Edit tour

Windows Analysis Report
https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml

Overview

General Information

Sample URL:	https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml
Analysis ID:	1583393
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish62

Javascript uses Websockets

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

HTML page contains string obfuscation

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5800 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5812 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.3.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.7.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.12.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
1.9.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T16:12:19.982302+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49927	195.209.109.18	443	TCP
2025-01-02T16:12:20.013383+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49926	88.212.252.2	443	TCP
2025-01-02T16:12:22.777163+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	50017	195.209.109.18	443	TCP
2025-01-02T16:12:26.611910+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	50140	47.253.61.56	443	TCP
2025-01-02T16:12:27.059352+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	50133	62.76.157.185	443	TCP
2025-01-02T16:12:28.784718+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	50202	208.93.169.131	443	TCP
2025-01-02T16:12:32.286562+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	54854	52.30.86.151	443	TCP
2025-01-02T16:12:35.597137+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	54921	46.243.182.93	443	TCP

HTTP traffic detected: POST /atlas/metrics/ HTTP/1.1Host: www.gazeta.ruConnection: keep-aliveContent-Length: 2098sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: text/plainX-Media-Atlas-Auth: basic cm9vdDp3b294M1NoaWU5b2dvaERlaTF0YWhmZXNoaXhhaGZhaGNoZVNvaHNpsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.gazeta.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=URNIAGd2rMt7bl9XIljXAg==

Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML
Source: Yara match	File source: 1.12.pages.csv, type: HTML
Source: Yara match	File source: 1.9.pages.csv, type: HTML

Source: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	HTTP Parser: {const commenttoungedom = document.getelementbyid('_id_comments_tounge');const commenttoungemarker = commenttoungedom.queryselector('.b_comments_tounge-marker');const commenttoungecnt = commenttoungedom.queryselector('.b_comments_tounge-marker .cnt');const commenttoungelist = commenttoungedom.queryselector('.b_comments_tounge-list-content');const commenttoungeclosebtn = commenttoungedom.queryselector('.b_comments_tounge-closebtn');const pseudoheader = _id_header.queryselector('.b_header-pseudo');const anchorpos = _id_header.getboundingclientrect().bottom + pseudo.clientheight;window.addeventlistener('scroll', function(e){if(window.scrolly > anchorpos){commenttoungedom.classlist.add('m_scrolling_gap');} else {commenttoungedom.classlist.remove('m_scrolling_gap');}})let articlestack;let commentsstack = {totalcomments: 0};commenttoungemarker.addeventlistener('click', ()=>{commenttoungedom.classlist.add('m_show_list');commenttoungedom.classlist.remove('m_show_notice');})commenttoungeclosebtn....
Source: https://vp.rambler.ru/player/1.142.1/player.html#id=record%3A%3A0c302d1b-a269-4fa9-8c0e-0564f2617d0e&sspJparams=%7B%22puid6%22%3A%22GAZETA_POLITICS%22%2C%22puid10%22%3A%22NO%22%2C%22puid15%22%3A%22news%22%2C%22puid18%22%3A%22GAZETA_POLITICS_NEWS%22%2C%22puid58%22%3A%22bayden-dzhozef%3Ablinken-entoni%3Arudenko-andrey%22%2C%22puid59%22%3A%22health%3Abc%3Amilitary%3Achecked%3Aweapon%22%7D&referrer=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml&docking=left-down&dockingDirection=down&enforceStartWhenPlayingInParent=true&aspectRatio=1.7777777777777777&initialId=record%3A%3A0c302d1b-a269-4fa9-8c0e-0564f2617d0e&debug=false&lazy=false&lazyOffset=300&widgetId=m5fgsuly.boi_1	HTTP Parser: !function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new error).stack;t&&(e._sentrydebugids=e._sentrydebugids\|\|{},e._sentrydebugids[t]="b403b3e5-ebe4-4129-a68b-6852cdd32d22",e._sentrydebugididentifier="sentry-dbid-b403b3e5-ebe4-4129-a68b-6852cdd32d22")}catch(e){}}();var _global="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};_global.sentry_release={id:"165f5bf8ae24607e5c379ec0024eea1cc4f4dcae"},(()=>{var e,t,i={2136:(e,t,i)=>{"use strict";i.d(t,{hd:()=>o});var s,n,r=(s=function(e,t){return s=object.setprototypeof\|\|{__proto__:[]}instanceof array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)object.prototype.hasownproperty.call(t,i)&&(e[i]=t[i])},s(e,t)},function(e,t){if("function"!=typeof t&&null!==t)throw new typeerror("class extends value "+string(t)+" is not a constructor or null");function i(){this.constructor=e}s(e,t),e.prototype=null===t?object.create(t):(i.prototype...

