6d 74 32 53 4b 73 7a 6d 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 31 39 36 34 37 35 39 31 39 37 30 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 32599X-GUploader-UploadID: ABPtcPoiCG9wrrXnEw1xzMQmBRWmQV1q8yJbCVhYLqxEgJdr5jGFUZrbZyxT7-46hLOUWWDqRmt2SKszmgx-goog-generation: 1701196475919706x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:13:56 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 38 01 38 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 05 06 07 08 03 02 09 ff c4 00 5e 10 00 01 03 03 02 03 04 05 04 0b 0a 0b 05 06 07 00 01 02 03 04 00 05 11 06 21 12 31 41 07 13 51 61 08 14 22 71 81 32 42 91 92 15 Data Ascii: JFIF,,CC88^!1AQa"q2B
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 0f 32 2e 22 43 5c 11 78 49 e6 4f 3a a1 a6 8c 95 25 21 2c d5 88 30 5d 99 31 f6 d9 69 29 cf 11 38 a7 19 4a f6 42 96 d4 ae ca fe eb 29 ed 44 10 ec 09 d2 03 2a c8 e1 6c e3 3e 75 97 4e 4a 0f cc 6b aa c5 d4 f3 41 e0 62 72 d9 19 97 55 1d cb a1 43 a3 a3 c7 38 ac d8 ca 32 e0 c0 9a 71 76 6c eb 0b 4e 48 79 61 49 b9 b6 f0 27 a1 ab f0 25 16 3d 2d 9b 66 9b 88 24 5d 25 25 25 47 ee 48 48 ca dd 3e 09 4f 33 f9 2a 37 be 10 da 8c 15 e4 23 6d fb c5 fa 53 7d eb 0b 87 6f 2b 49 ee 01 f6 97 bf 35 9f ee a2 11 b6 59 0d ce a6 38 47 c5 31 5c c3 3a 00 cf 2c 50 35 8c 84 31 ce 9e db 0a f7 06 76 a0 01 ef a4 f2 27 76 19 e5 4f b5 82 c1 01 9a 49 58 60 f2 35 20 0b 1c a9 07 20 03 7a 90 1e b2 2a 2d d8 02 dc 72 a0 01 ee a6 98 30 52 00 60 92 0e 71 51 7c 85 fd 81 9e 95 20 3c e3 73 47 19 00 c0 a2 Data Ascii: 2."C\xIO:%!,0]1i)8JB)Dl>uNJkAbrUC82qvlNHyaI'%=-f$]%%%GHH>O37#mS}o+I5Y8G1\:,P51v'vOIX`5 z*-r0R`qQ\| <sG
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 31 d8 3f 8d 24 2b 83 60 77 a6 3b 5c 23 cb 26 93 0e d6 0f 9f 88 a6 2b 80 ed b6 31 40 c2 1c e8 0b 07 f1 a0 01 ca 80 25 1a 5f b3 1d 6f ac f4 fd f3 55 69 db 1b b2 ed 7a 75 b4 b9 3e 42 54 90 1b e2 50 01 29 04 e5 6a f6 81 e1 48 24 03 93 81 49 bb 11 72 4b 0c 90 e8 cf 47 be d2 b5 bd 8e e5 a8 20 5b 59 81 1e de d2 9c 6d 17 25 aa 33 93 4a 46 54 88 e9 29 f6 d5 8f 1c 02 48 00 93 b5 46 53 db 62 e8 43 c4 4d a6 95 bd a4 76 df d9 87 68 97 49 9e a1 0b 44 de 54 f8 e6 85 c4 5b 78 f7 95 80 07 c4 d5 8e cb b9 4e f8 f3 73 43 f6 2f e8 c3 73 85 05 5a 83 b4 6b 83 a9 88 db a9 4f d8 78 4a 0a 5f 12 b9 77 af 0c a5 b0 7c 11 92 7e f8 1a 4b 56 a8 f7 31 6a c1 55 77 48 bd f5 6e ab d5 76 fb 42 ed 8d 88 d6 7b 1d ad b0 c3 31 a2 36 90 c8 00 60 24 71 02 73 8f 1d eb 1e 35 9c a4 dc 79 64 dc e5 18 Data Ascii: 1?$+`w;\#&+1@%_oUizu>BTP)jH$IrKG [Ym%3JFT)HFSbCMvhIDT[xNsC/sZkOxJ_w\|~KV1jUwHnvB{16`$qs5yd
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: a5 0f 32 76 29 8d aa 4a e5 b7 7c 52 b4 9d a2 e9 3e 5c e5 28 15 ab d4 90 b0 0f 00 03 73 e6 2a fa 1e 23 76 b9 65 67 18 47 73 29 09 dd b9 ea bb 45 be 34 d9 1a 7e dd 73 93 3a 6f ab c3 8c ca 9c 61 6a 6d 20 95 ba b5 1e 30 02 53 bf c9 df 95 6c a3 b9 2c 9a a7 59 4b 20 b2 7a 47 5a ee 8a 3f 65 34 05 e2 32 42 8a 7b c6 82 1e 4e 3c 7d ae 05 0f 1e 55 74 64 d7 05 0e b4 7b 92 b8 fd b7 f6 66 53 dd c9 9f 3e 1a 92 9c 90 e4 09 04 01 e2 4a 52 a4 81 53 4e e3 55 60 3c da 3b 52 ec de ed 2a 3b 76 cd 7f 63 75 d5 a9 24 32 a9 8c a5 64 13 b7 b2 a2 15 53 e4 7b e3 ca 67 c3 dc 63 7c f2 ae 7a c6 da e0 db 39 34 86 1e 7c 48 a1 e1 80 44 63 71 4a e0 d0 39 d4 ac 00 c8 f0 a1 44 03 23 ce 85 80 0b 07 9e 69 be 01 20 73 38 a8 27 71 b0 c9 db 02 98 82 1e 23 f2 50 00 14 00 28 00 81 07 20 1c 11 d2 81 Data Ascii: 2v)J\|R>\(s#vegGs)E4~s:oajm 0Sl,YK zGZ?e42B{N<}Utd{fS>JRSNU`<;R;vcu$2dS{gc\|z94\|HDcqJ9D#i s8'q#P(
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: a7 b5 2d 9a 3c b5 b0 e4 c1 97 56 d8 0a 2a 6b 8c 07 53 95 92 7e 41 56 e0 0e 43 15 54 d2 75 21 39 03 23 1a 37 54 db 6d d6 bb ed be e5 60 4b 6c cd 8f 1d 08 8c a9 25 19 6d 1b 02 94 94 10 bd b8 94 54 0a 55 95 1f 95 ca b6 93 8a fb 51 e7 da 42 39 c1 3f d1 7f 67 bb 2b 6e e5 a3 9c b9 cd 91 06 e9 2a 34 8d 37 71 44 b7 9b 31 5f 19 e2 67 8d b3 84 2b bb 2a 20 64 07 08 41 04 a4 00 23 55 2a a9 4e d6 7d ff 00 ec d9 50 d6 7e 8f 46 74 64 af bb fd 8d 4b e8 65 ab 75 27 6b 3d a2 3b a8 2e 41 7f 62 2c 0d aa 54 b5 ba f2 94 5b 98 5a 4b 2d 34 91 c2 12 13 c2 1e 70 ee 49 2e 0c f2 04 df a5 a3 e7 5d ec 60 c3 2e e6 ab d6 3a d8 b0 95 c5 80 ee 0e e3 89 35 d1 69 f4 ee 4e f2 46 36 ab 55 b7 cb 16 57 91 11 2f 50 4e 5b 25 4a 28 07 2e ba 7a 79 0f 33 59 7a ad 4c 74 54 ef df b1 8d a3 d2 4f a8 55 Data Ascii: -<VkS~AVCTu!9#7Tm`Kl%mTUQB9?g+n47qD1_g+* dA#U*N}P~FtdKeu'k=;.Ab,T[ZK-4pI.]`.:5iNF6UW/PN[%J(.zy3YzLtTOU
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 5a e3 3e e4 dc fb 86 ac 7e 1b 0d 90 7d 5e 30 e3 52 88 eb c4 ac e0 ff 00 67 e3 52 8a 95 f2 c8 38 ab 93 c8 b6 8b 4d 86 12 5e 7d d7 9d 6d 9c 1f 58 9e ff 00 17 09 f1 ca d5 b1 f7 01 56 5a 2b 2c 71 85 f0 90 db 77 ed 22 c5 6d ca 5e 5c 87 d0 47 ca 66 1a dc 6c ff 00 68 0c 1f a6 97 8b 0e cc b2 54 a7 6b d8 81 cf ed 87 b3 a3 30 a1 f9 aa 80 54 48 2a 54 57 90 df 99 51 e1 28 48 f3 24 56 5d 0a d1 58 b9 81 56 9b 7c 0f 36 99 f6 8b c2 18 b8 5a 2e 10 e6 c5 71 43 81 e8 cf 25 c4 9d fa 14 9c 56 c9 54 4e d6 30 64 92 3e 09 0a e7 cd 90 7b 0a 01 60 18 f7 6f 52 6d 76 00 63 1d 2a 36 0b 80 62 8e 45 c7 20 eb 40 c0 68 40 c1 83 4f 00 1e 08 e5 48 2f ed 3c f0 e0 e7 26 86 00 3c ce 2a 37 63 41 8f 3a 90 81 f1 a0 76 0b 19 dc 50 9f 71 1e 80 db ce 9d c0 20 02 4f 3a 40 80 71 45 80 2c 63 e9 a4 b0 Data Ascii: Z>~}^0RgR8M^}mXVZ+,qw"m^\GflhTk0THTWQ(H$V]XV\|6Z.qC%VTN0d>{`oRmvc6bE @h@OH/<&<*7cA:vPq O:@qE,c
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: bf 6a 34 46 a2 83 64 9a d3 53 58 4a 81 cf 18 7d b1 c4 a6 cf 34 af 6d ca 7c c5 6f e1 55 35 94 71 b2 83 be 51 18 99 07 56 c9 64 be d4 f9 37 18 4f 1e 50 5e d9 cf 7a 91 b9 f7 1a bb 62 6a e8 ad de 3c 8c 22 d7 78 65 0a 7d 16 65 42 60 1f 6b 89 05 04 fb d4 b3 92 7d d5 53 8b ee 09 dc bd 3b 09 b3 a6 db 6e b9 6a 19 89 c1 e1 09 f6 ba 24 0e 2a 86 dd b9 32 28 b5 66 c8 a5 ff 00 52 b5 23 49 ea 8b 7c a7 94 1d 96 b7 df 42 c6 d8 42 9b 20 1f 78 26 b0 aa 3b 46 49 84 aa a4 9b 64 e7 b0 4d 49 67 d2 de 8f 36 0d 49 7e b8 29 0c 16 4b ae 28 24 ad c7 1d 52 b0 1b 42 46 eb 59 3b 00 37 35 99 a5 94 69 d1 4d f0 2a 33 55 a2 a5 1e e4 a5 9b fe ad bd 93 3a 5a 05 96 13 83 2c 42 47 b5 25 49 f1 79 ce 49 27 ef 11 8c 75 51 aa aa 6a 65 2f b3 84 6d 68 69 63 6f 3e 4e 81 41 b0 70 0e 54 72 49 39 24 f8 Data Ascii: j4FdSXJ}4m\|oU5qQVd7OP^zbj<"xe}eB`k}S;nj$2(fR#I\|BB x&;FIdMIg6I~)K($RBFY;75iM3U:Z,BG%IyI'uQje/mhico>NApTrI9$
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: b5 41 ae 74 e9 d3 9a e1 4d 35 ab 2d b1 f2 a4 a5 ce 2f 5d 64 6c 1c ce 31 c6 9d 82 80 db a8 ad d6 87 56 aa c7 c3 7c a3 8c 86 ba 86 ae b4 95 1e 3b 17 9a 27 59 b4 5d ba 56 a4 bc 4e 8d 02 1b 51 54 e7 ac 48 50 4a 10 ac 6c 0f 8e fd 07 3a cd ab 24 a3 76 64 b9 46 92 72 93 b2 30 9f a4 df 6d b1 fb 5c d4 cc 31 67 91 24 d9 6d 51 53 19 92 ee 53 eb 0e 64 95 ba 53 e6 49 c6 77 c5 68 b5 35 15 4a 98 e1 1c c7 51 d6 3d 4d 5f 2b f2 a2 8e 42 78 14 90 53 8d ea a3 07 b1 f4 07 d0 6e e0 b9 5d 90 ca 80 a1 b5 be ea f2 52 af 10 b0 17 f8 b3 52 a1 25 2b db b1 dc 7a 37 2b e9 1a fc 4d 02 f9 1c 25 23 3b 1a b5 f0 74 70 76 62 27 1d 4b 49 29 51 18 3d 4d 57 6b 19 ab 39 2a ed 6f 77 71 a9 12 14 54 92 da 46 00 07 f2 d6 1d 44 dc b0 65 29 28 46 e6 65 ed 0a e6 f5 d7 51 bb 1b be 01 8c 24 a7 84 e4 24 Data Ascii: AtM5-/]dl1V\|;'Y]VNQTHPJl:$vdFr0m\1g$mQSSdSIwh5JQ=M_+BxSn]RR%+z7+M%#;tpvb'KI)Q=MWk9*owqTFDe)(FeQ$$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50414	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	1454	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 505 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad
2023-12-05 18:13:56 UTC	505	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 63 6f 6e 74 65 78 74 5f 69 64 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 74 6f 5f 6d 61 6b 65 5f 74 65 73 74 5f 63 6f 6e 74 65 78 74 5f 69 64 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 4c 69 58 5f 48 47 43 78 35 31 39 37 4d 5f 58 71 53 4c 77 42 63 31 68 71 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 61 74 69 76 65 5f 61 70 70 5f 61 64 73 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 Data Ascii: [{"context_id":"context_id_placeholder_to_make_test_context_id","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"LiX_HGCx5197M_XqSLwBc1hq","client_lib":"v1.3.0","sourceApp":"native_app_ads","subject":"dfp-ad-events","how":"beacon","client_ts":17018000
2023-12-05 18:13:56 UTC	758	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 35 36 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 41 63 74 69 76 65 3d 74 72 75 65 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 65 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 Data Ascii: HTTP/1.1 200 OKset-cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; Path=/; Domain=nytimes.com; Expires=Wed, 04 Dec 2024 18:13:56 GMT; Max-Age=31536000; Secure; SameSite=Noneset-cookie: sessionActive=true; Path=/; Domain=et.nytimes.com; Expires=Tue, 05 Dec 2023
2023-12-05 18:13:56 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50416	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	2191	OUT	GET /vi-assets/static-assets/athletic-logo-8898f51e86f8fcda54cf9db8031db0d8.svg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:56 UTC	1327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 31 36 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 33 61 72 48 58 54 42 75 54 30 44 65 57 49 71 30 36 4e 35 32 73 4e 45 44 71 65 67 47 73 4a 33 42 74 4a 31 6a 7a 64 54 58 56 44 6e 6b 38 71 41 73 6e 79 50 51 36 6a 49 61 47 4d 38 41 37 2d 6a 42 68 64 58 34 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 30 34 39 37 38 33 33 35 31 30 37 31 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4164X-GUploader-UploadID: ABPtcPp3arHXTBuT0DeWIq06N52sNEDqegGsJ3BtJ1jzdTXVDnk8qAsnyPQ6jIaGM8A7-jBhdX4x-goog-generation: 1700497833510712x-goog-metageneration: 1x-goog-stored-content-encoding: ide
2023-12-05 18:13:56 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 30 22 20 68 65 69 67 68 74 3d 22 34 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 36 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 38 32 5f 32 35 36 35 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 36 2e 35 35 36 20 32 31 2e 39 35 38 32 43 35 36 2e 38 36 37 37 20 32 34 2e 32 37 33 38 20 35 38 2e 36 36 34 39 20 32 36 2e 33 35 37 38 20 36 31 2e 32 37 31 33 20 32 36 2e 33 35 37 38 43 36 32 2e 39 37 39 20 32 36 2e 33 35 37 38 20 36 34 2e 35 39 33 38 20 32 35 2e 36 33 32 39 20 36 35 2e 34 30 32 39 20 32 34 2e 32 32 33 34 4c Data Ascii: <svg width="350" height="49" viewBox="0 0 226 32" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_182_2565)"><path d="M56.556 21.9582C56.8677 24.2738 58.6649 26.3578 61.2713 26.3578C62.979 26.3578 64.5938 25.6329 65.4029 24.2234L
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 39 37 33 56 31 38 2e 32 39 33 34 43 34 31 2e 36 39 37 33 20 31 35 2e 36 35 39 20 34 30 2e 30 33 36 20 31 34 2e 35 36 38 33 20 33 38 2e 31 39 35 37 20 31 34 2e 35 36 38 33 43 33 36 2e 34 38 38 20 31 34 2e 35 36 38 33 20 33 34 2e 39 36 32 36 20 31 35 2e 35 32 31 34 20 33 33 2e 38 34 31 39 20 31 36 2e 39 32 34 32 56 32 36 2e 31 32 36 32 48 33 36 2e 33 35 38 37 56 33 30 2e 38 35 31 34 48 32 35 2e 39 34 48 32 35 2e 39 33 36 36 5a 22 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 31 2e 37 30 34 20 33 30 2e 38 35 31 34 56 32 36 2e 31 32 36 32 48 31 32 33 2e 37 37 56 35 2e 38 39 33 31 35 48 31 32 31 2e 37 30 34 56 31 2e 31 36 37 39 37 48 31 32 39 2e 35 31 33 56 31 30 2e 34 33 37 31 43 31 32 39 2e 35 31 33 20 31 31 2e 31 36 35 Data Ascii: 973V18.2934C41.6973 15.659 40.036 14.5683 38.1957 14.5683C36.488 14.5683 34.9626 15.5214 33.8419 16.9242V26.1262H36.3587V30.8514H25.94H25.9366Z" fill="black"/><path d="M121.704 30.8514V26.1262H123.77V5.89315H121.704V1.16797H129.513V10.4371C129.513 11.165
2023-12-05 18:13:56 UTC	1379	IN	Data Raw: 2e 36 34 39 37 20 31 35 33 2e 37 39 33 20 32 36 2e 31 32 32 39 20 31 35 34 2e 33 37 20 32 36 2e 31 32 32 39 48 31 35 35 2e 34 39 56 33 30 2e 38 34 38 48 31 35 30 2e 36 33 33 43 31 34 38 2e 38 39 35 20 33 30 2e 38 34 34 37 20 31 34 37 2e 34 38 39 20 32 39 2e 34 31 38 34 20 31 34 37 2e 34 39 32 20 32 37 2e 36 35 39 39 56 35 2e 38 39 33 31 36 5a 22 20 66 69 6c 6c 3d 22 62 6c 61 63 6b 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 39 33 2e 33 36 35 20 33 30 2e 38 35 31 33 56 32 36 2e 31 32 36 31 48 31 39 35 2e 38 37 39 56 31 34 2e 33 34 33 34 48 31 39 33 2e 33 36 35 56 39 2e 36 31 34 38 32 48 32 30 31 2e 37 31 35 56 32 36 2e 31 32 36 31 48 32 30 34 2e 32 32 38 56 33 30 2e 38 35 31 33 48 31 39 33 2e 33 36 32 48 31 39 33 2e 33 36 35 5a 4d 31 39 38 2e 35 32 38 20 Data Ascii: .6497 153.793 26.1229 154.37 26.1229H155.49V30.848H150.633C148.895 30.8447 147.489 29.4184 147.492 27.6599V5.89316Z" fill="black"/><path d="M193.365 30.8513V26.1261H195.879V14.3434H193.365V9.61482H201.715V26.1261H204.228V30.8513H193.362H193.365ZM198.528
2023-12-05 18:13:56 UTC	27	IN	Data Raw: 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: </clipPath></defs></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50417	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:56 UTC	2190	OUT	GET /vi-assets/static-assets/athletic_app-0178f6b583ae0f075961296ff3dc87a3.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:57 UTC	1337	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 37 35 39 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 43 4f 45 59 46 30 73 54 6a 76 71 4b 2d 34 6b 6e 66 2d 48 32 7a 32 37 65 7a 63 37 41 78 69 6a 50 39 44 39 35 75 55 56 5a 79 61 48 4d 67 52 52 56 35 59 79 52 38 36 67 45 53 39 67 5f 75 38 68 51 7a 79 33 39 65 71 62 69 39 65 30 45 41 31 6e 51 33 6d 76 63 30 4e 63 50 35 57 55 5f 64 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 36 35 35 38 38 31 36 39 31 38 37 30 33 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 127597X-GUploader-UploadID: ADPycduCOEYF0sTjvqK-4knf-H2z27ezc7AxijP9D95uUVZyaHMgRRV5YyR86gES9g_u8hQzy39eqbi9e0EA1nQ3mvc0NcP5WU_dx-goog-generation: 1665588169187031x-goog-metageneration: 1x-goog-s
2023-12-05 18:13:57 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 37 00 00 02 57 08 06 00 00 00 ae 52 aa 34 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 f2 02 49 44 41 54 78 01 ec 9d 07 60 54 65 ba f7 ff 53 d2 7b 21 f4 de 7b ef bd 57 15 41 6c 88 22 28 08 d8 d6 75 75 f7 de bd 77 77 ef 77 77 f7 ee ba ae 15 10 04 05 a9 0a 2a 2a 82 14 11 a4 f7 4e 28 e9 bd f7 9e 29 df fb bc 67 4e 18 42 12 92 99 24 cc 84 e7 87 63 92 29 e7 bc a7 ce f3 7f 9f a6 09 0c 0c 34 83 61 18 86 61 18 86 61 18 c6 b9 89 d2 82 61 18 86 61 18 86 61 18 a6 01 c0 e2 86 61 18 86 61 18 86 61 98 06 01 8b 1b 86 61 18 86 61 18 86 61 1a 04 2c 6e 18 86 61 18 86 61 18 86 69 10 b0 b8 61 18 86 61 18 86 61 Data Ascii: PNGIHDR7WR4pHYssRGBgAMAaIDATx`TeS{!{WAl"(uuwwww**N()gNB$c)4aaaaaaaaaaaa,naaiaaa
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 57 5c 0d bd 8e d4 ec 4c 71 9d 68 c4 f1 01 62 12 c2 91 26 c4 8d 9b ce 1d 3e e2 fa 50 43 0c eb 83 7a b9 ff 32 0c 53 2b b0 b8 61 18 27 c1 da c0 ad 73 23 5f 78 4d a2 92 c2 b0 e7 97 3d 18 35 68 14 8a 4b 4b 71 e6 c2 09 cc 9b f5 2c fe eb 8d bf c9 46 7a 6b be 58 85 2d df 6f c2 d8 11 13 f0 fb 97 ff 53 86 42 bd b3 f2 5f 78 e7 a3 bf 21 3d 23 dd 32 eb 6d 83 e7 a6 54 23 26 fe 8d b8 7e 2b 14 9d 85 a0 4a cf 4a 93 39 3e 3d ba f5 b8 63 71 ea 64 bc f2 50 c3 f5 b4 15 7a 43 ee 07 4a ce ba 16 a5 25 c5 d8 fe c3 16 e8 84 68 19 3c 60 24 be d9 b9 1d 4d 03 42 30 71 d4 e4 b2 77 aa 0d 2c c9 db e5 e6 e2 8a 91 83 47 e1 3f 96 fd 11 8f 4d 7d 02 1d 5a 75 54 0a 31 dc ab fc b0 38 27 4c 96 02 06 a9 42 18 fe 7b c5 bf 70 f6 ca 29 18 4c 46 e8 34 7a fb 1c 10 c2 b5 d1 b2 71 2b bc f2 e2 6b e8 d4 Data Ascii: W\Lqhb&>PCz2S+a's#_xM=5hKKq,FzkX-oSB_x!=#2mT#&~+JJ9>=cqdPzCJ%h<`$MB0qw,G?M}ZuT18'LB{p)LF4zq+k
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 0e 1d 8c 47 a7 3c 8e 35 1b 57 a3 57 ef 9e 98 3c 66 1a d6 7e f5 09 0c c5 b5 1b d2 a2 14 3c d0 c8 d0 b9 29 63 a6 e2 46 e4 4d 18 c4 73 2d 9b 36 c3 86 ad eb 64 c9 66 ad 0d 25 80 b5 5a 2d 2e 5d be 28 67 fb a9 e2 d9 90 81 c3 d1 ba 69 2b b8 b8 ba c8 0e e9 14 ee 46 49 d6 91 91 e1 78 fc d1 c7 d1 ae 5d 67 1c 3b 7f 04 6e c2 50 f6 0f f0 43 6a 56 8a ec 13 a2 24 3d dc 1f b3 d2 55 ef 2a 0c ee 47 30 73 ca 2c 21 ac 68 1f d8 a7 2c 69 33 f2 85 c7 66 db f7 5f e2 f8 f9 a3 b7 45 04 2a 16 dd 65 39 36 e2 7d c1 01 8d 30 ff c9 05 e8 d0 b2 93 c5 cc 36 d7 8a 07 89 2a 6b 4d 19 3d 55 cc e8 17 60 fb f7 5f c9 e6 9a ca 2b 77 2f bb ac 8f 0f 85 79 1a 4d d8 b1 eb 5b 78 b8 7b e3 91 09 0f c9 0a 76 36 1d 27 cd ed 6b 92 7a 18 3d 3e eb 49 e8 dd 75 d8 b1 fb 1b 19 2a 67 ab a2 68 d1 b4 39 5c 74 42 Data Ascii: G<5WW<f~<)cFMs-6df%Z-.](gi+FIx]g;nPCjV$=UG0s,!h,i3f_Ee96}06kM=U`_+w/yM[x{v6'kz=>Iugh9\tB
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: e1 0d bd 79 4d 1a f9 4a 1a 8f 2a 8a 50 e7 a8 86 25 e5 62 c8 d9 f7 4a ec 2f 55 ac 51 98 90 b7 9b 17 e6 3e fa 38 c6 0c 1b 2f 43 8f cc 3a d4 d0 66 33 5b 4a d4 9a 65 88 1c 79 91 d2 33 d2 b1 7a dd 27 b8 7c eb 12 8c a0 32 c5 fa da 0d 1b b3 14 df 53 aa e0 d5 5d a4 9b 4d dc 87 f0 38 f5 9a a4 b0 bf 82 d2 42 7c bb eb 1b e1 89 f3 17 c7 74 0c dc 5d 3c c5 3e aa 61 91 01 eb 1d 6a 34 c3 d3 d5 13 73 1f 9f 0b ad 8b 19 fb 0e ec 97 d5 05 b5 da 2a 3c 31 96 92 c5 65 61 68 4e 70 cb a0 82 02 2e 70 c3 9c 47 9e 44 f3 a6 2d 90 95 97 8b eb e1 57 91 93 9d 83 4e ed bb a3 49 48 23 4c 1a 3d 15 17 42 2f e2 c2 e5 8b 50 ce 7b d4 0b 0f da 84 12 c3 38 2b 2c 6e 18 c6 c1 a9 ec 0b 95 bf 68 6f 63 b4 18 8d 94 20 ef e7 1b 88 91 03 46 a1 5f af 7e 38 7d e1 14 7e fe 75 1f ae dc 08 15 82 a1 a4 2c c9 Data Ascii: yMJP%bJ/UQ>8/C:f3[Jey3z'\|2S]M8B\|t]<>aj4s<1eahNp.pGD-WNIH#L=B/P{8+,nhoc F_~8}~u,
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 8e 64 be ea 21 2a 97 a9 82 aa 15 aa e3 e4 d9 e3 30 b8 dc 3c 81 43 29 2a 17 2e 44 e0 64 e8 51 b8 b8 bb 62 fe f2 79 30 ba 19 d8 88 2f 96 c6 a2 6a b2 28 dc 6d c9 ca 3f 70 df b8 07 50 d2 b7 34 a6 ff 34 13 5d d4 1c f5 ea de 5f 89 aa 12 7c af 67 19 4c 08 3b 1b ac 3c 1d df 2b 03 da 05 f7 8d 79 88 85 d6 ea f5 2b d4 bf 0d 5a 31 81 eb 19 87 a5 4c 33 79 7f 8e 9c 08 44 ff 1e 03 e0 a6 c6 76 34 38 50 79 24 fc ac cd 3a af ba 1f 6b 95 82 4c 98 33 4c dc d7 c5 d3 d5 4d 79 2e da b3 30 8b 4f 88 c5 8c b9 df a2 72 c5 1a 98 30 7a 32 22 22 82 11 71 e1 12 12 62 ae 20 2d 25 05 ce 02 e5 dc 64 a5 65 71 41 01 3f 2f 3f 44 c5 5c 46 f5 8a b5 e0 ea e2 c1 61 98 f1 09 89 58 f0 d7 02 5c 8c be 80 7b 87 4d 44 b9 80 72 58 f2 f7 42 0c eb 77 17 26 8f 7d 00 7e 01 7e 58 b1 76 a5 5a 9c 49 51 f7 80 Data Ascii: d!0<C).DdQby0/j(m?pP44]_\|gL;<+y+Z1L3yDv48Py$:kL3LMy.0Or0z2""qb -%deqA?/?D\FaX\{MDrXBw&}~~XvZIQ
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: e4 5c ba 14 89 df 7e fb 4d 19 c1 2f b1 c1 da b9 73 67 2e af 4b bd 3b 74 e8 31 f2 38 90 61 4b 2b ee b6 a5 a2 e9 17 85 12 51 5f 9b 27 9f 7c 9c 8d ea 13 27 4e 72 21 01 7d 1b f2 e2 90 11 4a b9 09 e4 89 d1 8c c2 ab 43 c7 fb fa eb 6f 38 e9 9c 2a 7e 91 01 49 21 62 d4 43 84 20 23 b7 5b b7 ee 7c 4c aa 42 f6 cd 37 df f0 6b b2 cf b5 e0 9c 0c db cb 67 3f 7f 3b 76 ec c2 a6 4d 5b b8 0a 1d 9d 7b df be 7d b0 60 c1 3c 9e 2b 0a 7d a3 32 c4 54 b2 98 7e 53 18 99 2e c0 6c 66 1c 5a 59 6e 43 ae e3 da 6e a3 43 05 01 48 1c 3c f3 cc d3 78 fa e9 67 72 18 71 9a f7 ca cc 73 78 e8 d0 21 ce 69 a2 a6 9d 54 fe 9b ae 15 cd 0d 15 1e e8 d4 a9 03 fe fd 77 3b 0b dd 76 ed da a2 63 c7 8e 78 f5 d5 d7 79 3f 94 93 43 1e a6 07 1e 98 a2 8c f0 2f 72 08 5c 32 be 09 f2 56 e5 97 07 45 e3 a0 f3 a6 82 03 Data Ascii: \~M/sg.K;t18aK+Q_'\|'Nr!}JCo8*~I!bC #[\|LB7kg?;vM[{}`<+}2T~S.lfZYnCnCH<xgrqsx!iTw;vcxy?C/r\2VE
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: ca b7 21 56 ac 58 69 2d 85 4c b9 5b 74 1f d1 dc d0 36 cf 3d f7 0c 57 57 23 af 0c f5 7e d9 b7 2f 3b a1 9e 3c 2a 24 62 a8 08 04 89 04 aa 28 36 6b d6 f7 9c 73 43 e7 77 cf 3d e3 b8 f7 0d 85 7a d1 bd 4c fb a0 3e 41 94 3f 13 14 74 9a cf 71 fa f4 6f 78 3f 24 40 1e 7e f8 21 e5 61 9b c2 22 99 2a 9c 51 45 b4 99 33 bf e3 63 d1 6b 68 7b 6a e4 da a4 49 13 f6 a2 8c 1e 3d 4a 79 a6 ee e2 79 a2 fd 93 40 7d f9 e5 97 59 34 91 18 a3 9c a5 be 7d 7b b3 f7 87 7a 34 51 c3 54 ba 46 24 b8 28 e7 e9 f4 e9 33 9c 87 a4 55 af 8b 65 01 fd e5 97 5f e0 a5 97 5e 56 c2 f2 80 65 8e 9a 2a 41 dd 5a cd 75 94 1a eb 8c 42 e5 fa 08 82 20 dc 0e b8 a8 0f e7 b7 21 08 82 c3 d3 ad 5b 37 ce 65 a1 b2 ae 14 a2 43 06 62 51 57 63 29 1c c6 de b0 2f 0a 64 90 8e 1a 35 8a bd 08 04 95 6f 3e 7d 3a 88 c3 60 68 bf Data Ascii: !VXi-L[t6=WW#~/;<$b(6ksCw=zL>A?tqox?$@~!a"QE3ckh{jI=Jyy@}Y4}{z4QTF$(3Ue_^Ve*AZuB ![7eCbQWc)/d5o>}:`h
2023-12-05 18:13:57 UTC	12909	IN	Data Raw: 9a c7 1f 7f 4c 42 a9 30 a6 79 9f fc 25 c4 0e e2 b2 43 87 0e e6 fa eb f3 c9 b9 4c 48 10 29 78 b2 48 c4 e7 77 e6 89 6a 77 08 42 fa c4 1c 21 6a 28 06 f0 c2 0b 5d a5 ef f4 c9 15 58 c0 03 c2 7e e4 93 a5 49 93 f6 7c d1 8a d3 92 e3 b5 71 e3 46 09 cd a3 8d d4 a9 53 49 db ce db 83 d7 52 66 fa 7c 68 9b 3b e7 ae e0 c0 e8 d1 a3 a5 20 01 ef 13 f2 c6 75 32 7c f8 50 29 38 10 78 2f b9 df 59 20 e0 18 5c 1b 88 5a fa c2 cb 9d 4b 8e e9 ee 8f bf fe fa cb f6 6f 83 84 27 16 2e 5c 48 fa ff d4 53 4f 88 67 54 89 3e ee ff 3a f5 d8 28 4a 78 a0 e2 46 51 c2 94 d8 7d d1 c6 df ca a3 33 a6 dc 6a f2 85 d7 85 d5 65 67 f4 92 6c 7d fc f8 31 c9 73 a1 94 2d 46 30 fd 27 3f 03 21 c0 8a b9 cf 30 4b 6c c6 8e 1d 2b 45 08 fe f9 67 ad 3f 2f 60 de bc 3f c5 e0 7c fe f9 e7 24 29 9d 57 db b6 ad 25 bc c9 Data Ascii: LB0y%CLH)xHwjwB!j(]X~I\|qFSIRf\|h; u2\|P)8x/Y \ZKo'.\HSOgT>:(JxFQ}3jegl}1s-F0'?!0Kl+Eg?/`?\|$)W%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50418	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	2196	OUT	GET /vi-assets/static-assets/audio-app-download-50297e52380b36c9a9c7998bb4d9e70b.svg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:57 UTC	1341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 38 35 32 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 73 6d 6b 5a 79 6a 48 49 54 52 38 5f 79 68 58 62 72 4b 55 4c 5a 6d 68 39 5a 67 43 7a 71 75 31 31 64 53 38 4f 58 38 75 51 78 6b 43 63 67 4d 4f 73 4e 62 53 76 4b 4b 4c 61 43 49 59 55 30 66 71 47 53 5a 71 36 61 6d 7a 65 78 6c 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 34 3a 35 33 3a 31 35 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 158523X-GUploader-UploadID: ABPtcPpsmkZyjHITR8_yhXbrKULZmh9ZgCzqu11dS8OX8uQxkCcgMOsNbSvKKLaCIYU0fqGSZq6amzexlgCache-Control: public,max-age=31536000Expires: Wed, 04 Dec 2024 14:53:15 GMTLast-Modi
2023-12-05 18:13:57 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 79 65 73 22 3f 3e 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 34 30 30 22 20 68 65 69 67 68 74 3d 22 34 30 30 22 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 34 30 30 22 20 68 65 69 67 68 74 3d 22 34 30 30 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 66 66 66 66 66 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 Data Ascii: <?xml version="1.0" standalone="yes"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" width="400" height="400"> <rect x="0" y="0" width="400" height="400" style="fill:#ffffff;shape-rendering:crispEdges;"/> <rect x="0" y="0" width="8.88888888
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 31 35 31 2e 31 31 31 31 31 31 31 31 31 31 31 31 31 31 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 31 36 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 79 3d 22 30 22 20 77 69 Data Ascii: ight="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="151.11111111111111" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="168.88888888888889" y="0" wi
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 33 33 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 37 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 33 34 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 37 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 Data Ascii: 888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="337.77777777777777" y="0" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="346.6666666666667" y="0" width="8.8888
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 38 38 38 38 38 38 38 39 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 31 30 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 37 22 20 79 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 Data Ascii: 88888889" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="106.66666666666667" y="8.88888888888889" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:cri
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 33 33 34 22 20 79 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 32 32 32 2e 32 32 32 32 32 32 32 32 32 32 32 32 32 33 22 20 79 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 Data Ascii: 334" y="8.88888888888889" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="222.22222222222223" y="8.88888888888889" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;sha
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 36 36 38 22 20 79 3d 22 31 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 38 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 33 35 2e 35 35 35 35 35 35 35 35 35 35 35 35 35 36 22 20 79 3d 22 31 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 38 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 Data Ascii: 668" y="17.77777777777778" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="35.55555555555556" y="17.77777777777778" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;sh
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 65 63 74 20 78 3d 22 31 35 31 2e 31 31 31 31 31 31 31 31 31 31 31 31 31 31 22 20 79 3d 22 31 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 38 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 31 37 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 37 22 20 79 3d 22 31 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 38 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 Data Ascii: ect x="151.11111111111111" y="17.77777777777778" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="177.77777777777777" y="17.77777777777778" width="8.88888888888889" height="8.88888888888889"
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 33 35 35 2e 35 35 35 35 35 35 35 35 35 35 35 35 35 34 22 20 79 3d 22 31 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 38 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 65 69 67 68 74 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 30 30 30 30 30 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b 22 2f 3e 0d 0a 20 20 3c 72 65 63 74 20 78 3d 22 33 36 34 2e 34 34 34 34 34 34 34 34 34 34 34 34 34 36 22 20 79 3d 22 31 37 2e 37 37 37 37 37 37 37 37 37 37 37 37 37 38 22 20 77 69 64 74 68 3d 22 38 2e 38 38 38 38 38 38 38 38 38 38 38 38 38 39 22 20 68 Data Ascii: ing:crispEdges;"/> <rect x="355.55555555555554" y="17.77777777777778" width="8.88888888888889" height="8.88888888888889" style="fill:#000000;shape-rendering:crispEdges;"/> <rect x="364.44444444444446" y="17.77777777777778" width="8.88888888888889" h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50419	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	616	OUT	POST /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive Content-Length: 4756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:57 UTC	4756	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 6f 70 74 73 25 32 32 25 33 41 25 32 32 65 6e 64 70 6f 69 6e 74 25 32 32 25 32 43 25 32 32 74 74 73 74 25 32 32 25 33 41 37 37 31 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 68 63 25 32 32 25 33 41 34 25 32 43 25 32 32 62 72 5f 6f 68 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 62 72 5f 6f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 75 61 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 Data Ascii: jsData=%7B%22opts%22%3A%22endpoint%22%2C%22ttst%22%3A771%2C%22ifov%22%3Afalse%2C%22hc%22%3A4%2C%22br_oh%22%3A984%2C%22br_ow%22%3A1280%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gec
2023-12-05 18:13:57 UTC	544	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 44 61 74 61 44 6f 6d 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json;charset=utf-8Content-Length: 235Connection: closeDate: Tue, 05 Dec 2023 18:13:57 GMTServer: DataDomeAccess-Control-Allow-Origin: *Pragma: no-cacheCache-Control: no-cache, no-store, must-revalid
2023-12-05 18:13:57 UTC	235	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 7a 54 74 6e 6e 44 69 33 4f 50 35 37 63 66 70 5a 39 42 44 5f 52 4c 4a 32 79 54 4f 46 57 76 47 51 79 50 35 6e 34 55 57 76 52 46 6c 73 79 78 32 6e 39 57 58 38 74 65 75 61 52 47 74 39 38 32 59 4b 58 31 72 68 64 4b 75 42 67 5f 4a 37 62 55 77 34 31 52 38 76 63 4f 30 6e 31 54 58 55 47 61 6f 42 6e 73 37 55 41 7e 7a 49 4d 34 7a 6e 56 4c 6a 6e 79 57 58 6e 63 5f 54 66 54 75 61 54 63 56 76 5a 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=zTtnnDi3OP57cfpZ9BD_RLJ2yTOFWvGQyP5n4UWvRFlsyx2n9WX8teuaRGt982YKX1rhdKuBg_J7bUw41R8vcO0n1TXUGaoBns7UA~zIM4znVLjnyWXnc_TfTuaTcVvZ; Max-Age=31536000; Domain=www.nytimes.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50421	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	2367	OUT	GET /2023/12/05/world/africa/nigeria-strike-civilians.html HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:57 UTC	1322	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 34 33 35 35 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 62 33 2d 74 72 61 63 65 69 64 3a 20 61 39 32 37 33 30 30 65 35 61 30 30 34 66 30 65 39 34 32 66 37 31 31 65 38 36 38 64 37 33 32 64 0d 0a 78 2d 6e 79 74 2d 64 61 74 61 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a 34 35 3a 35 34 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 37 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 204355Server: nginxContent-Type: text/html; charset=utf-8x-b3-traceid: a927300e5a004f0e942f711e868d732dx-nyt-data-last-modified: Tue, 05 Dec 2023 17:45:54 GMTLast-Modified: Tue, 05 Dec 2023 17:
2023-12-05 18:13:57 UTC	1396	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 75 73 3d 31 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 36 20 44 65 63 20 32 30 32 33 20 30 30 3a 31 33 3a 35 37 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 67 65 6f 3d 55 53 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 36 20 44 65 63 20 32 30 32 33 20 30 30 3a 31 33 3a 35 37 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 44 45 4e 59 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2e 65 74 2e 64 64 3d 69 76 3d 38 42 41 36 43 30 32 33 46 35 31 35 34 39 35 33 38 33 42 39 44 33 31 30 32 Data Ascii: Set-Cookie: nyt-us=1; Expires=Wed, 06 Dec 2023 00:13:57 GMT; Path=/; Domain=.nytimes.comSet-Cookie: nyt-geo=US; Expires=Wed, 06 Dec 2023 00:13:57 GMT; Path=/; Domain=.nytimes.comX-Frame-Options: DENYSet-Cookie: nyt.et.dd=iv=8BA6C023F515495383B9D3102
2023-12-05 18:13:57 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6e 79 74 2d 62 33 2d 74 72 61 63 65 69 64 3d 39 64 35 36 65 33 34 37 36 39 39 33 34 35 61 33 61 63 61 64 66 66 34 30 39 33 34 32 31 38 34 31 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 53 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 48 49 54 0d 0a 0d 0a Data Ascii: Set-Cookie: nyt-b3-traceid=9d56e347699345a3acadff4093421841; Path=/; Domain=.nytimes.com; SameSite=none; Securex-nyt-edge-cache: HIT
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 20 73 74 6f 72 79 20 6e 79 74 61 70 70 2d 76 69 2d 61 72 74 69 63 6c 65 22 20 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 20 64 61 74 61 2d 72 68 3d 22 74 72 75 65 22 3e 4e 69 67 65 72 69 61 e2 80 99 73 20 50 72 65 73 69 64 65 6e 74 20 43 61 6c 6c 73 20 66 6f 72 20 49 6e 71 75 69 72 79 20 41 66 74 65 72 20 4d 69 6c 69 74 61 72 79 20 53 74 72 69 6b 65 20 4b 69 6c 6c 73 20 61 74 20 4c 65 61 73 74 Data Ascii: <!DOCTYPE html><html lang="en" class=" story nytapp-vi-article" xmlns:og="http://opengraphprotocol.org/schema/"> <head> <meta charset="utf-8" /> <title data-rh="true">Nigerias President Calls for Inquiry After Military Strike Kills at Least
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6e 79 74 2d 66 72 61 6e 6b 6c 69 6e 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 65 61 73 65 20 30 2e 36 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 65 61 73 65 20 30 2e 36 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 Data Ascii: padding:0;position:absolute;width:1px;border-radius:3px;cursor:pointer;font-family:nyt-franklin,helvetica,arial,sans-serif;-webkit-transition:ease 0.6s;transition:ease 0.6s;white-space:nowrap;vertical-align:middle;background-color:transparent;color:#000;f
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 7d 2e 63 73 73 2d 31 30 36 39 38 6e 61 20 73 76 67 7b 66 69 6c 6c 3a 62 6c 61 63 6b 3b 7d 7d 2e 63 73 73 2d 6e 68 6a 68 68 30 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 38 39 70 78 3b 68 65 69 67 68 74 3a 32 36 70 78 3b 6d 61 72 67 69 6e 3a 35 70 78 20 61 75 74 6f 20 30 3b 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 34 30 70 78 29 7b 2e 63 73 73 2d 6e 68 6a 68 68 30 7b 77 69 64 74 68 3a 32 32 35 70 78 3b 68 65 69 67 68 74 3a 33 31 70 78 3b 6d 61 72 67 69 6e 3a 34 70 78 20 61 75 74 6f 20 30 3b 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 63 73 73 2d 6e 68 6a 68 68 30 7b 77 69 64 74 68 3a 31 39 35 70 78 3b 68 65 69 67 68 74 3a 32 36 70 78 3b Data Ascii: {content:'';}.css-10698na svg{fill:black;}}.css-nhjhh0{display:block;width:189px;height:26px;margin:5px auto 0;}@media (min-width:740px){.css-nhjhh0{width:225px;height:31px;margin:4px auto 0;}}@media (min-width:1024px){.css-nhjhh0{width:195px;height:26px;
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 35 72 65 6d 3b 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 34 30 70 78 29 7b 2e 63 73 73 2d 63 77 38 6d 73 66 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 37 35 72 65 6d 3b 7d 7d 2e 63 73 73 2d 63 77 38 6d 73 66 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 2e 37 35 72 65 6d 3b 7d 2e 63 73 73 2d 63 77 38 6d 73 66 20 61 2c 2e 63 73 73 2d 63 77 38 6d 73 66 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 63 6f 6e 74 65 6e 74 2d 70 72 69 6d 61 72 79 2c 23 31 32 31 32 31 32 29 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e Data Ascii: 5rem;}@media (min-width:740px){.css-cw8msf{font-size:1rem;line-height:1.375rem;}}.css-cw8msf p{margin-bottom:0.75rem;}.css-cw8msf a,.css-cw8msf a:visited{color:var(--color-content-primary,#121212);-webkit-text-decoration:underline;text-decoration:underlin
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 57 65 62 55 6e 69 66 69 65 64 54 72 61 63 6b 69 6e 67 28 72 6f 6f 74 29 20 7b 0a 20 20 76 61 72 20 5f 72 6f 6f 74 3b 0a 20 20 72 6f 6f 74 20 3d 20 72 6f 6f 74 20 7c 7c 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 77 69 6e 64 6f 77 20 3a 20 75 6e 64 65 66 69 6e 65 64 29 3b 0a 20 20 76 61 72 20 55 6e 69 66 69 65 64 54 72 61 63 6b 69 6e 67 20 3d 20 28 28 5f 72 6f 6f 74 20 3d 20 72 6f 6f 74 29 20 3d 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 5f 72 6f 6f 74 20 3d 3d 3d 20 76 6f 69 64 20 30 20 3f 20 76 6f 69 64 20 30 20 3a 20 5f 72 6f 6f 74 2e 55 6e 69 66 69 65 64 54 72 61 63 6b 69 6e 67 29 20 7c 7c 20 7b 7d 3b 0a 20 20 55 6e 69 66 69 65 64 54 72 61 63 6b 69 6e 67 2e 63 6f Data Ascii: (function initWebUnifiedTracking(root) { var _root; root = root \|\| (typeof window !== 'undefined' ? window : undefined); var UnifiedTracking = ((_root = root) === null \|\| _root === void 0 ? void 0 : _root.UnifiedTracking) \|\| {}; UnifiedTracking.co
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 63 74 69 76 65 42 72 69 64 67 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 67 65 74 49 64 28 74 29 3b 72 65 74 75 72 6e 20 72 65 67 69 73 74 72 79 5b 65 5d 7d 3b 20 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 5f 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6f 6e 49 6e 69 74 4e 61 74 69 76 65 41 64 73 26 26 28 77 69 6e 64 6f 77 2e 6f 6e 49 6e 69 74 4e 61 74 69 76 65 41 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 7d 3b 3b 5f 66 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 5b 5d 29 3b 20 7d 29 28 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e Data Ascii: ctiveBridge=function(t){var e="string"==typeof t?t:getId(t);return registry[e]}; })();;(function () { var _f=function(){"function"!=typeof window.onInitNativeAds&&(window.onInitNativeAds=function(){})};;_f.apply(null, []); })(); </script> <script>
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 74 72 75 65 50 6f 73 69 74 69 6f 6e 2c 65 3d 65 2e 69 64 3b 69 66 28 61 26 26 6a 28 6f 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 7d 29 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 2c 6e 3d 53 28 6e 2c 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 29 2c 6e 3d 28 69 3d 6e 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3f 5f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 30 5d 3d 3d 3d 74 5b 30 5d 26 26 65 5b 31 5d 3d 3d 3d 74 5b 31 5d 7d 29 7d 29 3a 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 66 69 6c 74 65 72 53 69 7a 65 73 28 29 20 64 69 64 20 6e 6f Data Ascii: truePosition,e=e.id;if(a&&j(o).map(function(e){return e.id}).includes(e))return!1;var i,n=S(n,window.innerWidth),n=(i=n,Array.isArray(i)?_.filter(function(t){return i.some(function(e){return e[0]===t[0]&&e[1]===t[1]})}):(console.warn("filterSizes() did no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50423	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	2216	OUT	GET /vi-assets/static-assets/audio-c6e4659005d0c18dac15.js?_sw-precache=b71f65da3a7a83f071d19cada0a3157f HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; datadome=F6YJBCbFCI2CSO67B~DjpDHOqCJI18k4kyEf_Sx2OJQfh~px8sW9YVhnGPY16HaETCdGsZIWBlIXi_Wm906kzqpHHdpdatX6IpN5UpValfVAk5kwmpRlEoBf0MLG~Wki; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593
2023-12-05 18:13:57 UTC	1317	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 37 31 30 31 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 5f 6a 45 34 6c 54 45 59 5a 4d 4c 33 2d 6e 4e 6e 72 78 75 34 33 56 6a 32 56 55 42 59 6d 6d 42 75 6d 32 49 7a 6f 4b 63 78 51 50 5a 33 51 6b 49 6f 67 43 59 35 4f 49 43 57 38 6f 4b 78 36 6a 63 61 79 74 31 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 39 3a 35 34 3a 33 31 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 471010X-GUploader-UploadID: ABPtcPp_jE4lTEYZML3-nNnrxu43Vj2VUBYmmBum2IzoKcxQPZ3QkIogCY5OICW8oKx6jcayt18Cache-Control: public,max-age=31536000Expires: Tue, 03 Dec 2024 19:54:31 GMTLast-Modified: M
2023-12-05 18:13:57 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 2c 31 31 2c 31 37 2c 32 31 2c 38 31 2c 31 36 33 5d 2c 7b 22 2b 35 41 57 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 3b 76 61 72 20 72 3d 6e 28 22 79 67 76 6b 22 29 2c 61 3d 6e 28 22 38 69 54 46 22 29 2c 69 3d 6e 28 22 37 57 4d 6e 22 29 2c 6f 3d 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[47,11,17,21,81,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return T})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return j}));var r=n("ygvk"),a=n("8iTF"),i=n("7WMn"),o=n
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 54 2d 53 22 29 2c 6d 65 74 61 64 61 74 61 3a 7b 6f 72 69 67 69 6e 61 6c 5f 73 6f 75 72 63 65 5f 61 70 70 3a 22 76 69 22 2c 65 74 5f 70 61 67 65 76 69 65 77 5f 69 64 3a 77 69 6e 64 6f 77 2e 4e 59 54 44 2e 50 61 67 65 56 69 65 77 49 64 2e 63 75 72 72 65 6e 74 7d 7d 29 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 67 64 70 72 5f 70 72 65 66 20 2d 20 4e 65 74 77 6f 72 6b 20 72 65 73 70 6f 6e 73 65 20 77 61 73 20 6e 6f 74 20 6f 6b 22 29 3b 72 65 74 75 72 6e 20 6f 28 7b 73 75 63 63 65 73 73 3a 21 30 7d 29 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 2e 65 72 72 6f 72 28 65 2c 7b 75 6e 69 74 3a 22 43 6f 6d 70 6c 69 61 6e Data Ascii: T-S"),metadata:{original_source_app:"vi",et_pageview_id:window.NYTD.PageViewId.current}})}).then((function(e){if(!e.ok)throw new Error("gdpr_pref - Network response was not ok");return o({success:!0})})).catch((function(e){return c.error(e,{unit:"Complian
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 73 65 74 3a 22 2b 30 36 30 30 22 7d 2c 7b 74 69 6d 65 7a 6f 6e 65 3a 22 59 45 4b 54 22 2c 6f 66 66 73 65 74 3a 22 2b 30 35 30 30 22 7d 2c 7b 74 69 6d 65 7a 6f 6e 65 3a 22 5a 22 2c 6f 66 66 73 65 74 3a 22 5a 22 7d 5d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 69 6d 65 7a 6f 6e 65 3d 3d 3d 65 7d 29 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 3f 74 2e 6f 66 66 73 65 74 3a 22 5a 22 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 61 7d 2c 22 2f 4c 75 36 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 Data Ascii: set:"+0600"},{timezone:"YEKT",offset:"+0500"},{timezone:"Z",offset:"Z"}],a=function(e){var t=r.find((function(t){return t.timezone===e}));return void 0!==t?t.offset:"Z"};t.default=a},"/Lu6":function(e,t,n){"use strict";var r=n("TqRt");Object.definePropert
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 38 37 20 31 2e 33 38 36 33 20 31 35 2e 31 33 32 36 20 31 2e 31 35 30 36 43 31 34 2e 37 37 38 32 20 30 2e 39 31 34 38 39 36 20 31 34 2e 33 37 39 20 30 2e 37 35 34 37 30 34 20 31 33 2e 39 36 20 30 2e 36 38 43 31 33 2e 30 39 36 20 30 2e 35 32 32 35 31 32 20 31 32 2e 32 30 34 33 20 30 2e 36 39 33 37 31 38 20 31 31 2e 34 36 20 31 2e 31 36 43 31 30 2e 36 36 31 37 20 31 2e 37 32 35 31 20 31 30 2e 31 30 37 38 20 32 2e 35 37 32 31 36 20 39 2e 39 31 20 33 2e 35 33 43 39 2e 37 31 38 39 37 20 32 2e 35 36 39 34 20 39 2e 31 36 33 34 38 20 31 2e 37 32 30 30 35 20 38 2e 33 36 20 31 2e 31 36 43 37 2e 36 31 39 35 34 20 30 2e 36 39 33 34 35 33 20 36 2e 37 33 30 38 32 20 30 2e 35 32 32 31 33 34 20 35 2e 38 37 20 30 2e 36 38 43 35 2e 34 35 30 35 38 20 30 2e 37 35 33 35 35 31 Data Ascii: 87 1.3863 15.1326 1.1506C14.7782 0.914896 14.379 0.754704 13.96 0.68C13.096 0.522512 12.2043 0.693718 11.46 1.16C10.6617 1.7251 10.1078 2.57216 9.91 3.53C9.71897 2.5694 9.16348 1.72005 8.36 1.16C7.61954 0.693453 6.73082 0.522134 5.87 0.68C5.45058 0.753551
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 64 65 66 61 75 6c 74 3d 74 7d 29 2c 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 72 28 74 2c Data Ascii: t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),i=this&&this.__importStar\|\|function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 76 28 29 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 61 3d 76 28 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 72 2c 61 72 67 75 6d 65 6e 74 73 2c 61 29 7d 65 6c 73 65 20 6e 3d 72 2e Data Ascii: nction"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function(){var n,r=v()(e);if(t){var a=v()(this).constructor;n=Reflect.construct(r,arguments,a)}else n=r.
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 65 73 22 7d 29 5d 3b 74 2e 44 45 46 41 55 4c 54 5f 50 52 4f 4d 4f 5f 49 4d 41 47 45 53 3d 67 7d 2c 22 36 6c 38 44 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 6c 69 6e 6b 43 6c 61 73 73 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 6e 28 22 4a 71 70 39 22 29 2c 61 3d 6e 28 22 33 73 4d 54 22 29 2c 69 3d 28 30 2c 72 2e 63 73 73 29 28 22 63 6f 6c 6f 72 3a 22 2c 61 2e 63 6f 6c 6f 72 2e 73 69 67 6e 61 6c 2e 65 64 69 74 6f 72 69 61 6c 2c 22 3b 26 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 22 2c 61 2e 63 6f 6c 6f 72 2e 73 69 67 6e 61 6c 2e 65 64 69 74 6f 72 69 61 6c Data Ascii: es"})];t.DEFAULT_PROMO_IMAGES=g},"6l8D":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.linkClass=void 0;var r=n("Jqp9"),a=n("3sMT"),i=(0,r.css)("color:",a.color.signal.editorial,";&:visited{color:",a.color.signal.editorial
2023-12-05 18:13:57 UTC	16384	IN	Data Raw: 2c 63 3d 6e 2e 6e 28 73 29 2c 75 3d 6e 28 22 51 49 4c 6d 22 29 2c 64 3d 6e 2e 6e 28 75 29 2c 66 3d 6e 28 22 4a 34 7a 70 22 29 2c 70 3d 6e 2e 6e 28 66 29 2c 6d 3d 6e 28 22 71 31 74 49 22 29 2c 67 3d 6e 2e 6e 28 6d 29 2c 76 3d 6e 28 22 65 46 63 2b 22 29 2c 68 3d 6e 2e 6e 28 76 29 2c 62 3d 6e 28 22 58 36 6f 4c 22 29 2c 79 3d 6e 28 22 5a 4b 4e 35 22 29 2c 77 3d 6e 28 22 4f 58 6d 63 22 29 2c 4f 3d 6e 2e 6e 28 77 29 2c 78 3d 6e 28 22 34 7a 6a 72 22 29 2c 45 3d 6e 2e 6e 28 78 29 2c 5f 3d 6e 28 22 55 49 50 35 22 29 2c 6b 3d 6e 28 22 73 4f 72 59 22 29 2c 54 3d 5b 22 61 75 64 69 6f 43 6f 6e 74 72 6f 6c 73 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f Data Ascii: ,c=n.n(s),u=n("QILm"),d=n.n(u),f=n("J4zp"),p=n.n(f),m=n("q1tI"),g=n.n(m),v=n("eFc+"),h=n.n(v),b=n("X6oL"),y=n("ZKN5"),w=n("OXmc"),O=n.n(w),x=n("4zjr"),E=n.n(x),_=n("UIP5"),k=n("sOrY"),T=["audioControls"];function C(e,t){var n=Object.keys(e);if(Object.getO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50424	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	1844	OUT	GET /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:13:57 UTC	477	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 37 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 6e 6f 2d 63 61 63 68 65 2c 6e 6f 2d 73 74 6f 72 65 0d 0a 58 2d 43 61 63 68 65 3a 20 45 72 72 6f 72 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 31 39 39 62 30 36 35 65 34 63 Data Ascii: HTTP/1.1 405 Method Not AllowedContent-Type: text/html;charset=iso-8859-1Content-Length: 319Connection: closeDate: Tue, 05 Dec 2023 18:13:57 GMTCache-Control: must-revalidate,no-cache,no-storeX-Cache: Error from cloudfrontVia: 1.1 199b065e4c
2023-12-05 18:13:57 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50425	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	2189	OUT	GET /vi-assets/static-assets/audio-image-e9fd4c82808d35df03a9330e33c65257.jpg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593; datadome=zTtnnDi3OP57cfpZ9BD_RLJ2yTOFWvGQyP5n4UWvRFlsyx2n9WX8teuaRGt982YKX1rhdKuBg_J7bUw41R8vcO0n1TXUGaoBns7UA~zIM4znVLjnyWXnc_TfTuaTcVvZ
2023-12-05 18:13:57 UTC	1309	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 37 34 38 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 54 75 32 30 33 50 73 44 30 5f 75 72 4d 57 4e 5a 76 79 61 77 4b 61 63 5f 33 43 74 71 4b 41 50 53 67 32 44 6c 48 36 41 35 50 6a 52 32 72 33 59 39 45 34 66 47 53 41 35 54 6b 46 59 6c 66 4a 38 49 2d 6d 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 31 39 36 34 37 35 39 35 33 38 39 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 17488X-GUploader-UploadID: ABPtcPqTu203PsD0_urMWNZvyawKac_3CtqKAPSg2DlH6A5PjR2r3Y9E4fGSA5TkFYlfJ8I-mQx-goog-generation: 1701196475953892x-goog-metageneration: 1x-goog-stored-content-encoding: ide
2023-12-05 18:13:57 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 38 01 38 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 01 05 07 08 02 04 09 03 0a ff c4 00 49 10 00 01 03 03 02 03 05 05 04 06 08 04 05 05 00 00 01 00 02 03 04 05 11 06 21 07 12 31 08 13 41 51 61 14 22 71 81 a1 32 42 91 Data Ascii: JFIF,,CC88I!1AQa"q2B
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: ff 00 ea ba 27 3c 4b 92 31 cc 70 8c ea 6d 56 db 4c cc a2 a3 85 d5 77 09 f3 dc 52 c7 8e 63 e6 e7 1e 8d 68 f1 27 60 b2 ab 69 6b 45 39 60 2e 26 71 72 93 4e 4f 2c 56 da e8 6f 1a 9d ed 2d 7d 53 7d ea 6b 76 7a b2 11 e2 ef 02 ee bf 01 b2 c2 6a cf 0d b8 6b ad 7c f5 d7 6a c9 6b ae 15 12 54 54 4c e2 e7 c9 21 c9 71 29 1b 29 33 9e 5c 60 a4 96 9d ed 9a 29 1d 1b da 72 1c d3 82 0f a1 5a 42 b3 bb 61 78 27 da 5a ff 00 a5 ea 60 b0 6b 8a a9 6e 36 97 90 c6 54 c8 79 a6 a7 1d 37 3d 5c df 8e e1 75 5b bd 31 38 a9 cf 72 d4 4e f0 dc 6a 0a fa 4b 9d 1c 35 f4 33 b2 68 27 60 7c 72 30 e4 39 a7 a1 05 75 72 e6 98 c3 b0 80 80 80 48 00 b9 c7 00 75 27 a0 40 07 99 a1 ed dd a7 a1 1d 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 53 a2 0f a4 1f db 47 fd f1 f9 a9 8e 51 3c 3c 5a 8e 26 Data Ascii: '<K1pmVLwRch'`ikE9`.&qrNO,Vo-}S}kvzjk\|jkTTL!q))3\`)rZBax'Z`kn6Ty7=\u[18rNjK53h'`\|r09urHu'@SGQ<<Z&
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 56 db c9 a2 84 d3 4b 07 7b 1f 37 30 c3 b0 42 9c a6 25 70 8e f1 6e 94 ef 23 e2 3f c6 dd be 8a 72 9c ae 10 3a 9a 76 fe c2 ad 8e 77 90 39 fc b7 fa 21 0b bd 8b 54 6a bd 2f 5a ca cd 37 a8 2e 16 ea 98 77 6c b4 75 2f 89 c3 e0 5a 42 93 38 67 8d 05 fa 42 3b 54 68 5e ee 16 71 22 a2 f7 4c cc 03 0d ea 16 56 73 01 e1 ce f0 5e 3e 4e 0a 93 45 33 e8 96 c6 e8 2f d2 fd 5b 1c 91 d0 f1 33 85 f6 e9 df b0 7c f6 8a e7 40 e1 eb dd cb cf 93 e8 1c 16 73 6a 3d 24 6d 17 09 bb 7e 76 6f e2 cd 6d 3d 9e 9b 54 cd a7 6e b5 24 32 2a 4b e4 42 9c 48 f3 f7 5b 28 2e 8c fa 65 cd 27 c0 2a 4d b9 81 b1 80 82 01 07 20 8c 82 3c 42 cc 55 01 01 01 01 01 01 01 01 01 01 07 38 7f b6 67 f7 87 e6 a6 39 44 f0 d7 38 e2 8a 08 9b 0c 11 b5 8c 60 e5 6b 5a 30 00 1e 0b f3 27 e9 51 0a b8 6d 90 92 65 c7 aa 84 a9 9c Data Ascii: VK{70B%pn#?r:vw9!Tj/Z7.wlu/ZB8gB;Th^q"LVs^>NE3/[3\|@sj=$m~vom=Tn$2KBH[(.e'M <BU8g9D8`kZ0'Qme
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 23 1a 8b 78 9f 94 ff 00 49 fe ec 7d 7b ec cd c7 ad 13 3f b5 d2 69 ca 8a a1 09 e6 6d 45 a6 a4 48 ec f9 b5 a0 89 3f d2 be 7f 51 e1 9e a5 a7 df cb ee 8f 78 df ed cf d9 ec d9 eb ba 1b bb 77 e2 7e 7b 7e df 74 5b 5e 71 03 8c 97 bb 65 26 8f e2 56 a8 d5 35 74 96 f9 e4 a9 a7 a1 bc cf 33 bb a9 5f f6 de 1b 2e e0 95 e2 dd b3 72 c5 5d b7 69 9a 67 e7 18 7a 96 ee db bd 1d d6 ea 89 8f 94 e5 08 59 b4 10 65 dd 6f c2 6e 1d e9 ce 0b 69 8e 20 d8 b8 99 4d 76 d4 17 67 46 2b ad 4c 96 02 61 2f 61 73 98 23 6b cc d1 98 8e 18 e3 23 43 5e 77 61 21 06 51 ec 55 5d 75 d2 da e4 6a 4b 54 8e 8e 6b 45 24 73 f3 03 f7 8b f3 cb f0 20 10 7d 0a c6 f4 e2 98 6d 44 7a 3d c3 b3 5c 59 77 b4 51 5d 58 30 da ca 78 e6 03 fb cd 05 64 a4 ec ee 20 20 20 20 20 20 20 20 61 01 01 bf 6c 7c 54 c7 28 9e 1a f0 7c Data Ascii: #xI}{?imEH?Qxw~{~t[^qe&V5t3_.r]igzYeoni MvgF+La/as#k#C^wa!QU]ujKTkE$s }mDz=\YwQ]X0xd al\|T(\|
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 67 99 4f 7c 46 30 89 a2 66 27 2b 7d d5 b2 c4 de fa 20 1b 8c 92 1e 36 c2 ea 89 cc 38 aa f8 67 2d 2c ed 81 aa 0d db 5c db ac 2c 95 8e 8e d3 42 de 60 ce 9d e4 84 bf 3f 1e 52 d1 f2 5f 98 f8 cf 53 e6 6b 29 b3 1f f5 8f bc ee fb df 0c 58 ec d3 55 76 7f ed 3f a3 0c e9 c8 83 ab cc ee 1e ec 0c 73 f3 eb d0 2f 90 87 d4 53 cb d2 de c9 3a 15 d2 3b 42 69 97 42 43 a4 7c 75 55 03 1d 0f f6 8e cf e1 f5 5c 75 cf 75 6d b8 a5 e9 d0 01 a0 35 a3 00 6c 11 92 a8 08 08 08 08 1b a0 20 20 20 20 ab 7e d0 f8 a9 8e 51 3c 35 c8 63 1d 57 e6 2f d2 d5 41 c8 0c ee 13 29 c0 e6 f3 02 dc b8 67 c4 1c 15 19 4e 1d a6 63 91 b9 f0 51 93 0f a4 4d c9 f9 aa ca 57 db 3d 16 1d df c8 df 75 bd 3d 4a 9a 63 76 77 2a db 0c 99 a7 ac 2d a5 93 db ab 40 6b a9 23 2e 71 3f fd 47 0e 9f e1 18 1f 12 57 d7 74 be 9d 16 Data Ascii: gO\|F0f'+} 68g-,\,B`?R_Sk)XUv?s/S:;BiBC\|uU\uum5l ~Q<5cW/A)gNcQMW=u=Jcvw*-@k#.q?GWt
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 5c ec 96 4a fd 2d 40 68 ed 2f a6 a9 8f 95 ee e5 aa 8b 9b bc 79 70 c1 2e 1b 81 ca 39 4f 2e 09 1e 2b 1b de 15 aa 29 8f 22 e7 19 c6 7d e6 31 9f 6d bd 36 5e 8e b1 1d d3 e6 51 ce 33 f4 8d f1 f9 a4 b4 f7 39 2d b6 ba e3 6d a7 86 3a c9 29 c5 2d 34 40 72 c6 de f1 c1 b2 75 c8 e5 0c 2e ea bc ee a7 d2 75 76 f4 b1 6a 29 9a b8 8d b7 9d be fc ba fa 7e b2 c5 7a 89 b9 54 c5 3c e3 3c 6f fb 25 34 f7 e6 59 2e 77 0d 43 47 58 f6 16 b2 86 d1 45 25 b6 a1 c2 7a 79 4b 80 7b b9 80 c3 4f bd 90 46 7e 2b e3 ba 86 9b 34 57 6a e5 1d bb 76 fc 51 cc 7a 47 a7 fe d8 7d 36 96 b8 aa aa 6b 8a bb a3 9d a7 8f 7f d5 79 d5 97 ca ca 99 23 aa a2 ab 74 72 3a 71 2c d1 34 34 87 f8 92 5c 77 19 27 7c 64 ee bd 9a 2d 53 a2 b7 6a d5 13 8e 29 8f ca 3f 67 97 37 27 53 55 75 4c 66 37 99 fe 7f ba 29 0f 12 35 1c Data Ascii: \J-@h/yp.9O.+)"}1m6^Q39-m:)-4@ru.uvj)~zT<<o%4Y.wCGXE%zyK{OF~+4WjvQzG}6ky#tr:q,44\w'\|d-Sj)?g7'SUuLf7)5
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: ff 00 d4 5f fd fa be 3b 1d c6 e9 ad 33 6c 67 35 55 cc 31 83 ae 5e d6 83 f3 ea b5 a3 a1 e9 a8 fc 75 cc b1 af ac df af f0 d3 0b 7d cf 89 1c 38 d1 f0 3e 68 67 82 47 b0 6e e6 10 e3 fe 63 b7 d5 77 d9 b1 a5 d3 7f c5 46 ee 3b b7 f5 3a 8f f9 6a db fc f4 60 3e 26 f6 ad bb 5d 44 b6 bd 1c ce e2 37 02 d3 30 fe 47 fd be ab 5a ab aa be 78 63 4d 34 d1 f5 6b ed 64 d7 0b b5 5b eb ae 35 32 54 4f 21 cb 9e f3 92 54 44 62 09 99 99 cc b9 c5 44 7c 02 42 1d e8 28 fc 70 a4 5c 20 a4 23 c1 15 5c 61 83 1e 08 3b 4d 8b 08 ae 57 ad 23 11 76 a3 b7 86 f5 35 31 ff 00 ea 0a d4 f3 05 5c 37 7a 00 44 11 83 fb a3 f2 5d ce 67 9d bf a5 cf 5d 16 52 68 1e 19 d3 4f 83 34 95 17 aa a6 03 d5 b9 11 44 7e 45 b2 fe 2b 7b 31 ea 9e 23 2d 20 e0 fe a6 d1 9a 4b 53 d4 dd b5 ad 2d 7c f4 e6 82 58 29 7d 91 ad 71 Data Ascii: _;3lg5U1^u}8>hgGncwF;:j`>&]D70GZxcM4kd[52TO!TDbD\|B(p\ #\a;MW#v51\7zD]g]RhO4D~E+{1#- KS-\|X)}q
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 84 fd 95 10 8e 5c 4d 2b 07 40 a4 d9 c4 d2 b0 6f 85 24 a8 29 c7 92 21 c8 40 07 82 94 39 88 f0 54 aa e6 1b e8 89 7d 00 44 39 b5 aa 46 6a ec f1 a7 1d 3d de 7b d4 b1 fb 94 cc e5 69 23 ef 15 bd 9a 77 cb 2b 92 cf 97 5b a5 1d 8e d7 5b 7b b8 3f 96 92 dd 4d 2d 5c ee f2 8e 36 17 b8 fe 0d 2b a5 93 f3 e5 ac f5 35 66 b4 d6 fa 8b 58 5c 64 e7 a8 bc 5c ea 2b 24 76 7a 97 bc bb f9 ae da 63 10 ad 73 e8 ad 3c 5a ae 92 df 2c 54 b4 97 38 e8 e6 6f 3b f9 60 7f 23 9b 8e b9 c6 31 8f 15 66 6f ad 2e b8 d5 14 d6 99 ac 4c bc c9 25 04 f1 77 2e 82 50 24 6b 59 ca d6 80 de 6c f2 e1 ac 60 18 f0 68 41 63 f8 20 6c 83 eb 4d 57 55 47 2b 27 a3 a9 96 09 18 e0 e6 ba 37 96 90 47 42 30 82 4e ee 27 71 12 e3 67 a9 d3 15 3a 8e ba e1 47 5b 19 8e 48 67 fd bb b9 1a 79 c8 69 70 2e 68 1c a5 db 74 dc f9 a0 Data Ascii: \M+@o$)!@9T}D9Fj={i#w+[[{?M-\6+5fX\d\+$vzcs<Z,T8o;`#1fo.L%w.P$kYl`hAc lMWUG+'7GB0N'qg:G[Hgyip.ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50426	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	2219	OUT	GET /vi-assets/static-assets/audioApp-8440b3159e28c1ef0b8d.js?_sw-precache=302ca132b60b2f2c8b4794bccd0bd269 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; nyt.et.dd=iv=CBAF6F3A4B8540B2B0D4A7B6BBE99595&val=7CPVkKsNZVykr3jCkoKDyb+fO/d+qCrbDXE8s/oqpmLjWx1O7s/ZLgCKBH+H/1OiGP1dl4bGEupC32pJIxYC+nf3HPZuUMFQviB6J9AyTEdgjOW1Tc3Q35n+ReQdDjjPtLUSkjnpwZtWMOteMT5eYURXLiQXDfknU/nRTCvZrSTc84RDlCflCppWRouWUVuUkJCkDtjt9Vot/eMgxI8N2g==; nyt-b3-traceid=4fd8a04aa8864071bf23643573d24dc9; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800932593; datadome=zTtnnDi3OP57cfpZ9BD_RLJ2yTOFWvGQyP5n4UWvRFlsyx2n9WX8teuaRGt982YKX1rhdKuBg_J7bUw41R8vcO0n1TXUGaoBns7UA~zIM4znVLjnyWXnc_TfTuaTcVvZ
2023-12-05 18:13:57 UTC	1325	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 39 31 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 48 4a 4d 77 31 78 63 72 38 2d 38 47 43 4d 65 59 6e 47 74 55 61 79 45 32 55 78 35 34 78 5a 53 31 43 58 6c 6f 69 66 31 73 66 78 5a 74 45 51 4e 77 72 65 42 45 61 6d 42 4d 48 49 4f 74 76 51 52 71 63 69 42 65 78 35 45 49 39 77 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 33 20 44 65 63 20 32 30 32 34 20 31 33 3a 30 31 3a 32 36 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 8911X-GUploader-UploadID: ABPtcPpHJMw1xcr8-8GCMeYnGtUayE2Ux54xZS1CXloif1sfxZtEQNwreBEamBMHIOtvQRqciBex5EI9wQCache-Control: public,max-age=31536000Expires: Tue, 03 Dec 2024 13:01:26 GMTLast-Modifi
2023-12-05 18:13:57 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 38 5d 2c 7b 22 30 4f 59 75 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 69 29 3b 76 61 72 20 61 2c 6f 2c 6e 2c 64 2c 73 2c 6d 2c 72 2c 70 2c 6c 3d 74 28 22 67 63 52 2f 22 29 2c 63 3d 74 2e 6e 28 6c 29 2c 68 3d 74 28 22 71 31 74 49 22 29 2c 67 3d 74 2e 6e 28 68 29 2c 77 3d 74 28 22 69 39 6a 37 22 29 2c 66 3d 74 2e 6e 28 77 29 2c 75 3d 74 28 22 76 66 74 6a 22 29 2c 62 3d 74 28 22 4c 6a 42 68 22 29 2c 6b 3d 74 28 22 58 76 64 50 22 29 2c 76 3d 74 28 22 77 58 43 37 22 29 2c 79 3d 74 2e 6e 28 76 29 2c 78 3d 74 28 22 4a 71 70 39 22 29 2c 4e 3d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[48],{"0OYu":function(e,i,t){"use strict";t.r(i);var a,o,n,d,s,m,r,p,l=t("gcR/"),c=t.n(l),h=t("q1tI"),g=t.n(h),w=t("i9j7"),f=t.n(w),u=t("vftj"),b=t("LjBh"),k=t("XvdP"),v=t("wXC7"),y=t.n(v),x=t("Jqp9"),N=
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 54 3d 4f 62 6a 65 63 74 28 78 2e 63 73 73 29 28 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 79 2e 61 2e 66 6f 6e 74 2e 63 68 65 6c 74 65 6e 68 61 6d 53 43 53 65 72 69 66 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 79 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 6c 69 67 68 74 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 79 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 32 38 29 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 79 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 77 69 64 74 68 2e 6d 65 64 69 75 6d 4c 61 72 67 65 2c 22 70 78 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 79 2e Data Ascii: T=Object(x.css)("padding-bottom:3.25rem;font-family:",y.a.font.cheltenhamSCSerifBase,";font-weight:",y.a.font.weight.light,";font-size:",y.a.font.size(28),";line-height:110%;margin:0;@media (min-width:",y.a.breakpoint.width.mediumLarge,"px){font-size:",y.
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 65 66 74 3a 34 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 72 65 6d 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 7d 22 29 2c 71 3d 4f 62 6a 65 63 74 28 78 2e 63 73 73 29 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 2e 32 35 65 6d 3b 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 79 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 77 69 64 74 68 2e 6d 65 64 69 75 6d 4c 61 72 67 65 2c 22 70 78 29 7b 6d 61 78 2d 77 69 64 74 68 3a 34 30 25 3b 7d 22 29 2c 4a 3d 4f 62 6a 65 63 74 28 78 2e 63 73 73 29 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 35 65 6d 3b 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 79 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 77 69 64 74 68 2e 6d 65 64 69 75 6d 4c 61 72 67 65 2c 22 70 78 29 7b 64 69 73 70 6c Data Ascii: eft:4rem;padding-right:4rem;display:flex;}"),q=Object(x.css)("padding-top:1.25em;@media (min-width:",y.a.breakpoint.width.mediumLarge,"px){max-width:40%;}"),J=Object(x.css)("padding-top:2.5em;@media (min-width:",y.a.breakpoint.width.mediumLarge,"px){displ
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 2e 77 69 64 74 68 2e 6d 65 64 69 75 6d 4c 61 72 67 65 2c 22 70 78 29 7b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 79 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 34 29 2c 22 3b 7d 22 29 2c 51 3d 4f 62 6a 65 63 74 28 78 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 33 30 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 79 2e 61 2e 66 6f 6e 74 2e 63 68 65 6c 74 65 6e 68 61 6d 53 43 53 65 72 69 66 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 79 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 32 36 29 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 79 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 6c 69 67 68 74 2c 22 3b 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 22 2c 79 2e 61 2e 62 72 Data Ascii: .width.mediumLarge,"px){font-size:",y.a.font.size(14),";}"),Q=Object(x.css)("margin-top:1.25em;line-height:130%;font-family:",y.a.font.cheltenhamSCSerifBase,";font-size:",y.a.font.size(26),";font-weight:",y.a.font.weight.light,";@media (min-width:",y.a.br
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 63 28 29 28 22 6d 65 74 61 22 2c 7b 70 72 6f 70 65 72 74 79 3a 22 6f 67 3a 69 6d 61 67 65 22 2c 63 6f 6e 74 65 6e 74 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 30 35 2f 31 36 2f 70 6f 64 63 61 73 74 73 2f 61 75 64 69 6f 2d 61 70 70 2d 6d 61 72 6b 65 74 69 6e 67 2d 73 6f 63 69 61 6c 2d 73 68 61 72 65 2f 61 75 64 69 6f 2d 61 70 70 2d 6d 61 72 6b 65 74 69 6e 67 2d 73 6f 63 69 61 6c 2d 73 68 61 72 65 2d 73 75 70 65 72 4a 75 6d 62 6f 2e 70 6e 67 22 7d 29 2c 63 28 29 28 22 6d 65 74 61 22 2c 7b 70 72 6f 70 65 72 74 79 3a 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 2c 63 6f 6e 74 65 6e 74 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f Data Ascii: c()("meta",{property:"og:image",content:"https://static01.nyt.com/images/2023/05/16/podcasts/audio-app-marketing-social-share/audio-app-marketing-social-share-superJumbo.png"}),c()("meta",{property:"twitter:image",content:"https://static01.nyt.com/images/
2023-12-05 18:13:57 UTC	1379	IN	Data Raw: 70 70 20 53 74 6f 72 65 22 7d 29 29 29 2c 63 28 29 28 22 61 22 2c 7b 22 64 61 74 61 2d 74 65 73 74 69 64 22 3a 22 64 6f 77 6e 6c 6f 61 64 2d 62 75 74 74 6f 6e 2d 69 64 22 2c 68 72 65 66 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 61 70 70 6c 65 2e 63 6f 6d 2f 75 73 2f 61 70 70 2f 74 68 65 2d 6e 65 77 2d 79 6f 72 6b 2d 74 69 6d 65 73 2f 69 64 31 35 34 39 32 39 33 39 33 36 22 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 22 69 6d 67 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 53 2c 74 69 74 6c 65 3a 22 44 6f 77 6e 6c 6f 61 64 20 74 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 41 75 64 69 6f 20 41 70 70 20 6f 6e 20 74 68 65 20 41 70 70 20 53 74 6f 72 65 22 2c 73 72 63 3a 22 2f 76 69 2d 61 73 73 65 74 73 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2f 64 6f 77 6e Data Ascii: pp Store"}))),c()("a",{"data-testid":"download-button-id",href:"https://apps.apple.com/us/app/the-new-york-times/id1549293936"},void 0,c()("img",{className:S,title:"Download the New York Times Audio App on the App Store",src:"/vi-assets/static-assets/down
2023-12-05 18:13:57 UTC	637	IN	Data Raw: 73 2f 61 72 74 69 63 6c 65 73 2f 31 31 35 30 31 35 33 38 35 38 38 37 2d 43 6f 6e 74 61 63 74 2d 55 73 22 7d 2c 76 6f 69 64 20 30 2c 22 43 6f 6e 74 61 63 74 20 55 73 22 29 29 29 29 29 29 29 2c 63 28 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 44 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 22 64 69 76 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 22 75 6c 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 46 7d 2c 76 6f 69 64 20 30 2c 73 7c 7c 28 73 3d 63 28 29 28 22 6c 69 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 c2 a9 20 32 30 32 33 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 43 6f 6d 70 61 6e 79 22 29 29 2c 6d 7c 7c 28 6d 3d 63 28 29 28 22 6c 69 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 63 28 29 28 22 61 22 2c 7b 68 72 65 66 3a 22 68 74 74 70 73 3a Data Ascii: s/articles/115015385887-Contact-Us"},void 0,"Contact Us"))))))),c()("div",{className:D},void 0,c()("div",{},void 0,c()("ul",{className:F},void 0,s\|\|(s=c()("li",{},void 0," 2023 The New York Times Company")),m\|\|(m=c()("li",{},void 0,c()("a",{href:"https:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50427	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:57 UTC	2503	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 591 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841
2023-12-05 18:13:57 UTC	591	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 73 77 53 79 4c 4f 69 6f 45 74 4e 33 6a 73 32 6e 46 4b 71 48 42 56 52 5f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 7a 33 44 69 5a 4e 34 6d 4f 49 68 6f 4b 63 76 6f 6b 48 2d 65 59 36 7a 79 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 7a 33 44 69 5a 4e 34 6d 4f 49 68 6f 4b 63 76 6f 6b 48 2d 65 59 36 7a 79 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 33 36 39 30 34 2c 22 64 61 74 61 22 3a 7b 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: [{"context_id":"swSyLOioEtN3js2nFKqHBVR_","pageview_id":"z3DiZN4mOIhoKcvokH-eY6zy","event_id":"z3DiZN4mOIhoKcvokH-eY6zy","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"page","how":"beacon","client_ts":1701800036904,"data":{"canonicalUrl":"https://w
2023-12-05 18:13:58 UTC	1501	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:58 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50431	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	678	OUT	GET /images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:58 UTC	1201	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 31 32 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 45 74 61 67 3a 20 22 2f 4a 31 6f 41 77 48 76 37 73 70 35 63 76 36 2f 74 52 42 47 49 45 6d 58 5a 6d 62 42 4a 48 37 62 68 76 76 31 52 32 6b 61 38 41 6b 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 34 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 27122Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/webpEtag: "/J1oAwHv7sp5cv6/tRBGIEmXZmbBJH7bhvv1R2ka8Ak"Expires: Tue, 05 Dec 2023 14:
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 52 49 46 46 ea 69 00 00 57 45 42 50 56 50 38 20 de 69 00 00 f0 0c 03 9d 01 2a 00 04 ab 02 3e 91 44 9c 4c 25 a3 b2 35 a1 d4 5a a2 b0 12 09 67 6e 50 c6 e2 2f 81 65 7f ff f9 fc 6d e5 f1 3f f4 fb 23 c8 cc 96 dd cb bf af f3 bc 34 7d 3f fc 37 b0 17 f3 1f ed 3e 8c 3f ef f8 3f 78 3f 50 7f 35 ac db a9 27 e7 a3 fa df 3d a6 56 1e 95 f3 4c b1 cb 7f 78 ef 1f a6 9e 3d bf 83 fc a3 f7 26 79 ad f3 60 f3 76 df aa de 9f ff 01 91 f9 f0 ff fe be 8b 3d 7e c8 c5 7a d9 5f f8 9e eb 5f a7 73 e1 dd 4f ed fe 21 7e cc f4 d3 92 73 87 7d e0 fc 5f a0 ac ea be 6d d4 07 88 33 f2 df f8 3d 80 ff 51 7a c9 ff c5 e6 2b f6 3f f8 3e c2 be 5c de d3 bd 27 46 48 d5 56 87 43 cf 83 63 34 a0 bc cd 9f a6 5f 4e c0 54 31 f2 b6 3d 4f 07 d7 6d 03 d9 21 4b d5 01 af 8a ed ec 75 9b 56 78 25 3e ba 03 f6 d0 68 Data Ascii: RIFFiWEBPVP8 i*>DL%5ZgnP/em?#4}?7>??x?P5'=VLx=&y`v=~z__sO!~s}_m3=Qz+?>\'FHVCc4_NT1=Om!KuVx%>h
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 08 a4 2c 29 d4 69 51 9c af 85 92 39 d5 81 96 21 24 48 44 37 d0 bb 9e cd 03 2c 52 68 c1 0f 51 a2 ea 6c 8e 3c f8 58 eb 02 ce f8 b7 ec 26 f9 48 ae 4c fe c8 63 6b 50 3c 82 bf 61 c4 7a 7e 99 16 87 1e 00 93 46 2a 6d 91 b1 6f f5 9b 5d e7 9a 2a 79 36 54 71 3c aa f1 43 b1 a8 66 ae e3 a2 fa 9d 98 9b 95 37 d4 35 0a 0e 46 36 e8 c7 30 ed 95 5c 0f 37 4f 7b da 09 03 9f e8 3e 95 55 c7 91 3d c6 70 9f 7a 39 39 60 c5 09 79 19 6e 8e ad 0c b2 20 e1 c2 89 2e b9 89 8b 67 ed fc 36 7b 88 2e 71 f9 0b 9e ec e3 a5 69 2c a7 5e f8 f8 ec c2 aa 24 f0 fc 1c ea 42 54 b2 c7 b1 49 10 28 43 bb ee 06 94 c2 c2 ae 86 11 0d b0 0f 0e 12 09 91 94 0d 30 37 75 c1 20 c3 50 22 8e 3f cc 82 ed 54 97 a3 86 ba 47 85 05 8e 8f a8 28 18 5b 0b 0c c6 f5 e3 87 3a a2 fc dc 56 bc ce da 02 71 4c c4 f1 e1 b2 ad 71 Data Ascii: ,)iQ9!$HD7,RhQl<X&HLckP<az~Fmo]y6Tq<Cf75F60\7O{>U=pz99`yn .g6{.qi,^$BTI(C07u P"?TG([:VqLq
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 72 19 83 8a ac 2a 8f ef 30 2a da e4 9b f4 66 02 7b 43 75 c8 bd 3f 5c 62 c9 cc 43 3c 83 dd 93 3a 32 e4 9d f3 0e d5 a5 2c 70 00 69 e9 b7 db a3 75 63 c9 02 fa 69 41 71 c7 a8 76 3d 76 71 4d c3 bb 1f d4 ae 11 56 5f 5a 7b fd d4 f9 ee 8f 00 7a e9 9f 0b f4 91 d4 13 fb ff af 7b 9d b0 e2 28 83 4b 5d 3d 62 3c 37 e5 73 48 6b 1d 57 f8 f5 64 7e a6 69 de ef 66 1e 09 98 42 2f 27 03 ff 5a 09 38 87 c7 9b e5 92 eb 9d 95 3d dc 0e 6c bd 39 dd 5d 17 61 0a 8b 7e 05 e3 1b 19 9d e0 f8 fe 91 52 c3 9a a9 74 d6 8d b1 65 27 33 53 87 19 ab c6 79 35 0d 01 96 bb ee 9d ac 2e 95 30 f4 bb 11 48 10 37 66 86 db 52 eb 9a 35 6a 50 1a 6b 1c 64 ef c0 4d 40 8e c3 ae 20 1c 86 cb c3 50 7b 5a c3 1c 78 68 08 fb ca fe 60 2e d7 0c 4a 8d 72 ec ad b3 63 eb 50 94 28 f8 8f c9 7c 92 63 73 1f b5 72 d2 c5 58 Data Ascii: r0f{Cu?\bC<:2,piuciAqv=vqMV_Z{z{(K]=b<7sHkWd~ifB/'Z8=l9]a~Rte'3Sy5.0H7fR5jPkdM@ P{Zxh`.JrcP(\|csrX
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 96 59 44 b6 33 78 95 f0 0b 64 b9 46 7f 20 ec b5 fa 86 95 09 2e b2 74 87 5f 59 56 f2 89 63 bb de b6 17 c3 d2 ac c7 09 ad 39 29 54 48 dd cd c7 50 c5 53 c1 d8 f6 84 4e fd 1c ec 42 8c 98 bb 67 42 8e f9 85 93 8a b3 d7 f8 66 cf 94 4f ad 36 23 f3 62 75 d5 4e 9c e1 33 db ef d1 98 28 87 df 30 25 4f 3e 3c c1 22 16 e1 60 d7 f3 d7 20 42 60 aa 15 4e 6b 20 3c 90 87 ab 6b 92 c9 f3 5a 33 9c 23 65 cb 09 cb 61 38 90 a9 43 0c 32 81 63 c5 f8 6a 5d 63 0c ab e0 db d7 d8 ea 60 2f 4d 9a 53 ae ab 07 6c 94 30 af ef b1 2e dd a1 94 7c 90 66 59 92 3a 11 8c ad 44 2b 0a 15 4c 9c ff c1 de bd de 80 07 87 d4 bb 00 f1 b9 03 93 f4 7f 70 21 c9 c8 8b 60 23 0a 23 7a f4 65 8d b4 2f c3 12 a7 67 5c 00 3e b2 b7 25 99 e5 91 b2 a4 ee 61 6f ef e0 2a f5 6a 1c f8 89 cd 91 62 ac 6f 0c e7 8e ee f6 07 e0 Data Ascii: YD3xdF .t_YVc9)THPSNBgBfO6#buN3(0%O><"` B`Nk <kZ3#ea8C2cj]c`/MSl0.\|fY:D+Lp!`##ze/g\>%ao*jbo
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: f1 80 20 9a 65 ea 5a 20 52 37 a3 a5 e2 27 eb 33 d7 10 10 68 c3 d9 07 8b 22 06 54 43 bb 5d 43 9e 1b 0b 99 7c 74 d0 31 c8 c6 7f 5c 0b 45 9f e2 9a 07 55 d4 f0 3b 27 c5 04 b9 a6 32 a3 26 72 36 3e 79 a9 d3 91 fe bd d1 7a 7c b6 f6 09 e8 77 e9 a6 1c 3e e7 2d 2d 9a 91 cd 25 d6 b9 24 2b 64 ec f0 46 2f 50 54 52 f7 36 2a 8a 46 f2 d4 56 db 59 83 dc 64 9d 70 23 23 30 27 40 f6 5b 3c 11 63 38 9b 95 40 3a f0 ca 1c cf fa 3c af 3a 03 13 0d 66 c7 6c da b6 4e 40 ac 0d bc 1e 9d 6e d7 c7 10 99 ef 0e 21 fa 22 20 b9 c6 03 04 e9 6c 8a 67 41 2a e7 cd 27 af 0d 36 8a 3e 38 c3 b4 e6 24 87 5d 4a 78 0d 6f d0 89 2c 3f 7b 3f 9d 55 68 84 bc c0 d2 ee cf dc 9e cb 09 4b 4a 88 46 9a 1c b9 96 c3 00 da 61 6a 1b 88 26 ba 25 4c 0e 09 07 1c 73 75 49 b6 46 31 42 33 e5 ae 96 99 e9 0f f6 3d 43 d6 e2 Data Ascii: eZ R7'3h"TC]C\|t1\EU;'2&r6>yz\|w>--%$+dF/PTR6FVYdp##0'@[<c8@:<:flN@n!" lgA'6>8$]Jxo,?{?UhKJFaj&%LsuIF1B3=C
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: cc 53 11 b7 fe 24 d4 4d 43 a2 f5 c3 f8 4f 3c eb 7c 55 8c 76 74 9f 60 df a9 ea c8 a4 8c 50 0f 26 07 ac 6e a3 b9 69 77 9d 28 49 94 f6 b2 38 c0 13 83 97 38 0f b6 4d 01 11 5b 0c 25 c9 4d 08 fe 8f c6 73 7f e5 38 91 12 29 a4 18 e8 1c 5f 79 46 4e bc 79 93 a2 fc 4a d1 a5 ae 09 b1 a9 53 db 13 49 f2 23 b0 60 80 2c 12 15 a6 f3 58 00 01 42 80 50 03 73 38 7c 80 3d 23 ec 7e 90 1a c7 0c ea 64 32 26 d4 72 b9 63 d5 30 26 bb 0b 2b 15 c4 c3 a5 51 5f ec be cf 70 e3 42 ce 13 56 e0 a9 8e 1c 42 4c c6 57 16 2d d9 8d 1c 1d 20 ce c1 02 23 6d 51 d4 62 a2 f5 40 99 8a a9 58 dc 8b 1b 5e 05 8e c2 59 4c e7 be 3f d3 2c fc ff a4 0c c9 7c 8e 8e 6f 89 0e 9c 26 99 35 61 41 ad 16 f2 60 07 b7 57 b9 8f 06 a0 ae 1d 17 af 41 ba ba 68 e5 ac e2 aa c5 6a 61 18 3d cf 06 a4 39 cc a9 37 96 13 15 b4 f8 Data Ascii: S$MCO<\|Uvt`P&niw(I88M[%Ms8)_yFNyJSI#`,XBPs8\|=#~d2&rc0&+Q_pBVBLW- #mQb@X^YL?,\|o&5aA`WAhja=97
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: b2 23 46 91 fc bf eb a1 91 95 a1 c3 85 13 02 97 66 36 0b 72 54 fd da f0 e3 c9 b7 83 12 1c 2b e3 ea 9f 23 05 c9 f5 d2 f2 12 87 ae 42 61 21 d5 19 13 29 ee 9c 7f 55 ad c0 2e 2e 32 78 d2 12 93 02 78 bf e9 48 df fb a4 ff 58 fc 71 62 cb 0f 22 9d a1 86 ee 84 c1 db 0f 42 c4 49 d9 c2 21 02 f0 47 e7 b8 4a 38 91 a1 2a 38 22 bf 49 a9 3e 6c b1 4b d0 3a 25 46 28 be d4 6c 13 05 81 57 98 bb 00 9e 6d a9 ef a9 d1 1a ae c2 95 5a a9 00 e4 14 77 cd 0a f4 c1 69 c4 b3 c4 0b 85 b5 40 98 93 b7 2d b1 d6 c4 98 b3 b3 84 06 da 03 9d 67 66 e3 7e 95 21 b7 4b 28 89 52 1c b9 91 d2 36 7a ac 52 dd b6 f6 04 42 70 d5 07 fe e8 40 39 9d be 78 ee 02 6c 7f 07 c1 b9 47 90 32 ba 3d 9a d1 21 af cd 8c cf 50 00 e5 73 26 4d 27 ff 4f 25 4a 2e 88 ff 01 ee 5c ff c5 c6 2e 21 c0 ee 71 48 d1 3a 5c b6 c0 b1 Data Ascii: #Ff6rT+#Ba!)U..2xxHXqb"BI!GJ8*8"I>lK:%F(lWmZwi@-gf~!K(R6zRBp@9xlG2=!Ps&M'O%J.\.!qH:\
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: b6 97 eb 14 7d 60 71 e6 42 be 68 61 ed 4c da a4 68 54 c2 57 52 33 41 ca bd e2 8c c3 77 9d fb 44 1f da f5 cf ec e9 68 0f 7d 87 16 9e 27 8c 8b 77 fb e2 59 36 37 a7 8a d0 c0 34 3b da b0 5a 1d 1a a5 03 74 34 2d b5 cd cf 1a e7 6f 11 fc 5b b3 1d c1 fc 9f 41 6d 5c 24 85 8e 57 c8 65 f3 51 96 58 59 2d fb 90 2b ec 28 f5 c8 ae 44 2b 69 4c 4a 50 d4 43 10 f9 50 73 74 ea fe 6f ee 0f 64 89 1a 00 5d c2 97 e2 40 de 7c a4 50 56 d7 3e b4 c4 67 71 91 46 73 43 a2 87 9d aa 0c 73 b1 49 65 c6 e7 c5 3a 9d 38 64 09 e5 53 82 ec b2 cc 24 80 c9 b7 9c 96 5c 41 f8 78 16 e9 85 70 3f 07 4f c8 7e ae cd 7f 11 40 a4 00 bf e1 5c c5 2c 63 77 66 be ef 5f 48 96 01 b2 cd 25 63 25 80 18 f2 5f b0 19 13 48 90 fd 57 58 b1 28 26 1b bc d9 c1 f9 a3 4f cc 0d 91 b8 56 ed 4c 86 c6 e9 e8 7b bb c2 a5 95 27 Data Ascii: }`qBhaLhTWR3AwDh}'wY674;Zt4-o[Am\$WeQXY-+(D+iLJPCPstod]@\|PV>gqFsCsIe:8dS$\Axp?O~@\,cwf_H%c%_HWX(&OVL{'
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: fe 62 a9 24 a9 05 33 47 db 6f a0 21 63 18 96 58 a3 9c 63 13 35 df 11 db 9a 80 b5 d4 08 80 2c db 2f 17 7d be 11 a5 51 41 51 1f 40 66 9c 51 9b 50 da eb ce fd 5e 6d 53 bd 8e 59 e3 97 ac ad 11 b8 82 96 62 14 30 3c 0b 37 64 c1 34 73 b6 46 b4 d0 25 40 20 ab a3 94 c2 aa f4 7e 5a c6 d1 b4 fb 2f a6 74 5f 05 8e f1 56 ef 58 56 a8 c4 52 69 9e 16 94 bd aa 12 22 36 eb 75 f1 21 26 8e 2b ef b5 90 fa 87 d0 37 ba 60 fc 30 3c df 7f 72 7e 33 0c b8 df 78 57 d3 5d a6 58 f5 e5 a8 e2 67 13 93 72 8a f9 db 19 c2 51 81 42 76 e9 10 ec 59 07 b7 6c ee 94 01 62 b8 83 27 0d 6c b0 2f 53 da 61 d7 33 fa b1 0a d9 de f7 2f 33 20 df a5 13 aa ff cc a5 f6 e8 17 6b 0e de 12 ef 89 49 d4 a8 52 9f a8 7d d7 7d 73 60 61 41 9e 8d f6 12 09 ab 3f 39 e7 db 81 82 31 e0 ac 5a 0b a9 92 13 46 19 1a 27 7c 82 Data Ascii: b$3Go!cXc5,/}QAQ@fQP^mSYb0<7d4sF%@ ~Z/t_VXVRi"6u!&+7`0<r~3xW]XgrQBvYlb'l/Sa3/3 kIR}}s`aA?91ZF'\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50433	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	2364	OUT	GET /ads/parakeet.min.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754 If-None-Match: "adba4a1fb4bee00e1f70bd3e15c9f567" If-Modified-Since: Mon, 19 Jul 2021 19:29:47 GMT
2023-12-05 18:13:58 UTC	1372	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 34 20 4e 6f 74 20 4d 6f 64 69 66 69 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 38 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 54 61 67 3a 20 22 61 64 62 61 34 61 31 66 62 34 62 65 65 30 30 65 31 66 37 30 62 64 33 65 31 35 63 39 66 35 36 37 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 33 3a 33 37 3a 30 35 20 47 4d 54 0d 0a 41 67 Data Ascii: HTTP/1.1 304 Not ModifiedConnection: closeDate: Tue, 05 Dec 2023 18:13:58 GMTCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicETag: "adba4a1fb4bee00e1f70bd3e15c9f567"Expires: Tue, 05 Dec 2023 13:37:05 GMTAg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50428	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	2577	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841
2023-12-05 18:13:58 UTC	703	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 55 73 65 72 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 71 75 65 72 79 22 3a 22 20 20 20 71 75 65 72 79 20 55 73 65 72 51 75 65 72 79 20 7b 20 20 20 20 20 75 73 65 72 20 7b 20 20 20 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 20 20 20 20 20 20 20 70 72 6f 66 69 6c 65 20 7b 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 4e 61 6d 65 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 75 73 65 72 49 6e 66 6f 20 7b 20 20 20 20 20 20 20 20 20 72 65 67 69 49 64 20 20 20 20 20 20 20 20 20 65 6e 74 69 74 6c 65 6d 65 6e 74 73 20 20 20 20 20 20 20 20 20 64 65 6d 6f 67 72 61 70 68 69 63 73 20 7b 20 20 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 53 75 62 73 Data Ascii: {"operationName":"UserQuery","variables":{},"query":" query UserQuery { user { __typename profile { displayName email } userInfo { regiId entitlements demographics { emailSubs
2023-12-05 18:13:58 UTC	1314	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 39 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 149access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:13:58 UTC	215	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, Origin, Accept-EncodingTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:13:58 UTC	149	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 2c 22 70 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 75 73 65 72 49 6e 66 6f 22 3a 7b 22 72 65 67 69 49 64 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 6c 65 6d 65 6e 74 73 22 3a 6e 75 6c 6c 2c 22 64 65 6d 6f 67 72 61 70 68 69 63 73 22 3a 6e 75 6c 6c 7d 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 44 65 74 61 69 6c 73 22 3a 6e 75 6c 6c 7d 7d 7d 0a Data Ascii: {"data":{"user":{"__typename":"User","profile":null,"userInfo":{"regiId":null,"entitlements":null,"demographics":null},"subscriptionDetails":null}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50432	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	2187	OUT	GET /vi-assets/static-assets/audio_app-fcc6aae6ed18840c4d678ad97f4d5423.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754
2023-12-05 18:13:58 UTC	1328	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 37 37 38 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 7a 61 49 66 64 37 33 6a 64 50 36 5f 69 69 2d 49 6a 71 79 42 48 54 72 30 61 2d 5a 45 71 37 66 50 55 76 72 76 65 78 2d 79 4a 4d 52 33 4b 63 45 53 43 43 79 52 58 7a 48 78 50 7a 71 72 75 37 36 47 38 62 74 6c 43 45 7a 51 4e 58 6c 74 74 4c 2d 59 6c 44 59 30 59 62 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 39 38 30 37 34 35 32 30 37 34 31 31 33 38 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 117784X-GUploader-UploadID: ABPtcPozaIfd73jdP6_ii-IjqyBHTr0a-ZEq7fPUvrvex-yJMR3KcESCCyRXzHxPzqru76G8btlCEzQNXlttL-YlDY0YbAx-goog-generation: 1698074520741138x-goog-metageneration: 1x-goog-stored-
2023-12-05 18:13:58 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:58 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7d 00 00 01 d5 08 06 00 00 00 84 d4 4d d3 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 cb ad 49 44 41 54 78 01 ec fd 5b b4 6d db 59 1e 88 fd bd 8f 31 e6 9c 6b ed db 39 3a 12 48 20 84 84 65 84 6d 61 81 53 d8 2e ec 42 e0 72 62 57 39 8d 8b 2b 71 92 87 34 a0 a5 b5 bc 02 cf 79 00 de f2 14 c0 49 1e 92 b8 1a e0 72 25 6e 69 55 05 72 5a d2 e2 96 60 20 55 2e 73 b1 91 64 30 17 63 2c 09 84 6e 47 e7 b2 2f 6b ad 39 e7 18 a3 f7 f4 ef fb fe 3e e6 5c fb ec 73 83 a3 bd cf 5a bb ff 47 5b 6b ad 79 19 a3 8f 3e c6 9c fd 1b df ff 7f df 1f be f6 db be 3d 5b 8b 16 2d 5a b4 68 d1 a2 45 8b 6b 1b d1 ec 07 a3 b5 68 d1 Data Ascii: PNGIHDR}MpHYs%%IR$sRGBgAMAaIDATx[mY1k9:H emaS.BrbW9+q4yIr%niUrZ` U.sd0c,nG/k9>\sZG[ky>=[-ZhEkh
2023-12-05 18:13:58 UTC	16384	IN	Data Raw: 9e dc 5f ab 0a 76 b3 cc 56 43 74 4f 3f 4f f7 36 d4 d7 a2 c5 53 19 d5 b1 29 b8 4f df 92 ad 3d b2 6f f9 e2 97 ee d9 dd 7b 2f db 3c 8f fa 2e 69 14 5f 8b 6b 18 2d bd db e2 ca 05 54 ba a8 cd fb c2 e7 5f b0 2f bf f0 02 5d f4 71 67 5e fd b5 98 d2 4d d9 d3 32 02 7b 29 87 56 94 dd a2 c5 53 1a d3 38 da 38 4e fe 1d 70 00 7a 21 1f 6a 7f 1f 5c 9c 11 f0 01 f1 4d d3 48 83 e6 c6 8b b4 b8 6e d1 40 5f 8b 2b 19 43 3f d8 c5 83 07 b2 62 41 c8 98 cf 8e 3d 5b c2 91 a7 7e 64 95 4e 8b 16 2d 9e c6 e8 bb 8e c6 ed f6 0a d3 65 cf 00 14 10 b8 19 d6 cb ef 72 02 b0 76 a3 d8 e2 da 45 03 7d 2d ae 5c b0 c3 46 f9 76 5e af 7b ab fe a9 a1 16 5d e7 cb 39 99 a5 ce cf db 2b b5 68 d1 e2 e9 0b 88 32 42 9a 58 db 5b d9 3e f1 7b f3 02 ec 46 9a 37 cb ae 65 e8 7b f5 de 6d 5f 19 2d ae 59 34 ee ba c5 15 Data Ascii: _vVCtO?O6S)O=o{/<.i_k-T_/]qg^M2{)VS88Npz!j\MHn@_+C?bA=[~dN-ervE}-\Fv^{]9+h2BX[>{F7e{m_-Y4
2023-12-05 18:13:58 UTC	16384	IN	Data Raw: d2 45 ca 14 b5 8b 2e d6 c0 85 83 73 cf 54 af 8b 39 a4 a0 4d 62 11 7b ef 9a 12 a3 77 e0 d0 0d 05 bb ae b0 0f 72 a2 a8 85 0a f2 59 82 0b cc 19 11 6b 76 db 97 19 cc ef 96 f3 06 df 44 8a 9a 5d dc 61 5e 4b 0a 13 70 14 17 20 8d db cd 6e 54 ed 42 15 1c 27 4e f1 c9 66 cd fd 4d a3 84 41 12 9f 3c e6 1b 30 3f 7e 82 7a 1e 88 ab 88 6b 67 13 d3 f7 0b 81 bc d5 52 90 c6 f2 b5 b8 7e d1 40 5f 8b ab 13 ee a6 1f ea cf 18 0e 96 2d ae 16 a4 15 c9 91 44 37 b8 72 74 58 c5 27 7e e7 0e 11 06 b4 ae f4 47 f3 62 7a 16 c8 9b b1 70 1f 29 57 2c 9c ec 99 50 c6 8a c5 12 16 19 00 15 6b 61 9b 02 9a 36 04 1c b0 5f a1 d1 30 80 0a 3c e2 3a 79 fc 85 c2 60 4d db 0b f7 df 2b 29 e4 90 0a 88 58 17 96 46 f6 24 d6 79 cb 34 b0 59 00 13 b3 ea ce 76 58 07 61 e8 dc cb 34 18 35 62 37 a0 44 75 bf bc f3 8b Data Ascii: E.sT9Mb{wrYkvD]a^Kp nTB'NfMA<0?~zkgR~@_-D7rtX'~Gbzp)W,Pka6_0<:y`M+)XF$y4YvXa45b7Du
2023-12-05 18:13:58 UTC	16384	IN	Data Raw: ac 65 26 73 69 89 5d be ab 4d 4d 4c 02 ab cb 70 91 ea f5 ea c4 fd 91 e8 e8 5d de fd 68 33 eb 9b 89 f6 c0 7e 86 52 32 4f dd ea 9a bc 81 18 05 ad de 2d eb 5b a7 e5 e9 9e 15 9a 60 e3 b4 2c 6d c1 f4 15 76 38 ac 00 7d 85 1d 28 8b 5d 86 9d 64 51 fa 7e 1a d3 47 56 eb ea 0a f7 67 5d fc 55 1c 93 4d 07 4e 17 74 ee 3d 37 0f ee cb 2a c6 0e ed bb c6 2c 33 52 91 c4 7a c5 88 a9 4b c6 12 a9 e6 05 66 a1 af 71 7e be 56 17 d1 64 00 1e 24 31 f8 42 86 03 e5 b0 3c 75 ed cd f1 60 db 11 d7 a0 66 5c 02 64 81 05 c3 2e fa 88 ad c3 3a 9e c3 b9 56 cb 4a d5 ca 81 ea b9 59 cd e4 04 b3 d3 e9 42 16 a5 2a cc 8d ca 9c a8 b6 5d 89 99 31 54 67 98 a9 d5 84 79 93 63 2e a2 c8 9e ba 54 9d 17 0d 03 25 dc a8 7e 10 4b dd 56 a9 14 02 c0 87 8c dd 72 49 d8 a5 06 03 9b 4a a0 eb c9 b1 73 d5 20 a4 de 2e Data Ascii: e&si]MMLp]h3~R2O-[`,mv8}(]dQ~GVg]UMNt=7,3RzKfq~Vd$1B<u`f\d.:VJYB]1Tgyc.T%~KVrIJs .
2023-12-05 18:13:58 UTC	16384	IN	Data Raw: b0 90 fd 62 06 09 60 a2 ca fb ee b1 9b b9 1b b1 6b bf c2 c0 a8 e3 51 b5 5e 93 8a 20 46 40 b1 47 dd d0 4f 85 9f 03 bf 22 fb 1f 08 fb d5 96 4a 15 91 88 35 0f b4 fc 06 a9 2b bc 37 d0 ec d7 4a 59 63 d5 70 4d c5 48 26 61 b6 6a 3e 60 d0 c8 fb 37 63 98 0d 2d f3 7e f6 d8 cd d9 8a 25 26 b3 2a d5 cf 22 61 13 51 e2 ae dd 19 50 43 ae 31 ad af 0c f0 05 cd 3e b8 b5 f9 20 53 87 dd d3 36 a8 4b 66 32 c0 7c d8 8d a8 b5 79 81 b6 2e 9e 11 20 2f 22 d1 dc b7 16 ea e9 42 3c 5b ca 9b a9 de 62 24 31 9f 56 ae 6b 94 a1 2b b9 ec 59 5c 0b 03 94 73 83 cb 97 f7 a1 c4 00 d5 47 6d 65 00 7a f0 6a 41 49 12 68 12 0e 0b 8c 16 6a 13 83 d1 2c 95 3c 01 6e 60 8e 23 66 13 67 1a 7c 5d 00 66 cb ad 16 22 35 57 e3 2b ab 0a 84 63 ab 0c ba ef ea fc 92 d4 b3 46 9c a9 95 f2 76 be b0 e9 cc 94 a2 0c e0 40 Data Ascii: b`kQ^ F@GO"J5+7JYcpMH&aj>`7c-~%&*"aQPC1> S6Kf2\|y. /"B<[b$1Vk+Y\sGmezjAIhj,<n`#fg\|]f"5W+cFv@
2023-12-05 18:13:58 UTC	16384	IN	Data Raw: fd 64 92 94 4e 4f 80 bf fc 9a 58 3f ef 25 e0 59 76 c8 55 f2 b1 a2 df 92 32 89 9e 6e 1f 6e dd 38 8a a9 d3 e9 e8 74 df a3 e7 62 b3 85 15 f6 d5 66 45 f6 6e 61 07 cb f8 49 7c 64 79 99 4a fd 81 64 ef a2 0e 6f bb db a2 32 bf a5 97 50 92 cd b9 78 87 ae 5e 93 56 f0 f0 7d 57 b2 2d e3 62 1a 7f b0 67 d9 b3 ec a7 d2 7e 44 f7 de 7b af b0 03 ef ff c0 07 53 76 ef 13 7f fe 17 92 d1 8a 69 00 3d c8 d4 fd fd df 7f 17 bd f7 0f ff 6f 59 73 96 41 1e b2 79 2f ae ae d2 83 0f 7d 81 56 56 56 e8 ce 3b 3f 2e eb 20 e6 0e 19 b9 a7 4e 9d a0 ff f4 ab ff 45 62 f6 60 00 55 ef e4 36 60 c8 98 45 9b 77 7e ec e3 f2 1b 31 7a c8 fe 3d 7b f6 e9 89 c3 83 79 17 2f ae 4a e6 6c 76 ff 90 80 01 66 0f d9 b9 70 4f 9f 39 7b 56 80 df fb df af fb 91 64 e4 42 07 f1 2c cf 9b 9b 9f 95 7d 46 a6 6d 02 d0 4e a6 Data Ascii: dNOX?%YvU2nn8tbfEnaI\|dyJdo2Px^V}W-bg~D{Svi=oYsAy/}VVV;?. NEb`U6`Ew~1z={y/JlvfpO9{VdB,}FmN
2023-12-05 18:13:58 UTC	16384	IN	Data Raw: ce f9 04 1a 02 da 89 c6 01 61 bd d0 de 42 04 1d 04 9d 93 97 bf 21 ad bd 5e 09 a3 e1 00 86 ea 85 0e 60 48 f8 d6 97 1e 33 18 e7 07 d8 7b 97 d1 49 e0 fc 8d 71 b7 d0 ee a6 36 d2 1c 9d 57 b3 06 6b 0b 44 39 70 cd 42 52 55 23 e8 f5 fb 51 1b 96 14 8d c5 b2 2b 4f 28 9e 48 09 9c 3d 1f 94 6d 8b 7e 3c a1 ca 36 5a 60 03 a9 06 1e df fa 81 7f 4a 92 35 7c dd 6f 3c 6f 51 55 7a e8 e0 41 ad f6 dc b3 87 ec fa ac 5a 11 89 9a 55 bb 2e cc cf 37 a4 7b d6 93 16 49 d8 93 4f 7e 8d ea 7f f2 93 9f 20 89 15 4a f1 8e aa f6 d1 3b 18 db d3 21 5c 9e 23 f5 27 aa 2e 51 1a f6 96 6b de 4c e4 68 e7 ae 1d 54 c7 70 75 df 83 3a 81 d2 3c b2 c5 23 82 a7 48 d5 63 7f 4e 6a 68 54 91 5a c9 11 be b6 18 29 5c a8 26 c6 7e 50 aa 66 af e1 77 d8 b2 60 8e cd bb fd 8d 76 1a 9b c7 5d 3b 76 c0 fc c2 02 44 bf ad Data Ascii: aB!^`H3{Iq6WkD9pBRU#Q+O(H=m~<6Z`J5\|o<oQUzAZU.7{IO~ J;!\#'.QkLhTpu:<#HcNjhTZ)\&~Pfw`v];vD
2023-12-05 18:13:58 UTC	3096	IN	Data Raw: 83 52 b3 8d f4 7c 51 00 db f4 31 a6 12 4c fa 18 1d 84 a4 09 7a 6e b6 4f bb f7 1e 66 ca c0 09 dc a4 56 12 c2 4a f8 6a 93 8b 57 e7 db 5c 2b 16 16 e6 61 cb 16 4d a2 e6 e7 17 60 61 7e c1 9d 9f 9f 9f 77 c7 48 d6 2c f1 da b9 43 bf db 6b fb f7 ef 87 1b de fe 0b b0 77 ef 3e 47 20 c3 f6 f1 fa bb 7e e5 bd f0 e4 93 4f 93 64 c3 02 db bc 66 f7 9b 1d 89 7b d7 8d ef 84 63 c7 8e c1 0d ff 48 b7 f5 7e b5 20 22 ec 82 78 ff 67 fe 10 ee bd f7 d3 54 26 44 38 6e 2c 7b c7 ed 1f a4 77 ec db 9e 67 30 c6 01 37 08 47 d5 7d 75 ef 7d 9f 56 f7 cc 3c dd 93 3b 77 ec 70 d7 ed 31 3e 2b 58 06 5f 88 5d bb f4 79 2c 8f f7 1a be 1f 3c 78 88 ae 3f fa e8 9f 8d ed 13 ef e3 9b d4 73 81 58 15 f1 73 f3 83 86 9e 0f 84 c9 db 2d 28 c3 4f 59 94 94 b1 83 c2 3b d5 f6 2a 83 31 5d 60 d2 c7 e8 20 28 45 3a 2c Data Ascii: R\|Q1LznOfVJjW\+aM`a~wH,Ckw>G ~Odf{cH~ "xgT&D8n,{wg07G}u}V<;wp1>+X_]y,<x?sXs-(OY;*1]` (E:,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50430	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	666	OUT	GET /images/2019/07/03/reader-center/author-elian-peltier/author-elian-peltier-thumbLarge-v6.png HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:58 UTC	1095	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 36 34 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 4c 34 33 35 56 43 46 38 38 76 2d 6b 6a 68 76 36 47 52 48 4a 52 36 69 72 6d 37 79 36 7a 4e 5a 31 74 45 7a 72 6f 64 46 4a 67 79 51 50 79 5a 6c 48 47 79 4e 30 62 77 4e 73 36 6a 53 53 30 41 30 6c 6b 64 67 68 30 6c 2d 66 49 36 48 50 57 61 37 6b 50 4f 57 6b 64 44 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 21647X-GUploader-UploadID: ADPycduL435VCF88v-kjhv6GRHJR6irm7y6zNZ1tEzrodFJgyQPyZlHGyN0bwNs6jSS0A0lkdgh0l-fI6HPWa7kPOWkdDQCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 07 74 49 4d 45 07 e7 02 1c 0f 34 28 22 59 26 ed 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 54 36 49 44 41 54 78 da e5 bd 79 90 24 f7 75 df f9 c9 cc ba ef ea aa 3e e7 e8 9e 0b 98 19 40 00 89 63 00 92 22 29 d2 41 83 f2 52 96 68 c9 87 64 ae ad 0d 7b e5 db eb 5d db eb db 6b af d6 61 c9 61 c7 86 77 ad b5 bd 5e 6b 25 5a 96 64 5a 94 18 b4 c2 96 bc 36 45 d2 14 29 80 24 48 00 03 60 0e cc 0c 7a 7a 7a fa ae aa ae fb ca cc fd 23 eb fd e6 55 4e f5 60 06 d3 3d 04 e8 8c e8 98 e9 ea 3a b2 f2 f7 cd ef 7b bf 77 7c 9f c5 7f 45 c7 e6 d6 aa fe d5 1a fd 6b ab ff cb e1 8d 7e 00 98 99 3e 74 a7 f7 d8 eb f5 fe e8 ff fe a4 f7 f9 6e 3f ac ff 8a 80 64 8f 7e ee 05 38 51 20 06 Data Ascii: PNGIHDR<qtIME4("Y&orNTwT6IDATxy$u>@c")ARhd{]kaaw^k%ZdZ6E)$H`zzz#UN`=:{w\|Ek~>tn?d~8Q
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: dc dc ac 79 4f ed c7 8d 4c a7 be 1e 1b c0 5f 01 7e c1 02 d7 bf 15 cf fb 8e b3 d7 77 04 58 61 5f ea 95 57 ce bb 1f fd c8 87 ad ad ed 9d 3f e3 fb fe 4f 59 96 95 e6 4e 0e b9 b6 13 83 21 8d 66 8b eb d7 6f d0 ef f5 79 e1 85 af d3 6e b7 99 9f 9f 67 73 73 93 8b 17 2f e2 fb 1e fd fe c0 f8 47 cd 66 73 e4 3b 75 c8 e7 f3 c4 62 31 da ed 36 f9 7c 9e e9 e9 69 00 86 c3 e1 08 6c 01 53 f5 fb 7d 9a cd 26 c3 e1 10 df f7 e9 f7 fb c1 c9 39 0e 91 48 84 c1 60 c0 60 30 20 16 8b e1 ba ae 01 44 22 91 a0 5c 2e 93 cf e7 71 5d 97 76 bb 4d b7 db 35 00 ed f5 7a 40 60 8a f3 f9 3c 4f 3e f9 04 3f f8 43 3f c0 d3 4f 3f 45 2c 16 65 30 18 e2 79 2e ae eb 92 4c 06 fe 9b 30 98 02 d8 0b c0 1f 07 5e 79 a7 b0 d7 03 07 56 38 26 65 db f6 d0 f7 fd 53 ae eb fe ac 65 d9 df 6b 59 96 e7 fb be 6f 59 7b 03 Data Ascii: yOL_~wXa_W?OYN!foyngss/Gfs;ub16\|ilS}&9H``0 D"\.q]vM5z@`<O>?C?O?E,e0y.L0^yV8&eSekYoY{
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: cd 66 93 85 85 05 0a 85 82 31 4f bb bb bb c6 a9 96 f8 d4 a4 48 b9 ec fe 06 83 01 91 48 84 54 2a 85 65 05 e7 2a 3f f2 7c 01 95 6c 24 6c db c6 75 5d 06 83 80 95 33 99 0c b6 6d 93 48 24 0c 1b 8a 59 ad d5 6a fc eb 5f f8 25 e6 e6 e7 18 0c 06 d4 aa 55 7e e8 87 7e 90 f9 85 39 f2 f9 3c 89 44 dc 9c 4b 88 bd 86 c0 07 80 af 10 a4 c2 ce 3f 28 70 45 0e 18 54 52 29 09 f0 8b c0 8f 8e be 94 49 c3 c8 e1 ba 3e 11 27 4a 3e 9f 1f fd ee d2 68 36 39 72 f8 28 60 91 4c 06 db f1 48 24 42 a3 d1 60 6d 6d cd 00 f2 91 47 1e 31 db fa 20 a6 b5 45 b5 5a 35 d1 ed 6a b5 8a ef fb a4 d3 69 c3 5a 1b 1b 1b d4 eb 75 8e 1f 3f 4e 2e 97 e3 fa f5 eb 06 14 12 0e 18 0c 06 b8 ae 4b b7 db a5 df ef 8f c5 ae 04 64 02 8c 64 32 69 9c f3 dd dd 5d ba dd ae 01 cf 78 c2 db 37 3e 96 ec 3c e5 7b 38 8e 43 b7 db Data Ascii: f1OHHTe?\|l$lu]3mH$Yj_%U~~9<DK?(pETR)I>'J>h69r(`LH$B`mmG1 EZ5jiZu?N.Kdd2i]x7><{8C
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 06 ba 6c 36 4b a9 54 c2 f3 3c 92 c9 24 c9 64 72 14 db ea e0 79 2e cd 66 d3 54 54 dc e1 d0 7f fc 79 82 5e 81 01 dc 39 3f fb c0 80 a5 0e 49 d3 fc 3d 82 3a f4 61 98 0d 7d 1f ba dd 3e 9d 4e 8f 4e a7 cb ee 6e 83 88 13 c5 71 22 c4 62 31 76 76 76 cc 1d 2c 69 8e 5e af 67 4c c7 ce ce 0e 1b 1b 1b 44 22 11 ae 5e bd ca cd 9b 37 b1 2c 6b 54 23 15 25 99 4c 1a 46 10 f3 a2 81 a6 59 43 e2 49 1a 1c 02 58 31 4b 7a d1 1d c7 31 6c 21 cf d5 80 93 1f 01 47 18 4c fa e6 92 c7 64 c7 28 df 4f 00 27 a9 25 61 db e1 70 48 bd 5e 37 66 af 50 28 04 e6 6f b4 79 91 1b 25 1e 8f e3 79 3e 6b 6b 1b 34 1a 4d f3 fe 6f b1 f6 1e 41 4b dc af 00 67 47 6b e8 4c 20 8d 07 07 2c f5 c1 92 46 f8 71 e0 af 4f 02 55 b0 a0 0e 83 fe 90 dd dd 3a 95 9d 2a 11 27 46 a9 54 06 7c d6 d6 d6 cc c5 6c b7 db e4 72 39 5a Data Ascii: l6KT<$dry.fTTy^9?I=:a}>NNnq"b1vvv,i^gLD"^7,kT#%LFYCIX1Kz1l!GLd(O'%apH^7fP(oy%y>kk4MoAKgGkL ,FqOU:*'FT\|lr9Z
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 4d 60 ab bf 0e 7c e8 4e 26 d0 bc 76 63 8b 4a 65 d7 e4 bb 24 31 7c e3 c6 0d d6 d6 d6 18 0e 87 a6 3a b3 d3 e9 30 18 0c c8 66 b3 1c 3e 7c 98 6e b7 cb 6b af bd 86 eb ba 6c 6f 6f 9b 40 a8 2c 94 80 46 b6 de 9a 2d c2 d5 08 e6 0b 28 f6 12 66 d0 4e be 66 22 fd 5e f2 bb 66 b9 58 2c 66 82 ab 3a 3f a8 81 a8 4d a1 54 b3 6a 33 28 80 0a 9f bb e3 38 c4 e3 71 13 37 d3 c1 57 49 6a cb 35 95 b0 84 4e 55 b5 47 9d df 2f bf 7c 9e af 7d f5 79 3e fa bb be 8f 62 b1 b0 a7 b4 c0 04 70 01 fc 24 f0 1b c0 f2 bd 32 d7 bd 30 96 d0 e4 a3 04 9d c9 77 34 81 16 41 55 e8 d6 d6 0e f5 7a 83 b9 b9 39 4a a5 12 d3 d3 d3 bc f4 d2 4b ac ae ae 9a ed b6 38 c1 f5 7a 9d e1 70 68 7a f8 7a bd 1e b5 5a cd 04 08 25 78 a9 cd 9a 06 8e 5e 5c bd 50 e1 df c3 80 d2 cf 91 05 d3 6c a1 df 47 16 5d 7e 74 ca 48 16 59 Data Ascii: M`\|N&vcJe$1\|:0f>\|nkloo@,F-(fNf"^fX,f:?MTj3(8q7WIj5NUG/\|}y>bp$20w4AUz9JK8zphzzZ%x^\PlG]~tHY
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 75 1c 87 5a 6d 97 57 5f 7d 95 d5 d5 55 4a e5 12 b3 33 33 54 8b 05 7a dd 1e a7 1e 3a 49 26 73 d7 e0 12 32 f9 13 04 f2 49 37 de 8a b5 22 6f 81 d4 21 41 77 c7 1f bf 17 b6 12 c6 1a b8 03 3c d7 26 9d 4e 13 8f c7 a9 56 ab cc cf cf 33 3f 3f cf da da 1a b9 5c 8e b3 67 cf d2 ed 06 a2 1e e2 b4 0a 1b 49 6d b8 f8 1b 62 0e 74 13 a8 30 8d f8 4b b2 55 cf e7 f3 e4 72 39 a6 a7 a7 29 95 4a 06 a4 02 0c 6d 3e c4 df 32 e2 1c 30 16 c0 94 24 b9 8e ba 4b 41 60 b7 db 25 93 c9 90 c9 64 d8 dc dc 24 9f cf 53 28 14 98 9a 9a 32 e0 16 16 91 d7 8a 72 4d bb dd a6 58 2c 52 28 14 e8 74 3a 14 8b 45 00 6e dc b8 c1 d2 d2 92 a9 41 93 ef a7 1b 3b 74 35 aa b4 e8 a7 52 29 0a 85 82 89 ca 0b db 75 bb 41 05 44 a3 d1 60 76 76 36 a8 26 29 e4 89 c7 13 44 a3 91 bb 01 97 60 61 16 f8 d3 04 71 cc 3b b2 56 Data Ascii: uZmW_}UJ33Tz:I&s2I7"o!Aw<&NV3??\gImbt0KUr9)Jm>20$KA`%d$S(2rMX,R(t:EnA;t5R)uAD`vv6&)D`aq;V
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: f6 70 da 23 04 f5 38 6f 8b ad 80 40 f6 da 0b 52 15 f9 7c de 00 6a 7e 7e 9e e9 e9 69 a3 a2 92 4e a7 c9 64 32 a6 79 42 4a 6f 1d c7 19 db 3a 4b 00 74 6b 6b 8b d9 d9 59 ce 9e 3d 4b a1 50 60 7a 7a da 74 08 4b 28 41 33 92 66 a5 b0 8f 34 c9 21 0f 3b f4 13 54 8b c7 02 a9 61 d9 47 fd 59 e1 cf 08 83 57 3b fb ba 6c 47 7c 35 bd 11 88 46 a3 64 32 19 b3 51 c9 e7 f3 6c 6e 6e 8e 55 da 4a ce 50 76 cd 9a 9d 83 50 0d f4 fb 03 6c cb c6 71 22 6f 77 3f 26 01 d3 29 e0 0f 11 4c cd b8 cd 89 b7 f7 40 e3 d3 04 a3 d8 fc b7 0b 2c d7 0d 44 61 d7 d7 d7 c9 64 32 74 3a 1d d6 d6 d6 f8 e6 37 bf 49 b7 db 35 bb c1 99 99 19 52 a9 14 ad 56 8b e5 e5 65 d6 d7 d7 a9 54 2a e6 ce dd da da 1a 6b 38 98 9a 9a e2 dc b9 73 3c f6 d8 63 cc cc cc b0 b0 b0 40 b1 58 34 dd c1 62 42 74 f8 40 57 29 84 2b 16 26 Data Ascii: p#8o@R\|j~~iNd2yBJo:KtkkY=KP`zztK(A3f4!;TaGYW;lG\|5Fd2QlnnUJPvPlq"ow?&)L@,Dad2t:7I5RVeT*k8s<c@X4bBt@W)+&
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: ab 55 53 27 26 92 99 3a 8c d0 ef 07 53 2c 44 7f 5e 4a a1 37 37 37 0d 58 75 97 d0 7d 00 eb 28 41 96 a6 33 7a cc 17 56 92 6f f5 34 fb 7c c4 62 51 12 a3 aa cc 54 2a 45 2e 97 33 a2 b5 c5 62 71 4c ca 5a 80 28 bb 15 b9 20 72 b1 74 17 70 38 52 ad 7b 0e 05 00 9a 49 26 b5 d1 87 43 10 6f b5 cb 0b b3 cc 24 86 d2 fe e5 24 40 ea c7 f5 67 86 9f af 3f 47 37 82 a4 52 29 53 b4 98 4c 26 8d 4f 29 d1 77 dd fb 08 18 05 1a b9 46 53 53 53 1c 5b 5a da af 1d a1 a8 38 2e 29 ec d8 9b 5b ab 63 63 72 23 04 3b 42 f6 cb 0c 8a e3 ed fb ae 19 21 12 68 38 35 a9 54 2a 26 68 2a 17 4e cf 92 91 ed b2 98 43 cd 80 7a 0b ad 1f 97 ac 7f d8 c4 84 75 af b4 43 ab 99 4b 5f 6c 2d 1f a4 65 86 c2 b1 a8 b0 5f 16 36 b1 1a 44 f2 7a 1d 54 0d eb 6d e9 cf d6 00 93 2a 57 51 2f cc 66 b3 a6 de 4c 0a 11 c3 33 b1 Data Ascii: US'&:S,D^J777Xu}(A3zVo4\|bQTE.3bqLZ( rtp8R{I&Co$$@g?G7R)SL&O)wFSSS[Z8.)[ccr#;B!h85T&hNCzuCK_l-e_6DzTmWQ/fL3
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: a9 54 4c 0b 96 e7 79 ec ec ec 18 87 f9 d2 a5 4b f8 be cf a5 4b 97 4c 35 6c b5 5a 35 72 db e5 72 99 ed ed 6d e6 e6 e6 98 9d 9d 25 9f cf 4f dc 30 c8 79 89 d8 88 f4 0d 84 1b 41 b4 ae d6 fa da 3a 57 ae 5c 65 66 e6 19 e3 eb ed d3 71 d8 ac f7 e8 df e4 c8 46 1e 18 b0 6c db 86 88 cf ee 6e 90 e3 ab d5 6a e6 ae 3e 7e fc 38 6b 6b 6b 66 68 78 32 99 64 61 61 81 0b 17 2e 10 8b c5 a8 54 2a 66 f2 aa 00 49 eb 63 e9 c5 97 94 85 28 b7 64 32 19 b6 b7 b7 59 59 59 61 77 77 d7 74 15 4b 86 5f 76 89 b5 5a 8d 0b 17 2e e0 79 1e 47 8e 1c a1 db ed 1a ad 07 2d 5e ab c1 2d 02 71 92 14 4e a5 52 1c 3a 74 c8 80 43 be a7 6e 6a 90 36 2d 31 e1 df f8 c6 37 d8 de de 66 69 69 89 85 85 85 31 59 cc a5 a5 25 73 f3 cd cc cc 98 8a 10 cd 40 02 b6 58 2c c6 dc dc 9c 29 f3 9e 94 90 97 d7 b9 ae cb d5 2b Data Ascii: TLyKKL5lZ5rrm%O0yA:W\efqFlnj>~8kkkfhx2daa.T*fIc(d2YYYawwtK_vZ.yG-^-qNR:tCnj6-17fii1Y%s@X,)+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50429	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	2221	OUT	GET /vi-assets/static-assets/audioblock-ca3d723f343fe31abc72.js?_sw-precache=e10fdabdbc7eef7835d3fe551148aa16 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754
2023-12-05 18:13:58 UTC	1326	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 36 30 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 71 74 35 37 49 37 4a 4d 48 39 63 5a 41 47 58 35 36 31 5f 33 56 6d 59 33 4e 44 35 6b 39 48 6d 59 64 68 46 4e 5f 53 36 34 4a 43 69 51 71 79 6b 6a 54 53 34 68 62 6e 70 50 6d 64 73 4d 34 61 37 63 68 44 72 76 68 6c 5a 37 65 55 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 35 35 33 32 33 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 5602X-GUploader-UploadID: ABPtcPpqt57I7JMH9cZAGX561_3VmY3ND5k9HmYdhFN_S64JCiQqykjTS4hbnpPmdsM4a7chDrvhlZ7eUQx-goog-generation: 1701369734553236x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:58 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 5d 2c 7b 4c 31 52 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 3b 76 61 72 20 74 3d 69 28 22 56 6b 41 4e 22 29 2c 72 3d 69 2e 6e 28 74 29 2c 6e 3d 69 28 22 67 63 52 2f 22 29 2c 6f 3d 69 2e 6e 28 6e 29 2c 63 3d 69 28 22 70 56 6e 4c 22 29 2c 73 3d 69 2e 6e 28 63 29 2c 6c 3d 69 28 22 4a 34 7a 70 22 29 2c 64 3d 69 2e 6e 28 6c 29 2c 75 3d 69 28 22 71 31 74 49 22 29 2c 6d 3d 69 2e 6e 28 75 29 2c 70 3d 69 28 22 58 36 6f 4c 22 29 2c 68 3d 69 28 22 63 72 2b 49 22 29 2c 67 3d 69 2e 6e 28 68 29 2c 77 3d 69 28 22 65 46 63 2b 22 29 2c 62 3d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[49],{L1Rh:function(a,e,i){"use strict";i.r(e);var t=i("VkAN"),r=i.n(t),n=i("gcR/"),o=i.n(n),c=i("pVnL"),s=i.n(c),l=i("J4zp"),d=i.n(l),u=i("q1tI"),m=i.n(u),p=i("X6oL"),h=i("cr+I"),g=i.n(h),w=i("eFc+"),b=
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 6c 65 6e 67 74 68 7c 7c 30 2c 63 72 65 64 69 74 73 3a 6d 26 26 6d 2e 63 72 65 64 69 74 7c 7c 22 22 2c 73 75 6d 6d 61 72 79 3a 6d 26 26 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 64 2e 73 75 6d 6d 61 72 79 2e 63 6f 6e 74 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 69 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 65 78 74 29 7c 7c 22 22 2c 68 65 61 64 6c 69 6e 65 3a 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 64 2e 68 65 61 64 6c 69 6e 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 72 2e 63 6f 6e 74 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 6e 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 74 65 78 74 Data Ascii: length\|\|0,credits:m&&m.credit\|\|"",summary:m&&(null===(i=d.summary.content)\|\|void 0===i\|\|null===(t=i[0])\|\|void 0===t?void 0:t.text)\|\|"",headline:(null===(r=d.headline)\|\|void 0===r\|\|null===(n=r.content)\|\|void 0===n\|\|null===(o=n[0])\|\|void 0===o?void 0:o.text
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 61 2c 73 28 29 28 7b 68 69 64 65 54 72 61 6e 73 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 55 28 7b 73 68 6f 77 54 72 61 6e 73 63 72 69 70 74 3a 21 31 7d 29 2c 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 26 26 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 29 7b 76 61 72 20 61 3d 53 26 26 67 2e 61 2e 70 61 72 73 65 28 53 2e 73 65 61 72 63 68 29 7c 7c 22 22 3b 61 2e 73 68 6f 77 54 72 61 6e 73 63 72 69 70 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 22 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 2e Data Ascii: ateElement(k.a,s()({hideTranscript:function(){if(U({showTranscript:!1}),window&&window.history&&window.history.pushState){var a=S&&g.a.parse(S.search)\|\|"";a.showTranscript=void 0;var e="".concat(window.location.protocol,"//").concat(window.location.host).
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 54 6f 6f 6c 62 61 72 5f 73 68 61 72 65 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 22 2c 22 5c 6e 20 20 20 20 22 2c 22 5c 6e 20 20 22 5d 29 29 2c 4c 2e 61 2e 66 72 61 67 6d 65 6e 74 73 2e 61 72 74 69 63 6c 65 2c 6a 2e 62 2e 66 72 61 67 6d 65 6e 74 73 2e 73 68 61 72 65 29 7d 2c 49 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 75 72 6c 3a 76 6f 69 64 20 30 7d 3b 65 2e 64 65 66 61 75 6c 74 3d 49 7d 2c 71 77 72 44 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 72 3d 69 28 22 56 6b 41 4e 22 29 2c 6e 3d 69 2e 6e 28 72 29 2c 6f 3d 69 28 22 67 63 52 2f 22 29 2c 63 3d 69 2e 6e 28 6f 29 2c 73 3d 28 69 28 22 71 31 74 49 22 29 2c 69 28 22 4a 71 70 39 22 29 29 2c 6c 3d 69 28 22 65 46 63 2b 22 29 2c 64 3d 69 2e 6e Data Ascii: Toolbar_share\n }\n ","\n ","\n "])),L.a.fragments.article,j.b.fragments.share)},I.defaultProps={url:void 0};e.default=I},qwrD:function(a,e,i){"use strict";var t,r=i("VkAN"),n=i.n(r),o=i("gcR/"),c=i.n(o),s=(i("q1tI"),i("Jqp9")),l=i("eFc+"),d=i.n
2023-12-05 18:13:58 UTC	86	IN	Data Raw: 53 6f 63 69 61 6c 4d 65 64 69 61 3a 21 30 7d 3b 65 2e 61 3d 66 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 61 75 64 69 6f 62 6c 6f 63 6b 2d 63 61 33 64 37 32 33 66 33 34 33 66 65 33 31 61 62 63 37 32 2e 6a 73 2e 6d 61 70 Data Ascii: SocialMedia:!0};e.a=f}}]);//# sourceMappingURL=audioblock-ca3d723f343fe31abc72.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50436	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	2504	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 2438 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841
2023-12-05 18:13:58 UTC	2438	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 45 74 6e 42 76 53 69 4c 6e 35 55 64 70 5f 5a 75 47 77 35 4f 64 65 65 58 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 51 63 7a 4c 30 71 34 56 4f 74 38 5a 6c 50 37 33 4f 52 44 2d 52 6b 4e 65 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 33 31 36 32 39 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"EtnBvSiLn5Udp_ZuGw5OdeeX","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"QczL0q4VOt8ZlP73ORD-RkNe","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800031629,"data":{"event":"impression
2023-12-05 18:13:58 UTC	1398	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:13:58 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50434	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	2219	OUT	GET /vi-assets/static-assets/autoSave-e29f1d51273327022c43.js?_sw-precache=11175ac6e73ad443237fe4717f2e1ace HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800936754
2023-12-05 18:13:58 UTC	1324	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 33 36 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 35 73 6e 70 7a 34 6f 51 4c 72 77 4a 6b 78 36 45 73 48 2d 59 2d 32 72 42 4c 31 4e 44 52 4d 72 50 31 32 4d 57 63 47 65 42 76 39 38 6a 54 62 71 4e 64 31 48 71 39 57 52 47 58 36 37 59 55 43 51 72 61 57 46 56 35 55 71 4f 4f 31 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 36 30 32 30 34 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 9367X-GUploader-UploadID: ABPtcPo5snpz4oQLrwJkx6EsH-Y-2rBL1NDRMrP12MWcGeBv98jTbqNd1Hq9WRGX67YUCQraWFV5UqOO1Qx-goog-generation: 1701369734602044x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:13:58 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 5d 2c 7b 22 35 78 4e 56 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 29 29 3b 76 61 72 20 61 2c 72 3d 6e 28 22 56 6b 41 4e 22 29 2c 69 3d 6e 2e 6e 28 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"5xNV":function(e,t,n){"use strict";n.d(t,"d",(function(){return l})),n.d(t,"a",(function(){return d})),n.d(t,"b",(function(){return p})),n.d(t,"c",(function(){return O}));var a,r=n("VkAN"),i=n.n(r
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 49 22 29 2c 70 3d 6e 2e 6e 28 67 29 2c 4f 3d 6e 28 22 4b 78 79 74 22 29 2c 79 3d 6e 28 22 65 46 63 2b 22 29 2c 52 3d 6e 2e 6e 28 79 29 2c 68 3d 6e 28 22 58 36 6f 4c 22 29 2c 4c 3d 6e 28 22 47 42 33 66 22 29 2c 53 3d 6e 28 22 2b 43 6c 4c 22 29 2c 6a 3d 6e 28 22 30 36 62 33 22 29 2c 78 3d 6e 28 22 5a 4b 4e 35 22 29 2c 6b 3d 6e 28 22 35 78 4e 56 22 29 2c 45 3d 6e 28 22 66 5a 64 48 22 29 2c 4e 3d 52 28 29 28 61 7c 7c 28 61 3d 76 28 29 28 5b 22 5c 6e 20 20 71 75 65 72 79 20 52 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 51 75 65 72 79 28 24 75 72 6c 3a 20 5b 53 74 72 69 6e 67 21 5d 21 29 20 7b 5c 6e 20 20 20 20 75 73 65 72 20 7b 5c 6e 20 20 20 20 20 20 72 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 28 75 72 6c 73 3a 20 24 75 72 6c 29 20 7b 5c 6e 20 20 Data Ascii: I"),p=n.n(g),O=n("Kxyt"),y=n("eFc+"),R=n.n(y),h=n("X6oL"),L=n("GB3f"),S=n("+ClL"),j=n("06b3"),x=n("ZKN5"),k=n("5xNV"),E=n("fZdH"),N=R()(a\|\|(a=v()(["\n query ReadingListStatusQuery($url: [String!]!) {\n user {\n readingListStatus(urls: $url) {\n
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 30 5d 2c 50 3d 58 5b 31 5d 2c 4a 3d 51 2e 6c 6f 61 64 69 6e 67 7c 7c 50 2e 6c 6f 61 64 69 6e 67 2c 42 3d 4f 62 6a 65 63 74 28 67 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 21 28 44 7c 7c 4a 7c 7c 4d 29 29 69 66 28 6e 75 6c 6c 21 3d 7a 26 26 6e 75 6c 6c 21 3d 3d 28 65 3d 7a 2e 75 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 72 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 6a 2e 61 2e 6c 6f 61 64 28 22 4e 59 54 2d 53 22 29 7c 7c 22 22 2c 61 3d 21 7a 2e 75 73 65 72 2e 72 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 61 76 65 64 7d 29 29 2c 72 3d Data Ascii: 0],P=X[1],J=Q.loading\|\|P.loading,B=Object(g.useCallback)((function(){var e;if(!(D\|\|J\|\|M))if(null!=z&&null!==(e=z.user)&&void 0!==e&&e.readingListStatus.length){var t=j.a.load("NYT-S")\|\|"",a=!z.user.readingListStatus.every((function(e){return e.saved})),r=
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 65 2e 6e 65 78 74 3d 31 32 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 2e 6e 65 78 74 3d 37 2c 74 2e 6a 73 6f 6e 28 29 3b 63 61 73 65 20 37 3a 6e 3d 65 2e 73 65 6e 74 2c 72 3d 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 6e 75 6d 62 65 72 4f 66 53 61 76 65 73 2c 49 28 72 29 2c 65 2e 6e 65 78 74 3d 31 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 32 3a 4f 62 6a 65 63 74 28 53 2e 61 29 28 6e 65 77 20 45 72 72 6f 72 28 22 72 65 73 70 6f 6e 73 65 2e 6f 6b 20 66 61 6c 73 65 22 29 2c 7b 6d 73 67 3a 22 51 75 65 72 79 20 66 6f 72 20 74 6f 74 61 6c 20 73 61 76 65 73 20 66 61 69 6c 65 64 2e 22 7d 29 3b 63 61 73 65 20 31 33 3a 65 2e 6e 65 78 74 3d 31 38 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 35 3a 65 2e 70 72 65 76 3d 31 35 2c 65 2e 74 30 3d 65 2e 63 61 74 63 68 Data Ascii: e.next=12;break}return e.next=7,t.json();case 7:n=e.sent,r=null==n?void 0:n.numberOfSaves,I(r),e.next=13;break;case 12:Object(S.a)(new Error("response.ok false"),{msg:"Query for total saves failed."});case 13:e.next=18;break;case 15:e.prev=15,e.t0=e.catch
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 35 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 67 61 70 3a 32 30 70 78 3b 22 29 2c 78 3d 28 53 2e 61 2e 63 6f 6c 6f 72 2e 72 65 64 31 30 2c 22 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 30 29 3b Data Ascii: m:translateX(-50%);box-shadow:0 2px 4px rgba(0,0,0,0.25);z-index:10000;box-sizing:border-box;display:flex;flex-direction:row;align-items:center;justify-content:space-between;gap:20px;"),x=(S.a.color.red10,"\n opacity: 0;\n transform: translate(-50%, 0);
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 2c 22 53 61 76 65 64 2e 22 29 2c 22 20 22 2c 6f 28 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 46 7d 2c 76 6f 69 64 20 30 2c 22 56 69 65 77 20 73 61 76 65 64 20 61 72 74 69 63 6c 65 73 20 69 6e 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2e 22 29 29 29 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 65 29 7b 76 61 72 20 74 3d 65 2e 69 6e 2c 6e 3d 65 2e 73 74 61 74 75 73 2c 61 3d 65 2e 63 6c 65 61 72 53 74 61 74 75 73 2c 72 3d 65 2e 6f 6e 55 6e 64 6f 2c 69 3d 4f 62 6a 65 63 74 28 64 2e 75 73 65 52 65 66 29 28 6e 75 6c 6c 29 2c 73 3d 4f 62 6a 65 63 74 28 64 2e 75 73 65 52 65 66 29 28 6e 75 6c 6c 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 63 75 72 72 65 6e 74 3d 77 69 6e 64 6f 77 2e 73 Data Ascii: ,"Saved.")," ",o()("span",{className:F},void 0,"View saved articles in your account."))),a);function z(e){var t=e.in,n=e.status,a=e.clearStatus,r=e.onUndo,i=Object(d.useRef)(null),s=Object(d.useRef)(null),u=function(e){return function(){s.current=window.s
2023-12-05 18:13:58 UTC	1093	IN	Data Raw: 57 6f 72 6b 7c 7c 79 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 7b 65 76 65 6e 74 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 65 76 65 6e 74 44 61 74 61 3a 7b 74 72 69 67 67 65 72 3a 22 6d 6f 64 75 6c 65 22 2c 74 79 70 65 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 7d 2c 6d 6f 64 75 6c 65 3a 7b 6e 61 6d 65 3a 22 61 75 74 6f 2d 73 61 76 65 72 22 2c 72 65 67 69 6f 6e 3a 22 66 61 6c 73 65 22 2c 6c 61 62 65 6c 3a 22 61 75 74 6f 2d 73 61 76 65 72 22 2c 65 6c 65 6d 65 6e 74 3a 7b 6c 61 62 65 6c 3a 22 41 75 74 6f 53 61 76 65 22 2c 6e 61 6d 65 3a 22 61 75 74 6f 73 61 76 65 22 2c 75 72 6c 3a 74 7d 7d 7d 29 7d 29 2c 5b 66 2c 74 5d 29 2c 4f 62 6a 65 63 74 28 64 2e 75 73 65 45 66 66 65 63 Data Ascii: Work\|\|y);return Object(d.useEffect)((function(){f({event:"impression",eventData:{trigger:"module",type:"impression"},module:{name:"auto-saver",region:"false",label:"auto-saver",element:{label:"AutoSave",name:"autosave",url:t}}})}),[f,t]),Object(d.useEffec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50437	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	1454	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841
2023-12-05 18:13:58 UTC	507	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 63 6f 6e 74 65 78 74 5f 69 64 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 74 6f 5f 6d 61 6b 65 5f 74 65 73 74 5f 63 6f 6e 74 65 78 74 5f 69 64 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 66 6f 6e 65 47 4d 6c 32 30 72 45 6c 72 2d 43 72 6a 45 78 4b 72 45 62 69 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 61 74 69 76 65 5f 61 70 70 5f 61 64 73 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 Data Ascii: [{"context_id":"context_id_placeholder_to_make_test_context_id","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"foneGMl20rElr-CrjExKrEbi","client_lib":"v1.3.0","sourceApp":"native_app_ads","subject":"dfp-ad-events","how":"beacon","client_ts":17018000
2023-12-05 18:13:58 UTC	758	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 33 3a 35 38 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 41 63 74 69 76 65 3d 74 72 75 65 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 65 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 Data Ascii: HTTP/1.1 200 OKset-cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; Path=/; Domain=nytimes.com; Expires=Wed, 04 Dec 2024 18:13:58 GMT; Max-Age=31536000; Secure; SameSite=Noneset-cookie: sessionActive=true; Path=/; Domain=et.nytimes.com; Expires=Tue, 05 Dec 2023
2023-12-05 18:13:58 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50438	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:58 UTC	2222	OUT	GET /vi-assets/static-assets/bestsellers-ee775d91faac0c716b6e.js?_sw-precache=ab0be8b3bac74b0b426b15292310359c HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:13:58 UTC	1330	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 32 35 35 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 49 63 43 6d 4d 46 4a 4e 5a 38 55 45 32 52 38 65 4f 6b 4a 53 66 45 64 49 36 56 6c 4b 71 45 51 65 4c 63 57 34 63 66 47 68 78 7a 71 43 48 55 72 45 6a 71 52 47 43 46 58 4a 66 77 67 73 36 57 6e 5f 77 72 76 45 78 61 61 53 47 4f 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 30 34 30 34 32 35 30 31 33 33 37 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 262551X-GUploader-UploadID: ABPtcPpIcCmMFJNZ8UE2R8eOkJSfEdI6VlKqEQeLcW4cfGhxzqCHUrEjqRGCFXJfwgs6Wn_wrvExaaSGOQx-goog-generation: 1701704042501337x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:13:58 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 2c 31 31 2c 31 37 2c 38 31 5d 2c 7b 22 2b 35 41 57 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 29 29 3b 76 61 72 20 6f 3d 6e 28 22 79 67 76 6b 22 29 2c 61 3d 6e 28 22 38 69 54 46 22 29 2c 69 3d 6e 28 22 37 57 4d 6e 22 29 2c 72 3d 6e 28 22 58 57 48 48 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[51,11,17,81],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return j})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return _}));var o=n("ygvk"),a=n("8iTF"),i=n("7WMn"),r=n("XWHH"
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 65 29 28 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 73 76 63 2f 62 69 74 6c 79 2f 73 68 6f 72 74 65 6e 2e 6a 73 6f 6e 22 29 29 3b 72 65 74 75 72 6e 20 6e 2e 71 75 65 72 79 3d 7b 75 72 6c 3a 65 2e 75 72 6c 7d 2c 4f 62 6a 65 63 74 28 6c 2e 66 6f 72 6d 61 74 29 28 6e 29 7d 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 73 28 29 28 6e 2c 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 7d 29 7d 2c 66 3d 6e 28 22 79 58 50 55 22 29 2c 70 3d 6e 2e 6e 28 66 29 2c 6d 3d 6e 28 22 6f 30 6f 31 22 29 2c 62 3d 6e 2e 6e 28 6d 29 2c 67 3d 6e 28 22 32 48 45 65 22 29 2c 68 3d 6e 2e 6e 28 67 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 28 76 3d 70 28 29 28 62 2e 61 2e 6d 61 72 6b 28 Data Ascii: e)("".concat(t,"/svc/bitly/shorten.json"));return n.query={url:e.url},Object(l.format)(n)}(e.meta,t);break;default:return null}return s()(n,{method:"GET"})},f=n("yXPU"),p=n.n(f),m=n("o0o1"),b=n.n(m),g=n("2HEe"),h=n.n(g);function v(){return(v=p()(b.a.mark(
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 20 6f 2e 61 2e 47 45 54 5f 53 55 4d 4d 41 52 59 5f 52 45 51 55 45 53 54 3a 63 61 73 65 20 6f 2e 61 2e 47 45 54 5f 41 52 54 49 43 4c 45 5f 52 45 51 55 45 53 54 3a 6e 3d 77 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 61 2e 47 45 54 5f 43 4f 4d 4d 45 4e 54 5f 4c 49 53 54 5f 52 45 51 55 45 53 54 3a 6e 3d 4f 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 61 2e 47 45 54 5f 43 4f 4d 4d 45 4e 54 53 5f 52 45 51 55 45 53 54 3a 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 72 74 69 63 6c 65 49 64 2c 6f 3d 65 2e 63 6f 6d 6d 65 6e 74 49 64 2c 61 3d 7b 75 72 6c 3a 6e 2c 6d 65 74 68 6f 64 3a 22 67 65 74 22 2c 63 6d 64 3a 22 47 65 74 43 6f 6d 6d 65 6e 74 42 79 50 65 72 6d 69 64 22 7d 3b 72 Data Ascii: o.a.GET_SUMMARY_REQUEST:case o.a.GET_ARTICLE_REQUEST:n=w(e.meta,t);break;case o.a.GET_COMMENT_LIST_REQUEST:n=O(e.meta,t);break;case o.a.GET_COMMENTS_REQUEST:n=function(e,t){var n=e.articleId,o=e.commentId,a={url:n,method:"get",cmd:"GetCommentByPermid"};r
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 4f 46 49 4c 45 5f 52 45 51 55 45 53 54 3a 61 2e 6d 65 74 68 6f 64 3d 22 50 55 54 22 2c 61 2e 68 65 61 64 65 72 73 3d 6e 65 77 20 48 65 61 64 65 72 73 28 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 7d 29 2c 61 2e 62 6f 64 79 3d 4f 62 6a 65 63 74 28 78 2e 73 74 72 69 6e 67 69 66 79 29 28 65 2e 6d 65 74 61 2e 76 61 6c 75 65 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 61 2e 55 50 44 41 54 45 5f 41 56 41 54 41 52 5f 52 45 51 55 45 53 54 3a 61 2e 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 2c 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 76 31 2f 63 75 72 72 65 6e 74 2f 61 76 61 74 61 72 2e 6a 73 6f 6e 3f 73 68 6f 75 6c 64 52 65 73 69 7a 65 41 6e 64 53 Data Ascii: OFILE_REQUEST:a.method="PUT",a.headers=new Headers({"Content-Type":"application/x-www-form-urlencoded"}),a.body=Object(x.stringify)(e.meta.values);break;case o.a.UPDATE_AVATAR_REQUEST:a.method="POST",n="".concat(t,"/v1/current/avatar.json?shouldResizeAndS
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 6c 6c 7d 7d 7d 2c 22 2b 67 38 79 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 6e 2e 64 28 74 2c 22 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 29 29 2c 6e 2e 64 28 74 2c 22 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 6a 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 Data Ascii: ll}}},"+g8y":function(e,t,n){"use strict";n.d(t,"k",(function(){return l})),n.d(t,"l",(function(){return c})),n.d(t,"i",(function(){return d})),n.d(t,"c",(function(){return u})),n.d(t,"h",(function(){return f})),n.d(t,"j",(function(){return p})),n.d(t,"e"
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 3b 7d 22 29 2c 66 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 32 30 70 78 3b 22 29 2c 70 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 22 29 2c 6d 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 22 29 2c 62 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 68 65 69 67 68 74 3a 31 38 70 78 3b 77 69 64 74 68 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: ;}"),f=Object(o.css)("display:inline-block;vertical-align:middle;width:20px;"),p=Object(o.css)("position:relative;"),m=Object(o.css)("height:auto;width:auto;border-radius:100%;background-color:transparent;"),b=Object(o.css)("height:18px;width:18px;padding
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 6d 65 64 69 75 6d 2c 22 7b 22 2c 21 65 7c 7c 74 26 26 6e 3f 6e 75 6c 6c 3a 77 2c 22 3b 22 2c 65 3f 6e 75 6c 6c 3a 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 22 2c 22 3b 7d 22 29 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 62 75 74 74 6f 6e 42 6f 72 64 65 72 2c 6e 3d 65 2e 62 75 74 74 6f 6e 42 6f 72 64 65 72 48 6f 76 65 72 2c 61 3d 65 2e 62 61 63 6b 67 72 6f 75 6e 64 2c 69 3d 65 2e 62 61 63 6b 67 72 6f 75 6e 64 48 6f 76 65 72 2c 72 3d 65 2e 73 74 72 6f 6b 65 2c 73 3d 65 2e 73 74 72 6f 6b 65 48 6f 76 65 72 2c 6c 3d 65 2e 74 65 78 74 2c 63 3d 65 2e 74 65 78 74 48 6f 76 65 72 2c 64 3d 65 2e 64 72 6f 70 53 68 61 64 6f 77 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 2e 61 63 74 69 6f 6e 62 Data Ascii: medium,"{",!e\|\|t&&n?null:w,";",e?null:"margin-bottom: 25px;",";}")},x=function(e){var t=e.buttonBorder,n=e.buttonBorderHover,a=e.background,i=e.backgroundHover,r=e.stroke,s=e.strokeHover,l=e.text,c=e.textHover,d=e.dropShadow;return Object(o.css)(".actionb
2023-12-05 18:13:58 UTC	1379	IN	Data Raw: 69 67 68 74 2e 63 6f 6c 6f 72 73 2e 73 74 72 6f 6b 65 2e 70 72 69 6d 61 72 79 2e 68 65 78 2c 75 3d 72 2e 6c 69 67 68 74 2e 63 6f 6c 6f 72 73 2e 62 61 63 6b 67 72 6f 75 6e 64 2e 70 72 69 6d 61 72 79 2e 68 65 78 3b 72 65 74 75 72 6e 20 78 28 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 62 61 63 6b 67 72 6f 75 6e 64 48 6f 76 65 72 3a 75 2c 62 75 74 74 6f 6e 42 6f 72 64 65 72 3a 75 2c 62 75 74 74 6f 6e 42 6f 72 64 65 72 48 6f 76 65 72 3a 75 2c 73 74 72 6f 6b 65 3a 75 2c 73 74 72 6f 6b 65 48 6f 76 65 72 3a 64 2c 74 65 78 74 3a 75 2c 74 65 78 74 48 6f 76 65 72 3a 64 2c 64 72 6f 70 53 68 61 64 6f 77 3a 73 7d 29 7d 72 65 74 75 72 6e 20 78 28 22 64 61 72 6b 2d 66 69 6c 6c 65 64 22 3d 3d 3d 69 3f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: ight.colors.stroke.primary.hex,u=r.light.colors.background.primary.hex;return x({background:"transparent",backgroundHover:u,buttonBorder:u,buttonBorderHover:u,stroke:u,strokeHover:d,text:u,textHover:d,dropShadow:s})}return x("dark-filled"===i?{background:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50440	52.3.42.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:59 UTC	2138	OUT	GET /als?uri=nyt%3A%2F%2Farticle%2F9c6ba5a0-b7c9-5979-aa85-77e25cf8125c&typ=&prop=nyt&plat=web HTTP/1.1 Host: als-svc.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841
2023-12-05 18:13:59 UTC	770	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 44 4e 54 2c 20 58 2d 43 75 73 74 6f 6d 48 65 61 64 65 72 2c 20 4b 65 65 70 2d 41 6c 69 76 65 2c 20 55 73 65 72 2d 41 67 65 6e 74 2c 20 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 2c 20 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 2c 20 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 2c 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 43 6f 6f 6b 69 65 2c 20 41 63 63 65 70 74 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 78 2d 61 70 69 2d 6b 65 79 2c 20 6e 79 74 2d 61 0d 0a 61 63 63 65 73 73 2d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: DNT, X-CustomHeader, Keep-Alive, User-Agent, X-Requested-With, If-Modified-Since, Cache-Control, Content-Type, Cookie, Accept, x-requested-by, x-api-key, nyt-aaccess-
2023-12-05 18:13:59 UTC	1771	IN	Data Raw: 7b 22 61 6c 73 5f 74 65 73 74 5f 63 6c 69 65 6e 74 73 69 64 65 22 3a 22 77 65 62 5f 6e 6f 6e 65 5f 6c 6f 77 5f 32 30 32 33 31 32 30 35 31 38 31 33 35 39 22 2c 22 55 73 65 72 22 3a 7b 22 61 69 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 72 65 67 69 49 64 22 3a 22 30 22 2c 22 62 74 22 3a 22 22 2c 22 73 75 62 22 3a 22 61 6e 6f 6e 22 2c 22 69 73 4c 6f 67 67 65 64 49 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6d 6b 74 67 22 3a 22 74 79 70 65 5f 61 6e 6f 6e 2c 6c 6f 67 66 2c 61 62 66 22 7d 2c 22 41 73 73 65 74 22 3a 7b 22 70 74 22 3a 22 6e 74 31 2c 6e 74 31 31 2c 6e 74 31 32 2c 6e 74 31 33 2c 6e 74 31 34 2c 6e 74 31 36 2c 6e 74 32 2c 6e 74 32 31 2c 6e 74 33 2c 6e 74 34 2c Data Ascii: {"als_test_clientside":"web_none_low_20231205181359","User":{"aid":"XbK7A_KO3s8XVA_FdXv5zD","userType":"anon","regiId":"0","bt":"","sub":"anon","isLoggedIn":"false","mktg":"type_anon,logf,abf"},"Asset":{"pt":"nt1,nt11,nt12,nt13,nt14,nt16,nt2,nt21,nt3,nt4,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50443	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:59 UTC	797	OUT	GET /ads/tpc-check.html HTTP/1.1 Host: static01.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "598d685c63f68aaefa1f7c474e83327c" If-Modified-Since: Wed, 03 Apr 2019 14:30:57 GMT
2023-12-05 18:13:59 UTC	507	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 34 20 4e 6f 74 20 4d 6f 64 69 66 69 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 39 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 54 61 67 3a 20 22 35 39 38 64 36 38 35 63 36 33 66 36 38 61 61 65 66 61 31 66 37 63 34 37 34 65 38 33 33 32 37 63 22 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 31 37 20 4e 6f 76 20 32 30 32 Data Ascii: HTTP/1.1 304 Not ModifiedConnection: closeDate: Tue, 05 Dec 2023 18:13:59 GMTVia: 1.1 varnishCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicETag: "598d685c63f68aaefa1f7c474e83327c"Expires: Fri, 17 Nov 202

