{"title":"Blacklight Inspection","page_title":"dfir.blog - A blog about Digital Forensics & Incident Response","uri_ins":"http://dfir.blog/","uri_dest":"https://dfir.blog/","uri_redirects":["http://dfir.blog/"],"secure_connection":{},"host":"dfir.blog","config":{"emulateDevice":{"name":"iPhone 15 Pro","userAgent":"Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1","viewport":{"width":393,"height":659,"deviceScaleFactor":3,"isMobile":true,"hasTouch":true,"isLandscape":false}},"cleareCache":true,"captureHar":true,"captureLinks":false,"enableAdBlock":false,"saveBrowserProfile":false,"numPages":2,"defaultTimeout":35000,"defaultWaitUntil":"networkidle2","headless":true,"headers":{},"extraChromiumArgs":["--disable-features=TrackingProtection3pcd","--website-analysis-scan=91355eaa-afee-456e-b218-f53a111dd242"],"extraPuppeteerOptions":{}},"browser":{"name":"Chromium","version":"Chrome/127.0.6533.88","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/127.0.0.0 Safari/537.36","platform":{"name":"Linux","version":"4.4.302+"}},"script":{"host":"f55531b6c604","version":{"npm":"3.11.0","commit":"dev"},"node_version":"v24.20.0"},"start_time":"2026-09-08T18:48:58.412Z","end_time":"2026-09-08T18:49:25.159Z","browsing_history":["https://dfir.blog/","https://dfir.blog/cache-up-with-ryan-benson/","https://dfir.blog/cookies-database-moving-in-chrome-96/"],"hosts":{"requests":{"first_party":["dfir.blog"],"third_party":["cdn.jsdelivr.net","www.googletagmanager.com","cdnjs.cloudflare.com","code.jquery.com","us-assets.i.posthog.com","www.google-analytics.com","region1.google-analytics.com","www.youtube.com","fonts.gstatic.com","googleads.g.doubleclick.net","static.doubleclick.net","www.google.com","i.ytimg.com","jnn-pa.googleapis.com","yt3.ggpht.com","www.gstatic.com","ssl.gstatic.com","bugs.chromium.org"]}},"reports":{"behaviour_event_listeners":{"MOUSE":{"https://www.googletagmanager.com/gtag/js?id=G-N4Q2387D5G&cx=c&gtm=4e6930":["click"],"https://us-assets.i.posthog.com/static/array.js":["click","mousemove","scroll"],"https://us-assets.i.posthog.com/static/1.428.6/posthog-recorder.js":["scroll","dblclick","click","mousemove"],"https://us-assets.i.posthog.com/static/1.428.6/dead-clicks-autocapture.js":["scroll","click"],"https://us-assets.i.posthog.com/static/1.428.6/web-vitals-with-attribution.js":["click"],"https://www.google.com/js/th/G5s0FYD0GgWZZjbkTNlpLS4sE_pY3Ukc9b-hnMRvpHg.js":["mousedown","mousemove","mouseup"],"https://www.youtube.com/s/player/8c3fda2d/player_embed_es6.vflset/en_US/base.js":["mousemove","scroll","mouseup","mousedown"],"https://www.googletagmanager.com/gtag/js?id=G-N4Q2387D5G&cx=c&gtm=4e6941h2":["click"],"https://dfir.blog/assets/built/casper.js?v=bb692af985":["scroll"]},"KEYBOARD":{"https://us-assets.i.posthog.com/static/1.428.6/posthog-recorder.js":["input"],"https://us-assets.i.posthog.com/static/1.428.6/web-vitals-with-attribution.js":["keydown"],"https://cdn.jsdelivr.net/ghost/comments-ui@~0.16/umd/comments-ui.min.js":["keydown"],"https://cdn.jsdelivr.net/ghost/sodo-search@~1.1/umd/sodo-search.min.js":["keydown"],"https://www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.0mUuqxROrlY.2021.O/ck=ytembeds.base.UGIbaskIjd4.L.W.