Edit tour

Windows Analysis Report
https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml

Overview

General Information

Sample URL:	https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml
Analysis ID:	1583391
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish62

Javascript uses Websockets

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

HTML page contains string obfuscation

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5248 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5656 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.4.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.8.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.10.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T16:12:20.018752+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49877	188.42.29.166	443	TCP
2025-01-02T16:12:24.407777+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49985	178.250.1.9	443	TCP
2025-01-02T16:12:24.625281+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	49982	62.76.157.185	443	TCP
2025-01-02T16:12:24.987033+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50020	74.119.117.16	443	TCP
2025-01-02T16:12:27.071688+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50058	208.93.169.131	443	TCP
2025-01-02T16:12:27.917759+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50090	195.209.109.19	443	TCP
2025-01-02T16:12:29.450662+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50136	195.209.109.19	443	TCP
2025-01-02T16:12:30.838809+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50164	52.31.168.245	443	TCP
2025-01-02T16:12:34.307136+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50227	5.101.76.186	443	TCP

HTTP traffic detected: POST /atlas/metrics/ HTTP/1.1Host: www.gazeta.ruConnection: keep-aliveContent-Length: 2098sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: text/plainX-Media-Atlas-Auth: basic cm9vdDp3b294M1NoaWU5b2dvaERlaTF0YWhmZXNoaXhhaGZhaGNoZVNvaHNpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.gazeta.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==

Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.8.pages.csv, type: HTML
Source: Yara match	File source: 1.10.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML

Source: https://vp.rambler.ru/player/1.142.1/player.html#id=record%3A%3Affe72c54-77ef-4bcd-81e9-931074b30f71&sspJparams=%7B%22puid6%22%3A%22GAZETA_POLITICS%22%2C%22puid10%22%3A%22NO%22%2C%22puid15%22%3A%22news%22%2C%22puid18%22%3A%22GAZETA_POLITICS_NEWS%22%2C%22puid58%22%3A%22zaharova-mariya-vladimirovna%22%2C%22puid59%22%3A%22bc%3Amilitary%3Adisaster%3Achecked%22%2C%22puid60%22%3A%22mid-rossii%22%7D&referrer=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&docking=left-down&dockingDirection=down&enforceStartWhenPlayingInParent=true&aspectRatio=1.7777777777777777&initialId=record%3A%3Affe72c54-77ef-4bcd-81e9-931074b30f71&debug=false&lazy=false&lazyOffset=300&widgetId=m5fgsv5i.vej_1	HTTP Parser: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new error).stack;t&&(e._sentrydebugids=e._sentrydebugids\|\|{},e._sentrydebugids[t]="b403b3e5-ebe4-4129-a68b-6852cdd32d22",e._sentrydebugididentifier="sentry-dbid-b403b3e5-ebe4-4129-a68b-6852cdd32d22")}catch(e){}}();var _global="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};_global.sentry_release={id:"165f5bf8ae24607e5c379ec0024eea1cc4f4dcae"},(()=>{var e,t,i={2136:(e,t,i)=>{"use strict";i.d(t,{hd:()=>o});var s,n,r=(s=function(e,t){return s=object.setprototypeof\|\|{__proto__:[]}instanceof array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)object.prototype.hasownproperty.call(t,i)&&(e[i]=t[i])},s(e,t)},function(e,t){if("function"!=typeof t&&null!==t)throw new typeerror("class extends value "+string(t)+" is not a constructor or null");function i(){this.constructor=e}s(e,t),e.prototype=null===t?object.create(t):(i.prototype...
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml	HTTP Parser: {const commenttoungedom = document.getelementbyid('_id_comments_tounge');const commenttoungemarker = commenttoungedom.queryselector('.b_comments_tounge-marker');const commenttoungecnt = commenttoungedom.queryselector('.b_comments_tounge-marker .cnt');const commenttoungelist = commenttoungedom.queryselector('.b_comments_tounge-list-content');const commenttoungeclosebtn = commenttoungedom.queryselector('.b_comments_tounge-closebtn');const pseudoheader = _id_header.queryselector('.b_header-pseudo');const anchorpos = _id_header.getboundingclientrect().bottom + pseudo.clientheight;window.addeventlistener('scroll', function(e){if(window.scrolly > anchorpos){commenttoungedom.classlist.add('m_scrolling_gap');} else {commenttoungedom.classlist.remove('m_scrolling_gap');}})let articlestack;let commentsstack = {totalcomments: 0};commenttoungemarker.addeventlistener('click', ()=>{commenttoungedom.classlist.add('m_show_list');commenttoungedom.classlist.remove('m_show_notice');})commenttoungeclosebtn....

Source: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.4:49876 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50015 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:50212 -> 1.1.1.1:53

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49877 -> 188.42.29.166:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49982 -> 62.76.157.185:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50020 -> 74.119.117.16:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50090 -> 195.209.109.19:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50058 -> 208.93.169.131:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:49985 -> 178.250.1.9:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50136 -> 195.209.109.19:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50164 -> 52.31.168.245:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50227 -> 5.101.76.186:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.41
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.87
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.137
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.137
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.148.137
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.75
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.75

Source: chromecache_611.2.dr	String found in binary or memory: ","link":"https://vp.rambler.ru/admin/ac/gazeta/records/2185966/attributes","source":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::ffe72c54-77ef-4bcd-81e9-931074b30f71","directSource":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::ffe72c54-77ef-4bcd-81e9-931074b30f71","duration":100000,"chunkDuration":2000,"snapshot":"https://static.eaglecdn.com/gazeta/logos/b/1/b1dcea49cd5ce61df7b32e3e13a7e8360282683a.jpg?1685981084","customScreenshotOrig":"https://static.eaglecdn.com/gazeta/logos/9/6/9671fb73ae2de342f1131a0175f0da4b15b8a74c.jpg?1685981084","embedCode":"<div data-widget=\"Player\" data-id=\"record::ffe72c54-77ef-4bcd-81e9-931074b30f71\" data-player-template-id=\"11953\" data-multiplayer-filter-id=\"48300\" data-ad-template-id=\"6522\"></div><script async src=\"https://vp.rambler.ru/player/sdk.js\"></script>","clickUrl":"","defaultShareUrl":"https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml","old":"https://view.eaglecdn.com/api/resources/MjAyMzA2MDUvQW9Lc0tITzZQSzZHQw.m3u8?account=gazeta&type=hlsvod"},"mediaControl":{"skinName":"Universal","backgroundColor":16777215,"foregroundColor":11604246,"textColor":16777215,"hoverColor":11604246,"fontUrl":null},"vigo":true,"statistic":{"url":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834338","recordViewStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834338","recordViewStatUrl5s":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view_5s?e=1735834338","playerLoadStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_load?e=1735834338"},"share":{"skinName":null,"embedCodes":true,"socialNetworks":true},"suggest":{"skinName":"suggest_plugin","url":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","urlPause":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","puid4":null,"puid5":"15","puid6":"92","puid7":null,"tag":["PD-2","Bayraktar-TB2","H10-Poseidon-II","Mugin-5-Pro","Ukrspecsystems","Ukrjet","UJ-22-Airborne"," equals www.rambler.ru (Rambler)
Source: chromecache_404.2.dr	String found in binary or memory: ","link":"https://vp.rambler.ru/admin/ac/gazeta/records/2185966/attributes","source":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::ffe72c54-77ef-4bcd-81e9-931074b30f71","directSource":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::ffe72c54-77ef-4bcd-81e9-931074b30f71","duration":100000,"chunkDuration":2000,"snapshot":"https://static.eaglecdn.com/gazeta/logos/b/1/b1dcea49cd5ce61df7b32e3e13a7e8360282683a.jpg?1685981084","customScreenshotOrig":"https://static.eaglecdn.com/gazeta/logos/9/6/9671fb73ae2de342f1131a0175f0da4b15b8a74c.jpg?1685981084","embedCode":"<div data-widget=\"Player\" data-id=\"record::ffe72c54-77ef-4bcd-81e9-931074b30f71\" data-player-template-id=\"11953\" data-multiplayer-filter-id=\"48300\" data-ad-template-id=\"6522\"></div><script async src=\"https://vp.rambler.ru/player/sdk.js\"></script>","clickUrl":"","defaultShareUrl":"https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml","old":"https://view.eaglecdn.com/api/resources/MjAyMzA2MDUvQW9Lc0tITzZQSzZHQw.m3u8?account=gazeta&type=hlsvod"},"mediaControl":{"skinName":"Universal","backgroundColor":16777215,"foregroundColor":11604246,"textColor":16777215,"hoverColor":11604246,"fontUrl":null},"vigo":true,"statistic":{"url":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834343","recordViewStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834343","recordViewStatUrl5s":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view_5s?e=1735834343","playerLoadStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_load?e=1735834343"},"share":{"skinName":null,"embedCodes":true,"socialNetworks":true},"suggest":{"skinName":"suggest_plugin","url":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","urlPause":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","puid4":null,"puid5":"15","puid6":"92","puid7":null,"tag":["PD-2","Bayraktar-TB2","H10-Poseidon-II","Mugin-5-Pro","Ukrspecsystems","Ukrjet","UJ-22-Airborne"," equals www.rambler.ru (Rambler)
Source: chromecache_520.2.dr	String found in binary or memory: VD.prototype.l=function(a){switch(a.type){case "playing":XD(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&WD(this)>0&&(this.B=!0,XD(this))}};var XD=function(a){!a.g.enabled&&a.B&&(a.F=WD(a)1E3,a.C=Date.now(),a.A=!1,a.g.start())};VD.prototype.G=function(){var a=Date.now(),b=a-this.C,c=WD(this)1E3;c-this.F<b.5?this.A\|\|(this.A=!0,this.dispatchEvent("playbackStalled")):this.A=!1;this.F=c;this.C=a};var YD="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ZD=/\bocr\b/; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.gazeta.ru
Source: global traffic	DNS traffic detected: DNS query: static.gazeta.ru
Source: global traffic	DNS traffic detected: DNS query: id.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: ssp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: vp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: rcmjs.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: img.gazeta.ru
Source: global traffic	DNS traffic detected: DNS query: comments.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: data.24smi.net
Source: global traffic	DNS traffic detected: DNS query: cls.ad-tech.ru
Source: global traffic	DNS traffic detected: DNS query: ssp01.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: rcm-tr.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: img02.ad-tech.ru
Source: global traffic	DNS traffic detected: DNS query: api.vp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: view.eaglecdn.com
Source: global traffic	DNS traffic detected: DNS query: static.eaglecdn.com
Source: global traffic	DNS traffic detected: DNS query: static.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: yandex.ru
Source: global traffic	DNS traffic detected: DNS query: an.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: ads.adfox.ru
Source: global traffic	DNS traffic detected: DNS query: hlsvod.rambler.eaglecdn.com
Source: global traffic	DNS traffic detected: DNS query: profile.ad-tech.ru
Source: global traffic	DNS traffic detected: DNS query: sentry-saas.rambler-co.ru
Source: global traffic	DNS traffic detected: DNS query: sandbox.ssp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: px.adhigh.net
Source: global traffic	DNS traffic detected: DNS query: lbs-ru1.ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: sync.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: redirect.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: sync.bumlam.com
Source: global traffic	DNS traffic detected: DNS query: exchange.buzzoola.com
Source: global traffic	DNS traffic detected: DNS query: gazeta.media.eagleplatform.com
Source: global traffic	DNS traffic detected: DNS query: sync.upravel.com
Source: global traffic	DNS traffic detected: DNS query: yastatic.net
Source: global traffic	DNS traffic detected: DNS query: avatars.mds.yandex.net
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: dmg.digitaltarget.ru
Source: global traffic	DNS traffic detected: DNS query: x01.aidata.io
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: ssp.bidvol.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: counter.yadro.ru
Source: global traffic	DNS traffic detected: DNS query: www.tns-counter.ru
Source: global traffic	DNS traffic detected: DNS query: top-fwz1.mail.ru
Source: global traffic	DNS traffic detected: DNS query: st.top100.ru
Source: global traffic	DNS traffic detected: DNS query: log.strm.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: visor.sberbank.ru
Source: global traffic	DNS traffic detected: DNS query: autocontext.begun.ru
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: stats.mos.ru
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: 1026--058943e2-62ce-42fe-81a4-506d11566e6c.stbid.ru
Source: global traffic	DNS traffic detected: DNS query: const.uno
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: img.24smi.net
Source: global traffic	DNS traffic detected: DNS query: ssp.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: sync.1dmp.io
Source: global traffic	DNS traffic detected: DNS query: ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: tms.dmp.wi-fi.ru
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: kraken.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: sync.dmp.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: privacy-cs.mail.ru
Source: global traffic	DNS traffic detected: DNS query: mc.webvisor.org
Source: global traffic	DNS traffic detected: DNS query: ads.adlook.me
Source: global traffic	DNS traffic detected: DNS query: stun3.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun4.l.google.com
Source: global traffic	DNS traffic detected: DNS query: aidata-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: cm.p.altergeo.ru
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: atlas.rambler.ru