Source: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	HTTP Parser: No favicon
Source: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:57427 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:62619 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49927 -> 195.209.109.18:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49926 -> 88.212.252.2:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:50133 -> 62.76.157.185:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:50017 -> 195.209.109.18:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:50140 -> 47.253.61.56:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:50202 -> 208.93.169.131:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:54854 -> 52.30.86.151:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:54921 -> 46.243.182.93:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 194.190.76.38
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.78
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.78
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.78
Source: unknown	TCP traffic detected without corresponding DNS query: 45.138.161.78

Source: chromecache_422.3.dr	String found in binary or memory: ","link":"https://vp.rambler.ru/admin/ac/gazeta/records/1934196/attributes","source":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::0c302d1b-a269-4fa9-8c0e-0564f2617d0e","directSource":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::0c302d1b-a269-4fa9-8c0e-0564f2617d0e","duration":114000,"chunkDuration":2000,"snapshot":"https://static.eaglecdn.com/gazeta/logos/d/0/d0127eb2a305e13d0ee8c87173f8050fafd0562c.jpg?1649175132","customScreenshotOrig":"https://static.eaglecdn.com/gazeta/logos/f/c/fc0f3a61c1db2137b04405433222440702b8faa5.jpg?1649175132","embedCode":"<div data-widget=\"Player\" data-id=\"record::0c302d1b-a269-4fa9-8c0e-0564f2617d0e\" data-player-template-id=\"11953\" data-multiplayer-filter-id=\"48300\" data-ad-template-id=\"6522\"></div><script async src=\"https://vp.rambler.ru/player/sdk.js\"></script>","clickUrl":"","defaultShareUrl":"https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml","old":"https://view.eaglecdn.com/api/resources/MjAyMjA0MDYvZGc0VkVuUEplT0ZWbg.m3u8?account=gazeta&type=hlsvod"},"mediaControl":{"skinName":"Universal","backgroundColor":16777215,"foregroundColor":11604246,"textColor":16777215,"hoverColor":11604246,"fontUrl":null},"vigo":true,"statistic":{"url":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834338","recordViewStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834338","recordViewStatUrl5s":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view_5s?e=1735834338","playerLoadStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_load?e=1735834338"},"share":{"skinName":null,"embedCodes":true,"socialNetworks":true},"suggest":{"skinName":"suggest_plugin","url":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","urlPause":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","puid4":null,"puid5":"15","puid6":"92","puid7":null,"tag":[" equals www.rambler.ru (Rambler)
Source: chromecache_399.3.dr	String found in binary or memory: ","link":"https://vp.rambler.ru/admin/ac/gazeta/records/1934196/attributes","source":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::0c302d1b-a269-4fa9-8c0e-0564f2617d0e","directSource":"https://api.vp.rambler.ru/api/records/playlist.m3u8?uuid=record::0c302d1b-a269-4fa9-8c0e-0564f2617d0e","duration":114000,"chunkDuration":2000,"snapshot":"https://static.eaglecdn.com/gazeta/logos/d/0/d0127eb2a305e13d0ee8c87173f8050fafd0562c.jpg?1649175132","customScreenshotOrig":"https://static.eaglecdn.com/gazeta/logos/f/c/fc0f3a61c1db2137b04405433222440702b8faa5.jpg?1649175132","embedCode":"<div data-widget=\"Player\" data-id=\"record::0c302d1b-a269-4fa9-8c0e-0564f2617d0e\" data-player-template-id=\"11953\" data-multiplayer-filter-id=\"48300\" data-ad-template-id=\"6522\"></div><script async src=\"https://vp.rambler.ru/player/sdk.js\"></script>","clickUrl":"","defaultShareUrl":"https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml","old":"https://view.eaglecdn.com/api/resources/MjAyMjA0MDYvZGc0VkVuUEplT0ZWbg.m3u8?account=gazeta&type=hlsvod"},"mediaControl":{"skinName":"Universal","backgroundColor":16777215,"foregroundColor":11604246,"textColor":16777215,"hoverColor":11604246,"fontUrl":null},"vigo":true,"statistic":{"url":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834340","recordViewStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view?e=1735834340","recordViewStatUrl5s":"//gazeta.stat.eagleplatform.com/stat/default_player_record_view_5s?e=1735834340","playerLoadStatUrl":"//gazeta.stat.eagleplatform.com/stat/default_player_load?e=1735834340"},"share":{"skinName":null,"embedCodes":true,"socialNetworks":true},"suggest":{"skinName":"suggest_plugin","url":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","urlPause":"//gazeta.media.eagleplatform.com/api/filters/48300/suggest.json","puid4":null,"puid5":"15","puid6":"92","puid7":null,"tag":[" equals www.rambler.ru (Rambler)