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywGP8N7n1NHE6B98-yChJ-3sNDvkAQ/m=r78Drb":["keydown"],"https://www.youtube.com/s/player/8c3fda2d/player_embed_es6.vflset/en_US/base.js":["keyup","keydown"]},"TOUCH":{"https://us-assets.i.posthog.com/static/1.428.6/posthog-recorder.js":["touchcancel","touchmove"],"https://www.google.com/js/th/G5s0FYD0GgWZZjbkTNlpLS4sE_pY3Ukc9b-hnMRvpHg.js":["touchend","touchstart"],"https://www.youtube.com/s/player/8c3fda2d/player_embed_es6.vflset/en_US/base.js":["touchstart","touchend"]},"SENSOR":{"https://www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.0mUuqxROrlY.2021.O/ck=ytembeds.base.UGIbaskIjd4.L.W.O/am=AAAAQA/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywGP8N7n1NHE6B98-yChJ-3sNDvkAQ/m=r78Drb":["orientationchange"],"https://www.youtube.com/s/player/8c3fda2d/player_embed_es6.vflset/en_US/base.js":["orientationchange"]}},"canvas_fingerprinters":{"data_url":{},"fingerprinters":[],"styles":{},"texts":{}},"canvas_font_fingerprinters":{"canvas_font":{},"text_measure":{}},"cookies":[{"name":"_gid","value":"GA1.2.1580344816.1788893361","domain":"dfir.blog","path":"/","expires":"2026-09-09T18:49:21.000Z","size":31,"httpOnly":false,"secure":false,"session":false,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"_gat_gtag_UA_131330742_1","value":"1","domain":"dfir.blog","path":"/","expires":"2026-09-08T18:50:21.000Z","size":25,"httpOnly":false,"secure":false,"session":false,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"_ga_N4Q2387D5G","value":"GS2.1.s1788893347$o1$g1$t1788893361$j46$l0$h0","domain":"dfir.blog","path":"/","expires":"2027-10-13T18:49:21.671Z","size":59,"httpOnly":false,"secure":false,"session":false,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"_ga","value":"GA1.1.1761189307.1788893361","domain":"dfir.blog","path":"/","expires":"2027-10-13T18:49:21.674Z","size":30,"httpOnly":false,"secure":false,"session":false,"priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false},{"name":"ph_phc_Fii4qpfudQVeLFlznm3PzI7Ur0cNrWJ2mnNY3m9aOYh_posthog","value":"%7B%22%24device_id%22%3A%2201a0825a-3b30-75e5-9700-87dcd337b99d%22%2C%22distinct_id%22%3A%2201a0825a-3b30-75e5-9700-87dcd337b99d%22%2C%22%24sesid%22%3A%5B1788893364270%2C%2201a0825a-3fb9-736c-98f6-5f9e50afb013%22%2C1788893347766%5D%2C%22%24user_state%22%3A%22anonymous%22%7D","domain":"dfir.blog","path":"/","expires":"2027-09-08T18:49:24.000Z","size":332,"httpOnly":false,"secure":true,"session":false,"sameSite":"Lax","priority":"Medium","sameParty":false,"sourceScheme":"Secure","sourcePort":443,"type":"js","third_party":false}],"fb_pixel_events":[],"tiktok_pixel_events":[],"twitter_pixel_events":[],"google_analytics_events":[],"key_logging":{},"session_recorders":{},"third_party_trackers":[{"data":{"body":"en=page_view\r\nen=user_engagement&_et=3166","filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{"_eu":"AAAIAAQ","_p":1788893359568,"_s":1,"are":1,"cid":1761189307.1788893,"dl":"https://dfir.blog/cookies-database-moving-in-chrome-96/","dma":1,"dma_cps":"a","dt":"Cookies Database Moving in Chrome 96","frm":0,"gcd":"13l3l3l2l1l1","gtm":"45je6930v884112329za20g","ngs":1,"npa":1,"pscdl":"","rcb":8,"sct":1,"seg":1,"sid":1788893347,"sr":"393x659","tag_exp":"115616986~115938466~115938468~118897920~118897930~120213116~120385423~120420415~120469145~120469153","tfd":5933,"tid":"G-N4Q2387D5G","uaa":"","uab":"","uafvl":"","uam":"","uamb":0,"uap":"","uapv":"","uaw":0,"ul":"en-us","v":2}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://region1.google-analytics.com/g/collect?v=2&tid=G-N4Q2387D5G&gtm=45je6930v884112329za20g&_p=1788893359568&gcd=13l3l3l2l1l1&npa=1&dma_cps=a&dma=1&_eu=AAAIAAQ&are=1&cid=1761189307.1788893361&frm=0&ngs=1&pscdl=&rcb=8&sr=393x659&uaa=&uab=&uafvl=&uam=&uamb=0&uap=&uapv=&uaw=0&ul=en-us&tag_exp=115616986~115938466~115938468~118897920~118897930~120213116~120385423~120420415~120469145~120469153&sid=1788893347&sct=1&seg=1&dl=https%3A%2F%2Fdfir.blog%2Fcookies-database-moving-in-chrome-96%2F&dt=Cookies%20Database%20Moving%20in%20Chrome%2096&_s=1&tfd=5933"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/surveys.js"},{"data":{"body":{},"filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.google-analytics.com/analytics.js"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"cx":"c","gtm":null,"id":"G-N4Q2387D5G"}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=G-N4Q2387D5G&cx=c&gtm=4e6930"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/array/phc_Fii4qpfudQVeLFlznm3PzI7Ur0cNrWJ2mnNY3m9aOYh/config.