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, no-cache, no-store, must-revalidate, max-age=0Connection: CloseContent-Length: 43Content-Type: image/gif; charset=utf-8Date: Thu, 02 Jan 2025 15:12:26 GMTExpires: Thu, 02 Jan 2025 15:12:26 GMTLast-Modified: Thu, 02 Jan 2025 15:12:26 GMTPragma: no-cacheSet-Cookie: bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYNrZ2rsGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=; Path=/; Domain=.yandex.ru; Expires=Fri, 06 Feb 2026 15:12:26 GMT; SameSite=None; SecureStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-XSS-Protection: 1; mode=block
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 15:12:28 GMTContent-Type: application/jsonContent-Length: 159Connection: closex-response-id: aiPdcumAyCdqx-build-info: 0.126.1(264ee79bdb6f79172c2fcac700f387569fa95fbf)

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5248 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5656 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5248 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5656 --field-trial-handle=2004,i,206666507640972318,8753695727953184349,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
sync.upravel.com	93.189.58.210	true	false	high
securepubads.g.doubleclick.net	216.58.212.130	true	false	high
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
id.rambler.ru	81.19.78.78	true	false	high
gazeta.ru	81.19.72.0	true	false	high
static.eaglecdn.com	81.19.87.28	true	false	high
stun3.l.google.com	74.125.250.129	true	false	high
x01.aidata.io	89.108.120.68	true	false	high
sandbox.ssp.rambler.ru	87.242.92.190	true	false	high
stats.g.doubleclick.net	74.125.71.156	true	false	high
top-fwz1.mail.ru	95.163.52.67	true	false	high
balance.segmento.ru	45.9.24.193	true	false	high
sync.crwdcntrl.net	52.17.153.181	true	false	high
an.yandex.ru	77.88.21.90	true	false	high
ssp.adriver.ru	195.209.109.19	true	false	high
www.google.com	142.250.184.228	true	false	high
vp.rambler.ru	81.19.87.48	true	false	high
lb-prod.adlook.me	5.101.76.186	true	false	high
comments.rambler.ru	81.19.82.48	true	false	high
sentry-saas.rambler-co.ru	81.19.73.31	true	false	high
krf.r.mail.ru	95.163.52.89	true	false	high
visor.sberbank.ru	84.252.144.187	true	false	high
2e2qdr4l9f.a.trbcdn.net	151.236.71.248	true	false	high
redirect.frontend.weborama.fr	35.190.24.218	true	false	high
www.tns-counter.ru	194.226.130.228	true	false	high
img02.ad-tech.ru	46.243.201.48	true	false	high
ads.adfox.ru	77.88.21.179	true	false	high
avatars.mds.yandex.net	87.250.247.181	true	false	high
autocontext.begun.ru	62.76.157.185	true	false	high
log.strm.yandex.ru	87.250.251.15	true	false	high
rcmjs.rambler.ru	81.19.82.58	true	false	high
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	high
data.24smi.net	172.67.70.192	true	false	high
mc.webvisor.org	93.158.134.119	true	false	high
mc.yandex.ru	93.158.134.119	true	false	high
sync.1dmp.io	87.242.89.90	true	false	high
stun4.l.google.com	74.125.250.129	true	false	high
view.eaglecdn.com	81.19.87.28	true	false	high
rcm-tr.rambler.ru	81.19.82.56	true	false	high
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	high

Name	Malicious	Reputation
https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fsync.rambler.ru%2Fset%3Fpartner_id%3Dab56d453-f95a-4cbc-97b3-1e30a8f95173%26id%3D%7BWEBO_CID%7D&usr=0000042e-6776-accc-1188-35b2699cef01&bounce=1&random=2389313243	false	high
https://st.top100.ru/top100/top100.js	false	high
https://mc.webvisor.org/sync_cookie_image_check	false	high
https://x01.aidata.io/0.gif?pid=RAMBLER&id=16FA839391511CB434D54FF776B985CD	false	high
https://vp.rambler.ru/player/1.142.1/3883-05de77dcdf3fd18f16c1.js	false	high
https://static.gazeta.ru/nm2021/js/others_scripts_v6.js	false	high
https://api.vp.rambler.ru/api/v3/records/getPlayerData?params=%7B%22referrer%22%3A%22https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml%22%2C%22uuid%22%3A%22record%3A%3Affe72c54-77ef-4bcd-81e9-931074b30f71%22%2C%22checkReferrerCount%22%3Atrue%7D	false	high
https://www.gazeta.ru/dynamic/like?doc_key=/politics/news/2024/12/22/24684722.shtml&rnd=0.5204018880104793	false	high
https://mc.yandex.ru/webvisor/230672?wv-type=9&wmode=0&wv-hit=834123165&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&browser-info=et%3A1735830798%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101317%3Au%3A1735830743396056174%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830798&t=gdpr(14)ti(1)	false	high
https://static.gazeta.ru//nm2021//img/pinch_zoom.svg	false	high
https://hlsvod.rambler.eaglecdn.com/gazeta/20230605/PxlaxaItXD0sg.mp4/seg-30-v1-a1.ts	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/vk_round_2024.svg	false	high
https://mc.yandex.ru/webvisor/27775902?wv-type=9&wmode=0&wv-hit=834123165&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&browser-info=et%3A1735830773%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101253%3Au%3A1735830743396056174%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830773&t=gdpr(14)ti(1)	false	high
https://yandex.ru/ads/system/adsdk.js	false	high
https://hlsvod.rambler.eaglecdn.com/gazeta/20230605/PxlaxaItXD0sg.mp4/seg-27-v1-a1.ts	false	high
https://static.gazeta.ru/nm2021/css/fonts_2022_v2.css	false	high
https://hlsvod.rambler.eaglecdn.com/gazeta/20230605/PxlaxaItXD0sg.mp4/seg-22-v1-a1.ts	false	high
https://img.gazeta.ru/files3/740/20322740/dvestor-pic_32ratio_600x400-600x400-3801.jpg	false	high
https://mc.yandex.ru/webvisor/230672?wv-type=9&wmode=0&wv-hit=834123165&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&browser-info=et%3A1735830783%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101302%3Au%3A1735830743396056174%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830783&t=gdpr(14)ti(1)	false	high
https://static.gazeta.ru/nm2021/css/_print_desktop_v2.css	false	high
https://mc.yandex.ru/clmap/27775902?page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&pointer-click=rn%3A284338779%3Ax%3A19859%3Ay%3A26459%3At%3A301%3Ap%3AGA%7BAA1AA7%3AX%3A400%3AY%3A269&browser-info=u%3A1735830743396056174%3Av%3A1551%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Arqnl%3A1%3Ast%3A1735830773&t=gdpr(14)ti(1)	false	high
https://img.gazeta.ru/files3/666/13565666/marina_yardaeva1-pic_square_200x200-200x200-58503.jpg	false	high
https://sync.rambler.ru/emily?partner_id=aidata&rnd=0000042e-6776-accc-1188-35b2699cef01	false	high
https://mc.yandex.ru/watch/27775902/1?page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1735830745_ba21af3c9c2ee7523aa341764db2f5e7a8ac2fea2d19d5e51fa67c42d4be6aaf&browser-info=pa%3A1%3Aar%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A1%3Als%3A101588834624%3Ahid%3A834123165%3Az%3A-300%3Ai%3A20250102101225%3Aet%3A1735830745%3Ac%3A1%3Arn%3A235620298%3Arqn%3A4%3Au%3A1735830743396056174%3Aw%3A1263x890%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1735830729180%3Agi%3AR0ExLjIuNjc2MjgwMjAzLjE3MzU4MzA3NDM%3D%3Arqnl%3A1%3Ast%3A1735830745&t=gdpr(14)mc(p-10)clc(0-0-0)rqnt(4)aw(1)rcm(1)cdl(na)eco(42017284)ti(0)&force-urlencoded=1&site-info=%7B%22headerClicksHandler%22%3A%7B%22desktopMainHeader%22%3A%22view%22%7D%7D	false	high
https://top-fwz1.mail.ru/js/dyn-goal-config.js?ids=8821	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/tg_round_2024.svg	false	high
https://img.gazeta.ru/files3/233/19310233/20210705_zaa_p133_113-pic_32ratio_300x200-300x200-16964.jpg	false	high
https://img.24smi.net/400_400/6/c/6ca30dae7b65bffea92dbf90a810319f.jpeg	false	high
https://mc.yandex.ru/webvisor/27775902?wv-type=9&wmode=0&wv-hit=834123165&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&browser-info=et%3A1735830751%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101230%3Au%3A1735830743396056174%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830751&t=gdpr(14)ti(1)	false	high
https://sync.rambler.ru/emily?partner_id=maximatelecom&id=0000042e-6776-accc-1188-35b2699cef01	false	high
https://hlsvod.rambler.eaglecdn.com/gazeta/20230605/bbrtBHMbdrfPF.mp4/seg-1-v1-a1.ts	false	high
https://img.24smi.net/400_400/8/9/89bb21adc4320f2ca793bb4dd418cb5a.jpeg	false	high
https://mc.yandex.ru/webvisor/27775902?wv-type=9&wmode=0&wv-hit=834123165&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&browser-info=et%3A1735830756%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101235%3Au%3A1735830743396056174%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830756&t=gdpr(14)ti(1)	false	high
https://an.yandex.ru/mapuid/ramblerssp/?0000042e-6776-accc-1188-35b2699cef01	false	high
https://vp.rambler.ru/player/1.142.1/1793-c2843f18d6689ddf58a3.js	false	high
https://mc.yandex.ru/webvisor/230672?wv-type=9&wmode=0&wv-hit=834123165&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&browser-info=et%3A1735830773%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101252%3Au%3A1735830743396056174%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830773&t=gdpr(14)ti(1)	false	high
https://mc.yandex.ru/clmap/230672?page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&pointer-click=rn%3A29075129%3Ax%3A19859%3Ay%3A26459%3At%3A478%3Ap%3AGA%7BAA1AA7%3AX%3A400%3AY%3A269&browser-info=u%3A1735830743396056174%3Av%3A1551%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Arqnl%3A1%3Ast%3A1735830791&t=gdpr(14)ti(1)	false	high
https://mc.yandex.ru/webvisor/230672?wv-type=9&wmode=0&wv-hit=834123165&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684722.shtml&browser-info=et%3A1735830793%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101312%3Au%3A1735830743396056174%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830793&t=gdpr(14)ti(1)	false	high
https://data.24smi.net/informer?object=19146&output=json&num=20	false	high
https://img.gazeta.ru/files3/916/20317916/razdevalk-pic_32ratio_600x400-600x400-94429.jpg	false	high

