{"report_id":"3aa9362f-8185-455d-8ad9-488322ddcbde","version":6,"status":"done","tags":[],"date":"2026-03-28T18:32:28Z","url":{"schema":"http","addr":"fasoud.com","fqdn":"fasoud.com","domain":"fasoud.com","tld":"com"},"ip":{"addr":"81.95.5.153","port":0,"asn":201011,"as":"Core-Backbone GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"fasoud.com/","fqdn":"fasoud.com","domain":"fasoud.com","tld":"com"},"title":"Home | fasoud.com","dom":{"size":37557,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (319)","md5":"94385083598ff3c766ec570992892186","sha1":"22ee980d55dca2709fc0479865d48997f03bb963","sha256":"811f20b71b4d0d5df92361e0a22282413087b4d67fb245f668205fa8f9adbf77","sha512":"ac3483d63993802a4a5248502ff374e8129af51a7b798fa1a3b60df4cd83df9ae43dbba4ee4cab29d9af8e2224ea2fd5e1ba708f353269bea8a557c5354bb40f","ssdeep":"768:8pDZ7GKY8TovKrnX24NvJCt145p/iUR5DFDmUWD8G4et6B1Cy4qyKEjyru:G5YhCrnX1NvJx5p/iUR5DFDmbD8G4E6i","tlshash":"06f2416258f65b731643c1c06da07b69ff42aa1bcdda4629babc16dc1f42cf3c513898","dom_hash":"domhasha451ea91a0222eab57415624eb621c78","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fasoud.com","fqdn":"fasoud.com","domain":"fasoud.com","tld":"com"},"ip":{"addr":"81.95.5.153","port":0,"asn":201011,"as":"Core-Backbone GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T18:32:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static01.nyt.com","ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1994-10-26","domain_rank":23369,"first_seen":"2014-01-09T18:53:22Z","last_seen":"2026-03-23T20:19:17.926318Z","alert_count":0,"request_count":23,"received_data":12667954,"sent_data":11887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":3,"received_data":81061,"sent_data":1586,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fasoud.com","ip":{"addr":"81.95.5.153","port":443,"asn":201011,"as":"Core-Backbone GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":67843,"sent_data":1711,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":4770,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-03-23T10:06:02.309414Z","alert_count":0,"request_count":1,"received_data":14471,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/25/multimedia/25cli-schumer-cpfb/25cli-schumer-cpfb-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/25/multimedia/25cli-schumer-cpfb/25cli-schumer-cpfb-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG3DBSb7JCjvpi1r_eWJca6btV_imTE0cdrn3cjdWbRS7P3wqOq6Er-kyHggXkblq0RUAZQA2n2nyiihWw\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Thu, 26 Mar 2026 01:10:56 GMT\r\nlast-modified: Thu, 26 Mar 2026 01:10:04 GMT\r\netag: \"bedb50e0cdd659f7ab5174e25cc03535\"\r\nx-goog-generation: 1774487404014400\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 590204\r\nx-goog-hash: crc32c=KWvAvQ==, md5=vttQ4M3WWferUXTiXMA1NQ==\r\nx-amz-checksum-crc32c: KWvAvQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 235270\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100131-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 93, 0\r\nx-timer: S1774722727.136138,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 590204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":590204,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1801, components 3","md5":"bedb50e0cdd659f7ab5174e25cc03535","sha1":"1e346564bcf3ddea42a84d73b9636a14953b5c5c","sha256":"7a135836a7fae56c3706bc8b8e4f0441e901e7b0f28c56bac465ff7b5d9885ed","sha512":"be85c584cc1c284d9f41b46d75e38c65944dde1c5bdff18951a7248af88c4fa3d285be5ed1e7f143c6f47d6b687b4ce368336b9853775636a88a6a6dc5e2868d","ssdeep":"12288:bQIf4I+Dji7ZPCcAtHu5WkvagIje2+nDtUOOStkhHZD2u58aXr:bQIfb+wVARX84uUitkh5i+vr","tlshash":"95c4233645dc4499e6be4c3e82b4f1e0a10727244f023d27e905cbb953d5eb0a9fe9da","first_seen":"2026-03-28T18:32:47.475919Z","last_seen":"2026-04-08T03:58:07.170782Z","times_seen":4,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":62,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:08.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fasoud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 11:38:32 GMT\r\nexpires: Fri, 26 Mar 2027 11:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:18 GMT\r\ncontent-type: font/woff2\r\nage: 197616\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23236, version 1.0","md5":"716309aab2bca045f9627f63ad79d0bf","sha1":"38804233a29aaf975d557fe14e762c627bef76e0","sha256":"115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429","sha512":"adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15","ssdeep":"384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK","tlshash":"8aa2e10a0b99e00ff53655ba7504daa0b1c554b9c3ed69a2a12115c7b4eeecbf83138e","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-06-13T22:41:21.742198Z","times_seen":50101,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":109,"dns":1,"connect":15,"send":0,"wait":16,"receive":5,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fasoud.com/assets/ayt/css/main.css","fqdn":"fasoud.com","domain":"fasoud.com","tld":"com"},"ip":{"addr":"81.95.5.153","port":443,"asn":201011,"as":"Core-Backbone GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fasoud.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 10:47:10 GMT","end":"Mon, 22 Jun 2026 10:47:09 GMT"},"fingerprint":{"sha1":"0D:A7:EE:AE:DE:40:2F:85:C9:9E:47:C4:17:A5:58:93:7D:16:C9:BF","sha256":"38:4E:43:7F:EC:75:9E:78:19:29:7B:76:7D:01:65:59:65:15:09:8C:1C:9A:5A:6F:1A:FA:6D:DD:7D:88:5F:E1"}}},"request":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 18:32:07 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 27 Oct 2024 18:07:17 GMT\r\nETag: \"112a5-6257938f4a062-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 9799\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T23:33:40.035239Z","times_seen":16398047,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/24HS-moon-base-fhjw/24HS-moon-base-fhjw-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/24HS-moon-base-fhjw/24HS-moon-base-fhjw-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG1jhT2-c7VSrTsVc93ZhgIlHTeQDp8fkRqTtMQZqqfH2nvxUnkwXbL5P24ICEv-IWF6oTGR8w4\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Tue, 24 Mar 2026 14:13:17 GMT\r\nlast-modified: Tue, 24 Mar 2026 14:12:47 GMT\r\netag: \"5bf9b7f3dea8be7d326116ee9a3943b5\"\r\nx-goog-generation: 1774361567916023\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 548575\r\nx-goog-hash: crc32c=9ArERA==, md5=W/m3896ovn0yYRbumjlDtQ==\r\nx-amz-checksum-crc32c: 9ArERA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 361129\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kcgs7200140-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 111, 0\r\nx-timer: S1774722727.129028,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 