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/dead-clicks-autocapture.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/posthog-recorder.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/web-vitals-with-attribution.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/array.js"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"id":"UA-131330742-1"}},"stack":[{"fileName":"https://dfir.blog/cookies-database-moving-in-chrome-96/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=UA-131330742-1"},{"data":{"body":{"context":{"client":{"browserName":"Safari Mobile","browserVersion":"17.5.15E148","clientName":56,"clientVersion":"2.20260908.01.00","configInfo":{"appInstallData":"CKixgdUGEPjEgBMQx_yAExDgt9EcELjkzhwQysHSHBCu1s8cEKjH0hwQwY_QHBC9mbAFEMbK0hwQvbauBRDw3tEcEIHNzhwQma_SHBCFyNIcEL6KsAUQ8bTQHBDK-4ATEMn2gBMQvoTRHBCEndIcEN68zhwQ_LLOHBCgr9IcEJmNsQUQspHRHBDjh7giEIiQ0RwQqMHSHBDxnLAFEImwzhwQrom4IhAAEL_A0hwQlKjSHBDa984cEIeszhwQpKnRHBDRiLgiEOn40RwQvKTQHBCe0LAFEPu00hwQzN-uBRCfz4ATEMuT0hwQxbXSHBD2q7AFEOfr0RwQ9vfRHBDbrdIcEOvN0BwQw6LSHBCa89EcEPXp0RwqdENBTVNVaFZKLVpxLURNZVVFcFVDbkE3NUZaNEY0QmJkMmctT0E5UUdBTDhBQk1RRjNBSFpxT2tMTXFDc0JBT1R6QU8yNUFia2hSZXN1d1BaMVFYZExNcHN5cWNFdTFHSE9LS0VCUVVGQlFPeWxnWUZIUWM9MAA%3D"},"connectionType":"CONN_CELLULAR_4G","deviceMake":"apple","deviceModel":"iphone","gl":"FR","hl":"en","osName":"iPhone","osVersion":"17_5","platform":"MOBILE","userAgent":"Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1","windowHeightPoints":199,"windowWidthPoints":353},"thirdParty":{"embedUrl":"https://dfir.blog/cache-up-with-ryan-benson/"}},"events":[{"context":{"lastActivityMs":"4518"},"eventTimeMs":1788893358390,"visualElementShown":{"clientData":{},"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"elementIndex":0,"veCounter":2,"veType":28572}}},{"context":{"lastActivityMs":"4546"},"eventTimeMs":1788893358419,"visualElementAttached":{"childVes":[{"elementIndex":0,"veCounter":3,"veType":23851}],"csn":"D8Zx5cQZuTDMP6W3","parentVe":{"veType":32594}}},{"context":{"lastActivityMs":"4546"},"eventTimeMs":1788893358419,"visualElementShown":{"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"elementIndex":0,"veCounter":3,"veType":23851}}},{"context":{"lastActivityMs":"4547"},"eventTimeMs":1788893358420,"visualElementAttached":{"childVes":[{"elementIndex":0,"veCounter":4,"veType":36925}],"csn":"D8Zx5cQZuTDMP6W3","parentVe":{"veType":32594}}},{"context":{"lastActivityMs":"4547"},"eventTimeMs":1788893358420,"visualElementShown":{"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"elementIndex":0,"veCounter":4,"veType":36925}}},{"context":{"lastActivityMs":"4560"},"eventTimeMs":1788893358432,"foregroundHeartbeatScreenAssociated":{"clientDocumentNonce":"r7vuf66bl12YPS_5","clientScreenNonce":"O42-ACYlfQAv03cV"}},{"context":{"lastActivityMs":"4567"},"eventTimeMs":1788893358439,"foregroundHeartbeatScreenAssociated":{"clientDocumentNonce":"r7vuf66bl12YPS_5","clientScreenNonce":"D8Zx5cQZuTDMP6W3"}},{"context":{"lastActivityMs":"4568"},"eventTimeMs":1788893358440,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ftl"}},{"context":{"lastActivityMs":"4568"},"eventTimeMs":1788893358441,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ol"}},{"context":{"lastActivityMs":"4570"},"eventTimeMs":1788893358442,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ol"}},{"context":{"lastActivityMs":"4580"},"eventTimeMs":1788893358452,"visualElementShown":{"clientData":{},"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