Name	Source	Malicious	Reputation
https://static.gazeta.ru/nm2021/img/icons/sport/puck.svg);	chromecache_249.2.dr	false	high
https://f.creativecdn.com	chromecache_224.2.dr, chromecache_520.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_700_cyr_ext.woff2)	chromecache_268.2.dr, chromecache_517.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/lora_400.woff)	chromecache_268.2.dr, chromecache_517.2.dr	false	high
https://static.gazeta.ru/nm2021/img/logo_2021_wh.svg)	chromecache_249.2.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_410.2.dr, chromecache_492.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_500_greek_ext.woff)	chromecache_517.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/zen_round_2024.svg)	chromecache_249.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/lora_latin.woff2)	chromecache_268.2.dr, chromecache_517.2.dr	false	high
https://static.gazeta.ru/nm2021//img/icons/sport/yellow_card.svg)	chromecache_249.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/comment_tounge_cnt_bubble_red.svg)	chromecache_267.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_400_greek_ext.woff)	chromecache_517.2.dr	false	high
https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::ffe72c54-77ef-4bcd-81e9-931074b30f7	chromecache_404.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/sport/yellow_red_card.svg);	chromecache_249.2.dr	false	high
https://schema.org/SearchAction	chromecache_267.2.dr	false	high
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	chromecache_224.2.dr, chromecache_520.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/yt_round_2024.svg)	chromecache_249.2.dr	false	high
http://schema.org/ImageObject	chromecache_267.2.dr	false	high
https://img.gazeta.ru/files3/456/20333456/photo_2025-01-02_17-00-23-pic_32ratio_300x200-300x200-6721	chromecache_267.2.dr	false	high
https://www.gazeta.ru/recommended_tech_rules.shtml	chromecache_267.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/sport/puck_bullit.svg);	chromecache_249.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_400.woff)	chromecache_268.2.dr	false	high
https://vp.rambler.ru/admin/ac/gazeta/records/2185966/attributes	chromecache_611.2.dr, chromecache_404.2.dr	false	high
http://schema.org/NewsArticle	chromecache_267.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/audio_play_white.svg)	chromecache_249.2.dr	false	high
http://schema.org/BreadcrumbList	chromecache_267.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/vk_round_2024.svg)	chromecache_249.2.dr	false	high
https://static.gazeta.ru/nm2021//img/icons/sport/ball_auto1.svg);	chromecache_249.2.dr	false	high
https://static.gazeta.ru//nm2021//img/triangle_rounded.svg)	chromecache_249.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_400_vietnamese.woff2)	chromecache_268.2.dr, chromecache_517.2.dr	false	high
https://static.smi2.net/static/logo/smi2.svg	chromecache_267.2.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/sport/change.svg);	chromecache_249.2.dr	false	high
https://static.gazeta.ru/nm2021//img/icons/sport/red_card.svg)	chromecache_249.2.dr	false	high
https://www.gazeta.ru/credits.shtml	chromecache_267.2.dr	false	high
https://static.gazeta.ru/nm2015/i/__svg/camera_2020.svg)	chromecache_249.2.dr	false	high
https://schema.org/WebPage	chromecache_267.2.dr	false	high
http://schema.org/Person	chromecache_267.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_500_greek_ext.woff2)	chromecache_268.2.dr, chromecache_517.2.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_700_vietnamese.woff2)	chromecache_268.2.dr, chromecache_517.2.dr	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
87.250.250.119	unknown	Russian Federation	13238	YANDEXRU	false
5.101.76.186	lb-prod.adlook.me	Russian Federation	48096	ITGRADRU	false
93.189.58.210	sync.upravel.com	Lithuania	56630	MELBICOM-EU-ASMelbikomasUABNL	false
84.252.144.187	visor.sberbank.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
87.242.92.190	sandbox.ssp.rambler.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
188.42.34.65	unknown	Luxembourg	7979	SERVERS-COMUS	false
91.192.148.28	unknown	Russian Federation	42481	BEGUN-ASRU	false
188.42.34.64	ssp.ads.betweendigital.com	Luxembourg	7979	SERVERS-COMUS	false
95.163.84.7	const.uno	Russian Federation	12695	DINET-ASRU	false
77.88.21.90	an.yandex.ru	Russian Federation	13238	YANDEXRU	false
188.120.241.50	1026--058943e2-62ce-42fe-81a4-506d11566e6c.stbid.ru	Russian Federation	29182	THEFIRST-ASRU	false
81.19.89.16	kraken.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
195.201.57.28	unknown	Germany	24940	HETZNER-ASDE	false
81.19.89.17	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
95.163.52.67	top-fwz1.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
87.250.247.181	avatars.mds.yandex.net	Russian Federation	13238	YANDEXRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.220.120.9	tms.dmp.wi-fi.ru	Russian Federation	202173	MAXIMATELECOMRU	false
91.192.150.12	unknown	Russian Federation	42481	BEGUN-ASRU	false
88.212.202.52	counter.yadro.ru	Russian Federation	39134	UNITEDNETRU	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
195.209.109.19	ssp.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
45.9.24.193	balance.segmento.ru	Russian Federation	210053	R5IT-ASRU	false
151.236.71.248	2e2qdr4l9f.a.trbcdn.net	Russian Federation	57363	CDNVIDEO-ASRU	false
81.19.78.77	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.78.78	id.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
87.242.95.157	ssp01.rambler.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
87.242.89.90	sync.1dmp.io	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
87.242.127.163	cls.ad-tech.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
74.125.71.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
65.109.65.188	ssp.bidvol.com	United States	11022	ALABANZA-BALTUS	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
81.19.82.56	rcm-tr.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.82.58	rcmjs.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
178.154.131.215	yastatic.net	Russian Federation	13238	YANDEXRU	false
31.172.81.147	sync.bumlam.com	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
46.243.201.48	img02.ad-tech.ru	Netherlands	56595	FLUENCYGB	false
104.26.8.117	unknown	United States	13335	CLOUDFLARENETUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
193.232.148.137	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
81.19.72.2	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
194.190.76.41	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
81.19.82.48	comments.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
95.163.52.89	krf.r.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
185.15.175.134	dmg.digitaltarget.ru	Russian Federation	43226	SAFEDATAUplinksRU	false
81.19.72.1	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.72.0	gazeta.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
172.67.70.192	data.24smi.net	United States	13335	CLOUDFLARENETUS	false
151.101.193.229	unknown	United States	54113	FASTLYUS	false
81.19.87.48	vp.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
87.250.251.15	log.strm.yandex.ru	Russian Federation	13238	YANDEXRU	false
138.201.139.144	cm.p.altergeo.ru	Germany	24940	HETZNER-ASDE	false
93.158.134.119	mc.webvisor.org	Russian Federation	13238	YANDEXRU	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
52.31.168.245	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
81.19.87.43	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.87.44	hlsvod.rambler.eaglecdn.com	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
185.15.175.157	unknown	Russian Federation	43226	SAFEDATAUplinksRU	false
91.220.120.21	unknown	Russian Federation	202173	MAXIMATELECOMRU	false
77.88.55.88	unknown	Russian Federation	13238	YANDEXRU	false
88.212.201.204	unknown	Russian Federation	39134	UNITEDNETRU	false
52.17.153.181	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
5.255.255.77	yandex.ru	Russian Federation	13238	YANDEXRU	false
89.108.120.68	x01.aidata.io	Russian Federation	43146	AGAVA3RU	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
81.19.87.28	static.eaglecdn.com	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
188.42.29.166	lbs-ru1.ads.betweendigital.com	Luxembourg	7979	SERVERS-COMUS	false
81.19.87.29	gazeta.media.eagleplatform.com	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.82.7	atlas.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
104.26.9.117	img.24smi.net	United States	13335	CLOUDFLARENETUS	false
81.19.82.12	static.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
62.76.157.185	autocontext.begun.ru	Russian Federation	60826	STOLOTO-ASRU	false
74.125.206.154	unknown	United States	15169	GOOGLEUS	false
194.226.130.229	unknown	Russian Federation	52016	TNSMSK-RU	false
216.58.212.130	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
194.226.130.228	www.tns-counter.ru	Russian Federation	52016	TNSMSK-RU	false
45.138.161.87	unknown	Russian Federation	134121	RAINBOW-HKRainbownetworklimitedHK	false
74.125.250.129	stun3.l.google.com	United States	15169	GOOGLEUS	false
81.19.73.31	sentry-saas.rambler-co.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
91.192.149.12	ssp.rambler.ru	Russian Federation	42481	BEGUN-ASRU	false
212.11.155.136	stats.mos.ru	Russian Federation	8901	MoscowMayorsOfficeRU	false
77.88.21.179	ads.adfox.ru	Russian Federation	13238	YANDEXRU	false
45.138.161.75	unknown	Russian Federation	134121	RAINBOW-HKRainbownetworklimitedHK	false
35.190.24.218	redirect.frontend.weborama.fr	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583391
Start date and time:	2025-01-02 16:11:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@24/603@268/90
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: https://www.gazeta.ru Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.gazeta.ru
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Model: Joe Sandbox AI	{ "brands": [ "MID.ru" ] }
	{ "brands": [ "MID.ru" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2527)
Category:	downloaded
Size (bytes):	433952
Entropy (8bit):	5.537092306710184
Encrypted:	false
SSDEEP:	6144:AGV+fcvodshwJ27C9N34WysHXAjj+m3mcGJNEeseSyAAw:Voe+l4SHwHX3xGJNbseSRAw
MD5:	0F1B6FE00248E664C564A43B2FAA4CCB
SHA1:	EA0D51AB445910E6E34595F4320CF1C1CF86F226
SHA-256:	15C1D2C57F6B12E9DFD82EF1B9D2B10E227A9F274D3DF68ECCF2B056CD6FCD7D
SHA-512:	902545798EEF16E91107BE5112259BCD05D4B69160EC5A6FA24CB4C08B8E0979C779F9013FF0EDFDED7F838FBCC691A4D2412D47A9677BC1DDD9DA24549E30FC
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=ca(this),r=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:11 UTC	695	OUT	GET /politics/news/2024/12/22/24684722.shtml HTTP/1.1 Host: www.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 15:12:11 UTC	1016	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=60 Expires: Thu, 02 Jan 2025 15:13:11 GMT Access-Control-Allow-Origin: * Link: <https://static.gazeta.ru/nm2021/css/fonts_2022.css>; rel=preload; as=style Link: <https://static.gazeta.ru/nm2021/css/desktop_styles_collect.v207.css>; rel=preload; as=style Link: <https://static.gazeta.ru/nm2021/css/_ie.css>; rel=preload; as=style Link: <https://static.gazeta.ru/nm2021/js/common.v50.js>; rel=preload; as=script Link: <https://static.gazeta.ru/nm2021/js/noindex/getemoji_v5.js>; rel=preload; as=script Link: <https://id.rambler.ru/rambler-id-helper/auth_events.js>; rel=preload; as=script Link: <https://ssp.rambler.ru/capirs_async.js>; rel=preload; as=script Set-Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==; expires=Fri, 02-Jan-26 15:12:11 GMT; domain=.gazeta.ru; path=/ P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
2025-01-02 15:12:11 UTC	15368	IN	Data Raw: 66 62 31 39 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 72 75 22 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: fb19<!DOCTYPE html><html lang="ru"><head>
2025-01-02 15:12:11 UTC	16384	IN	Data Raw: 75 69 64 33 36 3a 27 27 2c 70 75 69 64 33 37 3a 27 27 2c 70 75 69 64 33 38 3a 27 27 2c 70 75 69 64 33 39 3a 27 27 2c 70 75 69 64 34 30 3a 27 27 2c 70 75 69 64 34 31 3a 27 27 2c 70 75 69 64 34 32 3a 27 27 2c 70 75 69 64 34 33 3a 27 27 2c 70 75 69 64 34 34 3a 27 27 2c 70 75 69 64 34 35 3a 27 27 2c 70 75 69 64 34 36 3a 27 27 2c 70 75 69 64 34 37 3a 27 27 2c 70 75 69 64 34 38 3a 27 27 2c 70 75 69 64 34 39 3a 27 27 2c 70 75 69 64 35 30 3a 27 27 2c 70 75 69 64 35 31 3a 27 27 2c 70 75 69 64 35 32 3a 27 27 2c 70 75 69 64 35 33 3a 27 27 2c 70 75 69 64 35 34 3a 27 27 2c 70 75 69 64 35 35 3a 27 27 2c 70 75 69 64 35 36 3a 27 27 2c 70 75 69 64 35 37 3a 27 27 2c 70 75 69 64 35 38 3a 27 27 2c 70 75 69 64 35 39 3a 27 27 2c 70 75 69 64 36 30 3a 27 27 2c 70 75 69 64 36 31 Data Ascii: uid36:'',puid37:'',puid38:'',puid39:'',puid40:'',puid41:'',puid42:'',puid43:'',puid44:'',puid45:'',puid46:'',puid47:'',puid48:'',puid49:'',puid50:'',puid51:'',puid52:'',puid53:'',puid54:'',puid55:'',puid56:'',puid57:'',puid58:'',puid59:'',puid60:'',puid61
2025-01-02 15:12:11 UTC	16384	IN	Data Raw: 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 61 27 29 3b 0a 68 65 61 64 65 72 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 68 65 61 64 65 72 27 3b 0a 68 65 61 64 65 72 2e 68 72 65 66 20 3d 20 70 61 72 74 6e 65 72 55 72 6c 3b 0a 68 65 61 64 65 72 2e 74 61 72 67 65 74 20 3d 20 27 5f 62 6c 61 6e 6b 27 3b 0a 72 6f 6f 74 2e 61 70 70 65 6e 64 28 68 65 61 64 65 72 29 3b 0a 69 66 28 70 61 72 74 6e 65 72 6c 6f 67 6f 29 7b 0a 6c 65 74 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 69 6d 67 2e 73 72 63 20 3d 20 70 61 72 74 6e 65 72 6c 6f 67 6f 3b 0a 68 65 61 64 65 72 2e 61 70 70 65 6e 64 28 69 6d 67 29 3b 0a 7d 20 65 6c 73 65 20 7b 0a 68 65 61 64 65 72 2e 69 6e 6e 65 Data Ascii: = document.createElement('a');header.className = 'header';header.href = partnerUrl;header.target = '_blank';root.append(header);if(partnerlogo){let img = document.createElement('img');img.src = partnerlogo;header.append(img);} else {header.inne
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 39 39 39 39 70 78 3b 22 20 61 6c 74 3d 22 54 6f 70 2e 4d 61 69 6c 2e 52 75 22 20 2f 3e 0a 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 2f 2f 52 61 74 69 6e 67 40 4d 61 69 6c 2e 72 75 20 63 6f 75 6e 74 65 72 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 54 6f 70 31 30 30 20 28 4b 72 61 6b 65 6e 29 20 57 69 64 67 65 74 20 2d 2d 3e 0a 3c 64 69 76 20 69 64 3d 22 74 6f 70 31 30 30 5f 77 69 64 67 65 74 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 31 30 30 30 70 78 3b 74 6f 70 3a 2d 31 30 30 30 70 78 22 3e 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 45 4e 44 20 54 6f 70 31 30 30 20 28 4b 72 61 6b 65 6e 29 20 57 69 64 67 65 74 20 Data Ascii: 0;position:absolute;left:-9999px;" alt="Top.Mail.Ru" /></div></noscript>... //Rating@Mail.ru counter -->... Top100 (Kraken) Widget --><div id="top100_widget" style="position:absolute;left:-1000px;top:-1000px"></div>... END Top100 (Kraken) Widget
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 5f 6d 65 6e 75 2d 69 74 65 6d 22 20 64 61 74 61 2d 67 61 7a 65 74 61 3d 22 67 61 7a 65 74 61 5f 64 65 73 6b 74 6f 70 3a 3a 63 72 6f 73 73 5f 73 65 63 74 69 6f 6e 3a 3a 68 65 61 64 65 72 3a 3a 6d 65 6e 75 3a 3a 63 69 76 69 6c 69 7a 61 74 69 6f 6e 22 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 73 75 62 6a 65 63 74 73 2f 63 69 76 69 6c 69 7a 61 74 69 6f 6e 2f 22 20 73 74 79 6c 65 3d 22 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 67 61 7a 65 74 61 2e 72 75 2f 6e 6d 32 30 32 31 2f 69 6d 67 2f 63 6f 75 6e 74 72 69 65 73 5f 66 6c 61 67 73 2f 72 75 2e 73 76 67 22 20 73 74 79 6c 65 3d Data Ascii: v><div class="b_menu-item" data-gazeta="gazeta_desktop::cross_section::header::menu::civilization"><a href="/subjects/civilization/" style="white-space: nowrap;" tabindex="-1"><img src="https://static.gazeta.ru/nm2021/img/countries_flags/ru.svg" style=
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 4c 69 73 74 65 6e 65 72 28 27 73 63 72 6f 6c 6c 27 2c 20 65 3d 3e 7b 0a 2f 2f 20 69 66 28 69 73 49 6e 56 69 65 77 28 62 6c 6f 63 6b 29 29 7b 0a 2f 2f 20 69 66 28 21 77 61 73 56 69 73 69 62 6c 65 29 7b 0a 2f 2f 20 73 65 6e 64 59 61 28 22 76 69 65 77 22 29 3b 0a 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 76 69 65 77 27 29 3b 0a 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 64 69 72 28 62 6c 6f 63 6b 29 3b 0a 2f 2f 20 77 61 73 56 69 73 69 62 6c 65 20 3d 20 74 72 75 65 3b 0a 2f 2f 20 7d 0a 2f 2f 20 7d 0a 2f 2f 20 7d 29 0a 2f 2f 20 62 6c 6f 63 6b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 20 65 3d 3e 7b 0a 2f 2f 20 69 66 20 28 21 77 61 73 43 6c 69 63 6b 65 64 29 20 7b 0a 2f 2f 20 73 65 6e 64 59 61 28 22 63 6c 69 63 6b 65 64 22 29 3b Data Ascii: Listener('scroll', e=>{// if(isInView(block)){// if(!wasVisible){// sendYa("view");// console.log('view');// console.dir(block);// wasVisible = true;// }// }// })// block.addEventListener("click", e=>{// if (!wasClicked) {// sendYa("clicked");
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 65 43 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 63 6f 6d 6d 65 6e 74 73 53 74 61 63 6b 2e 74 6f 74 61 6c 43 6f 6d 6d 65 6e 74 73 3b 0a 66 6f 72 28 6c 65 74 20 61 72 74 69 63 6c 65 20 69 6e 20 63 6f 6d 6d 65 6e 74 73 53 74 61 63 6b 29 7b 0a 69 66 28 61 72 74 69 63 6c 65 53 74 61 63 6b 5b 61 72 74 69 63 6c 65 5d 29 7b 0a 6c 65 74 20 6c 69 73 74 49 74 65 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 61 27 29 3b 0a 6c 69 73 74 49 74 65 6d 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 69 74 65 6d 27 3b 0a 6c 69 73 74 49 74 65 6d 2e 68 72 65 66 20 3d 20 61 72 74 69 63 6c 65 53 74 61 63 6b 5b 61 72 74 69 63 6c 65 5d 2e 5f 75 72 6c 3b 0a 6c 65 74 20 74 65 78 74 42 6c 6f 63 6b 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: eCnt.innerHTML = commentsStack.totalComments;for(let article in commentsStack){if(articleStack[article]){let listItem = document.createElement('a');listItem.className = 'item';listItem.href = articleStack[article]._url;let textBlock = document.creat
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 22 70 75 69 64 35 38 22 3a 22 7a 61 68 61 72 6f 76 61 2d 6d 61 72 69 79 61 2d 76 6c 61 64 69 6d 69 72 6f 76 6e 61 22 2c 22 70 75 69 64 35 39 22 3a 22 62 63 3a 6d 69 6c 69 74 61 72 79 3a 64 69 73 61 73 74 65 72 3a 63 68 65 63 6b 65 64 22 2c 22 70 75 69 64 36 30 22 3a 22 6d 69 64 2d 72 6f 73 73 69 69 22 7d 27 0a 64 61 74 61 2d 72 65 66 65 72 72 65 72 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 7a 65 74 61 2e 72 75 2f 70 6f 6c 69 74 69 63 73 2f 6e 65 77 73 2f 32 30 32 34 2f 31 32 2f 32 32 2f 32 34 36 38 34 37 32 32 2e 73 68 74 6d 6c 27 0a 64 61 74 61 2d 64 6f 63 6b 69 6e 67 3d 22 6c 65 66 74 2d 64 6f 77 6e 22 0a 64 61 74 61 2d 64 6f 63 6b 69 6e 67 2d 64 69 72 65 63 74 69 6f 6e 3d 22 64 6f 77 6e 22 0a 64 61 74 61 2d 65 6e 66 6f 72 63 65 2d 73 74 61 72 74 Data Ascii: "puid58":"zaharova-mariya-vladimirovna","puid59":"bc:military:disaster:checked","puid60":"mid-rossii"}'data-referrer='https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml'data-docking="left-down"data-docking-direction="down"data-enforce-start
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 2f 6e 6f 69 6e 64 65 78 3e 0a 0a 3c 2f 64 69 76 3e 0a 0a 0a 3c 2f 61 73 69 64 65 3e 0a 0a 3c 2f 64 69 76 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 5f 6d 61 69 6e 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 22 20 64 61 74 61 2d 63 68 65 63 6b 3d 27 74 72 75 65 27 3e 0a 0a 0a 3c 21 2d 2d 73 65 74 20 76 61 72 3d 22 65 78 63 68 61 6e 67 65 5f 6e 65 65 64 22 20 76 61 6c 75 65 3d 22 73 6d 69 32 22 20 2d 2d 3e 0a 0a 0a 0a 0a 0a 3c 64 69 76 20 69 64 3d 22 5f 67 5f 65 78 63 68 61 6e 67 65 5f 6d 61 69 6e 5f 61 72 74 69 63 6c 65 22 20 64 61 74 61 2d 63 68 65 63 6b 3d 22 30 22 3e 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 3e 0a 69 66 28 21 77 69 6e 64 6f 77 2e 5f 67 5f 74 69 7a 65 72 5f 6f 66 66 29 Data Ascii: /noindex></div></aside></div><div class="b_main" style="display:block; z-index: 0;" data-check='true'>...set var="exchange_need" value="smi2" --><div id="_g_exchange_main_article" data-check="0"></div><script>if(!window._g_tizer_off)
2025-01-02 15:12:12 UTC	11819	IN	Data Raw: d0 b2 d0 be d0 b2 d0 b0 d1 8f 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d1 8f 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 74 65 72 6d 73 2f 22 20 63 6c 61 73 73 3d 22 69 74 65 6d 22 3e d0 a3 d1 81 d0 bb d0 be d0 b2 d0 b8 d1 8f 20 d0 b8 d1 81 d0 bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d0 bd d0 b8 d1 8f 3c 2f 61 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 70 72 69 76 61 63 79 2f 22 20 63 6c 61 73 73 3d 22 69 74 65 6d 22 3e d0 9f d0 be d0 bb d0 b8 d1 82 d0 b8 d0 ba d0 b0 20 d0 ba d0 be d0 bd d1 84 d0 b8 d0 b4 d0 b5 d0 bd d1 86 d0 b8 d0 b0 d0 bb d1 8c d0 bd d0 be d1 81 d1 82 d0 b8 3c 2f 61 3e 20 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 5f 66 6f 6f 74 65 72 2d 73 6f 63 69 61 6c 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 Data Ascii: </a><a href="/terms/" class="item"> </a><a href="/privacy/" class="item"> </a> </div><div class="b_footer-social"><a href="https