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50442	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:59 UTC	692	OUT	GET /fonts/family/cheltenham-small/cheltenham-small-normal-400.108ce298d451197b23fefceb3e36959f.woff2 HTTP/1.1 Host: g1.nyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://g1.nyt.com/fonts/css/web-fonts.7705b21d4573b168a8aaebc4ff17d395d2458dca.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:13:59 UTC	1118	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 31 33 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 73 33 75 6b 67 6d 6b 51 79 44 39 5a 4a 6c 2d 35 6a 49 49 38 4a 37 6e 46 6a 72 72 51 72 31 6e 68 69 32 5f 6b 65 43 4d 71 73 62 34 7a 32 59 4e 58 75 61 78 50 76 52 34 67 44 54 71 65 34 52 52 70 48 59 41 76 6e 30 59 4b 43 72 51 6e 6b 5f 65 5a 34 62 39 4f 7a 63 62 39 46 6e 30 4f 32 73 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 69 6d 6d 75 74 61 62 6c 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 30 20 53 65 70 20 32 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 20136X-GUploader-UploadID: ADPycds3ukgmkQyD9ZJl-5jII8J7nFjrrQr1nhi2_keCMqsb4z2YNXuaxPvR4gDTqe4RRpHYAvn0YKCrQnk_eZ4b9Ozcb9Fn0O2sCache-Control: public,max-age=31536000,immutableExpires: Fri, 20 Sep 2
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4e a8 00 0f 00 00 00 00 bc d8 00 00 4e 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 87 2e 06 60 00 88 2c 08 36 09 82 73 11 0c 0a 82 c4 5c 82 99 65 01 36 02 24 03 88 2c 0b 84 18 00 04 20 05 85 28 07 87 21 0c 85 00 1b 42 a4 45 23 22 d8 38 00 00 9d 5f bb 28 72 3b 50 49 8f 6c 72 64 20 b7 23 11 50 b5 d5 ec ff 63 02 95 31 6c 87 36 03 fc d1 81 a4 02 75 1b 1e 4f 35 17 de 4b 14 b0 51 47 9d 08 0c c5 79 1c fb dd ef 5f c0 3c 47 d3 5e 75 fb 36 f0 65 9b 94 19 a0 a2 fe b6 12 8f c7 1b 3d f1 4e 79 fc c3 f0 53 cf b1 5e 7a 2f 4a aa 64 20 f1 2c 51 b3 a6 da 4e 4d 5e c9 e4 fa f0 b4 cd f7 8f 96 30 56 75 98 c5 9a 6d 3a c4 2a b4 57 c8 40 a6 9b 60 e1 32 75 59 b8 4c d6 ac 5c 54 aa cb b4 0a 1e a2 35 5e df ec cc ee fd b0 Data Ascii: wOF2NNK.`,6s\e6$, (!BE#"8_(r;PIlrd #Pc1l6uO5KQGy_<G^u6e=NyS^z/Jd ,QNM^0Vum:*W@`2uYL\T5^
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: 28 b4 1b 5d b9 ea f3 ce d5 a5 1b 76 1f 39 f8 65 7d e5 8a 6d d6 44 8c 6b 6f 7d 14 d8 73 94 cf 8a d0 fe e3 0f ee 9d c8 cb eb 2f 58 2e bc f9 f0 d9 e3 27 4f 0d bf 3e 7f 71 b2 c8 64 e0 cd ab d7 e3 b5 ac 9b 58 52 56 51 5e 79 68 5a d5 f4 ea 59 73 66 cf 9d 37 bf 78 41 c9 a2 85 17 f6 2d 59 bc 74 19 5b f9 a7 5e b6 67 cf fc 38 5f 76 fb ec b9 3b cb 6f ae f9 7d 88 1d 4f 00 7d df ce cc dc c2 12 6a 05 b3 de 02 b7 d9 6a 6b 67 ef 80 70 44 3a a1 d0 18 67 2c 0e 70 c1 bb 12 dc 88 24 77 32 c5 83 ea 49 f3 f2 f6 a1 33 98 2c b6 2f 87 eb c7 e3 0b 84 22 ff 80 40 b1 44 1a 14 1c 22 0b 0d 0b 8f 88 94 47 45 c7 c4 c6 c5 27 24 26 25 a7 28 52 d3 d2 33 32 b3 b2 73 40 c8 cb cb 2f 28 2c 2a 2e 29 2d 2b af a8 dc a6 ac 9a 39 6b f6 1c bc a8 93 8a 4b a4 45 8b e1 22 b4 7c 45 6e 6f c8 ab d7 ac 5d Data Ascii: (]v9e}mDko}s/X.'O>qdXRVQ^yhZYsf7xA-Yt[^g8_v;o}O}jjkgpD:g,p$w2I3,/"@D"GE'$&%(R32s@/(,*.)-+9kKE"\|Eno]
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: ca 88 08 fc 28 eb b0 ec 31 3f 67 52 0b f3 db 75 43 ef ef 7e a2 87 77 5e 7e ec 7d a2 8d 94 13 2c 03 02 b4 18 28 b4 5d 0a a2 b2 45 22 b0 2c 3c 5c 92 2f a3 e5 89 08 c2 82 bf 7a 5d 4f a2 65 c9 4b e2 d6 46 01 ab c4 5d 1d 22 18 2b 4e f5 00 96 fc 5b 8f d9 ca 26 bb aa 90 4f 04 97 f3 e9 98 25 69 e9 96 61 21 f2 4b d6 20 b7 13 83 9d 46 a5 5b 28 79 9c 90 ea 25 22 06 31 17 19 41 76 2d cc 36 3f ac 63 87 41 cf 4e 79 0f 23 bd 6e 0a b9 ad 65 98 4e 29 26 20 c7 03 9b 25 a9 75 b6 5f 25 6e 40 96 b6 ef 2b 01 a9 d5 b8 e0 78 36 0c 02 53 c3 ba 89 a8 4e b4 2d 05 f0 ee 93 c0 80 60 d3 6c 65 11 50 c8 dd 89 2d 80 a3 71 99 64 6a 37 e4 ea 23 35 49 46 87 60 21 4f f3 df 39 a2 8c d1 16 39 a0 ce d9 70 1d 1a dd c6 81 fa 16 96 55 a7 62 9e a4 51 5e d3 6c 08 29 25 92 f3 fd f7 78 31 8c 32 33 4a Data Ascii: (1?gRuC~w^~},(]E",<\/z]OeKF]"+N[&O%ia!K F[(y%"1Av-6?cANy#neN)& %u_%n@+x6SN-`leP-qdj7#5IF`!O99pUbQ^l)%x123J
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: e2 2c 38 ea 16 cf 2b 9c ec cb ae ed 54 e2 df 92 a5 cc 56 d6 6c 93 2f 77 0f ed 37 ed 76 9a cb e7 ac 7a fa 2b d5 4a 8b 34 3e a6 66 0d 79 9e fe 65 15 5d 66 5d 11 80 93 e7 3e de 21 3d be 55 a9 cd 35 ed 8f 8b d2 45 80 b2 2a f0 41 15 85 e8 f3 b6 fe c7 dc b5 23 ac 3a 93 92 8d 7e 84 88 7a ef ea e6 07 1c 1b bf 74 1c 8a ba ca 2a 7a e3 b3 9b e6 d9 5d b4 19 f5 72 06 81 0b 8b 15 20 11 01 0b d6 06 56 8a 2f cc 18 ae 6f 20 81 dd af 1f b2 fc b0 93 98 9c d9 f7 b3 8b 48 34 1f b3 5f d3 58 e9 ec 8b 05 35 ee 00 b3 78 59 e8 3d d5 7b d7 ef bf cb 15 09 ff 1f 4d 8a cd 9c ec c4 d2 89 2d cd e9 5c 71 f9 ba 54 de c6 74 c4 de e9 32 57 2a 1a 2d 5e 4c bb e1 fc 56 5c f9 da 5c bd c3 c0 11 5f 97 03 3e cf f0 80 69 01 77 ec 1b 37 d7 fe 19 60 9b 28 9a 56 8d ab f4 bb bd c2 9f 8b 13 43 bb 15 d4 Data Ascii: ,8+TVl/w7vz+J4>fye]f]>!=U5EA#:~ztz]r V/o H4_X5xY={M-\qTt2W*-^LV\\_>iw7`(VC
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: 8e e7 44 5b b3 82 fc e2 1c 14 44 7f 8f b6 f4 ec bd ec 64 42 b1 35 17 ad ff 7b 0f dc 29 30 3e 99 69 b2 84 c5 d4 f7 f6 e4 e1 42 6c d8 ee 18 21 9e 64 c9 bf c4 c2 5c 28 ad 00 ea 27 fd 86 57 5e 13 43 66 2d e2 ca 2d e3 a4 9b 2e 90 0b ec ae c3 2e 84 94 d8 d0 76 6a ac ac d9 31 81 46 e6 23 61 53 fb f2 6d e0 f9 7b 87 8c 2d 75 73 5c 42 e7 4e 5b a3 78 96 bb f1 ce a8 73 0c 9c 70 eb 7f 9d a5 ce 89 2c 46 62 00 c5 23 29 26 a0 dc 85 1d 54 6c 2b c2 f3 60 d4 31 2c 5e 80 33 e0 b0 ad af bb d8 3f fe 72 c5 de 29 59 88 cb 72 e6 c2 fc e1 0a 6f 6f 2e 4c 7a c4 ca c0 eb 74 af 65 7c b9 45 0a 96 c4 16 35 7a 3b e4 e2 05 8b ed 48 b3 9f 7a 6e 9f 35 fe f5 e2 2b de 80 92 6b 70 0c 6d fe 53 30 db 94 bb c5 98 53 73 2c cd 6d 45 d3 16 fb d0 06 23 e0 84 68 98 bb 0f 12 bb 3d ff 3a c3 55 5d 19 48 Data Ascii: D[DdB5{)0>iBl!d\('W^Cf--..vj1F#aSm{-us\BN[xsp,Fb#)&Tl+`1,^3?r)Yroo.Lzte\|E5z;Hzn5+kpmS0Ss,mE#h=:U]H
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: 67 e5 89 9c 08 c2 19 b9 1b 9b a4 c0 f6 f9 12 da 00 ee 1f eb fa e5 2c c9 f2 bc 8e fd ca d3 9f 45 5b 69 ec 9b e6 cd 7d 15 81 14 06 13 4f 71 67 11 64 89 27 b1 ca 87 56 9b c5 3e cc 13 d1 59 c7 d6 9f ae ce 94 16 1f a9 49 ea cf ec 98 ab 63 b4 a9 b6 dd cb f5 5c 2c 4d 9d c5 6f 7c f7 8d a2 c9 e8 54 36 5b 38 98 7b 7a df 4b 08 35 e1 a2 14 67 e4 6d e9 39 d4 a3 43 67 fb ac 97 9f 72 fc f5 f2 ca fb bb 6b 9a 2e 4e a5 38 a7 fb 6c db 9f 35 f0 65 79 f7 e4 ca 49 55 ce d0 68 9c d3 2e ce c9 33 27 ce d7 ff 53 dd 4c 67 da 0e ed 68 2d 1b ee a9 2d 9a d8 b1 39 bf 38 aa 4e 99 9e 5e 5b 11 91 35 56 98 e3 26 70 2a d8 56 cc 58 f8 e6 ea f3 db 96 dd 83 15 81 14 26 d3 8d ec c6 20 44 9e 61 80 5d 95 cf 2c b5 c4 74 e6 64 74 d6 f8 fd 97 87 e6 37 db ae bc fb d6 70 e7 b7 05 15 bd a3 b6 e2 4e 6f Data Ascii: g,E[i}Oqgd'V>YIc\,Mo\|T6[8{zK5gm9Cgrk.N8l5eyIUh.3'SLgh--98N^[5V&p*VX& Da],tdt7pNo
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: 18 be cc 6a eb db f3 38 a3 10 dd dd 3e 7b ee d4 64 57 9d fe a5 ad b4 b9 38 c6 91 b3 25 06 a3 da e9 d5 bc 94 bc eb ef 6f d7 0f 31 36 f0 fd 65 09 b4 6a ef ce dc 50 7f fa a3 14 11 f1 61 a8 d4 4a a0 7e c2 6f 64 75 d0 df e2 29 15 03 7f 11 67 25 e5 73 3d 5f dd 42 a8 62 cb 48 9f 2e c1 0b 3b af 16 71 eb 35 95 cf b5 92 4a ac 61 58 6a 4d 03 18 bb 05 d6 0b f6 0e ed 5e 73 37 f4 87 c2 a6 1d fe ba 0d 92 0b 1d 2d 88 0f f0 36 15 81 a5 0b 44 3d 7f cb 6d ec 67 17 fe 3c 71 75 ea c1 d2 2d c4 51 d8 53 b5 a1 3b 37 ac 70 0d 63 fc ae 65 2a 28 cc 76 51 83 fa dc c8 dc 00 4a b3 77 b7 9f 1d 19 58 30 e7 9d 11 d1 fd f2 14 63 c3 ff 17 40 3f 2e 76 7c 78 35 57 57 0f 6a 71 e8 46 2d c4 56 a0 4c d2 3a bb 7f 30 22 e1 1c 0d a7 0d 7d 5b b0 1e c6 ac 76 dc 9c 38 8e f9 ae 6f a3 0f a3 da 74 db ef Data Ascii: j8>{dW8%o16ejPaJ~odu)g%s=_BbH.;q5JaXjM^s7-6D=mg<qu-QS;7pce*(vQJwX0c@?.v\|x5WWjqF-VL:0"}[v8ot
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: b0 54 b2 42 9d e7 6f c8 5b e9 23 67 30 16 25 ff 57 08 06 a0 e6 75 19 7d f2 e4 53 fa c6 17 9f 9d dc 3f 97 2b 53 07 fd 4b 3b 54 ce 08 2a 19 be 9a c3 7e 1f b6 f2 7b 4a ca 4c 97 9b b3 70 5f 85 30 61 f9 27 fa ee 53 a2 dd 9c b8 d8 a5 63 64 28 99 26 74 7f ac 63 f0 97 f0 8a fb 9d ba a5 12 84 69 e5 f5 5c 0a b7 6c 71 ea cf 07 e7 4e 67 70 ca dc ab dd 82 2a 71 6e 62 4f 32 89 95 fa ad f1 40 71 27 36 a8 e0 95 c8 3e 85 cc cc ef 4b 4b f6 65 70 e8 4c 4e 34 69 de 3c 72 f1 c6 dc e8 9d 7a 3e c1 8d 4f a5 e2 b9 b6 96 56 b1 d1 d5 b6 44 7f 65 58 50 40 4f 28 c3 6c 91 d6 d9 90 9d 79 67 4c 35 dc 93 45 a4 8e 61 5d 22 b1 fa a1 6e d6 d7 5d 58 69 52 8e 68 77 40 33 71 8f 47 5e 43 42 68 8d 13 27 b8 9a 16 ac 8a ab 8b 1f c9 c5 18 be d9 36 a5 d8 ba 6c a0 d9 d6 66 c9 fb 26 ff 76 98 d8 4f 81 Data Ascii: TBo[#g0%Wu}S?+SK;T~{JLp_0a'Scd(&tci\lqNgpqnbO2@q'6>KKepLN4i<rz>OVDeXP@O(lygL5Ea]"n]XiRhw@3qG^CBh'6lf&vO
2023-12-05 18:13:59 UTC	1379	IN	Data Raw: 8c 61 7c 56 30 c1 20 a1 fa 5c eb ec e8 68 9f b5 5d 14 0c fa d6 0a 88 2f ef 68 aa a9 2d 95 e7 2a 8f 5f d6 40 00 e0 8a ab ff a4 41 03 1e 7d d6 98 1b 7a 7e bc 57 b5 eb 58 d7 96 65 f3 e5 57 65 a8 ce a5 98 db d9 e1 f3 81 0b e9 9a cb b2 ec c0 00 37 97 40 b2 cd 82 95 f9 02 e7 2c 57 c5 9d 1f 79 fd 66 64 e4 15 7a fd 17 f5 f5 6b a2 8e 5d 9f 4d 74 b9 dc c2 6b 37 d7 01 46 38 7d 40 55 b5 78 f3 ff 83 ab 1a 6b f3 c9 f2 2d e0 bc e1 e0 2b a7 74 51 0f 49 86 d3 68 0b df 44 05 57 b2 7f 60 6a a4 e9 68 52 7a 7d fe bb 87 fd cf 4c f8 f8 9c 9d f0 f0 38 7b da c7 e7 cc e9 10 8a c5 f6 16 18 ac be c5 c2 a2 be 09 06 db de d4 4c 5e 59 33 3c 2a 32 24 e7 90 81 2c b2 31 59 60 79 34 37 dc 24 d2 24 93 57 a0 90 a6 e5 73 77 a2 0b 95 f0 53 67 7d 4e 9b fe 70 b0 48 b4 46 7f 81 99 b9 eb bb b0 87 Data Ascii: a\|V0 \h]/h-_@A}z~WXeWe7@,Wyfdzk]Mtk7F8}@Uxk-+tQIhDW`jhRz}L8{L^Y3<2$,1Y`y47$$WswSg}NpHF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50441	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:59 UTC	2363	OUT	GET /ads/prebid8.1.0.js HTTP/1.1 Host: www.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F&ld=2r3"; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _dd_s=rum=0&expire=1701800937280 If-None-Match: "69d0b1569bbd0b87116d60db3a12cd34" If-Modified-Since: Mon, 26 Jun 2023 19:11:32 GMT
2023-12-05 18:13:59 UTC	1372	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 34 20 4e 6f 74 20 4d 6f 64 69 66 69 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 39 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 45 54 61 67 3a 20 22 36 39 64 30 62 31 35 36 39 62 62 64 30 62 38 37 31 31 36 64 36 30 64 62 33 61 31 32 63 64 33 34 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 32 30 32 33 20 31 39 3a 34 35 3a 32 30 20 47 4d 54 0d 0a 41 67 Data Ascii: HTTP/1.1 304 Not ModifiedConnection: closeDate: Tue, 05 Dec 2023 18:13:59 GMTCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicETag: "69d0b1569bbd0b87116d60db3a12cd34"Expires: Sun, 19 Nov 2023 19:45:20 GMTAg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50422	3.162.114.30	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:13:59 UTC	996	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:00 UTC	611	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 30 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 4d 36 4d 57 47 4e 37 33 34 33 32 5a 32 41 32 32 50 30 56 4e 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:00 GMTx-amz-rid: M6MWGN73432Z2A22P0VNAccess-Control-Allow-Origin: https://www.nytimes.comAccess-Control
2023-12-05 18:14:00 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50450	34.120.63.153	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	847	OUT	POST /rtb/prebid?cid=8CU4WQK98 HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3400 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1; data-c-ts=1701800016
2023-12-05 18:14:00 UTC	3400	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 Data Ascii: {"site":{"domain":"www.nytimes.com","page":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html","ref":"","topMostLocation":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html","isTop":true,"canonical_u
2023-12-05 18:14:00 UTC	664	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 70 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 65 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 30 20 47 4d 54 0d 0a 61 63 63 65 70 74 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 53 65 63 2d 43 48 2d 55 41 2d Data Ascii: HTTP/1.1 200 OKcache-control: max-age=0, no-cache, no-store, must-revalidatepragma: no-cacheexpires: Tue, 05 Dec 2023 18:14:00 GMTaccept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-
2023-12-05 18:14:00 UTC	478	IN	Data Raw: 31 64 32 0d 0a 7b 22 69 64 22 3a 22 64 32 62 31 31 61 63 38 62 64 62 34 31 62 66 65 39 32 38 38 63 38 63 64 31 61 36 38 36 39 36 65 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 43 55 34 57 51 4b 39 38 26 70 72 76 69 64 3d 32 35 31 25 32 43 34 35 30 25 32 43 31 37 38 25 32 43 31 35 37 25 32 43 33 30 31 38 25 32 43 33 30 31 37 25 32 43 31 35 39 25 32 43 32 31 34 25 32 43 31 31 37 25 32 43 33 33 37 25 32 43 33 33 38 Data Ascii: 1d2{"id":"d2b11ac8bdb41bfe9288c8cd1a68696e","bidList":[],"ext":{"csUrl":[{"type":"iframe","url":"https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CU4WQK98&prvid=251%2C450%2C178%2C157%2C3018%2C3017%2C159%2C214%2C117%2C337%2C338