548575\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":548575,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"5bf9b7f3dea8be7d326116ee9a3943b5","sha1":"5d417da7bcdfe4abb81e856f925a3b83084de64b","sha256":"73611b9c83a47c17deeb4566c9164f50e1c274d8802ae5ad83527ddde944902e","sha512":"a418822ed325eb626adf6aa3f9e0e1aa708f4cd4d8c039a43695a114ee227bc7e8c4a867f999034053a1d04a1b831b530daf78e4cc0d4f87f4f306e210aa2c22","ssdeep":"12288:MDUGadEVxF+PXmPW03s3kHtpNS9ggc+DxRBsV/NAlUE:MD8dEVCPXmPW083kNu9ggc+Rao2E","tlshash":"20c423bfa0d85d77c9ba47bf0391fd0114781f322aa406dc5dfa9547a7607e499230a3","first_seen":"2026-03-28T18:32:47.482071Z","last_seen":"2026-03-28T18:32:47.482071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":32,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/27/multimedia/27cli-JAPAN-US-MINING-01-pgkw/27cli-JAPAN-US-MINING-01-pgkw-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/27/multimedia/27cli-JAPAN-US-MINING-01-pgkw/27cli-JAPAN-US-MINING-01-pgkw-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG1NGYpbzbEVPbCmB1kIQNVxJ70ySoI7e0G35V3qYfqwfI3Q3lyrObnnk1usVEYMfgBwHLA7AVI\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Fri, 27 Mar 2026 16:20:07 GMT\r\nlast-modified: Fri, 27 Mar 2026 16:19:20 GMT\r\netag: \"dedf5b01b29ae0bc781ee509d8a71a6d\"\r\nx-goog-generation: 1774628360381038\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 508067\r\nx-goog-hash: crc32c=FE3tvw==, md5=3t9bAbKa4Lx4HuUJ2KcabQ==\r\nx-amz-checksum-crc32c: FE3tvw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 94320\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100086-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 78, 0\r\nx-timer: S1774722727.136449,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 508067\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1798, components 3","md5":"dedf5b01b29ae0bc781ee509d8a71a6d","sha1":"b17f3f3308af0ae5e3d46f5788cc6a6d01603eb8","sha256":"16f64555a3e82c0b340b27f30bd26fee485107e613f28fe3f0a310d4fab0db2e","sha512":"7fc4709d49828a802c67af064f18f7ad53e3529128d10e132d45091908e5aebf3dee21f18da9e0f1932d9515d89aba3899734e43a5939a57173752653ff8c500","ssdeep":"12288:mO8S+3HmnyaKIddm0SbpE7zb5KGucVrZGaY6tWeDeQBfPtjtu:m8+3mnyZdtsXtztMQ9i","tlshash":"41b4238c2558b61ad6fec63c6edbff4df3b700a66182f3f2c14a5ab462c441c38a9114","first_seen":"2026-03-28T18:32:47.484736Z","last_seen":"2026-04-08T03:58:07.163878Z","times_seen":4,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":64,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/22/multimedia/22nat-meteor-hunt1-vqbg/22nat-meteor-hunt1-vqbg-mediumSquareAt3X-v2.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/22/multimedia/22nat-meteor-hunt1-vqbg/22nat-meteor-hunt1-vqbg-mediumSquareAt3X-v2.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG3LpWpEdG9iT1Lm5SGeV9TZqAmHflj4kWtaNnDDMflywABCAgYGSCHE-bhCn_LcBCSUvqy6jCg\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Fri, 27 Mar 2026 19:48:03 GMT\r\nlast-modified: Fri, 27 Mar 2026 19:45:17 GMT\r\netag: \"92750d042bec1fad6343ef60e2de959f\"\r\nx-goog-generation: 1774640717545822\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 476054\r\nx-goog-hash: crc32c=/2hz5Q==, md5=knUNBCvsH61jQ+9g4t6Vnw==\r\nx-amz-checksum-crc32c: /2hz5Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 81844\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100057-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, MISS\r\nx-cache-hits: 267, 0\r\nx-timer: S1774722727.136101,VS0,VE122\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-MISS\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 476054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":476054,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1801, components 3","md5":"92750d042bec1fad6343ef60e2de959f","sha1":"7e4c2d2e35005f79c396c23fd3742d1d252e0994","sha256":"b38ed69172ae3aee6253bf85363813492f92b682dcedcf63682fec2d842b085c","sha512":"0ec8bead41f9bfd382958cbcbea781f3058b8c49d92387f537e5468defd88c910c5716da52da65e982a055426400285a5955472ff4ca38a535de4ef27bd212f6","ssdeep":"12288:goZHnMN9dVONR8Z06wSbuWZAOBPpEGOftWct2Z:g8HMNlONPSq36xM1A","tlshash":"62a412fbfa763b2ac81b1b345a939504a9c1431a0c87fe85dd410778b21de49e74cbad","first_seen":"2026-03-28T18:32:47.487984Z","last_seen":"2026-03-28T18:32:47.487984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":445,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fasoud.com/assets/ayt/css/font-awesome.min.css","fqdn":"fasoud.com","domain":"fasoud.com","tld":"com"},"ip":{"addr":"81.95.5.153","port":443,"asn":201011,"as":"Core-Backbone GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fasoud.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 10:47:10 GMT","end":"Mon, 22 Jun 2026 10:47:09 GMT"},"fingerprint":{"sha1":"0D:A7:EE:AE:DE:40:2F:85:C9:9E:47:C4:17:A5:58:93:7D:16:C9:BF","sha256":"38:4E:43:7F:EC:75:9E:78:19:29:7B:76:7D:01:65:59:65:15:09:8C:1C:9A:5A:6F:1A:FA:6D:DD:7D:88:5F:E1"}}},"request":{"raw":"GET /assets/ayt/css/font-awesome.min.css HTTP/1.1\r\nHost: fasoud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/assets/ayt/css/main.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 18:32:07 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 27 Oct 2024 17:44:18 GMT\r\nETag: \"7187-62578e6cbb38b-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 6666\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"4083f5d376eb849a458cc790b53ba080","sha1":"fb5b49426dee7f1508500e698d1b3c6b04c8fcce","sha256":"008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420","sha512":"e2e1991e96c3962371880bff43364da3fc9bd85b405feaa20dbef2a415a211d2505fc3ee829f0cea297949190df2342b0cb5ac877aeb3c349745fdc3c0560cea","ssdeep":"384:Uu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:flr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"a4d250e8e54c01d66731c48bff81b36862b6f73dd5844d99f01f690c29d22a522c5fba","first_seen":"2023-04-05T09:56:39Z","last_seen":"2026-06-13T21:32:31.780477Z","times_seen":19836,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,400,700|Pacifico","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css?family=Lato:300,400,700|Pacifico HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Mar 2026 18:32:08 GMT\r\ndate: Sat, 28 Mar 2026 18:32:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4084,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e5cd5a89af8859da18c51fe9365a7f2","sha1":"b1ecfbf1b9551bf5c03c4bfe41c164d3e9f68c4e","sha256":"f96d5ec53d16e8a8d05d6c8e51fcf19088c246616dc239b3ed8aea70b59ed9b2","sha512":"654ed22bd1d3105bc66f0686ec2e0216dcc854863822b11bce7ff4afa22b7e09dde7726f97577af2c295db358a72dcaa87b18c04617168819fca393d70b8e4b9","ssdeep":"","tlshash":"2081ed91056be80497931cc223ce7e32ef4fa28064459935afff18d8bca7d669361b0d","first_seen":"2025-09-23T15:56:44.440457Z","last_seen":"2026-06-07T04:20:52.049422Z","times_seen":173,"resource_available":false,"data":null}},"time_used":2339,"timings":{"blocked":1151,"dns":2,"connect":16,"send":0,"wait":36,"receive":0,"ssl":1130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/1/14/No_Image_Available.jpg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/1/14/No_Image_Available.jpg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 