Source: chromecache_247.3.dr	String found in binary or memory: VD.prototype.l=function(a){switch(a.type){case "playing":XD(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&WD(this)>0&&(this.B=!0,XD(this))}};var XD=function(a){!a.g.enabled&&a.B&&(a.F=WD(a)1E3,a.C=Date.now(),a.A=!1,a.g.start())};VD.prototype.G=function(){var a=Date.now(),b=a-this.C,c=WD(this)1E3;c-this.F<b.5?this.A\|\|(this.A=!0,this.dispatchEvent("playbackStalled")):this.A=!1;this.F=c;this.C=a};var YD="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ZD=/\bocr\b/; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.gazeta.ru
Source: global traffic	DNS traffic detected: DNS query: static.gazeta.ru
Source: global traffic	DNS traffic detected: DNS query: id.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: ssp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: vp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: rcmjs.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: img.gazeta.ru
Source: global traffic	DNS traffic detected: DNS query: comments.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: data.24smi.net
Source: global traffic	DNS traffic detected: DNS query: ssp01.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: cls.ad-tech.ru
Source: global traffic	DNS traffic detected: DNS query: rcm-tr.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: img02.ad-tech.ru
Source: global traffic	DNS traffic detected: DNS query: api.vp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: view.eaglecdn.com
Source: global traffic	DNS traffic detected: DNS query: static.eaglecdn.com
Source: global traffic	DNS traffic detected: DNS query: static.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: yandex.ru
Source: global traffic	DNS traffic detected: DNS query: an.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: ads.adfox.ru
Source: global traffic	DNS traffic detected: DNS query: hlsvod.rambler.eaglecdn.com
Source: global traffic	DNS traffic detected: DNS query: profile.ad-tech.ru
Source: global traffic	DNS traffic detected: DNS query: sentry-saas.rambler-co.ru
Source: global traffic	DNS traffic detected: DNS query: sandbox.ssp.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: sync.upravel.com
Source: global traffic	DNS traffic detected: DNS query: sync.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: ssp.bidvol.com
Source: global traffic	DNS traffic detected: DNS query: lbs-ru1.ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: ssp.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: yastatic.net
Source: global traffic	DNS traffic detected: DNS query: avatars.mds.yandex.net
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: dmg.digitaltarget.ru
Source: global traffic	DNS traffic detected: DNS query: stats.mos.ru
Source: global traffic	DNS traffic detected: DNS query: redirect.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: gazeta.media.eagleplatform.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: x01.aidata.io
Source: global traffic	DNS traffic detected: DNS query: const.uno
Source: global traffic	DNS traffic detected: DNS query: px.adhigh.net
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: sync.1dmp.io
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: counter.yadro.ru
Source: global traffic	DNS traffic detected: DNS query: log.strm.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: www.tns-counter.ru
Source: global traffic	DNS traffic detected: DNS query: top-fwz1.mail.ru
Source: global traffic	DNS traffic detected: DNS query: st.top100.ru
Source: global traffic	DNS traffic detected: DNS query: sync.bumlam.com
Source: global traffic	DNS traffic detected: DNS query: 1026--f1ffa3a7-68b6-4037-9bae-9cdb175b03db.stbid.ru
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: exchange.buzzoola.com
Source: global traffic	DNS traffic detected: DNS query: visor.sberbank.ru
Source: global traffic	DNS traffic detected: DNS query: autocontext.begun.ru
Source: global traffic	DNS traffic detected: DNS query: gw-iad-bid.ymmobi.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: tms.dmp.wi-fi.ru
Source: global traffic	DNS traffic detected: DNS query: img.24smi.net
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: sync.dmp.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: kraken.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: privacy-cs.mail.ru
Source: global traffic	DNS traffic detected: DNS query: mc.webvisor.org
Source: global traffic	DNS traffic detected: DNS query: ads.adlook.me
Source: global traffic	DNS traffic detected: DNS query: aidata-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: favicon.yandex.net
Source: global traffic	DNS traffic detected: DNS query: stun3.l.google.com
Source: global traffic	DNS traffic detected: DNS query: stun4.l.google.com
Source: global traffic	DNS traffic detected: DNS query: cm.p.altergeo.ru
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: atlas.rambler.ru