"elementIndex":0,"veCounter":3,"veType":23851}}},{"context":{"lastActivityMs":"4580"},"eventTimeMs":1788893358453,"visualElementShown":{"clientData":{},"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"elementIndex":0,"veCounter":4,"veType":36925}}},{"context":{"lastActivityMs":"4632"},"eventTimeMs":1788893358504,"visualElementShown":{"clientData":{},"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"trackingParams":"CAQQ-N8BGAAiEwjB5saG09-WAxULW3oFHVcZHhs="}}},{"context":{"lastActivityMs":"4632"},"eventTimeMs":1788893358504,"visualElementShown":{"clientData":{},"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"trackingParams":"CAIQyvMFIhMIwebGhtPflgMVC1t6BR1XGR4b"}}},{"context":{"lastActivityMs":"4973"},"eventTimeMs":1788893358845,"finalPayload":{"csn":"D8Zx5cQZuTDMP6W3"}}],"serializedClientEventId":{"clientCounter":"7793","serializedEventId":"qFigapvqHd6j9u8PsO_TIQ"}},"filter":"/v1/log_event","listName":"easyprivacy.txt","query":{"alt":"json"}},"stack":[{"fileName":"https://www.youtube.com/embed/lGyF1cFB-xo?feature=oembed","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.youtube.com/youtubei/v1/log_event?alt=json"},{"data":{"body":{"context":{"client":{"browserName":"Safari Mobile","browserVersion":"17.5.15E148","clientName":56,"clientVersion":"2.20260908.01.00","configInfo":{"appInstallData":"CKixgdUGEPjEgBMQx_yAExDgt9EcELjkzhwQysHSHBCu1s8cEKjH0hwQwY_QHBC9mbAFEMbK0hwQvbauBRDw3tEcEIHNzhwQma_SHBCFyNIcEL6KsAUQ8bTQHBDK-4ATEMn2gBMQvoTRHBCEndIcEN68zhwQ_LLOHBCgr9IcEJmNsQUQspHRHBDjh7giEIiQ0RwQqMHSHBDxnLAFEImwzhwQrom4IhAAEL_A0hwQlKjSHBDa984cEIeszhwQpKnRHBDRiLgiEOn40RwQvKTQHBCe0LAFEPu00hwQzN-uBRCfz4ATEMuT0hwQxbXSHBD2q7AFEOfr0RwQ9vfRHBDbrdIcEOvN0BwQw6LSHBCa89EcEPXp0RwqdENBTVNVaFZKLVpxLURNZVVFcFVDbkE3NUZaNEY0QmJkMmctT0E5UUdBTDhBQk1RRjNBSFpxT2tMTXFDc0JBT1R6QU8yNUFia2hSZXN1d1BaMVFYZExNcHN5cWNFdTFHSE9LS0VCUVVGQlFPeWxnWUZIUWM9MAA%3D"},"connectionType":"CONN_CELLULAR_4G","deviceMake":"apple","deviceModel":"iphone","gl":"FR","hl":"en","osName":"iPhone","osVersion":"17_5","platform":"MOBILE","userAgent":"Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1","windowHeightPoints":199,"windowWidthPoints":353},"thirdParty":{"embedUrl":"https://dfir.blog/cache-up-with-ryan-benson/"}},"events":[{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353258,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"mm_is"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353268,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"mm_ie"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353287,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_cus"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353288,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_eps"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353292,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_epe"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353293,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_cue"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353717,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"pe"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353761,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_wes"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352607,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"srt"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352433,"latencyActionBaselined":{"clientActionNonce":"f2vZlYqZPkum3FV0"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352472,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"nreqs"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352607,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"nress"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352