12:25:42 GMT\r\netag: ae6dd4fa8eb7c9ddb11f686075038ec4\r\nserver: ATS/9.2.11\r\ncontent-type: image/jpeg\r\nx-object-meta-sha1base36: 44nv3ctnqav63txhydbj3sa68yq7lm2\r\nlast-modified: Sun, 13 Sep 2020 09:59:31 GMT\r\ncontent-length: 13161\r\nage: 21984\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/66\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=2MK0JCO4l_X8n-i87Lv5EwMxAAAAAFvdGHvD1jVk27cWZBTxWl7m2ZYheyvtWEAy;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sun, 28 Mar 2027 00:00:00 GMT\r\nx-request-id: f246afed-df4c-47f1-94e1-5564626f84dd\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":13161,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 547x547, components 3","md5":"ae6dd4fa8eb7c9ddb11f686075038ec4","sha1":"235a25ef7d1396bb5a8aa98465aaed75fdc18b2a","sha256":"8d923bfec460d4691440303e41819f76f414fab351f919ae42e6cbd102c8400f","sha512":"bff69601156fc0d175437c37d6cad98516d6626b7aef86ce23a17a842556f44c88fd978f1ab7e3ab6de76307d7ae524f75678b88adb896303a5bc78938637c3d","ssdeep":"192:Wu/32X1DdUHnAoN9Mztidp4rH+ZwcxFO3EUqxtLIJUXcjFjAajQf:x/3bHnxN9MBidpu+ZwQftLIeDajQf","tlshash":"f442d9079c1d4692f62843b8fd122e6c7a49164dfd837bfe04724eca2e685324c9e47b","first_seen":"2024-12-01T22:04:37.305681Z","last_seen":"2026-06-07T04:20:52.053706Z","times_seen":214,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":43,"dns":0,"connect":17,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/26/multimedia/26HS-tb-volcano-zbvl/26HS-tb-volcano-zbvl-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/26/multimedia/26HS-tb-volcano-zbvl/26HS-tb-volcano-zbvl-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG2Hk4LkoFWxjVhHrDALZ4pLSgFoUKaDybzwRObtAqLhxKOhJSS6dr9a8XDT4JJc-242\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Thu, 26 Mar 2026 14:18:40 GMT\r\nlast-modified: Thu, 26 Mar 2026 14:17:27 GMT\r\netag: \"68148305878475232ec6c1b15ba8e27a\"\r\nx-goog-generation: 1774534647044969\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 688890\r\nx-goog-hash: crc32c=ktIPgA==, md5=aBSDBYeEdSMuxsGxW6jieg==\r\nx-amz-checksum-crc32c: ktIPgA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 188007\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kcgs7200107-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 15, 0\r\nx-timer: S1774722727.136061,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 688890\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":688890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"68148305878475232ec6c1b15ba8e27a","sha1":"e3edbeb16f767f96f089585ff4da407d5557862d","sha256":"492448988559eae0dcdb95ce94fb15a88d489c792812822d54f08f5137717627","sha512":"0ffafca1183aa23dfd0c9e970c2020a0e408eefa6db996c8647df30e93c4c4e1a205719415a935c44d3ff329c351154c04f66a1bacf8935b287d9a8b66351b11","ssdeep":"12288:z+I5SvIaDgk6ytv5C2qr7HdIoYjw08+z2/dZsI2Gu1a78TnWaXsqTPt:lSv7vDtv5gOjw08DEFT145GTV","tlshash":"17e423b24668b466ef6dce6d1a9a3023a0d08d625f76c771fdf02b02d2752c58b8b14d","first_seen":"2026-03-28T18:32:47.493311Z","last_seen":"2026-03-28T18:32:47.493311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":65,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/24HS-TB-GRAPES-wmpz/24HS-TB-GRAPES-wmpz-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/24HS-TB-GRAPES-wmpz/24HS-TB-GRAPES-wmpz-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG2hkNkUujOXf-dZnGIEFXQpuBr_Qu3u1YmMzgLA2SHav_R3O_D9z0PaEhgqochTqSQ\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Tue, 24 Mar 2026 16:00:32 GMT\r\nlast-modified: Tue, 24 Mar 2026 16:00:04 GMT\r\netag: \"d956c7dfaf20261f87e5cedcbc458ff6\"\r\nx-goog-generation: 1774368004181622\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 588230\r\nx-goog-hash: crc32c=cPhIaQ==, md5=2VbH368gJh+H5c7cvEWP9g==\r\nx-amz-checksum-crc32c: cPhIaQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 354695\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kiad7000132-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 51, 0\r\nx-timer: S1774722727.129300,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 588230\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":588230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"d956c7dfaf20261f87e5cedcbc458ff6","sha1":"c33178fc41c58d3641efc199f7386ca0ca2e8054","sha256":"c196baf6a9594ec0fce3d240918b0ad597c191689fe3752c7df18584044703fd","sha512":"a501772398c35abab8f85213e616fd4c70d0c7d1421d60cd1dcca49da92047d00f263d94d81ecf472188fa0c342dbd4d906a62ff597d0307c68ddac01f859922","ssdeep":"12288:4f2cV8Y8hFnUY7FEJpWwz59KH3FdB/8abjNFSlzAN/fU4X7YW:K0UMGZV9a7Z84SQU4Xf","tlshash":"0fc4236a7f156faae2b7b636a488966cbcb615c7f7c900ac0bf492771f0014337b1464","first_seen":"2026-03-28T18:32:47.495716Z","last_seen":"2026-03-28T18:32:47.495716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":63,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/00HS-food-ingredients-pbcj/00HS-food-ingredients-pbcj-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/00HS-food-ingredients-pbcj/00HS-food-ingredients-pbcj-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG2t1OKOYBHPx_yucMW6SMg4GaSzD30deA4aGbcPGFqFwe4N9K2KmeEMoE7TayT5h1dlyyPjseM\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Fri, 27 Mar 2026 09:03:16 GMT\r\nlast-modified: Fri, 27 Mar 2026 09:02:12 GMT\r\netag: \"1f2e3347052febc3d5906269ceea69fb\"\r\nx-goog-generation: 1774602132207304\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 278835\r\nx-goog-hash: crc32c=A0vdyA==, md5=Hy4zRwUv68PVkGJpzupp+w==\r\nx-amz-checksum-crc32c: A0vdyA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 120531\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kcgs7200129-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 56, 0\r\nx-timer: S1774722727.137024,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 278835\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"1f2e3347052febc3d5906269ceea69fb","sha1":"67854d48b322b03e7a7b6a5260958c6aa7507763","sha256":"bdc5724ef384ad0bee607244ae935931440c10297d60e46c773b647828e9ab6f","sha512":"3a61da39394fb1c84ccd8c3b35a61a966669e5c0150ba28a74b216267bf8af6043d52dfa8eba6a521b83b8e3f4eee9874c54dc2d36fe72a8c83e889ce349c4ac","ssdeep":"6144:pKS3hgtxZzyDpntpJGqttYDr3Zqc4UfefSxnrGl:pVhgtxNepttcZVr9Gl","tlshash":"f154233dcf79f372fa22cd7289a18a1f02ebd60d550a0d9ce957d29917e429409c3f16","first_seen":"2026-03-28T18:32:47.497408Z","last_seen":"2026-03-28T18:32:47.497408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":66,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/24cli-maryland-gbcj/24cli-maryland-gbcj-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/24cli-maryland-gbcj/24cli-maryland-gbcj-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG04MRyF_ee2aLJGol503d4EZz5X-VxHLaVCKdFQlbktAC12qDH6IiMHrLvJBV93mx54uE8diTo\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Tue, 