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, no-cache, no-store, must-revalidate, max-age=0Connection: CloseContent-Length: 43Content-Type: image/gif; charset=utf-8Date: Thu, 02 Jan 2025 15:12:19 GMTExpires: Thu, 02 Jan 2025 15:12:19 GMTLast-Modified: Thu, 02 Jan 2025 15:12:19 GMTPragma: no-cacheSet-Cookie: i=b53/wNq3+k8+Xt+CnpAf7IQQybt6XkNeR0lKxI4Cozhtxr40Ztqr3u33gogDdqfRIbJWWR8CmxUTSinXH3Tuo1rjMhk=; Expires=Sat, 02-Jan-2027 15:12:19 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=NoneSet-Cookie: yandexuid=9133052581735830739; Expires=Sat, 02-Jan-2027 15:12:19 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=NoneSet-Cookie: yashr=5884500491735830739; Path=/; Domain=.yandex.ru; Expires=Fri, 02 Jan 2026 15:12:19 GMT; SameSite=None; Secure; HttpOnlySet-Cookie: bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYNPZ2rsGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=; Path=/; Domain=.yandex.ru; Expires=Fri, 06 Feb 2026 15:12:19 GMT; SameSite=None; SecureStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-XSS-Protection: 1; mode=block
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 15:12:28 GMTContent-Type: application/jsonContent-Length: 159Connection: closex-response-id: A5x5KcUP4xLax-build-info: 0.126.1(264ee79bdb6f79172c2fcac700f387569fa95fbf)