639,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"nrese"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352773,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"wffs"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352938,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"wffe"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352757,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rsf_pj"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352881,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rse_pj"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352755,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rsf_pc"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352821,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rse_pc"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352756,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rsf_ecj"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352849,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rse_ecj"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352756,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rsf_ecc"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893352784,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rse_ecc"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353794,"latencyActionInfo":{"actionType":"LATENCY_ACTION_VIDEO_PREVIEW","clientActionNonce":"f2vZlYqZPkum3FV0","httpProtocol":"h2","isNavigation":true,"isVisible":true,"loadType":"cold","transportProtocol":"tcp"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353071,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"rses_dpj"}},{"context":{"lastActivityMs":"-1"},"eventTimeMs":1788893353823,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_wee"}},{"context":{"lastActivityMs":"232"},"eventTimeMs":1788893354104,"screenCreated":{"csn":"O42-ACYlfQAv03cV","pageVe":{"veType":16623,"youtubeData":{"servletData":{"serializedServletEventId":"qFigapvqHd6j9u8PsO_TIQ"}}}}},{"context":{"lastActivityMs":"234"},"eventTimeMs":1788893354106,"latencyActionInfo":{"clientActionNonce":"f2vZlYqZPkum3FV0","clientScreenNonce":"O42-ACYlfQAv03cV"}},{"context":{"lastActivityMs":"235"},"eventTimeMs":1788893354107,"screenCreated":{"csn":"D8Zx5cQZuTDMP6W3","implicitGesture":{"gestureType":"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED","gesturedVe":{"veType":16623},"parentCsn":"O42-ACYlfQAv03cV"},"pageVe":{"veType":32594}}},{"context":{"lastActivityMs":"238"},"eventTimeMs":1788893354110,"visualElementHidden":{"csn":"O42-ACYlfQAv03cV","eventType":16,"ve":{"veType":16623}}},{"context":{"lastActivityMs":"238"},"eventTimeMs":1788893354110,"latencyActionInfo":{"clientActionNonce":"f2vZlYqZPkum3FV0","clientScreenNonce":"D8Zx5cQZuTDMP6W3"}},{"context":{"lastActivityMs":"240"},"eventTimeMs":1788893354112,"visualElementAttached":{"childVes":[{"trackingParams":"CAAQru4BIhMIwebGhtPflgMVC1t6BR1XGR4bygEE3kfQ6w=="}],"csn":"D8Zx5cQZuTDMP6W3","parentVe":{"veType":32594}}},{"context":{"lastActivityMs":"290"},"eventTimeMs":1788893354163,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"qoes"}},{"context":{"lastActivityMs":"308"},"eventTimeMs":1788893354181,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"fs"}},{"context":{"lastActivityMs":"484"},"eventTimeMs":1788893354356,"latencyActionInfo":{"clientActionNonce":"f2vZlYqZPkum3FV0","clientPlaybackNonce":"y3Olep7gRNMh7s24"}},{"context":{"lastActivityMs":"492"},"eventTimeMs":1788893354364,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_pr"}},{"context":{"lastActivityMs":"539"},"eventTimeMs":1788893354411,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"pot_ist"}},{"context":{"lastActivityMs":"722"},"eventTimeMs":1788893354594,"latencyActionInfo":{"clientActionNonce":"f2vZlYqZPkum3FV0","serverTimeMs":102}},{"context":{"lastActivityMs":"932"},"eventTimeMs":1788893354805,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_ijs"}},{"context":{"lastActivityMs":"937"},"eventTimeMs":1788893354810,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_ije"}},{"context":{"lastActivityMs":"948"},"eventTimeMs":1788893354821,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_rs"}},{"context":{"lastActivityMs":"957"},"eventTimeMs":1788893354830,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ep_init_re"}},{"context":{"lastActivityMs":"1164"},"eventTimeMs":1788893355036,"visualElementAttached":{"childVes":[{"elementIndex":0,"veCounter":2,"veType":28572}],"csn":"D8Zx5cQZuTDMP6W3","parentVe":{"veType":32594}}},{"context":{"lastActivityMs":"1164"},"eventTimeMs":1788893355037,"visualElementShown":{"csn":"D8Zx5cQZuTDMP6W3","eventType":1,"ve":{"elementIndex":0,"veCounter":2,"veType":28572}}},{"context":{"lastActivityMs":"1335"},"eventTimeMs":1788893355208,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"ftr"}},{"context":{"lastActivityMs":"1857"},"eventTimeMs":1788893355730,"streamzIncremented":{"serializedIncrementBatch":"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIGg=="}},{"context":{"lastActivityMs":"1861"},"eventTimeMs":1788893355733,"streamzIncremented":{"serializedIncrementBatch":"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"}},{"context":{"lastActivityMs":"2026"},"eventTimeMs":1788893355898,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"pot_if"}},{"context":{"lastActivityMs":"2026"},"eventTimeMs":1788893355899,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"pot_cms"}},{"context":{"lastActivityMs":"2030"},"eventTimeMs":1788893355903,"latencyActionTicked":{"clientActionNonce":"f2vZlYqZPkum3FV0","tickName":"pot_cmf"}},{"context":{"lastActivityMs":"2870"},"eventTimeMs":1788893356742,"streamzIncremented":{"serializedIncrementBatch":"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAJyfQA=="}},{"context":{"lastActivityMs":"2871"},"eventTimeMs":1788893356743,"streamzIncremented":{"serializedIncrementBatch":"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB"}},{"context":{"lastActivityMs":"2871"},"eventTimeMs":1788893356744,"streamzIncremented":{"serializedIncrementBatch":"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAJiZ2UlAIhgKAwoBaQoGCgRhR0lmEgkRAAAAgJmZCUAiGAoDCgFvCgYKBGFHSWYSCREAAAAAAPqWQCIYCgMKAWMKBgoEYUdJZhIJEQAAAACgmbk/IhgKAwoBQwoGCgRhR0lmEgkRAAAAAM3MBEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAkJm5PyIYCgMKAW0KBgoEYUdJZhIJEQAAAABmZgpA"}}],"serializedClientEventId":{"clientCounter":"7792","serializedEventId":"qFigapvqHd6j9u8PsO_TIQ"}},"filter":"/v1/log_event","listName":"easyprivacy.txt","query":{"alt":"json"}},"stack":[{"fileName":"https://www.youtube.com/embed/lGyF1cFB-xo?feature=oembed","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.youtube.com/youtubei/v1/log_event?alt=json"},{"data":{"body":{},"filter":"/generate_204$~xmlhttprequest","listName":"easyprivacy.txt","query":{"lGkXpA":""}},"stack":[{"fileName":"https://www.youtube.com/embed/lGyF1cFB-xo?feature=oembed","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.youtube.com/generate_204?lGkXpA"},{"data":{"body":{},"filter":"||doubleclick.net^","listName":"easylist.txt","query":{"slf_rd":1}},"stack":[{"fileName":"https://www.youtube.com/embed/lGyF1cFB-xo?feature=oembed","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://googleads.g.doubleclick.net/pagead/id?slf_rd=1"},{"data":{"body":{},"filter":"||doubleclick.net^","listName":"easylist.txt","query":{}},"stack":[{"fileName":"https://www.youtube.com/embed/lGyF1cFB-xo?feature=oembed","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