24 Mar 2026 23:10:15 GMT\r\nlast-modified: Tue, 24 Mar 2026 23:09:55 GMT\r\netag: \"9aa3586b3a7451d786b36d03d4f9956d\"\r\nx-goog-generation: 1774393795222080\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 417230\r\nx-goog-hash: crc32c=4aRlQA==, md5=mqNYazp0UdeGs20D1PmVbQ==\r\nx-amz-checksum-crc32c: 4aRlQA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 328911\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100078-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 317, 0\r\nx-timer: S1774722727.128848,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 417230\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":417230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"9aa3586b3a7451d786b36d03d4f9956d","sha1":"ec93a71c75ae89b8010a0acebc2b22a67dbd5d45","sha256":"0d550e3bbe0181933d61dae005146a5085c646bbc2aed566c90b7418ab58ea97","sha512":"3973a7c3b43d351441836d09e59c6c2419020e5593c0b465cb574dfc2e974c3c092154303c6a251c4b5d6ea56005c3e2bd1f9f53245ef279f1df11f3fbd10dd3","ssdeep":"6144:r6hdiKFXP3BLEPOc0Li4CoDCcAirEhWOxI+MMyDP74jQ/dB8MGKCBoHnsS4Dg4gW:oxRzDek8C+NyH4ptKHMQo","tlshash":"d69423e85c5bb1d3cf8a77b8f5c66846dcfbb25dca006c6359b2a5238d420ca7c1315a","first_seen":"2026-03-26T03:04:45.715497Z","last_seen":"2026-04-08T03:58:07.181464Z","times_seen":5,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":16,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/00hs-mdma-oz-01-tklj/00hs-mdma-oz-01-tklj-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/00hs-mdma-oz-01-tklj/00hs-mdma-oz-01-tklj-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG0qJpU2MZbdoFV7gvmvZn0LLkppvXRUEuH9JpSUB_tMQH9ma16ZdJt3-Io3D3Cw68DMj644AEs\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Tue, 24 Mar 2026 04:01:22 GMT\r\nlast-modified: Tue, 24 Mar 2026 04:00:10 GMT\r\netag: \"6ebd02368fcc5e0c8beb5c829144931d\"\r\nx-goog-generation: 1774324810242177\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 488602\r\nx-goog-hash: crc32c=hbcewA==, md5=br0CNo/MXgyL61yCkUSTHQ==\r\nx-amz-checksum-crc32c: hbcewA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 397845\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100151-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 420, 0\r\nx-timer: S1774722727.136647,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 488602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":488602,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"6ebd02368fcc5e0c8beb5c829144931d","sha1":"31854936c009d85837d5701648b351da34d32afd","sha256":"d28f1c794e144de11a84b2e015a13248b56c2d661f1ce40c876fbec4809307ad","sha512":"8fab018f602c167d273a36e8d8e3bba8d73afd4bdf235a0333d35076406d59d8eb1f9c8015d4ca7d67379d4727c24c494856435c306becaf51c642069cfcf1c3","ssdeep":"12288:DHB3D9KV1Q4PtD7MWEHMLXAB5DJyuCLt7:LRD9ijtDIWEHRD8pR7","tlshash":"70a42310e2aa5347cf5db131ce601ac08c149ef7190216d8d59a0ff1dba76be67336e6","first_seen":"2026-03-25T08:52:19.030448Z","last_seen":"2026-03-28T18:32:47.515173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":65,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:08.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fasoud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:30 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 548738\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-06-13T23:33:56.334989Z","times_seen":169527,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":186,"dns":3,"connect":16,"send":0,"wait":16,"receive":6,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/26/multimedia/26cli-solar-01-qgkc/26cli-solar-01-qgkc-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/26/multimedia/26cli-solar-01-qgkc/26cli-solar-01-qgkc-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG3cmXsQx7TmhkPhkK5sLRKN3S2Hlz1LcOHFsBNCZcdel2YeU0AHAqbLjjlT4ZeSKfQw\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Thu, 26 Mar 2026 09:01:03 GMT\r\nlast-modified: Thu, 26 Mar 2026 09:00:34 GMT\r\netag: \"e8ef9f15141f6da19a5a0ac5d5cd3133\"\r\nx-goog-generation: 1774515633964285\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 630860\r\nx-goog-hash: crc32c=GzMLHQ==, md5=6O+fFRQfbaGaWgrF1c0xMw==\r\nx-amz-checksum-crc32c: GzMLHQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 207064\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kiad7000165-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5296, 0\r\nx-timer: S1774722727.136237,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 630860\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":630860,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1802, components 3","md5":"e8ef9f15141f6da19a5a0ac5d5cd3133","sha1":"909abca02a42e28d89372d7ff39cd1beed7d9885","sha256":"e2f59bbc366bb0e33e99f61d81e06989c869c137f110ebfd1ac1979926387deb","sha512":"e8ad6f6735a635276bbbde15d2a3c5ac72cddd1b6758e957c14d8b6d3d3990be3a2e8843b2324d75b6aefb0843539eebf8d4f8c3f0008426d84bf1bb04bd57a6","ssdeep":"12288:Y1pG/AgtksCPXutqhm5ROIH0S5qVfVs0VCPhu2glkcHNAArIwPFy:DYGkXXuzH0Se6GCIUmKAkwPc","tlshash":"75d42368bbe70454f96cecb53f26bf3a30a03bde09d0277a8e099c6587645540e493de","first_seen":"2026-03-28T18:32:47.518987Z","last_seen":"2026-04-08T03:58:07.16522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":63,"receive":366,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/25/multimedia/25cli-gas-waiver-b-lfzk/25cli-gas-waiver-b-lfzk-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/25/multimedia/25cli-gas-waiver-b-lfzk/25cli-gas-waiver-b-lfzk-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG33SuFA6fmludJHfdxBX_PAOkmFiCF0lxYsM8lG5sfesGtKJc3LFO8oDNgqJWb7ayl1\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Wed, 25 Mar 2026 18:13:47 GMT\r\nlast-modified: Wed, 25 Mar 2026 18:13:10 GMT\r\netag: \"12af75dc525ed0b0de9bd31dfda1db18\"\r\nx-goog-generation: 1774462390423153\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 728602\r\nx-goog-hash: crc32c=Zyuh2Q==, md5=Eq913FJe0LDem9Md/aHbGA==\r\nx-amz-checksum-crc32c: Zyuh2Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nage: 260300\r\nx-served-by: cache-iad-kjyo7100140-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 7\r\nx-timer: S1774722727.128913,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 728602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":728602,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1800x1802, components 