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5800 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5812 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5800 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5812 --field-trial-handle=2300,i,845473966027314667,11376862238306305461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://ssp01.rambler.ru/context.jsp?wl=rambler&json=1&pad_id=432328744&first=1&block_id=442235304&screenw=1280&screenh=1024&winw=1280&winh=907&rq=0&rq_type=0&rq_sess=6F54556A65D5DFF11DB58C06BB0D1DD1&fpruid=pA8AAENKs1e215v9AWyrAQA%3D&adtech_uid=8679ac69-63da-41a5-bbb6-1520e065f11f&adtech_uid_scope=gazeta.ru&publisher_uid=URNIAGd2rMt7bl9XIljXAg%3D%3D&publisher_uid_scope=.gazeta.ru&browser_family=Chrome&browser_version=117.0.0.0&os_family=Windows&os_version=10&device_type=1&jparams=%7B%22p1%22%3A%22bwrhe%22%2C%22p2%22%3A%22fomx%22%2C%22pct%22%3A%22c%22%2C%22puid6%22%3A%22GAZETA_POLITICS%22%2C%22puid10%22%3A%22NO%22%2C%22puid15%22%3A%22news%22%2C%22puid18%22%3A%22GAZETA_POLITICS_NEWS%22%2C%22puid58%22%3A%22bayden-dzhozef%3Ablinken-entoni%3Arudenko-andrey%22%2C%22puid59%22%3A%22health%3Abc%3Amilitary%3Achecked%3Aweapon%22%2C%22pageNumber%22%3A%221%22%2C%22puid42%22%3A%221.45%22%2C%22pli%22%3A%22a%22%2C%22plp%22%3A%22a%22%2C%22pop%22%3A%22a%22%7D&top=1168&left=200&secure=1&vcapirs=38_56_28&fpParams=%7B%22f%22%3A%7B%22p%22%3A3131851467%2C%22c%22%3Anull%2C%22i%22%3A2849367669%2C%22v%22%3A%22Google%20Inc.%20(Google)%22%2C%22r%22%3A%22ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)%22%2C%22w%22%3A2452005797%7D%2C%22s%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22a%22%3A1280%2C%22b%22%3A984%2C%22p%22%3A1%2C%22c%22%3A24%7D%2C%22o%22%3A%7B%22t%22%3A300%2C%22u%22%3A%22en-US%22%7D%7D&device_memory=8&hardware_concurrency=4&cookies_enabled=true&webdriver=false&java_enabled=false&history_length=1&battery_info=%7B%22charging%22%3Atrue%2C%22charging_time%22%3A0%2C%22discharging_time%22%3Anull%2C%22level%22%3A1%7D&media_devices=%5B%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audioinput%22%2C%22label%22%3A%22%22%7D%2C%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audiooutput%22%2C%22label%22%3A%22%22%7D%5D&timezone=%7B%22offset%22%3A-5%2C%22name%22%3A%22America%2FNew_York%22%7D&callback=Begun_Autocontext_saveFeed3&url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml	0%	Avira URL Cloud	safe
https://ssp01.rambler.ru/context.jsp?wl=rambler&json=1&pad_id=432328744&first=1&block_id=579421053&screenw=1280&screenh=1024&winw=1280&winh=907&rq=0&rq_type=0&rq_sess=6F54556A65D5DFF11DB58C06BB0D1DD1&fpruid=pA8AAENKs1e215v9AWyrAQA%3D&adtech_uid=8679ac69-63da-41a5-bbb6-1520e065f11f&adtech_uid_scope=gazeta.ru&publisher_uid=URNIAGd2rMt7bl9XIljXAg%3D%3D&publisher_uid_scope=.gazeta.ru&browser_family=Chrome&browser_version=117.0.0.0&os_family=Windows&os_version=10&device_type=1&jparams=%7B%22puid6%22%3A%22GAZETA_POLITICS%22%2C%22puid10%22%3A%22NO%22%2C%22puid15%22%3A%22news%22%2C%22puid18%22%3A%22GAZETA_POLITICS_NEWS%22%2C%22puid58%22%3A%22bayden-dzhozef%3Ablinken-entoni%3Arudenko-andrey%22%2C%22puid59%22%3A%22health%3Abc%3Amilitary%3Achecked%3Aweapon%22%2C%22pageNumber%22%3A%221%22%2C%22puid42%22%3A%221.45%22%2C%22pli%22%3A%22a%22%2C%22plp%22%3A%22a%22%2C%22pop%22%3A%22a%22%7D&top=499&left=960&secure=1&vcapirs=38_56_28&fpParams=%7B%22f%22%3A%7B%22p%22%3A3131851467%2C%22c%22%3Anull%2C%22i%22%3A2849367669%2C%22v%22%3A%22Google%20Inc.