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	542	OUT	GET /rambler-id-helper/auth_events.js HTTP/1.1 Host: id.rambler.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 15:12:12 UTC	1560	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: application/javascript Content-Length: 36556 Connection: close x-amz-request-id: 618fa868-b244-4421-9a7b-c80c98743b28 etag: "a35b3200fa3539448c7829591fe316e1" cache-control: max-age=300, public vary: Accept, Origin last-modified: Sun, 15 Dec 2024 12:39:04 GMT x-varnish: 41563625 39550445 age: 395 via: 1.1 varnish (Varnish/6.2) x-varnish-hostname: 1b57bbd3bcf9b7a988d53aa4ba029c05 accept-ranges: bytes x-bytes-rcv: 0 x-bytes-snd: 0 x-time: -7 x-upstream-addr: 10.136.33.16:80 x-upstream-connecttime: 0 x-upstream-headertime: 0 x-upstream-responsetime: -7 Content-Security-Policy: default-src 'self'; img-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'none'; font-src 'none'; child-src 'self'; media-src 'none'; object-src 'none'; form-action 'self'; connect-src 'self' https://sentry-id-00.rambler-co.ru https://sentry-saas.rambler-co.ru; report-uri https://csp.rambler-co.ru; X-Content-Security-Policy: default-src 'self'; img-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'none'; font-src 'none'; child-src 'self'; media-src 'none'; object-src 'none'; form-action 'self'; connect-src 'self' https://sentry-id-00.rambler-co.ru https://sentry-saas.rambler-co.ru; report-uri https://csp.rambler-co.ru; P3P: CP="CAO PSA OUR" Set-Cookie: ruid=LgQAAMysdmeyNYgRAe+caQB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/; Secure; SameSite=None P3P: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
2025-01-02 15:12:12 UTC	14824	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 75 74 68 5f 65 76 65 6e 74 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 38 37 36 3a 28 65 2c 74 2c 73 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: /! For license information please see auth_events.js.LICENSE.txt /(()=>{var e={876:(e,t,s)=>{"use strict";function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 65 3d 6f 65 28 29 28 22 69 64 3a 68 65 6c 70 65 72 3a 65 6d 69 74 74 65 72 22 29 3b 63 6c 61 73 73 20 6c 65 20 65 78 74 65 6e 64 73 20 61 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 41 55 54 48 5f 45 56 45 4e 54 53 3d 5b 56 2e 4c 4f 47 49 4e 2c 56 2e 4f 41 55 54 48 4c 4f 47 49 4e 2c 56 2e 4c 4f 47 4f 55 54 5d 2c 74 68 69 73 2e 50 52 4f 50 41 47 41 54 45 44 5f 45 56 45 4e 54 53 3d 5b 2e 2e 2e 74 68 69 73 2e 41 55 54 48 5f 45 56 45 4e 54 53 2c 2e 2e 2e 59 2c 56 2e 52 45 53 50 4f 4e 53 45 5f 51 52 5f 43 4f 44 45 2c 56 2e 53 45 4c 45 43 54 50 52 4f 46 49 4c 45 5d 2c 74 68 69 73 2e 50 52 4f 50 41 47 41 54 45 44 5f 45 56 45 4e 54 53 5f 4f 4e 43 45 3d 5b 56 2e 53 45 4c 45 43 54 50 52 4f 46 49 4c 45 5d 2c 74 68 69 73 Data Ascii: e=oe()("id:helper:emitter");class le extends ae{constructor(t){super(),this.AUTH_EVENTS=[V.LOGIN,V.OAUTHLOGIN,V.LOGOUT],this.PROPAGATED_EVENTS=[...this.AUTH_EVENTS,...Y,V.RESPONSE_QR_CODE,V.SELECTPROFILE],this.PROPAGATED_EVENTS_ONCE=[V.SELECTPROFILE],this
2025-01-02 15:12:12 UTC	5348	IN	Data Raw: 75 28 7b 6d 65 73 73 61 67 65 3a 73 2c 63 6f 64 65 3a 74 2c 64 65 74 61 69 6c 73 3a 69 7d 29 3a 6e 65 77 20 45 72 72 6f 72 28 73 29 7d 29 28 29 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 28 6e 75 6c 6c 2c 74 29 3a 74 3f 65 28 7b 72 63 63 69 64 3a 74 7d 29 3a 7a 28 7b 7d 2c 28 28 74 2c 73 29 3d 3e 7b 74 26 26 74 68 69 73 2e 65 6d 69 74 28 56 2e 45 52 52 4f 52 2c 74 29 2c 66 28 74 3f 3f 73 3f 2e 72 63 63 69 64 29 2c 65 28 73 3f 7b 72 63 63 69 64 3a 73 2e 72 63 63 69 64 7d 3a 6e 75 6c 6c 2c 74 29 7d 29 29 7d 63 72 65 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 57 69 6e 64 6f 77 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 68 61 73 54 72 61 63 6b 69 6e 67 50 72 65 76 65 6e 74 69 6f 6e 7c 7c 4f 7c 7c 52 3f 6e 75 6c 6c 3a 77 69 6e 64 6f 77 2e Data Ascii: u({message:s,code:t,details:i}):new Error(s)})();t instanceof Error?e(null,t):t?e({rccid:t}):z({},((t,s)=>{t&&this.emit(V.ERROR,t),f(t??s?.rccid),e(s?{rccid:s.rccid}:null,t)}))}createPropagationWindow(){return!this.hasTrackingPrevention\|\|O\|\|R?null:window.

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	526	OUT	GET /capirs_async.js HTTP/1.1 Host: ssp.rambler.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 15:12:12 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: application/x-javascript Content-Length: 418225 Last-Modified: Fri, 29 Nov 2024 08:11:25 GMT Connection: close ETag: "6749772d-661b1" X-Passed: 1bal1 Expires: Thu, 02 Jan 2025 15:13:12 GMT Cache-Control: max-age=60 Strict-Transport-Security: max-age=0 p3p: policyref="/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA" Accept-Ranges: bytes
2025-01-02 15:12:12 UTC	15911	IN	Data Raw: 76 61 72 20 53 53 50 6a 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 33 33 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 68 69 73 2e 72 65 67 56 61 6c 69 64 4b 65 79 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2d 5d 7b 30 2c 7d 29 22 2c 22 69 22 29 2c 74 68 69 73 2e 68 61 73 68 3d 65 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 Data Ascii: var SSPjs;!function(){var e,t,n={3324:function(e,t){"use strict";var n=function(){function e(e){this.regValidKey=new RegExp("([a-zA-Z0-9_-]{0,})","i"),this.hash=e\|\|location.hostname}return e.prototype.isSupported=function(){return"object"==typeof document
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 7d 2e 69 6e 76 69 65 77 2d 74 69 6d 65 72 73 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 75 6d 6e 2e 69 73 2d 64 69 72 65 63 74 69 6f 6e 2d 69 6e 64 69 63 61 74 6f 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 7d 2e 69 6e 76 69 65 77 2d 74 69 6d 65 72 73 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 75 6d 6e 2e 69 73 2d 64 69 72 65 63 74 69 6f 6e 2d 69 6e 64 69 63 61 74 6f 72 3a 3a Data Ascii: }.inview-timers-wrapper .column.is-direction-indicator{-webkit-transform-origin:50% 50%;-moz-transform-origin:50% 50%;-ms-transform-origin:50% 50%;-o-transform-origin:50% 50%;transform-origin:50% 50%}.inview-timers-wrapper .column.is-direction-indicator::
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 26 26 22 70 75 73 68 53 74 61 74 65 22 69 6e 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 7d 69 66 28 72 28 29 29 7b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2c 69 3d 6f 2e 70 75 73 68 53 74 61 74 65 3b 6f 2e 70 75 73 68 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 69 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 28 77 69 6e 64 6f 77 2c 22 70 75 73 68 73 74 61 74 65 22 2c 65 29 2c 74 28 77 69 6e 64 6f 77 2c 22 63 68 61 6e 67 65 73 74 61 74 65 22 2c 65 29 2c 6e 7d 3b 76 61 72 20 61 3d 6f 2e 72 65 70 6c 61 63 65 53 74 61 74 65 3b 6f 2e 72 65 70 6c 61 63 65 53 74 61 Data Ascii: fined"!=typeof window&&window.history&&"pushState"in window.history}if(r()){var o=window.history,i=o.pushState;o.pushState=function(e){var n=i.apply(o,arguments);return t(window,"pushstate",e),t(window,"changestate",e),n};var a=o.replaceState;o.replaceSta
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 65 29 3f 22 5b 22 2b 51 28 69 65 2c 4e 29 2b 22 5d 22 3a 22 5b 20 22 2b 4f 2e 63 61 6c 6c 28 69 65 2c 22 2c 20 22 29 2b 22 20 5d 22 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 21 3d 3d 7a 28 65 29 7c 7c 41 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 41 20 69 6e 20 65 29 7d 28 74 29 29 7b 76 61 72 20 61 65 3d 5a 28 74 2c 57 29 3b 72 65 74 75 72 6e 22 63 61 75 73 65 22 69 6e 20 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 21 28 22 63 61 75 73 65 22 69 6e 20 74 29 7c 7c 52 2e 63 61 6c 6c 28 74 2c 22 63 61 75 73 65 22 29 3f 30 3d 3d 3d 61 65 2e 6c 65 6e 67 74 68 3f 22 5b 22 2b 53 74 72 69 6e 67 28 74 29 2b 22 5d 22 3a 22 7b 20 5b 22 2b 53 74 72 69 6e 67 28 Data Ascii: e)?"["+Q(ie,N)+"]":"[ "+O.call(ie,", ")+" ]"}if(function(e){return!("[object Error]"!==z(e)\|\|A&&"object"==typeof e&&A in e)}(t)){var ae=Z(t,W);return"cause"in Error.prototype\|\|!("cause"in t)\|\|R.call(t,"cause")?0===ae.length?"["+String(t)+"]":"{ ["+String(
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 7b 76 61 72 20 61 3d 74 5b 69 5d 3b 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 74 5b 69 5d 3d 65 28 61 2c 6e 2c 72 29 3a 74 2e 70 75 73 68 28 6e 29 7d 65 6c 73 65 20 74 5b 69 5d 3d 6e 7d 29 29 2c 74 29 3a 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 6e 5b 69 5d 3b 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 74 2c 69 29 3f 74 5b 69 5d 3d 65 28 74 5b 69 5d 2c 61 2c 72 29 3a 74 5b 69 5d 3d 61 2c 74 7d 29 2c 61 29 7d 7d 7d 2c 34 31 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 52 61 76 65 6e 43 6f 6e 66 69 67 45 72 Data Ascii: {var a=t[i];a&&"object"==typeof a&&n&&"object"==typeof n?t[i]=e(a,n,r):t.push(n)}else t[i]=n})),t):Object.keys(n).reduce((function(t,i){var a=n[i];return o.call(t,i)?t[i]=e(t[i],a,r):t[i]=a,t}),a)}}},4171:function(e){function t(e){this.name="RavenConfigEr
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 20 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 2e 63 61 70 74 75 72 65 42 72 65 61 64 63 72 75 6d 62 28 7b 6d 65 73 73 61 67 65 3a 74 2c 6c 65 76 65 6c 3a 6e 2e 6c 65 76 65 6c 2c 63 61 74 65 67 6f 72 79 3a 22 63 6f 6e 73 6f 6c 65 22 7d 29 7d 3b 62 28 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 46 28 63 6f 6e 73 6f 6c 65 2c 74 2c 75 29 7d 29 29 7d 7d 2c 5f 72 65 73 74 6f 72 65 42 75 69 6c 74 49 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3b 74 68 69 73 2e 5f 77 72 61 70 70 65 64 42 75 69 6c 74 49 6e 73 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 74 3d 28 65 3d 74 68 69 73 2e 5f 77 72 61 70 70 65 64 42 75 69 6c 74 Data Ascii: u=function(t,n){e.captureBreadcrumb({message:t,level:n.level,category:"console"})};b(["debug","info","warn","error","log"],(function(e,t){F(console,t,u)}))}},_restoreBuiltIns:function(){for(var e;this._wrappedBuiltIns.length;){var t=(e=this._wrappedBuilt
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 6e 28 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 2e 6f 6e 65 72 72 6f 72 3d 65 2c 74 3d 21 31 2c 65 3d 76 6f 69 64 20 30 7d 28 29 2c 6e 3d 5b 5d 7d 2c 67 7d 28 29 2c 6f 2e 63 6f 6d 70 75 74 65 53 74 61 63 6b 54 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 2e 73 74 61 63 6b 26 26 65 2e 73 74 61 63 6b 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 6f 3d 2f 5e 5c 73 2a 61 74 20 28 3f 3a 28 2e 2a 3f 29 20 3f 5c 28 29 3f 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 73 3f 7c 62 6c 6f 62 7c 63 68 72 6f 6d 65 2d 65 78 74 65 6e 73 69 6f 6e 7c 6e 61 74 69 76 65 7c 65 76 61 6c 7c 77 65 62 70 61 63 6b 7c 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 7c 5b 61 2d 7a 5d 3a 7c 5c 2f 29 2e 2a 3f 29 28 Data Ascii: n(){if(!t)return;i.onerror=e,t=!1,e=void 0}(),n=[]},g}(),o.computeStackTrace=function(){function e(e){if(void 0!==e.stack&&e.stack){for(var t,n,r,o=/^\sat (?:(.?) ?\()?((?:file\|https?\|blob\|chrome-extension\|native\|eval\|webpack\|<anonymous>\|[a-z]:\|\/).*?)(
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 28 22 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 22 2c 21 30 29 2c 64 3d 6f 28 22 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 22 2c 21 30 29 2c 68 3d 6f 28 22 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 22 2c 21 30 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 65 3b 6e 75 6c 6c 21 3d 3d 28 6e 3d 72 2e 6e 65 78 74 29 3b 72 3d 6e 29 69 66 28 6e 2e 6b 65 79 3d 3d 3d 74 29 72 65 74 75 72 6e 20 72 2e 6e 65 78 74 3d 6e 2e 6e 65 78 74 2c 6e 2e 6e 65 78 74 3d 65 2e 6e 65 78 74 2c 65 2e 6e 65 78 74 3d 6e 2c 6e 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 7b 61 73 73 65 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 72 2e 68 61 73 Data Ascii: ("Map.prototype.get",!0),d=o("Map.prototype.set",!0),h=o("Map.prototype.has",!0),v=function(e,t){for(var n,r=e;null!==(n=r.next);r=n)if(n.key===t)return r.next=n.next,n.next=e.next,e.next=n,n};e.exports=function(){var e,t,n,r={assert:function(e){if(!r.has
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 73 42 72 61 76 65 3d 3d 61 26 26 28 74 5b 66 5d 3d 22 42 72 61 76 65 22 29 2c 74 7d 2c 74 68 69 73 2e 67 65 74 43 50 55 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 5b 67 5d 3d 69 2c 4a 2e 63 61 6c 6c 28 65 2c 72 2c 77 2e 63 70 75 29 2c 65 7d 2c 74 68 69 73 2e 67 65 74 44 65 76 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 5b 68 5d 3d 69 2c 65 5b 70 5d 3d 69 2c 65 5b 64 5d 3d 69 2c 4a 2e 63 61 6c 6c 28 65 2c 72 2c 77 2e 64 65 76 69 63 65 29 2c 5f 26 26 21 65 5b 64 5d 26 26 6d 26 26 6d 2e 6d 6f 62 69 6c 65 26 26 28 65 5b 64 5d 3d 79 29 2c 5f 26 26 22 4d 61 63 69 6e 74 6f 73 68 22 3d 3d 65 5b 70 5d 26 26 6e 26 26 74 79 70 65 6f 66 20 6e 2e 73 74 61 6e 64 61 6c 6f 6e Data Ascii: sBrave==a&&(t[f]="Brave"),t},this.getCPU=function(){var e={};return e[g]=i,J.call(e,r,w.cpu),e},this.getDevice=function(){var e={};return e[h]=i,e[p]=i,e[d]=i,J.call(e,r,w.device),_&&!e[d]&&m&&m.mobile&&(e[d]=y),_&&"Macintosh"==e[p]&&n&&typeof n.standalon
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 25 32 30 31 2e 30 36 32 25 32 30 30 6c 31 34 2e 33 36 36 2d 31 34 2e 33 34 61 2e 37 36 32 2e 37 36 32 25 32 30 30 25 32 30 30 25 32 30 30 25 32 30 30 2d 31 2e 30 37 31 6c 2d 32 2e 31 32 35 2d 32 2e 31 34 7a 25 32 32 25 32 46 25 33 45 25 33 43 25 32 46 73 76 67 25 33 45 25 33 43 25 32 46 64 69 76 25 33 45 25 33 43 64 69 76 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 63 6f 6c 75 6d 6e 25 32 30 69 73 2d 72 65 6c 6f 61 64 65 64 2d 69 6e 64 69 63 61 74 6f 72 25 32 32 25 33 45 25 33 43 73 76 67 25 32 30 78 6d 6c 6e 73 25 33 44 25 32 32 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 25 32 32 25 32 30 77 69 64 74 68 25 33 44 25 32 32 31 36 25 32 32 25 32 30 68 65 69 67 68 74 25 33 44 25 32 32 31 36 25 32 Data Ascii: %201.062%200l14.366-14.34a.762.762%200%200%200%200-1.071l-2.125-2.14z%22%2F%3E%3C%2Fsvg%3E%3C%2Fdiv%3E%3Cdiv%20class%3D%22column%20is-reloaded-indicator%22%3E%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20width%3D%2216%22%20height%3D%2216%2