3","md5":"12af75dc525ed0b0de9bd31dfda1db18","sha1":"0ba0f5bf0d0499d256a8cfa9673a4e7e75874c68","sha256":"e9207b23fbeeb6247bf2ffd1e1721e8c313fe8e5d2abec085ecec72c79cc9599","sha512":"e3b709edd39364c714283eae585c3cf4308051fb395314f7e8402a8c9f1c2864d3e43619a816ef00218af50661f9c0626f4477dcff0a60c922ccc98d2125e669","ssdeep":"12288:f7IrvhK8m9qOgV9imb5Ce6huYQxLT1H7Uaszu5UJc+tRjX8SigME+AMQ/kpz4lXz:srvhbvimbMetdU96PMRj+b+wSt","tlshash":"3af42392de4a544cfc695fff8a3d468198820fb033e1ea56e693d29c2f61c4cb306176","first_seen":"2026-03-28T18:32:47.522311Z","last_seen":"2026-04-08T03:58:07.174329Z","times_seen":4,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":15,"receive":386,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/27/obituaries/22bishop-obit-0001-print1/22bishop-obit-0001-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/27/obituaries/22bishop-obit-0001-print1/22bishop-obit-0001-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG109cRtzvdXFcjOKrSakCrGWdjekmrbGn2Bh7S6y7pbO0ZBKkcZSK3aPkUCAFZ8d5p4cXJ33jI\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Fri, 27 Mar 2026 00:18:45 GMT\r\nlast-modified: Fri, 27 Mar 2026 00:16:47 GMT\r\netag: \"cfaf8e43106d295b6e49ad33f79fb5a8\"\r\nx-goog-generation: 1774570607709195\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 665936\r\nx-goog-hash: crc32c=wslnXQ==, md5=z6+OQxBtKVtuSa0z95+1qA==\r\nx-amz-checksum-crc32c: wslnXQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 152001\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kcgs7200171-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2458, 0\r\nx-timer: S1774722727.136149,VS0,VE3\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 665936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":665936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1802, components 3","md5":"cfaf8e43106d295b6e49ad33f79fb5a8","sha1":"bae4edffa78f2e648f2b67f904e71f2f2257b2fd","sha256":"213317f63a2fff004f6660f3c9e60984d187639bd9168158f70fbb9f769338b0","sha512":"99996329b554a9feb03ab823e75951a9e95de7df54ade0c91285b6fdb1ff16a243ea3a0502a6b1570e665fd7186289926be61fcbf8fae4bb487f32972d1dde0d","ssdeep":"12288:mDWbhbVyLdprR43xXjjSzdpSg4EOwnGIkIzvtFPGZS1LU3JWPxlDfdluOw0iJ:m6bjyzahzjSzdpk78GZ+vtFPZPdlk0iJ","tlshash":"d6e42391d50d7b33f888c676b97dab1e0142aa79b1cb5d91c2a00f44e7bc7b006b89e5","first_seen":"2026-03-25T08:52:19.034493Z","last_seen":"2026-03-28T18:32:47.524518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":69,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:08.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fasoud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32280\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:16:34 GMT\r\nexpires: Mon, 22 Mar 2027 10:16:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:35 GMT\r\ncontent-type: font/woff2\r\nage: 548134\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32280,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32280, version 1.0","md5":"d150e652cabc5a1d12723ea4140fdfcb","sha1":"8304ce1e39dc93c28ca8dc5752273525a462e8e5","sha256":"99ec044ad9040a708e38f90ebd5984ca03fc46afeee26d5c77c4769c66ed89e2","sha512":"7f1497eeb0e8a1349fedae0428563ad60a48b8ddb1d42595c583d88f0d45500abe86772a9b51e024da763791c430a62e2bb82654ca6b93f8589dc374b708c2c4","ssdeep":"768:ymUaCDnm4OxWqBUK+bStvMxZWA2FsIjPkek2qCzN:ymUF1OxWCqusIjTTzN","tlshash":"1ae2e15f42f09d30d0f20634daa9c5343b50b9fdd19be02a2a5cdc0967a45d9357f1e9","first_seen":"2025-09-17T01:56:31.341257Z","last_seen":"2026-06-13T21:53:26.873063Z","times_seen":3251,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":187,"dns":2,"connect":14,"send":0,"wait":15,"receive":9,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/28/multimedia/28cli-clean-tech-01-lkjw/28cli-clean-tech-01-lkjw-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/28/multimedia/28cli-clean-tech-01-lkjw/28cli-clean-tech-01-lkjw-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG087bc6DmRXwA11wCqBtAmsT1R-h-ib74X8cSCUB0iyNF0pKBfxDiFyNNvwT2MDAIE\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Sat, 28 Mar 2026 09:01:34 GMT\r\nlast-modified: Sat, 28 Mar 2026 09:00:57 GMT\r\netag: \"24e879c565def17343b674f6fd715f23\"\r\nx-goog-generation: 1774688457256073\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 493223\r\nx-goog-hash: crc32c=k8luSg==, md5=JOh5xWXe8XNDtnT2/XFfIw==\r\nx-amz-checksum-crc32c: k8luSg==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 34232\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100037-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 517, 0\r\nx-timer: S1774722727.137335,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 493223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":493223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"24e879c565def17343b674f6fd715f23","sha1":"67f40130f92bfe06e616afb4d1f7265a781f3fe3","sha256":"6d59eb37c884b10494297f18f525ef6df4866a332f68d95a6680ecf81ebe164f","sha512":"41bfcfdce2e9fdd9d4c72843b418c0bdbb74dccb33ccd0a302895f12e1f436578090db20fa809853e4a43cc4dc6d409bd98864652ec14f74269cd65d89e55603","ssdeep":"12288:SnSEHPJ7AVBE0sC/14Db0J2cle6A0O39Wp:OFv9gPsCt0btMjrP","tlshash":"1ba42396631f5ef7c262773ca0f98f8bc66532e8c1022999f6258ba1f6f4314b919305","first_seen":"2026-03-28T18:32:47.527481Z","last_seen":"2026-04-08T03:58:07.179557Z","times_seen":4,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":70,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/25/multimedia/Biz-Chips-Helium-01-vfgz/Biz-Chips-Helium-01-vfgz-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/25/multimedia/Biz-Chips-Helium-01-vfgz/Biz-Chips-Helium-01-vfgz-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG0PlXq-gD-7o30JRds7Qq_bbOgbn4yzpbpmTTDiEmJFxtJpLxhm1qDQodSn_PSrmTDs\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Fri, 27 Mar 2026 04:01:19 GMT\r\nlast-modified: Fri, 27 Mar 2026 04:00:18 GMT\r\netag: \"0885f3a0e50e433c682094e9744d3f1b\"\r\nx-goog-generation: 1774584018826123\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 792286\r\nx-goog-hash: crc32c=90IK7A==, md5=CIXzoOUOQzxoIJTpdE0/Gw==\r\nx-amz-checksum-crc32c: 90IK7A==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 138648\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kiad7000158-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 120, 0\r\nx-timer: S1774722727.137023,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 792286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":792286,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1799, components 