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50449	35.186.253.211	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	798	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 2474 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800031460586
2023-12-05 18:14:00 UTC	2474	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 39 33 39 30 32 33 38 2f 6e 79 74 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 39 33 39 30 32 33 38 2f 6e 79 74 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 22 7d 2c 22 67 70 69 64 22 3a 22 2f 32 39 33 39 30 32 33 38 2f 6e 79 74 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 22 2c 22 64 69 76 69 64 22 3a 22 74 6f 70 22 2c 22 63 75 73 74 6f 6d 50 61 72 61 6d 73 22 3a 7b 22 69 6e 76 43 6f 64 65 22 3a 22 6e 79 74 5f 77 6f 72 6c 64 5f 74 6f 70 22 7d 7d 2c 22 69 64 22 3a 22 34 37 63 33 38 30 62 38 33 39 38 65 61 31 34 22 2c 22 62 61 6e 6e 65 72 22 3a Data Ascii: {"imp":[{"ext":{"data":{"adserver":{"name":"gam","adslot":"/29390238/nyt/world/africa"},"pbadslot":"/29390238/nyt/world/africa"},"gpid":"/29390238/nyt/world/africa","divid":"top","customParams":{"invCode":"nyt_world_top"}},"id":"47c380b8398ea14","banner":
2023-12-05 18:14:01 UTC	437	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 65 63 65 69 76 65 2d 63 6f 6f 6b 69 65 2d 64 65 70 72 65 63 61 74 69 6f 6e 3d 31 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 44 6f 6d 61 69 6e 3d 2e 6f 70 65 6e 78 2e 6e 65 74 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.nytimes.comContent-Type: text/plainSet-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None
2023-12-05 18:14:01 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 34 36 36 64 61 31 66 31 2d 30 35 34 36 2d 34 66 61 35 2d 61 36 37 62 2d 61 33 62 38 64 39 36 36 35 62 33 30 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"466da1f1-0546-4fa5-a67b-a3b8d9665b30","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50448	44.198.213.90	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	777	OUT	POST /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&tmax=10000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 2112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:14:00 UTC	2112	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4e 59 54 69 6d 65 73 5f 37 32 38 78 39 30 5f 39 37 30 5f 74 6f 70 5f 50 42 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 39 33 39 30 32 33 38 2f 6e 79 74 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 39 33 39 30 32 33 38 2f 6e 79 74 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 22 Data Ascii: {"imp":[{"id":0,"tagid":"NYTimes_728x90_970_top_PB","banner":{"format":[{"w":728,"h":90},{"w":970,"h":90},{"w":970,"h":250}]},"fpd":{"context":{"data":{"adserver":{"name":"gam","adslot":"/29390238/nyt/world/africa"},"pbadslot":"/29390238/nyt/world/africa"
2023-12-05 18:14:00 UTC	644	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 35 20 4f 63 74 20 31 39 39 32 20 32 30 3a 31 30 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 58 2d 58 53 53 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:00 GMTContent-Type: application/json; charset=utf-8Content-Length: 19Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 15 Oct 1992 20:10:00 GMTPragma: no-cacheX-XSS
2023-12-05 18:14:00 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50447	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	678	OUT	POST /openrtb/pbjs?s=995821 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2628 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:14:00 UTC	2628	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 39 30 63 35 33 38 37 30 31 66 62 66 32 66 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 7d 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 66 61 6c 73 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 38 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c Data Ascii: {"id":"190c538701fbf2f","site":{"page":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html","domain":"nytimes.com","publisher":{"domain":"nytimes.com"}},"ext":{"source":"prebid","ixdiag":{"ls":false,"mfu":0,"bu":8,"iu":0,"nu":0,
2023-12-05 18:14:00 UTC	710	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 34 32 64 39 62 38 64 30 38 34 30 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:00 GMTContent-Type: application/jsonContent-Length: 37Connection: closeCF-Ray: 830e442d9b8d0840-IADCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: https://www.nytimes.comCache-Control: no-ca
2023-12-05 18:14:00 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 31 39 30 63 35 33 38 37 30 31 66 62 66 32 66 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"190c538701fbf2f","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50446	104.36.115.111	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	1848	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; pi=0:3; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; KRTBCOOKIE_279=22890-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23011-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23355-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260; PugT=1701800032; chkChromeAb67Sec=8; SPugT=1701766091
2023-12-05 18:14:00 UTC	2381	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 31 38 30 30 30 33 39 30 36 33 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 31 37 64 64 65 63 64 37 31 35 39 62 64 64 22 2c 22 74 61 67 69 64 22 3a 22 6e 79 74 69 6d 65 73 5f 74 6f 70 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 32 39 33 39 30 32 33 38 2f 6e 79 74 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 22 7d 2c 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 32 39 33 39 30 32 33 38 2f 6e 79 74 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 22 7d 2c 22 64 66 70 5f 61 64 5f 75 6e 69 74 5f 63 6f 64 65 22 3a 22 2f 32 39 33 39 30 32 33 Data Ascii: {"id":"1701800039063","at":1,"cur":["USD"],"imp":[{"id":"117ddecd7159bdd","tagid":"nytimes_top","secure":1,"ext":{"data":{"adserver":{"name":"gam","adslot":"/29390238/nyt/world/africa"},"pbadslot":"/29390238/nyt/world/africa"},"dfp_ad_unit_code":"/2939023
2023-12-05 18:14:00 UTC	229	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 33 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 204 No ContentAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Origin: https://www.nytimes.comCache-Control: no-cache, no-store, must-revalidateDate: Tue, 05 Dec 2023 18:13:59 GMTConnection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50445	68.67.179.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	690	OUT	POST /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Content-Length: 2987 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAiACKAIw1dC9qwY4AkACSAIQ1dC9qwYYAQ..
2023-12-05 18:14:00 UTC	2987	OUT	Data Raw: 7b 22 74 61 67 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 5b 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 7b 22 77 69 64 74 68 22 3a 39 37 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 5d 2c 22 70 72 69 6d 61 72 79 5f 73 69 7a 65 22 3a 7b 22 77 69 64 74 68 22 3a 37 32 38 2c 22 68 65 69 67 68 74 22 3a 39 30 7d 2c 22 61 64 5f 74 79 70 65 73 22 3a 5b 22 62 61 6e 6e 65 72 22 5d 2c 22 75 75 69 64 22 3a 22 32 62 66 36 66 38 66 35 38 61 32 63 61 33 22 2c 22 63 6f 64 65 22 3a 22 6e 79 74 5f 77 6f 72 6c 64 5f 74 6f 70 22 2c 22 61 6c 6c 6f 77 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 5f 70 6d 74 5f 72 75 6c 65 22 3a 66 61 6c Data Ascii: {"tags":[{"sizes":[{"width":728,"height":90},{"width":970,"height":90},{"width":970,"height":250}],"primary_size":{"width":728,"height":90},"ad_types":["banner"],"uuid":"2bf6f8f58a2ca3","code":"nyt_world_top","allow_smaller_sizes":false,"use_pmt_rule":fal
2023-12-05 18:14:01 UTC	1164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 38 35 35 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 Data Ascii: HTTP/1.1 200 OKServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:14:00 GMTContent-Type: application/json; charset=utf-8Content-Length: 38555Connection: closeVary: Accept-EncodingCache-Control: no-store, no-cache, privatePragma: no-cacheExpir
2023-12-05 18:14:01 UTC	15220	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 2e 30 22 2c 22 74 61 67 73 22 3a 5b 7b 22 75 75 69 64 22 3a 22 34 39 31 35 31 36 61 66 39 61 31 36 33 36 22 2c 22 74 61 67 5f 69 64 22 3a 32 31 38 39 37 32 34 36 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 37 30 30 33 36 33 36 30 30 34 36 36 37 32 32 31 32 37 34 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 6d 31 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 61 66 72 69 63 61 25 32 46 6e 69 67 65 72 69 61 2d Data Ascii: {"version":"3.0.0","tags":[{"uuid":"491516af9a1636","tag_id":21897246,"auction_id":"7003636004667221274","nobid":false,"no_ad_url":"https://nym1-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-
2023-12-05 18:14:01 UTC	16384	IN	Data Raw: 64 22 3a 32 31 38 39 37 32 38 34 2c 22 61 75 63 74 69 6f 6e 5f 69 64 22 3a 22 32 39 30 32 36 39 34 39 31 33 38 34 31 31 33 37 37 34 34 22 2c 22 6e 6f 62 69 64 22 3a 66 61 6c 73 65 2c 22 6e 6f 5f 61 64 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 6d 31 2d 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 69 74 3f 61 6e 5f 61 75 64 69 74 3d 30 26 72 65 66 65 72 72 65 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 61 66 72 69 63 61 25 32 46 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 26 65 3d 77 71 54 5f 33 51 4c 2d 42 61 44 2d 41 67 41 41 41 77 44 57 41 41 55 42 43 4f 6a 51 76 61 73 47 45 4e Data Ascii: d":21897284,"auction_id":"2902694913841137744","nobid":false,"no_ad_url":"https://nym1-ib.adnxs.com/it?an_audit=0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&e=wqT_3QL-BaD-AgAAAwDWAAUBCOjQvasGEN
2023-12-05 18:14:01 UTC	6951	IN	Data Raw: 20 72 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 7b 73 74 61 63 6b 3a 72 2c 64 65 74 65 63 74 55 72 6c 3a 75 7d 7d 2c 67 65 74 4c 65 76 65 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 61 6c 6b 55 70 57 69 6e 64 6f 77 73 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 72 79 7b 6e 2e 70 75 73 68 28 7b 72 65 66 65 72 72 65 72 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 6e 75 6c 6c 2c 6c 6f 63 61 74 69 6f 6e 3a 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c 7c 6e 75 6c 6c 2c 69 73 54 6f 70 3a 65 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 29 7d 63 61 74 63 68 28 72 29 7b 6e 2e 70 75 73 68 28 7b 72 65 66 65 72 72 65 72 3a 6e 75 6c 6c 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 69 73 54 6f 70 3a 65 3d 3d 77 Data Ascii: r.push(o)}return{stack:r,detectUrl:u}},getLevels:function(){var e=this.walkUpWindows(function(e,n){try{n.push({referrer:e.document.referrer\|\|null,location:e.location.href\|\|null,isTop:e==window.top})}catch(r){n.push({referrer:null,location:null,isTop:e==w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50463	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	935	OUT	GET /b?c1=2&c2=3005403&ns__t=1701800039537&ns_c=UTF-8&c8=Nigeria%E2%80%99s%20President%20Calls%20for%20Inquiry%20After%20Military%20Strike%20Kills%20at%20Least%2085%20Civilians%20-%20The%20New%20York%20Times&c7=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
2023-12-05 18:14:00 UTC	457	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 30 20 47 4d 54 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 55 49 44 3d 31 43 45 30 30 31 64 37 39 32 62 61 37 65 63 35 39 64 66 64 36 38 61 31 37 30 31 38 30 30 30 30 37 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 53 65 63 75 72 65 3b 20 64 6f 6d 61 69 6e 3d 2e 73 63 6f 72 65 63 61 72 64 72 65 73 65 61 72 63 68 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 6d 61 78 2d 61 67 65 3d 36 32 32 30 38 30 30 30 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 55 41 2c 20 50 6c 61 74 66 6f 72 6d 2c 20 41 72 63 68 2c 20 4d 6f 64 65 6c 2c 20 4d 6f 62 69 6c Data Ascii: HTTP/1.1 204 No ContentConnection: closeDate: Tue, 05 Dec 2023 18:14:00 GMTset-cookie: UID=1CE001d792ba7ec59dfd68a1701800007; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000Accept-CH: UA, Platform, Arch, Model, Mobil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50452	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	443	OUT	GET /images/2023/12/05/multimedia/05nigeria-strike-kqzp/05nigeria-strike-kqzp-jumbo.jpg?quality=75&auto=webp HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:00 UTC	1203	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 30 30 31 39 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 45 74 61 67 3a 20 22 6d 73 64 71 48 67 4c 61 61 78 33 6a 41 67 58 35 41 66 48 59 48 61 45 32 70 62 31 6f 6e 52 44 51 61 2b 4e 67 78 32 78 67 68 77 6b 22 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 34 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 50019Cache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, publicContent-Type: image/jpegEtag: "msdqHgLaax3jAgX5AfHYHaE2pb1onRDQa+Ngx2xghwk"Expires: Tue, 05 Dec 2023 14:
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 22 c0 62 ac 22 43 7a 55 d8 dd 54 45 c8 40 61 2c 37 82 5e 97 c1 bb c8 5d 85 c8 b8 18 9e 96 23 fa 55 d8 db e4 be c3 f2 3c 13 0d 62 ac 2a ec 4b d2 9b 2a 8a ec 4b 94 30 da c5 58 55 d8 75 86 dc d8 e4 f8 1f 94 bb 0c 35 90 b0 c9 74 1d 61 fc 1a fc a4 3f 2c a3 23 90 b5 d0 b2 14 17 63 4b 95 e0 7e 5a 5d 02 01 e4 11 e4 1a 5c b4 3f 2d 0c 4d 66 aa 04 b9 3b e8 68 64 44 95 31 86 b2 e5 42 e8 ab d3 f8 36 39 68 6e 53 ec 15 8f e9 45 e9 57 63 5f 94 b4 1f 94 bb 05 64 2c 32 ec 49 61 fc 1a 9c a1 72 d0 19 8b 0e bb 12 54 3c 1a 5c b5 d8 75 4f 70 33 d5 15 d8 75 48 3f 96 2e 58 00 f2 77 1d 52 5a 87 64 16 42 a5 0a a0 4f 2d cb b2 0f 94 dc 73 a1 9c 41 6a ad 18 7b 8b 06 a8 b7 15 18 d8 88 2b 33 1a 70 f9 99 d0 d6 83 d4 cc 9d 25 73 8f 50 03 18 17 41 32 dc 9e 0b 14 51 8c 54 11 64 52 25 91 12 Data Ascii: "b"CzUTE@a,7^]#U<bKK0XUu5ta?,#cK~Z]\?-Mf;hdD1B69hnSEWc_d,2IarT<\uOp3uH?.XwRZdBO-sAj{+3p%sPA2QTdR%
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: c4 c7 56 66 eb 73 5f 13 1b dc cd 6b e6 33 ec e5 56 c2 fa 1a 14 2f a0 1c 23 b0 75 04 d3 3a 4a d4 6d e1 af 64 6c 52 66 3e 1f a1 ad 4d d8 b1 d2 0d 4d 09 b2 8c db 0b 39 75 a4 dc b7 05 a9 22 53 92 d4 0e a4 f4 64 d6 6a 9a 95 35 06 9c f7 14 e5 a9 43 96 ac cd 60 af bf b1 44 ae 5e 88 c9 2b 34 07 a2 c6 0c 92 a7 e0 37 97 e0 97 2c f4 62 e8 0e 50 dc a0 fc 8c 5c b4 30 d6 7f 28 75 45 07 f2 d1 28 d3 18 68 15 40 7e 51 a1 cb 1d 53 43 0d 01 ca 17 2c d0 e5 8b 94 30 d0 3c a4 3f 25 07 72 c5 cb 18 68 2e 4a 1b 94 83 f9 62 e5 97 0d 01 ca 17 28 3f 96 2c 88 62 68 15 48 7e 50 72 a6 3f 2c 61 a0 79 43 f2 90 6f 2c 59 06 1a 0f 94 bb 0d ca 41 d9 05 90 61 a0 79 7e 07 54 c3 b2 21 72 c6 1a 0f 96 3f 2f c0 6e 5f 04 72 a1 86 83 e5 8d 91 04 b5 b8 c9 22 62 87 e5 8f cb 08 51 2c 51 45 c4 d0 9c a1 Data Ascii: Vfs_k3V/#u:JmdlRf>MM9u"Sdj5C`D^+47,bP\0(uE(h@~QSC,0<?%rh.Jb(?,bhH~Pr?,ayCo,YAay~T!r?/n_r"bQ,QE
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 00 88 41 04 4e 11 08 8a 1a 11 2f 49 14 45 22 56 1c 56 02 04 4b 19 58 11 b0 c4 ad b9 10 15 87 b0 92 24 90 0c 22 56 15 82 23 61 12 b0 ac 04 6c 35 89 8a c0 42 c3 8e 20 23 6b 92 b0 91 2b 00 c9 0e 2b 0e 03 58 43 d8 56 0a 6b 0d 66 38 82 1a c2 1c 56 02 22 24 35 82 a3 a1 1b 16 0c 05 76 1a c5 96 22 05 63 75 2d b6 e4 6c 05 76 16 a5 96 15 80 ac 8d 8b 72 91 b0 15 5b 72 39 6f 72 eb 0d 94 0a 6c 47 29 7e 5d c8 b8 91 54 d8 8d 8b b2 8d 94 22 9b 0d 66 5f 94 6c ac 08 44 b1 75 12 89 24 8d c6 29 d2 1d 2f 04 92 25 94 d3 2a 9a 2a 94 77 0a 71 dc a9 c4 e7 5b e4 1b 88 d9 02 b2 11 c8 63 1b 0b 97 72 0e 01 bc b2 3c b5 a9 71 00 b8 15 ba 66 8b 81 0e 58 c1 9f 90 65 03 43 96 37 28 61 80 95 32 5c af 01 aa 99 35 4c 62 63 3d 52 1f 92 69 72 d0 b9 68 98 98 cc e4 f8 1b 90 8d 3e 5a 19 53 18 b8 Data Ascii: AN/IE"VVKX$"V#al5B #k++XCVkf8V"$5v"cu-lvr[r9orlG)~]T"f_lDu$)/%**wq[cr<qfXeC7(a2\5Lbc=Rirh>ZS
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 68 02 18 57 42 d0 04 46 e3 dc 60 24 3d c8 26 3e 64 11 cb fa ff 00 24 7f 68 25 d4 e3 56 2e 6f a8 de aa 5d ce 9a c3 b1 7c 45 6b a9 4b e2 2b 5d 4e 3e 78 a9 6b a8 34 b1 73 bb d4 68 ed ff 00 69 ae e2 5c 4d 77 38 45 8a 9d de a4 a3 88 9d d6 a1 1d e2 e2 0b b9 2f da 0b b9 c5 c3 11 3e e5 bc f9 f7 26 ae 3a cf da 0b 5d 48 7e d1 5a fc c7 2b 2a d2 d7 52 8e 7c ee f5 ea 3e 4c 76 4b 88 79 2d 8e 37 c9 c9 52 94 9f 53 4e 8a 7a 12 da b2 47 45 1c 5b 65 be a5 f7 32 a9 46 5a 05 a8 33 3a d6 41 3e a5 f7 23 ea 59 47 2d 92 54 c6 98 b7 d4 3d 45 ea 19 5f 2c 6e 59 3e 4c 8b 3d 44 8a 67 89 6a e4 f9 5a 03 55 a6 f5 2f c8 a2 a6 32 4a fa 80 54 c7 b5 7d 4b 6a d3 dc c9 af 0b 5c b1 0f 53 89 49 36 45 71 29 3e a6 5d 58 bb b2 30 4c d3 2d 8f da 32 ee 55 3e 23 3e e0 0d 68 0f 3b ea 54 1d 2e 23 53 5d Data Ascii: hWBF`$=&>d$h%V.o]\|EkK+]N>xk4shi\Mw8E/>&:]H~Z+*R\|>LvKy-7RSNzGE[e2FZ3:A>#YG-T=E_,nY>L=DgjZU/2JT}Kj\SI6Eq)>]X0L-2U>#>h;T.#S]
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 1a 99 1d 3f aa f2 4b d5 2e e7 32 b1 63 fa bf 25 d3 23 a6 f5 57 ea 2f 54 8e 6f d6 2e e2 f5 7e 46 98 e9 7d 4f 91 7a 94 73 8b 17 e4 7f 57 e4 69 91 d1 ac 52 24 b1 2b b9 cd fa b5 dc 7f 58 bb 8d 31 d2 ac 4a ee 3f a9 5d ce 6d 62 fc 8f ea fc 97 4c 74 7e a1 12 58 95 dc e7 3d 5a ee 3f ac 5d c6 98 e8 bd 42 ee 2f 52 bb 9c f7 aa 5d c5 ea d7 71 a9 8e 8b d4 f9 17 a8 5d ce 7b d5 ad 75 1b d5 f9 1a b8 e8 bd 42 ee 2e 7f 93 9d f5 6b b8 fe af c8 d3 1d 17 a8 f2 37 a9 f2 60 7a af 23 7a bf 23 4c 6f fa 82 5c f5 dc e7 bd 5a ee 3a c5 f9 26 98 e8 3d 42 ee 2f 50 bb 9c ff 00 a9 fe a1 7a af 23 4c 74 71 ac 15 0a 89 9c e5 2c 45 fa 9a 54 6a ed a9 d3 97 2e be 1b 31 9f e4 4f 30 1c 27 a1 66 63 a3 0b 65 30 69 d4 d1 8a 72 d0 cf ab 57 73 1d 35 ca d7 5f 5d c6 f5 0b b9 8d 5a be 59 6e 51 ea bc 9c Data Ascii: ?K.2c%#W/To.~F}OzsWiR$+X1J?]mbLt~X=Z?]B/R]q]{uB.k7`z#z#Lo\Z:&=B/Pz#Ltq,ETj.1O0'fce0irWs5_]ZYnQ
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 58 68 22 94 42 52 2b 82 2f 48 82 36 1e cc 9d 85 66 8a 23 61 58 95 85 60 21 62 89 ad c2 6d e0 ae 4b 70 33 aa 43 70 2a b4 95 99 ad 38 68 c1 a5 0d c8 30 67 87 df dc a9 61 f7 d0 da 95 22 1c 94 34 65 7a 7f 05 6f 0d e0 db e4 f8 19 d1 df 40 31 16 1b c1 2f 4f e0 d8 e4 21 72 57 62 e8 c9 58 7d b4 2e 8e 1f c1 a4 a8 16 2a 48 9a 33 95 0f 02 e4 f8 35 39 43 f2 80 12 8d 2d 83 e9 c3 62 50 a4 82 63 10 25 08 9a 78 7e 80 50 80 75 14 58 97 e8 4a 5a 0c fa 92 e8 45 f5 3a 47 0e fe 83 cf a9 99 8a fb 2f d8 d3 9f 53 37 12 b4 67 4e 7e e3 e5 7e af fd b5 ce 37 fb e4 bc 9b d8 59 3d 0c 2c af 9e cd dc 32 d8 f4 f7 f5 3f a7 c3 ff 00 e1 f2 ff 00 97 bf fe aa de c3 cd e8 69 d3 91 8f 46 fa 1a 34 e4 d2 47 1b 1f a9 f1 7d 41 c4 24 32 7a 31 d9 87 a6 07 9a 00 ad 1d cd 19 75 01 ab d4 ac eb 9d c6 52 Data Ascii: Xh"BR+/H6f#aX`!bmKp3Cp8h0ga"4ezo@1/O!rWbX}.H359C-bPc%x~PuXJZE:G/S7gN~~7Y=,2?iF4G}A$2z1uR
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 9c bf ba 45 e7 8b d3 97 97 cd cf 8b 9d bf 37 f1 27 db 43 15 c4 30 54 27 28 4e bd e4 b7 51 4e 56 7d 9b d9 33 16 af 1a c3 6b 96 94 db fe a7 65 f8 1c c3 a9 27 9a ef 5f cf c8 3b 9b ee 76 9e 3e 67 f2 f1 5f 37 9f bf fc bd 67 f1 1a f8 9e 29 5a b5 96 75 14 af 65 14 95 bf b8 0f 3e 11 93 94 ea 6f df 57 7f 73 3a 52 9e 67 a8 25 7a b2 d2 3f 53 4e 7f e1 9d 7d db f3 f7 5d 2e 1b 88 4a 84 a5 28 cf 3c 1b d5 6f 7d 3a f4 b9 d4 70 9a 98 1e 31 8a a5 84 a7 9b 0d 88 9c 5e 5b bc f4 e7 28 ab da da 38 bf bc f2 e5 51 dd bd 9b fa 7e 41 d8 0e 21 5f 07 8b c3 e2 e1 2b 4a 8d 48 c9 77 d1 ea be a3 27 e6 3a f8 f8 eb c7 66 77 73 f6 7a 46 2a 8c f8 7c a3 1c 54 e9 d3 93 6d 5b 32 6e eb bd ba 3e 81 18 7a 90 a9 f6 27 19 7b 34 ff 00 23 87 f8 87 1f 1c 57 10 c4 63 69 e2 2e aa 64 cb 09 6b 36 a3 1b 36 Data Ascii: E7'C0T'(NQNV}3ke'_;v>g_7g)Zue>oWs:Rg%z?SN}].J(<o}:p1^[(8Q~A!_+JHw':fwszF*\|Tm[2n>z'{4#Wci.dk66
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: d2 5f 61 ea 32 1e fc ba fe 03 4a b5 29 e2 3f 68 53 54 30 73 a6 e3 52 75 ad 16 92 77 b4 13 4d b6 fb 23 6a 1f 1c 4e 8e 32 d8 5a 79 f0 30 8c 29 d3 a7 51 da 4e 30 56 52 cd fc cf aa 3c b2 a3 a8 a5 69 b6 da ef a8 d1 a9 34 ee 99 32 66 62 d9 b2 65 c7 d3 7c 17 8f f0 ee 2b 05 c8 a9 96 ad b5 a5 3b 29 7d 35 b4 97 93 75 ec 7c a5 43 19 88 a5 38 ca 9c ed 28 b4 d3 57 4d 35 da c7 be fc 17 c7 2b 71 7e 19 52 38 aa 99 f1 54 26 94 e7 a2 72 8c b5 8b 76 eb dd 8f a2 5b f5 d6 3a 4a db 33 03 18 b4 66 fd 5b 6a 61 62 ed 66 69 5c 17 14 8b b4 be a7 24 ef 77 ee 76 7c 51 7d a3 8f 69 29 48 8a 68 27 73 53 0e 9e 9a 99 b0 7a a3 53 0e f6 33 5a e6 37 b0 bd 0e 8b 0c b4 47 3f 85 e8 74 38 5d 8e 55 d6 35 69 26 19 18 83 51 4f 40 f8 a5 62 34 8e 41 a5 14 5f 62 32 5b 94 66 55 8e e6 55 78 ee 6d d5 8e Data Ascii: _a2J)?hST0sRuwM#jN2Zy0)QN0VR<i42fbe\|+;)}5u\|C8(WM5+q~R8T&rv[:J3f[jabfi\$wv\|Q}i)Hh'sSzS3Z7G?t8]U5i&QO@b4A_b2[fUUxm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50462	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	431	OUT	GET /images/2019/07/03/reader-center/author-elian-peltier/author-elian-peltier-thumbLarge-v6.png HTTP/1.1 Host: static01.nyt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:00 UTC	1095	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 36 34 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 4c 34 33 35 56 43 46 38 38 76 2d 6b 6a 68 76 36 47 52 48 4a 52 36 69 72 6d 37 79 36 7a 4e 5a 31 74 45 7a 72 6f 64 46 4a 67 79 51 50 79 5a 6c 48 47 79 4e 30 62 77 4e 73 36 6a 53 53 30 41 30 6c 6b 64 67 68 30 6c 2d 66 49 36 48 50 57 61 37 6b 50 4f 57 6b 64 44 51 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 3b 20 73 74 61 6c 65 2d 69 66 2d 65 72 72 6f 72 3d 38 36 34 30 30 3b 20 73 74 61 6c 65 2d 77 68 69 6c 65 2d 72 65 76 61 6c 69 64 61 74 65 3d 33 30 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 21647X-GUploader-UploadID: ADPycduL435VCF88v-kjhv6GRHJR6irm7y6zNZ1tEzrodFJgyQPyZlHGyN0bwNs6jSS0A0lkdgh0l-fI6HPWa7kPOWkdDQCache-Control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 07 74 49 4d 45 07 e7 02 1c 0f 34 28 22 59 26 ed 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 54 36 49 44 41 54 78 da e5 bd 79 90 24 f7 75 df f9 c9 cc ba ef ea aa 3e e7 e8 9e 0b 98 19 40 00 89 63 00 92 22 29 d2 41 83 f2 52 96 68 c9 87 64 ae ad 0d 7b e5 db eb 5d db eb db 6b af d6 61 c9 61 c7 86 77 ad b5 bd 5e 6b 25 5a 96 64 5a 94 18 b4 c2 96 bc 36 45 d2 14 29 80 24 48 00 03 60 0e cc 0c 7a 7a 7a fa ae aa ae fb ca cc fd 23 eb fd e6 55 4e f5 60 06 d3 3d 04 e8 8c e8 98 e9 ea 3a b2 f2 f7 cd ef 7b bf 77 7c 9f c5 7f 45 c7 e6 d6 aa fe d5 1a fd 6b ab ff cb e1 8d 7e 00 98 99 3e 74 a7 f7 d8 eb f5 fe e8 ff fe a4 f7 f9 6e 3f ac ff 8a 80 64 8f 7e ee 05 38 51 20 06 Data Ascii: PNGIHDR<qtIME4("Y&orNTwT6IDATxy$u>@c")ARhd{]kaaw^k%ZdZ6E)$H`zzz#UN`=:{w\|Ek~>tn?d~8Q
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: dc dc ac 79 4f ed c7 8d 4c a7 be 1e 1b c0 5f 01 7e c1 02 d7 bf 15 cf fb 8e b3 d7 77 04 58 61 5f ea 95 57 ce bb 1f fd c8 87 ad ad ed 9d 3f e3 fb fe 4f 59 96 95 e6 4e 0e b9 b6 13 83 21 8d 66 8b eb d7 6f d0 ef f5 79 e1 85 af d3 6e b7 99 9f 9f 67 73 73 93 8b 17 2f e2 fb 1e fd fe c0 f8 47 cd 66 73 e4 3b 75 c8 e7 f3 c4 62 31 da ed 36 f9 7c 9e e9 e9 69 00 86 c3 e1 08 6c 01 53 f5 fb 7d 9a cd 26 c3 e1 10 df f7 e9 f7 fb c1 c9 39 0e 91 48 84 c1 60 c0 60 30 20 16 8b e1 ba ae 01 44 22 91 a0 5c 2e 93 cf e7 71 5d 97 76 bb 4d b7 db 35 00 ed f5 7a 40 60 8a f3 f9 3c 4f 3e f9 04 3f f8 43 3f c0 d3 4f 3f 45 2c 16 65 30 18 e2 79 2e ae eb 92 4c 06 fe 9b 30 98 02 d8 0b c0 1f 07 5e 79 a7 b0 d7 03 07 56 38 26 65 db f6 d0 f7 fd 53 ae eb fe ac 65 d9 df 6b 59 96 e7 fb be 6f 59 7b 03 Data Ascii: yOL_~wXa_W?OYN!foyngss/Gfs;ub16\|ilS}&9H``0 D"\.q]vM5z@`<O>?C?O?E,e0y.L0^yV8&eSekYoY{
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: cd 66 93 85 85 05 0a 85 82 31 4f bb bb bb c6 a9 96 f8 d4 a4 48 b9 ec fe 06 83 01 91 48 84 54 2a 85 65 05 e7 2a 3f f2 7c 01 95 6c 24 6c db c6 75 5d 06 83 80 95 33 99 0c b6 6d 93 48 24 0c 1b 8a 59 ad d5 6a fc eb 5f f8 25 e6 e6 e7 18 0c 06 d4 aa 55 7e e8 87 7e 90 f9 85 39 f2 f9 3c 89 44 dc 9c 4b 88 bd 86 c0 07 80 af 10 a4 c2 ce 3f 28 70 45 0e 18 54 52 29 09 f0 8b c0 8f 8e be 94 49 c3 c8 e1 ba 3e 11 27 4a 3e 9f 1f fd ee d2 68 36 39 72 f8 28 60 91 4c 06 db f1 48 24 42 a3 d1 60 6d 6d cd 00 f2 91 47 1e 31 db fa 20 a6 b5 45 b5 5a 35 d1 ed 6a b5 8a ef fb a4 d3 69 c3 5a 1b 1b 1b d4 eb 75 8e 1f 3f 4e 2e 97 e3 fa f5 eb 06 14 12 0e 18 0c 06 b8 ae 4b b7 db a5 df ef 8f c5 ae 04 64 02 8c 64 32 69 9c f3 dd dd 5d ba dd ae 01 cf 78 c2 db 37 3e 96 ec 3c e5 7b 38 8e 43 b7 db Data Ascii: f1OHHTe?\|l$lu]3mH$Yj_%U~~9<DK?(pETR)I>'J>h69r(`LH$B`mmG1 EZ5jiZu?N.Kdd2i]x7><{8C
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 06 ba 6c 36 4b a9 54 c2 f3 3c 92 c9 24 c9 64 72 14 db ea e0 79 2e cd 66 d3 54 54 dc e1 d0 7f fc 79 82 5e 81 01 dc 39 3f fb c0 80 a5 0e 49 d3 fc 3d 82 3a f4 61 98 0d 7d 1f ba dd 3e 9d 4e 8f 4e a7 cb ee 6e 83 88 13 c5 71 22 c4 62 31 76 76 76 cc 1d 2c 69 8e 5e af 67 4c c7 ce ce 0e 1b 1b 1b 44 22 11 ae 5e bd ca cd 9b 37 b1 2c 6b 54 23 15 25 99 4c 1a 46 10 f3 a2 81 a6 59 43 e2 49 1a 1c 02 58 31 4b 7a d1 1d c7 31 6c 21 cf d5 80 93 1f 01 47 18 4c fa e6 92 c7 64 c7 28 df 4f 00 27 a9 25 61 db e1 70 48 bd 5e 37 66 af 50 28 04 e6 6f b4 79 91 1b 25 1e 8f e3 79 3e 6b 6b 1b 34 1a 4d f3 fe 6f b1 f6 1e 41 4b dc af 00 67 47 6b e8 4c 20 8d 07 07 2c f5 c1 92 46 f8 71 e0 af 4f 02 55 b0 a0 0e 83 fe 90 dd dd 3a 95 9d 2a 11 27 46 a9 54 06 7c d6 d6 d6 cc c5 6c b7 db e4 72 39 5a Data Ascii: l6KT<$dry.fTTy^9?I=:a}>NNnq"b1vvv,i^gLD"^7,kT#%LFYCIX1Kz1l!GLd(O'%apH^7fP(oy%y>kk4MoAKgGkL ,FqOU:*'FT\|lr9Z
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 4d 60 ab bf 0e 7c e8 4e 26 d0 bc 76 63 8b 4a 65 d7 e4 bb 24 31 7c e3 c6 0d d6 d6 d6 18 0e 87 a6 3a b3 d3 e9 30 18 0c c8 66 b3 1c 3e 7c 98 6e b7 cb 6b af bd 86 eb ba 6c 6f 6f 9b 40 a8 2c 94 80 46 b6 de 9a 2d c2 d5 08 e6 0b 28 f6 12 66 d0 4e be 66 22 fd 5e f2 bb 66 b9 58 2c 66 82 ab 3a 3f a8 81 a8 4d a1 54 b3 6a 33 28 80 0a 9f bb e3 38 c4 e3 71 13 37 d3 c1 57 49 6a cb 35 95 b0 84 4e 55 b5 47 9d df 2f bf 7c 9e af 7d f5 79 3e fa bb be 8f 62 b1 b0 a7 b4 c0 04 70 01 fc 24 f0 1b c0 f2 bd 32 d7 bd 30 96 d0 e4 a3 04 9d c9 77 34 81 16 41 55 e8 d6 d6 0e f5 7a 83 b9 b9 39 4a a5 12 d3 d3 d3 bc f4 d2 4b ac ae ae 9a ed b6 38 c1 f5 7a 9d e1 70 68 7a f8 7a bd 1e b5 5a cd 04 08 25 78 a9 cd 9a 06 8e 5e 5c bd 50 e1 df c3 80 d2 cf 91 05 d3 6c a1 df 47 16 5d 7e 74 ca 48 16 59 Data Ascii: M`\|N&vcJe$1\|:0f>\|nkloo@,F-(fNf"^fX,f:?MTj3(8q7WIj5NUG/\|}y>bp$20w4AUz9JK8zphzzZ%x^\PlG]~tHY
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 75 1c 87 5a 6d 97 57 5f 7d 95 d5 d5 55 4a e5 12 b3 33 33 54 8b 05 7a dd 1e a7 1e 3a 49 26 73 d7 e0 12 32 f9 13 04 f2 49 37 de 8a b5 22 6f 81 d4 21 41 77 c7 1f bf 17 b6 12 c6 1a b8 03 3c d7 26 9d 4e 13 8f c7 a9 56 ab cc cf cf 33 3f 3f cf da da 1a b9 5c 8e b3 67 cf d2 ed 06 a2 1e e2 b4 0a 1b 49 6d b8 f8 1b 62 0e 74 13 a8 30 8d f8 4b b2 55 cf e7 f3 e4 72 39 a6 a7 a7 29 95 4a 06 a4 02 0c 6d 3e c4 df 32 e2 1c 30 16 c0 94 24 b9 8e ba 4b 41 60 b7 db 25 93 c9 90 c9 64 d8 dc dc 24 9f cf 53 28 14 98 9a 9a 32 e0 16 16 91 d7 8a 72 4d bb dd a6 58 2c 52 28 14 e8 74 3a 14 8b 45 00 6e dc b8 c1 d2 d2 92 a9 41 93 ef a7 1b 3b 74 35 aa b4 e8 a7 52 29 0a 85 82 89 ca 0b db 75 bb 41 05 44 a3 d1 60 76 76 36 a8 26 29 e4 89 c7 13 44 a3 91 bb 01 97 60 61 16 f8 d3 04 71 cc 3b b2 56 Data Ascii: uZmW_}UJ33Tz:I&s2I7"o!Aw<&NV3??\gImbt0KUr9)Jm>20$KA`%d$S(2rMX,R(t:EnA;t5R)uAD`vv6&)D`aq;V
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: f6 70 da 23 04 f5 38 6f 8b ad 80 40 f6 da 0b 52 15 f9 7c de 00 6a 7e 7e 9e e9 e9 69 a3 a2 92 4e a7 c9 64 32 a6 79 42 4a 6f 1d c7 19 db 3a 4b 00 74 6b 6b 8b d9 d9 59 ce 9e 3d 4b a1 50 60 7a 7a da 74 08 4b 28 41 33 92 66 a5 b0 8f 34 c9 21 0f 3b f4 13 54 8b c7 02 a9 61 d9 47 fd 59 e1 cf 08 83 57 3b fb ba 6c 47 7c 35 bd 11 88 46 a3 64 32 19 b3 51 c9 e7 f3 6c 6e 6e 8e 55 da 4a ce 50 76 cd 9a 9d 83 50 0d f4 fb 03 6c cb c6 71 22 6f 77 3f 26 01 d3 29 e0 0f 11 4c cd b8 cd 89 b7 f7 40 e3 d3 04 a3 d8 fc b7 0b 2c d7 0d 44 61 d7 d7 d7 c9 64 32 74 3a 1d d6 d6 d6 f8 e6 37 bf 49 b7 db 35 bb c1 99 99 19 52 a9 14 ad 56 8b e5 e5 65 d6 d7 d7 a9 54 2a e6 ce dd da da 1a 6b 38 98 9a 9a e2 dc b9 73 3c f6 d8 63 cc cc cc b0 b0 b0 40 b1 58 34 dd c1 62 42 74 f8 40 57 29 84 2b 16 26 Data Ascii: p#8o@R\|j~~iNd2yBJo:KtkkY=KP`zztK(A3f4!;TaGYW;lG\|5Fd2QlnnUJPvPlq"ow?&)L@,Dad2t:7I5RVeT*k8s<c@X4bBt@W)+&
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: ab 55 53 27 26 92 99 3a 8c d0 ef 07 53 2c 44 7f 5e 4a a1 37 37 37 0d 58 75 97 d0 7d 00 eb 28 41 96 a6 33 7a cc 17 56 92 6f f5 34 fb 7c c4 62 51 12 a3 aa cc 54 2a 45 2e 97 33 a2 b5 c5 62 71 4c ca 5a 80 28 bb 15 b9 20 72 b1 74 17 70 38 52 ad 7b 0e 05 00 9a 49 26 b5 d1 87 43 10 6f b5 cb 0b b3 cc 24 86 d2 fe e5 24 40 ea c7 f5 67 86 9f af 3f 47 37 82 a4 52 29 53 b4 98 4c 26 8d 4f 29 d1 77 dd fb 08 18 05 1a b9 46 53 53 53 1c 5b 5a da af 1d a1 a8 38 2e 29 ec d8 9b 5b ab 63 63 72 23 04 3b 42 f6 cb 0c 8a e3 ed fb ae 19 21 12 68 38 35 a9 54 2a 26 68 2a 17 4e cf 92 91 ed b2 98 43 cd 80 7a 0b ad 1f 97 ac 7f d8 c4 84 75 af b4 43 ab 99 4b 5f 6c 2d 1f a4 65 86 c2 b1 a8 b0 5f 16 36 b1 1a 44 f2 7a 1d 54 0d eb 6d e9 cf d6 00 93 2a 57 51 2f cc 66 b3 a6 de 4c 0a 11 c3 33 b1 Data Ascii: US'&:S,D^J777Xu}(A3zVo4\|bQTE.3bqLZ( rtp8R{I&Co$$@g?G7R)SL&O)wFSSS[Z8.)[ccr#;B!h85T&hNCzuCK_l-e_6DzTmWQ/fL3
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: a9 54 4c 0b 96 e7 79 ec ec ec 18 87 f9 d2 a5 4b f8 be cf a5 4b 97 4c 35 6c b5 5a 35 72 db e5 72 99 ed ed 6d e6 e6 e6 98 9d 9d 25 9f cf 4f dc 30 c8 79 89 d8 88 f4 0d 84 1b 41 b4 ae d6 fa da 3a 57 ae 5c 65 66 e6 19 e3 eb ed d3 71 d8 ac f7 e8 df e4 c8 46 1e 18 b0 6c db 86 88 cf ee 6e 90 e3 ab d5 6a e6 ae 3e 7e fc 38 6b 6b 6b 66 68 78 32 99 64 61 61 81 0b 17 2e 10 8b c5 a8 54 2a 66 f2 aa 00 49 eb 63 e9 c5 97 94 85 28 b7 64 32 19 b6 b7 b7 59 59 59 61 77 77 d7 74 15 4b 86 5f 76 89 b5 5a 8d 0b 17 2e e0 79 1e 47 8e 1c a1 db ed 1a ad 07 2d 5e ab c1 2d 02 71 92 14 4e a5 52 1c 3a 74 c8 80 43 be a7 6e 6a 90 36 2d 31 e1 df f8 c6 37 d8 de de 66 69 69 89 85 85 85 31 59 cc a5 a5 25 73 f3 cd cc cc 98 8a 10 cd 40 02 b6 58 2c c6 dc dc 9c 29 f3 9e 94 90 97 d7 b9 ae cb d5 2b Data Ascii: TLyKKL5lZ5rrm%O0yA:W\efqFlnj>~8kkkfhx2daa.T*fIc(d2YYYawwtK_vZ.yG-^-qNR:tCnj6-17fii1Y%s@X,)+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50460	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	2209	OUT	GET /vi-assets/static-assets/blank-bc69fc3beb0b3a4f5ca2.js?_sw-precache=30da5847810b2eef5ca667e7be144e2c HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:00 UTC	1321	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 34 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 74 78 61 66 61 5f 55 7a 31 6d 32 4b 74 56 49 4e 43 5a 6b 35 65 6d 6c 4a 58 62 4a 74 72 78 69 4c 36 71 52 71 56 6a 30 4a 35 79 66 43 55 78 5a 4c 65 43 39 4b 66 76 38 65 70 59 6c 79 42 57 63 50 6d 31 35 76 70 47 39 61 57 48 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 35 37 32 35 33 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1947X-GUploader-UploadID: ABPtcPotxafa_Uz1m2KtVINCZk5emlJXbJtrxiL6qRqVj0J5yfCUxZLeC9Kfv8epYlyBWcPm15vpG9aWHAx-goog-generation: 1701369734572534x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:00 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 5d 2c 7b 6a 74 32 58 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 76 61 72 20 72 3d 6e 28 22 6c 53 4e 41 22 29 2c 6f 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 22 71 31 74 49 22 29 2c 61 3d 6e 28 22 74 78 74 6b 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jt2X:function(e,t,n){"use strict";n.d(t,"a",(function(){return l}));var r=n("lSNA"),o=n.n(r),i=n("q1tI"),a=n("txtk");function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Obje
2023-12-05 18:14:00 UTC	568	IN	Data Raw: 66 28 29 28 72 7c 7c 28 72 3d 75 28 29 28 5b 22 5c 6e 20 20 71 75 65 72 79 20 42 6c 61 6e 6b 51 75 65 72 79 28 24 70 72 6f 67 72 61 6d 49 64 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 20 20 70 72 6f 67 72 61 6d 5f 62 65 74 61 28 69 64 3a 20 24 70 72 6f 67 72 61 6d 49 64 29 20 7b 5c 6e 20 20 20 20 20 20 69 64 5c 6e 20 20 20 20 20 20 5f 5f 74 79 70 65 6e 61 6d 65 5c 6e 20 20 20 20 7d 5c 6e 20 20 7d 5c 6e 22 5d 29 29 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 72 65 74 75 72 6e 7b 71 75 65 72 79 3a 76 2c 76 61 72 69 61 62 6c 65 73 3a 7b 70 72 6f 67 72 61 6d 49 64 3a 22 68 6f 6d 65 22 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 62 2e 61 29 28 29 2c 4f 62 6a 65 63 74 28 79 2e 61 29 28 22 62 6c 61 6e 6b 52 6f Data Ascii: f()(r\|\|(r=u()(["\n query BlankQuery($programId: String!) {\n program_beta(id: $programId) {\n id\n __typename\n }\n }\n"])));function w(){return{query:v,variables:{programId:"home"}}}function h(){return Object(b.a)(),Object(y.a)("blankRo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50461	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	2215	OUT	GET /vi-assets/static-assets/book-review-0d11a69e2206485e972a.js?_sw-precache=61162e268a23c7e8e9374127020f7ab5 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:00 UTC	1327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 32 35 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 4f 52 62 43 53 39 56 65 32 5a 6e 69 48 5f 6b 71 2d 6c 33 6e 4a 30 53 6b 33 4e 38 72 77 38 6e 45 50 70 61 51 72 5f 67 4b 52 41 38 5a 50 66 5f 30 59 44 5f 4a 51 37 4e 48 74 72 53 63 7a 6d 48 71 2d 78 38 51 7a 37 63 4f 58 62 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 32 32 31 36 39 39 31 38 31 37 35 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 2250X-GUploader-UploadID: ABPtcPrORbCS9Ve2ZniH_kq-l3nJ0Sk3N8rw8nEPpaQr_gKRA8ZPf_0YD_JQ7NHtrSczmHq-x8Qz7cOXbgx-goog-generation: 1701221699181756x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:00 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:00 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 5d 2c 7b 59 36 5a 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 28 6e 29 2c 65 2e 64 28 6e 2c 22 62 6f 6f 6b 52 65 76 69 65 77 51 75 65 72 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 2c 65 2e 64 28 6e 2c 22 67 65 74 49 6e 69 74 69 61 6c 51 75 65 72 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 3b 76 61 72 20 72 2c 6f 3d 65 28 22 56 6b 41 4e 22 29 2c 69 3d 65 2e 6e 28 6f 29 2c 63 3d 28 65 28 22 71 31 74 49 22 29 2c 65 28 22 65 46 63 2b 22 29 29 2c 75 3d 65 2e 6e 28 63 29 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[53],{Y6Zy:function(t,n,e){"use strict";e.r(n),e.d(n,"bookReviewQuery",(function(){return a})),e.d(n,"getInitialQuery",(function(){return d}));var r,o=e("VkAN"),i=e.n(o),c=(e("q1tI"),e("eFc+")),u=e.n(c),
2023-12-05 18:14:00 UTC	871	IN	Data Raw: 72 72 6f 72 26 26 21 6e 7c 7c 65 3f 6e 75 6c 6c 3a 6e 7d 28 29 7d 29 2c 6e 75 6c 6c 7d 7d 2c 6a 74 32 58 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 3b 76 61 72 20 72 3d 65 28 22 6c 53 4e 41 22 29 2c 6f 3d 65 2e 6e 28 72 29 2c 69 3d 65 28 22 71 31 74 49 22 29 2c 63 3d 65 28 22 74 78 74 6b 22 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 6e 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 Data Ascii: rror&&!n\|\|e?null:n}()}),null}},jt2X:function(t,n,e){"use strict";e.d(n,"a",(function(){return a}));var r=e("lSNA"),o=e.n(r),i=e("q1tI"),c=e("txtk");function u(t,n){var e=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50451	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:00 UTC	2220	OUT	GET /vi-assets/static-assets/brandLandingPage-7b61278485ff97a6aad2.js?_sw-precache=f1a5bb9a49bf98fe97d02acb229b7e39 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:00 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 30 36 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 34 4e 6e 34 6e 4f 6c 79 41 72 58 4a 5f 41 31 32 68 4e 58 66 48 4c 36 52 71 61 34 71 58 41 4b 4f 53 67 53 33 4c 32 4a 31 35 36 68 32 70 47 41 45 34 51 6f 2d 47 2d 77 4c 62 42 6f 35 2d 55 37 7a 67 59 49 45 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 37 32 33 38 30 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 706X-GUploader-UploadID: ABPtcPr4Nn4nOlyArXJ_A12hNXfHL6Rqa4qXAKOSgS3L2J156h2pGAE4Qo-G-wLbBo5-U7zgYIEx-goog-generation: 1701369734723801x-goog-metageneration: 1x-goog-stored-content-encoding: iden
2023-12-05 18:14:00 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:00 UTC	706	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 5d 2c 7b 41 63 76 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 6e 29 3b 76 61 72 20 61 2c 72 3d 74 28 22 67 63 52 2f 22 29 2c 69 3d 74 2e 6e 28 72 29 2c 75 3d 28 74 28 22 71 31 74 49 22 29 2c 74 28 22 78 5a 79 65 22 29 29 2c 64 3d 74 2e 6e 28 75 29 2c 63 3d 74 28 22 4b 35 48 32 22 29 2c 6c 3d 74 28 22 71 73 32 6b 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 69 28 29 28 63 2e 56 69 4d 65 73 73 61 67 69 6e 67 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 2c 7b 63 6c 69 65 6e 74 3a 63 2e 63 6c 69 65 6e 74 73 2e 6c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[54],{Acva:function(e,n,t){"use strict";t.r(n);var a,r=t("gcR/"),i=t.n(r),u=(t("q1tI"),t("xZye")),d=t.n(u),c=t("K5H2"),l=t("qs2k");function o(){return i()(c.ViMessagingContextProvider,{client:c.clients.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50467	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:01 UTC	2612	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 270 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
2023-12-05 18:14:01 UTC	270	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 52 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 75 72 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 5d 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 66 31 63 33 66 39 61 62 32 39 39 30 34 34 38 31 38 63 32 33 34 66 37 35 33 39 63 64 33 63 34 37 32 62 64 37 61 61 33 63 64 35 36 30 62 31 31 34 66 61 37 32 63 Data Ascii: {"operationName":"ReadingListStatusQuery","variables":{"url":["https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html"]},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"f1c3f9ab299044818c234f7539cd3c472bd7aa3cd560b114fa72c
2023-12-05 18:14:02 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 33 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 63access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:14:02 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:02 UTC	63	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 72 65 61 64 69 6e 67 4c 69 73 74 53 74 61 74 75 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 7d 7d 7d 0a Data Ascii: {"data":{"user":{"readingListStatus":[],"__typename":"User"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50469	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2675	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 6250 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 x-nyt-entitlements: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-nyt-programming-abtest: nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 x-nyt-news-tenure: x-nyt-internal-meter-override: sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
2023-12-05 18:14:02 UTC	6250	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 71 75 65 72 79 20 67 65 74 4d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 28 24 64 61 74 61 3a 20 4d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 49 6e 70 75 74 21 29 20 7b 5c 6e 20 20 20 20 75 73 65 72 20 7b 5c 6e 20 20 20 20 20 20 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 28 64 61 74 61 3a 20 24 64 61 74 61 29 7b 5c 6e 20 20 20 20 20 20 20 20 75 6e 69 74 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 63 61 6e 53 68 6f 77 5c 6e 20 20 20 20 20 20 20 20 20 20 72 65 61 73 6f 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 61 75 64 69 65 6e 63 65 5c Data Ascii: {"query":"\n query getMessageSelection($data: MessageSelectionInput!) {\n user {\n messageSelection(data: $data){\n units {\n name\n canShow\n reason\n messages {\n name\n audience\
2023-12-05 18:14:02 UTC	1350	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 32 35 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 11250access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-regio
2023-12-05 18:14:02 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6d 65 73 73 61 67 65 53 65 6c 65 63 74 69 6f 6e 22 3a 7b 22 75 6e 69 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 62 61 72 4f 6e 65 22 2c 22 63 61 6e 53 68 6f 77 22 3a 74 72 75 65 2c 22 72 65 61 73 6f 6e 22 3a 22 41 6c 6c 28 54 68 65 20 69 6e 70 75 74 2e 4e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 76 69 20 61 6e 64 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 76 69 2c 20 4e 6f 74 28 54 68 65 72 65 20 61 72 65 20 6e 65 69 74 68 65 72 20 4a 4b 49 44 44 20 49 50 2e 45 44 55 20 6e 6f 72 20 49 50 2e 43 6f 72 70 20 66 69 65 6c 64 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 45 44 55 20 61 6e 64 20 42 32 42 20 61 63 63 65 73 73 29 29 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 6e 61 6d Data Ascii: {"data":{"user":{"messageSelection":{"units":[{"name":"barOne","canShow":true,"reason":"All(The input.Name parameter is vi and is expected to be vi, Not(There are neither JKIDD IP.EDU nor IP.Corp fields representing EDU and B2B access))","messages":[{"nam
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 62 6c 65 3d 74 72 75 65 20 61 6e 64 20 47 61 74 65 77 61 79 45 78 65 6d 70 74 3d 66 61 6c 73 65 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 53 55 42 43 4f 4e 5f 43 4f 4e 56 5f 50 41 59 57 41 4c 4c 5f 4f 50 54 49 4d 49 5a 41 54 49 4f 4e 5f 54 45 53 54 5f 41 4e 4f 4e 5f 46 4f 43 55 53 5f 32 33 39 22 2c 22 61 75 64 69 65 6e 63 65 22 3a 22 43 6f 75 6e 74 72 79 55 6e 69 74 65 64 53 74 61 74 65 73 5f 36 4d 4f 5f 76 32 22 2c 22 63 61 6e 53 68 6f 77 22 3a 74 72 75 65 2c 22 72 65 61 73 6f 6e 22 3a 22 41 6c 6c 28 41 6c 6c 28 41 6c 6c 28 54 68 65 20 69 6e 70 75 74 2e 4e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 76 69 20 61 6e 64 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 76 69 2c 20 41 6c 6c 28 4e 6f 74 28 74 68 65 20 Data Ascii: ble=true and GatewayExempt=false","messages":[{"name":"SUBCON_CONV_PAYWALL_OPTIMIZATION_TEST_ANON_FOCUS_239","audience":"CountryUnitedStates_6MO_v2","canShow":true,"reason":"All(All(All(The input.Name parameter is vi and is expected to be vi, All(Not(the
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 74 28 46 41 49 4c 28 54 68 65 20 64 6f 77 6e 73 74 72 65 61 6d 2e 49 6e 70 75 74 2e 52 65 67 69 49 44 20 69 73 20 7a 65 72 6f 2e 29 29 2c 20 72 65 71 75 65 73 74 20 6c 6f 63 61 74 69 6f 6e 20 6d 61 74 63 68 65 73 20 4e 61 6d 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 43 6f 75 6e 74 72 79 4f 70 74 69 6f 6e 73 2c 20 61 62 72 61 3a 20 41 6c 6c 20 61 62 72 61 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 64 2c 20 4e 6f 74 28 41 6e 79 28 46 41 49 4c 28 54 68 65 72 65 20 55 52 4c 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 29 2c 20 46 41 49 4c 28 54 68 65 72 65 20 55 52 4c 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 29 2c 20 46 41 49 4c Data Ascii: t(FAIL(The downstream.Input.RegiID is zero.)), request location matches Name specified in CountryOptions, abra: All abra criteria matched, Not(Any(FAIL(There URL does not match the specified value), FAIL(There URL does not match the specified value), FAIL
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 6f 74 20 61 20 56 65 72 69 7a 6f 6e 20 41 64 6c 75 63 65 20 53 6f 63 72 61 74 65 73 20 75 73 65 72 2e 29 29 29 2c 20 4e 6f 74 28 46 41 49 4c 28 54 68 65 20 64 6f 77 6e 73 74 72 65 61 6d 2e 49 6e 70 75 74 2e 52 65 67 69 49 44 20 69 73 20 7a 65 72 6f 2e 29 29 2c 20 4e 6f 74 28 46 41 49 4c 28 54 68 65 20 63 61 6d 70 61 69 67 6e 49 64 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 29 29 29 20 53 65 6c 65 63 74 65 64 20 62 79 20 74 68 65 20 52 61 6e 64 6f 6d 20 73 65 6c 65 63 74 6f 72 20 66 75 6e 63 74 69 6f 6e 20 62 65 63 61 75 73 65 20 6e 6f 20 6f 74 68 65 72 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 22 2c 22 73 65 6c 65 63 Data Ascii: ot a Verizon Adluce Socrates user.))), Not(FAIL(The downstream.Input.RegiID is zero.)), Not(FAIL(The campaignId query parameter does not match the specified value))) Selected by the Random selector function because no other messages are available.","selec
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 69 29 22 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 5d 7d 5d 2c 22 69 6e 70 75 74 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 2c 22 64 65 62 75 67 22 3a 66 61 6c 73 65 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6e 61 6d 65 22 3a 22 76 69 22 2c 22 70 61 67 65 56 69 65 77 49 44 22 3a 22 7a 33 44 69 5a 4e 34 6d 4f 49 68 6f 4b 63 76 6f 6b 48 2d 65 59 36 7a 79 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2c 22 6e 6f 77 22 3a 22 32 30 32 33 2d 31 32 2d 30 35 54 31 Data Ascii: i)","messages":[]}],"input":{"country":"US","continent":"NA","debug":false,"deviceType":"desktop","name":"vi","pageViewID":"z3DiZN4mOIhoKcvokH-eY6zy","url":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html","now":"2023-12-05T1
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 41 4e 44 43 4f 4e 5f 43 4f 4e 56 5f 45 58 49 53 54 49 4e 47 5f 53 55 42 53 5f 42 41 52 31 5f 45 58 50 45 52 49 4d 45 4e 54 5f 32 32 31 32 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 76 37 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 57 44 5f 43 4f 4f 4b 49 4e 47 5f 41 50 50 5f 4c 50 5f 54 45 53 54 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 30 5f 43 6f 6e 74 72 6f 6c 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4f 4e 5f 73 74 6f 72 79 62 6c 6f 63 6b 5f 70 72 6f 64 75 63 74 5f 30 35 32 33 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 Data Ascii: ANDCON_CONV_EXISTING_SUBS_BAR1_EXPERIMENT_2212","variant":"v7","integration":"onsite-messaging-prd"},{"test":"MWD_COOKING_APP_LP_TEST","variant":"0_Control","integration":"onsite-messaging-prd"},{"test":"ON_storyblock_product_0523","variant":"","integrati
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 4f 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 32 5f 4e 65 77 44 65 73 69 67 6e 5f 41 41 5f 50 52 4f 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 43 4b 5f 50 4c 4f 5f 50 52 4f 5f 48 65 61 64 65 72 5f 54 65 73 74 5f 31 32 32 30 32 33 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d 6d 65 73 73 61 67 69 6e 67 2d 70 72 64 22 7d 2c 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 53 75 62 43 6f 6e 5f 50 61 79 77 61 6c 6c 5f 41 6e 6f 6e 5f 54 65 73 74 5f 30 37 32 33 22 2c 22 76 61 72 69 61 6e 74 22 3a 22 32 5f 76 61 72 69 61 6e 74 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 22 3a 22 6f 6e 73 69 74 65 2d Data Ascii: O","variant":"2_NewDesign_AA_PRO","integration":"onsite-messaging-prd"},{"test":"MKT_CK_PLO_PRO_Header_Test_122023","variant":"","integration":"onsite-messaging-prd"},{"test":"MKT_SubCon_Paywall_Anon_Test_0723","variant":"2_variant","integration":"onsite-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50468	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2612	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 387 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
2023-12-05 18:14:02 UTC	387	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 49 6e 6c 69 6e 65 45 64 69 74 6f 72 73 50 69 63 6b 73 50 65 72 73 6f 6e 61 6c 69 7a 65 64 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 6c 69 73 74 55 72 69 22 3a 22 6e 79 74 3a 2f 2f 70 65 72 2f 70 65 72 73 6f 6e 61 6c 69 7a 65 64 2d 6c 69 73 74 2f 68 6f 6d 65 2d 66 65 61 74 75 72 65 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2c 22 6f 72 69 67 69 6e 61 6c 52 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 44 45 53 4b Data Ascii: {"operationName":"InlineEditorsPicksPersonalizedQuery","variables":{"listUri":"nyt://per/personalized-list/home-featured","referrer":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html","originalReferrer":null,"deviceType":"DESK
2023-12-05 18:14:02 UTC	1364	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 37 36 36 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 43766access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-regio
2023-12-05 18:14:02 UTC	227	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 46 61 73 74 6c 79 2d 55 6e 69 71 75 65 2d 49 64 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Fastly-Unique-Id, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 22 3a 7b 22 65 64 69 74 6f 72 73 50 69 63 6b 73 4c 69 73 74 22 3a 7b 22 70 61 67 65 49 6e 66 6f 22 3a 7b 22 68 61 73 4e 65 78 74 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 68 61 73 50 72 65 76 69 6f 75 73 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 73 74 61 72 74 43 75 72 73 6f 72 22 3a 22 59 58 4a 79 59 58 6c 6a 62 32 35 75 5a 57 4e 30 61 57 39 75 4f 6a 41 3d 22 2c 22 65 6e 64 43 75 72 73 6f 72 22 3a 22 59 58 4a 79 59 58 6c 6a 62 32 35 75 5a 57 4e 30 61 57 39 75 4f 6a 6b 3d 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 61 67 65 49 6e 66 6f 22 7d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 65 72 73 6f 6e 61 6c 69 7a 65 64 49 74 65 6d 73 43 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 65 64 67 65 73 22 3a 5b 7b 22 74 72 61 Data Ascii: {"data":{"list":{"editorsPicksList":{"pageInfo":{"hasNextPage":false,"hasPreviousPage":false,"startCursor":"YXJyYXljb25uZWN0aW9uOjA=","endCursor":"YXJyYXljb25uZWN0aW9uOjk=","__typename":"PageInfo"},"__typename":"PersonalizedItemsConnection","edges":[{"tra
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 30 31 2f 6d 75 6c 74 69 6d 65 64 69 61 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2d 6d 61 73 74 65 72 31 30 35 30 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 31 30 35 30 2c 22 68 65 69 67 68 74 22 3a 37 30 30 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 43 72 6f 70 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 4d 41 4c 4c 5f 53 51 55 41 52 45 22 2c 22 72 65 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 74 68 75 6d 62 4c 61 72 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 Data Ascii: com/images/2023/12/01/multimedia/01WELL-LATE-FLU-SHOT1-pkhb/01WELL-LATE-FLU-SHOT1-pkhb-master1050.jpg","width":1050,"height":700,"__typename":"ImageRendition"}],"__typename":"ImageCrop"},{"name":"SMALL_SQUARE","renditions":[{"name":"thumbLarge","url":"htt
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 70 6b 68 62 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2d 74 68 72 65 65 42 79 54 77 6f 4c 61 72 67 65 41 74 32 58 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 34 30 30 30 2c 22 68 65 69 67 68 74 22 3a 32 36 36 37 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 74 68 72 65 65 42 79 54 77 6f 4d 65 64 69 75 6d 41 74 32 58 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 30 31 2f 6d 75 6c 74 69 6d 65 64 69 61 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 2d 70 6b 68 62 2f 30 31 57 45 4c 4c 2d 4c 41 54 45 2d 46 4c 55 2d 53 48 4f 54 31 Data Ascii: pkhb/01WELL-LATE-FLU-SHOT1-pkhb-threeByTwoLargeAt2X.jpg","width":4000,"height":2667,"__typename":"ImageRendition"},{"name":"threeByTwoMediumAt2X","url":"https://static01.nyt.com/images/2023/12/01/multimedia/01WELL-LATE-FLU-SHOT1-pkhb/01WELL-LATE-FLU-SHOT1
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 62 79 2f 6b 6e 76 75 6c 2d 73 68 65 69 6b 68 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 65 72 73 6f 6e 22 7d 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 42 79 6c 69 6e 65 22 7d 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 7b 22 63 6f 64 65 22 3a 22 65 6e 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 61 6e 67 75 61 67 65 22 7d 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 31 30 30 30 30 30 30 30 39 32 30 32 34 30 30 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 61 72 74 69 63 6c 65 2f 66 32 39 37 66 61 34 36 2d 33 66 61 32 2d 35 36 66 34 2d 39 33 33 37 2d 33 61 64 64 62 30 37 66 38 64 30 31 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 Data Ascii: www.nytimes.com/by/knvul-sheikh","__typename":"Person"}],"__typename":"Byline"}],"language":{"code":"en","__typename":"Language"},"sourceId":"100000009202400","uri":"nyt://article/f297fa46-3fa2-56f4-9337-3addb07f8d01","url":"https://www.nytimes.com/2023/1
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 65 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 61 72 74 69 63 6c 65 4c 61 72 67 65 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 36 30 30 2c 22 68 65 69 67 68 74 22 3a 33 33 36 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 6d 61 73 74 65 72 31 30 35 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 31 30 2f 6d 61 67 61 7a 69 6e 65 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 6d 61 73 74 65 72 31 30 35 30 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 31 30 35 30 2c 22 68 65 69 67 68 74 22 3a 35 Data Ascii: e/10mag-ethicist/10mag-ethicist-articleLarge.jpg","width":600,"height":336,"__typename":"ImageRendition"},{"name":"master1050","url":"https://static01.nyt.com/images/2023/12/10/magazine/10mag-ethicist/10mag-ethicist-master1050.jpg","width":1050,"height":5
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 74 68 72 65 65 42 79 54 77 6f 4c 61 72 67 65 41 74 32 58 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 32 31 30 32 2c 22 68 65 69 67 68 74 22 3a 31 34 30 30 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 49 6d 61 67 65 52 65 6e 64 69 74 69 6f 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 74 68 72 65 65 42 79 54 77 6f 4d 65 64 69 75 6d 41 74 32 58 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 30 31 2e 6e 79 74 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 32 30 32 33 2f 31 32 2f 31 30 2f 6d 61 67 61 7a 69 6e 65 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2f 31 30 6d 61 67 2d 65 74 68 69 63 69 73 74 2d 74 68 72 65 65 42 79 54 77 6f 4d 65 64 69 75 6d 41 74 32 58 2e Data Ascii: /10mag-ethicist/10mag-ethicist-threeByTwoLargeAt2X.jpg","width":2102,"height":1400,"__typename":"ImageRendition"},{"name":"threeByTwoMediumAt2X","url":"https://static01.nyt.com/images/2023/12/10/magazine/10mag-ethicist/10mag-ethicist-threeByTwoMediumAt2X.
2023-12-05 18:14:02 UTC	1379	IN	Data Raw: 22 63 6f 64 65 22 3a 22 65 6e 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4c 61 6e 67 75 61 67 65 22 7d 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 31 30 30 30 30 30 30 30 39 32 30 35 37 36 38 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 61 72 74 69 63 6c 65 2f 32 37 39 39 34 30 38 30 2d 35 39 64 39 2d 35 31 66 34 2d 61 64 65 37 2d 31 35 34 30 63 33 34 31 34 38 63 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 31 2f 6d 61 67 61 7a 69 6e 65 2f 72 65 70 61 74 72 69 61 74 69 6f 6e 2d 61 72 74 2d 65 74 68 69 63 73 2e 68 74 6d 6c 22 2c 22 73 68 6f 72 74 55 72 6c 22 3a 22 22 2c 22 6c 61 73 74 4d 61 6a 6f 72 4d 6f 64 69 66 69 63 61 74 69 6f 6e 22 3a 22 32 30 32 33 2d 31 32 2d 30 31 Data Ascii: "code":"en","__typename":"Language"},"sourceId":"100000009205768","uri":"nyt://article/27994080-59d9-51f4-ade7-1540c34148c4","url":"https://www.nytimes.com/2023/12/01/magazine/repatriation-art-ethics.html","shortUrl":"","lastMajorModification":"2023-12-01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50471	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	1372	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.52&x=0&m=0&y=1210&o=1263&w=907&j=45&R=0&W=0&I=1&E=6&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=4&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:02 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:02 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:14:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50472	3.162.114.30	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	1002	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:02 UTC	611	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 32 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 33 41 58 4b 46 56 52 57 52 47 46 45 38 42 58 48 36 39 4b 48 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:02 GMTx-amz-rid: 3AXKFVRWRGFE8BXH69KHAccess-Control-Allow-Origin: https://www.nytimes.comAccess-Control
2023-12-05 18:14:02 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50470	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2612	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 261 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
2023-12-05 18:14:02 UTC	261	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 74 72 75 73 74 41 73 73 65 74 73 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 37 31 35 64 34 30 66 31 32 31 64 39 65 62 34 64 63 34 33 32 35 39 61 31 32 61 65 31 62 32 37 30 39 39 30 35 33 38 31 62 63 33 37 66 36 37 34 39 35 32 66 62 34 61 35 37 32 32 37 66 33 34 Data Ascii: {"operationName":"trustAssetsQuery","variables":{"id":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html"},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"715d40f121d9eb4dc43259a12ae1b2709905381bc37f674952fb4a57227f34
2023-12-05 18:14:02 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 33 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 63access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:14:02 UTC	198	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, OriginTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:02 UTC	63	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 61 72 74 69 63 6c 65 22 3a 7b 22 74 72 75 73 74 41 73 73 65 74 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 41 72 74 69 63 6c 65 22 7d 7d 7d 0a Data Ascii: {"data":{"article":{"trustAssets":[],"__typename":"Article"}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50473	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2318	OUT	GET /svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&caller_id=nyt-vi&jkcb=1701800040554&referrer=&sourceApp=nyt-vi HTTP/1.1 Host: a.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=5; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
2023-12-05 18:14:02 UTC	1084	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-byaccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comcontent-type: applica
2023-12-05 18:14:02 UTC	1055	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 34 32 32 37 37 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800042277,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50475	52.3.42.214	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2052	OUT	GET /v1/purr-cache HTTP/1.1 Host: purr.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt-jkidd=uid=0&lastRequest=1701800033059&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"
2023-12-05 18:14:02 UTC	624	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 75 72 72 2d 63 61 63 68 65 3d 3c 4b 30 3c 72 3c 43 5f 3c 47 5f 3c 53 30 3c 61 30 3c 75 61 3c 54 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 34 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 35 34 3a 30 32 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-origin: https://www.nytimes.comset-cookie: purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; Path=/; Domain=nytimes.com; Expires=Sat, 04 Jan 2025 05:54:02 GMT; HttpOnly; Secure; SameSite=La

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50479	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2498	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 12744 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:02 UTC	12744	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 73 77 53 79 4c 4f 69 6f 45 74 4e 33 6a 73 32 6e 46 4b 71 48 42 56 52 5f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 7a 33 44 69 5a 4e 34 6d 4f 49 68 6f 4b 63 76 6f 6b 48 2d 65 59 36 7a 79 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 41 69 62 65 68 49 66 6b 63 51 4e 4c 37 35 7a 50 4e 2d 6c 51 6e 52 76 39 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 61 62 5f 61 6c 6c 6f 63 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 33 39 35 32 30 2c 22 64 61 74 61 22 3a 7b 22 61 6c 6c 6f 63 73 22 3a 5b 7b 22 74 65 73 74 22 3a 22 53 55 Data Ascii: [{"context_id":"swSyLOioEtN3js2nFKqHBVR_","pageview_id":"z3DiZN4mOIhoKcvokH-eY6zy","event_id":"AibehIfkcQNL75zPN-lQnRv9","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"ab_alloc","how":"beacon","client_ts":1701800039520,"data":{"allocs":[{"test":"SU
2023-12-05 18:14:02 UTC	1501	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:14:02 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50483	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2571	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 2777 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:02 UTC	2777	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 20 20 71 75 65 72 79 20 67 65 74 4f 66 66 65 72 28 24 62 61 73 69 63 49 64 3a 20 53 74 72 69 6e 67 21 2c 20 24 63 6f 75 6e 74 72 79 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 62 61 73 69 63 3a 6f 66 66 65 72 28 69 64 3a 20 24 62 61 73 69 63 49 64 2c 20 63 6f 75 6e 74 72 79 3a 20 24 63 6f 75 6e 74 72 79 29 20 7b 5c 6e 20 20 20 20 20 20 6f 66 66 65 72 49 44 5c 6e 20 20 20 20 20 20 62 75 6e 64 6c 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 5c 6e 20 20 20 20 20 20 62 69 6c 6c 69 6e 67 46 72 65 71 75 65 6e 63 79 5c 6e 20 20 20 20 20 20 63 61 6e 63 65 6c 6c 61 Data Ascii: {"query":"\n query getOffer($basicId: String!, $country: String!) {\n \n basic:offer(id: $basicId, country: $country) {\n offerID\n bundle\n subscriptionName\n subscriptionValueMessage\n billingFrequency\n cancella
2023-12-05 18:14:03 UTC	1366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 34 34 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3944access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:14:03 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 62 61 73 69 63 22 3a 7b 22 6f 66 66 65 72 49 44 22 3a 22 61 65 36 36 36 62 64 35 2d 61 61 30 36 2d 31 31 65 63 2d 38 34 63 39 2d 32 32 37 35 34 33 61 63 65 37 36 35 22 2c 22 62 75 6e 64 6c 65 22 3a 22 41 44 41 5f 6e 6f 5f 73 68 61 72 65 73 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 22 3a 22 41 6c 6c 20 41 63 63 65 73 73 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 22 3a 22 55 6e 6c 69 6d 69 74 65 64 20 64 69 67 69 74 61 6c 20 61 63 63 65 73 73 20 74 6f 20 65 76 65 72 79 74 68 69 6e 67 20 77 65 20 68 61 76 65 20 74 6f 20 6f 66 66 65 72 20 2d 20 4e 65 77 73 2c 20 70 6c 75 73 20 47 61 6d 65 73 2c 20 43 6f 6f 6b 69 6e 67 2c 20 57 69 72 65 63 75 74 74 65 72 20 61 6e 64 20 54 68 65 Data Ascii: {"data":{"basic":{"offerID":"ae666bd5-aa06-11ec-84c9-227543ace765","bundle":"ADA_no_shares","subscriptionName":"All Access","subscriptionValueMessage":"Unlimited digital access to everything we have to offer - News, plus Games, Cooking, Wirecutter and The
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 20 77 65 65 6b 73 20 66 6f 72 20 36 20 6d 6f 6e 74 68 73 2c 20 61 6e 64 20 61 66 74 65 72 20 36 20 6d 6f 6e 74 68 73 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 72 61 74 65 20 6f 66 20 24 32 35 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 2e 22 2c 22 59 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 75 6e 74 69 6c 20 79 6f 75 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 31 31 35 30 31 34 38 39 33 39 36 38 2d 54 65 72 6d 73 2d 6f 66 2d 73 61 6c 65 23 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 63 61 6e 63 65 6c 3c 2f 61 3e 2e 22 2c 22 43 Data Ascii: weeks for 6 months, and after 6 months the standard rate of $25.00 every 4 weeks.","Your subscription will continue until you <a href=\"https://help.nytimes.com/hc/en-us/articles/115014893968-Terms-of-sale#cancellation\" target=\"_blank\">cancel</a>.","C
2023-12-05 18:14:03 UTC	1186	IN	Data Raw: 72 69 63 65 4d 6f 6e 74 68 6c 79 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 57 65 65 6b 6c 79 53 68 6f 72 74 22 3a 22 24 31 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 57 Data Ascii: riceMonthly":"$4.00","promoPriceMonthlyNoCountryAbbreviation":"$4.00","promoPriceAnnual":"$52.00","promoPriceAnnualNoCountryAbbreviation":"$52.00","promoPriceShort":"$4","promoPriceShortNoCountryAbbreviation":"$4","promoPriceWeeklyShort":"$1","promoPriceW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50484	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	2571	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 2817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi Content-Type: application/json nyt-app-version: 0.0.5 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:02 UTC	2817	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 22 5c 6e 20 20 20 20 71 75 65 72 79 20 67 65 74 4f 66 66 65 72 28 24 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 49 64 3a 20 53 74 72 69 6e 67 21 2c 20 24 63 6f 75 6e 74 72 79 3a 20 53 74 72 69 6e 67 21 29 20 7b 5c 6e 20 20 20 20 20 20 5c 6e 20 20 20 20 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 3a 6f 66 66 65 72 28 69 64 3a 20 24 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 49 64 2c 20 63 6f 75 6e 74 72 79 3a 20 24 63 6f 75 6e 74 72 79 29 20 7b 5c 6e 20 20 20 20 20 20 6f 66 66 65 72 49 44 5c 6e 20 20 20 20 20 20 62 75 6e 64 6c 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 5c 6e 20 20 20 20 20 20 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 5c 6e 20 20 20 20 20 20 62 69 Data Ascii: {"query":"\n query getOffer($newsAcquisitionId: String!, $country: String!) {\n \n newsAcquisition:offer(id: $newsAcquisitionId, country: $country) {\n offerID\n bundle\n subscriptionName\n subscriptionValueMessage\n bi
2023-12-05 18:14:03 UTC	1366	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 35 34 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3954access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region
2023-12-05 18:14:03 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 6e 65 77 73 41 63 71 75 69 73 69 74 69 6f 6e 22 3a 7b 22 6f 66 66 65 72 49 44 22 3a 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 22 2c 22 62 75 6e 64 6c 65 22 3a 22 58 50 41 53 53 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 4e 61 6d 65 22 3a 22 4e 65 77 73 22 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 56 61 6c 75 65 4d 65 73 73 61 67 65 22 3a 22 41 63 63 65 73 73 20 74 6f 20 72 65 70 6f 72 74 69 6e 67 2c 20 69 6e 76 65 73 74 69 67 61 74 69 6f 6e 20 61 6e 64 20 61 6e 61 6c 79 73 69 73 2c 20 6f 6e 6c 69 6e 65 20 61 6e 64 20 69 6e 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 61 70 70 2e 22 2c 22 62 69 6c 6c 69 6e 67 46 72 65 71 75 65 6e 63 79 22 3a Data Ascii: {"data":{"newsAcquisition":{"offerID":"0fd8cf46-d029-11ea-a072-340cee6a52b6","bundle":"XPASS","subscriptionName":"News","subscriptionValueMessage":"Access to reporting, investigation and analysis, online and in The New York Times app.","billingFrequency":
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 66 20 24 34 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 20 66 6f 72 20 31 20 79 65 61 72 2c 20 61 6e 64 20 61 66 74 65 72 20 31 20 79 65 61 72 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 72 61 74 65 20 6f 66 20 24 31 37 2e 30 30 20 65 76 65 72 79 20 34 20 77 65 65 6b 73 2e 22 2c 22 59 6f 75 72 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 75 6e 74 69 6c 20 79 6f 75 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 68 63 2f 65 6e 2d 75 73 2f 61 72 74 69 63 6c 65 73 2f 31 31 35 30 31 34 38 39 33 39 36 38 2d 54 65 72 6d 73 2d 6f 66 2d 73 61 6c 65 23 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 63 61 6e 63 Data Ascii: f $4.00 every 4 weeks for 1 year, and after 1 year the standard rate of $17.00 every 4 weeks.","Your subscription will continue until you <a href=\"https://help.nytimes.com/hc/en-us/articles/115014893968-Terms-of-sale#cancellation\" target=\"_blank\">canc
2023-12-05 18:14:03 UTC	1196	IN	Data Raw: 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 4d 6f 6e 74 68 6c 79 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 41 6e 6e 75 61 6c 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 35 32 2e 30 30 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 53 68 6f 72 74 4e 6f 43 6f 75 6e 74 72 79 41 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 24 34 22 2c 22 70 72 6f 6d 6f 50 72 69 63 65 57 65 65 6b 6c 79 53 68 6f 72 74 22 3a 22 24 31 22 2c 22 70 Data Ascii: 0","promoPriceMonthly":"$4.00","promoPriceMonthlyNoCountryAbbreviation":"$4.00","promoPriceAnnual":"$52.00","promoPriceAnnualNoCountryAbbreviation":"$52.00","promoPriceShort":"$4","promoPriceShortNoCountryAbbreviation":"$4","promoPriceWeeklyShort":"$1","p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50481	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:02 UTC	591	OUT	GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.nytimes.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:03 UTC	775	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:03 UTC	477	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 68 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.define
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 65 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 Data Ascii: bject"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6a 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6a 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b Data Ascii: te?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if("function"==typeof Object.setPrototypeOf)ja=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}ja=ma?function(a,b){
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 2c 73 61 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 75 61 3d 30 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ar c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b},ra=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},sa="closure_uid_"+(1E9*Math.random()>>>0),ua=0,va=function(a,b,c){return a.call.apply(a.bind,arguments)},wa=function(
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 67 5b 6b 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6b 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 64 2c 67 29 7d 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 41 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 Data Ascii: ents.length;k++)g[k-2]=arguments[k];return b.prototype[e].apply(d,g)}},za=function(a){return a};function A(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,A);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 3d 2f 28 5c 64 2a 29 28 5c 44 2a 29 28 2e 2a 29 2f 2e 65 78 65 63 28 67 29 7c 7c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 3b 69 66 28 30 3d 3d 66 5b 30 5d 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 67 5b 30 5d 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 63 3d 4f 61 28 30 3d 3d 66 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 4f 61 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 4f 61 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: =/(\d)(\D)(.*)/.exec(g)\|\|["","","",""];if(0==f[0].length&&0==g[0].length)break;c=Oa(0==f[1].length?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Oa(0==f[2].length,0==g[2].length)\|\|Oa(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c},Oa=function(
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 67 3d 30 3b 67 3c 63 3b 67 2b 2b 29 69 66 28 67 20 69 6e 20 66 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6b 2c 67 2c 61 29 26 26 28 64 5b 65 2b 2b 5d 3d 6b 29 7d 72 65 74 75 72 6e 20 64 7d 2c 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 0a 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d Data Ascii: ,b){for(var c=a.length,d=[],e=0,f="string"===typeof a?a.split(""):a,g=0;g<c;g++)if(g in f){var k=f[g];b.call(void 0,k,g,a)&&(d[e++]=k)}return d},gb=function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 29 2c 75 62 3d 43 28 22 45 64 67 65 22 29 2c 76 62 3d 43 28 22 47 65 63 6b 6f 22 29 26 26 21 28 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 29 26 26 21 28 43 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 43 28 22 4d 53 49 45 22 29 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 77 62 3d 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 78 62 3d 51 61 26 26 56 61 26 26 56 61 2e 70 6c 61 74 66 6f 72 6d 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 56 61 2e 70 6c 61 74 66 6f 72 6d 3a 43 28 22 41 6e 64 72 6f 69 64 22 29 2c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ),ub=C("Edge"),vb=C("Gecko")&&!(-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"))&&!(C("Trident")\|\|C("MSIE"))&&!C("Edge"),wb=-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"),xb=Qa&&Va&&Va.platform?"Android"===Va.platform:C("Android"),yb=function()
2023-12-05 18:14:03 UTC	1252	IN	Data Raw: 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 29 3f 53 79 6d 62 6f 6c 28 29 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 58 62 28 61 29 7b 76 61 72 20 62 3b 57 62 3f 62 3d 61 5b 57 62 5d 3a 62 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 30 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 59 62 28 61 2c 62 29 7b 57 62 3f 61 5b 57 62 5d 3d 62 3a 76 6f 69 64 20 30 21 3d 3d 61 2e 6a 3f 61 2e 6a 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 6a 3a 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 5a 62 3d 7b Data Ascii: ymbol&&"symbol"===typeof Symbol()?Symbol():void 0;function Xb(a){var b;Wb?b=a[Wb]:b=a.j;return null==b?0:b}function Yb(a,b){Wb?a[Wb]=b:void 0!==a.j?a.j=b:Object.defineProperties(a,{j:{value:b,configurable:!0,writable:!0,enumerable:!1}});return a};var Zb={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50486	3.162.114.30	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1010	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=2&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-1_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:03 UTC	611	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 58 37 46 4e 37 47 45 59 59 5a 33 45 58 38 34 4a 34 51 59 45 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:03 GMTx-amz-rid: X7FN7GEYYZ3EX84J4QYEAccess-Control-Allow-Origin: https://www.nytimes.comAccess-Control
2023-12-05 18:14:03 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 32 22 7d 29 Data Ascii: apstag.punt({"cb":"2"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50487	3.162.114.30	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1010	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=3&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-2%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-2_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:03 UTC	612	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 46 36 51 35 56 36 37 31 58 41 58 32 50 42 53 30 45 4d 41 50 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 534Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:03 GMTx-amz-rid: F6Q5V671XAX2PBS0EMAPAccess-Control-Allow-Origin: https://www.nytimes.comAccess-Contro
2023-12-05 18:14:03 UTC	534	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 66 69 66 22 3a 22 31 22 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 45 63 42 54 65 6a 63 71 52 70 44 52 73 4e 61 78 78 6b 4d 41 54 49 41 41 41 47 4d 4f 79 5f 6a 58 67 45 41 41 41 76 57 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 43 68 4d 79 69 38 22 2c 22 73 69 7a 65 22 3a 22 37 32 38 78 39 30 22 2c 22 63 72 69 64 22 3a 22 34 30 33 32 30 37 38 33 38 22 2c 22 6d 65 74 61 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JEcBTejcqRpDRsNaxxkMATIAAAGMOy_jXgEAAAvWAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICChMyi8","size":"728x90","crid":"403207838","meta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50485	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	2240	OUT	GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=true&us=anon&context-type=&areas=barOne&areas=truncator&areas=dock HTTP/1.1 Host: mwcm.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:03 UTC	1179	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 37 38 35 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 16785access-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: h
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 7b 22 62 61 72 4f 6e 65 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 61 70 70 65 6e 64 45 78 69 74 55 72 69 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 61 72 4f 6e 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 62 61 72 4f 6e 65 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 31 34 66 65 65 62 31 64 2d 30 39 34 37 2d 34 38 33 33 2d 61 36 65 35 2d 61 34 65 38 38 64 30 66 62 66 33 33 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 Data Ascii: {"barOne":{"active":true,"appendExitUri":false,"html":"\n\n\n\n \u003cdiv class=\"barOne\" data-config-component-id=\"mkt-wcm:components/metered_assets/barOne/template/main\" data-component-uuid=\"14feeb1d-0947-4833-a6e5-a4e88d0fbf33\"\u003e\n\n\n\u003csc
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 72 4f 6e 65 5c 22 20 73 74 79 6c 65 3d 5c 22 20 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 3f 63 61 6d 70 61 69 67 6e 49 64 3d 39 51 51 39 4b 5c 22 5c 75 30 30 33 65 5c 6e 20 53 55 42 53 43 52 49 42 45 20 46 4f 52 20 24 32 2f 57 45 45 4b 5c 6e 20 5c 75 30 30 33 63 2f 61 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 2f 64 69 76 5c 75 30 30 33 65 5c 6e 5c 6e 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 72 65 61 74 69 76 65 2d 6f 76 65 72 72 69 64 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 70 2f 63 72 65 61 74 69 76 65 4f 76 65 72 72 69 64 65 2f 74 Data Ascii: rOne\" style=\" \" href=\"https://www.nytimes.com/subscription?campaignId=9QQ9K\"\u003e\n SUBSCRIBE FOR $2/WEEK\n \u003c/a\u003e\n\u003c/div\u003e\n\n\u003cdiv class=\"creative-override\" data-config-component-id=\"mkt-wcm:components/lp/creativeOverride/t
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 74 63 68 2e 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 2f 50 6c 61 74 66 6f 72 6d 73 2f 57 65 62 2d 2d 71 75 65 72 79 2d 70 61 72 61 6d 65 74 65 72 2d 5c 22 7d 2c 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 41 20 67 72 6f 75 70 20 6f 66 20 72 65 67 69 73 20 6f 72 20 61 6e 6f 6e 79 6d 6f 75 73 20 75 73 65 72 73 2e 20 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 4a 4b 49 44 44 2f 55 73 65 72 2d 53 74 61 74 75 73 2f 52 65 67 Data Ascii: e \\u0027plat\\u0027 query parameter. The \\u0027plat\\u0027 query parameter is required to match.\",\"path\":\"/QueryParameter/Platforms/Web--query-parameter-\"},{\"description\":\"A group of regis or anonymous users. \",\"path\":\"/JKIDD/User-Status/Reg
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 69 6e 67 54 69 65 72 73 5c 22 3a 7b 5c 22 31 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 33 36 34 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 31 33 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 35 32 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 35 32 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 31 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 31 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 Data Ascii: ingTiers\":{\"1\":{\"durationDays\":364,\"recurrence\":13,\"durationWeeks\":52,\"totalPrice\":52,\"weeklyPrice\":1,\"tierNumber\":1,\"rawPrice\":\"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\"
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 34 2e 32 35 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 32 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 31 37 2e 30 30 5c 22 7d 7d 2c 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 3a 5c 22 32 30 30 30 30 32 31 36 38 38 30 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 5c 22 2c 5c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 5c 22 3a 5c 22 Data Ascii: \"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\":4.25,\"tierNumber\":2,\"rawPrice\":\"17.00\"}},\"promoCode\":\"20000216880\",\"id\":\"0fd8cf46-d029-11ea-a072-340cee6a52b6\",\"currencyCode\":\"
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 6e 67 2d 73 65 72 76 69 63 65 73 2d 63 61 63 68 69 6e 67 5c 22 3a 66 61 6c 73 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 34 30 35 2d 2d 41 43 54 49 56 41 54 45 2d 41 42 52 41 2d 56 31 32 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 32 32 34 2d 2d 68 64 2d 61 75 78 50 72 6f 64 75 63 74 4d 61 70 70 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 31 34 39 2d 2d 43 49 52 43 55 49 54 2d 42 52 45 41 4b 45 52 2d 53 41 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 4f 42 43 4f 2d 33 30 33 38 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2d 72 6f 6c 6c 6f 75 74 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 34 33 39 2d 2d 43 49 47 2d 49 50 2d 53 45 47 4d 45 4e 54 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 Data Ascii: ng-services-caching\":false,\"FF-CMOTS-3405--ACTIVATE-ABRA-V12\":true,\"FF-CMOTS-224--hd-auxProductMapping\":true,\"FF-CMOTS-3149--CIRCUIT-BREAKER-SAS\":true,\"FF-MOBCO-3038-payment-methods-rollout\":true,\"FF-MWCM-4439--CIG-IP-SEGMENTS\":true,\"FF-MWCM-4
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 22 3a 22 4d 41 47 5f 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 73 61 6c 65 5f 62 61 72 31 63 6f 70 79 74 65 73 74 5f 73 75 62 63 6f 6e 5f 42 41 55 22 2c 22 70 61 67 65 50 61 74 68 22 3a 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 22 2c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 22 3a 74 72 75 65 2c 22 73 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 Data Ascii: "audienceName":"MAG_web_regi_anon_sale_bar1copytest_subcon_BAU","pagePath":"/marketing/mpc/muassets/variants/variant-2","isPageVariant":true,"segments":[{"description":"Based on the value of the \u0027plat\u0027 query parameter. The \u0027plat\u0027 query
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 64 6f 63 6b 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 64 6f 63 6b 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 64 37 65 32 38 32 33 65 2d 36 65 66 62 2d 34 36 33 64 2d 61 34 37 37 2d 62 63 64 64 35 33 33 30 64 31 61 32 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 5c 75 30 30 33 65 5c 6e 20 74 72 79 7b 76 61 72 20 6f 62 73 65 72 76 65 72 3d Data Ascii: l":"\n\n\n\n \u003cdiv class=\"dock\" data-config-component-id=\"mkt-wcm:components/metered_assets/dock/template/main\" data-component-uuid=\"d7e2823e-6efb-463d-a477-bcdd5330d1a2\"\u003e\n\n\n\u003cscript type=\"text/javascript\"\u003e\n try{var observer=
2023-12-05 18:14:03 UTC	753	IN	Data Raw: 74 73 2f 76 61 72 69 61 6e 74 2d 32 35 5c 22 2c 5c 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 5c 22 3a 5c 22 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 61 6c 6c 5c 22 2c 5c 22 70 61 67 65 50 61 74 68 5c 22 3a 5c 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 35 5c 22 2c 5c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 5c 22 3a 74 72 75 65 2c 5c 22 73 65 67 6d 65 6e 74 73 5c 22 3a 5b 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 Data Ascii: ts/variant-25\",\"audienceName\":\"web_regi_anon_all\",\"pagePath\":\"/marketing/mpc/muassets/variants/variant-25\",\"isPageVariant\":true,\"segments\":[{\"description\":\"Based on the value of the \\u0027plat\\u0027 query parameter. The \\u0027plat\\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50488	3.162.114.30	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1010	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=4&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-3%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-3_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:03 UTC	611	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 53 43 32 54 52 52 51 48 53 58 38 45 41 57 42 47 50 36 36 41 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:03 GMTx-amz-rid: SC2TRRQHSX8EAWBGP66AAccess-Control-Allow-Origin: https://www.nytimes.comAccess-Control
2023-12-05 18:14:03 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 34 22 7d 29 Data Ascii: apstag.punt({"cb":"4"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50489	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	616	OUT	POST /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive Content-Length: 4082 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:03 UTC	4082	OUT	Data Raw: 6a 73 44 61 74 61 3d 25 37 42 25 32 32 6f 70 74 73 25 32 32 25 33 41 25 32 32 65 6e 64 70 6f 69 6e 74 25 32 32 25 32 43 25 32 32 74 74 73 74 25 32 32 25 33 41 31 31 36 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 34 25 32 43 25 32 32 69 66 6f 76 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 68 63 25 32 32 25 33 41 34 25 32 43 25 32 32 62 72 5f 6f 68 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 62 72 5f 6f 77 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 75 61 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 Data Ascii: jsData=%7B%22opts%22%3A%22endpoint%22%2C%22ttst%22%3A116.19999999998254%2C%22ifov%22%3Afalse%2C%22hc%22%3A4%2C%22br_oh%22%3A984%2C%22br_ow%22%3A1280%2C%22ua%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%
2023-12-05 18:14:03 UTC	544	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 44 61 74 61 44 6f 6d 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json;charset=utf-8Content-Length: 235Connection: closeDate: Tue, 05 Dec 2023 18:14:03 GMTServer: DataDomeAccess-Control-Allow-Origin: *Pragma: no-cacheCache-Control: no-cache, no-store, must-revalid
2023-12-05 18:14:03 UTC	235	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 63 6f 6f 6b 69 65 22 3a 22 64 61 74 61 64 6f 6d 65 3d 73 52 71 72 65 39 43 56 4f 76 59 46 35 37 7a 30 69 62 76 50 69 78 4d 70 59 67 44 6a 4e 54 56 77 4e 6c 6b 76 70 6d 34 58 7e 59 49 75 74 35 46 65 58 44 5f 42 75 4a 36 53 4c 75 4a 39 4a 4c 67 42 32 66 77 59 44 59 32 4b 68 66 6d 52 35 37 41 46 64 30 6e 7a 61 43 57 31 67 54 77 66 7a 32 45 4f 37 35 59 7e 4f 68 61 39 49 51 41 33 63 49 33 78 74 64 39 4b 31 74 37 77 6a 43 44 57 6e 59 6d 6b 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 44 6f 6d 61 69 6e 3d 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 7d Data Ascii: {"status":200,"cookie":"datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; Max-Age=31536000; Domain=www.nytimes.com; Path=/; Secure; SameSite=Lax"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50492	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1381	OUT	GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:03 UTC	2214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50490	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1417	OUT	GET /activityi;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:03 UTC	1298	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50491	142.251.111.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1428	OUT	GET /td/fls/rul/activityi;fledge=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:03 UTC	646	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:14:03 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2023-12-05 18:14:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50493	52.223.40.198	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	940	OUT	GET /track/pxl/?adv=bomn82o&ct=0:s2f54xh&fmt=3&ttl=43200&gtmcb=1905989693 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3a743bef-66ee-4af3-a0ea-a4634a63b535; TDCPM=CAESFQoGZ29vZ2xlEgsInqONx53EuDwQBRIWCgdzdng5dDUwEgsIgNrazv3xujwQBRIWCgdydWJpY29uEgsI7Jnowv7xujwQBRIXCghhcHBuZXh1cxILCPb6-ef-8bo8EAUSGQoKcmlnaHRtZWRpYRILCISf-uf-8bo8EAUSFAoFdGFwYWQSCwjyzoTz_vG6PBAFGAEgASgCMgsIxMWHoJXyujwQBTgBWgV0YXBhZGAC
2023-12-05 18:14:03 UTC	827	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 72 76 65 72 3a 20 4b 65 73 74 72 65 6c 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 33 61 37 34 33 62 65 66 2d 36 36 65 65 2d 34 61 66 33 2d 61 30 65 61 2d 61 34 36 33 34 61 36 33 62 35 33 35 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 30 34 33 39 32 30 34 33 26 67 64 70 72 3d 30 26 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:14:03 GMTContent-Length: 0Connection: closeserver: Kestrellocation: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392043&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50494	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	2612	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 236 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:03 UTC	236	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 43 6c 69 65 6e 74 43 61 70 73 75 6c 65 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 69 64 22 3a 22 6e 79 74 3a 2f 2f 63 61 70 73 75 6c 65 2f 39 30 31 33 37 38 31 32 2d 66 32 65 35 2d 35 38 61 61 2d 61 33 34 63 2d 62 34 61 32 33 30 37 62 39 33 34 39 22 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 32 64 64 31 34 37 65 34 34 35 66 33 33 37 39 64 36 31 64 34 36 61 35 32 31 64 35 39 38 35 62 34 61 38 34 33 30 35 36 35 66 36 34 61 32 39 35 64 36 33 36 66 39 30 33 62 37 66 36 65 39 66 37 66 22 7d 7d 7d Data Ascii: {"operationName":"ClientCapsuleQuery","variables":{"id":"nyt://capsule/90137812-f2e5-58aa-a34c-b4a2307b9349"},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"2dd147e445f3379d61d46a521d5985b4a8430565f64a295d636f903b7f6e9f7f"}}}
2023-12-05 18:14:03 UTC	1376	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 36 37 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 867access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:14:03 UTC	123	IN	Data Raw: 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Timing-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:03 UTC	867	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 61 6e 79 57 6f 72 6b 22 3a 7b 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 63 61 70 73 75 6c 65 2f 39 30 31 33 37 38 31 32 2d 66 32 65 35 2d 35 38 61 61 2d 61 33 34 63 2d 62 34 61 32 33 30 37 62 39 33 34 39 22 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 31 30 30 30 30 30 30 30 39 30 34 37 36 37 32 22 2c 22 62 6f 64 79 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 5b 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 45 6d 61 69 6c 53 69 67 6e 75 70 42 6c 6f 63 6b 22 2c 22 70 72 6f 64 75 63 74 43 6f 64 65 22 3a 22 59 50 47 55 22 2c 22 6e 65 77 73 6c 65 74 74 65 72 53 75 6d 6d 61 72 79 22 3a 5b 7b 22 74 65 78 74 22 3a 22 41 6c 6c 20 74 68 65 20 6c 61 74 65 73 74 20 6e 65 77 73 20 66 6f 72 20 61 6e 79 20 70 61 72 74 20 6f 66 20 74 68 65 20 77 6f 72 6c Data Ascii: {"data":{"anyWork":{"uri":"nyt://capsule/90137812-f2e5-58aa-a34c-b4a2307b9349","sourceId":"100000009047672","body":{"content":[{"__typename":"EmailSignupBlock","productCode":"YPGU","newsletterSummary":[{"text":"All the latest news for any part of the worl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50495	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	2600	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 5610 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad^https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html=z3DiZN4mOIhoKcvokH-eY6zy
2023-12-05 18:14:03 UTC	5610	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 73 77 53 79 4c 4f 69 6f 45 74 4e 33 6a 73 32 6e 46 4b 71 48 42 56 52 5f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 7a 33 44 69 5a 4e 34 6d 4f 49 68 6f 4b 63 76 6f 6b 48 2d 65 59 36 7a 79 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 36 63 51 37 55 2d 64 47 46 32 31 64 32 4d 73 77 66 41 79 67 69 64 57 39 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 34 31 39 36 38 2c 22 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 22 3a 22 69 6d 70 72 65 73 73 69 6f 6e Data Ascii: [{"context_id":"swSyLOioEtN3js2nFKqHBVR_","pageview_id":"z3DiZN4mOIhoKcvokH-eY6zy","event_id":"6cQ7U-dGF21d2MswfAygidW9","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"impression","how":"beacon","client_ts":1701800041968,"data":{"event":"impression
2023-12-05 18:14:03 UTC	1501	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:14:03 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50497	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	2210	OUT	GET /vi-assets/static-assets/byline-5a719c65dc4802653631.js?_sw-precache=f5d429f8f3128689d94d11ce44c8709e HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:03 UTC	1327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 39 31 34 35 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 73 51 6c 4f 2d 55 4a 58 76 34 5a 68 62 42 62 7a 6b 6e 57 53 42 52 41 65 4f 4c 41 49 6a 45 5a 59 58 42 4a 51 54 52 4d 30 48 37 79 63 39 56 74 57 62 6e 72 7a 6e 5a 64 56 4c 61 6a 75 6d 41 6b 7a 36 61 62 6c 6f 61 4e 31 77 70 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 38 39 32 32 38 39 33 37 32 36 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1191458X-GUploader-UploadID: ABPtcPqsQlO-UJXv4ZhbBbzknWSBRAeOLAIjEZYXBJQTRM0H7yc9VtWbnrznZdVLajumAkz6abloaN1wpAx-goog-generation: 1701789228937262x-goog-metageneration: 1x-goog-stored-content-enc
2023-12-05 18:14:03 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 35 2c 31 31 2c 31 37 2c 31 38 2c 32 30 2c 36 30 2c 38 31 2c 31 34 35 2c 31 35 30 2c 31 36 33 5d 2c 7b 22 2b 35 41 57 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 79 67 76 6b 22 29 2c 69 3d 6e 28 22 38 69 54 46 22 29 2c 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[55,11,17,18,20,60,81,145,150,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return j}));var a=n("ygvk"),i=n("8iTF"),r
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 31 30 70 78 29 3b 7d 22 29 2c 6c 3d 28 30 2c 61 2e 6b 65 79 66 72 61 6d 65 73 29 28 22 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 35 70 78 29 3b 7d 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 31 30 70 78 29 3b 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c Data Ascii: 0) translate(-22.670000076293945px,0) translate(0,10px);}"),l=(0,a.keyframes)("0%{transform:translate(34px,0) translate(-34px,0) translate(0,5px);}25%{transform:translate(34px,0) translate(-34px,0) translate(0,10px);}50%{transform:translate(34px,0) transl
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 6e 28 22 6d 63 7a 7a 22 29 2c 69 3d 6e 28 22 7a 57 72 49 22 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6c 6f 63 61 74 69 6f 6e 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 65 29 28 74 2c 69 2e 61 2e 43 4f 4d 4d 45 4e 54 53 5f 50 41 4e 45 4c 29 7c 7c 42 6f 6f 6c 65 61 6e 28 4f 62 6a 65 63 74 28 61 2e 62 29 28 74 2c 69 2e 61 2e 50 45 52 4d 5f 49 44 29 29 7d 7d 2c 22 30 46 76 77 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 Data Ascii: n("mczz"),i=n("zWrI");t.a=function(e){var t=e.location;return Object(a.e)(t,i.a.COMMENTS_PANEL)\|\|Boolean(Object(a.b)(t,i.a.PERM_ID))}},"0Fvw":function(e,t,n){"use strict";var a=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;va
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 2c 22 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 22 29 2c 6b 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 22 29 2c 45 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 22 2c 72 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 6d 65 64 69 75 6d 2c 22 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 22 29 2c 5f 3d 4f 62 6a 65 63 74 28 61 2e 74 68 65 6d 65 46 6e 29 28 22 74 72 65 61 74 6d 65 6e 74 22 2c 7b 69 6e 73 69 64 65 72 3a 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 3b 22 29 2c 62 Data Ascii: ,"{display:inline-block;}"),k=Object(a.css)("margin-bottom:10px;"),E=Object(a.css)("display:block;",r.a.breakpoint.medium,"{display:none;}"),_=Object(a.themeFn)("treatment",{insider:Object(a.css)("display:flex;justify-content:space-between;width:100%;"),b
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 43 31 36 2e 32 39 33 33 20 34 2e 39 31 39 33 38 20 31 36 2e 34 36 39 33 20 34 2e 33 33 38 30 31 20 31 36 2e 34 37 38 32 20 33 2e 37 34 32 31 37 43 31 36 2e 34 38 37 20 33 2e 31 34 36 33 32 20 31 36 2e 33 32 38 33 20 32 2e 35 35 39 39 38 20 31 36 2e 30 32 20 32 2e 30 35 43 31 35 2e 37 38 39 31 20 31 2e 36 39 32 34 36 20 31 35 2e 34 38 37 20 31 2e 33 38 36 33 20 31 35 2e 31 33 32 36 20 31 2e 31 35 30 36 43 31 34 2e 37 37 38 32 20 30 2e 39 31 34 38 39 36 20 31 34 2e 33 37 39 20 30 2e 37 35 34 37 30 34 20 31 33 2e 39 36 20 30 2e 36 38 43 31 33 2e 30 39 36 20 30 2e 35 32 32 35 31 32 20 31 32 2e 32 30 34 33 20 30 2e 36 39 33 37 31 38 20 31 31 2e 34 36 20 31 2e 31 36 43 31 30 2e 36 36 31 37 20 31 2e 37 32 35 31 20 31 30 2e 31 30 37 38 20 32 2e 35 37 32 31 36 20 Data Ascii: C16.2933 4.91938 16.4693 4.33801 16.4782 3.74217C16.487 3.14632 16.3283 2.55998 16.02 2.05C15.7891 1.69246 15.487 1.3863 15.1326 1.1506C14.7782 0.914896 14.379 0.754704 13.96 0.68C13.096 0.522512 12.2043 0.693718 11.46 1.16C10.6617 1.7251 10.1078 2.57216
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6f 29 29 7b 76 61 72 20 6c 3d 72 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 6f 29 3a 6e 75 6c 6c 3b 6c 26 26 28 6c 2e 67 65 74 7c 7c 6c 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 6f 2c 6c 29 3a 61 5b 6f 5d 3d 65 5b 6f 5d 7d 61 2e 64 65 66 61 75 6c 74 3d 65 2c 6e 26 26 6e 2e 73 65 74 28 65 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 28 6e 28 22 71 31 74 49 22 29 29 2c 6c 3d 61 28 6e 28 22 31 37 78 39 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 Data Ascii: hasOwnProperty.call(e,o)){var l=r?Object.getOwnPropertyDescriptor(e,o):null;l&&(l.get\|\|l.set)?Object.defineProperty(a,o,l):a[o]=e[o]}a.default=e,n&&n.set(e,a);return a}(n("q1tI")),l=a(n("17x9"));function s(e){if("function"!=typeof WeakMap)return null;var
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 2e 64 65 66 61 75 6c 74 29 28 5b 22 6d 65 64 69 75 6d 22 5d 29 2c 63 3d 28 30 2c 72 2e 74 68 65 6d 65 46 6e 29 28 22 74 72 65 61 74 6d 65 6e 74 22 2c 7b 6e 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 63 73 73 29 28 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 73 2e 64 65 66 61 75 6c 74 2e 66 6f 6e 74 2e 73 65 72 69 66 42 61 73 65 2c 22 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 22 2c 73 2e 64 65 66 61 75 6c 74 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 35 29 2c 22 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 22 2c 69 2e 63 6f 6c 6f 72 2e 73 74 72 6f 6b 65 2e 71 75 61 74 65 72 6e 61 72 79 2c 22 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e Data Ascii: .default)(["medium"]),c=(0,r.themeFn)("treatment",{none:function(e){return(0,r.css)("font-family:",s.default.font.serifBase,";padding-left:",s.default.font.size(15),";border-left:1px solid ",i.color.stroke.quaternary,";margin-top:0;margin-left:auto;margin
2023-12-05 18:14:03 UTC	16384	IN	Data Raw: 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 62 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 4f 3d 7b 41 72 74 69 63 6c 65 3a 21 30 2c 49 6d 61 67 65 3a 21 30 2c 53 65 63 74 69 6f 6e 3a 21 30 2c 4c 65 67 61 63 79 43 6f 6c 6c 65 63 74 69 6f 6e 3a 21 30 7d 2c 77 3d 7b 63 6f 6f 6b 69 6e 67 3a 21 30 7d 2c 78 3d 7b 77 77 77 Data Ascii: s?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):b(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var O={Article:!0,Image:!0,Section:!0,LegacyCollection:!0},w={cooking:!0},x={www