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	589	OUT	GET /nm2021/css/fonts_2022.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:13 UTC	486	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 21868 Connection: close Last-Modified: Thu, 03 Oct 2024 09:28:45 GMT Vary: Accept-Encoding ETag: "66fe63cd-556c" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15898	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 6f 72 61 27 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 73 72 63 3a 20 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 67 61 7a 65 74 61 2e 72 75 2f 2f 6e 6d 32 30 32 31 2f 66 6f 6e 74 73 2f 6e 65 77 2f 6c 6f 72 61 5f 69 74 61 6c 69 63 35 30 30 5f 63 79 72 5f 65 78 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: /* cyrillic-ext */ @font-face { font-family: 'Lora'; font-style: italic; font-weight: 500; font-display: block; src: url(https://static.gazeta.ru//nm2021/fonts/new/lora_italic500_cyr_ext.woff2) format('woff2'),
2025-01-02 15:12:13 UTC	5970	IN	Data Raw: 2e 72 75 2f 2f 6e 6d 32 30 32 31 2f 66 6f 6e 74 73 2f 6e 65 77 2f 72 6f 62 6f 74 6f 5f 37 30 30 5f 67 72 65 65 6b 5f 65 78 74 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 0a 20 20 20 20 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f Data Ascii: .ru//nm2021/fonts/new/roboto_700_greek_ext.woff) format('woff'); unicode-range: U+1F00-1FFF; } /* greek */ @font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; fo

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	606	OUT	GET /nm2021/css/desktop_styles_collect.v207.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:13 UTC	487	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 230174 Connection: close Last-Modified: Mon, 09 Dec 2024 07:43:40 GMT Vary: Accept-Encoding ETag: "67569fac-3831e" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15897	IN	Data Raw: 0a 0a 0a 0a 20 20 20 20 0a 20 20 20 20 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 68 74 6d 6c 20 2a 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 Data Ascii: @charset "UTF-8";html * { padding: 0; margin: 0; outline: none; border: 0; background: transparent; font-size: inherit; line-height: inherit; box-sizing: border-box; text-decoration: none; -webkit-font-smoothing: antialia
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 6c 65 66 74 3a 20 33 30 70 78 3b 0a 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 7d 0a 20 20 2e 62 5f 65 61 72 2e 6d 5f 6f 75 74 6c 69 6e 65 33 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 41 45 41 45 41 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 20 20 2e 62 5f 65 61 72 2e 6d 5f 6f 75 74 6c 69 Data Ascii: ition: absolute; left: 30px; bottom: 20px; } .b_ear.m_outline3 { position: relative; border: 1px solid #EAEAEA; box-sizing: border-box; display: flex; align-items: center; justify-content: center; } .b_ear.m_outli
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 67 65 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 32 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 2e 77 5f 63 6f 6c 31 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 2c 20 2e 77 5f 63 6f 6c 32 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 32 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a Data Ascii: ge, .w_col_wide .b_ear-image, .w_col_wide2 .b_ear-image { display: flex; align-items: center; justify-content: center; } .w_col1 .b_ear-image a, .w_col2 .b_ear-image a, .w_col_wide .b_ear-image a, .w_col_wide2 .b_ear-image a { display: block;
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 72 74 69 63 6c 65 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 72 74 69 63 6c 65 20 2e 62 5f 65 61 72 2d 74 65 78 74 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 63 61 6c Data Ascii: : row-reverse; align-items: flex-start; } .b_article-incut.m_article .b_ear-image { width: 110px; flex-shrink: 0; margin-left: 40px; } .b_article-incut.m_article .b_ear-textblock { width: cal
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 75 64 69 6f 20 2e 62 5f 61 75 64 69 6f 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 37 30 30 20 31 36 70 78 2f 31 2e 35 20 22 4c 6f 72 61 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 39 32 39 32 39 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 75 64 69 6f 20 2e 62 5f 61 75 64 69 6f 2d 69 6e 66 6f 20 2e 73 72 63 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: icle-incut.m_audio .b_audio-info { position: relative; font: 700 16px/1.5 "Lora", sans-serif; color: #292929; text-align: center; margin-bottom: 7px; } .b_article-incut.m_audio .b_audio-info .src {
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 73 63 6f 72 65 62 6f 61 72 64 2d 74 65 61 6d 73 20 2e 69 74 65 6d 2e 6d 5f 73 63 6f 72 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 62 6f 6c 64 20 34 34 70 78 2f 34 34 70 78 20 22 4c 6f 72 61 22 2c 20 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 42 31 31 31 31 36 3b 0a 20 20 20 20 20 20 20 20 20 20 77 68 Data Ascii: flex-flow: column; align-items: center; justify-content: flex-start; } .b_article-scoreboard-teams .item.m_score { padding-top: 20px; font: bold 44px/44px "Lora", serif; color: #B11116; wh
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 3b 20 7d 0a 20 20 2e 62 5f 61 72 74 69 63 6c 65 20 69 66 72 61 6d 65 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 65 72 69 64 74 6f 6b 65 6e 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 61 65 61 65 61 3b 0a 20 20 20 20 66 6f 6e 74 3a 20 34 30 30 20 31 33 70 78 2f 31 2e 32 35 20 52 6f 62 6f 74 6f 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 66 37 66 37 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 20 7d 0a 0a 2e 5f 73 5f 61 64 64 65 64 5f 61 72 74 69 63 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 Data Ascii: : all 0.3s ease; } .b_article iframe { max-width: 100%; } .b_article-eridtoken { padding: 5px 10px; background: #eaeaea; font: 400 13px/1.25 Roboto; color: #7f7f7f; margin-bottom: 10px; }._s_added_article { position: relati
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 2d 77 72 61 70 70 65 72 20 2e 69 74 65 6d 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 5f 67 61 6c 6c 65 72 79 20 2e 70 72 65 76 69 65 77 2d 77 72 61 70 70 65 72 20 2e 69 74 65 6d 3a 68 6f 76 65 72 20 2e 69 74 65 6d 2d 69 6d 61 67 65 20 7b Data Ascii: -wrapper .item-image { position: relative; z-index: 1; display: inline-flex; height: 100%; opacity: 0.6; transition: all 0.3s ease; } .i_gallery .preview-wrapper .item:hover .item-image {
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 20 2a 2f 20 7d 0a 20 20 20 20 2e 69 5f 67 61 6c 6c 65 72 79 5f 76 32 34 20 2e 6d 61 69 6e 61 72 65 61 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 Data Ascii: play: none; } } */ } .i_gallery_v24 .mainarea-wrapper { position: absolute; top: 0; left: 0; bottom: 0; right: 0; overflow: hidden; display: flex; flex-flow: row nowrap; align-i
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 68 61 76 69 6f 72 3a 20 73 6d 6f 6f 74 68 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 20 20 20 20 20 20 2e 69 5f 67 61 6c 6c 65 72 79 5f 76 32 34 20 2e 70 72 65 76 69 65 77 2d 77 72 61 70 70 65 72 20 2e 69 74 65 6d 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 Data Ascii: havior: smooth; display: flex; flex-flow: row nowrap; align-items: flex-start; justify-content: flex-start; } .i_gallery_v24 .preview-wrapper .item { position: relative; z-index: 2; display: inline-fle