%20(Google)%22%2C%22r%22%3A%22ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)%22%2C%22w%22%3A2452005797%7D%2C%22s%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22a%22%3A1280%2C%22b%22%3A984%2C%22p%22%3A1%2C%22c%22%3A24%7D%2C%22o%22%3A%7B%22t%22%3A300%2C%22u%22%3A%22en-US%22%7D%7D&device_memory=8&hardware_concurrency=4&cookies_enabled=true&webdriver=false&java_enabled=false&history_length=1&battery_info=%7B%22charging%22%3Atrue%2C%22charging_time%22%3A0%2C%22discharging_time%22%3Anull%2C%22level%22%3A1%7D&media_devices=%5B%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audioinput%22%2C%22label%22%3A%22%22%7D%2C%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audiooutput%22%2C%22label%22%3A%22%22%7D%5D&timezone=%7B%22offset%22%3A-5%2C%22name%22%3A%22America%2FNew_York%22%7D&callback=Begun_Autocontext_saveFeed4&url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
sync.upravel.com	93.189.58.218	true	false	high
securepubads.g.doubleclick.net	216.58.212.162	true	false	high
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
id.rambler.ru	81.19.78.77	true	false	high
gazeta.ru	81.19.72.0	true	false	high
static.eaglecdn.com	81.19.87.28	true	false	high
stun3.l.google.com	74.125.250.129	true	false	high
x01.aidata.io	89.108.120.76	true	false	high
sandbox.ssp.rambler.ru	87.242.92.190	true	false	high
stats.g.doubleclick.net	108.177.15.157	true	false	high
top-fwz1.mail.ru	95.163.52.67	true	false	high
balance.segmento.ru	45.9.24.193	true	false	high
sync.crwdcntrl.net	54.73.51.224	true	false	high
an.yandex.ru	77.88.21.90	true	false	high
ssp.adriver.ru	195.209.109.18	true	false	high
www.google.com	142.250.186.36	true	false	high
vp.rambler.ru	81.19.87.48	true	false	high
lb-prod.adlook.me	46.243.182.93	true	false	high
comments.rambler.ru	81.19.82.50	true	false	high
favicon.yandex.net	93.158.134.36	true	false	high
sentry-saas.rambler-co.ru	81.19.73.31	true	false	high
krf.r.mail.ru	95.163.52.89	true	false	high
visor.sberbank.ru	84.252.144.187	true	false	high
2e2qdr4l9f.a.trbcdn.net	151.236.71.248	true	false	high
redirect.frontend.weborama.fr	35.190.24.218	true	false	high
www.tns-counter.ru	194.226.130.226	true	false	high
img02.ad-tech.ru	46.243.201.48	true	false	high
ads.adfox.ru	77.88.21.179	true	false	high
avatars.mds.yandex.net	87.250.247.181	true	false	high
autocontext.begun.ru	62.76.157.185	true	false	high
log.strm.yandex.ru	87.250.251.15	true	false	high
rcmjs.rambler.ru	81.19.82.56	true	false	high
data.24smi.net	104.26.9.117	true	false	high
mc.webvisor.org	93.158.134.119	true	false	high
mc.yandex.ru	87.250.251.119	true	false	high
sync.1dmp.io	87.242.89.90	true	false	high
stun4.l.google.com	74.125.250.129	true	false	high
view.eaglecdn.com	81.19.87.28	true	false	high
rcm-tr.rambler.ru	81.19.82.57	true	false	high
am1-direct-bgp.contextweb.com	208.93.169.131	true	false	high