3","md5":"0885f3a0e50e433c682094e9744d3f1b","sha1":"e989f48073fcc5e6a994408671be9918d988b3cf","sha256":"5d70eaab968d7c09699e72cc576b46df6e03bd2b9de2ebc9611cc1eff71d427b","sha512":"fa376468426c2b1248b9cc1eea005efa84767fa41765743829d8ad69435d93c837df6f335f1f37c3588b5145bc37d201800a6793dadc23e3bad15b0782000f3d","ssdeep":"12288:tyPK1OJXMiYSMPy95EZic2m0cE0Wgly9MW44ayfc4mUsIux1xN7ZW:tKLJXcIcZym0r0NWLlQIujH7ZW","tlshash":"32f433d2da569bd6eb6c747ec8932ca93d05829d340d74f353340c7e1b3b8a289c6b91","first_seen":"2026-03-28T18:32:47.529792Z","last_seen":"2026-04-01T19:43:06.323076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":69,"receive":829,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/24Hironaka-vcgm/24Hironaka-vcgm-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/24Hironaka-vcgm/24Hironaka-vcgm-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG3cBLlkW4thr2oG2XBvTGIaWmH8Z6ywlr6iizuQw7IlJYRiG-D1KnYQiQrDe-6l5TMz\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Wed, 25 Mar 2026 21:08:58 GMT\r\nlast-modified: Wed, 25 Mar 2026 21:08:20 GMT\r\netag: \"918c76911c0b27fe013b3313ce9cdab1\"\r\nx-goog-generation: 1774472900277212\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 522009\r\nx-goog-hash: crc32c=MEDbrg==, md5=kYx2kRwLJ/4BOzMTzpzasQ==\r\nx-amz-checksum-crc32c: MEDbrg==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 249788\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kcgs7200072-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 146, 0\r\nx-timer: S1774722727.128533,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 522009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":522009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 1","md5":"918c76911c0b27fe013b3313ce9cdab1","sha1":"859832c8de445e32127e98282cb976ce8f7c6192","sha256":"4f0e4115b320e9a97ee6b657f22a368afdd326c87e84e5ff64e7abee75e5ef3a","sha512":"a3628fcd31ab161b23109dbcd7bd7293be75179c686bd327fe317c0092ed829fa1c433628c31ccbcc3a477e6b4d113c98a3e14f7430c4b9c3b48a65539b0ef4f","ssdeep":"12288:fH/DrZCmlPdPl/XZesRNsOZaELjRzrDf5c:jjlPHIsRNVlL9zrj6","tlshash":"87b4230634829e0ee1aa8674e0724b3b71c4eb542ecbd69ae01f5a19574c091c7f7bb7","first_seen":"2026-03-28T18:32:47.531387Z","last_seen":"2026-03-28T18:32:47.531387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":17,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/23/multimedia/23cli-beer-promo-jtpg/23cli-beer-promo-jtpg-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/23/multimedia/23cli-beer-promo-jtpg/23cli-beer-promo-jtpg-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG1E5sd9NotibwiVl2ZpKqwqZySHV8gHuJziLUEfI5qcNvLLqdKpGuwnjQlbeWC_6aUw\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Mon, 23 Mar 2026 15:31:50 GMT\r\nlast-modified: Mon, 23 Mar 2026 15:30:43 GMT\r\netag: \"62c84b93f397b071f3001b84d5060e47\"\r\nx-goog-generation: 1774279843855219\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 689745\r\nx-goog-hash: crc32c=AynL5A==, md5=YshLk/OXsHHzABuE1QYORw==\r\nx-amz-checksum-crc32c: AynL5A==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 442816\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kcgs7200049-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 47, 0\r\nx-timer: S1774722727.136748,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 689745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":689745,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1799, components 3","md5":"62c84b93f397b071f3001b84d5060e47","sha1":"57a2156aea94f12dbf39d2bd8ca669a03ac19b3f","sha256":"24dd4fc5ad5ff899a93349c7e92b8676af9cbe451ffee267db9e0cd879408f11","sha512":"951ad46f33d555e04139899b815c430f600abdf9301a4983d4e53add57709563580bd8ea7327d224fea8b28cf7b7d6005a59254f89b2ea7fd886281d46b514ed","ssdeep":"12288:ZArmnQDL2gA3ts9XIgemXADqCwhqwp+xKMVuXu/aVDnt8lxSV9PeNKdC:6qiLutA6qC+qwEv4+0DntAM8","tlshash":"81e43350a718f4f1eb490b348cec398a41f4b7967249518a96763ddfc4c0a3e5b0e76b","first_seen":"2026-03-26T03:04:45.728373Z","last_seen":"2026-03-31T19:51:38.810612Z","times_seen":4,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":65,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fasoud.com/","fqdn":"fasoud.com","domain":"fasoud.com","tld":"com"},"ip":{"addr":"81.95.5.153","port":443,"asn":201011,"as":"Core-Backbone GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T18:32:05.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fasoud.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 10:47:10 GMT","end":"Mon, 22 Jun 2026 10:47:09 GMT"},"fingerprint":{"sha1":"0D:A7:EE:AE:DE:40:2F:85:C9:9E:47:C4:17:A5:58:93:7D:16:C9:BF","sha256":"38:4E:43:7F:EC:75:9E:78:19:29:7B:76:7D:01:65:59:65:15:09:8C:1C:9A:5A:6F:1A:FA:6D:DD:7D:88:5F:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fasoud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 18:32:06 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nX-Powered-By: PHP/7.4.33\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 6664\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37668,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (319)","md5":"55f1c4d0ad9e2ebee7b841b6ea99e05c","sha1":"5b2cbb149e1defbbc007b991bf09990858693589","sha256":"0cd6c30719d969fda4a9c1d3b1bee4bdec5f683b7e4cccf197e20c3aa14e2606","sha512":"0fbdf7201ce1b69565fb46867567d5eca22972a46b1a3375e4202bf473e38f568443951782af47e1ed4f31150dabeb4d6cdb67c87945d9ca3dc9c7c8505e0292","ssdeep":"768:k7D67cxNXN6vjKnV74oqsvt244p/vUR5MFymUWT8B4Rt6B1sNNPBY7QfyS:NEN07KnV8oqsh4p/vUR5MFymbT8B4j6C","tlshash":"5c03426258f25b731643c1c05da07b6aff416a5bcdda4629babc1bdc1f42cf2c523898","first_seen":"2026-03-28T18:32:47.534155Z","last_seen":"2026-03-28T18:32:47.534155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":89,"dns":1,"connect":40,"send":0,"wait":815,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/26/multimedia/26cli-SEA-ICE-RECORD-tkhc/26cli-SEA-ICE-RECORD-tkhc-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/26/multimedia/26cli-SEA-ICE-RECORD-tkhc/26cli-SEA-ICE-RECORD-tkhc-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG0bJnHwKjJ5cijsGYihlEDjxmnZ5M7AYfrQUa-8NyxcV_auuopoepf4Mwq_AAVE8C1-2U0eJEU\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Thu, 26 Mar 2026 18:34:27 GMT\r\nlast-modified: Thu, 26 Mar 2026 18:33:36 GMT\r\netag: \"e6d038f21f9da9bbad5c3bfe0f60b677\"\r\nx-goog-generation: 1774550016274202\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 302317\r\nx-goog-hash: crc32c=aMf01A==, md5=5tA48h+dqbutXDv+D2C2dw==\r\nx-amz-checksum-crc32c: aMf01A==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 172660\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100120-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 137, 0\r\nx-timer: S1774722727.136241,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 302317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":302317,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"e6d038f21f9da9bbad5c3bfe0f60b677","sha1":"032103d4453541f6a51e625a459585cf150470dc","sha256":"fb28219d60c2dd398ca74b0413ddb0b6d2b972a11fdaaa4b730580648a645331","sha512":"ebfd03544627fbddf4a70a51affe7a0a8b6de8fa3ce2c9166a3bc9c427a77190dc85863582047bc26d902d10afd0f570094600307044679e0a34b7deecb3463a","ssdeep":"6144:XP3ctsCWwpqW+p0DefUjbJ8VRz0+/B4VF/WRAbeDl1arGm/Reyin6eNyBIXG3/XM:XP3usC9qlxfq98srKlaGm/AJ9XG3/XM","tlshash":"8b54226742228620d7a4cf385fe667dcf7c77b4f3bda292e00855cb0eb4a510474b968","first_seen":"2026-03-28T18:32:47.535504Z","last_seen":"2026-03-28T18:32:47.535504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":63,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fasoud.com/favicon.ico","fqdn":"fasoud.com","domain":"fasoud.com","tld":"com"},"ip":{"addr":"81.95.5.153","port":443,"asn":201011,"as":"Core-Backbone GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:08.