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50499	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	2226	OUT	GET /vi-assets/static-assets/canadaHamburgerNavData-9832152fd34a7a1baeae.js?_sw-precache=9c27ac548c2c3b9cb5180d3fb338e7b9 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:03 UTC	1340	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 37 37 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 32 4c 6f 5a 4f 4a 30 43 30 30 49 30 35 49 37 53 33 53 68 69 37 57 73 66 73 6a 36 74 72 73 35 46 54 52 4c 46 6c 4d 48 73 6a 51 42 78 31 49 56 65 6a 76 76 35 77 77 56 4c 6f 4a 36 72 79 51 6c 38 38 2d 2d 47 59 58 70 30 7a 7a 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 37 32 33 32 33 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 32770X-GUploader-UploadID: ABPtcPq2LoZOJ0C00I05I7S3Shi7Wsfsj6trs5FTRLFlMHsjQBx1IVejvv5wwVLoJ6ryQl88--GYXp0zzAx-goog-generation: 1701369734723235x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:14:03 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 36 5d 2c 7b 50 76 6c 41 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 61 29 3b 76 61 72 20 73 3d 6e 28 22 71 31 74 49 22 29 2c 6f 3d 6e 2e 6e 28 73 29 2c 74 3d 5b 7b 65 64 69 74 69 6f 6e 3a 22 64 6f 6d 65 73 74 69 63 22 2c 6e 61 6d 65 3a 22 48 6f 6d 65 20 50 61 67 65 22 2c 70 61 72 65 6e 74 3a 6e 75 6c 6c 2c 70 61 74 68 3a 22 2f 63 61 2f 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 41 39 36 33 42 35 36 37 2d 37 44 33 44 2d 34 44 30 43 2d 39 45 34 37 2d 42 46 39 31 36 30 39 45 46 43 45 37 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 68 6f 6d 65 70 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[56],{PvlA:function(e,a,n){"use strict";n.r(a);var s=n("q1tI"),o=n.n(s),t=[{edition:"domestic",name:"Home Page",parent:null,path:"/ca/",taxonomyId:"A963B567-7D3D-4D0C-9E47-BF91609EFCE7",className:"homepa
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 39 41 34 33 44 38 46 43 2d 46 34 43 46 2d 34 34 44 39 2d 39 42 33 34 2d 31 33 38 44 33 30 34 36 38 46 38 46 22 2c 70 61 74 68 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 77 6f 72 6c 64 2f 63 61 6e 61 64 61 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 35 63 66 35 64 39 30 62 2d 65 34 33 62 2d 34 33 33 35 2d 62 63 37 35 2d 30 62 34 31 31 39 62 62 39 38 61 65 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 63 61 6e 61 64 61 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 45 75 72 6f 70 65 22 2c 70 61 72 65 6e 74 3a 22 39 41 34 33 44 38 46 43 2d 46 34 43 46 2d 34 34 44 39 2d 39 42 33 34 2d 31 33 38 44 33 30 34 36 38 46 38 46 22 2c 70 61 Data Ascii: 9A43D8FC-F4CF-44D9-9B34-138D30468F8F",path:"/ca/section/world/canada",taxonomyId:"5cf5d90b-e43b-4335-bc75-0b4119bb98ae",edition:"",className:"canada",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Europe",parent:"9A43D8FC-F4CF-44D9-9B34-138D30468F8F",pa
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 64 6f 6e 61 6c 64 54 72 75 6d 70 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 32 30 32 34 20 45 6c 65 63 74 69 6f 6e 73 22 2c 70 61 72 65 6e 74 3a 22 38 30 45 36 44 45 45 36 2d 38 37 45 34 2d 34 41 44 30 2d 39 31 35 32 2d 31 34 46 41 36 42 30 37 45 35 41 42 22 2c 70 61 74 68 3a 22 2f 6e 65 77 73 2d 65 76 65 6e 74 2f 32 30 32 34 2d 65 6c 65 63 74 69 6f 6e 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 32 33 46 44 36 43 38 42 2d 36 32 44 35 2d 34 43 45 41 2d 41 33 33 31 2d 36 43 32 41 39 41 31 32 32 33 42 45 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6c 65 Data Ascii: ,edition:"",className:"donaldTrump",show_in_nav:!0,hasSubsections:!1,level:2},{name:"2024 Elections",parent:"80E6DEE6-87E4-4AD0-9152-14FA6B07E5AB",path:"/news-event/2024-election",taxonomyId:"23FD6C8B-62D5-4CEA-A331-6C2A9A1223BE",edition:"",className:"ele
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 52 61 63 65 2f 52 65 6c 61 74 65 64 22 2c 70 61 72 65 6e 74 3a 22 32 33 46 44 36 43 38 42 2d 36 32 44 35 2d 34 43 45 41 2d 41 33 33 31 2d 36 43 32 41 39 41 31 32 32 33 42 45 22 2c 70 61 74 68 3a 22 2f 73 70 6f 74 6c 69 67 68 74 2f 72 61 63 65 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 35 32 32 62 64 65 34 63 2d 65 35 37 62 2d 34 63 35 38 2d 61 32 66 33 2d 33 65 30 66 35 35 36 34 36 63 39 64 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 72 61 63 65 72 65 6c 61 74 65 64 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 57 69 6c 64 66 69 72 65 20 Data Ascii: bsections:!1,level:2},{name:"Race/Related",parent:"23FD6C8B-62D5-4CEA-A331-6C2A9A1223BE",path:"/spotlight/race",taxonomyId:"522bde4c-e57b-4c58-a2f3-3e0f55646c9d",edition:"",className:"racerelated",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Wildfire
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 31 2d 42 46 31 30 2d 38 32 46 31 43 39 30 33 44 42 46 42 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6e 79 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 31 7d 2c 7b 6e 61 6d 65 3a 22 45 72 69 63 20 41 64 61 6d 73 22 2c 70 61 72 65 6e 74 3a 22 43 34 44 43 38 43 30 43 2d 45 31 34 38 2d 34 32 30 31 2d 42 46 31 30 2d 38 32 46 31 43 39 30 33 44 42 46 42 22 2c 70 61 74 68 3a 22 2f 73 70 6f 74 6c 69 67 68 74 2f 65 72 69 63 2d 61 64 61 6d 73 2d 6d 61 79 6f 72 2d 6e 79 63 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 Data Ascii: 1-BF10-82F1C903DBFB",edition:"",className:"ny",show_in_nav:!0,hasSubsections:!1,level:1},{name:"Eric Adams",parent:"C4DC8C0C-E148-4201-BF10-82F1C903DBFB",path:"/spotlight/eric-adams-mayor-nyc",edition:"",taxonomyId:"",className:"",show_in_nav:!0,hasSubsec
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 30 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 43 68 61 72 6c 65 73 20 4d 2e 20 42 6c 6f 77 22 2c 70 61 72 65 6e 74 3a 22 39 35 36 38 41 38 45 34 2d 44 44 30 30 2d 34 41 31 39 2d 39 33 35 37 2d 35 35 46 38 45 38 34 41 44 44 42 35 22 2c 70 61 74 68 3a 22 2f 63 6f 6c 75 6d 6e 2f 63 68 61 72 6c 65 73 2d 6d 2d 62 6c 6f 77 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 42 37 30 31 33 31 46 30 2d 36 42 32 41 2d 34 41 39 33 2d 38 37 30 35 2d 30 42 39 46 37 45 39 42 38 30 30 46 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 63 68 61 72 6c 65 73 6d 62 6c 6f 77 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 6c 65 76 65 6c 3a 33 7d 2c 7b 6e 61 6d 65 3a 22 4a 61 6d 65 6c 6c Data Ascii: v:!0,hasSubsections:!0,level:2},{name:"Charles M. Blow",parent:"9568A8E4-DD00-4A19-9357-55F8E84ADDB5",path:"/column/charles-m-blow",taxonomyId:"B70131F0-6B2A-4A93-8705-0B9F7E9B800F",edition:"",className:"charlesmblow",show_in_nav:!0,level:3},{name:"Jamell
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 6e 5f 6e 61 76 3a 21 30 2c 6c 65 76 65 6c 3a 33 7d 2c 7b 6e 61 6d 65 3a 22 54 68 6f 6d 61 73 20 4c 2e 20 46 72 69 65 64 6d 61 6e 22 2c 70 61 72 65 6e 74 3a 22 39 35 36 38 41 38 45 34 2d 44 44 30 30 2d 34 41 31 39 2d 39 33 35 37 2d 35 35 46 38 45 38 34 41 44 44 42 35 22 2c 70 61 74 68 3a 22 2f 63 6f 6c 75 6d 6e 2f 74 68 6f 6d 61 73 2d 6c 2d 66 72 69 65 64 6d 61 6e 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 33 44 35 36 45 46 34 38 2d 43 41 39 37 2d 34 32 30 39 2d 41 38 37 38 2d 36 34 33 30 46 42 39 41 32 43 35 45 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 74 68 6f 6d 61 73 6c 66 72 69 65 64 6d 61 6e 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 6c 65 76 65 6c 3a 33 7d 2c 7b 6e 61 6d 65 3a 22 4d 69 63 68 65 6c 6c 65 20 47 6f Data Ascii: n_nav:!0,level:3},{name:"Thomas L. Friedman",parent:"9568A8E4-DD00-4A19-9357-55F8E84ADDB5",path:"/column/thomas-l-friedman",taxonomyId:"3D56EF48-CA97-4209-A878-6430FB9A2C5E",edition:"",className:"thomaslfriedman",show_in_nav:!0,level:3},{name:"Michelle Go
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 6c 65 76 65 6c 3a 33 7d 2c 7b 6e 61 6d 65 3a 22 54 72 65 73 73 69 65 20 4d 63 4d 69 6c 6c 61 6e 20 43 6f 74 74 6f 6d 22 2c 70 61 72 65 6e 74 3a 22 39 35 36 38 41 38 45 34 2d 44 44 30 30 2d 34 41 31 39 2d 39 33 35 37 2d 35 35 46 38 45 38 34 41 44 44 42 35 22 2c 70 61 74 68 3a 22 2f 63 6f 6c 75 6d 6e 2f 74 72 65 73 73 69 65 2d 6d 63 6d 69 6c 6c 61 6e 2d 63 6f 74 74 6f 6d 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 74 72 65 73 73 69 65 6d 63 6d 69 6c 6c 61 6e 63 6f 74 74 6f 6d 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 6c 65 76 65 6c 3a 33 7d 2c 7b 6e 61 6d 65 3a 22 50 61 6d 65 6c 61 20 50 61 75 6c 22 2c 70 61 72 65 6e 74 3a 22 39 35 Data Ascii: ,show_in_nav:!0,level:3},{name:"Tressie McMillan Cottom",parent:"9568A8E4-DD00-4A19-9357-55F8E84ADDB5",path:"/column/tressie-mcmillan-cottom",taxonomyId:"",edition:"",className:"tressiemcmillancottom",show_in_nav:!0,level:3},{name:"Pamela Paul",parent:"95

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50498	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	2223	OUT	GET /vi-assets/static-assets/canadaSiteIndexData-eed2ece5657f2194f9c0.js?_sw-precache=c6ee50eb9eac1a96efa5f27697530d23 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; _chartbeat2=.1701800009715.1701800025522.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.2; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; datadome=ONdVfY9lyIIzHLRzM5Hti40t0yUux0KdG9iBrmvQD3JCdWex0hxA3qPGZLWbyHBpGW8~9UdVq87eYAQJfNFri8PSNp8Jifxxq4WA6fRzJ19F9A9q6t~xQPnqRSJtvpRI; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:03 UTC	1335	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 35 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 44 70 67 75 55 53 57 30 69 59 41 47 56 4a 30 75 5a 75 30 67 45 5f 30 69 6c 62 6a 76 47 68 55 52 34 45 41 78 67 75 45 61 31 55 42 73 30 57 56 56 45 76 41 77 63 51 7a 55 63 35 45 6e 72 55 4c 5a 32 76 76 47 41 32 78 79 41 34 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 32 39 20 4e 6f 76 20 32 30 32 34 20 31 39 3a 30 35 3a 34 38 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3958X-GUploader-UploadID: ABPtcPpDpguUSW0iYAGVJ0uZu0gE_0ilbjvGhUR4EAxguEa1UBs0WVVEvAwcQzUc5EnrULZ2vvGA2xyA4ACache-Control: public,max-age=31536000Expires: Fri, 29 Nov 2024 19:05:48 GMTLast-Modifi
2023-12-05 18:14:03 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 37 5d 2c 7b 67 52 34 69 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 22 69 6e 64 65 78 44 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 61 3d 69 28 22 71 31 74 49 22 29 2c 74 3d 69 2e 6e 28 61 29 2c 6f 3d 5b 7b 69 64 3a 31 2c 6e 61 6d 65 3a 22 6e 65 77 73 22 2c 70 61 67 65 73 3a 5b 7b 6e 61 6d 65 3a 22 48 6f 6d 65 20 50 61 67 65 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 22 2c 65 64 69 74 69 6f 6e 3a 22 43 41 22 7d 2c 7b 6e 61 6d 65 3a 22 57 6f 72 6c 64 22 2c 6c 69 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[57],{gR4i:function(n,e,i){"use strict";i.r(e),i.d(e,"indexData",(function(){return o}));var a=i("q1tI"),t=i.n(a),o=[{id:1,name:"news",pages:[{name:"Home Page",link:"/ca/",edition:"CA"},{name:"World",lin
2023-12-05 18:14:03 UTC	1379	IN	Data Raw: 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 22 7d 2c 7b 6e 61 6d 65 3a 22 43 6f 6c 75 6d 6e 69 73 74 73 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 63 6f 6c 75 6d 6e 69 73 74 73 22 7d 2c 7b 6e 61 6d 65 3a 22 45 64 69 74 6f 72 69 61 6c 73 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 65 64 69 74 6f 72 69 61 6c 73 22 7d 2c 7b 6e 61 6d 65 3a 22 47 75 65 73 74 20 45 73 73 61 79 73 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 7d 2c 7b 6e 61 6d 65 3a 22 4c 65 74 74 65 72 73 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 6c 65 74 74 65 72 73 Data Ascii: link:"/ca/section/opinion"},{name:"Columnists",link:"/ca/section/opinion/columnists"},{name:"Editorials",link:"/ca/section/opinion/editorials"},{name:"Guest Essays",link:"/ca/section/opinion/contributors"},{name:"Letters",link:"/ca/section/opinion/letters
2023-12-05 18:14:03 UTC	1200	IN	Data Raw: 7d 2c 7b 6e 61 6d 65 3a 22 50 61 72 65 6e 74 69 6e 67 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 70 61 72 65 6e 74 69 6e 67 22 7d 2c 7b 6e 61 6d 65 3a 22 52 65 61 6c 20 45 73 74 61 74 65 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 72 65 61 6c 65 73 74 61 74 65 22 7d 2c 7b 6e 61 6d 65 3a 22 53 74 79 6c 65 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 73 74 79 6c 65 22 7d 2c 7b 6e 61 6d 65 3a 22 54 20 4d 61 67 61 7a 69 6e 65 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 74 2d 6d 61 67 61 7a 69 6e 65 22 7d 2c 7b 6e 61 6d 65 3a 22 54 72 61 76 65 6c 22 2c 6c 69 6e 6b 3a 22 2f 63 61 2f 73 65 63 74 69 6f 6e 2f 74 72 61 76 65 6c 22 7d 5d 7d 2c 7b 69 64 3a 35 2c 6e 61 6d 65 3a 22 4d 6f 72 65 22 2c 6c 6f Data Ascii: },{name:"Parenting",link:"/ca/section/parenting"},{name:"Real Estate",link:"/ca/section/realestate"},{name:"Style",link:"/ca/section/style"},{name:"T Magazine",link:"/ca/section/t-magazine"},{name:"Travel",link:"/ca/section/travel"}]},{id:5,name:"More",lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50500	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1405	OUT	GET /activityi;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:03 UTC	1286	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50501	142.251.111.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1416	OUT	GET /td/fls/rul/activityi;fledge=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:03 UTC	646	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:14:03 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2023-12-05 18:14:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50504	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1387	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:03 UTC	2215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50505	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	756	OUT	GET /rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392043&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:14:03 UTC	989	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 34 34 31 39 38 38 38 66 38 38 39 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:03 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e44419888f889-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:14:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50506	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1173	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=Elian%20Peltier&n=1&f=00001&c=0&x=0&m=0&y=907&o=1280&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&b=6345&t=CEls-DBj2of3BNg6NhlITXVz1Jb9&V=141&i=Nigeria%E2%80%99s%20President%20Calls%20for%20Inquiry%20After%20Military%20Strike%20Kills%20at%20Least%2085%20Civilians&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=3&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:03 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:03 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:14:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50507	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:03 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:03 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50503	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1392	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:03 UTC	2214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50508	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1928	OUT	GET /als?uri=nyt%3A%2F%2Farticle%2F9c6ba5a0-b7c9-5979-aa85-77e25cf8125c&typ=&prop=nyt&plat=web HTTP/1.1 Host: als-svc.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:03 UTC	435	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 37 37 31 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 32 37 0d 0a 73 74 72 69 63 74 2d 74 Data Ascii: HTTP/1.1 200 OKcache-control: private, no-store, no-cache, must-revalidate, max-age=0content-type: application/json; charset=utf-8date: Tue, 05 Dec 2023 18:14:03 GMTcontent-length: 1771via: 1.1 googlex-envoy-upstream-service-time: 27strict-t
2023-12-05 18:14:03 UTC	1771	IN	Data Raw: 7b 22 61 6c 73 5f 74 65 73 74 5f 63 6c 69 65 6e 74 73 69 64 65 22 3a 22 77 65 62 5f 6e 6f 6e 65 5f 6c 6f 77 5f 32 30 32 33 31 32 30 35 31 38 31 34 30 33 22 2c 22 55 73 65 72 22 3a 7b 22 61 69 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 72 65 67 69 49 64 22 3a 22 30 22 2c 22 62 74 22 3a 22 22 2c 22 73 75 62 22 3a 22 61 6e 6f 6e 22 2c 22 69 73 4c 6f 67 67 65 64 49 6e 22 3a 22 66 61 6c 73 65 22 2c 22 6d 6b 74 67 22 3a 22 74 79 70 65 5f 61 6e 6f 6e 2c 6c 6f 67 66 2c 61 62 66 22 7d 2c 22 41 73 73 65 74 22 3a 7b 22 70 74 22 3a 22 6e 74 31 2c 6e 74 31 31 2c 6e 74 31 32 2c 6e 74 31 33 2c 6e 74 31 34 2c 6e 74 31 36 2c 6e 74 32 2c 6e 74 32 31 2c 6e 74 33 2c 6e 74 34 2c Data Ascii: {"als_test_clientside":"web_none_low_20231205181403","User":{"aid":"XbK7A_KO3s8XVA_FdXv5zD","userType":"anon","regiId":"0","bt":"","sub":"anon","isLoggedIn":"false","mktg":"type_anon,logf,abf"},"Asset":{"pt":"nt1,nt11,nt12,nt13,nt14,nt16,nt2,nt21,nt3,nt4,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50502	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	1405	OUT	GET /activityi;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:04 UTC	1286	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50512	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	2600	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 5205 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad^https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html=z3DiZN4mOIhoKcvokH-eY6zy; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:03 UTC	5205	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 73 77 53 79 4c 4f 69 6f 45 74 4e 33 6a 73 32 6e 46 4b 71 48 42 56 52 5f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 7a 33 44 69 5a 4e 34 6d 4f 49 68 6f 4b 63 76 6f 6b 48 2d 65 59 36 7a 79 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 4c 78 44 31 68 5a 62 62 47 5a 35 48 44 4b 66 70 42 79 66 43 78 4e 5a 75 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 61 62 5f 65 78 70 6f 73 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 34 32 33 37 32 2c 22 64 61 74 61 22 3a 7b 22 74 65 73 74 22 3a 22 4d 4b 54 5f 43 4b 5f 53 61 6c 65 5f Data Ascii: [{"context_id":"swSyLOioEtN3js2nFKqHBVR_","pageview_id":"z3DiZN4mOIhoKcvokH-eY6zy","event_id":"LxD1hZbbGZ5HDKfpByfCxNZu","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"ab_expose","how":"beacon","client_ts":1701800042372,"data":{"test":"MKT_CK_Sale_
2023-12-05 18:14:04 UTC	1501	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:14:04 UTC	33	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 Data Ascii: {"status":200,"message":"success"
2023-12-05 18:14:04 UTC	1	IN	Data Raw: 7d Data Ascii: }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50511	142.251.163.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:03 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 138 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:03 UTC	138	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 39 36 31 35 30 39 30 38 30 36 30 34 36 33 35 31 34 37 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nytimes.com","trigger_debug_key":"4961509080604635147"},"type":"trigger-no-matching-source"}]
2023-12-05 18:14:04 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50513	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	2612	OUT	POST /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive Content-Length: 170 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" nyt-token: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/oUCTBmD/cLdmcecrnBMHiU/pxQCn2DDyaPKUOXxi4p0uUSZQzsuq1pJ1m5z1i0YGPd1U1OeGHAChWtqoxC7bFMCXcwnE1oyui9G1uobgpm1GdhtwkR7ta7akVTcsF8zxiXx7DNXIPd2nIJFH83rmkZueKrC4JVaNzjvD+Z03piLn5bHWU6+w+rA+kyJtGgZNTXKyPh6EC6o5N+rknNMG5+CdTq35p8f99WjFawSvYgP9V64kgckbTbtdJ6YhVP58TnuYgr12urtwnIqWP9KSJ1e5vmgf3tunMqWNm6+AnsqNj8mCLdCuc5cEB74CwUeQcP2HQQmbCddBy2y0mEwIDAQAB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 nyt-app-type: project-vi content-type: application/json accept: / nyt-app-version: 0.0.5 x-nyt-internal-meter-override: undefined sec-ch-ua-platform: "Windows" Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:04 UTC	170	OUT	Data Raw: 7b 22 6f 70 65 72 61 74 69 6f 6e 4e 61 6d 65 22 3a 22 55 73 65 72 51 75 65 72 79 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 7d 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 22 70 65 72 73 69 73 74 65 64 51 75 65 72 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 73 68 61 32 35 36 48 61 73 68 22 3a 22 65 36 30 35 33 33 63 62 38 35 36 66 39 32 35 34 32 31 39 33 32 38 39 65 34 66 39 30 37 37 38 35 65 33 38 37 61 66 64 35 34 33 64 64 64 36 30 62 65 64 35 66 37 37 36 63 34 63 36 35 61 63 36 30 22 7d 7d 7d Data Ascii: {"operationName":"UserQuery","variables":{},"extensions":{"persistedQuery":{"version":1,"sha256Hash":"e60533cb856f92542193289e4f907785e387afd543ddd60bed5f776c4c65ac60"}}}
2023-12-05 18:14:04 UTC	1314	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 31 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6e 79 74 2d 61 75 64 69 65 6e 63 65 2d 74 61 72 67 65 74 2d 66 6c 61 74 2c 20 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 2c 20 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 2c 20 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 2c Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 210access-control-allow-origin: https://www.nytimes.comaccess-control-allow-credentials: trueaccess-control-expose-headers: x-nyt-audience-target-flat, x-nyt-continent, x-nyt-country, x-nyt-region,
2023-12-05 18:14:04 UTC	215	IN	Data Raw: 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 53 61 6d 69 7a 64 61 74 2d 58 2d 50 65 72 73 6f 6e 61 6c 69 7a 65 2c 20 78 2d 6e 79 74 2d 69 73 2d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 4f 72 69 67 69 6e 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 78 2d 6e 79 74 2d 65 64 67 65 2d 63 61 63 68 65 3a 20 4d 49 53 53 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 33 30 37 32 30 30 30 3b 20 70 72 65 6c 6f 61 64 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: Vary: Accept-Encoding, Samizdat-X-Personalize, x-nyt-is-anonymous, Origin, Accept-EncodingTiming-Allow-Origin: *x-nyt-edge-cache: MISSStrict-Transport-Security: max-age=63072000; preload; includeSubdomains
2023-12-05 18:14:04 UTC	210	IN	Data Raw: 7b 22 64 61 74 61 22 3a 7b 22 75 73 65 72 22 3a 7b 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 22 2c 22 70 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 6e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3a 7b 22 6e 65 77 73 6c 65 74 74 65 72 73 22 3a 5b 5d 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 4e 65 77 73 6c 65 74 74 65 72 53 75 62 73 63 72 69 70 74 69 6f 6e 73 22 7d 2c 22 75 73 65 72 49 6e 66 6f 22 3a 7b 22 72 65 67 69 49 64 22 3a 6e 75 6c 6c 2c 22 65 6e 74 69 74 6c 65 6d 65 6e 74 73 22 3a 6e 75 6c 6c 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 55 73 65 72 49 6e 66 6f 22 7d 7d 7d 7d 0a Data Ascii: {"data":{"user":{"__typename":"User","profile":null,"newsletterSubscriptions":{"newsletters":[],"__typename":"NewsletterSubscriptions"},"userInfo":{"regiId":null,"entitlements":null,"__typename":"UserInfo"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50510	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1451	OUT	GET /activityi;dc_pre=COfBwJjz-IIDFfbNKAUd6k0OZg;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:05 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:14:05 UTC	589	IN	Data Raw: 33 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4f 66 42 77 4a 6a 7a 2d 49 49 44 46 66 Data Ascii: 317<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=COfBwJjz-IIDFf
2023-12-05 18:14:05 UTC	209	IN	Data Raw: 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 61 66 72 69 63 61 25 32 46 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: %3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html"/></body></html>
2023-12-05 18:14:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50515	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	791	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:04 UTC	787	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-EncodingContent-Type: text/htmlAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Repo
2023-12-05 18:14:04 UTC	465	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 20 2d 2d 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 74 69 74 6c 65 3e 43 61 6e 64 79 42 61 6e 6e 65 72 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 64 2e 73 69 7a 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 39 37 30 2c 68 65 69 67 68 74 3d 32 35 30 22 3e 20 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 2e 63 73 73 22 3e 0a 09 3c 73 63 72 69 70 74 3e 20 76 61 72 20 63 Data Ascii: <!DOCTYPE html><html lang="en"><head> ... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --><meta charset="UTF-8"><title>CandyBanners</title><meta name="ad.size" content="width=970,height=250"> <link rel="stylesheet" href="style.css"><script> var c
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 0a 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 4d 41 58 5f 55 52 4c 5f 50 41 52 41 4d 5f 4c 45 4e 47 54 48 20 3d 20 33 34 3b 0a 20 20 20 20 76 61 72 20 43 4c 49 43 4b 5f 58 5f 55 52 4c 5f 4b 45 59 20 3d 20 27 6e 78 27 3b 0a 20 20 20 20 76 61 72 20 43 4c 49 43 4b 5f 59 5f 55 52 4c 5f 4b 45 59 20 3d 20 27 6e 79 27 3b 0a 20 20 20 20 76 61 72 20 43 52 45 41 54 49 56 45 5f 44 49 4d 45 4e 53 49 4f 4e 53 5f 4b 45 59 20 3d 20 27 64 69 6d 27 3b 0a 20 20 20 20 76 61 72 20 41 44 5f 55 52 4c 5f 50 41 52 41 4d 20 3d 20 27 26 61 64 75 72 6c 3d 27 3b 0a 0a 20 20 20 20 76 61 72 20 72 65 6c 65 67 61 74 65 4e 61 76 69 67 61 74 69 6f 6e 20 3d 20 27 27 3b 0a 20 Data Ascii: type="text/javascript"> (function() { var MAX_URL_PARAM_LENGTH = 34; var CLICK_X_URL_KEY = 'nx'; var CLICK_Y_URL_KEY = 'ny'; var CREATIVE_DIMENSIONS_KEY = 'dim'; var AD_URL_PARAM = '&adurl='; var relegateNavigation = '';
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 6f 6e 20 3d 20 65 76 65 6e 74 44 61 74 61 2e 72 65 6c 65 67 61 74 65 4e 61 76 69 67 61 74 69 6f 6e 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 69 66 20 28 69 73 4e 65 77 74 6f 6e 45 6e 61 62 6c 65 64 28 65 76 65 6e 74 44 61 74 61 29 20 26 26 20 21 69 73 4e 65 77 74 6f 6e 54 6f 6b 65 6e 53 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 74 6f 6e 4f 74 32 54 6f 6b 65 6e 20 3d 20 65 76 65 6e 74 44 61 74 61 2e 6e 65 77 74 6f 6e 4f 74 32 54 6f 6b 65 6e 3b 0a 20 20 20 20 20 20 20 20 65 6e 61 62 6c 65 41 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 41 70 69 28 6e 65 77 74 6f 6e 4f 74 32 54 6f 6b 65 6e 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 44 61 74 61 2e 69 73 54 75 72 74 6c 65 58 41 64 43 6c Data Ascii: on = eventData.relegateNavigation; } if (isNewtonEnabled(eventData) && !isNewtonTokenSet) { var newtonOt2Token = eventData.newtonOt2Token; enableAttributionReportingApi(newtonOt2Token); } if (eventData.isTurtleXAdCl
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 65 78 69 74 50 61 72 61 6d 73 20 2b 3d 20 27 26 27 20 2b 20 6b 65 79 20 2b 20 27 3d 27 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 72 6c 50 61 72 61 6d 4d 61 70 5b 6b 65 79 5d 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 65 78 69 74 50 61 72 61 6d 73 20 2b 3d 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 78 69 74 50 61 72 61 6d 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 61 70 70 65 6e 64 45 78 69 74 43 6c 69 63 6b 50 61 72 61 6d 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 61 64 55 72 6c 49 6e 64 65 78 20 3d 20 75 72 6c 2e 74 6f 4c 6f 77 Data Ascii: { exitParams += '&' + key + '='; if (urlParamMap[key] !== null) { exitParams += urlParamMap[key]; } } return exitParams; } var appendExitClickParams = function(url) { var adUrlIndex = url.toLow
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 72 67 73 20 3d 20 5b 75 72 6c 2c 20 6e 61 6d 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 20 3d 20 27 27 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 65 61 74 75 72 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 20 3d 20 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 2e 63 6f 6e 63 61 74 28 66 65 61 74 75 72 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4e 65 77 74 6f 6e 54 6f 6b 65 6e 53 65 74 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: , '*'); } else { var args = [url, name]; var windowFeatures = ''; if (features) { windowFeatures = windowFeatures.concat(features); } if (isNewtonTokenSet &&
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 73 6b 33 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 20 74 31 2d 33 20 74 31 22 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 73 6b 34 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 20 74 31 2d 34 20 74 31 22 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 6e 65 73 2d 6d 61 73 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 6e 65 73 22 3e 3c 69 6d 67 20 73 72 63 3d 22 6c 69 6e 65 73 2e 70 6e 67 22 20 61 6c 74 3d 22 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="mask3"><div class="sprite t1-3 t1"></div> </div> <div class="mask4"><div class="sprite t1-4 t1"></div> </div> <div class="lines-mask"> <div class="lines"><img src="lines.png" alt=""></div>
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 41 6e 69 6d 28 29 20 7b 0a 09 09 2f 2f 2d 2d 2d 2d 2d 2d 6f 6e 20 6c 6f 61 64 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 09 67 73 61 70 2e 73 65 74 28 27 23 63 6f 6e 74 61 69 6e 65 72 27 2c 20 7b 64 69 73 70 6c 61 79 3a 20 27 62 6c 6f 63 6b 27 2c 6f 6e 43 6f 6d 70 6c 65 74 65 3a 28 29 3d 3e 7b 0a 09 09 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 41 44 44 20 45 56 45 4e 54 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 09 09 61 64 64 45 76 65 6e 74 28 29 3b 0a 09 09 09 68 6f 76 65 72 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 09 09 74 6c 2e 70 6c 61 79 28 29 3b 0a 09 09 7d 7d 29 3b 0a 09 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: ------------------- function startAnim() {//------on load ------------gsap.set('#container', {display: 'block',onComplete:()=>{//------------ ADD EVENT --------------addEvent();hoverFunction();tl.play();}});//--------------
2023-12-05 18:14:04 UTC	896	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 65 78 69 74 20 67 75 69 64 65 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 20 20 20 20 20 20 2f 2f 2d 2d 61 64 77 6f 72 64 2d 2d 3e 20 45 78 69 74 41 70 69 2e 65 78 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 2d 2d 61 64 67 65 61 72 2d 2d 3e 20 41 44 47 45 41 52 2e 68 74 6d 6c 35 2e 63 6c 69 63 6b 54 68 72 6f 75 67 68 28 22 63 6c 69 63 6b 54 41 47 22 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 2d 2d 73 74 75 64 69 6f 2d 2d 3e 20 45 6e 61 62 6c 65 72 2e 65 78 69 74 28 27 42 61 63 6b 67 72 6f 75 6e 64 20 45 78 69 74 27 29 3b 20 0a 20 20 20 20 20 20 20 20 2f 2f 2d 2d 73 74 61 6e 64 61 72 64 2f 73 69 7a 65 6d 65 6b 2f 61 64 77 6f 72 64 20 6e 6f 2d 61 70 Data Ascii: //-----------exit guide-------------------------- //--adword--> ExitApi.exit(); //--adgear--> ADGEAR.html5.clickThrough("clickTAG"); //--studio--> Enabler.exit('Background Exit'); //--standard/sizemek/adword no-ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50517	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	2211	OUT	GET /vi-assets/static-assets/capsule-68ba43fb343715c23e98.js?_sw-precache=83c60d79aae3a2a4c568dfdfd7cd545a HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:04 UTC	1328	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 38 31 38 37 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 6e 59 49 38 57 6a 69 31 71 69 34 72 69 79 64 4c 78 50 36 73 6c 6c 6c 71 76 62 79 65 73 76 71 62 52 54 51 4e 4a 33 50 70 47 5a 4f 4c 66 62 4e 74 42 49 72 66 45 2d 55 56 37 51 2d 39 44 75 43 59 6d 61 61 5f 44 71 65 6b 46 4d 77 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 35 3a 32 32 3a 30 34 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1081870X-GUploader-UploadID: ABPtcPpnYI8Wji1qi4riydLxP6slllqvbyesvqbRTQNJ3PpGZOLfbNtBIrfE-UV7Q-9DuCYmaa_DqekFMwCache-Control: public,max-age=31536000Expires: Wed, 04 Dec 2024 15:22:04 GMTLast-Mod
2023-12-05 18:14:04 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 2c 31 37 2c 32 30 2c 36 30 2c 38 31 2c 31 34 35 2c 31 36 33 5d 2c 7b 22 2b 35 41 57 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 79 67 76 6b 22 29 2c 72 3d 6e 28 22 38 69 54 46 22 29 2c 69 3d 6e 28 22 37 57 4d 6e 22 29 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[58,17,20,60,81,145,163],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return S})),n.d(t,"a",(function(){return N}));var a=n("ygvk"),r=n("8iTF"),i=n("7WMn")
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 6a 65 63 74 28 73 2e 70 61 72 73 65 29 28 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 73 76 63 2f 62 69 74 6c 79 2f 73 68 6f 72 74 65 6e 2e 6a 73 6f 6e 22 29 29 3b 72 65 74 75 72 6e 20 6e 2e 71 75 65 72 79 3d 7b 75 72 6c 3a 65 2e 75 72 6c 7d 2c 4f 62 6a 65 63 74 28 73 2e 66 6f 72 6d 61 74 29 28 6e 29 7d 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6c 28 29 28 6e 2c 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 7d 29 7d 2c 66 3d 6e 28 22 79 58 50 55 22 29 2c 70 3d 6e 2e 6e 28 66 29 2c 6d 3d 6e 28 22 6f 30 6f 31 22 29 2c 76 3d 6e 2e 6e 28 6d 29 2c 68 3d 6e 28 22 32 48 45 65 22 29 2c 67 3d 6e 2e 6e 28 68 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 28 79 3d 70 28 Data Ascii: ject(s.parse)("".concat(t,"/svc/bitly/shorten.json"));return n.query={url:e.url},Object(s.format)(n)}(e.meta,t);break;default:return null}return l()(n,{method:"GET"})},f=n("yXPU"),p=n.n(f),m=n("o0o1"),v=n.n(m),h=n("2HEe"),g=n.n(h);function y(){return(y=p(
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 2e 74 79 70 65 29 7b 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 53 55 4d 4d 41 52 59 5f 52 45 51 55 45 53 54 3a 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 41 52 54 49 43 4c 45 5f 52 45 51 55 45 53 54 3a 6e 3d 4f 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 43 4f 4d 4d 45 4e 54 5f 4c 49 53 54 5f 52 45 51 55 45 53 54 3a 6e 3d 77 28 65 2e 6d 65 74 61 2c 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 61 2e 47 45 54 5f 43 4f 4d 4d 45 4e 54 53 5f 52 45 51 55 45 53 54 3a 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 72 74 69 63 6c 65 49 64 2c 61 3d 65 2e 63 6f 6d 6d 65 6e 74 49 64 2c 72 3d 7b 75 72 6c 3a 6e 2c 6d 65 74 68 6f 64 3a 22 67 65 74 22 2c 63 6d 64 3a 22 47 65 74 43 6f 6d 6d 65 6e 74 42 Data Ascii: .type){case a.a.GET_SUMMARY_REQUEST:case a.a.GET_ARTICLE_REQUEST:n=O(e.meta,t);break;case a.a.GET_COMMENT_LIST_REQUEST:n=w(e.meta,t);break;case a.a.GET_COMMENTS_REQUEST:n=function(e,t){var n=e.articleId,a=e.commentId,r={url:n,method:"get",cmd:"GetCommentB
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 61 2e 55 50 44 41 54 45 5f 50 52 4f 46 49 4c 45 5f 52 45 51 55 45 53 54 3a 72 2e 6d 65 74 68 6f 64 3d 22 50 55 54 22 2c 72 2e 68 65 61 64 65 72 73 3d 6e 65 77 20 48 65 61 64 65 72 73 28 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 7d 29 2c 72 2e 62 6f 64 79 3d 4f 62 6a 65 63 74 28 6b 2e 73 74 72 69 6e 67 69 66 79 29 28 65 2e 6d 65 74 61 2e 76 61 6c 75 65 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 61 2e 61 2e 55 50 44 41 54 45 5f 41 56 41 54 41 52 5f 52 45 51 55 45 53 54 3a 72 2e 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 2c 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 76 31 2f 63 75 72 72 65 6e 74 2f 61 76 61 74 61 72 2e 6a 73 6f 6e 3f 73 68 6f 75 6c Data Ascii: a.UPDATE_PROFILE_REQUEST:r.method="PUT",r.headers=new Headers({"Content-Type":"application/x-www-form-urlencoded"}),r.body=Object(k.stringify)(e.meta.values);break;case a.a.UPDATE_AVATAR_REQUEST:r.method="POST",n="".concat(t,"/v1/current/avatar.json?shoul
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 74 3a 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 7d 2c 22 2b 58 37 72 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 75 73 65 55 6e 69 66 69 65 64 54 72 61 63 6b 69 6e 67 3d 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 61 28 6e 28 22 4a 34 7a 70 22 29 29 2c 69 3d 6e 28 22 71 31 74 49 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 30 2c 69 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 55 6e 69 66 69 65 64 54 72 61 63 6b 69 6e Data Ascii: t:return null}}},"+X7r":function(e,t,n){"use strict";var a=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.useUnifiedTracking=t.default=void 0;var r=a(n("J4zp")),i=n("q1tI"),o=function(){(0,i.useLayoutEffect)((function(){window.UnifiedTrackin
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 74 2c 22 69 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 29 2c 6e 2e 64 28 74 2c 22 6a 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 29 29 2c 6e 2e 64 28 74 2c 22 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 2c Data Ascii: on(){return d})),n.d(t,"i",(function(){return u})),n.d(t,"c",(function(){return c})),n.d(t,"h",(function(){return f})),n.d(t,"j",(function(){return p})),n.d(t,"e",(function(){return m})),n.d(t,"g",(function(){return v})),n.d(t,"b",(function(){return h})),
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 29 28 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 22 29 2c 6d 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 22 29 2c 76 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 68 65 69 67 68 74 3a 31 38 70 78 3b 77 69 64 74 68 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 3a 37 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 67 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 31 70 78 3b 7d 22 29 2c 68 3d 28 69 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 6d 6f 62 69 6c 65 Data Ascii: )("position:relative;"),m=Object(a.css)("height:auto;width:auto;border-radius:100%;background-color:transparent;"),v=Object(a.css)("height:18px;width:18px;padding:7px;overflow:visible;vertical-align:middle;g{stroke-width:0.1px;}"),h=(i.a.breakpoint.mobile
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 74 6f 6e 42 6f 72 64 65 72 2c 6e 3d 65 2e 62 75 74 74 6f 6e 42 6f 72 64 65 72 48 6f 76 65 72 2c 72 3d 65 2e 62 61 63 6b 67 72 6f 75 6e 64 2c 69 3d 65 2e 62 61 63 6b 67 72 6f 75 6e 64 48 6f 76 65 72 2c 6f 3d 65 2e 73 74 72 6f 6b 65 2c 6c 3d 65 2e 73 74 72 6f 6b 65 48 6f 76 65 72 2c 73 3d 65 2e 74 65 78 74 2c 64 3d 65 2e 74 65 78 74 48 6f 76 65 72 2c 75 3d 65 2e 64 72 6f 70 53 68 61 64 6f 77 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 2e 61 63 74 69 6f 6e 62 61 72 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 2c 72 2c 22 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 22 2c 74 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 73 2c 22 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 22 2c 75 2c 22 3b 73 76 67 20 3e 20 70 61 74 68 7b 66 69 6c Data Ascii: tonBorder,n=e.buttonBorderHover,r=e.background,i=e.backgroundHover,o=e.stroke,l=e.strokeHover,s=e.text,d=e.textHover,u=e.dropShadow;return Object(a.css)(".actionbar-button{background:",r,";border:1px solid ",t,";color:",s,";box-shadow:",u,";svg > path{fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50528	34.120.63.153	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	594	OUT	GET /rtb/prebid?cid=8CU4WQK98 HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3448016130184375000V10; data-co=AAAFnRlIKeHkCQNsRLKZAAAAAAA~~8; data-xu=OQVhypoK1RazVj5~~8; data-c=b9a04974-b683-41e4-9726-527f7252b018~~1; data-bs=dd7b0c52-83c2-4fd9-a13e-07c274ba1132~~1; data-c-ts=1701800016
2023-12-05 18:14:04 UTC	397	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 65 72 76 69 63 65 2d 74 69 6d 65 3a 20 31 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 0d 0a 41 63 63 65 Data Ascii: HTTP/1.1 405 Method Not Allowedcontent-type: text/html;charset=utf-8content-language: endate: Tue, 05 Dec 2023 18:14:03 GMTx-envoy-upstream-service-time: 1vary: Accept-Encodingserver: envoyVia: 1.1 googleAccess-Control-Allow-Origin: Acce
2023-12-05 18:14:04 UTC	461	IN	Data Raw: 31 63 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 35 20 e2 80 93 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 Data Ascii: 1c1<!doctype html><html lang="en"><head><title>HTTP Status 405 Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50516	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	2208	OUT	GET /vi-assets/static-assets/card-59ab16713c1ee6a5b879.js?_sw-precache=f1cc3c101219f48a89f805ea43931ab9 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; _dd_s=rum=0&expire=1701800937280
2023-12-05 18:14:04 UTC	1321	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 37 32 32 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 51 72 65 69 78 31 74 62 66 58 49 76 51 4c 54 6b 6c 5a 6d 4d 78 65 51 4a 72 74 4b 46 53 5a 76 37 37 69 58 6b 7a 2d 4c 66 72 30 71 35 53 37 6a 66 39 52 39 46 35 64 57 6e 37 53 4f 71 4c 72 72 77 67 69 70 47 47 5a 48 45 57 30 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 31 38 35 34 35 36 39 33 36 38 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 97220X-GUploader-UploadID: ABPtcPoQreix1tbfXIvQLTklZmMxeQJrtKFSZv77iXkz-Lfr0q5S7jf9R9F5dWn7SOqLrrwgipGGZHEW0gx-goog-generation: 1701718545693683x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:14:04 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:04 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 5d 2c 7b 22 2f 74 75 31 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 29 29 2c 6e 2e 64 28 74 2c 22 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[59],{"/tu1":function(e,t,n){"use strict";n.d(t,"a",(function(){return g})),n.d(t,"b",(function(){return h})),n.d(t,"c",(function(){return b})),n.d(t,"e",(function(){return v})),n.d(t,"h",(function(){ret
2023-12-05 18:14:04 UTC	16384	IN	Data Raw: 74 52 65 73 74 61 75 72 61 6e 74 73 5f 30 38 32 33 5f 72 65 67 69 22 2c 61 3d 22 4d 54 52 5f 49 6e 74 65 72 61 63 74 69 76 65 46 65 61 74 75 72 65 73 5f 42 65 73 74 52 65 73 74 61 75 72 61 6e 74 73 5f 30 38 32 33 5f 61 6e 6f 6e 22 2c 6f 3d 22 62 65 73 74 52 65 73 74 61 75 72 61 6e 74 73 22 7d 76 61 72 20 6d 3d 4f 62 6a 65 63 74 28 44 2e 64 29 28 6e 75 6c 6c 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 75 73 65 72 29 3f 72 3a 61 2c 70 3d 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 5b 6d 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 76 61 72 69 61 6e 74 3b 73 77 69 74 63 68 28 4f 62 6a 65 63 74 28 45 2e 65 29 28 6d 29 2c 70 29 7b 63 61 73 65 22 31 5f 48 69 67 68 43 75 73 74 6f 6d 46 72 69 63 74 69 6f 6e 22 3a 63 61 73 65 Data Ascii: tRestaurants_0823_regi",a="MTR_InteractiveFeatures_BestRestaurants_0823_anon",o="bestRestaurants"}var m=Object(D.d)(null==d?void 0:d.user)?r:a,p=null==n\|\|null===(t=n[m])\|\|void 0===t?void 0:t.variant;switch(Object(E.e)(m),p){case"1_HighCustomFriction":case
2023-12-05 18:14:04 UTC	16384	IN	Data Raw: 6f 72 6d 3b 22 2c 51 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 6d 6f 62 69 6c 65 4c 61 72 67 65 2c 22 7b 22 2c 54 65 2c 22 3a 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 68 65 6d 65 2e 64 6f 63 6b 43 6f 6e 74 65 6e 74 48 65 69 67 68 74 2e 6d 6f 62 69 6c 65 4c 61 72 67 65 2b 65 2e 74 68 65 6d 65 2e 64 6f 63 6b 48 65 61 64 65 72 48 65 69 67 68 74 2e 6d 6f 62 69 6c 65 4c 61 72 67 65 2b 65 2e 74 68 65 6d 65 2e 64 6f 63 6b 48 65 61 64 65 72 4f 66 66 73 65 74 2e 6d 6f 62 69 6c 65 4c 61 72 67 65 7d 29 2c 22 70 78 3b 62 6f 74 74 6f 6d 3a 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 2d 28 65 2e 74 68 65 6d 65 2e 64 6f 63 6b 43 6f 6e 74 65 6e 74 48 65 69 67 68 74 2e 6d 6f 62 69 6c 65 4c 61 72 67 65 2b 65 2e 74 Data Ascii: orm;",Q.a.breakpoint.mobileLarge,"{",Te,":",(function(e){return e.theme.dockContentHeight.mobileLarge+e.theme.dockHeaderHeight.mobileLarge+e.theme.dockHeaderOffset.mobileLarge}),"px;bottom:",(function(e){return 0-(e.theme.dockContentHeight.mobileLarge+e.t
2023-12-05 18:14:04 UTC	16384	IN	Data Raw: 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 28 7b 6d 6f 62 69 6c 65 53 6d 61 6c 6c 43 75 73 74 6f 6d 3a 22 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 37 35 70 78 29 22 2c 6c 61 72 67 65 43 75 73 74 6f 6d 3a 22 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 32 30 70 78 29 22 7d 2c 43 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 29 2c 42 74 3d 7b 74 68 65 6d 65 49 44 3a 22 65 6d 61 69 6c 53 69 67 6e 75 70 44 6f 63 6b 54 68 65 6d 65 22 2c 75 73 65 4d 61 78 48 65 69 67 68 74 3a 21 30 2c 64 6f 63 6b 43 6f 6e 74 65 6e 74 48 65 69 67 68 74 3a 7b 6d 6f 62 69 6c 65 53 6d 61 6c 6c 3a 32 30 30 2c 6d 6f 62 69 6c 65 4c 61 72 67 65 3a 32 30 30 2c 73 6d 61 6c 6c 3a 31 36 30 2c 6d 65 64 69 75 6d 4c 61 72 67 65 3a 31 34 30 7d 2c 64 6f 63 6b 48 65 61 Data Ascii: }))}return e}({mobileSmallCustom:"@media (min-width: 375px)",largeCustom:"@media (min-width: 1220px)"},C.a.breakpoint),Bt={themeID:"emailSignupDockTheme",useMaxHeight:!0,dockContentHeight:{mobileSmall:200,mobileLarge:200,small:160,mediumLarge:140},dockHea
2023-12-05 18:14:04 UTC	16384	IN	Data Raw: 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 61 6d 65 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 22 3a 74 2c 69 3d 65 2e 63 6f 6e 74 65 78 74 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 22 22 3a 69 2c 72 3d 65 2e 6c 61 62 65 6c 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 22 22 3a 72 2c 68 3d 65 2e 72 65 67 69 6f 6e 2c 62 3d 65 2e 62 32 62 49 50 53 65 67 6d 65 6e 74 49 44 2c 76 3d 4f 62 6a 65 63 74 28 6c 2e 75 73 65 54 72 61 63 6b 69 6e 67 29 28 29 2c 6b 3d 4f 62 6a 65 63 74 28 64 2e 61 29 28 29 2e 70 61 67 65 43 6f 75 6e 74 2c 79 3d 22 2f 22 3d 3d 3d 28 4f 62 6a 65 63 74 28 73 2e 75 73 65 4c 6f 63 61 74 69 6f 6e 29 28 29 7c 7c 7b 7d 29 2e 70 Data Ascii: tyDescriptor(n,t))}))}return e}function h(e){var t=e.name,n=void 0===t?"":t,i=e.context,a=void 0===i?"":i,r=e.label,f=void 0===r?"":r,h=e.region,b=e.b2bIPSegmentID,v=Object(l.useTracking)(),k=Object(d.a)().pageCount,y="/"===(Object(s.useLocation)()\|\|{}).p
2023-12-05 18:14:04 UTC	15300	IN	Data Raw: 73 65 20 6f 66 20 65 6c 65 63 74 69 6f 6e 73 2c 20 70 6f 6c 69 74 69 63 73 20 61 6e 64 20 70 6f 6c 6c 69 6e 67 2e 22 7d 2c 43 4c 49 4d 3a 7b 6b 69 63 6b 65 72 3a 22 47 65 74 20 63 6c 65 61 72 2d 65 79 65 64 20 61 6e 61 6c 79 73 69 73 22 2c 63 61 70 74 69 6f 6e 3a 22 59 6f 75 72 20 6d 75 73 74 2d 72 65 61 64 20 67 75 69 64 65 20 74 6f 20 74 68 65 20 63 6c 69 6d 61 74 65 20 63 72 69 73 69 73 2e 22 7d 2c 54 45 3a 7b 6b 69 63 6b 65 72 3a 22 59 6f 75 72 20 71 75 65 73 74 69 6f 6e 73 20 61 6e 73 77 65 72 65 64 22 2c 63 61 70 74 69 6f 6e 3a 22 45 78 70 65 72 74 20 61 64 76 69 63 65 20 6f 6e 20 6c 69 66 65 e2 80 99 73 20 74 72 69 63 6b 69 65 73 74 20 73 69 74 75 61 74 69 6f 6e 73 20 61 6e 64 20 6d 6f 72 61 6c 20 64 69 6c 65 6d 6d 61 73 2e 20 22 7d 2c 50 54 47 3a Data Ascii: se of elections, politics and polling."},CLIM:{kicker:"Get clear-eyed analysis",caption:"Your must-read guide to the climate crisis."},TE:{kicker:"Your questions answered",caption:"Expert advice on lifes trickiest situations and moral dilemmas. "},PTG:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50520	44.215.149.250	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	524	OUT	GET /header/auction?lib=prebid&v=8.1.0&referrer=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&tmax=10000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:14:04 UTC	940	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 35 20 4f 63 74 20 31 39 39 32 20 32 30 3a 31 30 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 58 2d 58 53 53 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:04 GMTContent-Type: application/json; charset=utf-8Content-Length: 19Connection: closeCache-Control: no-cache, no-store, must-revalidateExpires: Thu, 15 Oct 1992 20:10:00 GMTPragma: no-cacheX-XSS
2023-12-05 18:14:04 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50530	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1557	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad^https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html=z3DiZN4mOIhoKcvokH-eY6zy
2023-12-05 18:14:04 UTC	507	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 63 6f 6e 74 65 78 74 5f 69 64 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 74 6f 5f 6d 61 6b 65 5f 74 65 73 74 5f 63 6f 6e 74 65 78 74 5f 69 64 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 37 49 78 69 53 41 73 68 38 79 6f 54 67 66 53 41 42 42 4f 46 6a 69 32 33 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 61 74 69 76 65 5f 61 70 70 5f 61 64 73 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 Data Ascii: [{"context_id":"context_id_placeholder_to_make_test_context_id","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"7IxiSAsh8yoTgfSABBOFji23","client_lib":"v1.3.0","sourceApp":"native_app_ads","subject":"dfp-ad-events","how":"beacon","client_ts":17018000
2023-12-05 18:14:04 UTC	758	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 34 3a 30 33 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 41 63 74 69 76 65 3d 74 72 75 65 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 65 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 Data Ascii: HTTP/1.1 200 OKset-cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; Path=/; Domain=nytimes.com; Expires=Wed, 04 Dec 2024 18:14:03 GMT; Max-Age=31536000; Secure; SameSite=Noneset-cookie: sessionActive=true; Path=/; Domain=et.nytimes.com; Expires=Tue, 05 Dec 2023
2023-12-05 18:14:04 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50521	104.18.36.155	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	425	OUT	GET /openrtb/pbjs?s=995821 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:14:04 UTC	606	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 34 34 34 66 64 65 34 38 31 61 33 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 Data Ascii: HTTP/1.1 204 No ContentDate: Tue, 05 Dec 2023 18:14:04 GMTContent-Type: application/jsonConnection: closeCF-Ray: 830e4444fde481a3-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Pragma: no-cacheReport-To: {"endpoints":[{"url"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50519	18.160.1.134	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	792	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=0&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22top%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22top_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:04 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 30 31 56 52 4a 34 50 52 58 59 48 47 42 53 46 54 47 36 33 4a 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 34 37 34 37 34 37 34 37 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:04 GMTx-amz-rid: 01VRJ4PRXYHGBSFTG63JStrict-Transport-Security: max-age=47474747; includeSubDomains; prel
2023-12-05 18:14:04 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50531	68.67.160.184	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	437	OUT	GET /ut/v3/prebid HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3114214532401325210; icu=ChgIkbx3EAoYAyADKAMw6NC9qwY4A0ADSAMQ6NC9qwYYAg..
2023-12-05 18:14:04 UTC	934	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 33 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 31 35 20 4e 6f 76 20 32 30 30 38 20 31 36 3a 30 30 Data Ascii: HTTP/1.1 200 OKServer: nginx/1.21.3Date: Tue, 05 Dec 2023 18:14:04 GMTContent-Type: application/json; charset=utf-8Content-Length: 57Connection: closeCache-Control: no-store, no-cache, privatePragma: no-cacheExpires: Sat, 15 Nov 2008 16:00
2023-12-05 18:14:04 UTC	57	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 6a 73 6f 6e 70 20 72 65 71 75 69 72 65 73 20 61 20 75 72 69 65 6e 63 6f 64 65 64 20 71 75 65 72 79 73 74 72 69 6e 67 20 70 61 72 61 6d 22 7d Data Ascii: {"error":"jsonp requires a uriencoded querystring param"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50532	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1439	OUT	GET /activityi;dc_pre=CNvg15jz-IIDFUvnKAUdpPUMZA;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:04 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:14:04 UTC	589	IN	Data Raw: 33 30 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4e 76 67 31 35 6a 7a 2d 49 49 44 46 55 Data Ascii: 30b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNvg15jz-IIDFU
2023-12-05 18:14:04 UTC	197	IN	Data Raw: 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 61 66 72 69 63 61 25 32 46 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html"/></body></html>
2023-12-05 18:14:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50534	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:04 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:04 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50540	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1557	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://51b24b43c395e028672cce35b5b8c325.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad^https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html=z3DiZN4mOIhoKcvokH-eY6zy
2023-12-05 18:14:04 UTC	507	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 63 6f 6e 74 65 78 74 5f 69 64 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 74 6f 5f 6d 61 6b 65 5f 74 65 73 74 5f 63 6f 6e 74 65 78 74 5f 69 64 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 79 34 42 61 4e 6f 61 4b 2d 4a 39 64 7a 5a 38 73 6e 36 70 38 70 66 62 2d 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 4f 76 6c 37 64 4d 6e 30 61 31 67 35 30 5a 49 4c 34 62 64 7a 6d 6a 45 62 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 61 74 69 76 65 5f 61 70 70 5f 61 64 73 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 64 66 70 2d 61 64 2d 65 76 65 6e 74 73 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 Data Ascii: [{"context_id":"context_id_placeholder_to_make_test_context_id","pageview_id":"y4BaNoaK-J9dzZ8sn6p8pfb-","event_id":"Ovl7dMn0a1g50ZIL4bdzmjEb","client_lib":"v1.3.0","sourceApp":"native_app_ads","subject":"dfp-ad-events","how":"beacon","client_ts":17018000
2023-12-05 18:14:04 UTC	758	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 30 34 20 44 65 63 20 32 30 32 34 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 65 73 73 69 6f 6e 41 63 74 69 76 65 3d 74 72 75 65 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 65 74 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 Data Ascii: HTTP/1.1 200 OKset-cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; Path=/; Domain=nytimes.com; Expires=Wed, 04 Dec 2024 18:14:04 GMT; Max-Age=31536000; Secure; SameSite=Noneset-cookie: sessionActive=true; Path=/; Domain=et.nytimes.com; Expires=Tue, 05 Dec 2023
2023-12-05 18:14:04 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50536	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	2115	OUT	GET /svc/nyt/data-layer?assetUrl=http%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&caller_id=nyt-vi&jkcb=1701800040554&referrer=&sourceApp=nyt-vi HTTP/1.1 Host: a.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; jkidd-p=prevPage=&currPage=; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=6; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:04 UTC	867	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6a 6b 69 64 64 2d 73 3d 72 65 66 65 72 72 65 72 3d 26 6c 61 6e 64 69 6e 67 3d 26 73 74 61 72 74 3d 31 37 30 31 38 30 30 30 30 39 32 38 32 26 69 73 4e 65 77 3d 30 26 70 61 67 65 49 6e 64 65 78 3d 37 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6a 6b 69 64 64 2d 70 3d 70 72 65 76 50 61 67 65 3d 26 63 75 72 72 50 61 67 65 3d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d Data Ascii: HTTP/1.1 200 OKcontent-type: application/json; charset=UTF-8set-cookie: jkidd-s=referrer=&landing=&start=1701800009282&isNew=0&pageIndex=7; Path=/; HttpOnlyset-cookie: jkidd-p=prevPage=&currPage=; Path=/; Max-Age=31536000; HttpOnlyset-cookie: nyt-
2023-12-05 18:14:04 UTC	1055	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 74 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 77 61 74 53 65 67 73 22 3a 22 22 2c 22 6e 79 74 64 4f 74 68 65 72 44 61 74 61 22 3a 7b 7d 2c 22 73 75 62 49 6e 66 6f 22 3a 7b 22 6d 6f 64 69 66 69 65 64 22 3a 30 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 52 65 71 75 65 73 74 22 3a 31 37 30 31 38 30 30 30 34 34 34 34 37 2c 22 61 63 74 69 76 65 44 61 79 73 22 3a 22 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 22 2c 22 75 69 64 22 3a 30 2c 22 61 64 76 22 3a 31 2c 22 61 37 64 76 22 3a 31 2c 22 61 31 34 64 76 22 3a 31 2c 22 61 32 31 64 76 22 3a 31 2c 22 6c 61 73 74 4b 6e 6f 77 6e 54 79 70 Data Ascii: {"user":{"type":"anon","watSegs":"","nytdOtherData":{},"subInfo":{"modified":0},"tracking":{"lastRequest":1701800044447,"activeDays":"[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1]","uid":0,"adv":1,"a7dv":1,"a14dv":1,"a21dv":1,"lastKnownTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50535	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1137	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=No%20Author&n=1&f=00001&c=0.52&x=0&m=0&y=1210&o=1263&w=907&j=45&R=0&W=0&I=1&E=6&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2Flive%2F2023%2F12%2F05%2Fworld%2Fisrael-hamas-war-gaza-news&b=7518&t=RbJMdCJWPcJC1gVgIerf6xC4LqZW&V=141&tz=-60&_acct=anon&_vi=&_vp=https://vp.nyt.com/video/2023/12/05/113940_1_05vid-khan-younis-hospital_wg_480p.mp4&_vdd=video%40nytimes.com&_vs=s1&_vt=ct&_vap=&_vtn=https%3A%2F%2Fstatic01.nyt.com%2Fimages%2F2023%2F12%2F05%2Fworld%2Fmiddleeast%2FKhan-Younis-Hospital%2FKhan-Younis-Hospital-threeByTwoMediumAt2X.jpg%3Fquality%3D75%26auto%3Dwebp&_vd=14880&sn=4&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=1&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:04 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:04 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:14:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50541	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 138 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:04 UTC	138	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 39 32 38 36 33 38 30 32 38 32 36 30 30 37 32 31 32 32 38 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nytimes.com","trigger_debug_key":"9286380282600721228"},"type":"trigger-no-matching-source"}]
2023-12-05 18:14:04 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50529	35.227.252.103	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	515	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800031460586
2023-12-05 18:14:04 UTC	175	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:14:04 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50538	142.251.16.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 139 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:04 UTC	139	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 37 30 39 39 30 31 31 33 30 39 37 37 32 32 31 37 32 36 33 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nytimes.com","trigger_debug_key":"17099011309772217263"},"type":"trigger-no-matching-source"}]
2023-12-05 18:14:04 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50537	18.160.1.134	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	798	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=1&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22bottom%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22bottom_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:04 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 33 37 56 53 45 45 42 5a 32 58 54 59 4a 58 33 43 4b 4e 51 37 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 34 37 34 37 34 37 34 37 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:04 GMTx-amz-rid: 37VSEEBZ2XTYJX3CKNQ7Strict-Transport-Security: max-age=47474747; includeSubDomains; prel
2023-12-05 18:14:04 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50539	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1849	OUT	GET /v1/purr-cache HTTP/1.1 Host: purr.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:04 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 75 72 72 2d 63 61 63 68 65 3d 3c 4b 30 3c 72 3c 43 5f 3c 47 5f 3c 53 30 3c 61 30 3c 75 61 3c 54 30 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6e 79 74 69 6d 65 73 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 53 61 74 2c 20 30 34 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 35 34 3a 30 34 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 37 64 66 34 66 34 34 33 39 65 64 65 30 39 62 31 62 34 63 64 32 37 64 65 31 30 65 62 61 38 30 35 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 Data Ascii: HTTP/1.1 200 OKset-cookie: purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; Path=/; Domain=nytimes.com; Expires=Sat, 04 Jan 2025 05:54:04 GMT; HttpOnly; Secure; SameSite=Laxvary: Originx-cloud-trace-context: 7df4f4439ede09b1b4cd27de10eba805date: Tue, 05 Dec 20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50545	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	746	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/style.css HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:04 UTC	786	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-EncodingContent-Type: text/cssAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Repor
2023-12-05 18:14:04 UTC	466	IN	Data Raw: 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 70 78 3b 7d 0a 23 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 67 72 61 79 3b 0a 2f 2a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 67 72 61 79 3b 2a 2f 0a 09 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 77 69 Data Ascii: body {margin: 0px;}#container {background-color: white;border: 1px solid gray;/box-shadow: inset 0 0 0 1px gray;/-moz-box-sizing: border-box;box-sizing: border-box;cursor: pointer;display: none;overflow: hidden;position: absolute;wi
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 73 70 72 69 74 65 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 74 6f 70 20 6c 65 66 74 3b 20 77 69 64 74 68 3a 20 39 37 30 70 78 3b 20 68 65 69 67 68 74 3a 20 31 31 38 34 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 39 37 30 70 78 20 31 31 38 34 70 78 3b 20 20 7d 20 0a 2e 73 70 72 69 74 65 2e 63 74 61 2d 61 72 72 6f 77 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 30 3b 20 77 69 64 74 68 3a 20 37 70 78 3b 20 68 65 69 67 68 74 3a 20 37 70 78 3b 20 7d 20 0a 2e 73 70 72 69 74 65 2e 63 74 61 2d 74 65 78 74 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 32 70 78 3b 20 77 69 64 74 68 3a 20 31 31 38 70 78 3b 20 68 65 69 67 Data Ascii: ackground: url('sprite.png') no-repeat top left; width: 970px; height: 1184px; background-size: 970px 1184px; } .sprite.cta-arrow { background-position: 0 0; width: 7px; height: 7px; } .sprite.cta-text { background-position: 0 -12px; width: 118px; heig
2023-12-05 18:14:04 UTC	929	IN	Data Raw: 74 68 3a 20 33 36 35 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 31 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 31 32 37 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 33 38 35 70 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 6d 61 73 6b 34 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 39 37 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 31 36 34 70 78 3b 0a 20 20 20 20 6c 65 66 74 3a 20 33 38 37 70 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 6d 61 73 6b 35 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 32 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 31 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 33 37 31 70 78 3b 0a 20 20 20 20 6c 65 66 74 Data Ascii: th: 365px; height: 31px; top: 127px; left: 385px; overflow: hidden;}.mask4{ width: 197px; height: 25px; top: 164px; left: 387px; overflow: hidden;}.mask5{ width: 162px; height: 21px; top: 371px; left