Name	Malicious	Antivirus Detection	Reputation
https://ssp01.rambler.ru/context.jsp?wl=rambler&json=1&pad_id=432328744&first=1&block_id=579421053&screenw=1280&screenh=1024&winw=1280&winh=907&rq=0&rq_type=0&rq_sess=6F54556A65D5DFF11DB58C06BB0D1DD1&fpruid=pA8AAENKs1e215v9AWyrAQA%3D&adtech_uid=8679ac69-63da-41a5-bbb6-1520e065f11f&adtech_uid_scope=gazeta.ru&publisher_uid=URNIAGd2rMt7bl9XIljXAg%3D%3D&publisher_uid_scope=.gazeta.ru&browser_family=Chrome&browser_version=117.0.0.0&os_family=Windows&os_version=10&device_type=1&jparams=%7B%22puid6%22%3A%22GAZETA_POLITICS%22%2C%22puid10%22%3A%22NO%22%2C%22puid15%22%3A%22news%22%2C%22puid18%22%3A%22GAZETA_POLITICS_NEWS%22%2C%22puid58%22%3A%22bayden-dzhozef%3Ablinken-entoni%3Arudenko-andrey%22%2C%22puid59%22%3A%22health%3Abc%3Amilitary%3Achecked%3Aweapon%22%2C%22pageNumber%22%3A%221%22%2C%22puid42%22%3A%221.45%22%2C%22pli%22%3A%22a%22%2C%22plp%22%3A%22a%22%2C%22pop%22%3A%22a%22%7D&top=499&left=960&secure=1&vcapirs=38_56_28&fpParams=%7B%22f%22%3A%7B%22p%22%3A3131851467%2C%22c%22%3Anull%2C%22i%22%3A2849367669%2C%22v%22%3A%22Google%20Inc.%20(Google)%22%2C%22r%22%3A%22ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)%22%2C%22w%22%3A2452005797%7D%2C%22s%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22a%22%3A1280%2C%22b%22%3A984%2C%22p%22%3A1%2C%22c%22%3A24%7D%2C%22o%22%3A%7B%22t%22%3A300%2C%22u%22%3A%22en-US%22%7D%7D&device_memory=8&hardware_concurrency=4&cookies_enabled=true&webdriver=false&java_enabled=false&history_length=1&battery_info=%7B%22charging%22%3Atrue%2C%22charging_time%22%3A0%2C%22discharging_time%22%3Anull%2C%22level%22%3A1%7D&media_devices=%5B%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audioinput%22%2C%22label%22%3A%22%22%7D%2C%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audiooutput%22%2C%22label%22%3A%22%22%7D%5D&timezone=%7B%22offset%22%3A-5%2C%22name%22%3A%22America%2FNew_York%22%7D&callback=Begun_Autocontext_saveFeed4&url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml	false	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/watch/27775902/1?page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.134%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.134%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.134%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1735830745_ba21af3c9c2ee7523aa341764db2f5e7a8ac2fea2d19d5e51fa67c42d4be6aaf&browser-info=pa%3A1%3Aar%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A1%3Als%3A954893397683%3Ahid%3A462599127%3Az%3A-300%3Ai%3A20250102101224%3Aet%3A1735830744%3Ac%3A1%3Arn%3A888130162%3Arqn%3A10%3Au%3A1735830742224369157%3Aw%3A1263x890%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1735830729103%3Arqnl%3A1%3Ast%3A1735830744&t=gdpr(14)mc(p-10)clc(0-0-0)rqnt(10)aw(1)rcm(1)cdl(na)eco(42017284)ti(0)&force-urlencoded=1&site-info=%7B%22telegram_subscriber%22%3A%7B%22desktop_m_normal%22%3A%22view%22%7D%7D	false		high
https://lbs-ru1.ads.betweendigital.com/match?bidder_id=43008&external_matching=1&forward=1&external_user_id=0000042e-6776-accc-1bdd-0cde8554f101&crf=1&rts=3056732748457516782	false		high
https://sync.rambler.ru/set?partner_id=ddec90d2-616b-4bf2-bf10-c70801cba50d&id=&first_id=8679ac69-63da-41a5-bbb6-1520e065f11f	false		high
https://st.top100.ru/top100/top100.js	false		high
https://mc.webvisor.org/sync_cookie_image_check	false		high
https://vp.rambler.ru/player/1.142.1/3883-05de77dcdf3fd18f16c1.js	false		high
https://static.gazeta.ru/nm2021/js/others_scripts_v6.js	false		high
https://static.gazeta.ru//nm2021//img/pinch_zoom.svg	false		high