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fasoud.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 10:47:10 GMT","end":"Mon, 22 Jun 2026 10:47:09 GMT"},"fingerprint":{"sha1":"0D:A7:EE:AE:DE:40:2F:85:C9:9E:47:C4:17:A5:58:93:7D:16:C9:BF","sha256":"38:4E:43:7F:EC:75:9E:78:19:29:7B:76:7D:01:65:59:65:15:09:8C:1C:9A:5A:6F:1A:FA:6D:DD:7D:88:5F:E1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fasoud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 18:32:08 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 30 Oct 2022 16:43:13 GMT\r\nETag: \"c6-5ec432fe0d29f\"\r\nAccept-Ranges: bytes\r\nContent-Length: 198\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 2 colors","md5":"c6acedaff906029fc5455d9ec52c7f42","sha1":"92cbd806ca421aa2c9ff5e1ff76bbc20913a2f81","sha256":"9deb629637088856fe61dc868bf40a7d21ed942e4117659f3d6c3408f59b906b","sha512":"7a8d002ca6b607e38860ad4485493e109cb7d3bef241b0e5bf2a65c2e316e6185ded8ec74e3fcbd78745ab302c6d876657abc178ee028d1b8b9a5572f429d972","ssdeep":"","tlshash":"99d002433104c014c0100635c407dbf407546c018d94274731503f5f7c505c81c64650","first_seen":"2023-04-08T04:59:04Z","last_seen":"2026-06-13T09:49:54.756606Z","times_seen":8065,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/18HS-sci-conversation-weir-01-vjmk/18HS-sci-conversation-weir-01-vjmk-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/18HS-sci-conversation-weir-01-vjmk/18HS-sci-conversation-weir-01-vjmk-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWxu2aYjhwEe8u_UA2XmtDJ7H6DIJzp21zOmlm51bFZApySsmEYDfe5QOggF1OYcUEAZJaEP9zjVrUih9g\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Wed, 18 Mar 2026 15:24:20 GMT\r\nlast-modified: Wed, 18 Mar 2026 15:24:17 GMT\r\netag: \"f14d6f04b1738270c879d2eb8c4d34c5\"\r\nx-goog-generation: 1773847457750617\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 617500\r\nx-goog-hash: crc32c=gr9oNg==, md5=8U1vBLFzgnDIedLrjE00xQ==\r\nx-amz-checksum-crc32c: gr9oNg==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nage: 456362\r\nx-served-by: cache-iad-kiad7000179-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 59, 2\r\nx-timer: S1774722727.129172,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 617500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":617500,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"f14d6f04b1738270c879d2eb8c4d34c5","sha1":"85eb77e9e7dda827d79686a8974aba8c0eb813ba","sha256":"10b50707ad70b987dfe31c00e2470af55315eccbdb27a83812f96ef1cdbe1c81","sha512":"875baf238b5db587e1d6ba3eb54ed9341ae91c543c62597fe2eae741ebe281dc78aa5f5d77aa38e7b1ca6dc6bdd811365d4af9aac17dddeb19dcca3e3af591d1","ssdeep":"12288:BkSayzDUujOdqFUIFgwMUnsP1R0iUzhWePZiA34Z516qEIbz48n:2Sayz4ujOiQWsP1R05M0ZidNv/z3","tlshash":"90d42378f421d2dfe7b697346171712c62536aeec902e7ac4d346428ddec6b33169c88","first_seen":"2026-03-28T18:32:47.54032Z","last_seen":"2026-03-28T18:32:47.54032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":30,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/25/multimedia/HS25-cdc-cwjk/HS25-cdc-cwjk-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/25/multimedia/HS25-cdc-cwjk/HS25-cdc-cwjk-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG0QinHhinaydq_f2V79ug6U49Jt7h146AQRuaefxrk7MW6-Lk3XeWtkfqtGcOsC3mmM\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Wed, 25 Mar 2026 22:05:41 GMT\r\nlast-modified: Wed, 25 Mar 2026 22:04:50 GMT\r\netag: \"3497b02816aea1e0917bd1e23ba825f7\"\r\nx-goog-generation: 1774476290192778\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 518672\r\nx-goog-hash: crc32c=+9ilXw==, md5=NJewKBauoeCRe9HiO6gl9w==\r\nx-amz-checksum-crc32c: +9ilXw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 246386\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kiad7000068-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 33, 0\r\nx-timer: S1774722727.128438,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 518672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":518672,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"3497b02816aea1e0917bd1e23ba825f7","sha1":"99c9dc298e8c2d5fedd32c02e882a99e7bbf344d","sha256":"ddaff7dbe419ba883135aea16aaaa9b37aef34a2a69c292d25a0641ee592e398","sha512":"4f6132eaf642b6b6fefd1bfac729c5c8666973f62f6ae897111de1d56ef590b1c80c95f028858e910a6664df5f00183010c4ca7b394e461681414668f72c5239","ssdeep":"12288:UOeQrfYVgvGLo1qIgsueb3EabrQ6IMAl2/gBgLbWq5XV/HtF5:tagOYIPebzo6Izpa+qj/j5","tlshash":"fdb42326eca5c53fd8c81878276746e2e66233edf158f91305a9d356cdf0d10bb058ba","first_seen":"2026-03-28T18:32:47.546317Z","last_seen":"2026-03-28T18:32:47.546317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":16,"dns":10,"connect":13,"send":0,"wait":32,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/24/multimedia/24CLI-SATELLITE-SKIIERS-promo-mlcw/24CLI-SATELLITE-SKIIERS-promo-mlcw-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/24/multimedia/24CLI-SATELLITE-SKIIERS-promo-mlcw/24CLI-SATELLITE-SKIIERS-promo-mlcw-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG02_8Tqu7p4ExsJ9rX67G4Z9LTuL9kkB8xFJBrqpvkL_Yoo5To97iNYNYDTeiASjssS\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Tue, 24 Mar 2026 14:08:27 GMT\r\nlast-modified: Tue, 24 Mar 2026 14:07:29 GMT\r\netag: \"ae21b2219602ee697adb8d727c3410a8\"\r\nx-goog-generation: 1774361249448045\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 407276\r\nx-goog-hash: crc32c=QHYkYQ==, md5=riGyIZYC7ml6241yfDQQqA==\r\nx-amz-checksum-crc32c: QHYkYQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 361420\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100177-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1, 0\r\nx-timer: S1774722727.129569,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 407276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":407276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1800x1801, components 3","md5":"ae21b2219602ee697adb8d727c3410a8","sha1":"f3710bb3447407fc43349b98768e61e855b09145","sha256":"a29045403d0727cf6a7d20d754c95d1d58c7ec7417fdcec8d4be69d9856242e2","sha512":"7966b75fbf8e4ccb0b289f81264bcfd11fc8189f6a97e288963ed6586f37d3aa86676448f02f4b5a2cb1ae01070c6c967b5c71520f67f527a746fd3b4a7d4946","ssdeep":"12288:vcwMv+LnHrg13ARR0i8uogCyvO/bIfzudGD:Er0L6Ab5CMt9D","tlshash":"168423d3661e453eef590a788d1c768094c2dfd07ae8d222dfe33579430d6b87ac60a6","first_seen":"2026-03-28T18:32:47.552609Z","last_seen":"2026-03-28T18:32:47.552609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":58,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/23/magazine/23mag-CDC-Takeaways/23mag-CDC-Takeaways-mediumSquareAt3X-v2.