://static.doubleclick.net/instream/ad_status.js"},{"data":{"body":{},"filter":"||doubleclick.net^","listName":"easylist.txt","query":{}},"stack":[{"fileName":"https://www.youtube.com/embed/lGyF1cFB-xo?feature=oembed","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://googleads.g.doubleclick.net/pagead/id"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/surveys.js"},{"data":{"body":{},"filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.google-analytics.com/analytics.js"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"cx":"c","gtm":null,"id":"G-N4Q2387D5G"}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=G-N4Q2387D5G&cx=c&gtm=4e6930"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/array/phc_Fii4qpfudQVeLFlznm3PzI7Ur0cNrWJ2mnNY3m9aOYh/config.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/dead-clicks-autocapture.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/posthog-recorder.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/web-vitals-with-attribution.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/array.js"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"id":"UA-131330742-1"}},"stack":[{"fileName":"https://dfir.blog/cache-up-with-ryan-benson/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=UA-131330742-1"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/web-vitals-with-attribution.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/dead-clicks-autocapture.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/posthog-recorder.js"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/1.428.6/surveys.js"},{"data":{"body":{},"filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{"_eu":"AAAI","_fv":1,"_p":1788893345284,"_s":1,"_ss":1,"are":1,"cid":886563763.1788894,"dl":"https://dfir.blog/","dma":1,"dma_cps":"a","dt":"dfir.blog - A blog about Digital Forensics & Incident Response","en":"page_view","frm":0,"gcd":"13l3l3l2l1l1","gtm":"45je6941h2v884112329za20g","ngs":1,"npa":1,"pscdl":"","rcb":3,"sct":1,"seg":0,"sid":1788893347,"sr":"393x659","tag_exp":"115938466~115938468~118897920~118897930~120213116~120385423~120469145~120469153","tfd":2836,"tid":"G-N4Q2387D5G","uaa":"","uab":"","uafvl":"","uam":"","uamb":0,"uap":"","uapv":"","uaw":0,"ul":"en-us","v":2}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://region1.google-analytics.com/g/collect?v=2&tid=G-N4Q2387D5G&gtm=45je6941h2v884112329za20g&_p=1788893345284&gcd=13l3l3l2l1l1&npa=1&dma_cps=a&dma=1&_eu=AAAI&are=1&cid=886563763.1788893347&frm=0&ngs=1&pscdl=&rcb=3&sr=393x659&uaa=&uab=&uafvl=&uam=&uamb=0&uap=&uapv=&uaw=0&ul=en-us&_s=1&tag_exp=115938466~115938468~118897920~118897930~120213116~120385423~120469145~120469153&sid=1788893347&sct=1&seg=0&dl=https%3A%2F%2Fdfir.blog%2F&dt=dfir.blog%20-%20A%20blog%20about%20Digital%20Forensics%20%26%20Incident%20Response&en=page_view&_fv=1&_ss=1&tfd=2836"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/array/phc_Fii4qpfudQVeLFlznm3PzI7Ur0cNrWJ2mnNY3m9aOYh/config.js"},{"data":{"body":{},"filter":"||google-analytics.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.google-analytics.com/analytics.js"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"cx":"c","gtm":"4e6941h2","id":"G-N4Q2387D5G"}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=G-N4Q2387D5G&cx=c&gtm=4e6941h2"},{"data":{"body":{},"filter":"||posthog.com^$third-party","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://us-assets.i.posthog.com/static/array.js"},{"data":{"body":{},"filter":"||googletagmanager.com^","listName":"easyprivacy.txt","query":{"id":"UA-131330742-1"}},"stack":[{"fileName":"https://dfir.blog/","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://www.googletagmanager.com/gtag/js?id=UA-131330742-1"}]}}