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50543	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	2212	OUT	GET /vi-assets/static-assets/carddeck-5910608c6db84b2a3809.js?_sw-precache=c79bf57c8f2ec2a2d41679b317945b1e HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; _dd_s=rum=0&expire=1701800943219
2023-12-05 18:14:04 UTC	1324	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 39 37 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 76 41 68 2d 53 4e 43 6f 6a 4c 56 44 48 36 52 6c 33 45 4c 42 70 59 50 59 5a 61 67 54 30 6b 42 52 46 73 54 35 4c 53 54 6b 6a 58 74 5a 6d 4d 75 37 30 30 6e 44 78 70 70 32 64 47 6d 49 39 45 62 54 49 72 42 47 44 65 2d 31 47 44 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 35 37 30 32 36 37 36 36 30 36 31 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 5971X-GUploader-UploadID: ABPtcPovAh-SNCojLVDH6Rl3ELBpYPYZagT0kBRFsT5LSTkjXtZmMu700nDxpp2dGmI9EbTIrBGDe-1GDAx-goog-generation: 1701570267660611x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:04 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 30 5d 2c 7b 22 30 52 49 32 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 72 28 6e 28 22 41 4c 45 38 22 29 29 2c 61 3d 72 28 6e 28 22 4d 7a 41 62 22 29 29 2c 69 3d 72 28 6e 28 22 70 66 57 51 22 29 29 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 30 2c 6f 2e 64 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[60],{"0RI2":function(e,t,n){"use strict";var r=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=r(n("ALE8")),a=r(n("MzAb")),i=r(n("pfWQ"));t.default=function(e,t){(0,o.d
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 70 65 6f 66 20 50 72 6f 78 79 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 28 30 2c 6c 2e 64 65 66 61 75 6c 74 29 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 6f 3d 28 30 2c 6c 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 72 2c 61 72 67 75 6d 65 6e 74 73 2c 6f 29 7d Data Ascii: peof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(e){return!1}}();return function(){var n,r=(0,l.default)(e);if(t){var o=(0,l.default)(this).constructor;n=Reflect.construct(r,arguments,o)}
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 72 20 72 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 69 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 29 7b 76 61 72 20 75 3d 61 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 69 29 3a 6e 75 6c 6c 3b 75 26 26 28 75 2e 67 65 74 7c 7c 75 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 69 2c 75 29 3a 72 5b 69 5d 3d 65 5b 69 5d 7d 72 2e 64 65 66 61 75 6c Data Ascii: r r={},a=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var i in e)if("default"!==i&&Object.prototype.hasOwnProperty.call(e,i)){var u=a?Object.getOwnPropertyDescriptor(e,i):null;u&&(u.get\|\|u.set)?Object.defineProperty(r,i,u):r[i]=e[i]}r.defaul
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 52 65 66 29 28 29 2c 53 3d 4f 3f 6e 75 6c 6c 3a 28 30 2c 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 29 28 29 3b 72 65 74 75 72 6e 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 67 3f 52 2e 63 75 72 72 65 6e 74 2e 6c 61 73 74 43 68 69 6c 64 3a 52 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 28 30 2c 6c 2e 68 61 6e 64 6c 65 41 64 42 6c 6f 63 6b 65 72 44 65 74 65 63 74 65 64 29 28 68 29 2c 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 65 2c 7b 69 64 3a 77 2c 70 6f 73 69 74 69 6f 6e 3a 4f 2c 73 69 7a 65 4b 65 79 3a 50 2c 6c 61 7a 79 4c 6f 61 64 3a 6d 2c 74 72 75 65 50 6f 73 69 74 69 6f 6e 3a 53 2c 61 64 54 61 72 67 65 74 69 6e 67 3a 6a 7d 29 2c 28 30 2c 76 2e 64 65 66 61 75 6c 74 29 28 6a 2c 77 29 2c 28 30 2c 6c Data Ascii: Ref)(),S=O?null:(0,s.setPosition)();return(0,i.useEffect)((function(){var e=g?R.current.lastChild:R.current;return(0,l.handleAdBlockerDetected)(h),(0,c.default)(e,{id:w,position:O,sizeKey:P,lazyLoad:m,truePosition:S,adTargeting:j}),(0,v.default)(j,w),(0,l
2023-12-05 18:14:04 UTC	455	IN	Data Raw: 45 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 75 73 65 72 53 74 79 6c 65 3a 7b 7d 2c 69 73 50 72 69 6f 72 69 74 69 7a 65 64 3a 21 31 2c 73 69 7a 65 4b 65 79 3a 22 22 2c 6c 61 7a 79 4c 6f 61 64 3a 21 30 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 61 64 54 61 72 67 65 74 69 6e 67 3a 7b 7d 7d 3b 76 61 72 20 50 3d 4f 3b 74 2e 64 65 66 61 75 6c 74 3d 50 7d 2c 74 6f 4f 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 72 28 6e 28 22 41 4c 45 38 22 Data Ascii: Empty:function(){},userStyle:{},isPrioritized:!1,sizeKey:"",lazyLoad:!0,position:null,adTargeting:{}};var P=O;t.default=P},toO0:function(e,t,n){"use strict";var r=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var o=r(n("ALE8"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50542	142.251.111.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1439	OUT	GET /activityi;dc_pre=CMOT7Jjz-IIDFXf9KAUddlEBiw;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: 5290727.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:05 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate
2023-12-05 18:14:05 UTC	589	IN	Data Raw: 33 30 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4d 4f 54 37 4a 6a 7a 2d 49 49 44 46 58 Data Ascii: 30b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMOT7Jjz-IIDFX
2023-12-05 18:14:05 UTC	197	IN	Data Raw: 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 25 32 46 32 30 32 33 25 32 46 31 32 25 32 46 30 35 25 32 46 77 6f 72 6c 64 25 32 46 61 66 72 69 63 61 25 32 46 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html"/></body></html>
2023-12-05 18:14:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50544	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	665	OUT	GET /ads/studio/cached_libs/gsap_3.2.4_min.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:04 UTC	766	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:04 UTC	486	IN	Data Raw: 2f 2a 21 0a 20 2a 20 47 53 41 50 20 33 2e 32 2e 34 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 72 65 65 6e 73 6f 63 6b 2e 63 6f 6d 0a 20 2a 20 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 2c 20 47 72 65 65 6e 53 6f 63 6b 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 53 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 61 74 20 68 74 74 70 73 3a 2f 2f 67 72 65 65 6e 73 6f 63 6b 2e 63 6f 6d 2f 73 74 61 6e 64 61 72 64 2d 6c 69 63 65 6e 73 65 20 6f 72 20 66 6f 72 20 43 6c 75 62 20 47 72 65 65 6e 53 6f 63 6b 20 6d 65 6d 62 65 72 73 2c 20 74 68 65 20 61 67 72 65 65 6d 65 6e 74 20 69 73 73 75 65 64 20 77 69 74 68 20 74 68 61 74 20 6d 65 6d 62 65 72 73 68 69 70 2e 0a 20 2a 20 40 61 75 74 68 Data Ascii: /! GSAP 3.2.4 * https://greensock.com * * @license Copyright 2020, GreenSock. All rights reserved. * Subject to the terms at https://greensock.com/standard-license or for Club GreenSock members, the agreement issued with that membership. * @auth
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 74 2c 65 29 7b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 2c 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 29 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 Data Ascii: {"use strict";function _inheritsLoose(t,e){t.prototype=Object.create(e.prototype),(t.prototype.constructor=t).__proto__=e}function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called"
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 6e 64 28 31 65 35 2a 74 29 2f 31 65 35 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 62 61 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 74 2e 69 6e 64 65 78 4f 66 28 65 5b 69 5d 29 3c 30 26 26 2b 2b 69 3c 72 3b 29 3b 72 65 74 75 72 6e 20 69 3c 72 7d 66 75 6e 63 74 69 6f 6e 20 63 61 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 2c 6e 3d 70 28 74 5b 31 5d 29 2c 61 3d 28 6e 3f 32 3a 31 29 2b 28 65 3c 32 3f 30 3a 31 29 2c 6f 3d 74 5b 61 5d 3b 69 66 28 6e 26 26 28 6f 2e 64 75 72 61 74 69 6f 6e 3d 74 5b 31 5d 29 2c 6f 2e 70 61 72 65 6e 74 3d 72 2c 65 29 7b 66 6f 72 28 69 3d 6f 3b 72 26 26 21 28 22 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 22 69 6e 20 69 29 3b 29 69 3d 72 2e 76 61 72 73 2e 64 65 66 61 75 6c 74 73 7c 7c 7b 7d 2c 72 Data Ascii: nd(1e5*t)/1e5\|\|0}function ba(t,e){for(var r=e.length,i=0;t.indexOf(e[i])<0&&++i<r;);return i<r}function ca(t,e,r){var i,n=p(t[1]),a=(n?2:1)+(e<2?0:1),o=t[a];if(n&&(o.duration=t[1]),o.parent=r,e){for(i=o;r&&!("immediateRender"in i);)i=r.vars.defaults\|\|{},r
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 5d 3d 6e 29 2c 65 2e 5f 6e 65 78 74 3d 65 2e 5f 70 72 65 76 3d 65 2e 70 61 72 65 6e 74 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 74 2c 65 29 7b 21 74 2e 70 61 72 65 6e 74 7c 7c 65 26 26 21 74 2e 70 61 72 65 6e 74 2e 61 75 74 6f 52 65 6d 6f 76 65 43 68 69 6c 64 72 65 6e 7c 7c 74 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 28 74 29 2c 74 2e 5f 61 63 74 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 3b 65 3b 29 65 2e 5f 64 69 72 74 79 3d 31 2c 65 3d 65 2e 70 61 72 65 6e 74 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 72 65 70 65 61 74 3f 5f 74 28 74 2e 5f 74 54 69 6d 65 2c 74 3d 74 2e 64 75 72 61 74 69 6f 6e 28 29 2b 74 2e 5f 72 44 65 6c 61 79 29 2a Data Ascii: ]=n),e._next=e._prev=e.parent=null}function qa(t,e){!t.parent\|\|e&&!t.parent.autoRemoveChildren\|\|t.parent.remove(t),t._act=0}function ra(t){for(var e=t;e;)e._dirty=1,e=e.parent;return t}function ua(t){return t._repeat?_t(t._tTime,t=t.duration()+t._rDelay)*
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 6c 61 7a 79 7c 7c 21 74 2e 5f 64 75 72 26 26 74 2e 76 61 72 73 2e 6c 61 7a 79 29 26 26 64 21 3d 3d 4f 74 2e 66 72 61 6d 65 3f 28 6f 74 2e 70 75 73 68 28 74 29 2c 74 2e 5f 6c 61 7a 79 3d 5b 65 2c 69 5d 2c 31 29 3a 76 6f 69 64 20 30 3a 31 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 74 2e 5f 72 65 70 65 61 74 2c 6e 3d 61 61 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 5f 64 75 72 3d 6e 2c 74 2e 5f 74 44 75 72 3d 69 3f 69 3c 30 3f 31 65 31 32 3a 61 61 28 6e 2a 28 69 2b 31 29 2b 74 2e 5f 72 44 65 6c 61 79 2a 69 29 3a 6e 2c 72 7c 7c 72 61 28 74 2e 70 61 72 65 6e 74 29 2c 74 2e 70 61 72 65 6e 74 26 26 78 61 28 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 45 61 28 74 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 74 Data Ascii: lazy\|\|!t._dur&&t.vars.lazy)&&d!==Ot.frame?(ot.push(t),t._lazy=[e,i],1):void 0:1}function Da(t,e,r){var i=t._repeat,n=aa(e);return t._dur=n,t._tDur=i?i<0?1e12:aa(n(i+1)+t._rDelayi):n,r\|\|ra(t.parent),t.parent&&xa(t),t}function Ea(t){return t instanceof Bt
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 72 5b 66 2b 2b 5d 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 29 26 26 66 3c 64 3b 29 3b 66 2d 2d 7d 66 6f 72 28 63 3d 76 5b 64 5d 3d 5b 5d 2c 69 3d 79 3f 4d 61 74 68 2e 6d 69 6e 28 66 2c 64 29 2a 62 2d 2e 35 3a 6d 25 66 2c 6e 3d 79 3f 64 2a 77 2f 66 2d 2e 35 3a 6d 2f 66 7c 30 2c 6c 3d 52 2c 75 3d 68 3d 30 3b 75 3c 64 3b 75 2b 2b 29 61 3d 75 25 66 2d 69 2c 73 3d 6e 2d 28 75 2f 66 7c 30 29 2c 63 5b 75 5d 3d 6f 3d 54 3f 4d 61 74 68 2e 61 62 73 28 22 79 22 3d 3d 3d 54 3f 73 3a 61 29 3a 6a 28 61 2a 61 2b 73 2a 73 29 2c 68 3c 6f 26 26 28 68 3d 6f 29 2c 6f 3c 6c 26 26 28 6c 3d 6f 29 3b 22 72 61 6e 64 6f 6d 22 3d 3d 3d 6d 26 26 50 61 28 63 29 2c 63 2e 6d 61 78 3d 68 2d 6c 2c 63 2e 6d 69 6e 3d 6c 2c 63 2e 76 3d 64 3d 28 Data Ascii: r[f++].getBoundingClientRect().left)&&f<d;);f--}for(c=v[d]=[],i=y?Math.min(f,d)b-.5:m%f,n=y?dw/f-.5:m/f\|0,l=R,u=h=0;u<d;u++)a=u%f-i,s=n-(u/f\|0),c[u]=o=T?Math.abs("y"===T?s:a):j(aa+ss),h<o&&(h=o),o<l&&(l=o);"random"===m&&Pa(c),c.max=h-l,c.min=l,c.v=d=(
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 7b 72 65 74 75 72 6e 20 48 61 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 7e 7e 72 28 74 29 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 2c 69 2c 6e 2c 61 3d 30 2c 73 3d 22 22 3b 7e 28 65 3d 74 2e 69 6e 64 65 78 4f 66 28 22 72 61 6e 64 6f 6d 28 22 2c 61 29 29 3b 29 69 3d 74 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 65 29 2c 6e 3d 22 5b 22 3d 3d 3d 74 2e 63 68 61 72 41 74 28 65 2b 37 29 2c 72 3d 74 2e 73 75 62 73 74 72 28 65 2b 37 2c 69 2d 65 2d 37 29 2e 6d 61 74 63 68 28 6e 3f 6e 74 3a 51 29 2c 73 2b 3d 74 2e 73 75 62 73 74 72 28 61 2c 65 2d 61 29 2b 54 61 28 6e 3f 72 3a 2b 72 5b 30 5d 2c 2b 72 5b 31 5d 2c 2b 72 5b 32 5d 7c 7c 31 65 2d 35 29 2c 61 3d 69 2b 31 3b 72 65 74 75 72 6e 20 73 Data Ascii: {return Ha(t,function(t){return e[~~r(t)]})}function $a(t){for(var e,r,i,n,a=0,s="";~(e=t.indexOf("random(",a));)i=t.indexOf(")",e),n="["===t.charAt(e+7),r=t.substr(e+7,i-e-7).match(n?nt:Q),s+=t.substr(a,e-a)+Ta(n?r:+r[0],+r[1],+r[2]\|\|1e-5),a=i+1;return s
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 2c 61 29 29 2b 28 6c 3d 4d 61 74 68 2e 6d 69 6e 28 69 2c 6e 2c 61 29 29 29 2f 32 2c 68 3d 3d 3d 6c 3f 73 3d 6f 3d 30 3a 28 66 3d 68 2d 6c 2c 6f 3d 2e 35 3c 75 3f 66 2f 28 32 2d 68 2d 6c 29 3a 66 2f 28 68 2b 6c 29 2c 73 3d 68 3d 3d 3d 69 3f 28 6e 2d 61 29 2f 66 2b 28 6e 3c 61 3f 36 3a 30 29 3a 68 3d 3d 3d 6e 3f 28 61 2d 69 29 2f 66 2b 32 3a 28 69 2d 6e 29 2f 66 2b 34 2c 73 2a 3d 36 30 29 2c 63 5b 30 5d 3d 7e 7e 28 73 2b 2e 35 29 2c 63 5b 31 5d 3d 7e 7e 28 31 30 30 2a 6f 2b 2e 35 29 2c 63 5b 32 5d 3d 7e 7e 28 31 30 30 2a 75 2b 2e 35 29 29 2c 72 26 26 63 2e 6c 65 6e 67 74 68 3c 34 26 26 28 63 5b 33 5d 3d 31 29 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 6b 62 28 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 5b 5d 2c 6e 3d 2d 31 3b 72 65 74 75 72 6e 20 74 2e 73 70 6c 69 Data Ascii: ,a))+(l=Math.min(i,n,a)))/2,h===l?s=o=0:(f=h-l,o=.5<u?f/(2-h-l):f/(h+l),s=h===i?(n-a)/f+(n<a?6:0):h===n?(a-i)/f+2:(i-n)/f+4,s=60),c[0]=~~(s+.5),c[1]=~~(100o+.5),c[2]=~~(100*u+.5)),r&&c.length<4&&(c[3]=1),c}function kb(t){var r=[],i=[],n=-1;return t.spli
2023-12-05 18:14:04 UTC	1252	IN	Data Raw: 22 22 29 2e 74 72 69 6d 28 29 3a 2b 69 2c 73 3d 72 2e 73 75 62 73 74 72 28 65 2b 31 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 5b 31 5d 29 5d 3a 72 74 2e 65 78 65 63 28 74 29 5b 31 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 66 61 29 29 3a 50 74 2e 5f 43 45 26 26 53 74 2e 74 65 73 74 28 74 29 3f 50 74 2e 5f 43 45 28 22 22 2c 74 29 3a 72 7d 66 75 6e 63 74 69 6f 6e 20 7a 62 28 74 2c 65 2c 72 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 20 65 61 73 65 4f 75 74 28 74 29 7b 72 65 74 75 72 6e 20 31 2d 65 28 31 2d 74 29 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 66 75 6e 63 74 69 6f 6e 20 65 61 73 65 49 6e 4f 75 74 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 2e 35 3f 65 28 32 2a 74 29 2f 32 3a 31 Data Ascii: "").trim():+i,s=r.substr(e+1).trim();return n}(e[1])]:rt.exec(t)[1].split(",").map(fa)):Pt._CE&&St.test(t)?Pt._CE("",t):r}function zb(t,e,r,i){void 0===r&&(r=function easeOut(t){return 1-e(1-t)}),void 0===i&&(i=function easeInOut(t){return t<.5?e(2*t)/2:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50549	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:04 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 34 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:04 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50550	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	2221	OUT	GET /vi-assets/static-assets/clientSideCapsule-3ba408d68d4aef1db00b.js?_sw-precache=bc675fef99ced23e789abb23db1f9f31 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; _dd_s=rum=0&expire=1701800943219
2023-12-05 18:14:04 UTC	1336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 36 31 39 38 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 69 32 6e 63 31 5f 76 4c 62 79 51 74 77 4a 50 49 44 45 42 72 41 66 72 43 4c 43 75 55 62 41 69 72 45 69 68 48 54 6e 4f 75 79 52 59 33 68 39 72 36 45 33 46 53 75 41 63 6a 44 55 61 75 66 73 42 37 75 45 6c 34 58 38 30 39 39 37 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 32 31 30 39 33 39 37 32 36 31 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 561980X-GUploader-UploadID: ABPtcPpi2nc1_vLbyQtwJPIDEBrAfrCLCuUbAirEihHTnOuyRY3h9r6E3FSuAcjDUaufsB7uEl4X80997wx-goog-generation: 1701721093972619x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:14:04 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 2c 31 36 33 5d 2c 7b 22 2b 6e 48 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 61 2e 6b 65 79 66 72 61 6d 65 73 29 28 22 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 20 73 63 61 6c 65 28 31 2c 31 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 3b 7d 32 35 25 7b 74 72 61 6e 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[61,163],{"+nHC":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){var e=(0,a.keyframes)("0%{transform:translate(0,0) scale(1,1) translate(0,0);}25%{trans
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 31 2e 33 32 39 39 39 39 39 32 33 37 30 36 30 35 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 35 70 78 29 3b 7d 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 31 2e 33 32 39 39 39 39 39 32 33 37 30 36 30 35 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 31 2e 33 32 39 39 39 39 39 32 33 37 30 36 30 35 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 30 29 3b 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 31 2e 33 32 39 39 39 39 39 32 33 37 30 36 30 35 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 31 2e 33 32 39 39 39 39 39 32 33 37 30 36 30 35 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 35 70 Data Ascii: px,0) translate(-11.329999923706055px,0) translate(0,5px);}25%{transform:translate(11.329999923706055px,0) translate(-11.329999923706055px,0) translate(0,0);}50%{transform:translate(11.329999923706055px,0) translate(-11.329999923706055px,0) translate(0,5p
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 6e 73 6c 61 74 65 28 30 2c 35 70 78 29 3b 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 31 30 70 78 29 3b 7d 22 29 2c 6c 3d 28 30 2c 61 2e 6b 65 79 66 72 61 6d 65 73 29 28 22 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 35 70 78 29 3b 7d 32 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 33 34 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 33 34 70 78 Data Ascii: nslate(0,5px);}100%{transform:translate(22.670000076293945px,0) translate(-22.670000076293945px,0) translate(0,10px);}"),l=(0,a.keyframes)("0%{transform:translate(34px,0) translate(-34px,0) translate(0,5px);}25%{transform:translate(34px,0) translate(-34px
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 2c 6c 2c 22 20 30 2e 38 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 31 2c 31 29 20 69 6e 66 69 6e 69 74 65 3b 22 29 2c 66 6f 75 72 74 68 42 61 72 50 61 72 65 6e 74 43 6c 61 73 73 3a 28 30 2c 61 2e 63 73 73 29 28 22 61 6e 69 6d 61 74 69 6f 6e 3a 22 2c 73 2c 22 20 30 2e 38 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 31 2c 31 29 20 69 6e 66 69 6e 69 74 65 3b 22 29 7d 7d 3b 76 61 72 20 61 3d 6e 28 22 4a 71 70 39 22 29 7d 2c 22 2b 72 59 4e 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 76 69 Data Ascii: ,l," 0.8s cubic-bezier(0,0,1,1) infinite;"),fourthBarParentClass:(0,a.css)("animation:",s," 0.8s cubic-bezier(0,0,1,1) infinite;")}};var a=n("Jqp9")},"+rYN":function(e,t,n){"use strict";var a=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.vi
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 78 29 3b 7d 22 2c 6f 2e 64 65 66 61 75 6c 74 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 6d 65 64 69 75 6d 4c 61 72 67 65 2c 22 7b 6d 61 78 2d 77 69 64 74 68 3a 39 33 30 70 78 3b 7d 22 2c 6f 2e 64 65 66 61 75 6c 74 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 6c 61 72 67 65 2c 22 7b 6d 61 78 2d 77 69 64 74 68 3a 39 33 30 70 78 3b 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 7d 22 29 3b 74 2e 44 6f 63 75 6d 65 6e 74 3d 75 3b 76 61 72 20 63 3d 28 30 2c 69 2e 63 73 73 29 28 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 32 30 70 78 3b 74 6f 70 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 7a 2d 69 6e Data Ascii: x);}",o.default.breakpoint.mediumLarge,"{max-width:930px;}",o.default.breakpoint.large,"{max-width:930px;}@media print{position:static;}");t.Document=u;var c=(0,i.css)("display:none;position:absolute;right:20px;top:20px;background-color:rgba(0,0,0,0);z-in
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 69 6e 6b 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 50 61 67 65 4c 69 6e 6b 29 7c 7c 22 22 2c 69 73 4f 6e 73 69 74 65 46 72 65 65 54 72 69 61 6c 45 6e 61 62 6c 65 64 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 69 73 4f 6e 73 69 74 65 46 72 65 65 54 72 69 61 6c 45 6e 61 62 6c 65 64 29 7c 7c 30 7d 3a 7b 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 7c 7c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 5d 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 2c 72 3d 65 2e 6e 65 77 73 6c 65 74 74 65 72 49 64 2c 6f 3d 65 2e 61 Data Ascii: ink:(null==e?void 0:e.subscriptionPageLink)\|\|"",isOnsiteFreeTrialEnabled:(null==e?void 0:e.isOnsiteFreeTrialEnabled)\|\|0}:{}},c=function(e,t,n){if(null==e\|\|!e.length)return[];if(!t)return e;var a={};return e.filter((function(e){var i,r=e.newsletterId,o=e.a
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 28 7b 61 63 74 69 6f 6e 3a 22 63 6c 69 63 6b 22 2c 6d 6f 64 75 6c 65 3a 22 52 65 6c 61 74 65 64 4c 69 6e 6b 73 22 7d 2c 72 29 2c 68 3d 4f 62 6a 65 63 74 28 76 2e 63 72 65 61 74 65 4d 61 70 49 6e 6c 69 6e 65 55 6e 69 6f 6e 57 69 74 68 4f 70 74 69 6f 6e 73 29 28 7b 69 6e 74 65 72 6e 61 6c 4c 69 6e 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 3a 70 2c 6e 6f 46 6f 6c 6c 6f 77 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3a 66 7d 29 2c 78 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 61 2e 74 69 74 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3f 61 2e 74 69 74 6c 65 2e 6d 61 70 28 68 29 3a 6e 75 6c 6c Data Ascii: Object.getOwnPropertyDescriptor(n,t))}))}return e}({action:"click",module:"RelatedLinks"},r),h=Object(v.createMapInlineUnionWithOptions)({internalLinkTrackingParams:p,noFollowExternalLinks:f}),x=null!==(t=a.title)&&void 0!==t&&t.length?a.title.map(h):null
2023-12-05 18:14:04 UTC	1379	IN	Data Raw: 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 61 28 6e 28 22 57 38 4d 4a 22 29 29 2c 72 3d 61 28 6e 28 22 6c 77 73 45 22 29 29 2c 6f 3d 61 28 6e 28 22 37 57 32 69 22 29 29 2c 6c 3d 61 28 6e 28 22 61 31 67 75 22 29 29 2c 73 3d 61 28 6e 28 22 4e 73 62 6b 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 7c 7c 21 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 72 Data Ascii: se strict";var a=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=a(n("W8MJ")),r=a(n("lwsE")),o=a(n("7W2i")),l=a(n("a1gu")),s=a(n("Nsbk"));function d(e){var t=function(){if("undefined"==typeof Reflect\|\|!Reflect.construct)r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50555	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	2228	OUT	GET /vi-assets/static-assets/collectionnewsletterform-f74d128cd8c4b210d436.js?_sw-precache=07aa5a9af90d84afbb5b2ff8c567899c HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:05 UTC	1342	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 30 38 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 50 4a 66 78 45 45 4b 63 37 59 53 4a 6c 78 61 36 50 43 66 31 75 49 38 34 51 6c 72 66 78 41 4e 76 54 6a 6f 52 6e 6e 6f 36 72 76 6e 63 4a 54 73 45 33 6e 42 49 48 76 5f 64 66 57 4b 6a 62 78 52 50 57 46 5f 49 2d 61 57 66 70 49 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 30 33 36 34 37 31 35 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 44085X-GUploader-UploadID: ABPtcPrPJfxEEKc7YSJlxa6PCf1uI84QlrfxANvTjoRnno6rvncJTsE3nBIHv_dfWKjbxRPWF_I-aWfpIwx-goog-generation: 1701370603647151x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:14:05 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 32 5d 2c 7b 22 34 67 78 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 67 63 52 2f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 6f 3d 28 6e 28 22 71 31 74 49 22 29 2c 6e 28 22 4a 71 70 39 22 29 29 2c 69 3d 6e 28 22 58 36 6f 4c 22 29 2c 73 3d 6e 28 22 2b 7a 78 69 22 29 2c 6c 3d 6e 28 22 6f 58 54 64 22 29 2c 63 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 26 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 22 29 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[62],{"4gx8":function(e,t,n){"use strict";var a=n("gcR/"),r=n.n(a),o=(n("q1tI"),n("Jqp9")),i=n("X6oL"),s=n("+zxi"),l=n("oXTd"),c=Object(o.css)("text-decoration:underline;&:hover{text-decoration:none;}"),
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 67 5b 6e 5d 28 29 2c 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 74 2c 22 5f 62 6c 61 6e 6b 22 29 7d 7d 2c 76 6f 69 64 20 30 2c 66 5b 6e 5d 29 3a 6e 75 6c 6c 7d 3b 64 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 43 6f 64 65 3a 76 6f 69 64 20 30 2c 64 61 74 61 54 65 73 74 49 64 3a 76 6f 69 64 20 30 2c 75 72 6c 3a 22 22 2c 6c 69 6e 6b 50 61 67 65 54 79 70 65 3a 22 22 7d 3b 74 2e 61 3d 64 7d 2c 43 38 32 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 6f 28 Data Ascii: tion(e){e.preventDefault(),g[n](),window.open(t,"_blank")}},void 0,f[n]):null};d.defaultProps={className:void 0,productCode:void 0,dataTestId:void 0,url:"",linkPageType:""};t.a=d},C82p:function(e,t,n){"use strict";t.__esModule=!0,t.default=void 0;var a=o(
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 6e 2e 64 28 74 2c 22 76 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 29 29 2c 6e 2e 64 28 74 2c 22 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 7d 29 29 2c 6e 2e 64 28 74 2c 22 78 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 29 29 2c 6e 2e 64 28 74 2c 22 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 2c 6e 2e 64 28 74 2c 22 71 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 7a 7d 29 29 2c 6e 2e 64 28 74 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 29 29 2c 6e 2e 64 28 74 2c 22 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 4a 71 70 39 22 29 2c 72 Data Ascii: n.d(t,"v",(function(){return I})),n.d(t,"h",(function(){return T})),n.d(t,"x",(function(){return _})),n.d(t,"k",(function(){return E})),n.d(t,"q",(function(){return z})),n.d(t,"f",(function(){return R})),n.d(t,"s",(function(){return L}));var a=n("Jqp9"),r
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 7d 22 2c 6f 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 6d 65 64 69 75 6d 4c 61 72 67 65 2c 22 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 7d 22 29 2c 6d 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 22 29 2c 66 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 33 30 70 78 20 30 20 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 35 70 78 3b 22 2c 6f 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 6d 65 64 69 75 6d 2c 22 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a Data Ascii: n-left:0;margin-right:auto;padding-top:0;}",o.a.breakpoint.mediumLarge,"{padding-top:0;}"),m=Object(a.css)("margin:0;padding-top:0;"),f=Object(a.css)("overflow:hidden;margin:30px 0 0;padding-top:15px;",o.a.breakpoint.medium,"{padding-left:0;padding-right:
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 69 6c 79 3a 22 2c 6f 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 6f 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 62 6f 6c 64 2c 22 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 33 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 26 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 22 2c 6f 2e 61 2e 63 6f 6c 6f 72 2e 62 6c 75 65 32 30 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 6f 2e 61 2e Data Ascii: ily:",o.a.font.franklinBase,";font-size:13px;font-style:normal;font-weight:",o.a.font.weight.bold,";height:auto;line-height:13px;margin-bottom:10px;padding:10px;text-transform:uppercase;width:100%;&:hover{background-color:",o.a.color.blue20,";color:",o.a.
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 2e 77 65 69 67 68 74 2e 62 6f 6c 64 2c 22 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 22 2c 6f 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 73 6d 61 6c 6c 2c 22 7b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 6f 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 38 29 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 22 2c 6f 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 32 34 29 2c 22 3b 7d 22 29 2c 52 3d 4f 62 6a 65 63 74 28 61 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 3a 30 3b 22 2c 6f 2e 61 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 73 6d 61 6c 6c 2c 22 7b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 6f 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 36 29 2c 22 3b 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 30 70 78 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 22 29 Data Ascii: .weight.bold,";margin-bottom:15px;",o.a.breakpoint.small,"{font-size:",o.a.font.size(18),";line-height:",o.a.font.size(24),";}"),R=Object(a.css)("margin:0;",o.a.breakpoint.small,"{font-size:",o.a.font.size(16),";}@media (min-width:1020px){display:none;}")
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 79 6e 63 53 63 72 69 70 74 4c 6f 61 64 65 72 47 65 74 53 63 72 69 70 74 4c 6f 61 64 65 72 49 44 28 29 2c 72 3d 74 2c 6f 3d 72 2e 67 6c 6f 62 61 6c 4e 61 6d 65 2c 69 3d 72 2e 63 61 6c 6c 62 61 63 6b 4e 61 6d 65 2c 73 3d 72 2e 73 63 72 69 70 74 49 64 3b 69 66 28 6f 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 5b 6f 5d 26 26 28 6c 5b 6e 5d 3d 7b 6c 6f 61 64 65 64 3a 21 30 2c 6f 62 73 65 72 76 65 72 73 3a 7b 7d 7d 29 2c 6c 5b 6e 5d 29 7b 76 61 72 20 63 3d 6c 5b 6e 5d 3b 72 65 74 75 72 6e 20 63 26 26 28 63 2e 6c 6f 61 64 65 64 7c 7c 63 2e 65 72 72 6f 72 65 64 29 3f 76 6f 69 64 20 74 68 69 73 2e 61 73 79 6e 63 53 63 72 69 70 74 4c 6f 61 64 65 72 48 61 6e 64 6c 65 4c 6f 61 64 28 63 29 3a 76 6f 69 64 28 63 2e 6f 62 73 65 72 76 65 72 73 5b 61 5d 3d 66 75 6e Data Ascii: yncScriptLoaderGetScriptLoaderID(),r=t,o=r.globalName,i=r.callbackName,s=r.scriptId;if(o&&void 0!==window[o]&&(l[n]={loaded:!0,observers:{}}),l[n]){var c=l[n];return c&&(c.loaded\|\|c.errored)?void this.asyncScriptLoaderHandleLoad(c):void(c.observers[a]=fun
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 61 2c 72 3d 7b 7d 2c 6f 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6e 3d 6f 5b 61 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 72 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 72 7d 28 72 2c 5b 22 61 73 79 6e 63 53 63 72 69 70 74 4f 6e 4c 6f 61 64 22 2c 22 66 6f 72 77 61 72 64 65 64 52 65 66 22 5d 29 3b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 69 5b 65 5d 3d 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 5b 65 5d 3f 77 69 6e 64 6f 77 5b 65 5d 3a 76 6f 69 64 20 30 29 2c 69 2e 72 65 66 3d 6f 2c 28 30 2c 61 2e 63 72 65 61 74 65 45 Data Ascii: ll==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0\|\|(r[n]=e[n]);return r}(r,["asyncScriptOnLoad","forwardedRef"]);return e&&"undefined"!=typeof window&&(i[e]=void 0!==window[e]?window[e]:void 0),i.ref=o,(0,a.createE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50552	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	792	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/image.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:05 UTC	779	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:05 UTC	473	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c2 00 11 08 01 be 02 c4 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 00 07 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 a7 4c 55 5c 9d 17 c9 08 60 d7 aa 8a d5 87 a9 Data Ascii: JFIF, ,'/&$&/'F7117FQD@DQbXXb\|v\|, ,'/&$&/'F7117FQD@DQbXXb\|v\|"3LU\`
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 1d e6 97 08 98 ce 20 05 8f 86 a3 13 f0 0c ac a6 0f 50 e9 33 92 ee 51 7d 36 30 da 10 54 78 1c e0 9a af d7 d4 72 c9 57 86 3a c7 80 82 95 3e a7 65 35 cc 34 10 b7 5e a0 0d 4a 29 92 d3 3e 54 fb 02 75 a8 92 6f 27 46 9d a2 d5 3e 8b b0 0a 23 33 69 4a b7 b6 84 57 54 bd 84 64 e2 4e 70 3c 2b 05 c0 00 b3 98 6b bc 6f 6f 8e 3e 99 8a fc ae 70 14 04 c0 f9 d0 9d 9a 0e 8f 8b c2 20 cb 08 11 32 8c e4 0e ba 97 18 e9 2b 98 1d e8 e4 8c b6 52 1a c2 b0 8d 70 82 d8 15 eb 35 a6 96 7d a4 5d aa e0 0a 66 01 b3 1d 3a d7 c3 6a 92 97 4c 05 29 5b 30 7c 4a 44 2d a9 75 19 20 ed 29 a6 22 db a7 5a 95 e6 7c 2c 6a 6e 20 0a 58 09 d0 ac b0 70 29 82 b1 e4 da e9 7b e1 84 6c 04 4a f6 c7 c0 91 ae 6b 93 32 7a 3a 85 55 47 b2 ad 69 a0 dc 92 5d 67 74 55 ea ab c1 6c 61 50 f1 b5 ae 08 a9 ae e6 b3 d7 96 f6 Data Ascii: P3Q}60TxrW:>e54^J)>Tuo'F>#3iJWTdNp<+koo>p 2+Rp5}]f:jL)[0\|JD-u )"Z\|,jn Xp){lJk2z:UGi]gtUlaP
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: e8 7d 49 5f 9c 48 35 7f 35 bc 4a 8a a5 ac 62 2a 92 38 40 48 ee f6 5a a9 de b0 9e 6a 3b 33 b3 11 db 24 44 3f 73 cc 24 7d e0 5e 72 20 42 4d 49 38 49 96 a6 aa 9d 6d c4 d6 77 ce 67 a5 39 6c 60 15 69 da 23 71 06 e0 56 05 67 c2 25 a4 d1 46 9c 9c ea 75 8c 9d f9 6b de 57 ce 2a de 55 36 59 eb 5f 26 b8 15 81 b9 03 9a e0 be 1a 95 2a ee 97 d2 50 e5 c3 88 aa 9d cc 22 aa 6e 02 c8 d4 52 cd 44 06 a3 40 a5 4d 3f ad 47 52 ad 56 85 70 5b ce cd 89 e8 2b cb 15 4d 62 0b ca 45 0d 88 b0 d6 fb c6 f7 7f 1f c9 6a 2f 2a 5c a9 26 38 8e 70 de 05 ca 42 80 06 f7 13 01 67 d0 2f a5 d1 f8 9e 22 63 0b 11 05 ba c7 51 ce ca 49 f0 25 18 22 bd 90 aa 6b 3a e7 5a 5f af 49 15 b3 b4 af 61 8a cc e6 84 69 cc 63 27 66 9c 4f 1f 27 29 40 93 4b 2c e8 da 1f 4e 31 f7 93 ea 38 51 94 38 32 c1 02 3c 64 c3 34 Data Ascii: }I_H55Jb8@HZj;3$D?s$}^r BMI8Imwg9l`i#qVg%FukWU6Y_&P"nRD@M?GRVp[+MbEj/\&8pBg/"cQI%"k:Z_Iaic'fO')@K,N18Q82<d4
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: a2 5a a7 35 7a 99 a9 38 a5 82 97 26 2c ec 66 b2 c0 bb ad 45 a7 a9 32 a1 b7 a6 2b cc 06 c6 9a c2 6b 23 85 fa b6 16 69 cb fb 66 fa 30 ab 33 c1 a4 09 33 e1 47 9e 1b 04 07 52 42 e4 24 a6 eb ce 52 cb aa 93 90 d2 15 c4 fd 11 30 f8 e4 6f a8 f0 db eb c2 69 69 a3 24 92 43 b3 f1 bd 52 8a f7 66 b9 a5 1e 80 28 aa f5 a1 e9 65 0d a1 4e 1d 65 94 bb 49 54 ed c2 ab ca b6 00 26 2f 7b a4 8a f8 22 db 6c 47 3e df 6d 56 f3 e3 aa be 88 2f 43 d0 e1 6f c3 e0 42 4e ac 9c 3d ee 00 38 56 b2 d2 93 69 43 f4 be 7d a5 91 bc f9 67 27 46 9f e5 29 61 7a 71 77 ea 58 af a5 74 e1 7c 00 a3 52 ca 08 7b 0d 77 de 4f d4 ac 64 03 bc ed 28 cb 7d 53 8f ee 87 22 3d 43 79 eb 96 06 21 5a 5d dc eb d5 69 ba c6 9c 4f 1b ac 83 ec 5c ab da 35 40 9e 8f 92 ec 32 7a 45 29 51 5b 1e ae 5c e9 6c d9 0b 09 86 1a 45 Data Ascii: Z5z8&,fE2+k#if033GRB$R0oii$CRf(eNeIT&/{"lG>mV/CoBN=8ViC}g'F)azqwXt\|R{wOd(}S"=Cy!Z]iO\5@2zE)Q[\lE
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: e9 1f 48 f1 5d f3 f5 34 98 82 73 8a 2f bd c0 f1 ea d7 97 70 7c bd 82 76 d5 fe 0b 4c 55 55 fc ae 8d 85 5e d7 e5 14 7d 2f 69 f9 e4 d7 1f a1 5a f9 ee a3 0d 2d ba a9 da 9d 55 d2 29 a3 e5 0b 8e 84 e8 22 06 2d 79 da 66 42 25 c9 ca 0e 81 8e 36 83 d5 af e7 22 ed 25 5e ec 69 ae f0 fd d1 8e b4 95 97 1d 5c bc a3 d1 94 29 88 fd 40 15 f8 94 21 19 28 d5 82 6b 44 25 c4 16 4f 44 b2 95 a8 d6 cf 39 7c 05 3d 6b 54 8a bc f8 c4 ed 00 64 fd c9 08 13 42 da 28 ab 67 80 4f 36 3b 9f 67 4b df 0e 82 e5 a4 c4 8c d5 8b 94 8e a3 ab b8 a8 43 9c 41 54 ca 2f 43 4e 2e cc 10 3a d5 e3 e0 1d 62 2a bc b6 d5 a1 2e bc 9b 4a 96 5d 4f bc ef 9a 99 50 a5 66 1e a9 fd cd a8 d2 6d 3d cf b7 cf 32 5f 69 f9 a6 f9 51 fd 93 e2 df 58 16 d0 f5 7b 5c ae 8d 0d 1d 6f 3e f4 43 bb aa 8d 13 9c 72 7a 4e c6 d7 e5 dd Data Ascii: H]4s/p\|vLUU^}/iZ-U)"-yfB%6"%^i\)@!(kD%OD9\|=kTdB(gO6;gKCAT/CN.:b*.J]OPfm=2_iQX{\o>CrzN
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: e3 48 ee 96 c4 68 68 ec d6 d4 b7 7e 96 c1 e9 9e a8 ea af 51 db 29 d8 9d 84 6a ba ed 7d 1b 1a 05 a6 ad 32 d4 4e 91 ea c6 aa 35 62 fb b4 0f 50 b5 cf 59 5a 81 a2 7a 95 75 57 a3 16 d9 ad 1a 61 b1 67 4b fa df d8 56 8c 6b ff 00 6a c6 bb 35 95 ab 1a e1 ad fd 34 ea 5c d3 0d 13 bc ed 05 e9 59 d0 e8 97 34 58 45 12 d0 44 33 84 2b 60 b4 18 be 31 9c 40 b1 5e 8c 5c a0 52 55 54 c1 0f 9c c8 a4 d2 3c b2 95 98 31 d6 61 46 b6 2c 66 59 eb e1 9c 95 31 a0 04 02 93 0a d2 40 b5 3d 71 56 cb 16 3f 17 72 b4 32 79 68 81 32 80 05 a5 c8 97 d4 18 b7 f1 62 5c b8 44 d3 af 5b 8d 28 0b 4b 9e 2a 7d 52 3f 48 61 10 31 dc 6b 06 5d 3d 0e 35 0b e8 97 35 d0 c9 7b 78 a4 88 b8 14 4c 13 30 68 4f 09 2b 36 72 16 9a 92 b6 f2 a8 4a 9a 02 77 5b f9 c1 e1 c8 86 05 94 02 e6 18 a4 0c 20 38 f5 af 90 0b e5 95 Data Ascii: Hhh~Q)j}2N5bPYZzuWagKVkj54\Y4XED3+`1@^\RUT<1aF,fY1@=qV?r2yh2b\D[(K*}R?Ha1k]=55{xL0hO+6rJw[ 8
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 56 b5 c7 48 ec 7e 8b 0e a8 d9 b0 d7 30 60 63 80 6c b1 f4 fa d1 b7 50 1d 36 2d 0d c6 43 9b 10 92 bb 72 38 d8 63 e1 95 9d 66 6b be 8d a2 e5 73 75 fb 97 0d 95 5c 16 6e 95 6b 79 ce b3 5f 2b 3b 4f 16 a2 e9 f3 55 9d 3f 9a c5 25 06 53 27 3c 19 fa cb 20 a1 9f 44 29 7c 68 c0 c4 12 26 4c 6a a9 cf 32 6c b2 08 f9 27 c0 19 8e 44 81 01 38 bc fb fb fd 2a 41 dd 75 b1 35 19 38 d8 12 86 b5 ff 00 43 38 2f 7a f6 e9 68 e8 ed 05 e4 32 d3 6a 9b 22 fd d8 7b 2f 15 d8 68 33 f6 4d 95 d9 ad 78 ed 36 fb ed 94 3c c6 52 56 f9 0e ce b3 4a c3 6f 06 f1 36 d1 35 1d 51 1b 1c 28 1f f8 c8 8e 79 29 e0 f0 01 2b 9e 1b 62 46 b8 c5 d7 19 c4 05 60 a3 57 16 e6 76 b2 e0 16 91 a9 f1 88 55 76 d1 90 85 fc e1 12 89 4a 6b 33 32 b6 45 dc aa b9 33 84 59 27 5b e4 63 1c f1 e7 d7 d0 87 d2 6e 8a 6b 55 fe 75 d6 Data Ascii: VH~0`clP6-Cr8cfksu\nky_+;OU?%S'< D)\|h&Lj2l'D8*Au58C8/zh2j"{/h3Mx6<RVJo65Q(y)+bF`WvUvJk32E3Y'[cnkUu
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 7b cc c7 07 90 7f 48 2f ab a6 40 c0 a3 ab f1 f5 d1 0f ca 2c 2e ff 00 4b ab b2 05 d7 20 a2 1a 93 59 56 9a b5 53 15 a1 f9 74 ef 68 55 4a 3b 24 a3 55 c0 05 4c c5 89 2b 75 1d 64 3f a3 bd 7f 3b 3f 56 8e 75 d5 a4 ac 05 83 b4 c8 89 36 57 e3 59 1c 7a 41 3c 22 86 fd 48 a7 9e 02 21 64 3e e0 70 df 3e 24 7e 52 50 50 24 1e b3 04 93 09 82 e0 f2 47 91 23 32 63 c1 96 1c c9 71 93 3c 26 f5 43 7b 82 f5 6a b7 b4 ff 00 d3 1f fe 7c 83 a4 9a d2 16 8b fa 1f ba 35 c9 e8 00 86 9e 7d ab 50 d9 ac 80 dc 9d 70 53 2b da a5 5b 24 b0 d2 ad 19 62 99 5a 8a 3b f4 25 e9 ac 15 0f 3e 68 c2 99 56 01 a2 22 08 b0 04 88 51 08 8f c5 89 10 0e 35 82 de 17 04 61 65 c1 19 6c 97 22 46 c1 34 58 44 6d 39 e7 90 98 82 91 88 e0 17 ac 8a f8 d1 3e 10 37 92 3d 4e 1a 39 ea b8 fe c9 a5 a7 7f 3e c5 05 36 89 24 68 Data Ascii: {H/@,.K YVSthUJ;$UL+ud?;?Vu6WYzA<"H!d>p>$~RPP$G#2cq<&C{j\|5}PpS+[$bZ;%>hV"Q5ael"F4XDm9>7=N9>6$h
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 1a d3 da 11 a6 8d 17 36 b1 9e dd 6d 42 7c 2d 8b 8e 1d 53 3c b5 f7 6b 3d 53 5e f7 64 75 85 10 15 0d 0a 24 a8 67 21 c5 60 da 13 12 46 c7 03 d6 96 1d 7b e7 ad 85 a5 62 ff 00 7f 6f 54 d7 d5 db 38 ac fa 24 a4 32 a0 14 b5 f7 e0 da b6 1a 2e 8d 96 72 dd 58 45 82 18 fd 1e 5b c9 6f 8e b6 1a fb 75 64 3a d5 dc f6 95 68 46 f4 f6 08 d6 5e 8d 7d b6 ee ce e5 6b 37 e8 c6 03 ec 47 62 ad 66 cd 05 b2 bd 87 66 89 3b 25 fd 41 fd 7d 74 02 f7 e4 17 57 48 e3 f9 06 9f 18 95 bb 51 d2 d6 84 cd 6a b4 28 54 cf f5 8b 43 a8 fd c3 de 2d 50 db 1d 2f ee 4e df f5 43 60 f7 e3 50 34 7a f9 aa 3b ee 7d 5c 2b 19 7f 0c ea e1 65 6c 48 31 6c 49 d9 28 5b 09 cb 7d 3a 20 bb 8d 4b ad d5 f4 ac af 7b cc ab c7 8f 55 83 d7 3b 74 e2 50 6c a8 f9 5d 9a 13 d5 cf aa da c0 ac d6 5e 48 ca 90 f0 39 64 8d bb 68 a6 Data Ascii: 6mB\|-S<k=S^du$g!`F{boT8$2.rXE[oud:hF^}k7Gbff;%A}tWHQj(TC-P/NC`P4z;}\+elH1lI([}: K{U;tPl]^H9dh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50551	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:04 UTC	792	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/lines.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:05 UTC	777	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:05 UTC	475	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 94 00 00 01 f4 02 03 00 00 00 8f ea f9 2a 00 00 00 09 50 4c 54 45 f1 f1 f1 db db db e6 e6 e6 68 8d 38 a9 00 00 0f b5 49 44 41 54 78 5e ed 9d 41 6a e4 48 1b 05 25 81 06 b4 b7 44 1f e0 2f 9f a3 8e a0 45 2d b4 ac a3 f8 08 ff a2 18 7c dc 39 80 05 6e f4 99 8e 8c ce 37 cb 62 06 b5 83 9e 2c 11 7e 2f df 30 0c c3 fb f0 e5 9f f1 e3 eb 67 9f 5f 3f 9a 4f fe b5 e7 97 4f 0a 0f f8 e7 eb 47 d3 c9 03 7e 7d fd 68 39 79 c0 f1 a3 0f 28 fc ec 00 dc 61 3b 61 74 3f 67 f4 fd 1f 64 da 7f f2 01 b7 13 46 27 28 5f 67 8c fe fc 03 a6 bd 5d b8 c3 db ef fd 45 3d 79 c2 7a c6 a8 f6 80 ef 4f 81 fb ef 1d 33 27 ff e5 37 8c ca 0f 98 9e cd c0 2d fc 08 57 19 1d 00 a3 f7 cb 8c e6 c2 5f c0 06 e1 d6 0f b2 7f 2f 7c 1f 82 27 e5 09 ca 4f e0 28 Data Ascii: PNGIHDR*PLTEh8IDATx^AjH%D/E-\|9n7b,~/0g_?OOG~}h9y(a;at?gdF'(_g]E=yzO3'7-W_/\|'O(
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 82 73 74 09 ce 2d 82 53 f0 c2 0e bc 0b 00 70 0b 8c 0c 82 f3 a5 12 9c 8b 33 c1 c9 97 2d 88 77 01 02 2e 22 38 37 95 e0 1c 5d 82 73 93 09 ce c3 20 38 eb f2 8e 87 5b 3f c8 96 56 04 e7 e5 42 0a 2f 38 eb 70 93 e0 4c 82 b3 ce 68 16 30 02 05 27 0f 37 82 33 82 73 ae 86 0c f9 b2 05 d2 f6 69 17 6e 07 09 ce 24 38 a7 72 c0 92 67 b4 0b da 3e 30 dc e1 ef 17 9c 11 9c cb f0 a3 0e ee d6 60 d9 82 2f 5e f2 70 87 24 38 05 82 b3 0c f7 67 1d 5c bb 65 8b 15 2c 5e f2 70 7f d3 3f ba 6a fc 2d 26 38 eb 70 91 b2 85 cb 2f 3d 40 79 c7 c3 75 dd b8 93 eb 8c f8 b2 c5 24 f8 5d 24 51 bc e4 e1 02 0e 2e 82 13 80 2b 12 9c b3 4b 70 1e cd c0 25 42 86 58 cc 9a 17 9c 3c dc ba 83 1b 04 82 13 28 5e f2 70 01 07 07 94 2d d8 5c 12 0f 97 70 70 44 21 85 2c 5e f2 70 01 07 47 94 2d 56 ba 78 59 87 8b 94 2d Data Ascii: st-Sp3-w."87]s 8[?VB/8pLh0'73sin$8rg>0`/^p$8g\e,^p?j-&8p/=@yu$]$Q.+Kp%BX<(^p-\ppD!,^pG-VxY-
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 1a 62 1a 04 2b 57 00 5c ff 8d 3b b9 ce 88 17 9c fc 49 49 17 2f 79 b8 11 9c 11 9c fe 91 a1 8c 0c 75 50 48 49 db 27 09 ce 24 38 05 85 94 59 d0 f6 41 e0 26 c1 99 04 67 7d 57 92 67 24 68 fb 20 70 23 38 23 38 8b 85 14 be 6c 31 22 c5 4b 08 6e 12 9c f5 07 24 c1 29 28 5b 40 c5 4b 1e ae 7f 33 31 83 94 11 9c 11 9c d9 4c 04 04 a7 a8 a2 ae ba a7 74 25 73 49 3c dc cb 07 99 45 70 f2 86 9d 87 5b 28 a4 00 7e a9 50 48 01 e5 1d 0f 37 9b 89 9d 0d 52 d6 37 13 05 65 0b a0 78 09 c2 ad 8f 0c a9 ca 16 23 97 4b e2 e1 ca 04 e7 ec 12 9c 47 5f 82 93 1f 62 5a 10 b5 a1 10 9c 11 9c 11 9c 8e b2 05 5f bc e4 e1 02 82 13 2a a4 20 c5 4b 02 6e 04 67 04 67 36 13 3b 18 a4 ec 20 40 97 74 62 0a 29 c6 b6 0f 92 e0 7c 0a 12 9c c0 ca 15 00 d7 2c 38 17 97 e0 7c 45 70 26 c1 09 c0 ed a2 90 92 b6 4f 04 Data Ascii: b+W\;II/yuPHI'$8YA&g}Wg$h p#8#8l1"Kn$)([@K31Lt%sI<Ep[(~PH7R7ex#KG_bZ_* Kngg6; @tb)\|,8\|Ep&O
2023-12-05 18:14:05 UTC	1120	IN	Data Raw: 39 45 70 26 c1 09 c3 ed aa 90 92 b6 4f 04 67 04 a7 e0 36 19 c1 ca 15 0e 37 09 ce 24 38 05 43 4c b4 da 30 2c a2 46 70 46 70 ae 75 46 7c 82 93 3f 05 78 b8 49 70 26 c1 59 60 44 97 2d f8 95 2b 1e 6e 36 13 81 d8 90 4e 70 f2 27 a5 68 e5 8a 87 1b c1 19 c1 a9 1a 62 5a 05 2b 57 30 dc 61 73 0d 31 3d 1d 2b 57 3c dc ef 1d 2d 27 38 eb 85 14 7e e5 8a 87 db d3 3d a5 b9 04 36 82 33 82 53 55 b6 18 db 5a b9 e2 e1 02 82 13 28 a4 50 c5 4b 02 ae 4d 70 7e a8 04 e7 a1 10 9c 11 9c 11 9c 82 b2 85 60 e5 0a 80 5b 15 9c 82 42 0a bd 72 05 c0 2d 09 4e d5 10 d3 2a 58 b9 02 e0 66 33 b1 83 41 ca 0e fc 52 e4 5d 37 85 94 b4 7d 22 38 23 38 55 65 8b b1 ad 95 2b 1e 6e 17 09 ce 24 38 5d 85 94 5d d5 f6 b9 b5 09 d7 2f 38 23 38 23 38 23 38 93 e0 4c 82 93 ea 06 d6 05 27 5f bc e4 e1 ba 12 9c 37 55 Data Ascii: 9Ep&Og67$8CL0,FpFpuF\|?xIp&Y`D-+n6Np'hbZ+W0as1=+W<-'8~=63SUZ(PKMp~`[Br-N*Xf3AR]7}"8#8Ue+n$8]]/8#8#8#8L'_7U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50553	142.251.16.157	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1420	OUT	GET /ddm/fls/z/dc_pre=CNvg15jz-IIDFUvnKAUdpPUMZA;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5290727.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:14:05 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 49 20 44 45 56 20 50 53 41 20 50 53 44 20 49 56 41 20 49 56 44 20 4f 54 50 20 4f 55 52 20 4f 54 52 20 49 4e 44 20 4f 54 43 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate: Tue, 05 Dec 2023 18:14:05 GMTPragma: no-cache
2023-12-05 18:14:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50556	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	2215	OUT	GET /vi-assets/static-assets/collections-aedf777198c1ff056882.js?_sw-precache=2bba9a1da81113c80b660c5bcb50f43e HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:05 UTC	1325	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 33 35 38 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 2d 35 68 36 6c 61 4b 55 6d 79 71 54 6b 2d 33 47 62 47 56 46 4b 44 67 32 5a 51 52 64 4a 52 5f 47 69 4b 52 37 6d 6e 46 35 73 47 68 41 6d 43 46 34 63 79 69 6f 45 6e 48 48 66 33 76 37 55 44 59 4b 51 71 33 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 38 30 38 34 33 35 32 36 34 31 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1623584X-GUploader-UploadID: ABPtcPp-5h6laKUmyqTk-3GbGVFKDg2ZQRdJR_GiKR7mnF5sGhAmCF4cyioEnHHf3v7UDYKQq3wx-goog-generation: 1701780843526411x-goog-metageneration: 1x-goog-stored-content-encoding:
2023-12-05 18:14:05 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 2c 35 2c 38 2c 31 31 2c 31 37 2c 31 38 2c 32 30 2c 36 30 2c 38 31 2c 31 34 35 2c 31 35 30 2c 31 35 39 2c 31 36 33 2c 31 36 34 5d 2c 7b 22 2b 35 41 57 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 79 67 76 6b 22 29 2c 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[63,5,8,11,17,18,20,60,81,145,150,159,163,164],{"+5AW":function(e,t,n){"use strict";n.d(t,"b",(function(){return C})),n.d(t,"c",(function(){return j})),n.d(t,"a",(function(){return S}));var a=n("ygvk"),i
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 78 2c 30 29 20 73 63 61 6c 65 28 31 2c 30 2e 39 35 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 29 3b 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 29 20 73 63 61 6c 65 28 31 2c 30 2e 39 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 29 3b 7d 22 29 2c 6f 3d 28 30 2c 61 2e 6b 65 79 66 72 61 6d 65 73 29 28 22 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 32 2e 36 37 30 30 30 30 30 37 36 32 39 33 39 34 35 70 78 2c 30 Data Ascii: x,0) scale(1,0.95) translate(-22.670000076293945px,0);}100%{transform:translate(22.670000076293945px,0) scale(1,0.9) translate(-22.670000076293945px,0);}"),o=(0,a.keyframes)("0%{transform:translate(22.670000076293945px,0) translate(-22.670000076293945px,0
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 74 3a 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 72 65 70 6c 61 63 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 61 6c 6c 28 74 2c 6e 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 76 61 72 20 65 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 22 2c 6e 3d 4f 28 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 73 70 6c 69 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 61 6c 6c 28 74 2c 22 3f 22 29 5b 30 5d 29 3b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 6e 79 74 Data Ascii: t:null==t\|\|null===(e=t.replace)\|\|void 0===e?void 0:e.call(t,n,"https://www.nytimes.com")}function w(){var e,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"",n=O(null==t\|\|null===(e=t.split)\|\|void 0===e?void 0:e.call(t,"?")[0]);return"https://nyt
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 61 28 6e 28 22 71 31 74 49 22 29 29 2c 72 3d 28 61 28 6e 28 22 31 37 78 39 22 29 29 2c 61 28 6e 28 22 56 63 75 64 22 29 29 29 2c 6f 3d 6e 28 22 53 62 63 42 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 2e 43 72 65 64 69 74 2c 6e 75 6c 6c 2c 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 64 65 66 61 75 6c 74 2c 6e 75 6c 6c 2c 22 43 72 65 64 69 74 2e 2e 2e 22 29 2c 74 3f 69 2e 64 65 66 Data Ascii: ",{value:!0}),t.default=void 0;var i=a(n("q1tI")),r=(a(n("17x9")),a(n("Vcud"))),o=n("SbcB"),l=function(e){var t=e.dangerouslySetInnerHTML,n=e.children;return i.default.createElement(o.Credit,null,i.default.createElement(r.default,null,"Credit..."),t?i.def
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 70 65 72 73 69 73 74 28 29 2c 65 28 74 2c 6e 2c 61 29 7d 7d 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 75 28 74 68 69 73 2c 74 29 2c 66 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: lled");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function p(e,t,n){if(e)return function(a){a.persist(),e(t,n,a)}}var m=function(e){function t(){return u(this,t),f(this,(t.__proto__\|\|Object.getPrototypeOf(t)).apply(this,arguments))}return func
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 69 64 74 68 3a 22 2c 72 2e 64 65 66 61 75 6c 74 2e 62 72 65 61 6b 70 6f 69 6e 74 2e 74 65 78 74 42 6f 64 79 57 69 64 74 68 2c 22 70 78 3b 7d 22 29 3b 74 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 22 32 77 74 71 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 29 4f 62 6a 65 Data Ascii: idth:",r.default.breakpoint.textBodyWidth,"px;}");t.default=o},"2wtq":function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var a in n)Obje
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 28 6e 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 65 63 74 69 6f 6e 2c 6e 3d 65 2e 73 75 62 73 65 63 74 69 6f 6e 2c 61 3d 65 2e 69 6e 74 6c 43 6f 6e 66 69 67 2c 69 3d 5b 74 2c 6e 5d 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 29 29 3b 69 66 28 61 26 26 28 61 2e 69 73 43 61 56 65 72 73 69 6f 6e 7c 7c 61 2e 69 73 49 6e 74 6c 56 65 72 73 69 6f 6e 29 26 26 69 2e 6c 65 6e 67 74 68 3e 3d 31 26 26 69 2e 75 6e 73 68 69 66 74 28 7b 75 72 6c 3a 61 2e 70 61 74 68 50 72 65 66 69 78 2c 6e 61 6d 65 3a 61 2e 73 69 74 65 54 69 74 6c 65 7d 29 2c 21 28 69 2e 6c 65 6e 67 74 68 3c 32 29 29 72 65 74 75 72 6e 20 6e 65 77 20 68 2e 64 65 66 61 75 6c 74 28 7b 69 74 65 Data Ascii: ult:return!1}}(n)?function(e){var t=e.section,n=e.subsection,a=e.intlConfig,i=[t,n].filter((function(e){return e}));if(a&&(a.isCaVersion\|\|a.isIntlVersion)&&i.length>=1&&i.unshift({url:a.pathPrefix,name:a.siteTitle}),!(i.length<2))return new h.default({ite
2023-12-05 18:14:05 UTC	16384	IN	Data Raw: 6e 20 20 22 5d 29 29 29 7d 2c 79 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 64 61 74 61 3a 76 6f 69 64 20 30 2c 73 74 79 6c 65 73 3a 22 22 7d 3b 74 2e 61 3d 79 7d 2c 22 34 7a 6a 72 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 53 74 72 75 63 74 75 72 65 64 44 61 74 61 53 63 72 69 70 74 54 61 67 3d 6f 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 69 3d 61 28 6e 28 22 71 31 74 49 22 29 29 2c 72 3d 28 61 28 6e 28 22 31 37 78 39 22 29 29 2c 6e 28 22 34 39 72 65 22 29 29 3b 66 75 6e 63 74 69 6f Data Ascii: n "])))},y.defaultProps={data:void 0,styles:""};t.a=y},"4zjr":function(e,t,n){"use strict";var a=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.StructuredDataScriptTag=o,t.default=void 0;var i=a(n("q1tI")),r=(a(n("17x9")),n("49re"));functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50561	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1091	OUT	GET /activity;register_conversion=1;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:05 UTC	2214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50565	18.160.1.134	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	806	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=3&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-2%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-2_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:05 UTC	494	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 50 4e 56 44 4e 38 59 35 30 4b 30 30 53 4a 41 33 46 32 50 57 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 34 37 34 37 34 37 34 37 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 535Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:05 GMTx-amz-rid: PNVDN8Y50K00SJA3F2PWStrict-Transport-Security: max-age=47474747; includeSubDomains; pre
2023-12-05 18:14:05 UTC	535	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 66 69 66 22 3a 22 31 22 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 43 30 38 75 42 65 75 71 68 39 43 73 5f 5a 79 34 47 67 42 71 4a 67 41 41 41 47 4d 4f 79 5f 72 72 41 45 41 41 41 76 57 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 41 51 49 52 71 5a 22 2c 22 73 69 7a 65 22 3a 22 39 37 30 78 32 35 30 22 2c 22 63 72 69 64 22 3a 22 34 37 38 34 33 31 39 30 30 22 2c 22 6d 65 74 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JC08uBeuqh9Cs_Zy4GgBqJgAAAGMOy_rrAEAAAvWAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICAQIRqZ","size":"970x250","crid":"478431900","met

