HTTP/2 403 
set-cookie: datadome=1XSPJJ1AatjePRzyaCqF1NGfPI~bAOc9PjgchsOmlSQz3dHqw~gZEwvwnFKfPPZ4~Hhj0pxan6zQF0zbjQ_qK0R7Pd31yXmEh0qCuDpBZP~1BpHsZP2IZwVB1XdGMvgY; Max-Age=31536000; Domain=www.nytimes.com; Path=/; Secure; SameSite=Lax
cache-control: max-age=0, private, no-cache, no-store, must-revalidate
charset: utf-8
x-timer: S1784469250.269868,VS0,VE11
server: DataDome
x-datadome-riskscore: 0.6304384906571332
pragma: no-cache
x-datadome-cid: AHrlqAAAAAMAguO483SyDuYAZAGp8g==
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
x-dd-b: 1
x-datadome: protected
accept-ranges: bytes
content-type: text/html;charset=utf-8
x-datadome-timer: S1784469250.258619,VS0,VE37
x-origin-time: 2026-07-19 13:54:10 UTC
date: Sun, 19 Jul 2026 13:54:10 GMT
x-served-by: cache-nyc-kteb1890090-NYC, cache-nyc-kteb1890090-NYC, cache-nyc-kteb1890090-NYC
x-cache: MISS, MISS
x-cache-hits: 0, 0
vary: Fastly-SSL
set-cookie: nyt-a=qjueS9EO_iNzDUtXODTj9p; Expires=Mon, 19 Jul 2027 13:54:10 GMT; Path=/; Domain=.nytimes.com; SameSite=none; Secure
set-cookie: nyt-gdpr=0; Expires=Sun, 19 Jul 2026 19:54:10 GMT; Path=/; Domain=.nytimes.com
x-gdpr: 0
set-cookie: nyt-purr=cfshcfhshckfhdfshgas2taaa; Expires=Mon, 19 Jul 2027 13:54:10 GMT; Path=/; Domain=.nytimes.com; SameSite=Lax; Secure
permissions-policy: browsing-topics=()
set-cookie: nyt-us=1; Expires=Sun, 19 Jul 2026 19:54:10 GMT; Path=/; Domain=.nytimes.com
set-cookie: nyt-geo=US; Expires=Sun, 19 Jul 2026 19:54:10 GMT; Path=/; Domain=.nytimes.com
x-frame-options: DENY
set-cookie: nyt.et.dd=iv=384CF838C4864A48B79D964A8FD9F022&val=Bw+eFXIIziu9F5ECjeNX8Y7AC2HLL4lyLCgXb/PZYYPtGjCoT15Nqc1CVxKq5MV8e+yi//DkdgOL9GIBDxafFY7XqBU14MGIvcSVZaRTAFS2h565NzfivlLExbp8xOPhys4w4MjcF6lEnW5CSFdqgMSjL1tJBY4NxPEu0n8znL3AxHQBTD+k5Qyb24VQRMQiPmRQZ+k5C3xScgEGU2Xl3pCVBJOPWyqdAGnfRU/38q31qYzgZr2tDIC1J/qRxvuyNByzVRuqvTBODsQU8nCoP08jMokgEW4h8C1YrVWL31e6YjserrRf6O+B2T+2JgPQ; Max-Age=60; Path=/; Domain=.nytimes.com; SameSite=none; Secure
set-cookie: datadome=0; Domain=.nytimes.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax; Secure
set-cookie: nyt-s-present=0; Path=/; Domain=.nytimes.com; Expires=Sun, 19 Jul 2026 13:54:13 GMT
x-api-version: F-X
x-nyt-route: vi-story
content-security-policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https: nytresource:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: nytresource:; style-src data: 'unsafe-inline' https: nytresource:; img-src data: https: blob: android-webview-video-poster: nytresource:; font-src data: https: nytresource:; connect-src data: https: wss: blob: nytresource:; media-src data: https: blob: nytresource:; object-src https:; child-src https: data: blob: nytresource:; form-action https: nytimes: nytcooking: nytxwd:; report-uri https://csp.nytimes.com/report;
strict-transport-security: max-age=63072000; includeSubDomains; preload
access-control-expose-headers: X-Nyt-Mktg-Group
x-nyt-mktg-group: group1
set-cookie: nyt-traceid=00000000000000003d7076b07659546b; Path=/; Domain=.nytimes.com; SameSite=none; Secure
x-nyt-edge-cache: MISS
x-nyt-app-webview: 0
x-nyt-app-map: webview=false,preloaded=false,service-worker-enabled=false
access-control-allow-headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override
content-length: 771