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	582	OUT	GET /nm2021/css/_ie.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:12 UTC	482	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 541 Connection: close Last-Modified: Thu, 01 Jul 2021 08:56:59 GMT Vary: Accept-Encoding ETag: "60dd835b-21d" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:12 UTC	541	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 30 5c 30 29 20 7b 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 20 7b 0a 09 09 77 69 64 74 68 3a 20 31 33 32 32 70 78 3b 09 09 0a 09 7d 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 09 77 68 69 72 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 09 7d 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 2e 69 74 65 6d 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 09 09 0a 09 7d 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 2e Data Ascii: @media screen and (min-width:0\0) {.b_topnews {width: 1322px;}.b_topnews-content {display: block;width: 100%;whire-space: nowrap;}.b_topnews-content .item {display: inline-block;vertical-align: top;}.b_topnews-content .

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Windows Analysis Report
https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	592	OUT	GET /nm2021/css/fonts_2022_v2.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:13 UTC	485	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 21703 Connection: close Last-Modified: Thu, 26 Dec 2024 18:57:33 GMT Vary: Accept-Encoding ETag: "676da71d-54c7" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15899	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 6f 72 61 27 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 73 72 63 3a 20 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 67 61 7a 65 74 61 2e 72 75 2f 2f 6e 6d 32 30 32 31 2f 66 6f 6e 74 73 2f 6e 65 77 2f 6c 6f 72 61 5f 69 74 61 6c 69 63 35 30 30 5f 63 79 72 5f 65 78 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: /* cyrillic-ext */ @font-face { font-family: 'Lora'; font-style: italic; font-weight: 500; font-display: block; src: url(https://static.gazeta.ru//nm2021/fonts/new/lora_italic500_cyr_ext.woff2) format('woff2'),
2025-01-02 15:12:13 UTC	5804	IN	Data Raw: 20 20 20 20 20 20 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 0a 20 20 20 20 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 67 61 7a 65 74 61 2e 72 75 2f 2f 6e 6d Data Ascii: unicode-range: U+1F00-1FFF; } /* greek */ @font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; font-display: block; src: url(https://static.gazeta.ru//nm

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	596	OUT	GET /nm2021/css/_print_desktop_v2.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:12 UTC	484	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 3457 Connection: close Last-Modified: Thu, 03 Oct 2024 09:28:47 GMT Vary: Accept-Encoding ETag: "66fe63cf-d81" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:12 UTC	3457	IN	Data Raw: 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 40 70 61 67 65 7b 73 69 7a 65 3a 41 34 20 70 6f 72 74 72 61 69 74 3b 6d 61 72 67 69 6e 3a 31 35 6d 6d 20 30 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 6d 6d 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 62 6f 64 79 20 64 69 76 5b 63 6c 61 73 73 5e 3d 22 5f 73 5f 62 61 6e 6e 65 72 22 5d 2c 62 6f 64 79 20 64 69 76 5b 64 61 74 61 2d 61 64 76 2d 6c 6f 61 64 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 62 6f 64 79 2e 6d 5f 66 61 6d 69 6c 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 2e 6d 5f 66 61 6d 69 6c 79 20 2e 62 5f 72 75 62 72 69 63 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 62 6f 64 79 2e 6d 5f 66 61 6d 69 6c 79 20 23 5f Data Ascii: @media print{@page{size:A4 portrait;margin:15mm 0}html{font-size:2.5mm}body{background:#fff}body div[class^="_s_banner"],body div[data-adv-load]{display:none}body.m_family{background:#fff !important}body.m_family .b_rubricbar{display:none}body.m_family #_

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	573	OUT	GET /nm2021/js/common.v50.js HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:13 UTC	501	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 101497 Connection: close Last-Modified: Mon, 21 Oct 2024 16:06:05 GMT Vary: Accept-Encoding ETag: "67167bed-18c79" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15883	IN	Data Raw: 0a 0a 0a 20 20 20 20 2f 2f 20 67 65 74 43 6f 6f 6b 69 65 28 29 2c 20 73 65 74 43 6f 6f 6b 69 65 28 29 2c 20 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 29 0a 0a 76 61 72 20 67 5f 47 61 7a 65 74 61 4a 53 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 43 6f 6e 73 74 72 75 63 74 5f 73 69 6e 67 6c 65 74 6f 6e 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 73 74 61 6e 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 73 74 61 6e 63 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 20 26 26 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 3d 3d 20 43 6f 6e Data Ascii: // getCookie(), setCookie(), deleteCookie()var g_GazetaJS = (function () { var instance; return function Construct_singletone() { if (instance) { return instance; } if (this && this.constructor === Con
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 45 6c 20 20 20 20 20 20 20 20 20 20 20 3d 20 70 72 6f 70 73 2e 64 6f 6d 45 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 66 69 6e 69 74 65 20 20 20 20 20 20 20 20 3d 20 70 72 6f 70 73 2e 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 65 76 69 65 77 43 6f 6e 74 72 6f 6c 20 20 3d 20 70 72 6f 70 73 2e 70 72 65 76 69 65 77 43 6f 6e 74 72 6f 6c 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 6c 79 20 66 6f 72 20 69 6e 63 75 74 73 20 67 61 7a 65 74 61 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6d 69 74 20 20 20 20 20 20 20 20 20 20 20 3d 20 70 72 6f 70 73 2e 6c 69 6d 69 74 20 20 20 20 20 20 20 7c 7c 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 61 66 65 51 6e 74 20 20 Data Ascii: var domEl = props.domEl; var infinite = props.infinite; var previewControl = props.previewControl; // only for incuts gazeta var limit = props.limit \|\| null; var safeQnt
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 46 72 61 6d 65 28 61 6e 69 6d 61 74 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 49 74 65 6d 20 20 20 20 20 20 20 20 20 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 43 6f 72 6e 20 20 20 20 20 20 20 20 20 20 20 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 43 6f 72 6e 20 20 20 20 20 20 20 20 20 20 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Frame(animate); } else { activeItem = null; leftCorn = 0; rightCorn = 0;
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 65 72 79 28 29 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 61 6c 6c 65 72 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 6f 75 63 68 73 74 61 72 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 69 6e 63 68 46 6c 61 67 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 72 74 50 6f 69 6e 74 58 20 3d 20 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 72 74 50 6f 69 6e 74 59 20 3d 20 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ery(){ gallery.addEventListener('touchstart', function(e){ pinchFlag = false; startPointX = e.touches[0].clientX; startPointY = e.touches[0].clientY;
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 27 73 5f 73 68 6f 77 5f 64 69 67 65 73 74 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 21 69 6e 66 69 6e 69 74 65 20 26 26 20 64 61 74 61 49 74 65 6d 3d 3d 30 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 68 61 6e 67 65 49 74 65 6d 73 28 64 61 74 61 49 74 65 6d 2d 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: 's_show_digest'); if(!infinite && dataItem==0){ return false; } else { changeItems(dataItem-1); } } }) r
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 7d 2c 20 35 30 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 68 61 6e 67 65 49 74 65 6d 28 63 75 72 49 74 65 6d 2c 20 27 69 6e 73 74 61 6e 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 0a 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 61 63 74 69 6f 6e 20 70 61 72 74 0a 0a 20 20 20 20 20 20 20 20 69 66 28 21 6c 69 6d 69 74 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 6d 61 74 63 68 28 2f 70 68 6f 74 6f 5f 6e 75 6d 3d 28 5c 64 2b 29 2f 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 72 65 71 75 69 72 65 64 50 68 6f 74 6f 20 3d 20 2b 6c 6f Data Ascii: '); // }, 500) // } else { changeItem(curItem, 'instant'); // } } // action part if(!limit && location.search.match(/photo_num=(\d+)/)){ let requiredPhoto = +lo
2025-01-02 15:12:13 UTC	3694	IN	Data Raw: 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 50 6f 73 69 74 69 6f 6e 28 70 65 72 63 65 6e 74 50 6f 73 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 54 69 6d 65 50 4c 61 79 69 6e 67 20 3d 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 73 65 74 54 69 6d 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 54 69 6d 65 50 4c 61 79 69 6e 67 20 3d 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 73 65 74 54 69 6d 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: setTimePosition(percentPos, true); reqTimePLaying = window.requestAnimationFrame(setTiming); } reqTimePLaying = window.requestAnimationFrame(setTiming); })