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50558	18.67.65.51	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1837	OUT	GET /js/ HTTP/1.1 Host: dd.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:05 UTC	477	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 6e 6f 2d 63 61 63 68 65 2c 6e 6f 2d 73 74 6f 72 65 0d 0a 58 2d 43 61 63 68 65 3a 20 45 72 72 6f 72 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 36 66 33 35 34 36 62 36 62 35 Data Ascii: HTTP/1.1 405 Method Not AllowedContent-Type: text/html;charset=iso-8859-1Content-Length: 319Connection: closeDate: Tue, 05 Dec 2023 18:14:05 GMTCache-Control: must-revalidate,no-cache,no-storeX-Cache: Error from cloudfrontVia: 1.1 6f3546b6b5
2023-12-05 18:14:05 UTC	319	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 50 72 6f 62 6c 65 6d 20 61 63 63 65 73 73 69 6e 67 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 70 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405</title></title></head><body><h2>HTTP ERROR 405</h2><p>Problem accessing this resource. Reason:<pre> HTTP method GET is not supported by this URL</pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50564	18.160.1.134	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	806	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=4&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-3%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-3_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:05 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 47 38 56 4b 48 52 58 4a 58 4d 33 52 39 52 59 43 37 48 51 37 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 34 37 34 37 34 37 34 37 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:05 GMTx-amz-rid: G8VKHRXJXM3R9RYC7HQ7Strict-Transport-Security: max-age=47474747; includeSubDomains; prel
2023-12-05 18:14:05 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 34 22 7d 29 Data Ascii: apstag.punt({"cb":"4"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50563	18.160.1.134	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	806	OUT	GET /e/dtb/bid?src=3030&u=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&pid=aCherTHzcKgd8&cb=2&ws=1280x907&v=23.1108.2350&t=2000&slots=%5B%7B%22sd%22%3A%22story-ad-1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%5D%2C%22sn%22%3A%22story-ad-1_art_web%22%7D%5D&pj=%7B%22si_section%22%3A%22world%22%7D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AyLRLcO-eUFSpgvnkv3VMJU; ad-privacy=0
2023-12-05 18:14:05 UTC	493	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 53 65 72 76 65 72 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 78 2d 61 6d 7a 2d 72 69 64 3a 20 32 58 57 44 48 39 59 54 47 33 58 46 37 34 35 47 33 50 31 31 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 34 37 34 37 34 37 34 37 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript;charset=UTF-8Content-Length: 23Connection: closeServer: ServerDate: Tue, 05 Dec 2023 18:14:05 GMTx-amz-rid: 2XWDH9YTG3XF745G3P11Strict-Transport-Security: max-age=47474747; includeSubDomains; prel
2023-12-05 18:14:05 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 32 22 7d 29 Data Ascii: apstag.punt({"cb":"2"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50559	151.101.1.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1984	OUT	GET /capi/metered_assets/?plat=web&mc=0&gr=METER_LIMIT&mr=1&ma=1&counted=false&granted=true&us=anon&context-type=&areas=barOne&areas=truncator&areas=dock HTTP/1.1 Host: mwcm.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:05 UTC	959	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 37 38 35 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6d 6f 74 73 2d 63 61 6d 70 61 69 67 6e 2d 6e 61 6d 65 73 3a 20 7b 22 62 61 72 4f 6e 65 22 3a 22 4d 41 47 5f 62 61 72 31 5f 74 65 73 74 5f 73 75 62 63 6f 6e 22 2c 22 64 6f 63 6b 22 3a 22 4d 41 47 5f 77 65 62 22 2c 22 74 72 75 6e 63 61 74 6f 72 22 3a 22 4d Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 16785cache-control: private, no-cache, no-store, must-revalidatecontent-type: application/json; charset=utf-8x-cmots-campaign-names: {"barOne":"MAG_bar1_test_subcon","dock":"MAG_web","truncator":"M
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 7b 22 62 61 72 4f 6e 65 22 3a 7b 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 61 70 70 65 6e 64 45 78 69 74 55 72 69 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 62 61 72 4f 6e 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 62 61 72 4f 6e 65 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 31 34 66 65 65 62 31 64 2d 30 39 34 37 2d 34 38 33 33 2d 61 36 65 35 2d 61 34 65 38 38 64 30 66 62 66 33 33 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 Data Ascii: {"barOne":{"active":true,"appendExitUri":false,"html":"\n\n\n\n \u003cdiv class=\"barOne\" data-config-component-id=\"mkt-wcm:components/metered_assets/barOne/template/main\" data-component-uuid=\"14feeb1d-0947-4833-a6e5-a4e88d0fbf33\"\u003e\n\n\n\u003csc
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 72 4f 6e 65 5c 22 20 73 74 79 6c 65 3d 5c 22 20 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 3f 63 61 6d 70 61 69 67 6e 49 64 3d 39 51 51 39 4b 5c 22 5c 75 30 30 33 65 5c 6e 20 53 55 42 53 43 52 49 42 45 20 46 4f 52 20 24 32 2f 57 45 45 4b 5c 6e 20 5c 75 30 30 33 63 2f 61 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 2f 64 69 76 5c 75 30 30 33 65 5c 6e 5c 6e 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 72 65 61 74 69 76 65 2d 6f 76 65 72 72 69 64 65 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 70 2f 63 72 65 61 74 69 76 65 4f 76 65 72 72 69 64 65 2f 74 Data Ascii: rOne\" style=\" \" href=\"https://www.nytimes.com/subscription?campaignId=9QQ9K\"\u003e\n SUBSCRIBE FOR $2/WEEK\n \u003c/a\u003e\n\u003c/div\u003e\n\n\u003cdiv class=\"creative-override\" data-config-component-id=\"mkt-wcm:components/lp/creativeOverride/t
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 5c 75 30 30 32 37 70 6c 61 74 5c 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 74 63 68 2e 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 2f 50 6c 61 74 66 6f 72 6d 73 2f 57 65 62 2d 2d 71 75 65 72 79 2d 70 61 72 61 6d 65 74 65 72 2d 5c 22 7d 2c 7b 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 41 20 67 72 6f 75 70 20 6f 66 20 72 65 67 69 73 20 6f 72 20 61 6e 6f 6e 79 6d 6f 75 73 20 75 73 65 72 73 2e 20 5c 22 2c 5c 22 70 61 74 68 5c 22 3a 5c 22 2f 4a 4b 49 44 44 2f 55 73 65 72 2d 53 74 61 74 75 73 2f 52 65 67 Data Ascii: e \\u0027plat\\u0027 query parameter. The \\u0027plat\\u0027 query parameter is required to match.\",\"path\":\"/QueryParameter/Platforms/Web--query-parameter-\"},{\"description\":\"A group of regis or anonymous users. \",\"path\":\"/JKIDD/User-Status/Reg
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 69 6e 67 54 69 65 72 73 5c 22 3a 7b 5c 22 31 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 33 36 34 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 31 33 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 35 32 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 35 32 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 31 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 31 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 Data Ascii: ingTiers\":{\"1\":{\"durationDays\":364,\"recurrence\":13,\"durationWeeks\":52,\"totalPrice\":52,\"weeklyPrice\":1,\"tierNumber\":1,\"rawPrice\":\"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\"
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 5c 22 34 2e 30 30 5c 22 7d 2c 5c 22 32 5c 22 3a 7b 5c 22 64 75 72 61 74 69 6f 6e 44 61 79 73 5c 22 3a 2d 32 38 2c 5c 22 72 65 63 75 72 72 65 6e 63 65 5c 22 3a 2d 31 2c 5c 22 64 75 72 61 74 69 6f 6e 57 65 65 6b 73 5c 22 3a 2d 34 2c 5c 22 74 6f 74 61 6c 50 72 69 63 65 5c 22 3a 31 37 2c 5c 22 77 65 65 6b 6c 79 50 72 69 63 65 5c 22 3a 34 2e 32 35 2c 5c 22 74 69 65 72 4e 75 6d 62 65 72 5c 22 3a 32 2c 5c 22 72 61 77 50 72 69 63 65 5c 22 3a 5c 22 31 37 2e 30 30 5c 22 7d 7d 2c 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 3a 5c 22 32 30 30 30 30 32 31 36 38 38 30 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 30 66 64 38 63 66 34 36 2d 64 30 32 39 2d 31 31 65 61 2d 61 30 37 32 2d 33 34 30 63 65 65 36 61 35 32 62 36 5c 22 2c 5c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 5c 22 3a 5c 22 Data Ascii: \"4.00\"},\"2\":{\"durationDays\":-28,\"recurrence\":-1,\"durationWeeks\":-4,\"totalPrice\":17,\"weeklyPrice\":4.25,\"tierNumber\":2,\"rawPrice\":\"17.00\"}},\"promoCode\":\"20000216880\",\"id\":\"0fd8cf46-d029-11ea-a072-340cee6a52b6\",\"currencyCode\":\"
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 6e 67 2d 73 65 72 76 69 63 65 73 2d 63 61 63 68 69 6e 67 5c 22 3a 66 61 6c 73 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 34 30 35 2d 2d 41 43 54 49 56 41 54 45 2d 41 42 52 41 2d 56 31 32 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 32 32 34 2d 2d 68 64 2d 61 75 78 50 72 6f 64 75 63 74 4d 61 70 70 69 6e 67 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 43 4d 4f 54 53 2d 33 31 34 39 2d 2d 43 49 52 43 55 49 54 2d 42 52 45 41 4b 45 52 2d 53 41 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 4f 42 43 4f 2d 33 30 33 38 2d 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 73 2d 72 6f 6c 6c 6f 75 74 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 34 33 39 2d 2d 43 49 47 2d 49 50 2d 53 45 47 4d 45 4e 54 53 5c 22 3a 74 72 75 65 2c 5c 22 46 46 2d 4d 57 43 4d 2d 34 Data Ascii: ng-services-caching\":false,\"FF-CMOTS-3405--ACTIVATE-ABRA-V12\":true,\"FF-CMOTS-224--hd-auxProductMapping\":true,\"FF-CMOTS-3149--CIRCUIT-BREAKER-SAS\":true,\"FF-MOBCO-3038-payment-methods-rollout\":true,\"FF-MWCM-4439--CIG-IP-SEGMENTS\":true,\"FF-MWCM-4
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 22 61 75 64 69 65 6e 63 65 4e 61 6d 65 22 3a 22 4d 41 47 5f 77 65 62 5f 72 65 67 69 5f 61 6e 6f 6e 5f 73 61 6c 65 5f 62 61 72 31 63 6f 70 79 74 65 73 74 5f 73 75 62 63 6f 6e 5f 42 41 55 22 2c 22 70 61 67 65 50 61 74 68 22 3a 22 2f 6d 61 72 6b 65 74 69 6e 67 2f 6d 70 63 2f 6d 75 61 73 73 65 74 73 2f 76 61 72 69 61 6e 74 73 2f 76 61 72 69 61 6e 74 2d 32 22 2c 22 69 73 50 61 67 65 56 61 72 69 61 6e 74 22 3a 74 72 75 65 2c 22 73 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 61 73 65 64 20 6f 6e 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 54 68 65 20 5c 75 30 30 32 37 70 6c 61 74 5c 75 30 30 32 37 20 71 75 65 72 79 Data Ascii: "audienceName":"MAG_web_regi_anon_sale_bar1copytest_subcon_BAU","pagePath":"/marketing/mpc/muassets/variants/variant-2","isPageVariant":true,"segments":[{"description":"Based on the value of the \u0027plat\u0027 query parameter. The \u0027plat\u0027 query
2023-12-05 18:14:05 UTC	1016	IN	Data Raw: 6c 22 3a 22 5c 6e 5c 6e 5c 6e 5c 6e 20 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 3d 5c 22 64 6f 63 6b 5c 22 20 64 61 74 61 2d 63 6f 6e 66 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 5c 22 6d 6b 74 2d 77 63 6d 3a 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 64 6f 63 6b 2f 74 65 6d 70 6c 61 74 65 2f 6d 61 69 6e 5c 22 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 75 75 69 64 3d 5c 22 64 37 65 32 38 32 33 65 2d 36 65 66 62 2d 34 36 33 64 2d 61 34 37 37 2d 62 63 64 64 35 33 33 30 64 31 61 32 5c 22 5c 75 30 30 33 65 5c 6e 5c 6e 5c 6e 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 5c 75 30 30 33 65 5c 6e 20 74 72 79 7b 76 61 72 20 6f 62 73 65 72 76 65 72 3d Data Ascii: l":"\n\n\n\n \u003cdiv class=\"dock\" data-config-component-id=\"mkt-wcm:components/metered_assets/dock/template/main\" data-component-uuid=\"d7e2823e-6efb-463d-a477-bcdd5330d1a2\"\u003e\n\n\n\u003cscript type=\"text/javascript\"\u003e\n try{var observer=
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 65 61 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 64 6f 63 6b 2f 6a 73 2f 73 72 63 2f 6d 61 69 6e 2e 6a 73 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 73 63 72 69 70 74 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 6c 69 6e 6b 20 72 65 6c 3d 5c 22 73 74 79 6c 65 73 68 65 65 74 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 6d 77 63 6d 2e 6e 79 74 2e 63 6f 6d 2f 2e 72 65 73 6f 75 72 63 65 73 2f 6d 6b 74 2d 77 63 6d 2f 64 69 73 74 2f 74 65 6d 70 6c 61 74 65 73 2f 61 72 65 61 73 2f 6d 65 74 65 72 65 64 5f 61 73 73 65 74 73 2f 64 6f 63 6b 2f 63 73 73 2f 6d 61 69 6e 2e 63 73 73 5c 22 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 63 73 73 5c 22 20 2f 5c 75 30 30 33 65 5c 6e 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 61 70 70 6c 69 63 61 74 Data Ascii: eas/metered_assets/dock/js/src/main.js\"\u003e\u003c/script\u003e\n\u003clink rel=\"stylesheet\" href=\"https://mwcm.nyt.com/.resources/mkt-wcm/dist/templates/areas/metered_assets/dock/css/main.css\" type=\"text/css\" /\u003e\n\u003cscript type=\"applicat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50567	34.227.121.59	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	938	OUT	GET /ping?h=nytimes.com&p=nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&u=DrMis-D7EHvcW-4Z2&d=nytimes.com&g=16698&g0=international_desk&g1=Elian%20Peltier&n=1&f=00001&c=0&x=0&m=0&y=907&o=1280&w=907&j=45&R=1&W=0&I=0&E=0&e=0&r=&PA=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html&b=6345&t=CEls-DBj2of3BNg6NhlITXVz1Jb9&V=141&i=Nigeria%E2%80%99s%20President%20Calls%20for%20Inquiry%20After%20Military%20Strike%20Kills%20at%20Least%2085%20Civilians&tz=-60&_acct=anon&sn=1&sv=D5erOUC2Vt0AD2aBx_D1T42anGQx1&sd=3&im=06679ff3&_ HTTP/1.1 Host: pnytimes.chartbeat.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:05 UTC	246	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:05 GMTContent-Type: image/gifContent-Length: 43Connection: closeCross-Origin-Resource-Policy: cross-originCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0
2023-12-05 18:14:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50568	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1079	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=2645637445524;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1725808608;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:05 UTC	2215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50562	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:05 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:05 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50569	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	670	OUT	GET /sync?px=1&src=prebid& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQj8e-2cMxCgkIOhDm2r3ZwzE=; tluid=2618672411569676278148
2023-12-05 18:14:05 UTC	712	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 74 72 69 70 6c 65 6c 69 66 74 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:14:05 GMTContent-Length: 0Connection: closeLocation: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent=Cache-Control: no-cache, no-store, must-revalidate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50573	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	720	OUT	GET /pbusermatch?origin=prebid&site_id=995821&p=1&i=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:14:05 UTC	994	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 49 6e 64 65 78 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 34 34 64 38 63 62 37 36 66 63 35 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 Data Ascii: HTTP/1.1 302 FoundDate: Tue, 05 Dec 2023 18:14:05 GMTContent-Length: 0Connection: closeLocation: https://rtb.adentifi.com/CookieIndexCF-Ray: 830e444d8cb76fc5-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50574	172.64.151.101	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	521	OUT	GET /rum?cm_dsp_id=39&external_user_id=3a743bef-66ee-4af3-a0ea-a4634a63b535&expiration=1704392043&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; CMPS=574; CMPRO=574
2023-12-05 18:14:05 UTC	985	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 52 61 79 3a 20 38 33 30 65 34 34 34 64 61 38 35 35 36 66 39 62 2d 49 41 44 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 49 44 3d 5a 57 39 6f 54 58 75 54 6d 6d 64 5a 66 5a 72 33 30 6b 5a 75 6c 51 41 41 3b 20 50 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:05 GMTContent-Type: image/gifContent-Length: 43Connection: closeCF-Ray: 830e444da8556f9b-IADCF-Cache-Status: DYNAMICCache-Control: no-cacheExpires: 0Set-Cookie: CMID=ZW9oTXuTmmdZfZr30kZulQAA; P
2023-12-05 18:14:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50572	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	777	OUT	GET /w/1.0/pd HTTP/1.1 Host: nytimes-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800031460586
2023-12-05 18:14:05 UTC	383	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 33 50 3a 20 43 50 3d 22 43 55 52 20 41 44 4d 20 4f 55 52 20 4e 4f 52 20 53 54 41 20 4e 49 44 22 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f Data Ascii: HTTP/1.1 200 OKVary: Accept, Accept-EncodingServer: OXGW/0.0.0Pragma: no-cacheP3P: CP="CUR ADM OUR NOR STA NID"Expires: Mon, 26 Jul 1997 05:00:00 GMTDate: Tue, 05 Dec 2023 18:14:05 GMTContent-Type: image/gifContent-Length: 43Cache-Contro
2023-12-05 18:14:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50575	172.253.122.149	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1079	OUT	GET /activity;register_conversion=1;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=630778921.1701800009;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUm7IZSZGpYeFsSguKaoxGOuWfedkDJumHwZw5fVo4LWCmNxJo6Vz-x6eSzb
2023-12-05 18:14:05 UTC	2214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50570	8.28.7.82	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1821	OUT	GET /AdServer/ImgSync?p=163427 HTTP/1.1 Host: image8.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=40D3C5B1-C944-4FD5-B1BE-0A313CAD2333; KRTBCOOKIE_80=22987-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23025-CAESEO4HZyZ72dJGvMK1nyipGtU&KRTB&23386-CAESEO4HZyZ72dJGvMK1nyipGtU; DPSync3=1701820800%3A248%7C1702339200%3A265%7C1702944000%3A263_262_261_260_259_201; KRTBCOOKIE_377=6810-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22918-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&22926-3a743bef-66ee-4af3-a0ea-a4634a63b535&KRTB&23031-3a743bef-66ee-4af3-a0ea-a4634a63b535; KRTBCOOKIE_148=19421-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23486-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23489-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA&KRTB&23539-uid:62D0F5E82D1A4ED6B3E32459FF4A59CA; KRTBCOOKIE_57=22776-3114214532401325210&KRTB&23339-3114214532401325210; SyncRTB3=1702857600%3A104%7C1702944000%3A21_13_71_220_54_250_3%7C1702339200%3A223_15; pi=0:3; KRTBCOOKIE_32=11175-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22713-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&22715-AAAB9mE5p6zvZQM1GvWLAAAAAAA&KRTB&23519-AAAB9mE5p6zvZQM1GvWLAAAAAAA; KRTBCOOKIE_279=22890-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23011-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260&KRTB&23355-d9de6a69-c98e-4eac-8fb8-dfc3bfac3260; PugT=1701800032; chkChromeAb67Sec=8; SPugT=1701766091
2023-12-05 18:14:05 UTC	935	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 53 79 6e 63 50 75 62 4d 61 74 69 63 26 67 64 70 72 3d 2d 31 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 0d 0a 50 33 70 3a 20 43 50 3d 22 4e 4f 49 20 44 53 50 20 43 4f 52 20 4c 41 57 20 43 55 52 20 41 44 4d 6f 20 44 45 56 6f 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 49 56 41 6f 20 49 56 44 6f 20 48 49 53 6f 20 4f 54 50 6f 20 4f 55 52 20 53 41 4d 6f 20 42 55 53 20 55 4e 49 20 43 4f 4d 20 4e 41 56 20 49 4e 54 20 44 45 4d 20 43 4e 54 20 53 54 41 20 50 52 45 Data Ascii: HTTP/1.1 302 FoundContent-Type: text/html; charset=utf-8Location: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=-1&gdpr_consent=P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE
2023-12-05 18:14:05 UTC	96	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 61 64 65 6e 74 69 66 69 2e 63 6f 6d 2f 43 6f 6f 6b 69 65 53 79 6e 63 50 75 62 4d 61 74 69 63 26 61 6d 70 3b 67 64 70 72 3d 2d 31 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=-1&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50578	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	2212	OUT	GET /vi-assets/static-assets/comments-3f4cc7ef7c26c8dabbd6.js?_sw-precache=78a8fb0de49431bb85499463a6652b9c HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:05 UTC	1319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 34 33 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 6e 76 71 2d 4a 4d 61 52 67 67 30 72 34 33 69 39 52 73 79 4e 77 61 6f 5a 56 6b 6e 6b 6c 7a 6a 6f 73 41 2d 50 71 2d 77 41 48 52 42 34 5a 6d 66 33 77 51 4d 74 38 51 54 35 36 2d 71 78 58 70 79 7a 7a 4f 73 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 37 37 39 31 38 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 44433X-GUploader-UploadID: ABPtcPonvq-JMaRgg0r43i9RsyNwaoZVknklzjosA-Pq-wAHRB4Zmf3wQMt8QT56-qxXpyzzOsQx-goog-generation: 1701369734779183x-goog-metageneration: 1x-goog-stored-content-encoding: id
2023-12-05 18:14:05 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 5d 2c 7b 45 63 76 4a 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 3b 76 61 72 20 6f 3d 6e 28 22 4a 71 70 39 22 29 2c 69 3d 6e 28 22 77 58 43 37 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 72 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 62 61 63 6b 67 72 6f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[64],{EcvJ:function(e,t,n){"use strict";n.d(t,"a",(function(){return r})),n.d(t,"b",(function(){return c})),n.d(t,"c",(function(){return s}));var o=n("Jqp9"),i=n("wXC7"),a=n.n(i),r=Object(o.css)("backgro
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 66 3d 4f 62 6a 65 63 74 28 64 2e 63 73 73 29 28 22 62 75 74 74 6f 6e 26 2c 61 7b 22 2c 70 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 75 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 6d 65 64 69 75 6d 42 6f 6c 64 2c 22 3b 7d 22 29 2c 62 3d 4f 62 6a 65 63 74 28 64 2e 63 73 73 29 28 22 62 75 74 74 6f 6e 26 2c 61 7b 22 2c 70 2c 22 3b 7d 22 29 2c 68 3d 4f 62 6a 65 63 74 28 64 2e 63 73 73 29 28 22 62 75 74 74 6f 6e 26 2c 61 7b 22 2c 70 2c 22 3b 63 6f 6c 6f 72 3a 22 2c 75 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 34 30 2c 22 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 7d 22 29 2c 67 3d 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 6f 6e 43 6c 69 63 6b 22 2c 22 74 68 65 6d 65 22 5d 2c 76 3d 7b 41 43 54 49 4f 4e 3a 22 61 63 74 69 6f 6e 22 2c 53 45 43 Data Ascii: f=Object(d.css)("button&,a{",p,";font-weight:",u.a.font.weight.mediumBold,";}"),b=Object(d.css)("button&,a{",p,";}"),h=Object(d.css)("button&,a{",p,";color:",u.a.color.gray40,";padding-bottom:4px;}"),g=["children","onClick","theme"],v={ACTION:"action",SEC
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 22 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 3a 31 34 70 78 20 30 20 31 30 70 78 3b 2e 22 2c 72 2e 62 2c 22 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 3b 7d 22 29 2c 6c 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 66 6c 65 78 2d 67 72 6f 77 3a 32 3b 22 29 2c 64 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 22 29 2c 6d 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 62 6f 6c 64 2c 22 3b 22 29 2c 75 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 63 6f 6c 6f 72 3a 22 2c 61 2e 61 2e Data Ascii: ;margin-bottom:5px;width:100%;"),s=Object(o.css)("margin:14px 0 10px;.",r.b,"{margin-right:15px;}"),l=Object(o.css)("flex-grow:2;"),d=Object(o.css)("margin-left:10px;"),m=Object(o.css)("font-weight:",a.a.font.weight.bold,";"),u=Object(o.css)("color:",a.a.
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 61 6d 69 6c 79 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 6d 65 64 69 75 6d 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 35 29 2c 22 3b 74 65 78 74 2d 77 72 61 70 3a 77 72 61 70 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 22 29 2c 76 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 Data Ascii: amily:",a.a.font.franklinBase,";font-weight:",a.a.font.weight.medium,";line-height:",a.a.font.size(15),";text-wrap:wrap;margin-top:-10px;background:white;box-shadow:0 0 10px rgba(0,0,0,0.15);a{text-decoration:underline;cursor:pointer;}"),v=Object(o.css)("
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 65 74 75 72 6e 28 65 3d 74 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 74 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 69 29 29 29 2e 73 74 61 74 65 3d 7b 6c 6f 63 61 6c 65 54 69 6d 65 73 74 61 6d 70 3a 6e 75 6c 6c 2c 64 61 74 65 54 69 6d 65 3a 4f 62 6a 65 63 74 28 67 2e 67 65 74 49 53 4f 46 72 6f 6d 55 6e 69 78 29 28 65 2e 70 72 6f 70 73 2e 75 6e 69 78 29 7d 2c 65 7d 72 65 74 75 72 6e 20 73 28 29 28 6e 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 6f 72 6d 61 74 54 69 6d 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 6f 3d 3d 3d 74 68 69 73 2e 70 Data Ascii: eturn(e=t.call.apply(t,[this].concat(i))).state={localeTimestamp:null,dateTime:Object(g.getISOFromUnix)(e.props.unix)},e}return s()(n,[{key:"componentDidMount",value:function(){this.formatTime()}},{key:"componentDidUpdate",value:function(e){e.iso===this.p
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 61 6c 65 54 69 6d 65 73 74 61 6d 70 29 3a 69 28 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 7d 2c 76 6f 69 64 20 30 2c 22 c2 a0 22 29 7d 7d 5d 29 2c 6e 7d 28 62 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 78 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 54 69 6d 65 73 74 61 6d 70 22 2c 78 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 75 6e 69 78 3a 76 6f 69 64 20 30 2c 69 73 6f 3a 76 6f 69 64 20 30 2c 63 6c 61 73 73 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 75 70 64 61 74 65 64 54 65 78 74 3a 21 31 2c 75 70 64 61 74 65 64 54 65 78 74 43 6c 61 73 73 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 68 65 6d 65 3a 76 6f 69 64 20 30 7d 2c 74 2e 61 3d 4f 62 6a 65 63 74 28 68 2e 77 69 74 68 54 68 65 6d 65 29 28 78 29 7d 2c 22 66 2b 32 56 22 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: aleTimestamp):i()("span",{className:t},void 0,"")}}]),n}(b.Component);x.displayName="Timestamp",x.defaultProps={unix:void 0,iso:void 0,className:void 0,updatedText:!1,updatedTextClassName:void 0,theme:void 0},t.a=Object(h.withTheme)(x)},"f+2V":function(
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 2e 63 78 29 28 6f 2c 7b 70 6c 61 63 65 68 6f 6c 64 65 72 3a 61 7d 29 2c 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 22 74 72 75 65 22 7d 2c 76 6f 69 64 20 30 2c 72 26 26 69 28 29 28 22 69 6d 67 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 2c 61 6c 74 3a 6e 2c 73 72 63 3a 72 7d 29 2c 21 72 26 26 69 28 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 75 7d 2c 76 6f 69 64 20 30 2c 6e 2e 73 75 62 73 74 72 28 30 2c 31 29 29 29 7d 68 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 55 73 65 72 48 65 61 64 65 72 22 2c 68 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 73 69 7a 65 3a 66 2c 74 69 74 6c 65 3a 22 22 2c 75 72 6c 3a 6e 75 6c 6c 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 21 31 7d 3b 76 61 72 20 67 2c 76 2c 79 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 68 29 2c 78 Data Ascii: .cx)(o,{placeholder:a}),"aria-hidden":"true"},void 0,r&&i()("img",{className:u,alt:n,src:r}),!r&&i()("span",{className:u},void 0,n.substr(0,1)))}h.displayName="UserHeader",h.defaultProps={size:f,title:"",url:null,placeholder:!1};var g,v,y=Object(l.a)(h),x
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 72 65 74 75 72 6e 20 73 7d 29 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 76 61 72 20 6f 3d 6e 28 22 4a 71 70 39 22 29 2c 69 3d 6e 28 22 77 58 43 37 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 72 3d 4f 62 6a 65 63 74 28 6f 2e 63 73 73 29 28 22 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 22 2c 61 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 36 30 2c 22 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 63 6f 6c 6f 72 3a 22 2c 61 2e 61 2e 63 6f 6c 6f 72 2e 62 6c 61 63 6b 2c 22 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 22 2c 61 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 31 35 29 2c 22 3b 6c 69 6e Data Ascii: return s})),n.d(t,"b",(function(){return l}));var o=n("Jqp9"),i=n("wXC7"),a=n.n(i),r=Object(o.css)("border:1px solid ",a.a.color.gray60,";border-radius:3px;color:",a.a.color.black,";font-family:",a.a.font.franklinBase,";font-size:",a.a.font.size(15),";lin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50571	142.251.16.157	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1432	OUT	GET /ddm/fls/z/dc_pre=COfBwJjz-IIDFfbNKAUd6k0OZg;src=5290727;type=allpa0;cat=nyti-0;ord=1;num=9308860040772;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;u5=;u18=anon;ps=1;pcor=408433292;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5290727.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:14:05 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 49 20 44 45 56 20 50 53 41 20 50 53 44 20 49 56 41 20 49 56 44 20 4f 54 50 20 4f 55 52 20 4f 54 52 20 49 4e 44 20 4f 54 43 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate: Tue, 05 Dec 2023 18:14:05 GMTPragma: no-cache
2023-12-05 18:14:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50576	142.251.16.157	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1420	OUT	GET /ddm/fls/z/dc_pre=CMOT7Jjz-IIDFXf9KAUddlEBiw;src=5290727;type=remar0;cat=gatew0;ord=1;num=9130614605399;auiddc=;u17=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html;ps=1;pcor=1956187190;gtm=45He3bt0v72703797;gcd=11l1l1l1l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nytimes.com%2F2023%2F12%2F05%2Fworld%2Fafrica%2Fnigeria-strike-civilians.html HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5290727.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-05 18:14:05 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 49 20 44 45 56 20 50 53 41 20 50 53 44 20 49 56 41 20 49 56 44 20 4f 54 50 20 4f 55 52 20 4f 54 52 20 49 4e 44 20 4f 54 43 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originDate: Tue, 05 Dec 2023 18:14:05 GMTPragma: no-cache
2023-12-05 18:14:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50579	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; nyt-jkidd=uid=0&lastRequest=1701800042277&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3
2023-12-05 18:14:05 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 35 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:05 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50577	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	2216	OUT	GET /vi-assets/static-assets/commentsForm-33d5d4cf5aa475738f35.js?_sw-precache=5069485bc406f6b26ec21864896596d7 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:05 UTC	1322	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 33 38 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 67 31 5f 39 50 61 47 36 58 73 4f 6e 47 76 2d 4f 58 52 4a 37 52 74 68 46 67 4a 50 64 6b 30 44 4e 66 30 79 71 43 32 4a 50 66 5a 46 73 67 71 67 32 67 65 58 56 74 4d 76 33 53 34 62 59 50 38 76 46 33 54 55 6b 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 36 39 39 34 36 32 39 38 34 36 30 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 13381X-GUploader-UploadID: ABPtcPqg1_9PaG6XsOnGv-OXRJ7RthFgJPdk0DNf0yqC2JPfZFsgqg2geXVtMv3S4bYP8vF3TUkx-goog-generation: 1701699462984600x-goog-metageneration: 1x-goog-stored-content-encoding: id
2023-12-05 18:14:05 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 35 5d 2c 7b 22 32 58 51 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 61 29 2c 74 2e 64 28 61 2c 22 76 61 6c 69 64 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 76 61 72 20 6e 3d 74 28 22 67 63 52 2f 22 29 2c 72 3d 74 2e 6e 28 6e 29 2c 6f 3d 74 28 22 71 31 74 49 22 29 2c 69 3d 74 2e 6e 28 6f 29 2c 6c 3d 74 28 22 58 36 6f 4c 22 29 2c 63 3d 74 28 22 4d 43 49 39 22 29 2c 73 3d 74 28 22 56 67 32 32 22 29 2c 75 3d 74 28 22 76 42 75 37 22 29 2c 6d 3d 74 28 22 50 78 4d 77 22 29 2c 64 3d 74 2e 6e 28 6d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[65],{"2XQA":function(e,a,t){"use strict";t.r(a),t.d(a,"validate",(function(){return P}));var n=t("gcR/"),r=t.n(n),o=t("q1tI"),i=t.n(o),l=t("X6oL"),c=t("MCI9"),s=t("Vg22"),u=t("vBu7"),m=t("PxMw"),d=t.n(m
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 43 2e 61 2e 6f 66 66 54 6f 70 69 63 2c 76 61 6c 75 65 3a 22 4f 66 66 2d 74 6f 70 69 63 22 7d 2c 7b 6c 61 62 65 6c 3a 43 2e 61 2e 70 65 72 73 6f 6e 61 6c 41 74 74 61 63 6b 2c 76 61 6c 75 65 3a 22 50 65 72 73 6f 6e 61 6c 2d 61 74 74 61 63 6b 22 7d 2c 7b 6c 61 62 65 6c 3a 43 2e 61 2e 76 75 6c 67 61 72 2c 76 61 6c 75 65 3a 22 56 75 6c 67 61 72 22 7d 2c 7b 6c 61 62 65 6c 3a 43 2e 61 2e 73 70 61 6d 2c 76 61 6c 75 65 3a 22 53 70 61 6d 22 7d 5d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 63 2e 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 28 7b 5f 65 72 72 6f 72 3a 43 2e 61 2e 61 6e 45 72 72 6f 72 4f 63 63 75 72 72 65 64 7d 29 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3d 65 5b 46 5d 3b 72 65 74 75 72 6e 28 6e 75 6c Data Ascii: C.a.offTopic,value:"Off-topic"},{label:C.a.personalAttack,value:"Personal-attack"},{label:C.a.vulgar,value:"Vulgar"},{label:C.a.spam,value:"Spam"}],k=function(){throw new c.SubmissionError({_error:C.a.anErrorOccurred})},P=function(e){var a=e[F];return(nul
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 75 74 2c 74 3d 65 2e 74 69 74 6c 65 2c 6e 3d 65 2e 63 75 72 72 65 6e 74 41 76 61 74 61 72 2c 6f 3d 4f 62 6a 65 63 74 28 73 2e 75 73 65 52 65 66 29 28 6e 75 6c 6c 29 2c 6c 3d 4f 62 6a 65 63 74 28 73 2e 75 73 65 53 74 61 74 65 29 28 6e 75 6c 6c 29 2c 63 3d 69 28 29 28 6c 2c 32 29 2c 6d 3d 63 5b 30 5d 2c 64 3d 63 5b 31 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 63 75 72 72 65 6e 74 2e 63 6c 69 63 6b 28 29 7d 2c 70 3d 6d 2c 76 3d 21 21 70 7c 7c 21 21 6e 3b 72 65 74 75 72 6e 20 75 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 75 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 72 28 29 28 22 64 69 76 22 2c 7b 61 6c 74 3a 74 2c 6f 6e 43 6c 69 63 6b 3a 66 2c 6f 6e 4b 65 79 50 72 65 73 73 3a 66 2c 72 6f 6c 65 3a 22 62 75 74 74 Data Ascii: ut,t=e.title,n=e.currentAvatar,o=Object(s.useRef)(null),l=Object(s.useState)(null),c=i()(l,2),m=c[0],d=c[1],f=function(){return o.current.click()},p=m,v=!!p\|\|!!n;return u.a.createElement(u.a.Fragment,null,r()("div",{alt:t,onClick:f,onKeyPress:f,role:"butt
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 61 69 6c 74 6f 3a 63 6f 6d 6d 75 6e 69 74 79 2e 6d 61 6e 61 67 65 72 40 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 7d 2c 76 6f 69 64 20 30 2c 22 63 6f 6d 6d 75 6e 69 74 79 2e 6d 61 6e 61 67 65 72 40 6e 79 74 69 6d 65 73 2e 63 6f 6d 22 29 29 2c 22 20 22 2c 22 74 6f 20 72 65 71 75 65 73 74 20 61 20 63 68 61 6e 67 65 20 74 6f 20 79 6f 75 72 20 6e 61 6d 65 20 6f 72 20 74 69 74 6c 65 2e 22 29 29 29 7d 46 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 53 74 61 66 66 48 65 61 64 65 72 22 2c 46 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 74 69 74 6c 65 3a 22 22 2c 61 76 61 74 61 72 55 72 6c 3a 6e 75 6c 6c 2c 73 74 61 66 66 54 69 74 6c 65 3a 22 22 7d 3b 76 61 72 20 4d 3d 46 2c 6b 3d 74 28 22 58 31 4b 38 22 29 2c 50 3d 74 28 22 77 58 43 37 22 29 2c 7a 3d 74 2e 6e 28 50 29 2c Data Ascii: ailto:community.manager@nytimes.com"},void 0,"community.manager@nytimes.com"))," ","to request a change to your name or title.")))}F.displayName="StaffHeader",F.defaultProps={title:"",avatarUrl:null,staffTitle:""};var M=F,k=t("X1K8"),P=t("wXC7"),z=t.n(P),
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 35 29 2c 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 22 2c 7a 2e 61 2e 66 6f 6e 74 2e 73 69 7a 65 28 32 30 29 2c 22 3b 72 65 73 69 7a 65 3a 76 65 72 74 69 63 61 6c 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 22 2c 7a 2e 61 2e 63 6f 6c 6f 72 2e 77 68 69 74 65 2c 22 3b 22 29 2c 57 3d 4f 62 6a 65 63 74 28 4f 2e 63 73 73 29 28 22 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 22 29 2c 65 65 3d 4f 62 6a 65 63 74 28 4f 2e 63 73 73 29 28 22 66 6c 65 78 2d 67 72 6f 77 3a 32 3b 22 29 2c 61 65 3d 4f 62 6a 65 63 74 28 4f 2e 63 73 73 29 28 22 63 6f 6c 6f 72 3a 22 2c 7a 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 33 35 2c 22 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 72 67 69 Data Ascii: 5),";line-height:",z.a.font.size(20),";resize:vertical;box-sizing:border-box;background:",z.a.color.white,";"),W=Object(O.css)("display:flex;margin-top:10px;"),ee=Object(O.css)("flex-grow:2;"),ae=Object(O.css)("color:",z.a.color.gray35,";flex-grow:1;margi
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 6f 75 6e 74 3d 21 31 2c 74 2e 76 61 6c 69 64 61 74 65 3d 6c 65 2c 74 2e 69 73 52 65 70 6c 79 46 6f 72 6d 3d 21 4f 62 6a 65 63 74 28 4a 2e 6c 29 28 61 2e 72 65 70 6c 79 54 6f 43 6f 6d 6d 65 6e 74 49 64 29 2c 65 2e 70 72 6f 66 69 6c 65 2e 64 61 74 61 29 7b 76 61 72 20 6e 2c 72 2c 6f 3d 65 2e 70 72 6f 66 69 6c 65 2e 64 61 74 61 2c 69 3d 42 6f 6f 6c 65 61 6e 28 6f 2e 63 6f 6d 6d 65 6e 74 5f 6e 6f 74 69 66 79 29 2c 6c 3d 6f 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 73 3d 6f 2e 65 6d 61 69 6c 2c 75 3d 6f 2e 6c 6f 63 61 74 69 6f 6e 2c 6d 3d 6f 2e 70 69 63 55 52 4c 2c 64 3d 6f 2e 75 73 65 72 49 44 2c 66 3d 6f 2e 69 73 52 65 70 6f 72 74 65 72 2c 70 3d 6f 2e 74 69 74 6c 65 2c 76 3d 22 22 3b 74 2e 69 73 52 65 70 6c 79 46 6f 72 6d 26 26 28 76 3d 4f 62 6a 65 63 74 28 4a Data Ascii: ount=!1,t.validate=le,t.isReplyForm=!Object(J.l)(a.replyToCommentId),e.profile.data){var n,r,o=e.profile.data,i=Boolean(o.comment_notify),l=o.displayName,s=o.email,u=o.location,m=o.picURL,d=o.userID,f=o.isReporter,p=o.title,v="";t.isReplyForm&&(v=Object(J
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 2e 68 29 28 29 29 7d 29 2c 5b 5d 29 3b 76 61 72 20 4a 3d 58 2e 61 2e 72 65 71 75 69 72 65 64 4c 61 62 65 6c 28 7b 66 69 65 6c 64 4e 61 6d 65 3a 58 2e 61 2e 6e 61 6d 65 4c 61 62 65 6c 7d 29 2c 6f 65 3d 58 2e 61 2e 72 65 71 75 69 72 65 64 4c 61 62 65 6c 28 7b 66 69 65 6c 64 4e 61 6d 65 3a 58 2e 61 2e 6c 6f 63 61 74 69 6f 6e 4c 61 62 65 6c 7d 29 2c 69 65 3d 77 3f 77 5b 6a 2e 61 2e 41 56 41 54 41 52 5f 55 52 4c 5d 3a 6e 75 6c 6c 2c 6c 65 3d 65 2e 73 75 62 6d 69 74 42 75 74 74 6f 6e 4c 61 62 65 6c 7c 7c 58 2e 61 2e 73 75 62 6d 69 74 3b 72 65 74 75 72 6e 20 72 28 29 28 22 66 6f 72 6d 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 51 2c 6f 6e 53 75 62 6d 69 74 3a 6f 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 52 28 4f 62 6a 65 63 74 28 79 2e 72 29 28 Data Ascii: .h)())}),[]);var J=X.a.requiredLabel({fieldName:X.a.nameLabel}),oe=X.a.requiredLabel({fieldName:X.a.locationLabel}),ie=w?w[j.a.AVATAR_URL]:null,le=e.submitButtonLabel\|\|X.a.submit;return r()("form",{className:Q,onSubmit:o((function(e){return R(Object(y.r)(
2023-12-05 18:14:05 UTC	1379	IN	Data Raw: 70 6c 61 63 65 68 6f 6c 64 65 72 3a 21 30 7d 29 7d 28 29 2c 62 26 26 72 28 29 28 64 2e 46 69 65 6c 64 2c 7b 6e 61 6d 65 3a 4e 2e 61 2e 43 4f 4d 4d 45 4e 54 5f 42 4f 44 59 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 22 74 65 78 74 61 72 65 61 22 2c 73 74 79 6c 65 3a 7b 6d 69 6e 48 65 69 67 68 74 3a 70 7d 2c 6f 6e 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 55 28 31 35 30 30 2d 61 2e 6c 65 6e 67 74 68 29 7d 2c 6f 6e 46 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3d 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 3b 65 2e 74 61 72 67 65 74 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 61 2c 61 29 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 24 2c 64 69 73 61 62 6c 65 64 3a 63 2c 61 75 74 6f 46 6f 63 75 73 3a 21 Data Ascii: placeholder:!0})}(),b&&r()(d.Field,{name:N.a.COMMENT_BODY,component:"textarea",style:{minHeight:p},onChange:function(e,a){U(1500-a.length)},onFocus:function(e){var a=e.target.value.length;e.target.setSelectionRange(a,a)},className:$,disabled:c,autoFocus:!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50580	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	793	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/sprite.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:05 UTC	778	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:05 UTC	474	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 94 00 00 09 40 04 03 00 00 00 b2 1e 13 8e 00 00 00 15 50 4c 54 45 47 70 4c 0e 3e 55 11 38 4d 12 38 4c 23 1f 20 14 35 45 06 47 64 2a 38 92 4c 00 00 00 06 74 52 4e 53 00 d2 75 3b fd ae 79 30 60 68 00 00 35 5f 49 44 41 54 78 01 ec dc c1 72 a2 58 14 87 f1 23 c8 3e 35 ed ec 6f 19 b2 67 82 0f 80 f0 67 cf d8 f4 fb bf ca 78 39 44 72 89 ce 8a 4e 75 52 df 6f 41 10 8e ec be 4a 79 41 0d c0 b7 b0 7b b6 af 0f c0 5e 7f 19 80 6f 90 b2 fa 60 00 be b8 ec 20 e9 a7 01 f8 e2 f2 17 a9 b5 2f 0f 40 41 ca c0 37 c0 7f 65 e0 1b c8 46 3e 2b 03 ac 60 03 7f 0c ee 2b 57 06 80 a7 bd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 f3 e5 ff 4a 17 b3 42 2e d8 95 d4 9a 59 26 55 66 b9 64 d1 5e 4d dc c4 43 85 ef 46 8d 5d bd Data Ascii: PNGIHDR@PLTEGpL>U8M8L# 5EGd*8LtRNSu;y0`h5_IDATxrX#>5oggx9DrNuRoAJyA{^o` /@A7eF>+`+WJB.Y&Ufd^MCF]
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 4b 72 fd 1c f0 49 8d 1f 5c 52 3e a8 4b 53 2e 7c 74 d4 e0 ad e6 9e f2 45 8d e5 ea d6 29 7b ea 5b 03 30 aa 0f ab 94 33 b5 99 fa 39 d3 52 21 49 f9 a2 3e 4d 79 af ce ae ca b7 94 33 9d e3 c1 1f 6a 2d 53 b3 4e d9 53 df 1a 80 52 d2 a5 4a 52 2e d4 99 64 9e 9d 64 49 ca 83 14 92 94 4f 6a e6 3f de ea 4e bd cf c5 e4 07 7f d1 d5 75 5d f9 e9 b8 ad 6c 63 00 0a 45 61 49 d9 ff 8e 7e 68 94 da 55 ca a5 9a 39 e5 28 ac 52 ae 5f 0f ea a6 b9 51 d7 6d f0 94 a3 81 94 81 df a9 d4 55 bf a4 ec eb d9 a5 06 df 55 b3 4a 79 a7 f6 71 ca 93 30 27 5f 95 32 52 06 3e cb f1 e0 f9 dd 52 2e a7 40 3b bb ca a4 b0 4a 39 97 fe 3f e5 d6 a6 b9 bd c2 d8 93 f2 27 02 5e 94 dc 57 d6 ad 48 af 2f 4d d9 46 bd a8 59 3e 01 27 cb 5e 51 e3 29 17 7a 52 6b 9f b3 ec 05 20 0f 53 87 cd 92 72 ae c9 f9 51 ca 27 f5 ef Data Ascii: KrI\R>KS.\|tE){[039R!I>My3j-SNSRJR.ddIOj?Nu]lcEaI~hU9(R_QmUUJyq0'_2R>R.@;J9?'^WH/MFY>'^Q)zRk SrQ'
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 57 39 9d 16 a9 ec 82 07 19 2a dc 9d 56 99 9f 06 b1 44 a4 f2 6b f8 e0 e8 6e 8f d7 e0 bf 2b 3f 53 79 85 6e 76 2c 3a 40 65 74 bc 08 5c e0 db ee 6e ba ca c9 b4 22 2a 0f 0e 15 e1 3f f2 b3 74 85 78 20 96 86 54 6e a1 c8 ce 5b 87 2e cc d5 e4 4c 20 91 67 4d 3e dc 18 22 b7 81 ca 4d a0 72 85 4e 12 c5 a7 ab 9c 48 8b 54 c6 29 19 ab 5c 9c 56 99 9f 06 b1 34 a4 72 99 56 19 fd e1 d1 0e 70 88 a8 dc 6f 46 bc 33 86 63 e7 ab 9c 48 2b ad 72 d0 4d 67 a7 55 2e a5 f2 a2 91 ca 50 04 af eb f3 54 de 59 08 be d7 2e 41 65 7e 1a 18 21 a4 f2 5e 2a ff 35 08 a9 bc 9e af 72 f5 85 2a af 27 ab dc 49 65 71 1e ea 95 2b f5 ca 42 48 65 a9 2c ae 8c 54 1e a4 b2 10 7f f7 77 e5 ed c6 d3 b0 ca 47 91 f5 5d f9 af 43 e8 16 91 35 8a 26 ef f6 ba b9 a4 ca e5 e4 5e b9 18 55 d6 2d 22 42 2a a3 7c 79 9e ca d7 Data Ascii: W9VDkn+?Synv,:@et\n"?tx Tn[.L gM>"MrNHT)\V4rVpoF3cH+rMgU.PTY.Ae~!^5r'Ieq+BHe,TwG]C5&^U-"B*\|y
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 3e 25 43 a3 dc 02 fa 68 08 36 9e ab 75 88 45 d9 23 4b 54 82 ed f7 ff 7d 86 86 1f 57 30 0a 1d fe 76 d5 a3 01 1d 9e 2e e3 26 8c 51 c1 80 50 61 12 a3 c3 2d 0e 0a f1 25 94 47 dd 89 33 00 ef 32 03 fd 49 95 ab dc bc 53 ab f0 64 40 31 82 3a bb 88 ca d1 10 7e b7 87 ab 85 ca 94 3d b2 c4 d9 fd 91 ca 06 0e f1 0a b0 6f 40 b3 0d 01 07 6e 02 ab bc 32 4e a2 77 3b fb 4a 95 85 58 19 e8 58 65 5b e3 45 ec 69 4e a9 dc b7 28 5f 06 27 03 8e 11 4a b3 67 95 a3 21 a0 3f e0 6a a3 2a af c3 2c 5b 5f 59 4c e5 2e 56 01 5d 64 6b 91 fb 6e 74 9f 9b c0 d1 ca ff 4d e2 27 0e 0a f1 25 84 96 55 ac 32 4c 05 fb a8 ca e1 f1 2c 3c 19 c4 62 80 03 ab 1c 0d 01 a9 00 57 1b 55 b9 0f b2 cc d0 25 b2 ca 68 38 57 e0 c9 61 b0 2f 87 f6 53 13 a8 57 ce 38 89 f0 a0 10 5f 42 ce 1f 34 2d 84 5e e1 87 4f 55 de 59 Data Ascii: >%Ch6uE#KT}W0v.&QPa-%G32ISd@1:~=o@n2Nw;JXXe[EiN(_'Jg!?j*,[_YL.V]dkntM'%U2L,<bWU%h8Wa/SW8_B4-^OUY
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: e2 c0 58 b8 a0 59 92 a8 09 e5 89 26 48 65 71 01 82 4e b6 3c 21 03 b6 d1 2b ef fc ff cc 22 2a 67 90 76 85 83 23 14 83 86 2f 05 2a 27 42 e4 e8 f4 da 39 2a 63 3c 43 42 65 67 23 cf 8f f7 27 7e 47 3b 8c 25 11 26 d6 84 f6 e3 fc c7 47 6e 82 54 16 97 60 e7 af df fc c2 cb 8f 64 40 67 83 81 8a 1f 56 0c 0f db 36 a6 72 ee 6f e8 ca cb 70 28 10 c7 68 fd 66 61 a4 72 3c 04 cd 22 32 43 65 af 63 5a e5 d8 84 40 88 8d 0f 28 78 3f a1 26 d0 54 df dc 04 a9 2c 2e 40 11 4c 52 d5 b9 88 0c ad bd f1 e3 a3 80 41 47 40 2a fb d2 b7 9b f6 68 ea 5b 8e 51 7f 14 fa 69 a4 72 22 44 60 da 0c 95 7d 95 fb a4 ca bb 53 2a d7 30 d8 0c e1 b9 09 47 e7 57 dc 04 a9 2c 2e 40 ce 62 b2 0c 3b ba dd 21 4b aa 8c d2 e1 3e 8e 91 fe 5d 99 43 80 dd 59 2a 63 46 fb 84 ca 59 4a e5 60 0e b2 c6 b9 68 13 56 e6 a9 b8 Data Ascii: XY&HeqN<!+"gv#/'B9c<CBeg#'~G;%&GnT`d@gV6rop(hfar<"2CecZ@(x?&T,.@LRAG@h[Qir"D`}S0GW,.@b;!K>]CYcFYJ`hV
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 70 af 1c 1e ac 42 1d 58 65 8e 1a 4f 9d 70 a9 cc d3 2a 5b f5 79 af 9c f1 bb 46 58 4c 88 0b aa 1c 6e 4d 57 99 cf 21 c9 a8 0b a3 1d a4 72 ce 67 ef a2 2a 73 90 54 ea 20 9d 79 5a 65 1c 49 ab bc a3 2b 78 35 6d 0b 71 21 95 b9 07 9c ae 32 3b c5 57 d2 ba cd 4f 1b 69 b0 03 34 a4 72 f1 71 01 38 6f d1 93 b5 51 95 39 48 22 f5 90 75 32 f3 b4 ca 87 cf 55 6e 3f ae 93 ff 7e 6f 0a 72 7f 78 bc c7 f1 2f 43 88 f2 e8 c7 a8 55 68 5d f5 b9 ca dd c3 f6 23 c0 f0 b8 39 76 a8 ff bf 1d 99 97 ad c0 a9 47 b5 ec e1 aa af 73 17 be 01 20 1c 74 30 07 38 c8 89 d4 6f fd 79 f6 bc ad d1 b3 c6 33 4f a8 fc f0 58 1f f5 f5 95 2b e8 dd ca d7 99 a3 6e 04 c2 bb 47 eb ff 0b 71 a1 5b 44 76 b0 0e f2 1a e8 9a 98 ca 7b 5f d4 1a 9c eb 4b 74 14 ac 47 ff ba e7 5a d6 94 42 8d 7d ed 47 a1 3c fc ed d6 1c e0 20 Data Ascii: pBXeOp[yFXLnMW!rgsT yZeI+x5mq!2;WOi4rq8oQ9H"u2Un?~orx/CUh]#9vGs t08oy3OX+nGq[Dv{_KtGZB}G<
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: d6 cc 43 32 73 bc a3 f4 2e a7 a2 08 12 14 c5 3c 47 5d 93 5a 5f f9 9e de 96 84 b8 18 d9 7d 39 3c 35 6e 26 e8 b8 b2 d6 10 c4 bf e6 b1 89 5a ac 7b 82 ac cc f6 de 8e 52 c8 df b6 21 6c 2a c8 79 a9 e3 1d a5 7b 3a 2b c0 a6 b4 97 87 a0 2d 2f 66 3f 36 4e 88 e5 71 a1 05 92 84 10 52 59 08 21 95 85 90 ca 42 08 a9 2c 84 90 ca 42 08 a9 2c 84 54 16 42 48 65 21 84 54 16 42 48 65 21 04 c6 16 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 fc 8d 4c 5a ce e8 67 6b dd 53 73 72 b8 c4 0d 96 6e 38 9b 1d 67 23 84 98 44 9e 5e c4 3b 5c 3b a5 ab 02 fb 2b 16 d0 dc bf 41 7d 9c cd ca 3c 3f 1e 9c 10 62 b6 ca 30 d9 53 5d 50 65 04 06 b7 4e 08 31 53 65 f6 69 b8 a2 ca 76 e7 ce 40 08 a9 9c 05 3a ad af a5 32 aa 14 42 cc 51 99 75 1a ae a9 f2 c1 09 21 Data Ascii: C2s.<G]Z_}9<5n&Z{R!l*y{:+-/f?6NqRY!B,B,TBHe!TBHe!!B!B!B!B!B!BLZgkSsrn8g#D^;\;+A}<?b0S]PeN1Seiv@:2BQu!
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 2f bc ad 08 21 26 f0 b3 b5 ee a9 71 53 c8 ee cb c1 17 a5 b9 bd 3e 09 b0 2d ed 25 55 62 7a a4 ff cf ce 1d f4 b6 8d 5c 71 00 9f 88 d2 3d 28 d4 bb 6a cb 77 22 66 ee 92 f8 78 f7 c6 f2 f7 ff 2a 35 df 98 22 bd 76 d0 36 90 52 ec e2 f7 c3 0e c1 0c 67 66 4f 7f 3c 8a e4 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 af 7d 7b 79 69 cb a4 b9 db 95 32 b6 ff 41 8e bf 3d e0 ee ae 8c 56 77 e5 a3 55 Data Ascii: /!&qS>-%Ubz\q=(jw"fx*5"v6RgfO<}{yi2A=VwU
2023-12-05 18:14:05 UTC	1252	IN	Data Raw: 58 d7 58 ee b3 4a 6e e3 55 3f fd 86 cd a4 cd 9d 65 7f ca 36 6f 6e 3c c7 68 f7 6e 4c 44 0c dd 90 83 22 0e 75 7c de 4d 7f 89 57 c3 b4 76 3d ae a3 5c 05 d0 9d 6a a2 33 ca d3 d6 e2 cd 14 e5 32 77 4e 1b a3 b2 7f 77 f9 04 3b 9e e7 31 f5 e4 b8 cb 35 9b fc 96 e4 5c 4f bf d6 94 1f 77 d3 da f5 d8 1d 0b 70 03 cd b7 c7 32 eb 8e 73 e7 e7 be dd b7 7f 9a d8 5c c6 36 77 ed c7 c1 bf 1f b0 1f ca ff 1d 20 ca c0 df 69 0b 22 d8 ca fc d7 07 84 28 ff 1d 40 1c ca 5f 1f f0 d8 96 df 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: XXJnU?e6on<hnLD"u\|MWv=\j32wNw;15\Owp2s\6w i"(@_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50584	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	442	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/lines.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:06 UTC	777	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:06 UTC	475	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 94 00 00 01 f4 02 03 00 00 00 8f ea f9 2a 00 00 00 09 50 4c 54 45 f1 f1 f1 db db db e6 e6 e6 68 8d 38 a9 00 00 0f b5 49 44 41 54 78 5e ed 9d 41 6a e4 48 1b 05 25 81 06 b4 b7 44 1f e0 2f 9f a3 8e a0 45 2d b4 ac a3 f8 08 ff a2 18 7c dc 39 80 05 6e f4 99 8e 8c ce 37 cb 62 06 b5 83 9e 2c 11 7e 2f df 30 0c c3 fb f0 e5 9f f1 e3 eb 67 9f 5f 3f 9a 4f fe b5 e7 97 4f 0a 0f f8 e7 eb 47 d3 c9 03 7e 7d fd 68 39 79 c0 f1 a3 0f 28 fc ec 00 dc 61 3b 61 74 3f 67 f4 fd 1f 64 da 7f f2 01 b7 13 46 27 28 5f 67 8c fe fc 03 a6 bd 5d b8 c3 db ef fd 45 3d 79 c2 7a c6 a8 f6 80 ef 4f 81 fb ef 1d 33 27 ff e5 37 8c ca 0f 98 9e cd c0 2d fc 08 57 19 1d 00 a3 f7 cb 8c e6 c2 5f c0 06 e1 d6 0f b2 7f 2f 7c 1f 82 27 e5 09 ca 4f e0 28 Data Ascii: PNGIHDR*PLTEh8IDATx^AjH%D/E-\|9n7b,~/0g_?OOG~}h9y(a;at?gdF'(_g]E=yzO3'7-W_/\|'O(
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 82 73 74 09 ce 2d 82 53 f0 c2 0e bc 0b 00 70 0b 8c 0c 82 f3 a5 12 9c 8b 33 c1 c9 97 2d 88 77 01 02 2e 22 38 37 95 e0 1c 5d 82 73 93 09 ce c3 20 38 eb f2 8e 87 5b 3f c8 96 56 04 e7 e5 42 0a 2f 38 eb 70 93 e0 4c 82 b3 ce 68 16 30 02 05 27 0f 37 82 33 82 73 ae 86 0c f9 b2 05 d2 f6 69 17 6e 07 09 ce 24 38 a7 72 c0 92 67 b4 0b da 3e 30 dc e1 ef 17 9c 11 9c cb f0 a3 0e ee d6 60 d9 82 2f 5e f2 70 87 24 38 05 82 b3 0c f7 67 1d 5c bb 65 8b 15 2c 5e f2 70 7f d3 3f ba 6a fc 2d 26 38 eb 70 91 b2 85 cb 2f 3d 40 79 c7 c3 75 dd b8 93 eb 8c f8 b2 c5 24 f8 5d 24 51 bc e4 e1 02 0e 2e 82 13 80 2b 12 9c b3 4b 70 1e cd c0 25 42 86 58 cc 9a 17 9c 3c dc ba 83 1b 04 82 13 28 5e f2 70 01 07 07 94 2d d8 5c 12 0f 97 70 70 44 21 85 2c 5e f2 70 01 07 47 94 2d 56 ba 78 59 87 8b 94 2d Data Ascii: st-Sp3-w."87]s 8[?VB/8pLh0'73sin$8rg>0`/^p$8g\e,^p?j-&8p/=@yu$]$Q.+Kp%BX<(^p-\ppD!,^pG-VxY-
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 1a 62 1a 04 2b 57 00 5c ff 8d 3b b9 ce 88 17 9c fc 49 49 17 2f 79 b8 11 9c 11 9c fe 91 a1 8c 0c 75 50 48 49 db 27 09 ce 24 38 05 85 94 59 d0 f6 41 e0 26 c1 99 04 67 7d 57 92 67 24 68 fb 20 70 23 38 23 38 8b 85 14 be 6c 31 22 c5 4b 08 6e 12 9c f5 07 24 c1 29 28 5b 40 c5 4b 1e ae 7f 33 31 83 94 11 9c 11 9c d9 4c 04 04 a7 a8 a2 ae ba a7 74 25 73 49 3c dc cb 07 99 45 70 f2 86 9d 87 5b 28 a4 00 7e a9 50 48 01 e5 1d 0f 37 9b 89 9d 0d 52 d6 37 13 05 65 0b a0 78 09 c2 ad 8f 0c a9 ca 16 23 97 4b e2 e1 ca 04 e7 ec 12 9c 47 5f 82 93 1f 62 5a 10 b5 a1 10 9c 11 9c 11 9c 8e b2 05 5f bc e4 e1 02 82 13 2a a4 20 c5 4b 02 6e 04 67 04 67 36 13 3b 18 a4 ec 20 40 97 74 62 0a 29 c6 b6 0f 92 e0 7c 0a 12 9c c0 ca 15 00 d7 2c 38 17 97 e0 7c 45 70 26 c1 09 c0 ed a2 90 92 b6 4f 04 Data Ascii: b+W\;II/yuPHI'$8YA&g}Wg$h p#8#8l1"Kn$)([@K31Lt%sI<Ep[(~PH7R7ex#KG_bZ_* Kngg6; @tb)\|,8\|Ep&O
2023-12-05 18:14:06 UTC	1120	IN	Data Raw: 39 45 70 26 c1 09 c3 ed aa 90 92 b6 4f 04 67 04 a7 e0 36 19 c1 ca 15 0e 37 09 ce 24 38 05 43 4c b4 da 30 2c a2 46 70 46 70 ae 75 46 7c 82 93 3f 05 78 b8 49 70 26 c1 59 60 44 97 2d f8 95 2b 1e 6e 36 13 81 d8 90 4e 70 f2 27 a5 68 e5 8a 87 1b c1 19 c1 a9 1a 62 5a 05 2b 57 30 dc 61 73 0d 31 3d 1d 2b 57 3c dc ef 1d 2d 27 38 eb 85 14 7e e5 8a 87 db d3 3d a5 b9 04 36 82 33 82 53 55 b6 18 db 5a b9 e2 e1 02 82 13 28 a4 50 c5 4b 02 ae 4d 70 7e a8 04 e7 a1 10 9c 11 9c 11 9c 82 b2 85 60 e5 0a 80 5b 15 9c 82 42 0a bd 72 05 c0 2d 09 4e d5 10 d3 2a 58 b9 02 e0 66 33 b1 83 41 ca 0e fc 52 e4 5d 37 85 94 b4 7d 22 38 23 38 55 65 8b b1 ad 95 2b 1e 6e 17 09 ce 24 38 5d 85 94 5d d5 f6 b9 b5 09 d7 2f 38 23 38 23 38 23 38 93 e0 4c 82 93 ea 06 d6 05 27 5f bc e4 e1 ba 12 9c 37 55 Data Ascii: 9Ep&Og67$8CL0,FpFpuF\|?xIp&Y`D-+n6Np'hbZ+W0as1=+W<-'8~=63SUZ(PKMp~`[Br-N*Xf3AR]7}"8#8Ue+n$8]]/8#8#8#8L'_7U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50585	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:05 UTC	442	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/image.jpg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:06 UTC	779	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:06 UTC	473	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c2 00 11 08 01 be 02 c4 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 06 01 00 07 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 a7 4c 55 5c 9d 17 c9 08 60 d7 aa 8a d5 87 a9 Data Ascii: JFIF, ,'/&$&/'F7117FQD@DQbXXb\|v\|, ,'/&$&/'F7117FQD@DQbXXb\|v\|"3LU\`
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 1d e6 97 08 98 ce 20 05 8f 86 a3 13 f0 0c ac a6 0f 50 e9 33 92 ee 51 7d 36 30 da 10 54 78 1c e0 9a af d7 d4 72 c9 57 86 3a c7 80 82 95 3e a7 65 35 cc 34 10 b7 5e a0 0d 4a 29 92 d3 3e 54 fb 02 75 a8 92 6f 27 46 9d a2 d5 3e 8b b0 0a 23 33 69 4a b7 b6 84 57 54 bd 84 64 e2 4e 70 3c 2b 05 c0 00 b3 98 6b bc 6f 6f 8e 3e 99 8a fc ae 70 14 04 c0 f9 d0 9d 9a 0e 8f 8b c2 20 cb 08 11 32 8c e4 0e ba 97 18 e9 2b 98 1d e8 e4 8c b6 52 1a c2 b0 8d 70 82 d8 15 eb 35 a6 96 7d a4 5d aa e0 0a 66 01 b3 1d 3a d7 c3 6a 92 97 4c 05 29 5b 30 7c 4a 44 2d a9 75 19 20 ed 29 a6 22 db a7 5a 95 e6 7c 2c 6a 6e 20 0a 58 09 d0 ac b0 70 29 82 b1 e4 da e9 7b e1 84 6c 04 4a f6 c7 c0 91 ae 6b 93 32 7a 3a 85 55 47 b2 ad 69 a0 dc 92 5d 67 74 55 ea ab c1 6c 61 50 f1 b5 ae 08 a9 ae e6 b3 d7 96 f6 Data Ascii: P3Q}60TxrW:>e54^J)>Tuo'F>#3iJWTdNp<+koo>p 2+Rp5}]f:jL)[0\|JD-u )"Z\|,jn Xp){lJk2z:UGi]gtUlaP
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: e8 7d 49 5f 9c 48 35 7f 35 bc 4a 8a a5 ac 62 2a 92 38 40 48 ee f6 5a a9 de b0 9e 6a 3b 33 b3 11 db 24 44 3f 73 cc 24 7d e0 5e 72 20 42 4d 49 38 49 96 a6 aa 9d 6d c4 d6 77 ce 67 a5 39 6c 60 15 69 da 23 71 06 e0 56 05 67 c2 25 a4 d1 46 9c 9c ea 75 8c 9d f9 6b de 57 ce 2a de 55 36 59 eb 5f 26 b8 15 81 b9 03 9a e0 be 1a 95 2a ee 97 d2 50 e5 c3 88 aa 9d cc 22 aa 6e 02 c8 d4 52 cd 44 06 a3 40 a5 4d 3f ad 47 52 ad 56 85 70 5b ce cd 89 e8 2b cb 15 4d 62 0b ca 45 0d 88 b0 d6 fb c6 f7 7f 1f c9 6a 2f 2a 5c a9 26 38 8e 70 de 05 ca 42 80 06 f7 13 01 67 d0 2f a5 d1 f8 9e 22 63 0b 11 05 ba c7 51 ce ca 49 f0 25 18 22 bd 90 aa 6b 3a e7 5a 5f af 49 15 b3 b4 af 61 8a cc e6 84 69 cc 63 27 66 9c 4f 1f 27 29 40 93 4b 2c e8 da 1f 4e 31 f7 93 ea 38 51 94 38 32 c1 02 3c 64 c3 34 Data Ascii: }I_H55Jb8@HZj;3$D?s$}^r BMI8Imwg9l`i#qVg%FukWU6Y_&P"nRD@M?GRVp[+MbEj/\&8pBg/"cQI%"k:Z_Iaic'fO')@K,N18Q82<d4
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: a2 5a a7 35 7a 99 a9 38 a5 82 97 26 2c ec 66 b2 c0 bb ad 45 a7 a9 32 a1 b7 a6 2b cc 06 c6 9a c2 6b 23 85 fa b6 16 69 cb fb 66 fa 30 ab 33 c1 a4 09 33 e1 47 9e 1b 04 07 52 42 e4 24 a6 eb ce 52 cb aa 93 90 d2 15 c4 fd 11 30 f8 e4 6f a8 f0 db eb c2 69 69 a3 24 92 43 b3 f1 bd 52 8a f7 66 b9 a5 1e 80 28 aa f5 a1 e9 65 0d a1 4e 1d 65 94 bb 49 54 ed c2 ab ca b6 00 26 2f 7b a4 8a f8 22 db 6c 47 3e df 6d 56 f3 e3 aa be 88 2f 43 d0 e1 6f c3 e0 42 4e ac 9c 3d ee 00 38 56 b2 d2 93 69 43 f4 be 7d a5 91 bc f9 67 27 46 9f e5 29 61 7a 71 77 ea 58 af a5 74 e1 7c 00 a3 52 ca 08 7b 0d 77 de 4f d4 ac 64 03 bc ed 28 cb 7d 53 8f ee 87 22 3d 43 79 eb 96 06 21 5a 5d dc eb d5 69 ba c6 9c 4f 1b ac 83 ec 5c ab da 35 40 9e 8f 92 ec 32 7a 45 29 51 5b 1e ae 5c e9 6c d9 0b 09 86 1a 45 Data Ascii: Z5z8&,fE2+k#if033GRB$R0oii$CRf(eNeIT&/{"lG>mV/CoBN=8ViC}g'F)azqwXt\|R{wOd(}S"=Cy!Z]iO\5@2zE)Q[\lE
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: e9 1f 48 f1 5d f3 f5 34 98 82 73 8a 2f bd c0 f1 ea d7 97 70 7c bd 82 76 d5 fe 0b 4c 55 55 fc ae 8d 85 5e d7 e5 14 7d 2f 69 f9 e4 d7 1f a1 5a f9 ee a3 0d 2d ba a9 da 9d 55 d2 29 a3 e5 0b 8e 84 e8 22 06 2d 79 da 66 42 25 c9 ca 0e 81 8e 36 83 d5 af e7 22 ed 25 5e ec 69 ae f0 fd d1 8e b4 95 97 1d 5c bc a3 d1 94 29 88 fd 40 15 f8 94 21 19 28 d5 82 6b 44 25 c4 16 4f 44 b2 95 a8 d6 cf 39 7c 05 3d 6b 54 8a bc f8 c4 ed 00 64 fd c9 08 13 42 da 28 ab 67 80 4f 36 3b 9f 67 4b df 0e 82 e5 a4 c4 8c d5 8b 94 8e a3 ab b8 a8 43 9c 41 54 ca 2f 43 4e 2e cc 10 3a d5 e3 e0 1d 62 2a bc b6 d5 a1 2e bc 9b 4a 96 5d 4f bc ef 9a 99 50 a5 66 1e a9 fd cd a8 d2 6d 3d cf b7 cf 32 5f 69 f9 a6 f9 51 fd 93 e2 df 58 16 d0 f5 7b 5c ae 8d 0d 1d 6f 3e f4 43 bb aa 8d 13 9c 72 7a 4e c6 d7 e5 dd Data Ascii: H]4s/p\|vLUU^}/iZ-U)"-yfB%6"%^i\)@!(kD%OD9\|=kTdB(gO6;gKCAT/CN.:b*.J]OPfm=2_iQX{\o>CrzN
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: e3 48 ee 96 c4 68 68 ec d6 d4 b7 7e 96 c1 e9 9e a8 ea af 51 db 29 d8 9d 84 6a ba ed 7d 1b 1a 05 a6 ad 32 d4 4e 91 ea c6 aa 35 62 fb b4 0f 50 b5 cf 59 5a 81 a2 7a 95 75 57 a3 16 d9 ad 1a 61 b1 67 4b fa df d8 56 8c 6b ff 00 6a c6 bb 35 95 ab 1a e1 ad fd 34 ea 5c d3 0d 13 bc ed 05 e9 59 d0 e8 97 34 58 45 12 d0 44 33 84 2b 60 b4 18 be 31 9c 40 b1 5e 8c 5c a0 52 55 54 c1 0f 9c c8 a4 d2 3c b2 95 98 31 d6 61 46 b6 2c 66 59 eb e1 9c 95 31 a0 04 02 93 0a d2 40 b5 3d 71 56 cb 16 3f 17 72 b4 32 79 68 81 32 80 05 a5 c8 97 d4 18 b7 f1 62 5c b8 44 d3 af 5b 8d 28 0b 4b 9e 2a 7d 52 3f 48 61 10 31 dc 6b 06 5d 3d 0e 35 0b e8 97 35 d0 c9 7b 78 a4 88 b8 14 4c 13 30 68 4f 09 2b 36 72 16 9a 92 b6 f2 a8 4a 9a 02 77 5b f9 c1 e1 c8 86 05 94 02 e6 18 a4 0c 20 38 f5 af 90 0b e5 95 Data Ascii: Hhh~Q)j}2N5bPYZzuWagKVkj54\Y4XED3+`1@^\RUT<1aF,fY1@=qV?r2yh2b\D[(K*}R?Ha1k]=55{xL0hO+6rJw[ 8
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 56 b5 c7 48 ec 7e 8b 0e a8 d9 b0 d7 30 60 63 80 6c b1 f4 fa d1 b7 50 1d 36 2d 0d c6 43 9b 10 92 bb 72 38 d8 63 e1 95 9d 66 6b be 8d a2 e5 73 75 fb 97 0d 95 5c 16 6e 95 6b 79 ce b3 5f 2b 3b 4f 16 a2 e9 f3 55 9d 3f 9a c5 25 06 53 27 3c 19 fa cb 20 a1 9f 44 29 7c 68 c0 c4 12 26 4c 6a a9 cf 32 6c b2 08 f9 27 c0 19 8e 44 81 01 38 bc fb fb fd 2a 41 dd 75 b1 35 19 38 d8 12 86 b5 ff 00 43 38 2f 7a f6 e9 68 e8 ed 05 e4 32 d3 6a 9b 22 fd d8 7b 2f 15 d8 68 33 f6 4d 95 d9 ad 78 ed 36 fb ed 94 3c c6 52 56 f9 0e ce b3 4a c3 6f 06 f1 36 d1 35 1d 51 1b 1c 28 1f f8 c8 8e 79 29 e0 f0 01 2b 9e 1b 62 46 b8 c5 d7 19 c4 05 60 a3 57 16 e6 76 b2 e0 16 91 a9 f1 88 55 76 d1 90 85 fc e1 12 89 4a 6b 33 32 b6 45 dc aa b9 33 84 59 27 5b e4 63 1c f1 e7 d7 d0 87 d2 6e 8a 6b 55 fe 75 d6 Data Ascii: VH~0`clP6-Cr8cfksu\nky_+;OU?%S'< D)\|h&Lj2l'D8*Au58C8/zh2j"{/h3Mx6<RVJo65Q(y)+bF`WvUvJk32E3Y'[cnkUu
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 7b cc c7 07 90 7f 48 2f ab a6 40 c0 a3 ab f1 f5 d1 0f ca 2c 2e ff 00 4b ab b2 05 d7 20 a2 1a 93 59 56 9a b5 53 15 a1 f9 74 ef 68 55 4a 3b 24 a3 55 c0 05 4c c5 89 2b 75 1d 64 3f a3 bd 7f 3b 3f 56 8e 75 d5 a4 ac 05 83 b4 c8 89 36 57 e3 59 1c 7a 41 3c 22 86 fd 48 a7 9e 02 21 64 3e e0 70 df 3e 24 7e 52 50 50 24 1e b3 04 93 09 82 e0 f2 47 91 23 32 63 c1 96 1c c9 71 93 3c 26 f5 43 7b 82 f5 6a b7 b4 ff 00 d3 1f fe 7c 83 a4 9a d2 16 8b fa 1f ba 35 c9 e8 00 86 9e 7d ab 50 d9 ac 80 dc 9d 70 53 2b da a5 5b 24 b0 d2 ad 19 62 99 5a 8a 3b f4 25 e9 ac 15 0f 3e 68 c2 99 56 01 a2 22 08 b0 04 88 51 08 8f c5 89 10 0e 35 82 de 17 04 61 65 c1 19 6c 97 22 46 c1 34 58 44 6d 39 e7 90 98 82 91 88 e0 17 ac 8a f8 d1 3e 10 37 92 3d 4e 1a 39 ea b8 fe c9 a5 a7 7f 3e c5 05 36 89 24 68 Data Ascii: {H/@,.K YVSthUJ;$UL+ud?;?Vu6WYzA<"H!d>p>$~RPP$G#2cq<&C{j\|5}PpS+[$bZ;%>hV"Q5ael"F4XDm9>7=N9>6$h
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 1a d3 da 11 a6 8d 17 36 b1 9e dd 6d 42 7c 2d 8b 8e 1d 53 3c b5 f7 6b 3d 53 5e f7 64 75 85 10 15 0d 0a 24 a8 67 21 c5 60 da 13 12 46 c7 03 d6 96 1d 7b e7 ad 85 a5 62 ff 00 7f 6f 54 d7 d5 db 38 ac fa 24 a4 32 a0 14 b5 f7 e0 da b6 1a 2e 8d 96 72 dd 58 45 82 18 fd 1e 5b c9 6f 8e b6 1a fb 75 64 3a d5 dc f6 95 68 46 f4 f6 08 d6 5e 8d 7d b6 ee ce e5 6b 37 e8 c6 03 ec 47 62 ad 66 cd 05 b2 bd 87 66 89 3b 25 fd 41 fd 7d 74 02 f7 e4 17 57 48 e3 f9 06 9f 18 95 bb 51 d2 d6 84 cd 6a b4 28 54 cf f5 8b 43 a8 fd c3 de 2d 50 db 1d 2f ee 4e df f5 43 60 f7 e3 50 34 7a f9 aa 3b ee 7d 5c 2b 19 7f 0c ea e1 65 6c 48 31 6c 49 d9 28 5b 09 cb 7d 3a 20 bb 8d 4b ad d5 f4 ac af 7b cc ab c7 8f 55 83 d7 3b 74 e2 50 6c a8 f9 5d 9a 13 d5 cf aa da c0 ac d6 5e 48 ca 90 f0 39 64 8d bb 68 a6 Data Ascii: 6mB\|-S<k=S^du$g!`F{boT8$2.rXE[oud:hF^}k7Gbff;%A}tWHQj(TC-P/NC`P4z;}\+elH1lI([}: K{U;tPl]^H9dh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50586	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:06 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:06 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50588	54.175.39.171	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=-1&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:06 UTC	128	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 204 No ContentDate: Tue, 05 Dec 2023 18:14:06 GMTContent-Type: text/plainContent-Length: 0Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50587	54.175.39.171	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	586	OUT	GET /CookieIndex HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:06 UTC	128	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 204 No ContentDate: Tue, 05 Dec 2023 18:14:06 GMTContent-Type: text/plainContent-Length: 0Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50589	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	703	OUT	GET /xuid?mid=5989&xuid=CAESEJZCixMiRIce1hNKBTrJhac&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:14:06 UTC	449	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 33 63 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 4f 55 52 20 44 45 4c 20 53 41 4d 20 4f 54 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:06 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OT
2023-12-05 18:14:06 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50590	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:06 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:06 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50591	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	2193	OUT	GET /vi-assets/static-assets/cookiepolicy_thumbnail-49fcb5b064ab3c5f6497417dcdf6042e.jpg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:06 UTC	1347	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 36 36 30 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 73 4b 4c 66 41 58 33 77 4f 4d 66 31 55 64 53 62 5f 46 61 6e 57 30 78 65 43 51 50 6e 73 78 4c 4a 63 33 2d 4d 70 43 71 6b 6c 4e 6c 6f 5f 38 51 78 63 70 47 53 6e 61 2d 73 5f 54 45 36 78 58 5f 48 39 4a 36 33 49 34 75 39 6c 48 61 43 53 4d 51 37 55 36 72 4b 61 5f 4d 5a 56 56 35 4a 4e 39 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 32 20 4f 63 74 20 32 30 32 33 20 31 35 3a 34 39 3a Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 66603X-GUploader-UploadID: ADPycdsKLfAX3wOMf1UdSb_FanW0xeCQPnsxLJc3-MpCqklNlo_8QxcpGSna-s_TE6xX_H9J63I4u9lHaCSMQ7U6rKa_MZVV5JN9Cache-Control: public,max-age=31536000Expires: Thu, 12 Oct 2023 15:49:
2023-12-05 18:14:06 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: a7 f2 3a 85 54 ad 30 0e 45 b1 5c 8c 24 99 0c e9 17 f2 09 6a 3a e9 af a6 dc f3 7e 06 c5 1c c3 70 bc 70 b1 db 3b dc 76 b0 dd 2c 8d 55 2e ba c8 72 35 e6 2b ae 22 4e 36 a9 16 b4 86 1d 91 9d 27 49 18 dc 11 3a 7b 47 a7 de a5 b7 a0 b0 09 73 ae 27 a2 ca 86 6d 81 a5 f2 15 96 c9 43 06 69 c5 84 15 7b 87 59 4a ac 42 87 5f 37 5a 53 2b 29 6d 80 dd 3a 4e b0 53 03 ef a4 15 4f 5a f2 a7 87 4d a9 dc d2 43 72 b4 aa f4 2a 9e 17 5f 64 4a d4 3f 69 4d 74 57 a9 7a fd 6b 59 06 2a c5 a7 d9 6d b8 c6 1b 2b ef 57 c9 eb 89 f4 ab d8 e8 94 0c c9 40 ee 89 d7 eb ea 9b 41 6b 6e 05 17 d1 db 6a 85 f9 9d 79 01 c8 a3 af b3 b2 d9 56 6b 4d b9 3c 01 96 41 e1 6e bb 5d 63 27 27 f0 e1 29 6b 77 2f 1c 97 57 14 ac 94 30 10 c9 29 d6 40 95 05 fa fd a5 a5 56 32 b7 f1 f9 2c 1c 05 d2 5c 10 e1 f2 f6 fc f6 3d Data Ascii: :T0E\$j:~pp;v,U.r5+"N6'I:{Gs'mCi{YJB_7ZS+)m:NSOZMCr_dJ?iMtWzkYm+W@AknjyVkM<An]c'')kw/W0)@V2,\=
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: b4 6a 98 58 7d 71 d0 36 48 30 20 60 8a 67 6c 41 7d 0a 35 8f 49 a3 30 b8 de 2c 94 b0 f7 86 22 c3 57 bf 93 be bb bf 08 ed 61 9c 0e 6d 5c 7d f3 e9 8b 0c d5 fd 16 59 84 1c 28 57 56 5d 05 03 ac e8 63 13 f4 f6 9f 4e 0e 71 c1 41 e0 7c b8 58 39 8c 08 1c 03 87 11 65 1c ae 3a ec d0 43 28 db 9a 56 7e 50 c9 9b e9 aa d2 9b 5a 6b c1 1c c4 43 d7 32 24 e9 fb 4c 66 62 20 66 27 49 98 89 73 d8 8c bb 15 b3 18 f0 5e 41 bd a9 f0 ad 9b 1e e1 f7 7f b3 9c 16 d9 71 8e 79 dd 9e 0d c2 b2 ec a3 4a f3 68 66 b9 c7 1e c1 65 d3 56 ec 4d 8a 97 52 9b b9 05 59 42 2d ad 11 02 d3 5c 41 cc 48 fb fb 0f ac f5 0e d4 dc da bc 0d 9f 4a d3 ab aa 69 9e 48 0f 8a 09 24 69 23 10 1c d6 90 a3 8f 11 c6 d8 f9 b5 ad 26 8a 6f 06 ae aa 9a 2a 82 a8 d7 c8 c6 b8 a7 e2 b8 83 e8 e1 7d b5 72 f2 33 c7 66 da a1 4a c7 Data Ascii: jX}q6H0 `glA}5I0,"Wam\}Y(WV]cNqA\|X9e:C(V~PZkC2$Lfb f'Is^AqyJhfeVMRYB-\AHJiH$i#&o*}r3fJ
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: cf bf b4 7a 73 7a 1d 73 46 16 45 07 78 7a e5 56 c2 bb 23 6a dd 98 9a 38 d6 c2 57 96 9c 75 8f 90 0a aa 43 4d 08 91 1b 68 10 2d 1f 06 5b 34 2d 24 99 ac 94 c6 a5 33 09 ca e7 77 47 1b 20 d0 d1 de 37 a2 f9 ec 1d 83 ae f6 d8 c2 8b ac d1 b2 54 c6 e8 36 9f f4 19 2a 2b 12 0c 3a ae 01 38 eb 0b 63 ef 8d 37 4e ff 00 d7 59 d1 a6 fb 96 f4 b2 17 77 ee 21 53 f7 6d 19 7b a3 ce a9 66 06 b7 1a e3 96 72 b6 28 50 b9 6a 6d 5e c9 19 7c cc 91 cc ca ab 83 19 2d 36 10 88 b1 9b e0 a2 20 a6 47 48 88 8d 3d 5a d4 cf 1b 5a 4a a4 6d 52 5c 4a 5c 38 92 70 03 12 4d d6 be a7 85 ed ef 3c 0c c4 0b 87 97 a2 d1 13 bf 9d cb ff 00 4d 38 db 38 1e 06 d8 2f 9f 72 ea 13 fd cb 69 27 10 ee 2f c5 ad ae 74 c4 c1 ee db 5f 31 99 88 99 3f fe 22 91 ef 11 12 6a 3f 50 7e c6 d1 8f 3f b7 e3 37 86 a2 c2 ee 4e ed Data Ascii: zszsFExzV#j8WuCMh-[4-$3wG 7T6*+:8c7NYw!Sm{fr(Pjm^\|-6 GH=ZZJmR\J\8pM<M88/ri'/t_1?"j?P~?7N
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: bc 2f 1d e5 39 8a fc 86 ae 37 09 5a 9c 05 78 21 8b 62 11 12 f5 16 e8 88 eb 28 75 cd 2f 44 a5 a0 d3 34 ed 4b 45 8d ba 5c 6f 8a 31 2d 35 54 92 35 ef 05 b5 0e 73 a3 ee 13 29 5c d8 b4 e2 0a df 6e 7b d6 b6 ce 99 b8 75 d8 37 3e a9 45 24 da cd 23 e5 7d 3c b9 c0 31 78 cc 0c 78 60 cc 2e 31 86 b5 08 37 00 80 11 60 73 fe 1b bb 9c 3b 93 8f 2c f0 4f ce 3c 89 f3 4c d5 7c ee 77 a9 e4 cf 8b ca 76 5b 35 87 a7 15 6b e4 2f 43 33 35 e9 83 eb d2 82 5a 84 3a 68 28 91 88 83 ff 00 30 70 5b 3e ab 6d 72 ff 00 48 d3 b4 1d 9b 5d b7 a8 74 8d 26 95 d4 f4 91 32 8f 50 22 08 5e f2 f7 c6 c2 f2 f7 90 e7 92 e2 5c 5c eb cd fc 2d b5 d4 eb 1a ee a3 4b 55 41 5c fa b9 28 eb 6a 59 34 cc 2f 89 be 24 d1 34 b5 af 75 c2 f6 b4 90 11 1a 89 71 b8 db 4c 1f c6 e7 6f be 43 56 cf c7 5f 9c 2b eb 44 88 2a bf Data Ascii: /97Zx!b(u/D4KE\o1-5T5s)\n{u7>E$#}<1xx`.17`s;,O<L\|wv[5k/C35Z:h(0p[>mrH]t&2P"^\\-KUA\(jY4/$4uqLoCV_+D*
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: da cf 5f 26 c0 de 58 a5 6d c7 61 ac 4e e8 f9 0a 58 6d 5e 49 de eb 09 19 8f e9 c7 52 7e e9 8f 54 65 97 2b 72 8f 58 fc 56 b8 82 1c ee ce 6e 60 e1 d2 7e 6b 34 fc 0b 86 dd c9 26 c6 7a 0a ba 1c b4 d9 1c 09 5d ae 76 2b 46 54 42 46 be 46 cd 71 62 66 c5 4a 76 74 9d 90 63 26 51 3f 74 6d f7 e7 cd f5 59 aa 73 33 74 ff 00 82 9b 4a 67 43 4c 23 8e 6d 76 b1 84 03 4d 43 22 a5 1c 67 1f 6a ad 08 07 e0 40 5c 48 70 73 b2 58 ef 2d d5 06 c1 da f2 6e 19 32 1d 62 56 be 3a 08 de 0b 9a fa 80 db a5 7b 41 0b 0c 24 87 3e f1 98 a3 41 04 8b 55 8f 7a bb 69 dc de 03 ca 32 17 7b 8f 59 d7 ed 67 ef da 7a 79 6a 5a cb 78 9c dd 93 98 7b dd 56 e4 82 49 6f 10 2d 22 bb 41 4c 58 7f c9 03 11 eb b2 b6 de 99 a2 68 7a 2d 36 83 b7 a1 8e 9b 48 a3 85 b1 45 0b 02 08 d8 c0 8d 00 71 eb 75 e5 c4 92 49 24 9b Data Ascii: _&XmaNXm^IR~Te+rXVn`~k4&z]v+FTBFFqbfJvtc&Q?tmYs3tJgCL#mvMC"gj@\HpsX-n2bV:{A$>AUzi2{YgzyjZx{VIo-"ALXhz-6HEquI$
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 88 39 15 be 1a 2d d7 5e 55 4a 8b 8d f7 8b ac a1 c8 7b ab e4 0e 2f b7 1c 0b 9e 57 ed 07 92 7c 83 90 72 8b 5c 81 19 6e dc e2 70 3d 8a fe ee e0 33 8a bc ea 34 ec f2 51 b3 ca 6b 62 8d 1c 8e 98 f5 e9 95 27 db 30 51 e8 e1 49 16 cf 46 9e 8b 67 cf aa 4f 40 f7 69 31 d3 c2 18 59 33 a6 ad f0 e5 cc 14 86 23 49 56 1b 9d 98 35 4f ab 98 5f 67 3d f5 5e 1b 26 cb 31 7a 9e e8 0c 56 f0 be f0 2f 18 62 42 f5 a5 97 b9 c7 70 fb e1 c5 38 9f 6e 79 26 23 b7 1e 47 f3 9c 8f 37 c1 1e 53 33 c5 38 c7 1f ec 80 e7 3b 6f 7a 29 62 ac 8e 03 9a 4e 63 93 e2 29 c6 49 af c8 b1 23 34 0e f2 20 ea 37 73 06 36 11 51 a1 83 6a d5 d5 d4 d2 cc 34 98 23 82 4c ad 91 f2 d6 e4 98 2b 86 68 b2 b5 c7 2a 34 1e f0 69 ef 0b 8d e2 d5 25 7d 5b 18 d7 b4 4c e2 e1 80 11 ab 70 b8 a9 1d 29 72 e1 66 9e 3b f5 e4 ab 4c 1a Data Ascii: 9-^UJ{/W\|r\np=34Qkb'0QIFgO@i1Y3#IV5O_g=^&1zV/bBp8ny&#G7S38;oz)bNc)I#4 7s6Qj4#L+h*4i%}[Lp)rf;L
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 69 0c dd ba 1d 5e bb 50 f3 51 5f 58 fa c8 0c 95 95 92 21 96 67 38 bd 4b 33 38 88 9a 49 f0 e3 08 49 70 7b 8f 23 f3 07 47 e6 ae f9 d7 a5 d6 aa f4 3d 56 3a 16 02 ca 78 45 3c a4 43 0b 57 2b 03 43 4a bc 80 af 20 2b de 54 04 2c 68 a9 ef 21 91 df 0e f2 f3 36 d8 a9 db 4e 7e 9e 1d 81 3b 14 f8 b5 07 71 ac aa 0e 51 3d 11 b5 98 b2 93 ae 33 f3 32 ec 01 38 8d 35 5a e0 55 ee 40 53 33 3d 27 3e 39 1d 49 10 5d d9 b7 cc 8e 42 52 ba 03 d3 75 cf b9 10 af 46 25 01 16 e0 8e 64 72 ab de 0f 7c 6b 8e 92 0d 9f b9 5b a2 d3 17 36 06 1a 0a 86 a8 ee e6 91 c0 b0 77 a4 28 47 40 46 05 73 5d 66 02 3b 17 de 52 99 08 ed 7f 37 82 8d be c7 c7 72 61 1a 14 c0 c4 ea 75 e2 34 8d 7d ff 00 87 eb a7 ab b7 7b c1 72 39 ad ce 77 66 80 5b 7e 15 b0 1c 3a 83 c9 ec e9 e0 b6 8e 99 ee df cf d7 bb 20 d9 db 8c Data Ascii: i^PQ_X!g8K38IIp{#G=V:xE<CW+CJ +T,h!6N~;qQ=3285ZU@S3='>9I]BRuF%dr\|k[6w(G@Fs]f;R7rau4}{r9wf[~:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50592	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	2178	OUT	GET /vi-assets/static-assets/cooking-29cb7395e87deb6385764b7ca34bd313.svg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:06 UTC	1329	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 34 35 31 32 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 49 56 37 47 74 4b 59 4d 52 63 53 33 64 33 55 46 31 63 56 76 36 47 78 39 42 66 38 46 32 7a 43 6d 56 79 50 71 4c 43 34 73 36 43 46 71 6d 55 53 36 56 6d 52 64 46 32 4c 4a 39 49 46 4b 48 31 41 51 2d 63 7a 67 7a 64 52 47 53 77 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 34 20 4e 6f 76 20 32 30 32 34 20 31 39 3a 35 34 3a 31 36 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 64512X-GUploader-UploadID: ABPtcPrIV7GtKYMRcS3d3UF1cVv6Gx9Bf8F2zCmVyPqLC4s6CFqmUS6VmRdF2LJ9IFKH1AQ-czgzdRGSwgCache-Control: public,max-age=31536000Expires: Sun, 24 Nov 2024 19:54:16 GMTLast-Modif
2023-12-05 18:14:06 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 31 22 20 68 65 69 67 68 74 3d 22 36 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 31 20 36 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 34 38 36 5f 31 32 30 39 37 29 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 36 31 22 20 68 65 69 67 68 74 3d 22 36 31 22 20 72 78 3d 22 34 2e 33 35 37 31 34 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 74 74 65 72 6e 30 29 22 2f 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d Data Ascii: <svg width="61" height="61" viewBox="0 0 61 61" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g clip-path="url(#clip0_486_12097)"><rect width="61" height="61" rx="4.35714" fill="url(#pattern0)"/><rect width=
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 53 72 39 4a 6c 5a 6f 6a 41 4f 78 48 43 33 6f 46 4e 46 42 5a 77 6b 69 41 30 67 58 69 53 51 68 53 61 71 62 4c 5a 49 4a 79 57 6f 66 4b 47 31 57 56 49 32 53 36 55 2f 78 35 55 4f 2b 46 58 34 65 69 44 50 54 57 61 70 2b 4e 38 49 42 52 77 56 50 36 5a 52 4a 45 78 4b 68 5a 67 43 73 56 57 68 4b 43 55 47 59 67 32 49 58 57 53 35 69 56 45 71 6d 31 46 46 51 6e 62 4d 6f 49 31 55 6e 71 43 49 33 77 72 69 42 49 45 34 50 46 6a 4a 6a 78 56 6d 53 63 4d 53 56 50 59 6c 2b 62 4c 42 66 4c 45 74 51 68 45 6e 52 6f 55 50 46 67 69 54 49 70 54 31 77 55 37 78 75 41 50 78 77 31 79 77 79 77 49 78 4b 33 6d 51 52 79 41 62 45 7a 32 59 43 31 38 51 45 71 72 4d 48 58 73 75 45 43 63 6e 71 6e 67 2b 53 41 71 43 45 35 52 72 63 59 6f 6b 4c 30 35 6c 6a 31 73 49 38 73 49 56 65 67 75 49 50 57 53 46 69 Data Ascii: Sr9JlZojAOxHC3oFNFBZwkiA0gXiSQhSaqbLZIJyWofKG1WVI2S6U/x5UO+FX4eiDPTWap+N8IBRwVP6ZRJExKhZgCsVWhKCUGYg2IXWS5iVEqm1FFQnbMoI1UnqCI3wriBIE4PFjJjxVmScMSVPYl+bLBfLEtQhEnRoUPFgiTIpT1wU7xuAPxw1ywywIxK3mQRyAbEz2YC18QEqrMHXsuECcnqng+SAqCE5RrcYokL05lj1sI8sIVeguIPWSFi
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 54 57 55 30 35 52 37 6c 4c 66 71 36 75 6f 57 36 6a 37 71 38 65 6f 69 39 54 6e 71 35 65 72 37 31 63 2b 70 50 31 54 2f 53 4e 57 68 4f 6c 44 5a 31 48 46 55 4f 58 55 70 64 53 65 31 6d 58 71 62 2b 70 5a 47 6f 39 6e 51 67 6d 6a 70 74 41 4c 61 55 6c 6f 56 37 53 54 74 41 65 32 44 42 6c 33 44 52 59 4f 6a 77 64 65 59 72 56 47 68 55 61 74 78 52 65 4f 56 4a 6c 6e 54 57 70 4f 6c 4f 55 47 7a 53 4c 4e 4d 38 35 44 6d 4a 63 31 75 4c 62 4b 57 6a 52 5a 62 69 36 73 31 53 36 74 43 71 30 48 72 70 6c 61 76 4e 6c 31 37 70 48 61 73 64 72 37 32 45 75 33 64 32 75 65 31 6e 2b 75 51 64 47 78 30 51 6e 58 34 4f 67 74 30 74 75 6d 63 31 48 6c 4d 78 2b 69 57 64 44 61 64 52 35 39 50 33 30 34 2f 54 65 2f 55 4a 65 72 61 36 6e 4a 30 63 33 52 4c 64 66 66 71 74 75 6e 32 36 4f 6e 6f 65 65 69 6c Data Ascii: TWU05R7lLfq6uoW6j7q8eoi9Tnq5er71c+pP1T/SNWhOlDZ1HFUOXUpdSe1mXqb+pZGo9nQgmjptALaUloV7STtAe2DBl3DRYOjwdeYrVGhUatxReOVJlnTWpOlOUGzSLNM85DmJc1uLbKWjRZbi6s1S6tCq0HrplavNl17pHasdr72Eu3d2ue1n+uQdGx0QnX4Ogt0tumc1HlMx+iWdDadR59P304/Te/UJera6nJ0c3RLdffqtun26Onoeeil
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 35 73 35 34 4f 4a 4d 31 63 2b 73 73 5a 46 62 6d 72 4a 62 5a 6c 72 4d 58 7a 4f 36 63 45 7a 35 6e 31 31 7a 4b 33 4e 79 35 76 38 31 7a 6e 62 64 79 33 6c 2f 7a 55 2b 63 33 4c 6a 42 5a 4d 47 66 42 34 35 2f 43 66 36 6f 75 31 69 69 57 46 74 39 63 36 4c 64 77 38 79 4a 38 6b 57 68 52 32 32 4c 33 78 65 73 57 66 79 33 68 6c 31 77 6f 64 53 30 74 4b 2f 32 38 68 4c 66 6b 77 73 38 6a 66 79 37 2f 75 58 39 70 31 74 4b 32 5a 56 37 4c 4e 69 30 6e 4c 68 63 76 76 37 45 69 63 4d 57 75 6c 64 6f 72 69 31 59 2b 58 6a 56 36 56 65 31 71 78 75 71 53 31 58 2b 74 6d 62 6a 6d 66 4a 6c 48 32 65 61 31 6c 4c 58 79 74 52 33 6c 30 65 58 31 36 36 7a 57 4c 56 2f 33 65 62 31 77 2f 66 57 4b 34 49 70 39 47 34 77 33 4c 4e 37 77 66 69 4e 2f 34 35 56 4e 51 5a 74 71 4e 70 74 73 4c 74 33 38 61 59 74 Data Ascii: 5s54OJM1c+ssZFbmrJbZlrMXzO6cEz5n11zK3Ny5v81znbdy3l/zU+c3LjBZMGfB45/Cf6ou1iiWFt9c6Ldw8yJ8kWhR22L3xesWfy3hl1wodS0tK/28hLfkws8jfy7/uX9p1tK2ZV7LNi0nLhcvv7EicMWuldori1Y+XjV6Ve1qxuqS1X+tmbjmfJlH2ea1lLXytR3l0eX166zWLV/3eb1w/fWK4Ip9G4w3LN7wfiN/45VNQZtqNptsLt38aYt
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 41 41 68 42 6f 6c 41 41 43 30 4b 6a 6a 71 54 59 45 49 41 41 42 42 49 41 32 41 41 45 49 51 4b 42 52 41 67 68 41 6f 34 36 6e 32 68 43 41 41 41 51 51 41 4e 6f 41 42 43 41 41 67 55 59 4a 49 41 43 4e 4f 70 35 71 51 77 41 43 45 45 41 41 61 41 4d 51 67 41 41 45 47 69 57 41 41 44 54 71 65 4b 6f 4e 41 51 68 41 41 41 47 67 44 55 41 41 41 68 42 6f 6c 41 41 43 30 4b 6a 6a 71 54 59 45 49 41 41 42 42 49 41 32 41 41 45 49 51 4b 42 52 41 67 68 41 6f 34 36 6e 32 68 43 41 41 41 51 51 41 4e 6f 41 42 43 41 41 67 55 59 4a 49 41 43 4e 4f 70 35 71 51 77 41 43 45 45 41 41 61 41 4d 51 67 41 41 45 47 69 57 41 41 44 54 71 65 4b 6f 4e 41 51 68 41 41 41 47 67 44 55 41 41 41 68 42 6f 6c 41 41 43 30 4b 6a 6a 71 54 59 45 49 41 41 42 42 49 41 32 41 41 45 49 51 4b 42 52 41 67 68 41 6f 34 Data Ascii: AAhBolAAC0KjjqTYEIAABBIA2AAEIQKBRAghAo46n2hCAAAQQANoABCAAgUYJIACNOp5qQwACEEAAaAMQgAAEGiWAADTqeKoNAQhAAAGgDUAAAhBolAAC0KjjqTYEIAABBIA2AAEIQKBRAghAo46n2hCAAAQQANoABCAAgUYJIACNOp5qQwACEEAAaAMQgAAEGiWAADTqeKoNAQhAAAGgDUAAAhBolAAC0KjjqTYEIAABBIA2AAEIQKBRAghAo4
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 41 77 36 4f 35 54 49 77 44 75 58 59 53 42 45 49 68 45 59 4b 49 47 79 49 72 72 33 31 37 49 51 43 53 48 35 4d 38 47 41 63 6a 76 41 79 79 41 67 42 6d 42 36 52 70 41 52 4d 6a 4d 57 51 59 46 49 51 41 47 6b 43 6b 43 41 6f 34 49 61 45 48 34 34 73 57 4c 45 77 33 53 54 4f 44 2b 2f 66 73 54 4d 2b 48 32 37 41 52 34 47 46 78 32 46 32 41 41 42 45 77 4a 36 41 43 77 39 76 5a 4d 4c 46 4b 72 79 75 66 4f 6e 64 4e 38 59 6d 49 2b 33 4a 36 58 41 44 4f 41 76 50 79 4c 4c 31 30 62 53 34 36 4f 6a 74 51 52 68 4e 58 46 64 54 31 43 4f 4d 37 36 37 52 6c 6c 66 2f 2b 6a 6f 36 33 45 6b 54 50 36 58 6c 36 37 63 4f 48 43 36 41 58 68 6d 65 56 79 35 65 50 48 6a 2f 55 77 69 64 6b 56 33 70 52 46 41 41 45 6f 79 31 2b 5a 72 56 58 2f 72 6f 4e 46 6f 62 74 58 4a 45 46 76 78 75 30 73 44 4e 56 51 39 Data Ascii: Aw6O5TIwDuXYSBEIhEYKIGyIrr317IQCSH5M8GAcjvAyyAgBmB6RpARMjMWQYFIQAGkCkCAo4IaEH44sWLEw3STOD+/fsTM+H27AR4GFx2F2AABEwJ6ACw9vZMLFKryufOndN8YmI+3J6XADOAvPyLL10bS46OjtQRhNXFdT1COM767Rllf/+jo63EkTP6Xl67cOHC6AXhmeVy5ePHj/UwidkV3pRFAAEoy1+ZrVX/roNFobtXJEFvxu0sDNVQ9
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 77 4c 54 38 4a 2f 39 6f 43 76 4a 5a 4c 79 49 41 47 53 45 48 36 46 6f 56 6e 30 6a 51 45 79 54 68 66 6f 37 56 33 75 48 4e 50 61 2f 65 2f 65 75 4e 76 2b 6b 71 57 36 76 58 49 6b 43 39 63 4a 6b 6d 41 67 42 4d 49 51 64 75 79 69 64 38 39 4b 41 4c 6e 61 75 35 42 65 5a 67 45 36 54 53 51 6c 30 72 45 7a 2f 35 67 71 43 4b 2b 36 76 7a 55 73 47 52 33 38 33 73 2b 50 78 63 4a 76 35 32 48 2b 4b 41 4e 67 7a 6a 31 4f 69 76 74 49 58 4c 31 35 6b 76 33 38 63 6d 6c 61 35 4b 45 41 6b 47 56 43 41 79 50 4a 49 67 59 36 47 61 4d 75 2f 68 32 65 41 71 2b 4c 50 6e 7a 2b 33 67 6b 30 35 33 51 51 51 67 47 35 47 44 6c 4e 6b 58 4d 70 7a 53 4b 4e 51 6b 36 51 45 34 61 58 56 67 6b 54 50 6e 46 44 58 72 36 66 41 68 69 63 64 65 61 43 6b 61 6e 37 36 39 4d 6d 44 4a 64 67 51 43 43 41 41 52 62 59 45 Data Ascii: wLT8J/9oCvJZLyIAGSEH6FoVn0jQEyThfo7V3uHNPa/e/euNv+kqW6vXIkC9cJkmAgBMIQduyid89KALnau5BeZgE6TSQl0rEz/5gqCK+6vzUsGR383s+PxcJv52H+KANgzj1OivtIXL15kv38cmla5KEAkGVCAyPJIgY6GaMu/h2eAq+LPnz+3gk053QQQgG5GDlNkXMpzSKNQk6QE4aXVgkTPnFDXr6fAhicdeaCkan769MmDJdgQCCAARbYE
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 49 43 6a 42 35 38 2b 66 64 5a 52 42 6d 31 6b 52 68 6d 62 61 79 39 71 4b 4d 76 78 66 69 38 62 42 42 2f 2f 36 2b 76 57 72 41 7a 4d 77 34 53 63 43 76 2f 33 32 32 30 39 2f 47 2f 34 52 2b 76 32 72 56 36 2f 32 37 50 51 37 54 5a 4d 71 53 41 6b 2b 66 50 67 51 4a 45 48 76 57 65 4c 75 68 46 5a 54 67 6e 66 76 33 68 48 2f 63 65 74 51 42 4d 43 6a 61 37 49 49 67 4c 72 2b 4f 33 66 75 47 4f 7a 56 6b 77 62 6f 39 66 62 74 32 2f 44 47 6f 77 4f 77 4b 52 49 42 44 66 38 66 50 58 6f 55 4b 54 4f 79 69 55 38 41 41 59 6a 50 64 48 71 4f 5a 38 2b 65 74 58 77 61 68 46 6e 58 76 30 77 6d 7a 41 2f 30 34 77 64 42 45 70 59 54 63 4b 56 63 41 70 70 45 76 6e 37 39 6d 75 47 2f 5a 77 2b 79 42 75 44 5a 4f 38 6c 74 30 31 64 55 6f 2f 37 72 31 36 38 6e 4c 32 6c 4e 41 54 4a 41 38 71 4e 58 2b 46 7a Data Ascii: ICjB58+fdZRBm1kRhmbay9qKMvxfi8bBB//6+vWrAzMw4ScCv/32209/G/4R+v2rV6/27PQ7TZMqSAk+fPgQJEHvWeLuhFZTgnfv3hH/cetQBMCja7IIgLr+O3fuGOzVkwbo9fbt2/DGowOwKRIBDf8fPXoUKTOyiU8AAYjPdHqOZ8+etXwahFnXv0wmzA/04wdBEpYTcKVcAppEvn79muG/Zw+yBuDZO8lt01dUo/7r168nL2lNATJA8qNX+Fz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50593	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	2184	OUT	GET /vi-assets/static-assets/cooking-image-6bed8f56dbeac63d2d9946ffae981eb6.jpg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:06 UTC	1312	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 34 35 35 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 78 4e 4f 79 49 78 4a 4c 38 46 4c 43 76 33 4f 32 6a 51 58 50 6b 71 76 57 71 75 6b 4c 59 37 61 46 71 39 37 59 41 74 42 51 65 44 78 58 39 77 31 43 42 53 59 6e 43 77 49 74 5f 4f 42 58 71 73 54 51 44 4d 52 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 37 20 4e 6f 76 20 32 30 32 34 20 31 38 3a 33 38 3a 33 36 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 34555X-GUploader-UploadID: ABPtcPpxNOyIxJL8FLCv3O2jQXPkqvWqukLY7aFq97YAtBQeDxX9w1CBSYnCwIt_OBXqsTQDMR0Cache-Control: public,max-age=31536000Expires: Wed, 27 Nov 2024 18:38:36 GMTLast-Modified: Tu
2023-12-05 18:14:06 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 01 38 01 38 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 00 09 ff c4 00 45 10 00 02 01 03 02 04 04 04 04 04 04 05 01 07 05 00 01 02 03 00 04 11 05 21 06 07 12 31 13 22 41 51 08 14 61 71 23 32 81 91 15 42 Data Ascii: JFIF,,CC88E!1"AQaq#2B
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 88 e9 f2 9f 6a 7b 00 93 75 99 00 07 23 18 34 9f 20 1e 32 88 24 c7 62 31 40 08 a2 1e 8d c6 4f 57 f4 a0 02 b6 57 ab a0 64 e7 b5 00 39 3d 31 f4 46 00 cb 0c e2 a4 de 90 11 d3 29 f1 49 2a 58 9e df 4a 88 0e f4 a5 67 b3 92 37 23 c9 9a 69 e8 3c 8c b4 62 5b 53 9f ac 6e a3 6a 82 7e e1 b5 c0 b5 92 06 d5 67 0d b8 55 c8 fb d3 f3 21 eb 81 ad 9b 4a 35 86 92 25 c4 6f 90 f9 a8 f3 dc 3f 81 e9 54 8e 59 ba 07 ae f5 3e 04 88 fd 53 ad 21 0e 54 e0 b8 02 94 bc 01 e9 4b 8d 72 d2 22 b9 8d d3 19 fa d4 64 f4 d0 0f 2d d4 ad e4 f1 85 d9 1c 6f ef 52 f9 d0 3e 10 b4 8f 1c 49 3b 30 f3 33 82 bf 4a 62 4c 46 69 32 5c 05 2d d4 32 d4 b8 18 83 02 6d 2d d5 ce 58 93 fb 53 06 04 6a 48 c9 ef 9c 1a 00 3c ec d1 5c c0 a8 07 7c 13 ec 29 01 eb 85 8b e6 92 01 92 7f 31 24 d0 f8 1a 42 0d 21 92 59 3a 50 04 Data Ascii: j{u#4 2$b1@OWWd9=1F)I*XJg7#i<b[Snj~gU!J5%o?TY>S!TKr"d-oR>I;03JbLFi2\-2m-XSjH<\\|)1$B!Y:P
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: e2 1d 37 43 03 c2 80 49 28 ed 9d ce 7f 5a c9 93 97 e8 f8 35 51 8b ea b2 a3 71 c4 3a bf 10 49 e1 c4 92 b2 93 80 ab ff 00 8a e0 5f 95 93 90 f5 14 75 21 8f 5d 4b 6f 44 6e a1 f2 16 47 a7 58 d5 ed ed 48 ef 10 6e b9 3f 61 da b1 4a 89 6f fd e9 e9 7e 0b e3 6a d7 b2 22 56 57 76 d7 73 2c 3a 15 89 70 c7 1e 34 c3 2c 7e c3 d2 ba 58 d4 d6 96 aa 8e ff 00 2c a2 d9 4f cc 99 67 b8 e1 78 34 8d 35 b5 1e 21 b8 0b 85 2c 53 d7 f6 ae a3 c7 8d 71 ef b0 e7 bb a7 39 76 d6 61 1c c3 e3 8b 56 f1 2d 34 fb 28 91 0e 54 12 a3 26 b8 59 79 51 97 b6 28 eb 51 44 d7 33 63 0e 52 70 ad a6 a5 c4 76 17 1a a2 2c 8d 71 37 e1 a3 0d b0 37 27 fa 56 4c 3a a3 3b a2 9a f2 cb 72 6c 75 d4 e4 8e 99 bd 61 08 50 06 d9 00 01 5e e1 a5 15 a4 79 46 f6 f6 48 47 16 2d 8b 11 e9 56 25 b4 26 46 e9 83 c2 be 70 4f f9 87 Data Ascii: 7CI(Z5Qq:I_u!]KoDnGXHn?aJo~j"VWvs,:p4,~X,Ogx45!,Sq9vaV-4(T&YyQ(QD3cRpv,q77'VL:;rluaP^yFHG-V%&FpO
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 17 a9 dd 1f 93 4b e8 cd b8 91 7b 63 6a eb 47 98 ec c1 c2 7a 23 f4 b5 2b 71 38 18 cb 1a 8c 1e 9e c9 3f 02 ea 03 5c b0 f6 ef 43 7b 91 06 27 6f e5 bb 94 b0 c0 3d a8 f9 1a e5 01 b3 24 cc de fb 52 1e 84 2e ff 00 cd 80 74 6e c4 52 63 41 63 56 1a c1 0d b2 84 fe b4 7f 56 83 e3 61 ad 9c 8f 1d 80 ed 2e 3f 4a 13 e7 40 2f 75 0b 33 b3 48 d9 5c 83 52 7f 60 13 70 14 99 07 e7 ce d8 f6 a4 47 81 39 81 99 49 5e e3 bd 1b 26 98 9f 86 65 42 08 d9 28 f2 26 c1 9c 97 b7 45 27 7e a1 81 43 fb 09 30 27 90 ae 63 07 19 23 ab ed 48 71 e4 20 8c 47 6b 2b 63 cb d7 b0 a1 2d 13 26 e7 3d 73 40 22 1e 55 38 da ad 65 40 5b c9 d5 74 f0 b1 1b 1c 90 06 f8 a1 47 60 16 f1 e4 4b d2 91 46 02 3e 01 34 9f 90 16 16 a5 22 11 9c 7e 6e aa 7a e0 01 98 b3 c5 e4 1f 97 73 9a 60 24 a4 bb 95 5e c5 73 f6 a1 3d 80 Data Ascii: K{cjGz#+q8?\C{'o=$R.tnRcAcVVa.?J@/u3H\R`pG9I^&eB(&E'~C0'c#Hq Gk+c-&=s@"U8e@[tG`KF>4"~nzs`$^s=
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 30 1b a7 1b 8a 00 35 b9 2b 71 83 f5 c5 2f 90 3d 71 9d cf d6 93 00 b8 0c 51 71 b1 df 34 20 12 94 98 e5 08 dd f3 b1 a1 80 76 52 b0 f5 13 f6 fb d4 00 2c e8 1a d9 58 8f 62 c4 d3 d7 1b 01 69 0e 42 16 51 d0 57 03 db b5 09 8b e4 c0 b9 ad ae eb fa 47 37 b4 01 65 c4 93 59 d8 c5 71 6d 34 f1 86 e8 40 80 28 65 38 dc 83 96 d8 ed e6 1e d5 e4 7a de 65 b8 b9 95 28 bd 26 d6 cf b6 7d 1f d3 b1 72 fe 9c be 56 56 9c f4 d2 7f 27 58 c1 70 3c 30 e1 ba 95 d4 1c fb fd 6b d9 2b 14 97 77 dc f8 b4 a0 e2 f4 c6 f3 00 c3 38 a4 da 24 8a f6 a9 37 40 6c 63 de b3 cd e8 9c 11 9e 71 1e a0 59 24 50 d8 0b 92 73 eb 58 2f b0 dd 4d 5b 66 1f c6 fc 40 20 96 48 e3 7e e4 12 73 da b9 76 58 dc b4 8f 45 87 8b b4 62 fc 75 c5 d0 68 f7 56 9a 64 76 e2 fe ee 65 c9 2c 7a a2 b5 73 82 81 d4 03 d4 c4 1e ae 9c 8c Data Ascii: 05+q/=qQq4 vR,XbiBQWG7eYqm4@(e8ze(&}rVV'Xp<0k+w8$7@lcqY$PsX/M[f@ H~svXEbuhVdve,zs
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 64 74 ea 33 ab d4 e1 cf dd 1f 45 f9 3f cf 6e 05 e6 d6 8f 06 a3 a5 6a 70 d8 6a 33 20 f9 8d 26 f2 55 8e ea 19 31 ba 85 24 75 8f aa e7 f4 ae 96 3e 55 76 bd 6f 93 c4 f5 0e 8f 93 83 37 19 45 b8 fd cd 09 30 66 1d 7d 89 ed 8e f5 a5 3d bd a3 96 05 d3 2c 57 a8 48 1b ec a2 89 7e 00 6b 68 3a 75 29 65 5e f8 de a0 bf 70 d8 ee d5 47 5f 59 6c 83 26 c3 da a5 f2 44 09 9e 35 9a e6 73 b1 52 06 29 bf 2c 02 48 81 5b ae 43 fe 72 e4 0a 40 37 89 ba 4b 4c e3 70 7a 47 d2 81 36 1d 01 11 2b 85 c9 67 ce 7e 94 11 d6 86 c1 d2 39 27 95 46 77 a5 f2 4d 03 70 54 59 87 9b 27 32 06 fb 54 97 81 a1 39 d9 96 ce 49 90 1e b9 1c 05 a8 fc 30 fe a2 c5 d7 d5 74 aa 46 e4 1c 55 c4 57 80 b2 02 0b 29 38 39 c6 c3 eb 41 14 12 53 85 03 1e 9b d2 63 03 f3 b2 a8 d8 01 9a 10 02 77 87 a3 38 ef 93 4c 03 42 c2 14 Data Ascii: dt3E?njpj3 &U1$u>Uvo7E0f}=,WH~kh:u)e^pG_Yl&D5sR),H[Cr@7KLpzG6+g~9'FwMpTY'2T9I0tFUW)89AScw8LB
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 5e c7 45 81 e0 31 cb 00 90 b2 3b ff 00 27 49 dc b3 61 7f 29 04 02 47 b0 af 27 dd dd be 74 8f d3 f8 18 91 82 8a 84 1d 8f 7e 7e c5 2b 94 d7 7c 3b c5 1c d1 b0 d0 ef f4 1d 3d 74 6d 22 19 6f 5e 29 20 57 17 32 c6 a1 15 98 81 e6 23 23 ca 73 d8 9d cd 62 b6 e8 c9 28 26 92 47 4b ea 1a 6c c5 e9 f2 f4 e6 fd 4b 1f df c2 f9 2e 3c c3 e3 8b 49 3c 5b 8d 23 43 b8 8a 0b b7 e8 8a 4b 9d 26 33 1f e1 9c 30 6e a3 f9 77 00 0c 67 d3 d2 b9 b5 51 0b 37 a9 b4 ce 7f 4a e9 d2 ad 2a ef 92 93 5e 75 2f bf 8f 06 6b c4 3c d7 93 46 89 34 8e 0f b5 e1 d9 56 f1 42 c8 cb a5 46 04 72 60 65 4e 47 41 3d 47 03 be c0 1d b3 5a 2b c1 95 2f 5e af 73 67 56 18 78 ee 2e 79 71 94 5a f0 bb 9f 83 dc 13 f1 45 cd 2e 4e 49 35 e5 8d b9 b2 b2 95 3a a7 8e 6b 06 78 2f 24 ce 07 48 01 51 09 5c 0e b1 be 17 d7 b5 75 ba Data Ascii: ^E1;'Ia)G't~~+\|;=tm"o^) W2##sb(&GKlK.<I<[#CK&30nwgQ7J*^u/k<F4VBFr`eNGA=GZ+/^sgVx.yqZE.NI5:kx/$HQ\u
2023-12-05 18:14:06 UTC	1379	IN	Data Raw: 89 63 8d 5b 6c ec 07 98 9f 52 6b 16 4f 4e ea 19 6b 72 9b d2 36 d5 d5 69 a9 e9 f3 bf ee 52 35 be 0f d2 74 b9 23 b8 d4 64 96 ee 75 93 a2 44 0f d3 18 fb 05 dc 81 58 ea a2 75 35 5f 7f 3f 96 77 a8 c9 79 09 c9 2d 2d 10 9a ef 0f f0 c5 ba dc e9 b6 1c 21 65 2d dd f3 66 7f 14 2a 07 43 8d fa f0 58 01 f4 f6 af 41 4f 56 95 3f ec 4a cd 6b f0 4f 1e cb aa 6a d8 37 a5 e0 cd b8 ab 81 b9 61 a9 58 c5 0e a9 a4 da 17 82 e1 a1 64 d3 23 78 82 39 51 95 77 04 79 47 fa b1 bf ef 57 ae b9 99 14 a5 5e b5 f9 3a f5 75 1c b8 b9 6e 4f 4f ee cc 1b 8c 79 1f c1 76 fa a2 8b 7e 39 6d 3a 19 64 c4 90 38 f1 9a 20 5b 0a 41 38 c8 fd 7f 7a f5 3d 3b ea 4c 89 d3 dd 3a 7b 9f f8 38 b9 94 cf 26 4d c6 6d 6c 7b c7 7f 0f 3c a8 d1 78 6f 43 87 43 e3 4b 99 b5 98 d6 57 d4 2f 04 6d d1 78 1d b3 1a aa f5 10 85 47 Data Ascii: c[lRkONkr6iR5t#duDXu5_?wy--!e-f*CXAOV?JkOj7aXd#x9QwyGW^:unOOyv~9m:d8 [A8z=;L:{8&Mml{<xoCCKW/mxG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50594	35.244.159.8	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	512	OUT	GET /w/1.0/pd HTTP/1.1 Host: nytimes-d.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=18ede2ae-3c84-0d7e-0b45-2cc5f5848d86\|1701800013; pd=v2\|1701800023\|vMgavPkWgy; univ_id=537072971\|3a743bef-66ee-4af3-a0ea-a4634a63b535\|1701800031460586
2023-12-05 18:14:06 UTC	244	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2c 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 4f 58 47 57 2f 30 2e 30 2e 30 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKVary: Accept, Accept-EncodingServer: OXGW/0.0.0Date: Tue, 05 Dec 2023 18:14:06 GMTContent-Type: text/htmlContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50598	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	2547	OUT	GET //.status HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: / content-type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad^https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html=z3DiZN4mOIhoKcvokH-eY6zy; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:06 UTC	469	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 62 37 61 33 34 61 38 34 61 32 32 63 63 38 33 66 30 32 61 39 66 32 31 39 36 36 37 33 36 63 35 32 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 33 34 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 Data Ascii: HTTP/1.1 200 OKx-content-type-options: nosniffcontent-type: text/plain; charset=utf-8x-cloud-trace-context: b7a34a84a22cc83f02a9f21966736c52date: Tue, 05 Dec 2023 18:14:06 GMTserver: envoycontent-length: 34via: 1.1 googlex-envoy-upstream-s
2023-12-05 18:14:06 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50597	172.253.63.148	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	443	OUT	GET /sadbundle/16412796464347531991/NS_22980_Govt_and_Policymaker_Banners_Environment_970x250_EN_HTML5/sprite.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:06 UTC	778	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-12-05 18:14:06 UTC	474	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 94 00 00 09 40 04 03 00 00 00 b2 1e 13 8e 00 00 00 15 50 4c 54 45 47 70 4c 0e 3e 55 11 38 4d 12 38 4c 23 1f 20 14 35 45 06 47 64 2a 38 92 4c 00 00 00 06 74 52 4e 53 00 d2 75 3b fd ae 79 30 60 68 00 00 35 5f 49 44 41 54 78 01 ec dc c1 72 a2 58 14 87 f1 23 c8 3e 35 ed ec 6f 19 b2 67 82 0f 80 f0 67 cf d8 f4 fb bf ca 78 39 44 72 89 ce 8a 4e 75 52 df 6f 41 10 8e ec be 4a 79 41 0d c0 b7 b0 7b b6 af 0f c0 5e 7f 19 80 6f 90 b2 fa 60 00 be b8 ec 20 e9 a7 01 f8 e2 f2 17 a9 b5 2f 0f 40 41 ca c0 37 c0 7f 65 e0 1b c8 46 3e 2b 03 ac 60 03 7f 0c ee 2b 57 06 80 a7 bd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 f3 e5 ff 4a 17 b3 42 2e d8 95 d4 9a 59 26 55 66 b9 64 d1 5e 4d dc c4 43 85 ef 46 8d 5d bd Data Ascii: PNGIHDR@PLTEGpL>U8M8L# 5EGd*8LtRNSu;y0`h5_IDATxrX#>5oggx9DrNuRoAJyA{^o` /@A7eF>+`+WJB.Y&Ufd^MCF]
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 4b 72 fd 1c f0 49 8d 1f 5c 52 3e a8 4b 53 2e 7c 74 d4 e0 ad e6 9e f2 45 8d e5 ea d6 29 7b ea 5b 03 30 aa 0f ab 94 33 b5 99 fa 39 d3 52 21 49 f9 a2 3e 4d 79 af ce ae ca b7 94 33 9d e3 c1 1f 6a 2d 53 b3 4e d9 53 df 1a 80 52 d2 a5 4a 52 2e d4 99 64 9e 9d 64 49 ca 83 14 92 94 4f 6a e6 3f de ea 4e bd cf c5 e4 07 7f d1 d5 75 5d f9 e9 b8 ad 6c 63 00 0a 45 61 49 d9 ff 8e 7e 68 94 da 55 ca a5 9a 39 e5 28 ac 52 ae 5f 0f ea a6 b9 51 d7 6d f0 94 a3 81 94 81 df a9 d4 55 bf a4 ec eb d9 a5 06 df 55 b3 4a 79 a7 f6 71 ca 93 30 27 5f 95 32 52 06 3e cb f1 e0 f9 dd 52 2e a7 40 3b bb ca a4 b0 4a 39 97 fe 3f e5 d6 a6 b9 bd c2 d8 93 f2 27 02 5e 94 dc 57 d6 ad 48 af 2f 4d d9 46 bd a8 59 3e 01 27 cb 5e 51 e3 29 17 7a 52 6b 9f b3 ec 05 20 0f 53 87 cd 92 72 ae c9 f9 51 ca 27 f5 ef Data Ascii: KrI\R>KS.\|tE){[039R!I>My3j-SNSRJR.ddIOj?Nu]lcEaI~hU9(R_QmUUJyq0'_2R>R.@;J9?'^WH/MFY>'^Q)zRk SrQ'
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 57 39 9d 16 a9 ec 82 07 19 2a dc 9d 56 99 9f 06 b1 44 a4 f2 6b f8 e0 e8 6e 8f d7 e0 bf 2b 3f 53 79 85 6e 76 2c 3a 40 65 74 bc 08 5c e0 db ee 6e ba ca c9 b4 22 2a 0f 0e 15 e1 3f f2 b3 74 85 78 20 96 86 54 6e a1 c8 ce 5b 87 2e cc d5 e4 4c 20 91 67 4d 3e dc 18 22 b7 81 ca 4d a0 72 85 4e 12 c5 a7 ab 9c 48 8b 54 c6 29 19 ab 5c 9c 56 99 9f 06 b1 34 a4 72 99 56 19 fd e1 d1 0e 70 88 a8 dc 6f 46 bc 33 86 63 e7 ab 9c 48 2b ad 72 d0 4d 67 a7 55 2e a5 f2 a2 91 ca 50 04 af eb f3 54 de 59 08 be d7 2e 41 65 7e 1a 18 21 a4 f2 5e 2a ff 35 08 a9 bc 9e af 72 f5 85 2a af 27 ab dc 49 65 71 1e ea 95 2b f5 ca 42 48 65 a9 2c ae 8c 54 1e a4 b2 10 7f f7 77 e5 ed c6 d3 b0 ca 47 91 f5 5d f9 af 43 e8 16 91 35 8a 26 ef f6 ba b9 a4 ca e5 e4 5e b9 18 55 d6 2d 22 42 2a a3 7c 79 9e ca d7 Data Ascii: W9VDkn+?Synv,:@et\n"?tx Tn[.L gM>"MrNHT)\V4rVpoF3cH+rMgU.PTY.Ae~!^5r'Ieq+BHe,TwG]C5&^U-"B*\|y
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 3e 25 43 a3 dc 02 fa 68 08 36 9e ab 75 88 45 d9 23 4b 54 82 ed f7 ff 7d 86 86 1f 57 30 0a 1d fe 76 d5 a3 01 1d 9e 2e e3 26 8c 51 c1 80 50 61 12 a3 c3 2d 0e 0a f1 25 94 47 dd 89 33 00 ef 32 03 fd 49 95 ab dc bc 53 ab f0 64 40 31 82 3a bb 88 ca d1 10 7e b7 87 ab 85 ca 94 3d b2 c4 d9 fd 91 ca 06 0e f1 0a b0 6f 40 b3 0d 01 07 6e 02 ab bc 32 4e a2 77 3b fb 4a 95 85 58 19 e8 58 65 5b e3 45 ec 69 4e a9 dc b7 28 5f 06 27 03 8e 11 4a b3 67 95 a3 21 a0 3f e0 6a a3 2a af c3 2c 5b 5f 59 4c e5 2e 56 01 5d 64 6b 91 fb 6e 74 9f 9b c0 d1 ca ff 4d e2 27 0e 0a f1 25 84 96 55 ac 32 4c 05 fb a8 ca e1 f1 2c 3c 19 c4 62 80 03 ab 1c 0d 01 a9 00 57 1b 55 b9 0f b2 cc d0 25 b2 ca 68 38 57 e0 c9 61 b0 2f 87 f6 53 13 a8 57 ce 38 89 f0 a0 10 5f 42 ce 1f 34 2d 84 5e e1 87 4f 55 de 59 Data Ascii: >%Ch6uE#KT}W0v.&QPa-%G32ISd@1:~=o@n2Nw;JXXe[EiN(_'Jg!?j*,[_YL.V]dkntM'%U2L,<bWU%h8Wa/SW8_B4-^OUY
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: e2 c0 58 b8 a0 59 92 a8 09 e5 89 26 48 65 71 01 82 4e b6 3c 21 03 b6 d1 2b ef fc ff cc 22 2a 67 90 76 85 83 23 14 83 86 2f 05 2a 27 42 e4 e8 f4 da 39 2a 63 3c 43 42 65 67 23 cf 8f f7 27 7e 47 3b 8c 25 11 26 d6 84 f6 e3 fc c7 47 6e 82 54 16 97 60 e7 af df fc c2 cb 8f 64 40 67 83 81 8a 1f 56 0c 0f db 36 a6 72 ee 6f e8 ca cb 70 28 10 c7 68 fd 66 61 a4 72 3c 04 cd 22 32 43 65 af 63 5a e5 d8 84 40 88 8d 0f 28 78 3f a1 26 d0 54 df dc 04 a9 2c 2e 40 11 4c 52 d5 b9 88 0c ad bd f1 e3 a3 80 41 47 40 2a fb d2 b7 9b f6 68 ea 5b 8e 51 7f 14 fa 69 a4 72 22 44 60 da 0c 95 7d 95 fb a4 ca bb 53 2a d7 30 d8 0c e1 b9 09 47 e7 57 dc 04 a9 2c 2e 40 ce 62 b2 0c 3b ba dd 21 4b aa 8c d2 e1 3e 8e 91 fe 5d 99 43 80 dd 59 2a 63 46 fb 84 ca 59 4a e5 60 0e b2 c6 b9 68 13 56 e6 a9 b8 Data Ascii: XY&HeqN<!+"gv#/'B9c<CBeg#'~G;%&GnT`d@gV6rop(hfar<"2CecZ@(x?&T,.@LRAG@h[Qir"D`}S0GW,.@b;!K>]CYcFYJ`hV
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 70 af 1c 1e ac 42 1d 58 65 8e 1a 4f 9d 70 a9 cc d3 2a 5b f5 79 af 9c f1 bb 46 58 4c 88 0b aa 1c 6e 4d 57 99 cf 21 c9 a8 0b a3 1d a4 72 ce 67 ef a2 2a 73 90 54 ea 20 9d 79 5a 65 1c 49 ab bc a3 2b 78 35 6d 0b 71 21 95 b9 07 9c ae 32 3b c5 57 d2 ba cd 4f 1b 69 b0 03 34 a4 72 f1 71 01 38 6f d1 93 b5 51 95 39 48 22 f5 90 75 32 f3 b4 ca 87 cf 55 6e 3f ae 93 ff 7e 6f 0a 72 7f 78 bc c7 f1 2f 43 88 f2 e8 c7 a8 55 68 5d f5 b9 ca dd c3 f6 23 c0 f0 b8 39 76 a8 ff bf 1d 99 97 ad c0 a9 47 b5 ec e1 aa af 73 17 be 01 20 1c 74 30 07 38 c8 89 d4 6f fd 79 f6 bc ad d1 b3 c6 33 4f a8 fc f0 58 1f f5 f5 95 2b e8 dd ca d7 99 a3 6e 04 c2 bb 47 eb ff 0b 71 a1 5b 44 76 b0 0e f2 1a e8 9a 98 ca 7b 5f d4 1a 9c eb 4b 74 14 ac 47 ff ba e7 5a d6 94 42 8d 7d ed 47 a1 3c fc ed d6 1c e0 20 Data Ascii: pBXeOp[yFXLnMW!rgsT yZeI+x5mq!2;WOi4rq8oQ9H"u2Un?~orx/CUh]#9vGs t08oy3OX+nGq[Dv{_KtGZB}G<
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: d6 cc 43 32 73 bc a3 f4 2e a7 a2 08 12 14 c5 3c 47 5d 93 5a 5f f9 9e de 96 84 b8 18 d9 7d 39 3c 35 6e 26 e8 b8 b2 d6 10 c4 bf e6 b1 89 5a ac 7b 82 ac cc f6 de 8e 52 c8 df b6 21 6c 2a c8 79 a9 e3 1d a5 7b 3a 2b c0 a6 b4 97 87 a0 2d 2f 66 3f 36 4e 88 e5 71 a1 05 92 84 10 52 59 08 21 95 85 90 ca 42 08 a9 2c 84 90 ca 42 08 a9 2c 84 54 16 42 48 65 21 84 54 16 42 48 65 21 04 c6 16 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 fc 8d 4c 5a ce e8 67 6b dd 53 73 72 b8 c4 0d 96 6e 38 9b 1d 67 23 84 98 44 9e 5e c4 3b 5c 3b a5 ab 02 fb 2b 16 d0 dc bf 41 7d 9c cd ca 3c 3f 1e 9c 10 62 b6 ca 30 d9 53 5d 50 65 04 06 b7 4e 08 31 53 65 f6 69 b8 a2 ca 76 e7 ce 40 08 a9 9c 05 3a ad af a5 32 aa 14 42 cc 51 99 75 1a ae a9 f2 c1 09 21 Data Ascii: C2s.<G]Z_}9<5n&Z{R!l*y{:+-/f?6NqRY!B,B,TBHe!TBHe!!B!B!B!B!B!BLZgkSsrn8g#D^;\;+A}<?b0S]PeN1Seiv@:2BQu!
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 2f bc ad 08 21 26 f0 b3 b5 ee a9 71 53 c8 ee cb c1 17 a5 b9 bd 3e 09 b0 2d ed 25 55 62 7a a4 ff cf ce 1d f4 b6 8d 5c 71 00 9f 88 d2 3d 28 d4 bb 6a cb 77 22 66 ee 92 f8 78 f7 c6 f2 f7 ff 2a 35 df 98 22 bd 76 d0 36 90 52 ec e2 f7 c3 0e c1 0c 67 66 4f 7f 3c 8a e4 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 af 7d 7b 79 69 cb a4 b9 db 95 32 b6 ff 41 8e bf 3d e0 ee ae 8c 56 77 e5 a3 55 Data Ascii: /!&qS>-%Ubz\q=(jw"fx*5"v6RgfO<}{yi2A=VwU
2023-12-05 18:14:06 UTC	1252	IN	Data Raw: 58 d7 58 ee b3 4a 6e e3 55 3f fd 86 cd a4 cd 9d 65 7f ca 36 6f 6e 3c c7 68 f7 6e 4c 44 0c dd 90 83 22 0e 75 7c de 4d 7f 89 57 c3 b4 76 3d ae a3 5c 05 d0 9d 6a a2 33 ca d3 d6 e2 cd 14 e5 32 77 4e 1b a3 b2 7f 77 f9 04 3b 9e e7 31 f5 e4 b8 cb 35 9b fc 96 e4 5c 4f bf d6 94 1f 77 d3 da f5 d8 1d 0b 70 03 cd b7 c7 32 eb 8e 73 e7 e7 be dd b7 7f 9a d8 5c c6 36 77 ed c7 c1 bf 1f b0 1f ca ff 1d 20 ca c0 df 69 0b 22 d8 ca fc d7 07 84 28 ff 1d 40 1c ca 5f 1f f0 d8 96 df 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: XXJnU?e6on<hnLD"u\|MWv=\j32wNw;15\Owp2s\6w i"(@_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50601	18.165.98.49	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	586	OUT	GET /c2/3005403/cs.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=1CE001d792ba7ec59dfd68a1701800007
2023-12-05 18:14:06 UTC	378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 69 6e 74 65 72 6e 61 6c 2d 63 32 2f 33 30 30 35 34 30 33 2f 63 73 2e 6a 73 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 55 41 2c 20 50 6c 61 74 66 6f 72 6d 2c 20 41 72 63 68 2c 20 4d 6f 64 65 6c 2c 20 4d 6f 62 69 6c 65 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 69 73 73 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 33 30 35 66 61 31 64 37 66 39 64 66 34 65 34 32 65 64 62 61 31 62 62 61 36 64 30 65 62 62 35 36 2e 63 6c 6f Data Ascii: HTTP/1.1 302 FoundContent-Length: 0Connection: closeDate: Tue, 05 Dec 2023 18:14:06 GMTLocation: /internal-c2/3005403/cs.jsAccept-CH: UA, Platform, Arch, Model, MobileX-Cache: Miss from cloudfrontVia: 1.1 305fa1d7f9df4e42edba1bba6d0ebb56.clo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50603	35.71.139.29	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	468	OUT	GET /xuid?mid=5989&xuid=CAESEJZCixMiRIce1hNKBTrJhac&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2618672411569676278148
2023-12-05 18:14:06 UTC	449	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 64 6e 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 33 63 2f 70 33 70 2e 78 6d 6c 22 2c 20 43 50 3d 22 4e 4f 4e 20 44 53 50 20 43 4f 52 20 4e 49 44 20 4f 55 52 20 44 45 4c 20 53 41 4d 20 4f 54 Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:06 GMTContent-Type: image/gifContent-Length: 37Connection: closeCache-Control: no-cache, no-store, must-revalidateP3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OT
2023-12-05 18:14:06 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50604	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:06 UTC	842	OUT	POST /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive Content-Length: 327 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:06 UTC	327	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 7d 2c 22 75 73 65 72 5f 74 72 61 69 74 73 22 3a 7b 22 65 64 75 53 75 62 73 63 72 69 62 65 72 22 3a 22 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 22 22 2c 22 61 67 65 6e 74 49 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 5f 75 70 64 61 74 65 64 22 3a 31 37 30 31 38 30 30 30 31 39 7d 2c 22 61 70 70 22 3a 7b 22 75 69 5f 73 Data Ascii: {"browser":{"url":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html"},"user_traits":{"eduSubscriber":"","userType":"anon","external_id":"","agentId":"XbK7A_KO3s8XVA_FdXv5zD"},"tracking":{"last_updated":1701800019},"app":{"ui_s
2023-12-05 18:14:07 UTC	667	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:06 GMTContent-Type: application/jsonContent-Length: 14Connection: closeaccess-control-allow-credentials: trueaccess-control-allow-origin: *vary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpo
2023-12-05 18:14:07 UTC	14	IN	Data Raw: 7b 22 72 65 73 75 6c 74 73 22 3a 7b 7d 7d Data Ascii: {"results":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50606	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:07 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 37 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:07 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50607	44.211.112.71	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	2341	OUT	GET //.status HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad^https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html=z3DiZN4mOIhoKcvokH-eY6zy; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"
2023-12-05 18:14:07 UTC	469	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 78 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2d 6f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 78 2d 63 6c 6f 75 64 2d 74 72 61 63 65 2d 63 6f 6e 74 65 78 74 3a 20 31 38 65 62 33 64 62 31 31 63 39 65 62 35 32 31 33 39 66 35 33 36 66 36 64 63 62 65 61 30 65 37 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 37 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 65 6e 76 6f 79 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 33 34 0d 0a 76 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 78 2d 65 6e 76 6f 79 2d 75 70 73 74 72 65 61 6d 2d 73 Data Ascii: HTTP/1.1 200 OKx-content-type-options: nosniffcontent-type: text/plain; charset=utf-8x-cloud-trace-context: 18eb3db11c9eb52139f536f6dcbea0e7date: Tue, 05 Dec 2023 18:14:07 GMTserver: envoycontent-length: 34via: 1.1 googlex-envoy-upstream-s
2023-12-05 18:14:07 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50608	104.26.7.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	357	OUT	GET /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:07 UTC	610	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:14:07 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closevary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3
2023-12-05 18:14:07 UTC	117	IN	Data Raw: 36 66 0d 0a 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 31 31 32 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 74 79 70 65 22 3a 22 6e 6f 74 5f 66 6f 75 6e 64 22 2c 22 75 73 65 72 5f 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 5d 7d 0d 0a Data Ascii: 6f{"errors":[{"code":112,"message":"Endpoint not found","type":"not_found","user_message":"Endpoint not found"}]}
2023-12-05 18:14:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50609	104.26.6.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	842	OUT	POST /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive Content-Length: 388 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:07 UTC	388	OUT	Data Raw: 7b 22 62 72 6f 77 73 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 32 30 32 33 2f 31 32 2f 30 35 2f 77 6f 72 6c 64 2f 61 66 72 69 63 61 2f 6e 69 67 65 72 69 61 2d 73 74 72 69 6b 65 2d 63 69 76 69 6c 69 61 6e 73 2e 68 74 6d 6c 22 7d 2c 22 75 73 65 72 5f 74 72 61 69 74 73 22 3a 7b 22 65 64 75 53 75 62 73 63 72 69 62 65 72 22 3a 22 22 2c 22 75 73 65 72 54 79 70 65 22 3a 22 61 6e 6f 6e 22 2c 22 65 78 74 65 72 6e 61 6c 5f 69 64 22 3a 22 22 2c 22 61 67 65 6e 74 49 64 22 3a 22 58 62 4b 37 41 5f 4b 4f 33 73 38 58 56 41 5f 46 64 58 76 35 7a 44 22 7d 2c 22 74 72 61 63 6b 69 6e 67 22 3a 7b 22 6c 61 73 74 5f 75 70 64 61 74 65 64 22 3a 31 37 30 31 38 30 30 30 31 39 7d 2c 22 61 70 70 22 3a 7b 22 75 69 5f 73 Data Ascii: {"browser":{"url":"https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html"},"user_traits":{"eduSubscriber":"","userType":"anon","external_id":"","agentId":"XbK7A_KO3s8XVA_FdXv5zD"},"tracking":{"last_updated":1701800019},"app":{"ui_s
2023-12-05 18:14:07 UTC	673	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a Data Ascii: HTTP/1.1 200 OKDate: Tue, 05 Dec 2023 18:14:07 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeaccess-control-allow-credentials: trueaccess-control-allow-origin: *vary: OriginCF-Cache-Status: DYNAMICReport-To:
2023-12-05 18:14:07 UTC	70	IN	Data Raw: 34 30 0d 0a 7b 22 65 72 72 6f 72 22 3a 22 49 6e 76 61 6c 69 64 20 63 6f 6e 74 65 78 74 3a 20 69 6e 76 61 6c 69 64 20 4f 62 6a 65 63 74 49 64 20 69 6e 20 4a 53 4f 4e 3a 20 5c 22 66 61 6c 73 65 5c 22 22 7d 0d 0a Data Ascii: 40{"error":"Invalid context: invalid ObjectId in JSON: \"false\""}
2023-12-05 18:14:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50611	151.101.193.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	1858	OUT	GET /graphql/v2 HTTP/1.1 Host: samizdat-graphql.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=1&tt=1e1&bcn=%2F%2F173bf110.akstat.io%2F"; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=
2023-12-05 18:14:07 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 53 65 72 76 65 72 3a 20 56 61 72 6e 69 73 68 0d 0a 52 65 74 72 79 2d 41 66 74 65 72 3a 20 30 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 37 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 76 61 72 6e 69 73 68 0d 0a 78 2d 6e 79 74 2d 6d 65 72 69 64 69 65 6d 3a 20 50 4d 0d 0a 78 2d 6e 79 74 2d 63 6f 6e 74 69 6e 65 6e 74 3a 20 4e 41 0d 0a 78 2d 6e 79 74 2d 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 78 2d 6e 79 74 2d 72 65 67 69 6f 6e 3a 20 4e 4a 0d 0a 78 2d 6e 79 74 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 0Server: VarnishRetry-After: 0Accept-Ranges: bytesDate: Tue, 05 Dec 2023 18:14:07 GMTVia: 1.1 varnishx-nyt-meridiem: PMx-nyt-continent: NAx-nyt-country: USx-nyt-region: NJx-nyt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50615	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	2240	OUT	GET /vi-assets/static-assets/cookingAppDownloadLandingPage-15402b0b17005c3dc5a6.js?_sw-precache=3b8baeb92bd38e0a67e78aa8ba801faf HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:07 UTC	1343	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 37 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 78 58 39 45 6e 52 65 46 52 67 31 54 48 6a 31 43 33 45 52 71 78 4e 4c 35 6c 48 44 4c 48 4f 66 2d 30 4e 65 56 4b 4d 69 46 57 69 6e 56 31 4c 75 5f 59 30 30 42 51 72 6a 6b 65 47 51 37 65 73 77 39 6a 33 47 35 72 71 68 45 54 65 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 37 37 34 35 35 37 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 475X-GUploader-UploadID: ABPtcPoxX9EnReFRg1THj1C3ERqxNL5lHDLHOf-0NeVKMiFWinV1Lu_Y00BQrjkeGQ7esw9j3G5rqhETeAx-goog-generation: 1701369734774557x-goog-metageneration: 1x-goog-stored-content-encodin
2023-12-05 18:14:07 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:07 UTC	475	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 5d 2c 7b 22 72 4e 2f 35 22 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 6f 29 3b 76 61 72 20 65 2c 69 3d 61 28 22 67 63 52 2f 22 29 2c 70 3d 61 2e 6e 28 69 29 2c 72 3d 28 61 28 22 71 31 74 49 22 29 2c 61 28 22 75 48 50 78 22 29 29 2c 73 3d 61 2e 6e 28 72 29 2c 74 3d 61 28 22 4b 35 48 32 22 29 2c 63 3d 61 28 22 71 73 32 6b 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 70 28 29 28 74 2e 56 69 4d 65 73 73 61 67 69 6e 67 43 6f 6e 74 65 78 74 50 72 6f 76 69 64 65 72 2c 7b 63 6c 69 65 6e 74 3a 74 2e 63 6c 69 65 6e 74 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[66],{"rN/5":function(n,o,a){"use strict";a.r(o);var e,i=a("gcR/"),p=a.n(i),r=(a("q1tI"),a("uHPx")),s=a.n(r),t=a("K5H2"),c=a("qs2k");function d(){return p()(t.ViMessagingContextProvider,{client:t.clients