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/23/magazine/23mag-CDC-Takeaways/23mag-CDC-Takeaways-mediumSquareAt3X-v2.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG2GffT8hQY0h-orqA5ea812bLOQPR85dtR77lGF1H90vtVn6U0Fs9dSrdMct8jcltJw\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Mon, 23 Mar 2026 09:30:35 GMT\r\nlast-modified: Mon, 23 Mar 2026 09:30:04 GMT\r\netag: \"0f3f4ba496fbc6da769cc28957569054\"\r\nx-goog-generation: 1774258203891003\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 548968\r\nx-goog-hash: crc32c=lxSF7A==, md5=Dz9LpJb7xtp2nMKJV1aQVA==\r\nx-amz-checksum-crc32c: lxSF7A==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 464492\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kiad7000077-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 0\r\nx-timer: S1774722727.136177,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 548968\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":548968,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1704x1704, components 3","md5":"0f3f4ba496fbc6da769cc28957569054","sha1":"ac78568858a2357be9bc62fc5011873d68300345","sha256":"015d25c29f34d8d0d5bc5395b1d15ced2a2ecd7956d7bc493c65921e9e7e942e","sha512":"edeb80be19911346361b931607d06d8447118d15e9c4f290647d668e245946233191eaa9bc122901d271b3adc49d57e46964b73379a8087f25bb6f210f1f2680","ssdeep":"12288:FlXWrZwtFFGhRTzoBugzhDBojla7MOxgfTUU+Bh+PgGBZ:FlXHH8huEgzhN4a7vxgfT8BUZ","tlshash":"67c4231e7c5a4b61d658a37c20424894c639a7d90e7a8690ac1ddf8c33325e1be9fdf3","first_seen":"2026-03-25T08:52:19.048057Z","last_seen":"2026-03-28T18:32:47.5548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":63,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/12/multimedia/xx-diabetes-africa-01-promo/xx-diabetes-africa-01-promo-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/12/multimedia/xx-diabetes-africa-01-promo/xx-diabetes-africa-01-promo-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG0iauerIECDOooj6RZ5UNRFBAi9VmfMhb4TpP0GPTzI4LN8cpQQXpBnagox_-iSEoVSL53oF30\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Mon, 23 Mar 2026 09:01:00 GMT\r\nlast-modified: Mon, 23 Mar 2026 09:00:11 GMT\r\netag: \"a7aaa3794f9f8a25941ae380354d636e\"\r\nx-goog-generation: 1774256411614129\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 499953\r\nx-goog-hash: crc32c=jNY/mA==, md5=p6qjeU+fiiWUGuOANU1jbg==\r\nx-amz-checksum-crc32c: jNY/mA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 466267\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100035-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 99, 0\r\nx-timer: S1774722727.136442,VS0,VE3\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 499953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":499953,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"a7aaa3794f9f8a25941ae380354d636e","sha1":"e7c9f25c37796f51fac0682aa761085f9a217a1a","sha256":"cbd9b5e2d4702168edf5a0d00bd04cbf72cd3e2cfef7f454c65ef318a8836020","sha512":"c1680c20ff209f358d1d1a7eb09140f0057bf3d4cc06bd8fb3029ed499870e7a5cb74b97dc65d33ea82e5e67e77cd7bf674cc99444ce39e063b9bd2dacc49684","ssdeep":"12288:2ZKunKKVmbFPfF1nzxb8Ic7GnyFSfyKdqBoFWYd:CR3eFHF1zxgI0S5dqBoFn","tlshash":"c6b423157dc9af5fea9500bb01a5de31adc29915b7129e8c3f2182e009e7a41ce46fcb","first_seen":"2026-03-25T08:52:19.044344Z","last_seen":"2026-03-28T18:32:47.55907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":69,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static01.nyt.com/images/2026/03/19/multimedia/00cli-jorling-05-zlpc/00cli-jorling-05-zlpc-mediumSquareAt3X.jpg","fqdn":"static01.nyt.com","domain":"nyt.com","tld":"com"},"ip":{"addr":"151.101.1.164","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fasoud.com/","date":"2026-03-28T18:32:07.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nytimes.com","organization":""},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Feb 2026 00:00:00 GMT","end":"Sun, 13 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:FB:6C:08:CA:1F:EA:4C:9A:34:6A:5D:6F:9A:24:D3:9F:BA:06:1B","sha256":"07:80:FE:78:24:3E:6B:0C:D4:94:E7:16:65:80:89:C0:D6:07:53:06:E9:7D:F6:5E:5C:44:29:8A:A4:70:84:21"}}},"request":{"raw":"GET /images/2026/03/19/multimedia/00cli-jorling-05-zlpc/00cli-jorling-05-zlpc-mediumSquareAt3X.jpg HTTP/1.1\r\nHost: static01.nyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fasoud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AMNfjG2bNU4iWeUFbrjF0uHQyI8yPXwfOqeSO0iOFmVoTVijB8TwbliJeq-Ib1qpf3Vdbp40\r\ncache-control: max-age=604800; stale-if-error=86400; stale-while-revalidate=30, public\r\nexpires: Sat, 28 Mar 2026 09:01:33 GMT\r\nlast-modified: Sat, 28 Mar 2026 09:00:35 GMT\r\netag: \"68491b8d3c2fe5e9979fb7d7a4cfb214\"\r\nx-goog-generation: 1774688435447823\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 630442\r\nx-goog-hash: crc32c=QbTFVw==, md5=aEkbjTwv5emXn7fXpM+yFA==\r\nx-amz-checksum-crc32c: QbTFVw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\nserver: UploadServer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 34234\r\ndate: Sat, 28 Mar 2026 18:32:07 GMT\r\nx-served-by: cache-iad-kjyo7100176-IAD, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 305, 0\r\nx-timer: S1774722727.136331,VS0,VE1\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; preload; includeSubdomains\r\nx-nyt-edge-cache: HIT-HIT\r\naccess-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override, traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override\r\ncontent-length: 630442\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":630442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1800x1800, components 3","md5":"68491b8d3c2fe5e9979fb7d7a4cfb214","sha1":"40461cff6ae5e10715db1ee55ceefe489151c0d4","sha256":"259a66fad6b10cb50360c92bedc76810597d11a07753a44c1dc7812a68807981","sha512":"6d98105c30337e95fdecf476a7692e8468ed0d6af9b6908d7caac235f62038817010a0952663b407c35da9270b4341d5671d07f21705fe7449795fdb280e46ea","ssdeep":"12288:B2g4K74N65YIQEOK7ods4fZ2wvyHFvvpALXOGgFQV7Yrna3l3r9Ol:B14KkA3QHxRyVRUEFM7+a179Ol","tlshash":"37d423241b6439b4df3ae730e902a33cfa4c32f9db502bf19553ebd58a2b3914596325","first_seen":"2026-03-28T18:32:47.568749Z","last_seen":"2026-04-08T03:58:07.185709Z","times_seen":4,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":65,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