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	408	OUT	GET /rambler-id-helper/auth_events.js HTTP/1.1 Host: id.rambler.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ruid=LgQAAMysdmeyNYgRAe+caQB=
2025-01-02 15:12:14 UTC	1363	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 02 Jan 2025 15:12:13 GMT Content-Type: application/javascript Content-Length: 36556 Connection: close x-amz-request-id: 4be01dbe-1b3a-41d5-8664-84660f827e66 etag: "a35b3200fa3539448c7829591fe316e1" cache-control: max-age=300, public vary: Accept, Origin last-modified: Sun, 15 Dec 2024 12:39:04 GMT x-varnish: 532221409 531317962 age: 519 via: 1.1 varnish (Varnish/6.2) x-varnish-hostname: 4aaf1f22a2f4990af6501c825af6cdc7 accept-ranges: bytes x-bytes-rcv: 0 x-bytes-snd: 0 x-time: -6 x-upstream-addr: 10.128.18.23:80 x-upstream-connecttime: 1 x-upstream-headertime: 0 x-upstream-responsetime: -7 Content-Security-Policy: default-src 'self'; img-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'none'; font-src 'none'; child-src 'self'; media-src 'none'; object-src 'none'; form-action 'self'; connect-src 'self' https://sentry-id-00.rambler-co.ru https://sentry-saas.rambler-co.ru; report-uri https://csp.rambler-co.ru; X-Content-Security-Policy: default-src 'self'; img-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'none'; font-src 'none'; child-src 'self'; media-src 'none'; object-src 'none'; form-action 'self'; connect-src 'self' https://sentry-id-00.rambler-co.ru https://sentry-saas.rambler-co.ru; report-uri https://csp.rambler-co.ru; P3P: CP="CAO PSA OUR"
2025-01-02 15:12:14 UTC	15021	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 75 74 68 5f 65 76 65 6e 74 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 38 37 36 3a 28 65 2c 74 2c 73 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: /! For license information please see auth_events.js.LICENSE.txt /(()=>{var e={876:(e,t,s)=>{"use strict";function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==
2025-01-02 15:12:14 UTC	16384	IN	Data Raw: 52 4f 46 49 4c 45 5d 2c 74 68 69 73 2e 50 52 4f 50 41 47 41 54 45 44 5f 45 56 45 4e 54 53 5f 4f 4e 43 45 3d 5b 56 2e 53 45 4c 45 43 54 50 52 4f 46 49 4c 45 5d 2c 74 68 69 73 2e 66 69 72 73 74 50 61 72 74 79 4f 72 69 67 69 6e 3d 76 28 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 62 49 64 3d 55 28 33 32 29 2c 74 68 69 73 2e 6f 6e 4d 65 73 73 61 67 65 3d 28 7b 64 61 74 61 3a 74 2c 6f 72 69 67 69 6e 3a 73 2c 73 6f 75 72 63 65 3a 69 7d 29 3d 3e 7b 69 66 28 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 7b 65 6d 69 74 74 65 72 3a 6e 2c 65 76 65 6e 74 54 79 70 65 3a 6f 2c 72 65 64 69 72 65 63 74 55 72 6c 3a 72 2c 64 61 74 61 3a 61 2c 66 72 61 6d 65 49 6e 66 6f 3a 63 3d 61 7c 7c 7b 7d 2c 2e 2e 2e 6c 7d Data Ascii: ROFILE],this.PROPAGATED_EVENTS_ONCE=[V.SELECTPROFILE],this.firstPartyOrigin=v(),this.currentTabId=U(32),this.onMessage=({data:t,origin:s,source:i})=>{if(!t\|\|"object"!=typeof t)return;const{emitter:n,eventType:o,redirectUrl:r,data:a,frameInfo:c=a\|\|{},...l}
2025-01-02 15:12:14 UTC	5151	IN	Data Raw: 64 6f 77 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 68 61 73 54 72 61 63 6b 69 6e 67 50 72 65 76 65 6e 74 69 6f 6e 7c 7c 4f 7c 7c 52 3f 6e 75 6c 6c 3a 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 60 24 7b 78 65 7d 24 7b 49 65 7d 2f 24 7b 46 65 7d 2f 6e 6f 6f 70 2e 68 74 6d 6c 60 2c 22 22 2c 22 73 74 61 74 75 73 3d 31 2c 74 6f 6f 6c 62 61 72 3d 30 2c 6d 65 6e 75 62 61 72 3d 30 2c 72 65 73 69 7a 61 62 6c 65 3d 31 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 31 2c 77 69 64 74 68 3d 32 35 30 70 78 2c 68 65 69 67 68 74 3d 31 30 30 70 78 2c 74 6f 70 3d 31 30 30 70 78 2c 6c 65 66 74 3d 31 30 30 70 78 22 29 7d 70 72 6f 70 61 67 61 74 65 53 65 73 73 69 6f 6e 28 65 2c 74 3d 7b 65 76 65 6e 74 54 79 70 65 3a 56 2e 4c 4f 47 49 4e 7d 2c 73 3d 4f 65 29 7b 63 6f 6e 73 74 7b 65 76 65 6e Data Ascii: dow(){return!this.hasTrackingPrevention\|\|O\|\|R?null:window.open(`${xe}${Ie}/${Fe}/noop.html`,"","status=1,toolbar=0,menubar=0,resizable=1,scrollbars=1,width=250px,height=100px,top=100px,left=100px")}propagateSession(e,t={eventType:V.LOGIN},s=Oe){const{even

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	582	OUT	GET /nm2021/js/noindex/getemoji_v5.js HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:13 UTC	497	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:13 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3070 Connection: close Last-Modified: Thu, 03 Oct 2024 09:28:41 GMT Vary: Accept-Encoding ETag: "66fe63c9-bfe" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:13 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	3070	IN	Data Raw: 0a 0a 77 69 6e 64 6f 77 2e 67 5f 67 65 74 45 6d 6f 6a 69 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 20 75 72 6c 29 7b 0a 20 20 20 20 0a 20 20 20 20 63 6f 6e 73 74 20 65 6d 6f 6a 69 42 6f 78 20 3d 20 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 5f 65 6d 6f 6a 69 2d 62 6f 78 27 29 20 7c 7c 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 69 66 28 65 6d 6f 6a 69 42 6f 78 20 26 26 20 75 72 6c 29 7b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 6c 65 74 20 65 6d 6f 6a 69 5f 61 72 72 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 4a 73 6f 6e 54 6f 45 6d 6f 41 72 72 28 6a 73 6f 6e 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6d 6f 6a 69 5f 61 72 72 20 3d 20 6a 73 6f 6e 2e 6c 61 62 65 6c 73 2e 73 Data Ascii: window.g_getEmoji = function(root, url){ const emojiBox = root.querySelector('.b_emoji-box') \|\| null; if(emojiBox && url){ let emoji_arr = []; function sortJsonToEmoArr(json){ emoji_arr = json.labels.s

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	580	OUT	GET /nm2021/js/others_scripts_v6.js HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:14 UTC	497	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:13 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3618 Connection: close Last-Modified: Thu, 17 Oct 2024 08:18:13 GMT Vary: Accept-Encoding ETag: "6710c845-e22" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:13 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:14 UTC	3618	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 5f 73 68 6f 77 41 64 76 4f 77 6e 65 72 49 6e 45 61 72 20 28 61 64 76 45 61 72 29 7b 0a 0a 20 20 20 20 69 66 28 61 64 76 45 61 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7b 0a 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 64 76 4d 61 72 6b 65 72 20 20 20 3d 20 61 64 76 45 61 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 5f 65 61 72 2d 61 64 76 6d 61 72 6b 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 64 76 43 6c 6f 73 65 42 74 6e 20 20 3d 20 61 64 76 4d 61 72 6b 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 5f 65 61 72 2d 61 64 76 6d 61 72 6b 65 72 2d 63 6c 6f 73 65 62 74 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 28 61 64 76 4d 61 72 6b 65 72 20 26 26 20 Data Ascii: function g_showAdvOwnerInEar (advEar){ if(advEar instanceof HTMLElement){ let advMarker = advEar.querySelector('.b_ear-advmarker'); let advCloseBtn = advMarker.querySelector('.b_ear-advmarker-closebtn'); if(advMarker &&

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	634	OUT	GET /nm2021/img/logo_2021.svg HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:14 UTC	496	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:14 GMT Content-Type: image/svg+xml; charset=windows-1251 Content-Length: 3871 Connection: close Last-Modified: Mon, 19 Apr 2021 09:20:53 GMT Vary: Accept-Encoding ETag: "607d4b75-f1f" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:14 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:14 UTC	3871	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 34 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 30 35 33 32 20 31 33 2e 31 34 32 56 33 2e 39 32 39 30 37 48 31 33 2e 34 30 31 37 56 33 37 2e 33 32 35 38 48 31 39 2e 39 39 38 33 56 34 30 2e 33 30 36 35 48 30 56 33 37 2e 33 32 35 38 48 36 2e 35 39 36 36 37 56 33 2e 39 32 39 30 37 48 30 56 30 2e 39 34 38 34 32 35 48 33 32 2e 39 31 33 39 56 31 33 2e 31 34 32 48 32 38 2e 30 35 33 32 5a 22 20 66 69 6c 6c 3d 22 23 32 39 32 39 32 39 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 35 2e Data Ascii: <svg width="334" height="42" viewBox="0 0 334 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M28.0532 13.142V3.92907H13.4017V37.3258H19.9983V40.3065H0V37.3258H6.59667V3.92907H0V0.948425H32.9139V13.142H28.0532Z" fill="#292929"/><path d="M75.

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	636	OUT	GET /nm2021/img/icon_search.svg HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:14 UTC	494	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:14 GMT Content-Type: image/svg+xml; charset=windows-1251 Content-Length: 255 Connection: close Last-Modified: Mon, 19 Apr 2021 09:20:53 GMT Vary: Accept-Encoding ETag: "607d4b75-ff" X-Balancer: 0node0301.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:14 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:14 UTC	255	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 20 31 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 63 69 72 63 6c 65 20 72 3d 22 35 2e 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 2d 31 20 30 20 30 20 31 20 36 2e 35 20 36 2e 35 29 22 20 73 74 72 6f 6b 65 3d 22 23 32 39 32 39 32 39 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 32 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 31 32 4c 31 36 20 31 36 22 20 73 74 72 6f 6b 65 3d 22 23 32 39 32 39 32 39 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="17" height="17" viewBox="0 0 17 17" fill="none" xmlns="http://www.w3.org/2000/svg"><circle r="5.5" transform="matrix(-1 0 0 1 6.5 6.5)" stroke="#292929" stroke-width="1.2"/><path d="M12 12L16 16" stroke="#292929" stroke-width="1.2"/></svg>

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:14 UTC	766	OUT	POST /atlas/metrics/ HTTP/1.1 Host: www.gazeta.ru Connection: keep-alive Content-Length: 2098 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain X-Media-Atlas-Auth: basic cm9vdDp3b294M1NoaWU5b2dvaERlaTF0YWhmZXNoaXhhaGZhaGNoZVNvaHNp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.gazeta.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.gazeta.ru/politics/news/2024/12/22/24684722.shtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:14 UTC	2098	OUT	Data Raw: 23 20 48 45 4c 50 20 d0 92 d1 80 d0 b5 d0 bc d1 8f 20 d0 b7 d0 b0 d0 b3 d1 80 d1 83 d0 b7 d0 ba d0 b8 20 63 61 70 69 72 73 2e 6a 73 0a 23 20 54 59 50 45 20 61 70 70 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 20 68 69 73 74 6f 67 72 61 6d 0a 61 70 70 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 62 75 63 6b 65 74 20 7b 61 70 70 3d 22 66 72 6f 6e 74 22 2c 20 73 79 73 74 65 6d 3d 22 67 61 7a 65 74 61 2d 64 65 73 6b 74 6f 70 22 2c 20 72 65 73 6f 75 72 63 65 3d 22 63 61 70 69 72 73 22 2c 20 64 69 72 65 63 74 69 6f 6e 3d 22 6f 75 74 22 2c 20 6c 65 76 65 6c 3d 22 72 65 71 75 65 73 74 22 2c 20 6c 65 3d 22 30 2e 32 22 7d 20 31 0a 61 70 70 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 62 75 63 6b 65 74 20 7b 61 70 70 3d 22 66 72 6f 6e 74 22 2c 20 73 79 73 74 65 6d 3d 22 67 61 Data Ascii: # HELP capirs.js# TYPE app_request_time histogramapp_request_time_bucket {app="front", system="gazeta-desktop", resource="capirs", direction="out", level="request", le="0.2"} 1app_request_time_bucket {app="front", system="ga
2025-01-02 15:12:14 UTC	274	IN	HTTP/1.1 202 Accepted Server: nginx Date: Thu, 02 Jan 2025 15:12:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-headers: X-Media-Atlas-Auth access-control-allow-origin: * access-control-allow-methods: POST
2025-01-02 15:12:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:14 UTC	410	OUT	GET /nm2021/js/noindex/getemoji_v5.js HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt6rl9RIp2LAg==
2025-01-02 15:12:15 UTC	497	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3070 Connection: close Last-Modified: Thu, 03 Oct 2024 09:28:41 GMT Vary: Accept-Encoding ETag: "66fe63c9-bfe" X-Balancer: 2node0300.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:15 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:15 UTC	3070	IN	Data Raw: 0a 0a 77 69 6e 64 6f 77 2e 67 5f 67 65 74 45 6d 6f 6a 69 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 20 75 72 6c 29 7b 0a 20 20 20 20 0a 20 20 20 20 63 6f 6e 73 74 20 65 6d 6f 6a 69 42 6f 78 20 3d 20 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 5f 65 6d 6f 6a 69 2d 62 6f 78 27 29 20 7c 7c 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 69 66 28 65 6d 6f 6a 69 42 6f 78 20 26 26 20 75 72 6c 29 7b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 6c 65 74 20 65 6d 6f 6a 69 5f 61 72 72 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 4a 73 6f 6e 54 6f 45 6d 6f 41 72 72 28 6a 73 6f 6e 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6d 6f 6a 69 5f 61 72 72 20 3d 20 6a 73 6f 6e 2e 6c 61 62 65 6c 73 2e 73 Data Ascii: window.g_getEmoji = function(root, url){ const emojiBox = root.querySelector('.b_emoji-box') \|\| null; if(emojiBox && url){ let emoji_arr = []; function sortJsonToEmoArr(json){ emoji_arr = json.labels.s