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50616	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	2229	OUT	GET /vi-assets/static-assets/cookingLandingPage-785ae9eab46d5977ac9c.js?_sw-precache=c1f043c80f170a268346f37b781332b5 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:07 UTC	1331	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 38 34 31 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 42 64 6b 6a 58 42 35 71 53 69 2d 47 6f 67 4d 37 44 4d 38 6c 46 5f 6d 46 59 47 6b 64 55 58 59 35 30 30 53 56 4e 52 45 52 61 42 65 64 51 36 76 78 33 67 4c 73 4c 63 50 5a 41 5a 66 66 75 58 4b 59 44 54 6e 59 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 34 35 34 33 38 30 38 30 31 37 35 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 198417X-GUploader-UploadID: ABPtcPrBdkjXB5qSi-GogM7DM8lF_mFYGkdUXY500SVNRERaBedQ6vx3gLsLcPZAZffuXKYDTnYx-goog-generation: 1701454380801750x-goog-metageneration: 1x-goog-stored-content-encoding: i
2023-12-05 18:14:07 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:07 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 37 5d 2c 7b 22 30 58 59 50 22 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 6d 61 6b 65 54 65 6d 70 6c 61 74 65 4f 62 6a 65 63 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 72 61 77 22 2c 7b 76 61 6c 75 65 3a 65 7d 29 3a 6e 2e 72 61 77 3d 65 2c 6e 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[67],{"0XYP":function(n,e,t){"use strict";var i=this&&this.__makeTemplateObject\|\|function(n,e){return Object.defineProperty?Object.defineProperty(n,"raw",{value:e}):n.raw=e,n};Object.defineProperty(e,"__
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 3b 61 26 26 21 28 22 67 65 74 22 69 6e 20 61 3f 21 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3a 61 2e 77 72 69 74 61 62 6c 65 7c 7c 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7c 7c 28 61 3d 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 69 2c 61 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 74 29 2c 6e 5b 69 5d 3d 65 5b 74 5d 7d 29 2c 61 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 65 74 4d 6f 64 75 6c 65 44 65 66 61 75 6c 74 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e Data Ascii: ertyDescriptor(e,t);a&&!("get"in a?!e.__esModule:a.writable\|\|a.configurable)\|\|(a={enumerable:!0,get:function(){return e[t]}}),Object.defineProperty(n,i,a)}:function(n,e,t,i){void 0===i&&(i=t),n[i]=e[t]}),a=this&&this.__setModuleDefault\|\|(Object.create?fun
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 74 6f 6d 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 22 2c 22 70 78 29 20 7b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 38 30 70 78 3b 5c 6e 20 20 7d 5c 6e 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 22 2c 22 70 78 29 20 7b 5c 6e 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 32 30 70 78 3b 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 3e 20 73 65 63 74 69 6f 6e 20 7b 5c 6e 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 22 2c 22 70 78 29 20 7b 5c 6e 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c Data Ascii: tom: none;\n border-top: none;\n }\n\n @media (min-width: ","px) {\n margin: 0 80px;\n }\n @media (min-width: ","px) {\n margin: 0 120px;\n }\n\n > section {\n border-top: none;\n @media (min-width: ","px) {\n border-top: 1px sol
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 64 3d 72 28 74 28 22 71 31 74 49 22 29 29 2c 6c 3d 72 28 74 28 22 31 37 78 39 22 29 29 2c 73 3d 6f 28 74 28 22 34 32 76 58 22 29 29 2c 63 3d 74 28 22 31 4f 4b 57 22 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 6e 29 7b 76 61 72 20 65 2c 74 2c 69 3d 6e 2e 75 6e 69 74 2c 61 3d 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 63 6f 6e 74 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 70 72 6f 64 75 63 74 4c 69 73 74 29 7c 7c 5b 5d 2c 6f 3d 61 5b 30 5d 2c 72 3d 61 2e 73 6c 69 63 65 28 31 29 3b 72 65 74 75 72 6e 20 64 2e 64 65 66 61 75 6c 74 2e 63 72 65 Data Ascii: ect.defineProperty(e,"__esModule",{value:!0});var d=r(t("q1tI")),l=r(t("17x9")),s=o(t("42vX")),c=t("1OKW");function p(n){var e,t,i=n.unit,a=(null===(e=null==i?void 0:i.content)\|\|void 0===e?void 0:e.productList)\|\|[],o=a[0],r=a.slice(1);return d.default.cre
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 37 38 66 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 63 37 38 66 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 35 70 78 3b 5c 6e 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 5c 6e 20 20 67 72 69 64 2d 61 72 65 61 3a 20 6c 6f 67 6f 3b 5c 6e 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 5c 6e 5c 6e 20 20 70 61 74 68 20 7b 5c 6e 20 20 20 20 66 69 6c 6c 3a 20 77 68 69 74 65 3b 5c 6e 20 20 7d 5c 6e 22 5d 29 29 29 3b 76 61 72 20 6c 2c 73 2c 63 2c 70 2c 6d 2c 67 2c 68 2c 75 2c 66 2c 78 2c 77 2c 62 2c 76 Data Ascii: 78f0;\n border-color: #3c78f0;\n border-radius: 3px;\n border-style: solid;\n border-width: 5px;\n box-sizing: border-box;\n grid-area: logo;\n max-width: 100%;\n width: 20px;\n\n path {\n fill: white;\n }\n"])));var l,s,c,p,m,g,h,u,f,x,w,b,v
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 5c 6e 20 20 7d 5c 6e 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 22 2c 22 70 78 29 20 7b 5c 6e 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 5c 6e 20 20 7d 5c 6e 22 5d 29 29 2c 68 2e 66 6f 6e 74 73 2e 66 72 61 6e 6b 6c 69 6e 2c 68 2e 77 69 64 74 68 73 2e 73 6d 61 6c 6c 2c 68 2e 77 69 64 74 68 73 2e 78 4c 61 72 67 65 29 2c 65 2e 62 61 6e 6e 65 72 55 72 67 65 6e 63 79 3d 28 30 2c 67 2e 63 73 73 29 28 63 7c 7c 28 63 3d 69 28 5b 22 5c 6e 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 5c 6e 22 5d 2c 5b 22 5c 6e 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 5c 6e 22 5d 29 29 29 2c 65 2e 6c 6f 67 6f 43 72 6f 73 73 Data Ascii: padding: 12px;\n }\n @media (min-width: ","px) {\n font-size: 18px;\n }\n"])),h.fonts.franklin,h.widths.small,h.widths.xLarge),e.bannerUrgency=(0,g.css)(c\|\|(c=i(["\n text-transform: uppercase;\n"],["\n text-transform: uppercase;\n"]))),e.logoCross
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 20 20 2d 2d 66 7a 3a 20 31 36 3b 5c 6e 20 20 20 20 2d 2d 6c 68 3a 20 32 34 3b 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 69 6e 73 20 7b 5c 6e 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 5c 6e 20 20 7d 5c 6e 22 5d 2c 5b 22 5c 6e 20 20 2d 2d 66 7a 3a 20 31 34 3b 5c 6e 20 20 2d 2d 6c 68 3a 20 32 31 3b 5c 6e 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 66 7a 29 20 2a 20 31 70 78 29 3b 5c 6e 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 6c 68 29 20 2f 20 76 61 72 28 2d 2d 66 7a 29 29 3b 5c 6e Data Ascii: --fz: 16;\n --lh: 24;\n }\n\n ins {\n text-decoration: none;\n }\n"],["\n --fz: 14;\n --lh: 21;\n\n -webkit-font-smoothing: antialiased;\n font-weight: 200;\n font-size: calc(var(--fz) * 1px);\n line-height: calc(var(--lh) / var(--fz));\n
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 20 34 30 30 3b 5c 6e 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 32 34 20 2f 20 31 36 29 3b 5c 6e 5c 6e 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 22 2c 22 70 78 29 20 7b 5c 6e 20 20 20 20 2d 2d 66 7a 3a 20 31 38 3b 5c 6e 20 20 7d 5c 6e 22 5d 29 29 2c 64 2e 63 6f 6c 6f 72 73 2e 77 68 69 74 65 2c 64 2e 66 6f 6e 74 73 2e 73 61 6e 73 42 61 73 65 2c 64 2e 77 69 64 74 68 73 2e 6d 65 64 69 75 6d 4c 61 72 67 65 29 7d 2c 51 71 30 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 6d 61 6b 65 54 65 6d 70 6c 61 74 65 4f 62 6a 65 63 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: 400;\n line-height: calc(24 / 16);\n\n @media (min-width: ","px) {\n --fz: 18;\n }\n"])),d.colors.white,d.fonts.sansBase,d.widths.mediumLarge)},Qq0d:function(n,e,t){"use strict";var i=this&&this.__makeTemplateObject\|\|function(n,e){return Object.def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50617	104.26.7.229	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	357	OUT	GET /api/v1/surveys/embed HTTP/1.1 Host: iteratehq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-05 18:14:08 UTC	616	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 54 75 65 2c 20 30 35 20 44 65 63 20 32 30 32 33 20 31 38 3a 31 34 3a 30 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 Data Ascii: HTTP/1.1 404 Not FoundDate: Tue, 05 Dec 2023 18:14:08 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closevary: OriginCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3
2023-12-05 18:14:08 UTC	117	IN	Data Raw: 36 66 0d 0a 7b 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 31 31 32 2c 22 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 74 79 70 65 22 3a 22 6e 6f 74 5f 66 6f 75 6e 64 22 2c 22 75 73 65 72 5f 6d 65 73 73 61 67 65 22 3a 22 45 6e 64 70 6f 69 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 7d 5d 7d 0d 0a Data Ascii: 6f{"errors":[{"code":112,"message":"Endpoint not found","type":"not_found","user_message":"Endpoint not found"}]}
2023-12-05 18:14:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50614	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:07 UTC	2189	OUT	GET /vi-assets/static-assets/cooking_app-f06ad6a83e83b6e5c60bc1e012c82d8f.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:08 UTC	1315	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 39 33 33 32 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 35 4e 4f 77 4f 79 53 67 30 37 37 54 62 59 6b 5a 36 2d 72 6c 52 49 75 53 79 67 6b 41 4e 79 50 38 37 68 45 4a 78 51 6f 76 45 35 43 6a 4f 63 6f 43 2d 4e 78 6b 6c 4c 69 67 58 4c 51 6a 41 6f 4a 79 53 6f 4c 76 72 69 34 44 57 58 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 33 20 4e 6f 76 20 32 30 32 34 20 31 30 3a 30 35 3a 30 35 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 893327X-GUploader-UploadID: ABPtcPr5NOwOySg077TbYkZ6-rlRIuSygkANyP87hEJxQovE5CjOcoC-NxklLigXLQjAoJySoLvri4DWXACache-Control: public,max-age=31536000Expires: Wed, 13 Nov 2024 10:05:05 GMTLast-Modi
2023-12-05 18:14:08 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 12 00 00 04 6b 08 06 00 00 00 66 19 3c 0e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 0d a1 24 49 44 41 54 78 01 ec 9d 07 9c 64 55 99 f6 4f 85 ae ea dc 93 87 30 43 14 51 41 90 a0 2b 41 01 15 13 8b a2 ae b2 ee ae 6b 5a e3 9a 75 d5 ef 53 77 d5 cf b8 26 56 5d d7 0c 8b 39 8b 09 33 2a a2 18 40 82 a0 80 80 64 98 dc 39 54 fa ce f3 de 7b 8a 3b 77 aa 3a 4d 77 4f 4f d5 ff df bf fa 75 85 5b 37 9e 7b ee ad e7 39 ef fb 66 ae 3c e3 f8 9a 03 00 00 00 00 00 00 00 00 00 00 00 68 40 d6 01 00 00 00 00 00 00 00 00 00 00 00 34 01 23 01 00 00 00 00 00 00 00 00 00 00 00 9a 82 91 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRkf<pHYssRGBgAMAa$IDATxdUO0CQA+AkZuSw&V]93*@d9T{;w:MwOOu[7{9f<h@4#
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 48 d6 4e 00 00 00 00 00 98 0d f9 7c de f5 f6 f6 ba ce ce 4e d7 d5 d5 65 8f 9e 9e 1e b7 63 c7 0e 4b 9d b9 da 3f 72 0e 00 00 a0 35 c0 48 00 00 80 96 a7 5c ae b8 ab ae ba ca 0d 0d 0d d9 8f 3b fd e8 cb e5 72 ae a3 a3 c3 8c 05 fd d8 03 00 00 00 00 98 0b 32 0e d6 ae 5d 6b ff 8b c5 a2 eb ee ee 76 fd fd fd ee e6 9b 6f 76 2b 57 ae 74 07 57 ab ae c3 01 00 00 b4 06 a4 36 02 00 80 96 a7 94 bb d7 37 4f 86 9a 87 d4 46 a4 38 02 58 3e 24 cf d1 50 c7 24 59 cc 72 ba ff e9 47 32 f2 68 29 d6 b7 d1 67 cd d6 b7 d1 3c f6 c6 54 18 e9 6d 9c cb 36 24 8f d5 ee 2c 7f a6 f9 03 c0 cc cc e6 3c 5e 88 73 b6 d5 68 54 68 19 00 00 a0 55 c1 48 00 00 80 96 67 2a 36 12 d2 85 95 c3 8f 3d 52 1b 01 2c 1f d2 42 95 ce d9 b4 d9 d7 48 b8 69 64 0c 86 ef 2e b6 b0 93 16 d6 e6 5a 87 25 39 dd 62 1b 1f 0b Data Ascii: HN\|NecK?r5H\;r2]kvov+WtW67OF8X>$P$YrG2h)g<Tm6$,<^shThUHg*6=R,BHid.Z%9b
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 54 97 c4 7a a5 02 b2 a8 14 0b 88 b2 fe 54 eb 69 d7 a8 5a a5 1e 35 65 91 75 7e ea 6e bf ec b2 3f d8 55 3f 9d 8e 89 a5 f9 ca cb 44 cf 47 e6 8c fa 5c eb 9b f2 76 dc 87 86 46 cc 64 d1 72 64 e2 4f 7a b3 d6 f6 4d 3e ea c3 6a d6 ef 65 2d ba 4a 6d 3d 2f b3 47 d7 05 33 10 64 18 47 eb a7 28 34 5d 0b 74 0e 76 5a 9a b5 8a 9d b3 ba b7 90 8d 67 e6 65 25 ba ce d5 a6 a2 3e 33 a3 54 83 4a 45 e8 8d bd 61 df 1f f7 28 4d 5f a1 cb 8c 94 7a 5e c1 5a 64 e4 6a 3e c9 e8 83 60 9e ed 89 a8 84 66 d1 ad a4 36 02 00 80 56 02 23 01 00 00 da 8e 4c ea 47 e7 1e c5 d4 3b ff 33 3f 9b b7 11 e0 1d c5 2e 13 26 cb d5 68 64 b7 d2 14 f5 0e ac 32 71 d4 46 cf 2a 15 82 d2 e4 e4 3a ec 87 74 25 1e ad 27 31 30 67 29 59 aa 26 18 29 17 76 94 3f 3d 6b 62 85 24 ac fe fe de 28 27 ba 9f 57 4f 4f af 5b 51 89 Data Ascii: TzTiZ5eu~n?U?DG\vFdrdOzM>je-Jm=/G3dG(4]tvZge%>3TJEa(M_z^Zdj>`f6V#LG;3?.&hd2qF*:t%'10g)Y&)v?=kb$('WOO[Q
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: e1 21 6b 36 67 86 2d 8d 39 e1 73 00 69 29 80 b2 ab 85 23 9e 32 93 bc 50 a0 aa ab a0 6f 1d 55 24 d4 e0 16 66 2c 23 fb fb 54 81 57 00 74 00 e6 ea ce a4 36 73 9e 0b 34 a0 8e 2c ab 1f 15 00 33 7d 7d b6 8a 08 94 11 04 0d 03 8e 3f 80 26 33 b8 35 03 5e d3 98 2f a9 b5 0d 70 9c 12 5a 00 a9 4b 03 8b e6 cb 31 c1 da 3a 8d bd 15 40 13 27 bf 05 a3 f0 65 41 c0 0e 00 1e 81 76 68 f2 23 6b 36 2f 38 cf 8c 6c 32 70 2f 4f 4a e7 4b 61 19 b8 00 d2 36 9e 11 97 4d a9 29 91 c4 6a 04 8f 24 01 c8 11 cc 8b b4 c8 4d 4a 24 37 e9 a9 90 d9 d6 35 6a ba 03 b0 a7 11 2a aa 76 14 08 6f 84 96 9d 8e e3 62 9e 98 0f 0a 1f 60 75 50 2b 80 5e be 19 f9 0e 7a 6d 05 6d 3b 24 0d 7a 3a ae a8 38 e9 a0 da 00 32 45 35 cb d8 65 f5 05 65 7a 8c 48 c2 ef d1 74 a9 c0 e3 54 ce ce 46 3a 5e 1e 81 59 00 ce 90 9f 01 Data Ascii: !k6g-9si)#2PoU$f,#TWt6s4,3}}?&35^/pZK1:@'eAvh#k6/8l2p/OJKa6M)j$MJ$75j*vob`uP+^zmm;$z:82E5eezHtTF:^Y
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: f3 1e ac f5 be c3 5f a7 81 18 5e 9a d4 19 26 10 e5 f3 70 3d 9e c9 bf d1 c7 86 55 0b a8 4a 88 8d 5c 86 71 b3 93 b1 f3 73 93 83 5a 91 24 47 7f 53 82 ef a8 e2 8b 1c f8 8e 75 84 2a c6 d0 55 0d 52 72 0f d5 6f 38 9e 5e 07 48 35 7a d2 70 ec 72 3b ae f6 01 80 fd 46 6a 29 08 7d de 7f 10 d3 90 ad 43 e5 0f 97 10 8d b5 3d 9a 3f e3 b5 a8 be 82 6f 11 80 7e 56 9a 79 66 64 2d ae 5a b1 dd ea 92 d8 21 b9 00 13 ed d4 18 45 cf 0f 79 ef cd bc 3a e7 67 04 ec 01 94 77 42 f5 20 e5 eb 94 a8 89 2c 29 80 c4 16 e6 0b aa e6 9e 81 cf 71 97 cf ff d1 7d a9 2a 12 aa 56 b5 aa 55 ad 6a 9f 9c 56 11 09 55 ab 5a d5 aa 56 b5 4f 5d db 7c d1 7b 96 aa 13 c2 a8 46 7d 65 80 d1 d0 2d 86 ee f0 a0 d7 26 58 0e f5 67 c8 49 00 24 47 76 1e e4 68 00 26 e3 2a e2 d0 27 08 63 66 c2 6b 7e b1 f6 fd 06 b3 d6 f1 Data Ascii: _^&p=UJ\qsZ$GSuURro8^H5zpr;Fj)}C=?o~Vyfd-Z!Ey:gwB ,)q}VUjVUZVO]\|{F}e-&XgI$Gvh&*'cfk~
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: f0 db 41 f5 9a 08 cd ba 49 ca e5 9b 82 14 27 27 57 18 68 8f 6b f1 29 a3 a4 04 46 e8 1b 68 ad fd 2e f3 c2 dd 63 93 fd c3 9e 80 73 14 dc 8b 22 ee d3 38 0e 08 10 ec 83 00 d9 21 d9 57 92 68 30 f2 9d d3 0d 31 18 fb 99 5e 1b 88 82 0c ff e9 1e 05 4f 05 00 e3 a1 ae 15 10 04 a8 f2 f0 95 35 c2 6d 87 54 10 d6 22 3e 03 d4 c2 0d 29 1e 32 fb 7f b9 4e ec 33 00 48 7f 7d ae 11 da 9e 32 05 11 b1 84 87 cc 54 89 dd a6 64 71 4e 6f 1f 90 f2 20 f5 53 dd 0f 1a 4a 4e b7 b0 a7 3b 39 3b 48 2f 05 24 a2 72 02 de f4 44 42 55 5b 92 92 40 e0 52 c3 3d ce 53 c6 fc 02 24 82 92 1e ab 0c 9e 41 21 7d 83 b0 be 38 f6 24 e2 7d 4a 0f a2 62 a0 1e 3b ef a0 c0 c6 01 92 4b 20 71 90 a8 80 63 06 c5 26 53 df 67 02 04 62 29 3c 26 92 b5 5b dc 11 f6 ac 80 b2 4f 90 bb e2 32 05 c9 12 20 c1 c1 73 ef 15 c6 1a Data Ascii: AI''Whk)Fh.cs"8!Wh01^O5mT">)2N3H}2TdqNo SJN;9;H/$rDBU[@R=S$A!}8$}Jb;K qc&Sgb)<&[O2 s
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 81 16 52 47 39 1f 73 04 6d 13 f2 01 51 34 31 71 f7 98 03 dc 43 51 0f b9 b9 04 9e fe 4b 13 58 7e bf 82 0b af 2c e3 a9 17 67 71 f9 dd 0a aa d5 8e 91 56 9f 7d fe 73 78 fa cc 53 b6 c6 3e f5 53 4f e0 f0 53 13 66 d4 3e bf 48 c2 e1 b7 fe 7b 54 7a 69 fc b5 bf f5 67 71 e0 d8 7e f6 45 17 7f ff 6f fd af c8 a4 d3 26 47 93 f3 f7 22 36 48 92 28 e8 e0 33 3f f7 05 1c 78 e4 04 aa d7 57 f0 c6 2b bf 8f 37 de 7d 05 c5 6a db b4 e1 73 e9 3c 87 2d 8a 58 3a 6c a0 6f 47 52 5e 5a 7b 51 ce a5 56 15 3b 8d 1a a1 c3 b6 91 4b a6 b4 25 92 85 e3 9a 27 19 37 c6 09 94 8f 71 ad b0 c3 32 89 71 14 26 66 08 e2 46 0c 44 ae 37 6b 58 2d ae 61 f5 f6 75 84 6f 93 bc 19 9f c2 fc de 93 48 9d 9e c2 bb e7 df 35 a0 d6 90 fb 21 50 be 1b 70 df fd ef e0 79 4d 29 25 11 ed d4 da 38 b0 6f 80 0b 17 db b8 7c 95 Data Ascii: RG9smQ41qCQKX~,gqV}sxS>SOSf>H{Tzigq~Eo&G"6H(3?xW+7}js<-X:loGR^Z{QV;K%'7q2q&fFD7kX-auoH5!PpyM)%8o\|
2023-12-05 18:14:08 UTC	16384	IN	Data Raw: 57 3f 68 fd 28 da 34 11 23 c8 45 e0 ab ba 1d c2 d9 6f 76 11 c8 5b df af 17 cf 22 70 28 35 d9 c5 8b 3f fa 08 d6 6e 6f 62 f5 4e ed 5e 34 b7 c6 9c 00 f4 fe a7 38 47 63 15 62 c3 0d 24 d3 1e 8e ec 7f d4 22 73 6b cd 0a ca 35 01 e0 0d 5b db 8a 68 d5 5c ae d6 3a 28 55 6a 58 5d 2b 63 6b b3 65 06 dd 07 0e 14 50 98 0a e1 f2 d5 6b 78 e5 8d b7 d0 e4 3c 9e 28 cc 12 98 3e 85 83 73 8b 1c 5b ae f9 7a c9 88 a6 e1 52 94 69 a7 0c 96 7b ce cb d4 19 4d f7 1d 60 af 4c 8b 56 bb 6f d2 1b 02 b4 02 e5 0f fb 69 11 e8 8f b7 04 30 72 fe a5 15 a1 bf 89 aa 08 84 96 93 a9 89 c9 dc bb 54 c7 fa b5 65 d4 d7 b7 e0 57 07 18 6b ce 13 fc 27 61 14 e5 fd a4 2d 23 9f 06 cb 04 72 5a f8 22 8b 94 f1 a0 fb 0b f7 6b 35 9c 94 92 8c 99 55 3f ac a7 91 d9 33 20 30 ef a1 72 21 62 73 6d 6a 71 02 67 8e 9d 42 Data Ascii: W?h(4#Eov["p(5?nobN^48Gcb$"sk5[h\:(UjX]+ckePkx<(>s[zRi{M`LVoi0rTeWk'a-#rZ"k5U?3 0r!bsmjqgB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50620	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:08 UTC	2201	OUT	GET /vi-assets/static-assets/core-news-download-regi-3421d050601d15d3dde1a842c1bfef2a.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:09 UTC	1339	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 37 34 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 44 50 79 63 64 75 7a 4d 4b 77 5a 4f 4b 4a 6b 6b 53 6d 4b 71 5a 57 53 49 64 6d 36 47 49 30 63 72 49 46 4b 31 39 7a 4e 5a 74 4c 67 70 48 4c 6a 76 77 35 53 58 44 71 78 33 4c 6e 30 73 2d 68 41 63 65 50 58 66 67 66 2d 61 6c 48 32 33 33 49 76 31 6a 55 74 55 63 69 49 34 45 68 50 61 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 75 65 2c 20 32 33 20 4a 61 6e 20 32 30 32 34 20 32 31 3a 35 37 3a 35 34 20 47 4d 54 0d Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 5743X-GUploader-UploadID: ADPycduzMKwZOKJkkSmKqZWSIdm6GI0crIFK19zNZtLgpHLjvw5SXDqx3Ln0s-hAcePXfgf-alH233Iv1jUtUciI4EhPagCache-Control: public,max-age=31536000Expires: Tue, 23 Jan 2024 21:57:54 GMT
2023-12-05 18:14:09 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 47 00 00 02 47 08 00 00 00 00 bf 28 ad 2b 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 16 28 49 44 41 54 78 da ed dd fd 7f 15 c5 bd c0 71 ff 86 cd 03 44 c3 a3 10 b0 a5 56 09 82 82 05 6c 29 02 96 07 c1 6a c1 96 16 a5 88 8a 7a 09 17 84 6b d1 26 97 7b cb 83 57 a0 6a 89 be f4 12 ee 4b ac a8 3c 59 bc 48 b5 0a 92 ab 52 6d 84 52 40 2d 26 42 55 f0 95 f0 50 12 48 42 92 33 f7 15 12 42 4e ce 9e 7d 98 99 dd 9c 9d f3 f9 fe 04 27 7b 66 66 67 de 7b ce 9e fd ee ce 5c 26 08 42 3d 2e a3 0b 08 1c 11 38 22 70 44 10 38 22 70 44 e0 88 c0 11 41 e0 88 c0 11 81 23 02 47 04 81 23 02 47 04 8e 08 1c 11 04 8e 08 1c 11 38 22 08 1c 11 38 22 52 dd d1 65 3a c3 b5 0a d7 8a 25 4b f0 b3 43 5a ab f0 d3 a9 ea 15 ab ef bc 86 d1 c4 11 Data Ascii: PNGIHDRGG(+bKGD(IDATxqDVl)jzk&{WjK<YHRmR@-&BUPHB3BN}'{ffg{\&B=.8"pD8"pDA#G#G8"8"Re:%KCZ
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 8e cc 72 f4 c9 08 4b 26 ae 5f fa 89 f7 ae ff 26 23 e1 fd cb 71 64 94 a3 17 2f b7 64 63 d8 13 15 1e bb be 24 f1 cd 3d 4e e1 c8 1c 47 b1 25 96 52 8c 2e 3e ee a1 e7 63 df b7 79 eb 72 1c 19 e3 a8 61 96 a5 1a 59 13 ff e7 94 5b 5f bd 62 f7 c6 3e 75 38 32 c4 51 d3 3d 96 8e c8 1a 5b fc 95 53 57 7d d1 d7 f6 6d 6f e0 c8 0c 47 b1 39 96 ae c8 18 b5 f2 d3 64 3d f5 e5 60 fb f7 dc 87 23 33 1c ad b0 b4 c6 e0 47 df ac b1 bb c4 99 97 64 fb de 4d 38 32 c1 d1 8e 4c 4b 77 74 19 5b b8 f5 48 7c ba 65 5a 46 d2 ad 3f c3 51 70 4f f7 84 f0 a0 4f 4b 1c ed 65 05 13 7d c6 dd bb 6c c3 ff ee dc fb 97 1d eb e7 e7 3b 6d b8 51 57 d2 52 5d 41 50 bf 87 d3 c0 d1 6d 56 67 47 21 8e a2 ef e8 c5 4e 67 64 cd c2 51 e4 1d 55 e7 75 be a3 3b 70 14 79 47 2b 3a 9f 91 35 16 47 51 77 74 aa 57 0a 38 fa 1e Data Ascii: rK&_&#qd/dc$=NG%R.>cyraY[_b>u82Q=[SW}moG9d=`#3GdM82LKwt[H\|eZF?QpOOKe}l;mQWR]APmVgG!NgdQUu;pyG+:5GQwtW8
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 0a cf 51 a7 e5 2f 25 3f 2b 70 74 21 2a ae b4 87 31 6c 56 97 c1 cf 9f 6d db 0c 47 38 72 cc 86 8c 4c ba 02 f1 96 f6 57 b3 71 84 23 a7 58 90 c4 c5 35 07 e3 b7 53 70 f4 18 8e 8c 77 f4 41 b2 54 c7 7c a1 c9 d1 b6 2e bd 4a 71 64 b8 a3 ba a4 6b 1d ff 41 93 a3 e2 4c cb ea fa 2a 8e cc 76 54 94 74 5e 90 2a 2d 8e 62 85 2d 13 67 2d c5 91 c9 8e f6 77 f1 bc f2 87 94 a3 ba bb 2f fe 79 61 13 8e 8c 75 14 1b 9d 94 c5 62 1d 8e 2a db 95 3f a3 0e 47 a6 3a da 94 9c c5 26 0d 8e ca e3 9e ca 1d 5d 85 23 33 1d d5 e7 27 67 71 48 dd d1 9e be 1d 66 cc fe 07 8e 34 a4 6c fc f4 89 fa de 7b d9 bf 75 c9 55 74 ad 57 76 b4 2d 61 85 a4 ab f6 85 e4 48 6b af ab 1f bd 86 3b 6a 74 58 11 f2 7b 42 d5 51 b1 cd 85 a9 6e 6f e1 c8 3c 47 af 38 a8 98 a5 e8 a8 d1 fe 32 79 d7 0d 38 32 ce d1 28 07 15 8f ab Data Ascii: Q/%?+pt!1lVmG8rLWq#X5SpwAT\|.JqdkALvTt^-b-g-w/yaub?G:&]#3'gqHf4l{uUtWv-aHk;jtX{BQno<G82y82(
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 3c 98 99 58 ea 0f 05 8e 22 ef e8 ff 2c 5f 31 f5 53 05 47 e7 56 f5 b0 2b 73 2d 8e a2 ef 48 dc ee 0f 52 e6 ec e3 92 8e ea 4b be 65 bf 6a cd 19 1c 19 e0 e8 50 b6 3f 48 56 ee bf 1f 93 70 54 f5 78 b2 75 28 fe 4d e0 c8 00 47 62 9e e5 37 ba dc 55 ea af 8a f3 79 d7 26 5d 41 3b b3 1c 47 46 38 aa ea 6b f9 8f 1b 9f f6 3c 6f e8 e9 8d 33 9d 2e 9b df 2d 70 64 84 23 f1 92 25 15 43 8b 3e 72 bd 9a d4 b0 bf 78 52 17 e7 f3 ad 83 38 32 c4 51 ec 56 4b 32 7a 4c 28 fc 43 d2 87 44 8e 6e 5e 7c 4b ae 6b 11 bf 10 38 32 c4 91 38 da d3 52 88 3e 23 7f b6 68 cd b6 9d 65 7f ad 38 76 aa aa e2 f0 de 0f 77 be bc b2 e0 f6 1b bc dd b4 9b fd 19 8e 94 f6 48 bd 23 24 13 44 76 f1 b2 d5 59 31 5f e8 74 a4 3e 16 38 52 7a db ac 4e 62 d4 b3 12 47 26 39 aa 19 da 39 8e 9e 17 38 32 c9 91 38 dc b3 33 18 Data Ascii: <X",_1SGV+s-HRKejP?HVpTxu(MGb7Uy&]A;GF8k<o3.-pd#%C>rxR82QVK2zL(CDn^\|Kk828R>#he8vwH#$DvY1_t>8RzNbG&998283
2023-12-05 18:14:09 UTC	227	IN	Data Raw: 48 85 dc 96 fa 81 11 c2 31 a2 b5 fb 70 84 23 1c e1 08 47 38 c2 11 8e 70 84 23 1c e1 08 47 38 c2 11 8e 70 84 23 1c e1 08 47 38 32 ce 91 8f 28 50 ef 34 3f 23 1b 54 4f 49 aa 0d 6a bc 53 01 3b 8e 70 84 23 1c e1 08 47 38 c2 11 8e 70 84 23 1c e1 08 47 38 c2 11 8e 70 84 23 1c a5 aa a3 a0 d6 cb c6 51 7a 39 0a 2a e3 a5 9e 80 93 cc 4c 49 56 1c 42 d3 83 2a 2c a8 da 70 84 23 1c e1 08 47 38 c2 11 8e 70 84 23 1c e1 08 47 38 c2 11 8e 70 84 23 1c e1 08 47 38 32 c3 11 41 f8 0a 1c 11 38 22 70 44 e0 88 20 70 44 e0 88 c0 11 81 23 82 c0 11 81 23 02 47 04 8e 08 02 47 04 8e 08 1c 11 38 22 08 1c 11 38 22 70 44 10 38 22 70 44 a4 4e fc 3f 64 a6 33 cf 4c a7 a6 48 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: H1p#G8p#G8p#G82(P4?#TOIjS;p#G8p#G8p#Qz9LIVB,p#G8p#G8p#G82A8"pD pD##GG8"8"pD8"pDN?d3LHIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50619	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:08 UTC	2190	OUT	GET /vi-assets/static-assets/corenews_app-fd6a5ed5307a89935254771e533c46b1.png HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:09 UTC	1321	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 33 35 35 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 61 72 46 35 6e 77 69 4c 47 45 65 65 74 69 71 37 65 66 76 68 6a 52 73 46 70 76 61 57 6b 56 6d 35 2d 75 47 73 73 62 45 49 4d 6b 31 34 71 77 42 57 6f 39 73 6d 38 77 61 72 36 76 5f 4d 59 6a 65 38 62 45 36 36 62 4a 79 43 34 4f 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 36 39 39 38 38 34 37 30 38 32 30 33 37 38 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 443553X-GUploader-UploadID: ABPtcPrarF5nwiLGEeetiq7efvhjRsFpvaWkVm5-uGssbEIMk14qwBWo9sm8war6v_MYje8bE66bJyC4Owx-goog-generation: 1699884708203786x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:14:09 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 12 00 00 04 6b 08 06 00 00 00 66 19 3c 0e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 06 c4 36 49 44 41 54 78 01 ec bd 07 a0 65 55 75 ff bf d6 9b 06 4c 05 84 91 36 28 88 0d c4 1a 95 61 d0 18 8d fe 04 93 98 c4 08 9a c4 92 d8 50 13 a3 80 35 9a ff cf d8 8d b1 97 98 5f 62 57 34 2a a8 11 ec 0d b0 83 15 05 45 81 19 7a 9f 61 60 06 a6 ec ff 5d e7 9c b5 f7 5a 7b ef 73 ef 7d 33 f3 de 0c ef 7d 3f 33 f7 dd 53 76 59 bb 9c bd ef 59 6b 17 be e9 a6 9b 02 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 98 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 1e 60 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 2f Data Ascii: PNGIHDRkf<pHYssRGBgAMAa6IDATxeUuL6(aP5_bW4*Eza`]Z{s}3}?3SvYYkT `H@/
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 00 e8 05 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 02 43 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7a 81 21 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd c0 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 5e 60 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 2f 30 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 17 18 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 0b 0c 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 05 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 02 43 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7a 81 21 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bd c0 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 5e 60 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 2f 30 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 17 18 12 Data Ascii: Cz!^`H@/0$Cz!^`H@/0$
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: b4 93 dc cb eb 89 7c 2f 5a b4 a8 31 28 2c 5e bc b8 f9 60 e6 02 00 00 00 30 73 81 21 01 00 00 00 98 25 ac 5f bf 3e 1a 0f e4 63 95 0a a2 0c 90 19 04 ab 57 af 6e 0c 05 62 3c 90 63 9d 49 a0 8a 78 3d ce 8d 02 f6 9a bd 67 fd e9 b7 3d ae 7d d7 8e 6b 8a c5 dc dd 30 6a fe c6 51 60 8e ab bc 1c d7 5f 1e 4f 5f b8 b5 30 fa 14 66 b9 1c 7a be a3 94 9e 53 a1 28 1d 57 91 58 f3 a7 ee fa 14 9c e3 28 de 47 c9 35 ca d8 30 4a a9 3e aa 7e 6d 0b a3 64 ea 4b c3 28 19 c6 49 f3 b6 2a 90 b7 35 9c be f4 0e cb 1b 61 b2 8a 73 3c ff a3 99 89 cf bf 28 c8 6b 86 84 bc ae ea 35 c1 1a 12 c6 7d fe ed fd 5c 06 1b 47 ee ae ef 5a 6e 04 18 f6 ad c7 f9 a7 ef fa a8 8f 18 28 d4 b8 20 9f 83 0e 3a a8 31 32 e8 2c 06 4d 8f 7c c4 98 20 b3 15 c4 00 21 c7 00 00 00 00 98 39 c0 90 00 00 00 00 cc 60 c4 60 20 Data Ascii: \|/Z1(,^`0s!%_>cWnb<cIx=g=}k0jQ`_O_0fzS(WX(G50J>~mdK(I*5as<(k5}\GZn( :12,M\| !9``
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 96 2d 5b 46 00 00 00 00 d8 f9 c0 90 00 00 00 00 ec a2 88 c2 5f 8c 06 6b d7 ae 6d ce 45 f1 7f e6 99 67 46 03 82 1a 0c f4 93 2f 65 a4 2f f1 f2 92 2e cb 15 89 f1 60 d0 ef c7 19 0d 00 00 00 00 00 3b 1a 5d 06 69 d1 a2 45 8d 51 41 7e 77 e8 ec 84 da 72 47 e2 5e dc a9 91 e1 c8 23 8f 6c 66 28 c8 a6 cc d8 3f 01 00 00 00 d8 75 80 21 01 00 00 00 d8 05 91 7d 10 74 19 23 31 28 9c 7b ee b9 74 f6 d9 67 3b e3 81 5c d7 73 bb 37 82 5d af 58 8c 0f 62 3c c0 cc 03 00 00 00 00 4c 37 62 18 b8 d3 9d ee e4 8c 00 76 86 82 1a 12 ec 47 af ad 5a b5 8a 1e f8 c0 07 36 4b 27 c9 f9 be fb ee 4b cb 97 2f 27 00 00 00 00 ec 1c 60 48 00 00 00 00 76 21 c4 38 20 33 0e 64 39 23 31 04 c8 8c 84 33 ce 38 83 ae bf fe fa 68 34 10 37 76 06 82 9d 85 20 2f e5 72 2e fe e5 83 d9 07 00 00 00 00 d8 15 58 ba Data Ascii: -[F_kmEgF/e/.`;]iEQA~wrG^#lf(?u!}t#1({tg;\s7]Xb<L7bvGZ6K'K/'`Hv!8 3d9#138h47v /r.X
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 2c 8c 09 00 00 00 c0 76 02 43 02 00 00 00 b0 03 b1 33 11 ce 3c f3 4c 67 44 b0 cb 19 e9 74 7c b9 26 9b 31 03 00 00 00 00 80 f1 91 df 53 97 5d 76 19 ed b3 cf 3e b4 c7 1e 7b c4 01 1a 6a 48 10 60 4c 00 00 00 00 76 1c 30 24 00 00 00 00 3b 88 da 72 46 ba 1f 82 dd 58 59 66 1e 4c 4c 4c 34 7b 21 5c 7b ed b5 04 00 00 00 00 00 b6 0d f9 2d b5 f7 de 7b d3 a2 45 8b 8a 7d 13 14 18 13 00 00 00 80 ed 07 86 04 00 00 00 60 07 20 9b ff d9 8d 95 75 26 82 35 20 e8 a6 ca 73 e6 cc 81 11 01 00 00 00 00 60 07 71 fd f5 d7 37 bf c1 16 2f 5e ec 96 8e b4 a8 31 41 f7 4c 98 3f 7f 7e b3 69 33 00 00 00 00 c6 03 86 04 00 00 00 60 3b d9 b0 61 03 5d 7a e9 a5 cd 0b ec 39 e7 9c 43 3f f8 c1 0f 7a 37 56 16 23 c2 4d 37 dd d4 bc f0 82 c9 b3 64 c9 92 c1 67 31 cd 34 d6 ad bb 79 f0 59 47 00 00 00 c6 Data Ascii: ,vC3<LgDt\|&1S]v>{jH`Lv0$;rFXYfLLL4{!\{-{E}` u&5 s`q7/^1AL?~i3`;a]z9C?z7V#M7dg14yYG
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: fe f0 87 e9 b2 cb 2e 6b 8c 07 b2 e9 b2 ce 46 90 8f 20 c6 06 71 bf 2b a3 c6 83 17 9e f4 82 66 c6 41 b3 67 81 a1 1d 1d 19 fc 15 35 16 c4 a1 93 ce b5 f1 a7 7f 8c f2 c3 0e c2 0c 7a 5a f9 39 12 7c 68 35 f5 49 a1 b8 cf 46 78 56 95 fb 96 6c d2 84 8e e8 ac fb d7 e1 ad b5 60 38 2a b1 38 e4 06 0b 8a c6 83 52 29 a4 ce 52 4c 97 5d 76 39 ad 3a ea 8f 08 00 b0 73 11 25 e3 fc f9 f3 69 62 62 22 5e d3 0d 5c 43 c0 2b d4 ce 42 96 35 92 65 68 94 d8 c3 0c d1 b1 3b ac bb aa 9f d1 01 d5 cc d8 c9 94 30 cc 5f 8f ac 51 bf cf 35 3b 75 26 57 c5 2a 61 0d 28 b5 8e 86 75 a6 84 77 e7 fa 47 8e be a3 41 a2 94 3c 7d 7d e9 8c 33 9b b2 f8 d4 a9 9f a4 5d 1d 99 75 b0 fb ee bb 37 cf b2 cc 52 90 e7 5a 96 37 92 6b b2 c4 d1 a1 87 1e 4a c7 1f 7f 7c e3 56 8e 65 b3 66 00 00 00 00 94 c0 90 00 00 00 00 Data Ascii: .kF q+fAg5zZ9\|h5IFxVl`88R)RL]v9:s%ibb"^\C+B5eh;0_Q5;u&Wa(uwGA<}}3]u7RZ7kJ\|Vef
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 06 33 15 86 f3 54 b4 3d 6e b9 27 43 a0 e3 9f 74 02 fd 68 60 50 38 f9 c5 a7 d0 92 a5 4b 69 57 41 7e b7 c9 be 55 f2 dc cb ef 36 f9 d8 99 a5 37 df 7c 73 f3 1b 4f 90 19 0c 72 0e 00 00 00 80 04 0c 09 00 00 00 c0 18 5c 70 c1 05 cd f7 f7 be f7 bd 66 ca bb 9d 85 20 1f 79 19 15 e5 92 bc 74 ca ba d9 bb 0a 47 ad 3c aa 31 20 bc e8 e4 17 d2 d2 25 7e 13 65 9d 72 30 4c ed 15 d5 29 49 7b 4e 4e 19 de 1d d8 71 91 6d a0 21 33 1a 68 5c 5c 8e e4 e7 6c e6 00 99 fb cc 26 0e f2 f2 32 d5 74 28 e9 c7 8d 8d af 26 03 93 1b 65 a9 62 3b d1 3a 47 6c 8d 06 b9 a6 85 b3 f8 d4 1f b9 1c 89 b3 1d d2 ec 0d 76 1a 1f bd c7 61 58 89 00 00 76 14 f2 4c ca a6 aa 76 19 23 6b 2c a8 1d e7 ee ec 7d 31 46 2c 5a b4 88 c0 74 10 62 db 9c 8c 09 c1 b4 d9 e4 da 57 d2 f3 d8 7c 07 a7 48 4f 4e f2 be a2 0b 99 6d Data Ascii: 3T=n'Cth`P8KiWA~U67\|sOr\pf ytG<1 %~er0L)I{NNqm!3h\\l&2t(&eb;:GlvaXvLv#k,}1F,ZtbW\|HONm
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: c0 07 3e b0 19 50 02 43 02 00 00 00 00 43 02 00 00 00 d0 8b 6c c8 27 8a 2b 99 de fe a3 1f fd a8 ba a4 91 bc d4 cb fd 9d ad 30 92 51 75 ff fd a1 ff a2 23 0e 3f bc 39 8f 7a fc 08 fb 31 f5 51 11 90 ee 73 37 92 31 ba 0b de 98 90 46 34 76 0a 7d 8e b6 84 42 31 11 67 1b 58 c5 38 3b 2b 82 d1 9f 9b 91 8e 7e 9e 04 59 51 75 de 41 50 4d 7c a8 8d bc ec a4 63 7b 66 75 4d c6 00 42 c1 88 56 57 da b4 0e 38 b9 73 f7 73 0d 54 3e fa 35 83 c9 19 3c fa 0c 14 23 d4 44 60 16 20 f5 71 e9 d2 a5 cd c8 58 69 6f ec ac 04 5b 57 73 45 b8 35 18 4c 46 a1 3f ca 20 90 87 6b e5 b4 6e 27 1b 67 2d 8c 3c 3c 3b da 5f 14 79 f3 e7 cf a7 b5 6b d7 d2 f6 20 f9 29 4b 10 d5 64 6a 8c 08 9b e6 d3 dc dd ef 36 88 eb 20 9a b3 69 77 9a 17 e6 d0 c4 ed 13 34 6f c1 92 81 5c 7b 53 d8 eb ae 74 0b 1f 48 b7 de 78 Data Ascii: >PCCl'+0Qu#?9z1Qs71F4v}B1gX8;+~YQuAPM\|c{fuMBVW8ssT>5<#D` qXio[WsE5LF? kn'g-<<;_yk )Kdj6 iw4o\{StHx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50622	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:08 UTC	2229	OUT	GET /vi-assets/static-assets/datasubjectrequest-8baae275f04720ea9c57.js?_sw-precache=5db7becbe75e5353c5c0d30f2e92f79e HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800943843
2023-12-05 18:14:09 UTC	1336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 38 33 37 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 4e 77 68 77 74 4d 4b 77 72 32 5f 47 38 4b 39 35 73 63 46 49 42 6e 65 39 71 6e 67 6f 30 78 58 46 51 67 57 6e 6e 41 44 62 50 48 6c 4d 55 39 46 58 61 39 38 76 4c 4e 63 43 4f 36 30 41 4a 30 72 6f 65 63 52 72 6e 67 36 7a 59 62 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 30 33 36 39 38 36 35 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 38379X-GUploader-UploadID: ABPtcPoNwhwtMKwr2_G8K95scFIBne9qngo0xXFQgWnnADbPHlMU9FXa98vLNcCO60AJ0roecRrng6zYbgx-goog-generation: 1701370603698651x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:14:09 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 5d 2c 7b 22 34 6b 4e 6a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 5b 7b 22 6e 61 6d 65 22 3a 22 41 6c 61 62 61 6d 61 22 2c 22 6b 65 79 22 3a 22 41 4c 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 6c 61 73 6b 61 22 2c 22 6b 65 79 22 3a 22 41 4b 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 72 69 7a 6f 6e 61 22 2c 22 6b 65 79 22 3a 22 41 5a 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 72 6b 61 6e 73 61 73 22 2c 22 6b 65 79 22 3a 22 41 52 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 22 6b 65 79 22 3a 22 43 41 22 2c 22 63 63 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[68],{"4kNj":function(e){e.exports=JSON.parse('[{"name":"Alabama","key":"AL"},{"name":"Alaska","key":"AK"},{"name":"Arizona","key":"AZ"},{"name":"Arkansas","key":"AR"},{"name":"California","key":"CA","cc
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 3a 22 50 41 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 50 75 65 72 74 6f 20 52 69 63 6f 22 2c 22 6b 65 79 22 3a 22 50 52 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 52 68 6f 64 65 20 49 73 6c 61 6e 64 22 2c 22 6b 65 79 22 3a 22 52 49 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 6f 75 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 6b 65 79 22 3a 22 53 43 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 6f 75 74 68 20 44 61 6b 6f 74 61 22 2c 22 6b 65 79 22 3a 22 53 44 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 6e 6e 65 73 73 65 65 22 2c 22 6b 65 79 22 3a 22 54 4e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 6b 65 79 22 3a 22 54 58 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 55 74 61 68 22 2c 22 6b 65 79 22 3a 22 55 54 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 56 65 72 6d 6f 6e 74 22 2c 22 6b Data Ascii: :"PA"},{"name":"Puerto Rico","key":"PR"},{"name":"Rhode Island","key":"RI"},{"name":"South Carolina","key":"SC"},{"name":"South Dakota","key":"SD"},{"name":"Tennessee","key":"TN"},{"name":"Texas","key":"TX"},{"name":"Utah","key":"UT"},{"name":"Vermont","k
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 22 29 2c 6e 28 22 58 53 64 70 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 20 72 28 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 73 2e 62 7d 2c 76 6f 69 64 20 30 2c 74 7c 7c 28 74 3d 72 28 29 28 22 70 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 65 72 72 6f 72 20 77 69 74 68 20 79 6f 75 72 20 73 75 62 6d 69 73 73 69 6f 6e 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 29 29 2c 69 7c 7c 28 69 3d 72 28 29 28 22 70 22 2c 7b 7d 2c 76 6f 69 64 20 30 2c 22 49 66 20 79 6f 75 20 61 72 65 20 72 65 70 65 61 74 65 64 6c 79 20 65 78 70 65 72 69 65 6e 63 69 6e 67 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 74 68 69 73 20 66 6f 72 6d 2c 20 70 6c 65 61 73 65 20 63 61 6c 6c 20 75 73 20 61 Data Ascii: "),n("XSdp"));function l(){return r()("div",{className:s.b},void 0,t\|\|(t=r()("p",{},void 0,"There was an error with your submission. Please try again.")),i\|\|(i=r()("p",{},void 0,"If you are repeatedly experiencing problems with this form, please call us a
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 5b 73 72 63 3d 22 27 2e 63 6f 6e 63 61 74 28 65 2c 27 22 5d 27 29 29 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 2e 64 61 74 61 73 65 74 2e 6c 6f 61 64 65 64 3f 6f 2e 64 61 74 61 73 65 74 2e 65 72 72 6f 72 3f 74 28 29 3a 6e 28 6f 29 3a 69 28 6f 29 3b 69 66 28 61 2e 72 65 61 64 79 43 6f 64 65 26 26 77 69 6e 64 6f 77 5b 61 2e 72 65 61 64 79 43 6f 64 65 5d 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b 61 2e 72 65 61 64 79 43 6f 64 65 5d 7c 7c 21 31 21 3d 3d 77 69 6e 64 6f 77 5b 61 2e 72 65 61 64 79 43 6f 64 65 5d 28 29 29 29 72 65 74 75 72 6e 20 6e 28 29 3b 76 61 72 20 73 3d 72 28 7b 61 73 79 6e 63 50 72 6f 70 3a 21 30 2c 64 65 66 65 72 50 72 6f 70 3a 21 30 7d 2c 61 29 2c 6c 3d 73 2e 61 73 79 6e 63 50 72 6f 70 2c 63 3d Data Ascii: [src="'.concat(e,'"]'));if(o)return o.dataset.loaded?o.dataset.error?t():n(o):i(o);if(a.readyCode&&window[a.readyCode]&&("function"!=typeof window[a.readyCode]\|\|!1!==window[a.readyCode]()))return n();var s=r({asyncProp:!0,deferProp:!0},a),l=s.asyncProp,c=
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 2c 72 65 66 3a 61 7d 2c 75 29 2c 70 3d 28 68 2e 69 73 4c 69 6e 6b 2c 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 68 2c 64 29 29 2c 79 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 75 29 2e 69 6e 63 6c 75 64 65 73 28 22 68 72 65 66 22 29 3b 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 79 3f 22 61 22 3a 22 62 75 74 74 6f 6e 22 2c 70 29 7d 29 29 3b 75 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 68 65 6d 65 3a 22 64 65 66 61 75 6c 74 22 2c 63 68 69 6c 64 72 65 6e 3a 6e 75 6c 6c 7d 3b 76 61 72 20 68 3d 75 3b 61 2e 64 65 66 61 75 6c 74 3d 68 7d 2c 52 34 72 41 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6e Data Ascii: ,ref:a},u),p=(h.isLink,(0,o.default)(h,d)),y=Object.keys(u).includes("href");return r.default.createElement(y?"a":"button",p)}));u.defaultProps={className:void 0,theme:"default",children:null};var h=u;a.default=h},R4rA:function(e,a,n){"use strict";var t=n
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 70 72 6f 76 69 64 65 20 74 68 65 20 67 6f 6f 64 73 20 49 20 68 61 76 65 20 72 65 71 75 65 73 74 65 64 2e 20 49 20 75 6e 64 65 72 73 74 61 6e 64 20 74 68 61 74 20 69 66 20 49 20 6d 61 6b 65 20 74 68 69 73 20 72 65 71 75 65 73 74 2c 20 61 6e 64 20 69 66 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 43 61 6c 69 66 6f 72 6e 69 61 20 6c 61 77 20 74 6f 20 68 6f 6e 6f 72 20 6d 79 20 72 65 71 75 65 73 74 2c 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 77 69 6c 6c 20 64 65 6c 65 74 65 20 6d 79 20 73 65 6e 73 69 74 69 76 65 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 69 66 20 69 74 20 68 61 73 20 61 6e 79 2e 20 49 20 61 6c 73 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 74 Data Ascii: provide the goods I have requested. I understand that if I make this request, and if The New York Times is required by California law to honor my request, The New York Times will delete my sensitive personal information, if it has any. I also understand t
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 6e 61 6d 65 3a 22 61 63 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 65 2e 6e 61 6d 65 2c 6f 6e 43 68 61 6e 67 65 3a 6e 7d 29 2c 69 28 29 28 22 6c 61 62 65 6c 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 62 2e 69 2c 68 74 6d 6c 46 6f 72 3a 65 2e 6e 61 6d 65 7d 2c 76 6f 69 64 20 30 2c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3f 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 69 28 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 62 2e 64 7d 2c 76 6f 69 64 20 30 2c 65 2e 64 65 73 63 72 69 70 74 69 6f 6e 29 29 29 7d 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 61 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6e 3d 65 2e 68 61 6e 64 6c 65 43 68 61 6e 67 65 2c 74 3d 65 2e 74 61 72 67 65 74 3b 72 65 74 75 72 6e 20 61 26 26 41 72 72 61 Data Ascii: name:"action",value:e.name,onChange:n}),i()("label",{className:b.i,htmlFor:e.name},void 0,e.displayName?e.displayName:e.name,i()("div",{className:b.d},void 0,e.description)))})):null}function B(e){var a=e.options,n=e.handleChange,t=e.target;return a&&Arra
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 72 6e 20 75 28 29 28 74 68 69 73 2c 6e 29 7d 7d 76 61 72 20 6b 65 3d 71 5b 30 5d 2e 69 74 65 6d 73 5b 30 5d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 28 29 28 6e 2c 65 29 3b 76 61 72 20 61 3d 67 65 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 65 3b 72 28 29 28 74 68 69 73 2c 6e 29 3b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 6f 3d 30 3b 6f 3c 74 3b 6f 2b 2b 29 69 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 72 65 74 75 72 6e 28 65 3d 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 69 29 29 29 2e 73 74 61 74 65 3d 7b 73 68 6f 77 6e 52 65 71 75 69 72 65 64 46 69 65 6c 64 73 3a 6b 65 2e 72 65 71 75 69 72 Data Ascii: rn u()(this,n)}}var ke=q[0].items[0],be=function(e){d()(n,e);var a=ge(n);function n(){var e;r()(this,n);for(var t=arguments.length,i=new Array(t),o=0;o<t;o++)i[o]=arguments[o];return(e=a.call.apply(a,[this].concat(i))).state={shownRequiredFields:ke.requir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50623	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:09 UTC	2241	OUT	GET /vi-assets/static-assets/datasubjectrequestverification-5fff936f049d2d4ac598.js?_sw-precache=818f073e6c02489b41c4c23dedad1461 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:09 UTC	1346	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 34 34 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 35 66 72 63 54 55 67 49 65 77 4f 63 6f 42 6b 62 42 71 45 75 68 52 46 37 48 38 31 45 73 78 73 7a 4d 6b 6c 48 41 37 64 6c 78 55 57 64 53 78 63 55 50 53 6d 61 39 63 67 61 46 33 42 47 4b 70 70 52 4d 6e 66 61 43 50 70 32 42 51 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 37 38 37 37 34 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4441X-GUploader-UploadID: ABPtcPq5frcTUgIewOcoBkbBqEuhRF7H81EsxszMklHA7dlxUWdSxcUPSma9cgaF3BGKppRMnfaCPp2BQwx-goog-generation: 1701369734787740x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:09 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 5d 2c 7b 45 69 79 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 74 29 2c 69 2e 64 28 74 2c 22 44 73 72 56 65 72 69 66 69 63 61 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 29 29 3b 76 61 72 20 6f 2c 6e 2c 72 2c 61 2c 63 2c 6c 2c 73 2c 70 2c 64 3d 69 28 22 67 63 52 2f 22 29 2c 75 3d 69 2e 6e 28 64 29 2c 66 3d 69 28 22 71 31 74 49 22 29 2c 6d 3d 69 2e 6e 28 66 29 2c 68 3d 69 28 22 42 30 45 6b 22 29 2c 78 3d 69 28 22 6c 5a 2f 4d 22 29 2c 67 3d 69 28 22 76 66 74 6a 22 29 2c 62 3d 69 28 22 58 53 64 70 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[69],{Eiy8:function(e,t,i){"use strict";i.r(t),i.d(t,"DsrVerification",(function(){return v}));var o,n,r,a,c,l,s,p,d=i("gcR/"),u=i.n(d),f=i("q1tI"),m=i.n(f),h=i("B0Ek"),x=i("lZ/M"),g=i("vftj"),b=i("XSdp"
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 74 22 7d 2c 76 6f 69 64 20 30 2c 22 44 61 74 61 20 53 75 62 6a 65 63 74 20 52 65 71 75 65 73 74 20 66 6f 72 6d 22 29 2c 22 2e 22 29 29 7d 2c 65 72 72 6f 72 3a 77 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 76 61 72 20 74 2c 69 3d 65 2e 6d 61 74 63 68 2c 6f 3d 79 5b 6e 75 6c 6c 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 69 2e 70 61 72 61 6d 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 72 65 73 75 6c 74 5d 7c 7c 77 3b 72 65 74 75 72 6e 20 6d 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6d 2e 61 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 6c 7c 7c 28 6c 3d 75 28 29 28 68 2e 61 2c 7b 7d 29 29 2c 73 7c 7c 28 73 3d 75 28 29 28 67 2e 48 65 6c 6d 65 74 2c 7b 7d 2c 76 6f 69 64 20 30 2c 75 28 29 28 22 74 69 74 6c 65 22 2c 7b Data Ascii: t"},void 0,"Data Subject Request form"),"."))},error:w};function v(e){var t,i=e.match,o=y[null==i\|\|null===(t=i.params)\|\|void 0===t?void 0:t.result]\|\|w;return m.a.createElement(m.a.Fragment,null,l\|\|(l=u()(h.a,{})),s\|\|(s=u()(g.Helmet,{},void 0,u()("title",{
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 61 2c 73 65 6c 65 63 74 7b 62 6f 72 64 65 72 3a 30 2e 35 70 78 20 73 6f 6c 69 64 20 22 2c 72 2e 61 2e 63 6f 6c 6f 72 2e 67 72 61 79 37 35 2c 22 3b 70 61 64 64 69 6e 67 3a 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 2c 72 2e 61 2e 66 6f 6e 74 2e 66 72 61 6e 6b 6c 69 6e 42 61 73 65 2c 22 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 31 70 78 20 31 70 78 20 31 70 78 20 30 20 72 67 62 61 28 35 30 2c 35 30 2c 35 30 2c 30 2e 30 37 29 3b 26 2e 73 68 6f 72 74 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 33 70 78 29 3b 26 3a 66 Data Ascii: a,select{border:0.5px solid ",r.a.color.gray75,";padding:6px;vertical-align:middle;font-size:15px;line-height:18px;font-family:",r.a.font.franklinBase,";border-radius:2px;box-shadow:inset 1px 1px 1px 0 rgba(50,50,50,0.07);&.short{width:calc(50% - 3px);&:f
2023-12-05 18:14:09 UTC	304	IN	Data Raw: 22 66 6f 6e 74 2d 77 65 69 67 68 74 3a 22 2c 72 2e 61 2e 66 6f 6e 74 2e 77 65 69 67 68 74 2e 62 6f 6c 64 2c 22 3b 26 3a 3a 61 66 74 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 61 6e 69 6d 61 74 69 6f 6e 3a 22 2c 4f 62 6a 65 63 74 28 6f 2e 6b 65 79 66 72 61 6d 65 73 29 28 22 66 72 6f 6d 7b 77 69 64 74 68 3a 30 3b 7d 74 6f 7b 77 69 64 74 68 3a 31 38 70 78 3b 7d 22 29 2c 22 20 73 74 65 70 73 28 34 2c 65 6e 64 29 20 31 30 30 30 6d 73 20 69 6e 66 69 6e 69 74 65 3b 63 6f 6e 74 65 6e 74 3a 27 2e 2e 2e 27 3b 7d 22 29 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 73 75 62 6a 65 Data Ascii: "font-weight:",r.a.font.weight.bold,";&::after{overflow:hidden;display:inline-block;vertical-align:bottom;animation:",Object(o.keyframes)("from{width:0;}to{width:18px;}")," steps(4,end) 1000ms infinite;content:'...';}")}}]);//# sourceMappingURL=datasubje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50624	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:09 UTC	2219	OUT	GET /vi-assets/static-assets/dealbook-04f5ba9ad464466ed702.js?_sw-precache=46fc9aebc6d97b21a4bd0cdf02a39503 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:09 UTC	1317	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 36 30 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 48 4d 57 37 31 2d 5a 50 4b 43 2d 41 41 70 59 44 6e 56 44 58 4c 70 74 47 4c 78 47 43 30 38 36 70 36 44 64 47 45 4f 44 32 4a 52 70 6a 56 64 47 68 72 7a 45 46 47 4d 41 49 65 33 4d 4a 57 79 6c 42 6c 70 68 73 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 30 33 36 39 32 36 34 32 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 65 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 8605X-GUploader-UploadID: ABPtcPqHMW71-ZPKC-AApYDnVDXLptGLxGC086p6DdGEOD2JRpjVdGhrzEFGMAIe3MJWylBlphsx-goog-generation: 1701370603692642x-goog-metageneration: 1x-goog-stored-content-encoding: ide
2023-12-05 18:14:09 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 5d 2c 7b 42 53 4b 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6c 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 63 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6c 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 6c 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 74 3d 61 28 63 28 22 71 31 74 49 22 29 29 2c 68 3d 28 61 28 63 28 22 31 37 78 39 22 29 29 2c 63 28 22 4a 71 70 39 22 29 29 2c 64 3d 28 63 28 22 2f 6a 41 30 22 29 2c 28 30 2c 68 2e 63 73 73 29 28 22 66 69 6c 6c 3a 63 75 72 72 65 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[70],{BSKy:function(e,l,c){"use strict";var a=c("TqRt");Object.defineProperty(l,"__esModule",{value:!0}),l.default=void 0;var t=a(c("q1tI")),h=(a(c("17x9")),c("Jqp9")),d=(c("/jA0"),(0,h.css)("fill:curren
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 31 35 20 31 32 2e 32 39 22 2c 6d 61 73 6b 3a 22 75 72 6c 28 23 62 29 22 7d 29 29 2c 74 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 34 33 2e 38 38 39 20 31 39 2e 33 31 37 63 30 2d 33 2e 31 30 38 2d 31 2e 32 32 35 2d 35 2e 33 36 38 2d 33 2e 39 35 36 2d 35 2e 33 36 38 2d 33 2e 33 34 33 20 30 2d 34 2e 35 36 37 20 33 2e 30 31 34 2d 34 2e 35 36 37 20 35 2e 33 36 38 68 38 2e 35 32 33 7a 6d 36 2e 38 32 37 20 34 2e 30 30 33 48 33 35 2e 32 32 34 63 30 20 34 2e 31 39 20 32 2e 34 39 36 20 36 2e 34 39 38 20 35 2e 34 31 36 20 36 2e 34 39 38 20 32 2e 38 32 35 20 30 20 34 2e 35 36 37 2d 32 2e 30 37 32 20 35 2e 33 36 38 2d 33 2e 35 37 39 6c 34 2e 35 32 20 32 2e 33 30 37 63 2d 31 2e 36 39 35 20 32 2e 36 38 35 2d Data Ascii: 15 12.29",mask:"url(#b)"})),t.default.createElement("path",{d:"M43.889 19.317c0-3.108-1.225-5.368-3.956-5.368-3.343 0-4.567 3.014-4.567 5.368h8.523zm6.827 4.003H35.224c0 4.19 2.496 6.498 5.416 6.498 2.825 0 4.567-2.072 5.368-3.579l4.52 2.307c-1.695 2.685-
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 20 33 2e 38 31 34 20 36 2e 35 34 34 20 30 20 34 2e 30 39 37 2d 32 2e 34 39 36 20 36 2e 38 32 38 2d 36 2e 32 31 36 20 37 2e 38 31 37 20 32 2e 38 32 35 2e 34 37 31 20 36 2e 39 37 20 32 2e 33 30 38 20 36 2e 39 37 20 38 2e 31 34 37 20 30 20 32 2e 37 33 31 2d 31 2e 32 32 35 20 35 2e 31 38 2d 33 2e 31 35 35 20 36 2e 36 34 4d 31 32 36 2e 39 35 37 20 31 34 2e 31 38 35 63 2d 33 2e 33 39 20 30 2d 34 2e 32 33 37 20 33 2e 32 34 39 2d 34 2e 32 33 37 20 37 2e 38 36 34 73 2e 38 34 37 20 37 2e 38 31 37 20 34 2e 32 33 37 20 37 2e 38 31 37 63 33 2e 33 34 34 20 30 20 34 2e 32 38 35 2d 33 2e 30 36 31 20 34 2e 32 38 35 2d 37 2e 38 31 37 20 30 2d 34 2e 36 36 32 2d 2e 38 2d 37 2e 38 36 34 2d 34 2e 32 38 35 2d 37 2e 38 36 34 6d 30 20 32 30 2e 34 33 37 63 2d 36 2e 36 33 39 20 30 Data Ascii: 3.814 6.544 0 4.097-2.496 6.828-6.216 7.817 2.825.471 6.97 2.308 6.97 8.147 0 2.731-1.225 5.18-3.155 6.64M126.957 14.185c-3.39 0-4.237 3.249-4.237 7.864s.847 7.817 4.237 7.817c3.344 0 4.285-3.061 4.285-7.817 0-4.662-.8-7.864-4.285-7.864m0 20.437c-6.639 0
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 35 37 20 32 2e 32 38 35 2d 34 2e 38 34 31 20 32 2e 32 38 35 2d 31 2e 38 35 20 30 2d 33 2e 31 30 31 2d 31 2e 30 30 38 2d 33 2e 35 33 36 2d 32 2e 30 39 35 61 36 2e 36 20 36 2e 36 20 30 20 30 20 31 2d 2e 34 39 2d 32 2e 35 38 34 56 32 30 2e 32 38 68 31 2e 35 35 76 39 2e 34 36 35 63 30 20 31 2e 38 37 37 2e 37 36 32 20 33 2e 30 37 34 20 32 2e 39 39 33 20 33 2e 30 37 34 20 31 2e 39 35 37 20 30 20 33 2e 34 35 34 2d 31 2e 33 36 20 34 2e 32 37 2d 32 2e 30 36 37 56 32 30 2e 32 37 39 68 31 2e 35 35 76 31 33 2e 38 31 37 7a 4d 32 35 34 2e 37 36 31 20 33 34 2e 33 31 33 63 2d 32 2e 30 39 34 20 30 2d 34 2e 31 30 36 2d 31 2e 30 30 36 2d 35 2e 32 32 32 2d 32 2e 39 39 32 6c 31 2e 33 33 33 2d 2e 39 37 39 63 2e 37 33 34 20 31 2e 32 35 32 20 31 2e 39 33 31 20 32 2e 35 35 36 20 Data Ascii: 57 2.285-4.841 2.285-1.85 0-3.101-1.008-3.536-2.095a6.6 6.6 0 0 1-.49-2.584V20.28h1.55v9.465c0 1.877.762 3.074 2.993 3.074 1.957 0 3.454-1.36 4.27-2.067V20.279h1.55v13.817zM254.761 34.313c-2.094 0-4.106-1.006-5.222-2.992l1.333-.979c.734 1.252 1.931 2.556
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 32 20 31 2e 39 33 31 20 32 2e 35 35 36 20 34 2e 31 33 34 20 32 2e 35 35 36 20 31 2e 34 37 20 30 20 33 2e 34 38 32 2d 2e 36 32 35 20 33 2e 34 38 32 2d 32 2e 34 34 38 20 30 2d 31 2e 32 32 33 2d 2e 37 38 39 2d 31 2e 38 32 2d 32 2e 30 39 35 2d 32 2e 32 30 31 2d 2e 36 35 32 2d 2e 31 39 2d 32 2e 30 34 2d 2e 34 36 32 2d 33 2e 30 31 39 2d 2e 37 36 32 2d 32 2e 34 34 37 2d 2e 37 36 31 2d 33 2e 31 38 32 2d 31 2e 39 38 36 2d 33 2e 31 38 32 2d 33 2e 36 31 37 20 30 2d 31 2e 31 31 36 2e 36 2d 32 2e 30 39 35 20 31 2e 34 34 32 2d 32 2e 37 32 61 35 2e 33 37 33 20 35 2e 33 37 33 20 30 20 30 20 31 20 33 2e 32 31 2d 31 2e 30 38 38 63 32 2e 30 31 32 20 30 20 33 2e 38 38 38 2e 37 36 31 20 34 2e 39 32 32 20 32 2e 37 34 36 6c 2d 31 2e 34 31 34 2e 39 32 35 63 2d 2e 34 39 2d 31 2e Data Ascii: 2 1.931 2.556 4.134 2.556 1.47 0 3.482-.625 3.482-2.448 0-1.223-.789-1.82-2.095-2.201-.652-.19-2.04-.462-3.019-.762-2.447-.761-3.182-1.986-3.182-3.617 0-1.116.6-2.095 1.442-2.72a5.373 5.373 0 0 1 3.21-1.088c2.012 0 3.888.761 4.922 2.746l-1.414.925c-.49-1.
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 35 2d 31 2e 38 35 2d 31 2e 39 35 38 2d 32 2e 39 36 35 2d 31 2e 39 35 38 2d 34 2e 34 38 38 20 30 2d 32 2e 32 35 38 20 31 2e 39 35 38 2d 33 2e 37 38 20 34 2e 31 33 34 2d 33 2e 37 38 20 32 2e 34 32 20 30 20 34 2e 31 38 38 20 31 2e 35 35 20 34 2e 31 38 38 20 33 2e 39 34 33 20 30 20 32 2e 30 34 2d 31 2e 32 37 38 20 33 2e 37 38 2d 33 2e 39 39 38 20 35 2e 30 33 32 6c 34 2e 33 37 39 20 36 2e 34 37 33 63 31 2e 33 33 33 2d 31 2e 37 39 36 20 31 2e 39 33 31 2d 34 2e 31 38 38 20 32 2e 32 33 2d 36 2e 37 37 32 6c 31 2e 37 36 38 2e 32 39 39 63 2d 2e 34 30 38 20 32 2e 36 31 2d 31 2e 33 30 35 20 35 2e 30 35 38 2d 33 2e 31 35 35 20 37 2e 34 38 2e 34 36 32 2e 37 36 20 31 2e 34 31 35 20 31 2e 37 36 38 20 32 2e 36 36 35 20 31 2e 37 36 38 2e 33 32 37 20 30 20 2e 35 39 39 20 30 Data Ascii: 5-1.85-1.958-2.965-1.958-4.488 0-2.258 1.958-3.78 4.134-3.78 2.42 0 4.188 1.55 4.188 3.943 0 2.04-1.278 3.78-3.998 5.032l4.379 6.473c1.333-1.796 1.931-4.188 2.23-6.772l1.768.299c-.408 2.61-1.305 5.058-3.155 7.48.462.76 1.415 1.768 2.665 1.768.327 0 .599 0
2023-12-05 18:14:09 UTC	331	IN	Data Raw: 33 2e 38 34 34 68 31 2e 36 36 6c 34 2e 32 31 35 20 31 31 2e 36 36 38 20 34 2e 30 35 32 2d 31 31 2e 36 36 38 68 31 2e 36 33 32 7a 22 2c 6d 61 73 6b 3a 22 75 72 6c 28 23 64 29 22 7d 29 29 29 7d 3b 6e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 44 65 61 6c 62 6f 6f 6b 22 2c 6e 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 73 69 7a 65 3a 22 73 74 61 6e 64 61 72 64 22 7d 3b 76 61 72 20 72 3d 6e 3b 6c 2e 64 65 66 61 75 6c 74 3d 72 7d 2c 6b 4d 6e 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6c 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 72 28 6c 29 3b 76 61 72 20 61 3d 63 28 22 42 53 4b 79 22 29 2c 74 3d 63 2e 6e 28 61 29 3b 63 2e 64 28 6c 2c 22 64 65 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: 3.844h1.66l4.215 11.668 4.052-11.668h1.632z",mask:"url(#d)"})))};n.displayName="Dealbook",n.defaultProps={className:void 0,size:"standard"};var r=n;l.default=r},kMnh:function(e,l,c){"use strict";c.r(l);var a=c("BSKy"),t=c.n(a);c.d(l,"default",(function(){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50625	52.54.49.121	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:09 UTC	2607	OUT	POST /track HTTP/1.1 Host: a.et.nytimes.com Connection: keep-alive Content-Length: 3800 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nytimes.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; sessionActive=true; sessionIndex=1\|1701800006028\|XbK7A_KO3s8XVA_FdXv5zD\|1701800006028; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; et-ppvid=https://www.nytimes.com/live/2023/12/05/world/israel-hamas-war-gaza-news=iXJ6FxtFrBe04OARGjkskMIq^https://www.nytimes.com/2023/12/05/world/middleeast/united-nations-war-gaza-israel.html=y4BaNoaK-J9dzZ8sn6p8pfb-^https://myaccount.nytimes.com/auth/iframe/enter-email=puQlnrCsX0GtDCJyKqR8Wgad^https://www.nytimes.com/2023/12/05/world/africa/nigeria-strike-civilians.html=z3DiZN4mOIhoKcvokH-eY6zy; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"
2023-12-05 18:14:09 UTC	3800	OUT	Data Raw: 5b 7b 22 63 6f 6e 74 65 78 74 5f 69 64 22 3a 22 73 77 53 79 4c 4f 69 6f 45 74 4e 33 6a 73 32 6e 46 4b 71 48 42 56 52 5f 22 2c 22 70 61 67 65 76 69 65 77 5f 69 64 22 3a 22 7a 33 44 69 5a 4e 34 6d 4f 49 68 6f 4b 63 76 6f 6b 48 2d 65 59 36 7a 79 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 47 76 46 79 71 45 66 39 6f 4d 49 6c 62 4d 6d 77 4b 68 6b 56 74 30 51 69 22 2c 22 63 6c 69 65 6e 74 5f 6c 69 62 22 3a 22 76 31 2e 33 2e 30 22 2c 22 73 6f 75 72 63 65 41 70 70 22 3a 22 6e 79 74 2d 76 69 22 2c 22 73 75 62 6a 65 63 74 22 3a 22 70 61 67 65 5f 75 70 64 61 74 65 22 2c 22 68 6f 77 22 3a 22 62 65 61 63 6f 6e 22 2c 22 63 6c 69 65 6e 74 5f 74 73 22 3a 31 37 30 31 38 30 30 30 34 32 39 39 30 2c 22 64 61 74 61 22 3a 7b 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 3a 7b 22 66 69 Data Ascii: [{"context_id":"swSyLOioEtN3js2nFKqHBVR_","pageview_id":"z3DiZN4mOIhoKcvokH-eY6zy","event_id":"GvFyqEf9oMIlbMmwKhkVt0Qi","client_lib":"v1.3.0","sourceApp":"nyt-vi","subject":"page_update","how":"beacon","client_ts":1701800042990,"data":{"performance":{"fi
2023-12-05 18:14:09 UTC	1501	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 78 2d 72 65 71 75 65 73 74 65 64 2d 62 79 2c 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 55 54 2c 20 50 4f 53 54 2c 20 44 45 4c 45 54 45 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6e 79 74 2d 61 3d Data Ascii: HTTP/1.1 200 OKaccess-control-allow-credentials: trueaccess-control-allow-headers: Content-Type, x-requested-by, *access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONSaccess-control-allow-origin: https://www.nytimes.comset-cookie: nyt-a=
2023-12-05 18:14:09 UTC	34	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 75 63 63 65 73 73 22 7d Data Ascii: {"status":200,"message":"success"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50626	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:09 UTC	2234	OUT	GET /vi-assets/static-assets/defaultHamburgerNavData-2b54748b37d255147551.js?_sw-precache=c06eed223d81e2d45752bebac929b2ae HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:09 UTC	1341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 32 32 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 6b 70 32 37 75 44 4d 67 5f 51 72 58 65 47 69 5f 5f 4e 68 54 49 32 74 59 69 61 54 5f 56 69 66 53 78 46 6d 62 32 39 32 36 47 55 62 6f 4b 49 45 78 58 46 35 66 76 38 52 2d 6a 33 5f 2d 4c 6b 53 64 5f 34 4a 31 31 6a 4c 54 6e 42 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 36 30 33 36 36 39 37 34 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 32228X-GUploader-UploadID: ABPtcPrkp27uDMg_QrXeGi__NhTI2tYiaT_VifSxFmb2926GUboKIExXF5fv8R-j3_-LkSd_4J11jLTnBwx-goog-generation: 1701370603669741x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:14:09 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 5d 2c 7b 22 31 62 72 48 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 61 29 3b 76 61 72 20 73 3d 6e 28 22 71 31 74 49 22 29 2c 6f 3d 6e 2e 6e 28 73 29 2c 74 3d 5b 7b 65 64 69 74 69 6f 6e 3a 22 64 6f 6d 65 73 74 69 63 22 2c 6e 61 6d 65 3a 22 48 6f 6d 65 20 50 61 67 65 22 2c 70 61 72 65 6e 74 3a 6e 75 6c 6c 2c 70 61 74 68 3a 22 2f 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 41 39 36 33 42 35 36 37 2d 37 44 33 44 2d 34 44 30 43 2d 39 45 34 37 2d 42 46 39 31 36 30 39 45 46 43 45 37 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 68 6f 6d 65 70 61 67 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[71],{"1brH":function(e,a,n){"use strict";n.r(a);var s=n("q1tI"),o=n.n(s),t=[{edition:"domestic",name:"Home Page",parent:null,path:"/",taxonomyId:"A963B567-7D3D-4D0C-9E47-BF91609EFCE7",className:"homepag
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 44 39 2d 39 42 33 34 2d 31 33 38 44 33 30 34 36 38 46 38 46 22 2c 70 61 74 68 3a 22 2f 73 65 63 74 69 6f 6e 2f 77 6f 72 6c 64 2f 63 61 6e 61 64 61 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 35 63 66 35 64 39 30 62 2d 65 34 33 62 2d 34 33 33 35 2d 62 63 37 35 2d 30 62 34 31 31 39 62 62 39 38 61 65 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 63 61 6e 61 64 61 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 45 75 72 6f 70 65 22 2c 70 61 72 65 6e 74 3a 22 39 41 34 33 44 38 46 43 2d 46 34 43 46 2d 34 34 44 39 2d 39 42 33 34 2d 31 33 38 44 33 30 34 36 38 46 38 46 22 2c 70 61 74 68 3a 22 2f 73 65 63 74 69 6f 6e 2f 77 6f 72 6c 64 2f Data Ascii: D9-9B34-138D30468F8F",path:"/section/world/canada",taxonomyId:"5cf5d90b-e43b-4335-bc75-0b4119bb98ae",edition:"",className:"canada",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Europe",parent:"9A43D8FC-F4CF-44D9-9B34-138D30468F8F",path:"/section/world/
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 32 32 30 35 43 38 30 38 35 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6e 65 72 67 79 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 4d 61 72 6b 65 74 73 22 2c 70 61 72 65 6e 74 3a 22 31 30 34 44 31 45 36 33 2d 39 37 30 31 2d 34 39 37 42 2d 38 43 46 34 2d 41 34 44 31 32 30 43 39 30 31 34 45 22 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 65 63 74 69 6f 6e 2f 6d 61 72 6b 65 74 73 2d 6f 76 65 72 76 69 65 77 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 34 41 37 30 37 30 46 46 2d 39 33 30 37 2d 34 30 39 34 2d 41 45 37 39 2d 39 31 30 31 35 38 39 35 39 41 36 30 22 2c 65 64 69 74 Data Ascii: 2205C8085",edition:"",className:"energy",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Markets",parent:"104D1E63-9701-497B-8CF4-A4D120C9014E",path:"https://www.nytimes.com/section/markets-overview",taxonomyId:"4A7070FF-9307-4094-AE79-910158959A60",edit
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 3a 21 30 2c 6c 65 76 65 6c 3a 31 7d 2c 7b 6e 61 6d 65 3a 22 50 72 65 73 69 64 65 6e 74 20 42 69 64 65 6e 22 2c 70 61 72 65 6e 74 3a 22 38 30 45 36 44 45 45 36 2d 38 37 45 34 2d 34 41 44 30 2d 39 31 35 32 2d 31 34 46 41 36 42 30 37 45 35 41 42 22 2c 70 61 74 68 3a 22 2f 73 70 6f 74 6c 69 67 68 74 2f 6a 6f 65 2d 62 69 64 65 6e 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 32 33 46 44 36 43 38 42 2d 36 32 44 35 2d 34 43 45 41 2d 41 33 33 31 2d 36 43 32 41 39 41 31 32 32 33 42 45 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 70 72 65 73 69 64 65 6e 74 42 69 64 65 6e 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 44 6f 6e 61 6c 64 20 Data Ascii: :!0,level:1},{name:"President Biden",parent:"80E6DEE6-87E4-4AD0-9152-14FA6B07E5AB",path:"/spotlight/joe-biden",taxonomyId:"23FD6C8B-62D5-4CEA-A331-6C2A9A1223BE",edition:"",className:"presidentBiden",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Donald
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 36 43 32 41 39 41 31 32 32 33 42 45 22 2c 70 61 74 68 3a 22 2f 73 65 63 74 69 6f 6e 2f 65 64 75 63 61 74 69 6f 6e 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 43 37 33 30 33 45 30 44 2d 36 45 42 32 2d 34 46 44 33 2d 42 39 36 38 2d 35 33 30 45 46 39 46 33 38 45 42 31 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 64 75 63 61 74 69 6f 6e 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 43 61 6c 69 66 6f 72 6e 69 61 20 54 6f 64 61 79 22 2c 70 61 72 65 6e 74 3a 22 32 33 46 44 36 43 38 42 2d 36 32 44 35 2d 34 43 45 41 2d 41 33 33 31 2d 36 43 32 41 39 41 31 32 32 33 42 45 22 2c 70 61 74 68 3a 22 2f 63 6f 6c 75 6d 6e 2f 63 61 6c 69 66 Data Ascii: 6C2A9A1223BE",path:"/section/education",taxonomyId:"C7303E0D-6EB2-4FD3-B968-530EF9F38EB1",edition:"",className:"education",show_in_nav:!0,hasSubsections:!1,level:2},{name:"California Today",parent:"23FD6C8B-62D5-4CEA-A331-6C2A9A1223BE",path:"/column/calif
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 6f 6e 65 79 70 6f 6c 69 63 79 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 48 65 61 6c 74 68 20 47 75 69 64 65 22 2c 70 61 72 65 6e 74 3a 22 37 44 36 42 45 31 41 46 2d 38 43 44 38 2d 34 33 30 42 2d 38 42 32 41 2d 31 37 43 44 30 45 41 41 39 39 41 43 22 2c 70 61 74 68 3a 22 2f 73 65 63 74 69 6f 6e 2f 77 65 6c 6c 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 44 41 32 37 45 32 30 38 2d 32 36 38 32 2d 34 42 31 37 2d 38 39 39 36 2d 43 44 33 35 41 33 33 39 35 32 31 42 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 68 65 61 6c 74 68 67 75 69 64 65 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 Data Ascii: ",className:"moneypolicy",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Health Guide",parent:"7D6BE1AF-8CD8-430B-8B2A-17CD0EAA99AC",path:"/section/well",taxonomyId:"DA27E208-2682-4B17-8996-CD35A339521B",edition:"",className:"healthguide",show_in_nav:!0
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 22 2c 70 61 72 65 6e 74 3a 6e 75 6c 6c 2c 70 61 74 68 3a 22 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 41 44 38 30 39 30 44 37 2d 34 31 33 37 2d 34 44 37 31 2d 38 34 43 38 2d 37 30 44 41 33 42 44 38 39 37 37 38 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6f 70 69 6e 69 6f 6e 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 30 2c 6c 65 76 65 6c 3a 31 7d 2c 7b 65 64 69 74 69 6f 6e 3a 22 64 6f 6d 65 73 74 69 63 22 2c 6e 61 6d 65 3a 22 43 6f 6c 75 6d 6e 69 73 74 73 22 2c 70 61 72 65 6e 74 3a 22 41 44 38 30 39 30 44 37 2d 34 31 33 37 2d 34 44 37 31 2d 38 34 43 38 2d 37 30 44 41 33 42 44 38 39 37 37 38 22 2c 70 61 74 68 3a 22 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f Data Ascii: ",parent:null,path:"/section/opinion",taxonomyId:"AD8090D7-4137-4D71-84C8-70DA3BD89778",className:"opinion",show_in_nav:!0,hasSubsections:!0,level:1},{edition:"domestic",name:"Columnists",parent:"AD8090D7-4137-4D71-84C8-70DA3BD89778",path:"/section/opinio
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 7d 2c 7b 6e 61 6d 65 3a 22 4d 61 75 72 65 65 6e 20 44 6f 77 64 22 2c 70 61 72 65 6e 74 3a 22 39 35 36 38 41 38 45 34 2d 44 44 30 30 2d 34 41 31 39 2d 39 33 35 37 2d 35 35 46 38 45 38 34 41 44 44 42 35 22 2c 70 61 74 68 3a 22 2f 63 6f 6c 75 6d 6e 2f 6d 61 75 72 65 65 6e 2d 64 6f 77 64 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 37 30 36 43 39 32 33 33 2d 43 35 34 35 2d 34 41 39 45 2d 41 42 30 42 2d 32 42 36 41 32 31 43 36 41 46 39 46 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 61 75 72 65 65 6e 64 6f 77 64 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 6c 65 76 65 6c 3a 33 7d 2c 7b 6e 61 6d 65 3a 22 44 61 76 69 64 20 46 72 65 6e 63 68 22 2c 70 61 72 65 6e 74 3a 22 39 35 36 38 41 38 45 34 2d 44 44 30 30 2d 34 41 31 39 2d 39 Data Ascii: },{name:"Maureen Dowd",parent:"9568A8E4-DD00-4A19-9357-55F8E84ADDB5",path:"/column/maureen-dowd",taxonomyId:"706C9233-C545-4A9E-AB0B-2B6A21C6AF9F",edition:"",className:"maureendowd",show_in_nav:!0,level:3},{name:"David French",parent:"9568A8E4-DD00-4A19-9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50627	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:09 UTC	2231	OUT	GET /vi-assets/static-assets/defaultSiteIndexData-794e428be18629f6a98a.js?_sw-precache=085903a87b0d5ceca04a5bb076cad510 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:09 UTC	1336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 38 32 34 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 38 41 6c 32 6d 4d 33 66 4c 72 61 75 4f 38 49 7a 72 41 49 76 49 74 65 6e 55 46 57 6b 30 77 62 71 6a 34 55 63 56 47 48 32 6f 78 46 64 43 64 4d 4e 65 52 51 6b 46 30 33 6e 43 4e 72 7a 46 79 5a 5a 71 6f 62 4c 30 48 50 5f 72 36 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 37 38 34 31 36 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 3824X-GUploader-UploadID: ABPtcPr8Al2mM3fLrauO8IzrAIvItenUFWk0wbqj4UcVGH2oxFdCdMNeRQkF03nCNrzFyZZqobL0HP_r6wx-goog-generation: 1701369734784165x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:09 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 32 5d 2c 7b 46 49 31 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 22 69 6e 64 65 78 44 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 74 3d 69 28 22 71 31 74 49 22 29 2c 61 3d 69 2e 6e 28 74 29 2c 6f 3d 5b 7b 69 64 3a 31 2c 6e 61 6d 65 3a 22 6e 65 77 73 22 2c 70 61 67 65 73 3a 5b 7b 6e 61 6d 65 3a 22 48 6f 6d 65 20 50 61 67 65 22 2c 6c 69 6e 6b 3a 22 2f 22 2c 65 64 69 74 69 6f 6e 3a 22 55 53 22 7d 2c 7b 6e 61 6d 65 3a 22 57 6f 72 6c 64 22 2c 6c 69 6e 6b 3a 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[72],{FI18:function(n,e,i){"use strict";i.r(e),i.d(e,"indexData",(function(){return o}));var t=i("q1tI"),a=i.n(t),o=[{id:1,name:"news",pages:[{name:"Home Page",link:"/",edition:"US"},{name:"World",link:"
2023-12-05 18:14:09 UTC	1379	IN	Data Raw: 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 63 6f 6c 75 6d 6e 69 73 74 73 22 7d 2c 7b 6e 61 6d 65 3a 22 45 64 69 74 6f 72 69 61 6c 73 22 2c 6c 69 6e 6b 3a 22 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 65 64 69 74 6f 72 69 61 6c 73 22 7d 2c 7b 6e 61 6d 65 3a 22 47 75 65 73 74 20 45 73 73 61 79 73 22 2c 6c 69 6e 6b 3a 22 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 7d 2c 7b 6e 61 6d 65 3a 22 4c 65 74 74 65 72 73 22 2c 6c 69 6e 6b 3a 22 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 6c 65 74 74 65 72 73 22 7d 2c 7b 6e 61 6d 65 3a 22 53 75 6e 64 61 79 20 4f 70 69 6e 69 6f 6e 22 2c 6c 69 6e 6b 3a 22 2f 73 65 63 74 69 6f 6e 2f 6f 70 69 6e 69 6f 6e 2f 73 75 6e 64 61 79 22 7d 2c 7b 6e 61 6d 65 3a 22 4f Data Ascii: section/opinion/columnists"},{name:"Editorials",link:"/section/opinion/editorials"},{name:"Guest Essays",link:"/section/opinion/contributors"},{name:"Letters",link:"/section/opinion/letters"},{name:"Sunday Opinion",link:"/section/opinion/sunday"},{name:"O
2023-12-05 18:14:09 UTC	1066	IN	Data Raw: 22 2f 73 65 63 74 69 6f 6e 2f 73 74 79 6c 65 22 7d 2c 7b 6e 61 6d 65 3a 22 54 20 4d 61 67 61 7a 69 6e 65 22 2c 6c 69 6e 6b 3a 22 2f 73 65 63 74 69 6f 6e 2f 74 2d 6d 61 67 61 7a 69 6e 65 22 7d 2c 7b 6e 61 6d 65 3a 22 54 72 61 76 65 6c 22 2c 6c 69 6e 6b 3a 22 2f 73 65 63 74 69 6f 6e 2f 74 72 61 76 65 6c 22 7d 5d 7d 2c 7b 69 64 3a 35 2c 6e 61 6d 65 3a 22 4d 6f 72 65 22 2c 6c 6f 6e 67 4e 61 6d 65 3a 22 4c 69 73 74 69 6e 67 73 20 26 20 4d 6f 72 65 22 2c 70 61 67 65 73 3a 5b 7b 6e 61 6d 65 3a 22 52 65 61 64 65 72 20 43 65 6e 74 65 72 22 2c 6c 69 6e 6b 3a 22 2f 73 65 63 74 69 6f 6e 2f 72 65 61 64 65 72 2d 63 65 6e 74 65 72 22 7d 2c 7b 6e 61 6d 65 3a 22 54 68 65 20 41 74 68 6c 65 74 69 63 22 2c 6c 69 6e 6b 3a 22 68 74 74 70 73 3a 2f 2f 74 68 65 61 74 68 6c 65 74 Data Ascii: "/section/style"},{name:"T Magazine",link:"/section/t-magazine"},{name:"Travel",link:"/section/travel"}]},{id:5,name:"More",longName:"Listings & More",pages:[{name:"Reader Center",link:"/section/reader-center"},{name:"The Athletic",link:"https://theathlet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50628	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:09 UTC	2225	OUT	GET /vi-assets/static-assets/desktopLogoNav-f89c11c6efe359037f8b.js?_sw-precache=49b87398bd6ab843ba0ce3c6fb3e11ae HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:10 UTC	1330	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 38 38 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 4a 45 48 7a 51 65 6d 57 4f 6a 62 30 72 61 38 7a 6a 54 74 69 52 6d 42 5a 4d 32 6c 45 5a 56 6d 61 4d 39 58 4e 6a 49 6a 68 33 49 73 2d 49 79 6a 64 4d 33 57 2d 6d 33 75 69 35 55 75 42 50 35 48 35 70 42 76 79 4e 33 76 72 61 56 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 37 30 33 36 39 39 35 38 36 30 35 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1488X-GUploader-UploadID: ABPtcPoJEHzQemWOjb0ra8zjTtiRmBZM2lEZVmaM9XNjIjh3Is-IyjdM3W-m3ui5UuBP5H5pBvyN3vraVgx-goog-generation: 1701370369958605x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:10 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 33 5d 2c 7b 65 42 43 59 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 61 29 3b 76 61 72 20 6f 2c 6e 3d 74 28 22 67 63 52 2f 22 29 2c 69 3d 74 2e 6e 28 6e 29 2c 70 3d 74 28 22 4a 34 7a 70 22 29 2c 63 3d 74 2e 6e 28 70 29 2c 72 3d 74 28 22 71 31 74 49 22 29 2c 6c 3d 74 28 22 4a 71 70 39 22 29 2c 6d 3d 74 28 22 58 36 6f 4c 22 29 2c 73 3d 74 28 22 69 39 6a 37 22 29 2c 75 3d 74 2e 6e 28 73 29 2c 64 3d 74 28 22 33 52 6b 32 22 29 2c 62 3d 74 2e 6e 28 64 29 2c 67 3d 74 28 22 77 58 43 37 22 29 2c 6b 3d 74 2e 6e 28 67 29 2c 78 3d 4f 62 6a 65 63 74 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[73],{eBCY:function(e,a,t){"use strict";t.r(a);var o,n=t("gcR/"),i=t.n(n),p=t("J4zp"),c=t.n(p),r=t("q1tI"),l=t("Jqp9"),m=t("X6oL"),s=t("i9j7"),u=t.n(s),d=t("3Rk2"),b=t.n(d),g=t("wXC7"),k=t.n(g),x=Object(
2023-12-05 18:14:10 UTC	109	IN	Data Raw: 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 44 65 73 6b 74 6f 70 4c 6f 67 6f 4e 61 76 22 3b 61 2e 64 65 66 61 75 6c 74 3d 4e 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 65 73 6b 74 6f 70 4c 6f 67 6f 4e 61 76 2d 66 38 39 63 31 31 63 36 65 66 65 33 35 39 30 33 37 66 38 62 2e 6a 73 2e 6d 61 70 Data Ascii: displayName="DesktopLogoNav";a.default=N}}]);//# sourceMappingURL=desktopLogoNav-f89c11c6efe359037f8b.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50629	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:10 UTC	2221	OUT	GET /vi-assets/static-assets/desktopNav-fa9b3537b04b5eae1439.js?_sw-precache=9b0a8f88dc06a1c9972577e289320ebb HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:10 UTC	1327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 30 31 35 33 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 35 53 43 71 51 47 71 6c 4e 4c 64 58 67 54 4f 75 5a 35 53 2d 30 4b 6f 50 35 67 4d 68 34 65 79 4b 6f 4c 64 62 65 74 54 2d 73 79 36 54 49 4c 32 70 75 6f 48 54 50 67 64 75 77 59 37 64 50 50 31 59 49 51 39 2d 6b 5a 61 54 6e 78 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 38 39 32 30 31 33 35 30 36 31 39 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 60153X-GUploader-UploadID: ABPtcPq5SCqQGqlNLdXgTOuZ5S-0KoP5gMh4eyKoLdbetT-sy6TIL2puoHTPgduwY7dPP1YIQ9-kZaTnxAx-goog-generation: 1701789201350619x-goog-metageneration: 1x-goog-stored-content-encod
2023-12-05 18:14:10 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 34 5d 2c 7b 22 49 66 2f 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 64 65 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 7d 29 29 3b 76 61 72 20 61 2c 73 2c 6f 2c 69 2c 6c 2c 6d 3d 6e 28 22 67 63 52 2f 22 29 2c 63 3d 6e 2e 6e 28 6d 29 2c 72 3d 6e 28 22 71 31 74 49 22 29 2c 68 3d 6e 2e 6e 28 72 29 2c 64 3d 6e 28 22 6c 53 4e 41 22 29 2c 70 3d 6e 2e 6e 28 64 29 2c 77 3d 6e 28 22 6c 77 73 45 22 29 2c 41 3d 6e 2e 6e 28 77 29 2c 42 3d 6e 28 22 57 38 4d 4a 22 29 2c 75 3d 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[74],{"If/s":function(e,t,n){"use strict";n.r(t),n.d(t,"default",(function(){return se}));var a,s,o,i,l,m=n("gcR/"),c=n.n(m),r=n("q1tI"),h=n.n(r),d=n("lSNA"),p=n.n(d),w=n("lwsE"),A=n.n(w),B=n("W8MJ"),u=n
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 61 66 72 69 63 61 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 41 75 73 74 72 61 6c 69 61 22 2c 70 61 72 65 6e 74 3a 22 39 41 34 33 44 38 46 43 2d 46 34 43 46 2d 34 34 44 39 2d 39 42 33 34 2d 31 33 38 44 33 30 34 36 38 46 38 46 22 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 65 63 74 69 6f 6e 2f 77 6f 72 6c 64 2f 61 75 73 74 72 61 6c 69 61 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 37 47 44 44 4a 37 45 2d 30 33 37 42 2d 34 43 36 42 2d 41 38 38 44 2d 37 34 31 42 30 36 36 36 33 30 37 38 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 61 75 73 Data Ascii: ,className:"africa",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Australia",parent:"9A43D8FC-F4CF-44D9-9B34-138D30468F8F",path:"https://www.nytimes.com/section/world/australia",taxonomyId:"7GDDJ7E-037B-4C6B-A88D-741B06663078",edition:"",className:"aus
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 41 39 41 31 32 32 33 42 45 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 75 73 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 30 2c 6c 65 76 65 6c 3a 31 7d 2c 7b 6e 61 6d 65 3a 22 45 64 75 63 61 74 69 6f 6e 22 2c 70 61 72 65 6e 74 3a 22 32 33 46 44 36 43 38 42 2d 36 32 44 35 2d 34 43 45 41 2d 41 33 33 31 2d 36 43 32 41 39 41 31 32 32 33 42 45 22 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 65 63 74 69 6f 6e 2f 65 64 75 63 61 74 69 6f 6e 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 43 37 33 30 33 45 30 44 2d 36 45 42 32 2d 34 46 44 33 2d 42 39 36 38 2d 35 33 30 45 46 39 46 33 38 45 42 31 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c Data Ascii: A9A1223BE",edition:"",className:"us",show_in_nav:!0,hasSubsections:!0,level:1},{name:"Education",parent:"23FD6C8B-62D5-4CEA-A331-6C2A9A1223BE",path:"https://www.nytimes.com/section/education",taxonomyId:"C7303E0D-6EB2-4FD3-B968-530EF9F38EB1",edition:"",cl
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6e 79 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 31 7d 2c 7b 61 6c 74 65 72 6e 61 74 65 5f 65 64 69 74 69 6f 6e 73 3a 7b 67 6c 6f 62 61 6c 3a 22 41 32 35 37 44 38 39 41 2d 30 44 33 43 2d 34 30 41 46 2d 39 43 33 34 2d 31 41 32 35 41 37 39 34 37 44 39 34 22 7d 2c 65 64 69 74 69 6f 6e 3a 22 64 6f 6d 65 73 74 69 63 22 2c 6e 61 6d 65 3a 22 42 75 73 69 6e 65 73 73 22 2c 70 61 72 65 6e 74 3a 6e 75 6c 6c 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 65 63 74 69 6f 6e 2f 62 75 73 69 6e 65 73 73 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 31 30 34 44 31 45 36 33 2d 39 37 Data Ascii: ,edition:"",className:"ny",show_in_nav:!0,hasSubsections:!1,level:1},{alternate_editions:{global:"A257D89A-0D3C-40AF-9C34-1A25A7947D94"},edition:"domestic",name:"Business",parent:null,path:"https://www.nytimes.com/section/business",taxonomyId:"104D1E63-97
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 69 6d 65 73 2e 63 6f 6d 2f 73 65 63 74 69 6f 6e 2f 62 75 73 69 6e 65 73 73 2f 6d 65 64 69 61 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 43 36 39 31 46 42 34 38 2d 41 37 45 38 2d 34 34 46 42 2d 39 41 41 41 2d 31 33 44 39 31 38 36 33 44 33 33 36 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6d 65 64 69 61 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 53 6d 61 6c 6c 20 42 75 73 69 6e 65 73 73 22 2c 70 61 72 65 6e 74 3a 22 31 30 34 44 31 45 36 33 2d 39 37 30 31 2d 34 39 37 42 2d 38 43 46 34 2d 41 34 44 31 32 30 43 39 30 31 34 45 22 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 65 Data Ascii: imes.com/section/business/media",taxonomyId:"C691FB48-A7E8-44FB-9AAA-13D91863D336",edition:"",className:"media",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Small Business",parent:"104D1E63-9701-497B-8CF4-A4D120C9014E",path:"https://www.nytimes.com/se
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 6f 6e 6f 6d 79 49 64 3a 22 37 31 33 30 31 46 45 31 2d 46 45 39 34 2d 34 41 46 34 2d 39 37 38 42 2d 33 39 42 32 44 32 43 35 39 44 33 31 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 64 65 61 6c 62 6f 6f 6b 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 45 63 6f 6e 6f 6d 79 22 2c 70 61 72 65 6e 74 3a 22 41 32 35 37 44 38 39 41 2d 30 44 33 43 2d 34 30 41 46 2d 39 43 33 34 2d 31 41 32 35 41 37 39 34 37 44 39 34 22 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 65 63 74 69 6f 6e 2f 62 75 73 69 6e 65 73 73 2f 65 63 6f 6e 6f 6d 79 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 32 38 34 38 Data Ascii: onomyId:"71301FE1-FE94-4AF4-978B-39B2D2C59D31",edition:"",className:"dealbook",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Economy",parent:"A257D89A-0D3C-40AF-9C34-1A25A7947D94",path:"https://www.nytimes.com/section/business/economy",taxonomyId:"2848
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 2d 31 41 32 35 41 37 39 34 37 44 39 34 22 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 73 65 63 74 69 6f 6e 2f 79 6f 75 72 2d 6d 6f 6e 65 79 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 45 44 37 42 38 35 39 34 2d 34 34 43 45 2d 34 44 33 37 2d 41 35 38 42 2d 31 43 44 41 41 31 39 37 37 34 45 34 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 79 6f 75 72 6d 6f 6e 65 79 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 68 61 73 53 75 62 73 65 63 74 69 6f 6e 73 3a 21 31 2c 6c 65 76 65 6c 3a 32 7d 2c 7b 6e 61 6d 65 3a 22 41 75 74 6f 6d 6f 62 69 6c 65 73 22 2c 70 61 72 65 6e 74 3a 22 41 32 35 37 44 38 39 41 2d 30 44 33 43 2d 34 30 41 46 2d 39 43 33 34 2d 31 41 32 35 41 37 39 34 37 44 39 34 22 Data Ascii: -1A25A7947D94",path:"https://www.nytimes.com/section/your-money",taxonomyId:"ED7B8594-44CE-4D37-A58B-1CDAA19774E4",edition:"",className:"yourmoney",show_in_nav:!0,hasSubsections:!1,level:2},{name:"Automobiles",parent:"A257D89A-0D3C-40AF-9C34-1A25A7947D94"
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 6a 61 6d 65 6c 6c 65 2d 62 6f 75 69 65 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 22 2c 65 64 69 74 69 6f 6e 3a 22 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 6a 61 6d 65 6c 6c 65 62 6f 75 69 65 22 2c 73 68 6f 77 5f 69 6e 5f 6e 61 76 3a 21 30 2c 6c 65 76 65 6c 3a 33 7d 2c 7b 6e 61 6d 65 3a 22 44 61 76 69 64 20 42 72 6f 6f 6b 73 22 2c 70 61 72 65 6e 74 3a 22 39 35 36 38 41 38 45 34 2d 44 44 30 30 2d 34 41 31 39 2d 39 33 35 37 2d 35 35 46 38 45 38 34 41 44 44 42 35 22 2c 70 61 74 68 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 79 74 69 6d 65 73 2e 63 6f 6d 2f 63 6f 6c 75 6d 6e 2f 64 61 76 69 64 2d 62 72 6f 6f 6b 73 22 2c 74 61 78 6f 6e 6f 6d 79 49 64 3a 22 41 32 42 33 32 42 38 36 2d 43 33 32 30 2d 34 39 44 38 2d 38 35 44 33 2d 34 41 43 36 42 43 41 32 46 32 43 32 Data Ascii: jamelle-bouie",taxonomyId:"",edition:"",className:"jamellebouie",show_in_nav:!0,level:3},{name:"David Brooks",parent:"9568A8E4-DD00-4A19-9357-55F8E84ADDB5",path:"https://www.nytimes.com/column/david-brooks",taxonomyId:"A2B32B86-C320-49D8-85D3-4AC6BCA2F2C2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50630	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:10 UTC	2192	OUT	GET /vi-assets/static-assets/downloadButton-e99674db40408d1f988297e604c3351e.svg HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:10 UTC	1328	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 38 30 31 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 5f 37 30 43 68 4b 66 68 44 53 71 31 78 6b 74 31 57 39 51 6f 38 64 53 32 72 6c 45 78 63 67 6c 6f 6a 39 2d 61 33 77 7a 52 73 44 64 69 75 42 47 78 67 4c 37 63 7a 7a 34 6d 6f 42 78 64 49 7a 65 63 70 41 43 63 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 30 38 37 33 32 35 35 32 37 38 34 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 69 64 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 10801X-GUploader-UploadID: ABPtcPo_70ChKfhDSq1xkt1W9Qo8dS2rlExcgloj9-a3wzRsDdiuBGxgL7czz4moBxdIzecpACcx-goog-generation: 1701708732552784x-goog-metageneration: 1x-goog-stored-content-encoding: id
2023-12-05 18:14:10 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 20 54 68 65 20 4e 65 77 20 59 6f 72 6b 20 54 69 6d 65 73 20 41 75 64 69 6f 20 41 70 70 20 6f 6e 20 74 68 65 20 41 70 70 20 53 74 6f 72 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 2c 30 2d Data Ascii: <svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40"> <title>Download The New York Times Audio App on the App Store</title> <g> <g> <g> <path d="M110.13477,0H9.53468c-.3667,0-
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 30 2c 30 2c 30 2d 32 2e 37 39 38 38 2d 32 2e 37 39 39 38 2c 36 2e 37 36 37 35 34 2c 36 2e 37 36 37 35 34 2c 30 2c 30 2c 30 2d 31 2e 39 30 38 32 2d 2e 36 32 37 2c 31 33 2e 30 34 33 39 34 2c 31 33 2e 30 34 33 39 34 2c 30 2c 30 2c 30 2d 32 2d 2e 31 37 36 37 36 63 2d 2e 33 30 34 37 2d 2e 30 30 34 38 38 2d 2e 36 31 37 32 2d 2e 30 31 30 37 34 2d 2e 39 32 31 39 2d 2e 30 31 32 36 39 2d 2e 33 35 39 34 2d 2e 30 30 32 2d 2e 37 32 34 36 2d 2e 30 30 32 2d 31 2e 30 38 34 2d 2e 30 30 32 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 61 36 61 36 61 36 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 2e 34 34 34 38 33 2c 33 39 2e 31 32 35 63 2d 2e 33 30 34 36 38 2c 30 2d 2e 36 30 32 2d 2e 30 30 33 39 2d 2e 39 30 34 32 39 2d 2e 30 31 30 37 61 31 32 Data Ascii: 0,0,0-2.7988-2.7998,6.76754,6.76754,0,0,0-1.9082-.627,13.04394,13.04394,0,0,0-2-.17676c-.3047-.00488-.6172-.01074-.9219-.01269-.3594-.002-.7246-.002-1.084-.002Z" style="fill: #a6a6a6"/> <path d="M8.44483,39.125c-.30468,0-.602-.0039-.90429-.0107a12
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 64 3d 22 5f 47 72 6f 75 70 5f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 26 6c 74 3b 47 72 6f 75 70 26 67 74 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 5f 47 72 6f 75 70 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 26 6c 74 3b 47 72 6f 75 70 26 67 74 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 5f 47 72 6f 75 70 5f 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 26 6c 74 3b 47 72 6f 75 70 26 67 74 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 5f 50 61 74 68 5f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 26 6c 74 3b 50 61 74 68 26 67 74 3b 22 20 64 3d 22 4d 32 34 2e 37 36 38 38 38 2c 32 30 2e 33 30 30 36 38 61 34 2e 39 34 38 38 31 2c 34 2e 39 34 38 38 31 2c 30 2c 30 2c 31 2c 32 2e 33 35 36 35 36 2d 34 2e 31 Data Ascii: d="_Group_" data-name="<Group>"> <g id="_Group_2" data-name="<Group>"> <g id="_Group_3" data-name="<Group>"> <path id="_Path_" data-name="<Path>" d="M24.76888,20.30068a4.94881,4.94881,0,0,1,2.35656-4.1
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 31 38 61 33 2e 32 31 31 36 32 2c 33 2e 32 31 31 36 32 2c 30 2c 30 2c 31 2c 32 2e 38 38 32 38 31 2d 31 2e 36 30 30 35 39 43 35 33 2e 36 34 35 2c 32 31 2e 33 34 37 36 36 2c 35 35 2e 31 35 39 36 39 2c 32 33 2e 31 36 34 30 36 2c 35 35 2e 31 35 39 36 39 2c 32 35 2e 39 36 39 37 33 5a 6d 2d 31 2e 39 31 30 31 36 2c 30 63 30 2d 31 2e 38 33 33 2d 2e 39 34 37 32 37 2d 33 2e 30 33 38 30 39 2d 32 2e 33 39 32 35 38 2d 33 2e 30 33 38 30 39 2d 31 2e 34 31 39 39 32 2c 30 2d 32 2e 33 37 35 2c 31 2e 32 33 30 34 37 2d 32 2e 33 37 35 2c 33 2e 30 33 38 30 39 2c 30 2c 31 2e 38 32 34 32 32 2e 39 35 35 30 38 2c 33 2e 30 34 35 39 2c 32 2e 33 37 35 2c 33 2e 30 34 35 39 43 35 32 2e 33 30 32 32 37 2c 32 39 2e 30 31 35 36 33 2c 35 33 2e 32 34 39 35 33 2c 32 37 2e 38 31 39 33 34 2c 35 Data Ascii: 18a3.21162,3.21162,0,0,1,2.88281-1.60059C53.645,21.34766,55.15969,23.16406,55.15969,25.96973Zm-1.91016,0c0-1.833-.94727-3.03809-2.39258-3.03809-1.41992,0-2.375,1.23047-2.375,3.03809,0,1.82422.95508,3.0459,2.375,3.0459C52.30227,29.01563,53.24953,27.81934,5
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 2e 37 32 31 36 38 76 31 2e 34 37 31 36 38 48 38 33 2e 33 34 36 32 31 76 34 2e 39 39 31 32 31 63 30 2c 2e 37 37 35 33 39 2e 33 34 34 37 33 2c 31 2e 31 33 36 37 32 2c 31 2e 31 30 31 35 36 2c 31 2e 31 33 36 37 32 61 35 2e 38 30 37 35 32 2c 35 2e 38 30 37 35 32 2c 30 2c 30 2c 30 2c 2e 36 31 31 33 33 2d 2e 30 34 33 76 31 2e 34 36 32 38 39 61 35 2e 31 30 33 35 31 2c 35 2e 31 30 33 35 31 2c 30 2c 30 2c 31 2d 31 2e 30 33 32 32 33 2e 30 38 35 39 34 63 2d 31 2e 38 33 33 2c 30 2d 32 2e 35 34 37 38 35 2d 2e 36 38 38 34 38 2d 32 2e 35 34 37 38 35 2d 32 2e 34 34 34 33 34 56 32 32 2e 39 31 34 30 36 48 38 30 2e 31 36 32 36 32 56 32 31 2e 34 34 32 33 38 48 38 31 2e 34 37 39 56 31 39 2e 32 39 39 38 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 2f 3e 0a 20 Data Ascii: .72168v1.47168H83.34621v4.99121c0,.77539.34473,1.13672,1.10156,1.13672a5.80752,5.80752,0,0,0,.61133-.043v1.46289a5.10351,5.10351,0,0,1-1.03223.08594c-1.833,0-2.54785-.68848-2.54785-2.44434V22.91406H80.16262V21.44238H81.479V19.2998Z" style="fill: #fff"/>
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 72 6f 75 70 26 67 74 3b 22 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 33 37 2e 38 32 36 31 39 2c 38 2e 37 33 31 61 32 2e 36 33 39 36 34 2c 32 2e 36 33 39 36 34 2c 30 2c 30 2c 31 2c 32 2e 38 30 37 36 32 2c 32 2e 39 36 34 38 34 63 30 2c 31 2e 39 30 36 32 35 2d 31 2e 30 33 30 32 37 2c 33 2e 30 30 32 2d 32 2e 38 30 37 36 32 2c 33 2e 30 30 32 48 33 35 2e 36 37 30 39 32 56 38 2e 37 33 31 5a 6d 2d 31 2e 32 32 38 35 32 2c 35 2e 31 32 33 68 31 2e 31 32 35 61 31 2e 38 37 35 38 38 2c 31 2e 38 37 35 38 38 2c 30 2c 30 2c 30 2c 31 2e 39 36 37 37 37 2d 32 2e 31 34 36 2c 31 2e 38 38 31 2c 31 2e 38 38 31 2c 30 2c 30 2c 30 2d 31 2e 39 36 37 37 37 2d 32 2e 31 33 33 37 39 68 2d 31 2e 31 32 35 5a 22 20 73 74 79 6c 65 3d 22 66 69 Data Ascii: roup>"> <g> <path d="M37.82619,8.731a2.63964,2.63964,0,0,1,2.80762,2.96484c0,1.90625-1.03027,3.002-2.80762,3.002H35.67092V8.731Zm-1.22852,5.123h1.125a1.87588,1.87588,0,0,0,1.96777-2.146,1.881,1.881,0,0,0-1.96777-2.13379h-1.125Z" style="fi
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 30 38 2c 31 32 2e 34 34 34 33 34 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 36 2e 34 30 30 39 2c 31 33 2e 34 32 34 33 32 63 30 2d 2e 38 31 30 35 35 2e 36 30 33 35 32 2d 31 2e 32 37 37 38 33 2c 31 2e 36 37 34 38 2d 31 2e 33 34 34 32 34 6c 31 2e 32 31 39 37 33 2d 2e 30 37 30 33 31 76 2d 2e 33 38 38 36 37 63 30 2d 2e 34 37 35 35 39 2d 2e 33 31 34 34 35 2d 2e 37 34 34 31 34 2d 2e 39 32 31 38 37 2d 2e 37 34 34 31 34 2d 2e 34 39 36 30 39 2c 30 2d 2e 38 33 39 38 34 2e 31 38 32 31 33 2d 2e 39 33 38 34 38 2e 35 30 30 34 39 68 2d 2e 38 36 30 33 35 63 2e 30 39 30 38 32 2d 2e 37 37 33 34 34 2e 38 31 38 33 36 2d 31 2e 32 36 39 35 33 2c 31 2e 38 33 39 38 34 2d 31 2e 32 36 39 35 33 2c Data Ascii: 08,12.44434Z" style="fill: #fff"/> <path d="M66.4009,13.42432c0-.81055.60352-1.27783,1.6748-1.34424l1.21973-.07031v-.38867c0-.47559-.31445-.74414-.92187-.74414-.49609,0-.83984.18213-.93848.50049h-.86035c.09082-.77344.81836-1.26953,1.83984-1.26953,
2023-12-05 18:14:10 UTC	1148	IN	Data Raw: 30 32 32 35 2c 31 2e 34 36 34 35 36 2c 31 2e 34 36 34 35 36 2c 30 2c 30 2c 31 2c 31 2e 35 35 38 35 39 2c 31 2e 36 37 34 38 76 32 2e 39 31 35 48 38 37 2e 36 30 35 56 31 32 2e 30 30 35 38 36 63 30 2d 2e 37 32 33 36 33 2d 2e 33 31 34 34 35 2d 31 2e 30 38 33 35 2d 2e 39 37 31 36 38 2d 31 2e 30 38 33 35 61 31 2e 30 33 32 39 34 2c 31 2e 30 33 32 39 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 35 32 2c 31 2e 31 34 31 31 31 76 32 2e 36 33 34 32 38 68 2d 2e 38 38 38 36 37 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 33 2e 35 31 35 31 36 2c 39 2e 30 37 33 37 33 76 31 2e 31 34 31 36 68 2e 39 37 35 35 39 76 2e 37 34 38 35 34 68 2d 2e 39 37 35 35 39 56 31 33 2e 32 37 39 33 63 30 2c 2e 34 37 31 Data Ascii: 0225,1.46456,1.46456,0,0,1,1.55859,1.6748v2.915H87.605V12.00586c0-.72363-.31445-1.0835-.97168-1.0835a1.03294,1.03294,0,0,0-1.0752,1.14111v2.63428h-.88867Z" style="fill: #fff"/> <path d="M93.51516,9.07373v1.1416h.97559v.74854h-.97559V13.2793c0,.471

