nytimes.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
trace: fastly_error_code=770
Location: https://nytimes.com/
Accept-Ranges: bytes
Date: Wed, 21 Oct 2026 03:42:08 GMT
X-Served-By: cache-nrt-rjaa8190068-NRT
X-Cache: HIT
X-Cache-Hits: 0
Set-Cookie: nyt-gdpr=0; Expires=Wed, 21 Oct 2026 09:42:08 GMT; Path=/; Domain=.nytimes.com
x-gdpr: 0
Permissions-Policy: browsing-topics=()
X-Frame-Options: DENY
Set-Cookie: datadome=0; Domain=.nytimes.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax; Secure
X-API-Version: F-0
Access-Control-Expose-Headers: X-Nyt-Mktg-Group
x-nyt-mktg-group: group6
x-nyt-edge-cache: HIT
x-nyt-app-webview: 0
x-nyt-app-map: webview=false,preloaded=false,service-worker-enabled=false
Access-Control-Allow-Headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
trace: fastly_error_code=770
Location: https://www.nytimes.com/
Accept-Ranges: bytes
Date: Wed, 21 Oct 2026 03:42:08 GMT
X-Served-By: cache-nrt-rjaa8190044-NRT
X-Cache: HIT
X-Cache-Hits: 0
Set-Cookie: nyt-gdpr=0; Expires=Wed, 21 Oct 2026 09:42:08 GMT; Path=/; Domain=.nytimes.com
x-gdpr: 0
Permissions-Policy: browsing-topics=()
Set-Cookie: datadome=0; Domain=.nytimes.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax; Secure
X-API-Version: F-0
Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https: nytresource:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: nytresource:; style-src data: 'unsafe-inline' https: nytresource:; img-src data: https: blob: android-webview-video-poster: nytresource:; font-src data: https: nytresource:; connect-src data: https: wss: blob: nytresource:; media-src data: https: blob: nytresource:; object-src https:; child-src https: data: blob: nytresource:; form-action https: nytimes: nytcooking: nytxwd:; report-uri https://csp.nytimes.com/report;
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Access-Control-Expose-Headers: X-Nyt-Mktg-Group
x-nyt-mktg-group: group6
x-nyt-edge-cache: HIT
x-nyt-app-webview: 0
x-nyt-app-map: webview=false,preloaded=false,service-worker-enabled=false
Access-Control-Allow-Headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override

HTTP/1.1 403 Forbidden
Connection: close
Content-Length: 771
x-datadome-cid: AHrlqAAAAAMAkJ6FwaxAr0wAnQe4Hg==
accept-ranges: bytes
x-datadome: protected
x-datadome-riskscore: 0.7832265180509427
set-cookie: datadome=6DQwrHBVwPBA3cRhcKtOa99kgBteY1B13k5q0aUSnuU09TJ5uiPebm7Ic5MdFn1G3CgRPMGC_I_uBU8m14s7Wbt30EW0XJRIU9SK7T787KkVMpXrGhSDtfQZ7O2jHmzA; Max-Age=31536000; Domain=www.nytimes.com; Path=/; Secure; SameSite=Lax
server: DataDome
x-dd-b: 1
charset: utf-8
cache-control: max-age=0, private, no-cache, no-store, must-revalidate
pragma: no-cache
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory,Sec-CH-UA-Platform-Version
x-timer: S1792554129.623547,VS0,VE6
content-type: text/html;charset=utf-8
x-datadome-timer: S1792554129.605953,VS0,VE39
X-Origin-Time: 2026-10-21 03:42:08 UTC
Date: Wed, 21 Oct 2026 03:42:08 GMT
X-Served-By: cache-nrt-rjaa8190045-NRT, cache-nrt-rjaa8190045-NRT, cache-nrt-rjaa8190049-NRT
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
Vary: Fastly-SSL
Set-Cookie: nyt-a=3FBPsOz5SwIMEKArAURP9R; Expires=Thu, 21 Oct 2027 03:42:08 GMT; Path=/; Domain=.nytimes.com; SameSite=none; Secure
Set-Cookie: nyt-gdpr=0; Expires=Wed, 21 Oct 2026 09:42:08 GMT; Path=/; Domain=.nytimes.com
x-gdpr: 0
Set-Cookie: nyt-purr=cfhhcfhhhukfhufshgas2fdndd; Expires=Thu, 21 Oct 2027 03:42:08 GMT; Path=/; Domain=.nytimes.com; SameSite=Lax; Secure
Permissions-Policy: browsing-topics=()
Set-Cookie: nyt-geo=JP; Expires=Wed, 21 Oct 2026 09:42:08 GMT; Path=/; Domain=.nytimes.com
Set-Cookie: nyt.et.dd=iv=621D99E2BCDE484DBF149033E8D838C8&val=krR9fAugsNDN3847AxfsmHWO6pjmDZxeDnndWvdl3JMZeB8a7GJxDC1jgpx1CAp6qwh7eSStYdnocIvCwfeV4xE2U6v+6sZfAa1mvu9RAgX5UpzXSgiVoINzllzm3lCPNmTfZUU46sz3kucv7GkRspHRF0sNRbLI84PsVMx14L+UM78DAXPopzBOpvgx2KyZUX5rSXaEntXVdrd6Kv5nDc0BWX74x1E1fXesEzdohOfsqAwg1aNWkf/GHykRP17Sag8lu0sxCf8rWU/eIDAza9VsnIvDAEGn5vtHTudJsW077S3X6AVGSf9Evv6q7rK/qqzwKvFXBsrgqTjGLCTgUE2H6X7NtoTWKb8XLd9gYtuwcS+KZbs6SulkwfCKxJf4tS2YS9PFg5cylfumnEm5AVqxOaW8QSiu2V2INYbvM2PHlkzq0B9AoDMTkm4/944H; Max-Age=60; Path=/; Domain=.nytimes.com; SameSite=none; Secure
Set-Cookie: datadome=0; Domain=.nytimes.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax; Secure
Set-Cookie: nyt-s-present=0; Path=/; Domain=.nytimes.com; Expires=Wed, 21 Oct 2026 03:42:11 GMT
X-API-Version: F-X
x-nyt-route: homepage
Content-Security-Policy: upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https: nytresource:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: nytresource:; style-src data: 'unsafe-inline' https: nytresource:; img-src data: https: blob: android-webview-video-poster: nytresource:; font-src data: https: nytresource:; connect-src data: https: wss: blob: nytresource:; media-src data: https: blob: nytresource:; object-src https:; child-src https: data: blob: nytresource:; form-action https: nytimes: nytcooking: nytxwd:; report-uri https://csp.nytimes.com/report;
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Access-Control-Expose-Headers: X-Nyt-Mktg-Group
x-nyt-mktg-group: group6
Set-Cookie: nyt-traceid=00000000000000003ff4a9da3f6a94f2; Path=/; Domain=.nytimes.com; SameSite=none; Secure
x-nyt-edge-cache: MISS
x-nyt-app-webview: 0
x-nyt-app-map: webview=false,preloaded=false,service-worker-enabled=false
Access-Control-Allow-Headers: traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override