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50631	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:10 UTC	2222	OUT	GET /vi-assets/static-assets/emailsignup-f3ca1a7e06022030da1d.js?_sw-precache=c0c159d49a7ed61d7a27c09704925f2b HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:10 UTC	1331	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 34 30 34 35 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 42 71 4f 77 50 36 72 6b 4b 62 70 72 31 34 51 44 7a 63 46 48 41 74 65 70 67 4d 6e 38 4e 59 61 35 54 2d 38 61 66 69 71 59 6f 77 6d 47 4a 4e 47 5f 41 45 36 52 32 6c 65 57 67 67 30 51 4a 64 77 67 6b 37 33 35 63 69 73 67 33 74 51 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 38 30 30 35 35 30 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 194045X-GUploader-UploadID: ABPtcPpBqOwP6rkKbpr14QDzcFHAtepgMn8NYa5T-8afiqYowmGJNG_AE6R2leWgg0QJdwgk735cisg3tQx-goog-generation: 1701369734800550x-goog-metageneration: 1x-goog-stored-content-enco
2023-12-05 18:14:10 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 5d 2c 7b 22 35 44 4e 75 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 63 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 29 2c 65 2e 64 28 63 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 2c 65 2e 64 28 63 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 29 29 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 69 65 6e 74 49 64 2c 65 3d 61 2e 6e 65 77 73 6c 65 74 74 65 72 4e 61 6d 65 2c 62 3d 61 2e 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[75],{"5DNu":function(a,c,e){"use strict";e.d(c,"a",(function(){return b})),e.d(c,"c",(function(){return n})),e.d(c,"b",(function(){return t}));var b=function(a){var c=a.clientId,e=a.newsletterName,b=a.p
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 38 65 61 62 31 39 39 65 2d 38 66 38 65 2d 34 35 35 37 2d 62 64 37 66 2d 38 66 31 38 31 36 39 66 33 34 32 63 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 39 31 31 61 39 37 35 65 2d 37 61 65 32 2d 34 33 30 32 2d 61 32 61 63 2d 34 61 33 61 39 35 30 32 66 62 66 66 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 35 38 65 31 33 30 35 66 2d 33 33 37 30 2d 34 64 64 37 2d 39 62 36 38 2d 35 65 37 34 61 66 65 65 35 64 36 38 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 34 31 66 63 62 34 32 38 2d 35 33 33 65 2d 34 32 32 66 2d 62 30 66 66 2d 66 32 66 30 37 34 33 32 39 66 62 62 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c Data Ascii: "nyt://followableplace/8eab199e-8f8e-4557-bd7f-8f18169f342c","nyt://followableplace/911a975e-7ae2-4302-a2ac-4a3a9502fbff","nyt://followableplace/58e1305f-3370-4dd7-9b68-5e74afee5d68","nyt://followableplace/41fcb428-533e-422f-b0ff-f2f074329fbb","nyt://foll
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 34 62 38 35 2d 35 38 63 61 2d 38 39 62 32 2d 34 30 38 63 37 31 31 65 37 37 65 33 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 65 61 35 62 35 61 66 64 2d 62 66 63 65 2d 35 63 32 37 2d 39 61 33 37 2d 66 65 66 62 31 37 33 63 31 39 38 32 22 5d 2c 22 73 75 62 50 6c 61 63 65 73 22 3a 5b 5d 2c 22 62 71 50 6c 61 63 65 53 74 72 69 6e 67 73 22 3a 5b 22 43 68 69 6c 65 22 5d 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 68 69 6e 61 22 2c 22 75 72 69 22 3a 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 31 64 63 34 64 62 39 38 2d 65 34 31 62 2d 34 62 33 61 2d 61 64 32 61 2d 39 37 35 39 33 61 30 65 66 65 64 33 22 2c 22 74 61 67 73 22 3a 5b 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 65 65 34 64 38 37 64 39 2d 66 38 34 62 2d Data Ascii: 4b85-58ca-89b2-408c711e77e3","nyt://location/ea5b5afd-bfce-5c27-9a37-fefb173c1982"],"subPlaces":[],"bqPlaceStrings":["Chile"]},{"displayName":"China","uri":"nyt://followableplace/1dc4db98-e41b-4b3a-ad2a-97593a0efed3","tags":["nyt://location/ee4d87d9-f84b-
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 36 65 66 2d 63 66 62 33 35 36 34 63 33 36 32 37 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 37 65 38 30 38 30 62 64 2d 37 35 35 63 2d 34 63 63 30 2d 61 61 66 34 2d 62 64 64 63 65 65 39 35 32 32 33 61 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 30 65 33 32 66 66 66 64 2d 34 65 36 39 2d 34 65 36 39 2d 62 34 32 63 2d 31 38 30 38 66 35 31 39 31 30 65 36 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 38 32 32 37 61 30 37 62 2d 34 64 66 36 2d 34 64 36 31 2d 62 30 38 62 2d 65 62 61 33 34 35 37 64 31 32 33 37 22 2c 22 6e 79 74 3a 2f 2f 66 6f 6c 6c 6f 77 61 62 6c 65 70 6c 61 63 65 2f 35 63 39 65 33 65 64 31 2d 34 61 35 35 2d 34 66 64 33 2d 38 66 36 62 2d 39 35 63 38 34 65 35 Data Ascii: 6ef-cfb3564c3627","nyt://followableplace/7e8080bd-755c-4cc0-aaf4-bddcee95223a","nyt://followableplace/0e32fffd-4e69-4e69-b42c-1808f51910e6","nyt://followableplace/8227a07b-4df6-4d61-b08b-eba3457d1237","nyt://followableplace/5c9e3ed1-4a55-4fd3-8f6b-95c84e5
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 63 61 66 31 65 32 32 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 31 37 37 37 35 32 36 62 2d 66 31 65 61 2d 35 39 62 63 2d 38 37 62 62 2d 61 32 30 31 66 31 66 31 62 62 64 62 22 2c 22 6e 79 74 3a 2f 2f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2f 37 61 61 36 36 65 63 31 2d 36 38 31 64 2d 35 66 63 62 2d 61 36 36 38 2d 61 61 31 37 32 36 38 30 30 39 32 30 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 38 61 65 35 34 34 30 38 2d 33 62 37 31 2d 35 36 38 33 2d 39 61 38 38 2d 35 35 66 37 39 38 65 63 61 66 62 37 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 36 39 39 61 31 39 31 32 2d 35 66 35 39 2d 35 62 32 36 2d 61 37 36 33 2d 66 66 31 37 39 39 35 35 37 31 64 37 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 61 62 65 31 33 34 63 34 2d 30 Data Ascii: caf1e22","nyt://location/1777526b-f1ea-59bc-87bb-a201f1f1bbdb","nyt://organization/7aa66ec1-681d-5fcb-a668-aa1726800920","nyt://location/8ae54408-3b71-5683-9a88-55f798ecafb7","nyt://location/699a1912-5f59-5b26-a763-ff17995571d7","nyt://location/abe134c4-0
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 34 35 62 37 2d 64 35 35 62 2d 35 39 33 62 2d 39 32 65 33 2d 64 39 33 33 31 31 64 63 32 62 34 65 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 37 38 38 34 65 32 63 62 2d 65 32 39 38 2d 35 63 39 36 2d 39 38 33 65 2d 31 35 65 63 36 61 37 65 39 32 62 39 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 34 31 34 37 32 39 64 65 2d 63 37 31 33 2d 35 65 65 61 2d 62 36 38 32 2d 61 38 61 31 31 39 37 34 33 64 31 62 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 63 32 65 62 31 61 61 65 2d 33 31 62 63 2d 35 34 39 63 2d 38 37 62 62 2d 37 66 38 36 39 31 30 62 35 35 34 31 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 64 34 33 61 64 39 38 32 2d 33 66 36 34 2d 35 63 66 38 2d 62 64 31 63 2d 66 35 34 61 34 32 31 38 62 36 65 33 22 2c 22 6e 79 74 3a Data Ascii: 45b7-d55b-593b-92e3-d93311dc2b4e","nyt://location/7884e2cb-e298-5c96-983e-15ec6a7e92b9","nyt://location/414729de-c713-5eea-b682-a8a119743d1b","nyt://location/c2eb1aae-31bc-549c-87bb-7f86910b5541","nyt://location/d43ad982-3f64-5cf8-bd1c-f54a4218b6e3","nyt:
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 37 36 2d 64 64 31 63 2d 35 61 34 32 2d 39 66 32 31 2d 37 63 38 65 61 62 64 64 39 31 36 32 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 38 32 64 35 64 64 36 35 2d 34 35 61 64 2d 35 39 35 66 2d 38 30 31 35 2d 38 32 35 38 33 63 33 31 64 38 35 63 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 30 30 64 31 39 34 38 65 2d 35 62 65 64 2d 35 64 34 38 2d 62 63 32 37 2d 61 64 38 31 30 38 66 65 66 34 39 61 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 37 64 38 36 36 61 37 63 2d 64 30 38 32 2d 35 34 39 31 2d 39 33 62 63 2d 30 31 64 36 65 63 33 38 34 30 66 33 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 61 37 31 36 38 33 34 63 2d 62 65 33 63 2d 35 63 34 61 2d 39 62 33 66 2d 61 37 66 33 61 38 30 35 30 61 36 39 22 2c 22 6e 79 74 3a 2f 2f Data Ascii: 76-dd1c-5a42-9f21-7c8eabdd9162","nyt://location/82d5dd65-45ad-595f-8015-82583c31d85c","nyt://location/00d1948e-5bed-5d48-bc27-ad8108fef49a","nyt://location/7d866a7c-d082-5491-93bc-01d6ec3840f3","nyt://location/a716834c-be3c-5c4a-9b3f-a7f3a8050a69","nyt://
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 30 30 36 65 33 39 32 31 30 38 37 31 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 36 63 39 66 66 65 64 61 2d 38 37 66 32 2d 35 39 30 31 2d 38 62 34 34 2d 65 30 61 39 31 61 30 62 63 34 39 64 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 39 32 32 33 37 64 39 61 2d 61 31 30 32 2d 35 33 38 37 2d 38 65 30 33 2d 63 35 64 62 66 39 35 63 30 38 31 30 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 61 30 32 66 31 62 65 37 2d 32 66 61 33 2d 35 61 61 39 2d 39 63 37 38 2d 33 32 62 31 64 39 32 34 61 61 30 31 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 64 36 61 62 33 63 62 62 2d 30 64 64 65 2d 35 36 33 65 2d 38 64 61 38 2d 31 32 30 38 62 33 32 30 33 62 34 66 22 2c 22 6e 79 74 3a 2f 2f 6c 6f 63 61 74 69 6f 6e 2f 33 61 39 62 65 34 34 31 2d Data Ascii: 006e39210871","nyt://location/6c9ffeda-87f2-5901-8b44-e0a91a0bc49d","nyt://location/92237d9a-a102-5387-8e03-c5dbf95c0810","nyt://location/a02f1be7-2fa3-5aa9-9c78-32b1d924aa01","nyt://location/d6ab3cbb-0dde-563e-8da8-1208b3203b4f","nyt://location/3a9be441-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50632	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:10 UTC	2224	OUT	GET /vi-assets/static-assets/episodefooter-f326eb7e65b2c7eb81e7.js?_sw-precache=4c11eba6d3993a3de672de15d08cdefe HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:10 UTC	1329	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 34 31 30 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 6f 62 35 49 57 4f 6d 52 49 39 43 4e 54 73 46 45 38 6f 66 6e 4f 39 4d 6a 78 5f 63 70 67 6c 68 66 62 5a 75 4c 63 54 73 6c 47 44 64 34 62 30 33 43 50 6e 67 37 35 4b 4b 54 67 33 50 64 67 68 61 51 79 62 72 62 64 7a 62 6b 56 72 46 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 32 39 37 33 31 37 34 36 37 37 32 31 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 6410X-GUploader-UploadID: ABPtcPob5IWOmRI9CNTsFE8ofnO9Mjx_cpglhfbZuLcTslGDd4b03CPng75KKTg3PdghaQybrbdzbkVrFgx-goog-generation: 1701297317467721x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:10 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 36 5d 2c 7b 70 66 49 61 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 22 65 70 69 73 6f 64 65 46 6f 6f 74 65 72 51 75 65 72 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 29 3b 76 61 72 20 6f 2c 72 3d 69 28 22 67 63 52 2f 22 29 2c 74 3d 69 2e 6e 28 72 29 2c 73 3d 69 28 22 56 6b 41 4e 22 29 2c 61 3d 69 2e 6e 28 73 29 2c 64 3d 28 69 28 22 71 31 74 49 22 29 2c 69 28 22 4b 78 79 74 22 29 29 2c 63 3d 69 28 22 65 46 63 2b 22 29 2c 6c 3d 69 2e 6e 28 63 29 2c 70 3d 69 28 22 58 36 6f 4c 22 29 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[76],{pfIa:function(n,e,i){"use strict";i.r(e),i.d(e,"episodeFooterQuery",(function(){return N}));var o,r=i("gcR/"),t=i.n(r),s=i("VkAN"),a=i.n(s),d=(i("q1tI"),i("Kxyt")),c=i("eFc+"),l=i.n(c),p=i("X6oL"),
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 61 73 73 65 74 73 28 66 69 72 73 74 3a 20 33 30 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 2e 2e 43 6f 6e 6e 65 63 74 69 6f 6e 5f 70 61 67 65 49 6e 66 6f 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 64 67 65 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 2e 2e 20 6f 6e 20 41 72 74 69 63 6c 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: }\n }\n }\n }\n assets(first: 30) {\n ...Connection_pageInfo\n edges {\n node {\n ... on Article {\n id\n
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6e 64 69 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ame\n renditions {\n url\n height\n width\n name\n }\n
2023-12-05 18:14:10 UTC	1379	IN	Data Raw: 70 73 28 63 72 6f 70 4e 61 6d 65 73 3a 20 5b 54 48 52 45 45 5f 42 59 5f 54 57 4f 2c 20 53 49 58 54 45 45 4e 5f 42 59 5f 4e 49 4e 45 5d 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6e 64 69 74 69 6f 6e 73 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 5c 6e 20 20 20 20 20 20 20 20 20 Data Ascii: ps(cropNames: [THREE_BY_TWO, SIXTEEN_BY_NINE]) {\n name\n renditions {\n url\n height\n width\n
2023-12-05 18:14:10 UTC	894	IN	Data Raw: 27 2c 22 5c 6e 22 5d 29 29 2c 67 2e 61 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 6e 29 7b 76 61 72 20 65 3d 6e 2e 61 72 74 69 63 6c 65 49 64 2c 69 3d 4f 62 6a 65 63 74 28 64 2e 75 73 65 51 75 65 72 79 29 28 4e 2c 7b 76 61 72 69 61 62 6c 65 73 3a 7b 69 64 3a 65 7d 2c 73 73 72 3a 21 31 2c 66 65 74 63 68 50 6f 6c 69 63 79 3a 22 63 61 63 68 65 2d 66 69 72 73 74 22 7d 29 2e 64 61 74 61 2c 6f 3d 4f 62 6a 65 63 74 28 70 2e 75 73 65 54 72 61 63 6b 69 6e 67 29 28 7b 65 76 65 6e 74 3a 22 6d 6f 64 75 6c 65 49 6e 74 65 72 61 63 74 69 6f 6e 22 2c 65 76 65 6e 74 44 61 74 61 3a 7b 74 72 69 67 67 65 72 3a 22 6d 6f 64 75 6c 65 22 2c 74 79 70 65 3a 22 63 6c 69 63 6b 22 7d 2c 6d 6f 64 75 6c 65 3a 7b 6e 61 6d 65 3a 22 66 6f 6f 74 65 72 22 7d 7d 29 2c 72 3d 6f 2e 54 72 61 63 6b Data Ascii: ',"\n"])),g.a);function I(n){var e=n.articleId,i=Object(d.useQuery)(N,{variables:{id:e},ssr:!1,fetchPolicy:"cache-first"}).data,o=Object(p.useTracking)({event:"moduleInteraction",eventData:{trigger:"module",type:"click"},module:{name:"footer"}}),r=o.Track

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50633	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:10 UTC	2220	OUT	GET /vi-assets/static-assets/explainer-840647cd6a37288d70b7.js?_sw-precache=88d375af3d270a097eeb20f13dea8dc7 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:10 UTC	1323	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 33 38 37 35 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 72 65 5f 37 4c 42 72 33 4a 49 6a 38 78 69 55 68 74 51 65 36 6c 6b 2d 75 36 45 52 53 6f 41 5f 66 32 4c 46 36 4a 30 6c 56 51 4b 30 41 61 59 69 2d 6c 4c 54 7a 6a 54 65 74 6b 56 4b 34 47 6e 4d 56 70 74 55 67 41 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 37 39 36 35 38 35 31 30 38 30 33 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 1638757X-GUploader-UploadID: ABPtcPre_7LBr3JIj8xiUhtQe6lk-u6ERSoA_f2LF6J0lVQK0AaYi-lLTzjTetkVK4GnMVptUgAx-goog-generation: 1701796585108033x-goog-metageneration: 1x-goog-stored-content-encoding:
2023-12-05 18:14:10 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 2c 35 2c 38 2c 31 37 2c 32 30 2c 32 31 2c 32 33 2c 36 30 2c 38 31 2c 31 34 34 2c 31 34 35 2c 31 36 33 5d 2c 7b 22 2b 2f 54 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 54 71 52 74 22 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 6f 3b 76 61 72 20 69 3d 61 28 6e 28 22 71 31 74 49 22 29 29 2c 72 3d 28 61 28 6e 28 22 31 37 78 39 22 29 29 2c 61 28 6e 28 22 77 58 43 37 22 29 29 29 3b 66 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[77,5,8,17,20,21,23,60,81,144,145,163],{"+/Tm":function(e,t,n){"use strict";var a=n("TqRt");Object.defineProperty(t,"__esModule",{value:!0}),t.default=o;var i=a(n("q1tI")),r=(a(n("17x9")),a(n("wXC7")));f
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 74 69 6f 6e 22 2c 65 76 65 6e 74 44 61 74 61 3a 7b 74 79 70 65 3a 22 63 6c 69 63 6b 22 7d 2c 6d 6f 64 75 6c 65 3a 7b 6e 61 6d 65 3a 22 68 65 61 64 6c 69 6e 65 2d 6c 69 6e 6b 22 7d 7d 29 7d 7d 2c 76 6f 69 64 20 30 2c 66 29 29 2c 6f 28 29 28 44 65 2c 7b 75 72 6c 3a 72 7d 29 29 2c 70 26 26 6f 28 29 28 70 2c 7b 64 61 74 61 3a 6e 2e 6c 65 64 65 4d 65 64 69 61 2c 6c 65 64 65 3a 21 30 2c 75 73 65 52 65 73 70 6f 6e 73 69 76 65 4d 65 64 69 61 3a 21 30 2c 75 73 65 50 68 6f 74 6f 56 69 65 77 65 72 3a 22 49 6d 61 67 65 42 6c 6f 63 6b 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 2e 6c 65 64 65 4d 65 64 69 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 5f 5f 74 79 70 65 6e 61 6d 65 29 26 26 21 6c 2c 6c 61 7a 79 4c 6f 61 64 3a 21 31 7d 29 29 Data Ascii: tion",eventData:{type:"click"},module:{name:"headline-link"}})}},void 0,f)),o()(De,{url:r})),p&&o()(p,{data:n.ledeMedia,lede:!0,useResponsiveMedia:!0,usePhotoViewer:"ImageBlock"===(null===(t=n.ledeMedia)\|\|void 0===t?void 0:t.__typename)&&!l,lazyLoad:!1}))
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 72 74 2e 62 2c 7b 73 68 61 72 65 3a 6c 2c 73 75 70 70 72 65 73 73 47 69 66 74 41 72 74 69 63 6c 65 54 6f 6f 6c 74 69 70 3a 21 30 7d 29 29 2c 75 26 26 6f 28 29 28 5a 74 2e 61 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 4f 62 6a 65 63 74 28 64 2e 63 78 29 28 73 65 2e 62 2e 6c 61 79 6f 75 74 2e 6e 65 77 73 2c 4c 74 29 2c 64 61 74 61 3a 75 7d 29 2c 6f 28 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 4f 62 6a 65 63 74 28 64 2e 63 78 29 28 73 65 2e 62 2e 6c 61 79 6f 75 74 2e 6e 65 77 73 2c 52 74 29 7d 2c 76 6f 69 64 20 30 2c 61 26 26 6f 28 29 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 4f 62 6a 65 63 74 28 64 2e 63 78 29 28 41 74 2c 4d 74 29 7d 2c 76 6f 69 64 20 30 2c 22 50 75 62 6c 69 73 68 65 64 c2 a0 22 2c 6f 28 29 28 47 74 2e 61 2c 7b 7d 2c Data Ascii: rt.b,{share:l,suppressGiftArticleTooltip:!0})),u&&o()(Zt.a,{className:Object(d.cx)(se.b.layout.news,Lt),data:u}),o()("div",{className:Object(d.cx)(se.b.layout.news,Rt)},void 0,a&&o()("span",{className:Object(d.cx)(At,Mt)},void 0,"Published",o()(Gt.a,{},
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 61 72 79 2c 22 3b 22 2c 72 2e 64 65 66 61 75 6c 74 2e 70 72 69 6e 74 2c 22 3b 22 2c 66 2e 62 79 6c 69 6e 65 54 69 6d 65 73 74 61 6d 70 54 6f 6e 65 46 6e 2c 22 3b 22 2c 66 2e 62 79 6c 69 6e 65 54 69 6d 65 73 74 61 6d 70 53 65 63 74 69 6f 6e 46 6e 2c 22 3b 22 2c 66 2e 62 79 6c 69 6e 65 54 69 6d 65 73 74 61 6d 70 4c 61 6e 67 75 61 67 65 44 69 72 65 63 74 69 6f 6e 46 6e 2c 22 3b 7d 22 29 3b 74 2e 64 65 66 61 75 6c 74 3d 68 7d 2c 22 2b 6c 64 5a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 63 72 65 61 74 65 42 69 6e 64 69 6e 67 7c 7c 28 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d Data Ascii: ary,";",r.default.print,";",f.bylineTimestampToneFn,";",f.bylineTimestampSectionFn,";",f.bylineTimestampLanguageDirectionFn,";}");t.default=h},"+ldZ":function(e,t,n){"use strict";var a=this&&this.__createBinding\|\|(Object.create?function(e,t,n,a){void 0===
2023-12-05 18:14:10 UTC	16384	IN	Data Raw: 20 74 2c 6e 2c 61 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 28 30 2c 6c 2e 74 72 61 63 6b 43 61 72 64 53 74 6f 72 79 45 76 65 6e 74 29 28 64 28 64 28 7b 7d 2c 73 29 2c 7b 7d 2c 7b 6c 61 62 65 6c 3a 22 43 54 41 22 2c 69 64 78 3a 69 2c 63 74 61 55 72 6c 3a 75 2c 63 74 61 55 72 69 3a 63 7d 29 29 2c 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 26 26 6e 75 6c 6c 21 3d 3d 28 74 3d 77 69 6e 64 6f 77 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 77 65 62 6b 69 74 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 77 69 6e 64 6f 77 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 3d 28 61 3d 6e 2e 77 65 62 6b 69 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 3f 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 Data Ascii: t,n,a;e.preventDefault(),(0,l.trackCardStoryEvent)(d(d({},s),{},{label:"CTA",idx:i,ctaUrl:u,ctaUri:c})),window.opener&&null!==(t=window)&&void 0!==t&&t.webkit&&null!==(n=window)&&void 0!==n&&null!==(a=n.webkit)&&void 0!==a&&a.messageHandlers?window.open(
2023-12-05 18:14:11 UTC	16384	IN	Data Raw: 2e 73 65 61 72 63 68 29 2e 74 65 73 74 69 6e 67 26 26 22 70 72 64 22 21 3d 3d 76 69 2e 65 6e 76 2e 45 4e 56 49 52 4f 4e 4d 45 4e 54 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 61 6e 69 6d 61 74 65 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 7b 73 6d 6f 6f 74 68 3a 21 30 2c 64 75 72 61 74 69 6f 6e 3a 74 26 26 30 7d 29 2c 6e 75 6c 6c 21 3d 65 26 26 65 2e 63 75 72 72 65 6e 74 26 26 65 2e 63 75 72 72 65 6e 74 2e 66 6f 63 75 73 28 29 7d 7d 7d 2c 22 30 30 50 6b 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 6d 63 7a 7a 22 29 2c 69 3d 6e 28 22 7a 57 72 49 22 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: .search).testing&&"prd"!==vi.env.ENVIRONMENT},k=function(e,t){return function(){u.animateScroll.scrollTo(0,{smooth:!0,duration:t&&0}),null!=e&&e.current&&e.current.focus()}}},"00Pk":function(e,t,n){"use strict";var a=n("mczz"),i=n("zWrI");t.a=function(e){
2023-12-05 18:14:11 UTC	16384	IN	Data Raw: 29 28 65 2c 70 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 61 70 69 52 65 61 64 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 6d 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 28 30 2c 69 2e 64 65 66 61 75 6c 74 29 28 65 2c 74 2c 6e 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e Data Ascii: )(e,p);return this.state.apiReady&&"function"==typeof t?t(function(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?m(Object(n),!0).forEach((function(t){(0,i.default)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.
2023-12-05 18:14:11 UTC	16384	IN	Data Raw: 2e 46 75 6c 6c 42 6c 65 65 64 4c 61 79 6f 75 74 3a 63 2e 48 61 6c 66 42 6c 65 65 64 4c 61 79 6f 75 74 2c 6e 65 3d 28 30 2c 78 2e 67 65 74 4d 65 64 69 61 41 73 70 65 63 74 52 61 74 69 6f 29 28 7b 63 61 72 64 4c 61 79 6f 75 74 3a 6a 7d 29 3b 43 2e 6c 6f 67 28 22 60 6d 65 64 69 61 41 73 70 65 63 74 52 61 74 69 6f 60 22 2c 6e 65 29 2c 43 2e 6c 6f 67 28 22 60 6d 65 64 69 61 52 65 6e 64 69 74 69 6f 6e 60 22 2c 51 29 3b 76 61 72 20 61 65 3d 42 6f 6f 6c 65 61 6e 28 6e 75 6c 6c 3d 3d 51 3f 76 6f 69 64 20 30 3a 51 2e 75 72 6c 29 3b 43 2e 6c 6f 67 28 22 60 68 61 73 4d 65 64 69 61 60 22 2c 61 65 29 3b 76 61 72 20 69 65 3d 28 30 2c 77 2e 67 65 74 43 6f 6c 6f 72 53 63 68 65 6d 65 29 28 6a 2c 61 65 29 3b 43 2e 6c 6f 67 28 22 60 67 65 74 43 6f 6c 6f 72 53 63 68 65 6d 65 Data Ascii: .FullBleedLayout:c.HalfBleedLayout,ne=(0,x.getMediaAspectRatio)({cardLayout:j});C.log("`mediaAspectRatio`",ne),C.log("`mediaRendition`",Q);var ae=Boolean(null==Q?void 0:Q.url);C.log("`hasMedia`",ae);var ie=(0,w.getColorScheme)(j,ae);C.log("`getColorScheme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50634	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:10 UTC	2230	OUT	GET /vi-assets/static-assets/explainerPostHeader-84cccfb808d63a765b91.js?_sw-precache=f8012aa4ec71c0ff55101a6c9b2785bc HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:11 UTC	1335	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 37 31 37 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 71 42 39 41 6f 78 51 63 57 34 5f 33 4c 69 35 39 58 65 47 39 2d 66 4b 59 64 31 4c 68 62 32 66 7a 59 54 71 6f 61 52 4b 4a 4a 41 64 43 4f 51 52 6f 42 4b 65 77 6f 53 5a 6b 47 37 33 5a 31 32 49 4a 49 70 4a 4c 67 71 42 61 79 56 6f 67 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 32 39 37 33 31 37 34 38 35 30 30 33 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4717X-GUploader-UploadID: ABPtcPqB9AoxQcW4_3Li59XeG9-fKYd1Lhb2fzYTqoaRKJJAdCOQRoBKewoSZkG73Z12IJIpJLgqBayVogx-goog-generation: 1701297317485003x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:11 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:11 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 38 5d 2c 7b 22 30 44 47 71 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 29 2c 6e 2e 64 28 65 2c 22 66 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 29 2c 6e 2e 64 28 65 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 29 2c 6e 2e 64 28 65 2c 22 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[78],{"0DGq":function(t,e,n){"use strict";n.d(e,"d",(function(){return s})),n.d(e,"f",(function(){return c})),n.d(e,"b",(function(){return d})),n.d(e,"c",(function(){return l})),n.d(e,"a",(function(){ret
2023-12-05 18:14:11 UTC	1379	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 3b 7d 22 29 7d 2c 4d 7a 38 52 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 67 63 52 2f 22 29 2c 6f 3d 6e 2e 6e 28 61 29 2c 69 3d 28 6e 28 22 71 31 74 49 22 29 2c 6e 28 22 4a 71 70 39 22 29 29 2c 72 3d 6e 28 22 66 70 65 63 22 29 2c 73 3d 6e 2e 6e 28 72 29 2c 63 3d 6e 28 22 58 6c 63 43 22 29 2c 64 3d 6e 2e 6e 28 63 29 2c 6c 3d 6e 28 22 61 59 32 66 22 29 2c 75 3d 6e 2e 6e 28 6c 29 2c 70 3d 6e 28 22 48 4d 6a 49 22 29 2c 66 3d 6e 2e 6e 28 70 29 2c 6d 3d Data Ascii: argin-left:20px;margin-right:20px;}")},Mz8R:function(t,e,n){"use strict";n.r(e),n.d(e,"default",(function(){return C}));var a=n("gcR/"),o=n.n(a),i=(n("q1tI"),n("Jqp9")),r=n("fpec"),s=n.n(r),c=n("XlcC"),d=n.n(c),l=n("aY2f"),u=n.n(l),p=n("HMjI"),f=n.n(p),m=
2023-12-05 18:14:11 UTC	1379	IN	Data Raw: 2c 76 6f 69 64 20 30 2c 6f 28 29 28 76 2e 62 2c 7b 73 68 61 72 65 3a 65 2c 73 75 70 70 72 65 73 73 47 69 66 74 41 72 74 69 63 6c 65 54 6f 6f 6c 74 69 70 3a 21 30 7d 29 29 2c 62 26 26 6f 28 29 28 62 2c 7b 64 61 74 61 3a 6c 2c 6c 65 64 65 3a 21 30 2c 75 73 65 52 65 73 70 6f 6e 73 69 76 65 4d 65 64 69 61 3a 21 30 2c 75 73 65 50 68 6f 74 6f 56 69 65 77 65 72 3a 22 49 6d 61 67 65 42 6c 6f 63 6b 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 5f 5f 74 79 70 65 6e 61 6d 65 29 2c 6c 61 7a 79 4c 6f 61 64 3a 21 31 7d 29 2c 6f 28 29 28 66 2e 61 2c 7b 64 61 74 61 3a 67 2c 68 65 61 64 73 68 6f 74 73 3a 6e 75 6c 6c 3d 3d 67 3f 76 6f 69 64 20 30 3a 67 2e 68 65 61 64 73 68 6f 74 73 2c 63 6c 61 73 73 4e 61 6d 65 3a 4f 62 6a 65 63 74 28 69 2e 63 78 29 28 Data Ascii: ,void 0,o()(v.b,{share:e,suppressGiftArticleTooltip:!0})),b&&o()(b,{data:l,lede:!0,useResponsiveMedia:!0,usePhotoViewer:"ImageBlock"===(null==l?void 0:l.__typename),lazyLoad:!1}),o()(f.a,{data:g,headshots:null==g?void 0:g.headshots,className:Object(i.cx)(
2023-12-05 18:14:11 UTC	580	IN	Data Raw: 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 7d 22 29 7d 2c 7a 76 51 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 29 3b 76 61 72 20 61 3d 6e 28 22 36 71 76 44 22 29 2c 6f 3d 6e 28 22 74 37 76 67 22 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 62 79 6c 69 6e 65 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 62 79 6c 69 6e 65 73 2c 69 3d 65 2e 68 69 64 65 48 65 61 64 73 68 6f 74 73 2c 72 3d 65 2e 72 6f 6c 65 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 7c 7c 21 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 73 3d 28 6e 7c 7c 5b 5d 29 2e Data Ascii: rgin-right:auto;}")},zvQs:function(t,e,n){"use strict";n.d(e,"a",(function(){return i}));var a=n("6qvD"),o=n("t7vg"),i=function(t){var e=t.byline;if(!e)return null;var n=e.bylines,i=e.hideHeadshots,r=e.role;if(null==n\|\|!n.length)return null;var s=(n\|\|[]).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50635	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-05 18:14:10 UTC	2233	OUT	GET /vi-assets/static-assets/explainerRecirculation-fe1c664baad09eb4ef77.js?_sw-precache=31f25b4a17f94dc48c70b5b456728bd3 HTTP/1.1 Host: www.nytimes.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nytimes.com/vi-assets/static-assets/service-worker-test-1701795880486.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nyt-a=XbK7A_KO3s8XVA_FdXv5zD; nyt-gdpr=0; nyt-purr=cfhhcfhhhckfhdfsh; nyt-us=1; nyt-geo=US; purr-cache=<K0<r<C_<G_<S0<a0<ua<T0; b2b_cig_opt=%7B%22isCorpUser%22%3Afalse%7D; edu_cig_opt=%7B%22isEduUser%22%3Afalse%7D; _gcl_au=1.1.630778921.1701800009; _cb=DrMis-D7EHvcW-4Z2; _cb_svref=null; _v__chartbeat3=klOrWDxbmHwDhoapt; iter_id=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhaWQiOiI2NTZmNjg1M2I1YzU1YTAwMDExZGU5YzIiLCJjb21wYW55X2lkIjoiNWMwOThiM2QxNjU0YzEwMDAxMmM2OGY5IiwiaWF0IjoxNzAxODAwMDE5fQ.7-ahPkCsvOHcDxbwKvwCCS7iZYbXbDXzaC7PPx9e5hg; __gads=ID=36bc5e8533adab59:T=1701800026:RT=1701800026:S=ALNI_MYbFyH4BQO1l0iWHTPDWKJ95Qatgw; __gpi=UID=00000da63dc47ce1:T=1701800026:RT=1701800026:S=ALNI_MaQsi1wjDEaAdieusRsU-XsVZfqZw; nyt.et.dd=iv=8BA6C023F515495383B9D3102CB3895A&val=AUxLLM59oggYFIoewAucI7I2R66jeZud25ruqNnmyDlwB+m7x+hVJl6N9zEWMz1iHoKQfgYI9RkcNJp/ZSBLchJcHkw7BPywRnBLKnZvtAJJ3M2Eep/BwNDckkBnScExVcx7Vl6HIcSied4Ae88Ox/MWdvhkW0VwwofPqEr3Y5MGTiYVGvloGjWIPtVqHSyD2/Q6xsfy79PoMYmmuFS1Eg==; nyt-b3-traceid=9d56e347699345a3acadff4093421841; _chartbeat2=.1701800009715.1701800042574.1.D5erOUC2Vt0AD2aBx_D1T42anGQx1.3; datadome=sRqre9CVOvYF57z0ibvPixMpYgDjNTVwNlkvpm4X~YIut5FeXD_BuJ6SLuJ9JLgB2fwYDY2KhfmR57AFd0nzaCW1gTwfz2EO75Y~Oha9IQA3cI3xtd9K1t7wjCDWnYmk; nyt-jkidd=uid=0&lastRequest=1701800044447&activeDays=%5B0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C1%5D&adv=1&a7dv=1&a14dv=1&a21dv=1&lastKnownType=anon&newsStartDate=&entitlements=; RT="z=1&dm=nytimes.com&si=7204c402-a166-4c90-81b3-1cf424d75496&ss=lpsnsnoh&sl=2&tt=8r4&bcn=%2F%2F173bf110.akstat.io%2F&ld=flk"; _dd_s=rum=0&expire=1701800948299
2023-12-05 18:14:11 UTC	1338	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 31 37 39 0d 0a 58 2d 47 55 70 6c 6f 61 64 65 72 2d 55 70 6c 6f 61 64 49 44 3a 20 41 42 50 74 63 50 70 77 78 38 34 5a 42 38 43 79 69 78 69 38 70 69 71 6f 70 33 31 32 38 6a 34 5f 65 65 41 44 65 44 68 52 4d 35 50 42 77 4f 46 45 59 45 48 7a 43 62 39 61 7a 73 4b 43 32 35 5f 37 4c 39 67 4b 34 4d 43 30 70 33 74 44 30 6b 5a 5f 41 77 0d 0a 78 2d 67 6f 6f 67 2d 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 37 30 31 33 36 39 37 33 34 38 30 35 32 32 36 0d 0a 78 2d 67 6f 6f 67 2d 6d 65 74 61 67 65 6e 65 72 61 74 69 6f 6e 3a 20 31 0d 0a 78 2d 67 6f 6f 67 2d 73 74 6f 72 65 64 2d 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 Data Ascii: HTTP/1.1 200 OKConnection: closeContent-Length: 4179X-GUploader-UploadID: ABPtcPpwx84ZB8Cyixi8piqop3128j4_eeADeDhRM5PBwOFEYEHzCb9azsKC25_7L9gK4MC0p3tD0kZ_Awx-goog-generation: 1701369734805226x-goog-metageneration: 1x-goog-stored-content-encodi
2023-12-05 18:14:11 UTC	568	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 3b 20 73 63 72 69 70 74 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 3b 20 73 74 79 6c 65 2d 73 72 63 20 64 61 74 61 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 20 68 74 74 70 73 3a 20 62 6c 6f 62 3a 20 61 6e 64 72 6f 69 64 2d 77 65 62 76 69 65 77 2d 76 69 64 Data Ascii: Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob:; style-src data: 'unsafe-inline' https:; img-src data: https: blob: android-webview-vid
2023-12-05 18:14:11 UTC	1379	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 5d 2c 7b 42 33 35 69 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 22 65 78 70 6c 61 69 6e 65 72 52 65 63 69 72 63 51 75 65 72 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 29 29 3b 76 61 72 20 74 2c 6f 2c 6c 2c 61 3d 69 28 22 67 63 52 2f 22 29 2c 72 3d 69 2e 6e 28 61 29 2c 63 3d 69 28 22 56 6b 41 4e 22 29 2c 73 3d 69 2e 6e 28 63 29 2c 64 3d 69 28 22 65 46 63 2b 22 29 2c 75 3d 69 2e 6e 28 64 29 2c 66 3d 28 69 28 22 71 31 74 49 22 29 2c 69 28 22 4a 71 70 39 22 29 29 2c 70 3d 69 28 22 4b Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[79],{B35i:function(n,e,i){"use strict";i.r(e),i.d(e,"explainerRecircQuery",(function(){return R}));var t,o,l,a=i("gcR/"),r=i.n(a),c=i("VkAN"),s=i.n(c),d=i("eFc+"),u=i.n(d),f=(i("q1tI"),i("Jqp9")),p=i("K
2023-12-05 18:14:11 UTC	1379	IN	Data Raw: 6e 74 65 6e 63 65 5c 6e 20 20 20 20 7d 5c 6e 20 20 20 20 66 69 72 73 74 50 75 62 6c 69 73 68 65 64 5c 6e 20 20 20 20 6c 61 73 74 4d 6f 64 69 66 69 65 64 5c 6e 20 20 20 20 73 6f 75 72 63 65 49 64 5c 6e 20 20 20 20 75 72 6c 5c 6e 20 20 7d 5c 6e 22 5d 29 29 29 2c 52 3d 75 28 29 28 6f 7c 7c 28 6f 3d 73 28 29 28 5b 22 5c 6e 20 20 71 75 65 72 79 20 45 78 70 6c 61 69 6e 65 72 52 65 63 69 72 63 75 6c 61 74 69 6f 6e 28 24 63 6f 6c 6c 65 63 74 69 6f 6e 55 72 6c 3a 20 53 74 72 69 6e 67 21 2c 20 24 70 6f 73 74 4c 69 6d 69 74 3a 20 49 6e 74 21 29 20 7b 5c 6e 20 20 20 20 65 78 70 6c 61 69 6e 65 72 41 73 73 65 74 3a 20 61 6e 79 57 6f 72 6b 28 69 64 3a 20 24 63 6f 6c 6c 65 63 74 69 6f 6e 55 72 6c 29 20 7b 5c 6e 20 20 20 20 20 20 2e 2e 2e 20 6f 6e 20 50 75 62 6c 69 73 68 Data Ascii: ntence\n }\n firstPublished\n lastModified\n sourceId\n url\n }\n"]))),R=u()(o\|\|(o=s()(["\n query ExplainerRecirculation($collectionUrl: String!, $postLimit: Int!) {\n explainerAsset: anyWork(id: $collectionUrl) {\n ... on Publish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50637	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50636	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50638	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50639	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50640	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50641	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50642	151.101.129.164	443	5816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
715	192.168.2.4	50643	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
716	192.168.2.4	50644	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
717	192.168.2.4	50645	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
718	192.168.2.4	50647	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
719	192.168.2.4	50648	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
720	192.168.2.4	50646	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
721	192.168.2.4	50649	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
722	192.168.2.4	50651	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
723	192.168.2.4	50650	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
724	192.168.2.4	50652	18.67.65.51	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
725	192.168.2.4	50653	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
726	192.168.2.4	50654	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
727	192.168.2.4	50656	18.67.65.51	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
728	192.168.2.4	50655	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
729	192.168.2.4	50657	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
730	192.168.2.4	50658	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
731	192.168.2.4	50659	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
732	192.168.2.4	50661	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
733	192.168.2.4	50660	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
734	192.168.2.4	50662	151.101.129.164	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	19:12:46
Start date:	05/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:12:48
Start date:	05/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:12:50
Start date:	05/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nope.theworkpc.com
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	19:13:29
Start date:	05/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4124 --field-trial-handle=2088,i,10325419957793510845,9357083185666406729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://nope.theworkpc.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 389

Chrome Cache Entry: 390

Chrome Cache Entry: 391

Chrome Cache Entry: 392

Chrome Cache Entry: 393

Chrome Cache Entry: 394

Chrome Cache Entry: 395

Chrome Cache Entry: 396

Chrome Cache Entry: 397

Chrome Cache Entry: 398

Chrome Cache Entry: 399

Chrome Cache Entry: 400

Chrome Cache Entry: 401

Chrome Cache Entry: 402

Chrome Cache Entry: 403

Chrome Cache Entry: 404

Chrome Cache Entry: 405

Chrome Cache Entry: 406

Chrome Cache Entry: 407

Chrome Cache Entry: 408

Chrome Cache Entry: 409

Chrome Cache Entry: 410

Chrome Cache Entry: 411

Chrome Cache Entry: 412

Chrome Cache Entry: 413

Chrome Cache Entry: 414

Chrome Cache Entry: 415

Chrome Cache Entry: 416

Chrome Cache Entry: 417

Windows Analysis Report
http://nope.theworkpc.com