https://ssp01.rambler.ru/context.jsp?wl=rambler&json=1&pad_id=432328744&first=1&block_id=442235304&screenw=1280&screenh=1024&winw=1280&winh=907&rq=0&rq_type=0&rq_sess=6F54556A65D5DFF11DB58C06BB0D1DD1&fpruid=pA8AAENKs1e215v9AWyrAQA%3D&adtech_uid=8679ac69-63da-41a5-bbb6-1520e065f11f&adtech_uid_scope=gazeta.ru&publisher_uid=URNIAGd2rMt7bl9XIljXAg%3D%3D&publisher_uid_scope=.gazeta.ru&browser_family=Chrome&browser_version=117.0.0.0&os_family=Windows&os_version=10&device_type=1&jparams=%7B%22p1%22%3A%22bwrhe%22%2C%22p2%22%3A%22fomx%22%2C%22pct%22%3A%22c%22%2C%22puid6%22%3A%22GAZETA_POLITICS%22%2C%22puid10%22%3A%22NO%22%2C%22puid15%22%3A%22news%22%2C%22puid18%22%3A%22GAZETA_POLITICS_NEWS%22%2C%22puid58%22%3A%22bayden-dzhozef%3Ablinken-entoni%3Arudenko-andrey%22%2C%22puid59%22%3A%22health%3Abc%3Amilitary%3Achecked%3Aweapon%22%2C%22pageNumber%22%3A%221%22%2C%22puid42%22%3A%221.45%22%2C%22pli%22%3A%22a%22%2C%22plp%22%3A%22a%22%2C%22pop%22%3A%22a%22%7D&top=1168&left=200&secure=1&vcapirs=38_56_28&fpParams=%7B%22f%22%3A%7B%22p%22%3A3131851467%2C%22c%22%3Anull%2C%22i%22%3A2849367669%2C%22v%22%3A%22Google%20Inc.%20(Google)%22%2C%22r%22%3A%22ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)%22%2C%22w%22%3A2452005797%7D%2C%22s%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22a%22%3A1280%2C%22b%22%3A984%2C%22p%22%3A1%2C%22c%22%3A24%7D%2C%22o%22%3A%7B%22t%22%3A300%2C%22u%22%3A%22en-US%22%7D%7D&device_memory=8&hardware_concurrency=4&cookies_enabled=true&webdriver=false&java_enabled=false&history_length=1&battery_info=%7B%22charging%22%3Atrue%2C%22charging_time%22%3A0%2C%22discharging_time%22%3Anull%2C%22level%22%3A1%7D&media_devices=%5B%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audioinput%22%2C%22label%22%3A%22%22%7D%2C%7B%22device_id%22%3A%22%22%2C%22group_id%22%3A%22%22%2C%22kind%22%3A%22audiooutput%22%2C%22label%22%3A%22%22%7D%5D&timezone=%7B%22offset%22%3A-5%2C%22name%22%3A%22America%2FNew_York%22%7D&callback=Begun_Autocontext_saveFeed3&url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml	false	Avira URL Cloud: safe	unknown
https://hlsvod.rambler.eaglecdn.com/gazeta/20220406/rYVI8fzfQzrMN.mp4/seg-17-v1-a1.ts	false		high
https://sync.rambler.ru/emily?partner_id=6bf5a340-6c1f-4262-8f72-400b3d237f5d&ruid=0000042e-6776-accc-1bdd-0cde8554f101	false		high
https://static.gazeta.ru/nm2021/img/icons/ui/vk_round_2024.svg	false		high
https://yandex.ru/ads/system/adsdk.js	false		high
https://static.gazeta.ru/nm2021/css/fonts_2022_v2.css	false		high
https://mc.yandex.ru/webvisor/230672?wv-type=9&wmode=0&wv-hit=462599127&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml&browser-info=et%3A1735830754%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101234%3Au%3A1735830742224369157%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830754&t=gdpr(14)ti(1)	false		high
https://img.gazeta.ru/files3/740/20322740/dvestor-pic_32ratio_600x400-600x400-3801.jpg	false		high
https://mc.yandex.ru/webvisor/230672?wv-type=9&wmode=0&wv-hit=462599127&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml&browser-info=et%3A1735830759%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101239%3Au%3A1735830742224369157%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830759&t=gdpr(14)ti(1)	false		high
https://static.gazeta.ru/nm2021/css/_print_desktop_v2.css	false		high
https://img.gazeta.ru/files3/666/13565666/marina_yardaeva1-pic_square_200x200-200x200-58503.jpg	false		high
https://favicon.yandex.net/favicon/promo.pixelsee.app?size=32&stub=2	false		high
https://hlsvod.rambler.eaglecdn.com/gazeta/20220406/rYVI8fzfQzrMN.mp4/seg-33-v1-a1.ts	false		high
https://px.adhigh.net/p/cm/rambler?u=0000042e-6776-accc-1bdd-0cde8554f101&bounced=1	false		high
https://top-fwz1.mail.ru/js/dyn-goal-config.js?ids=8821	false		high
https://dmg.digitaltarget.ru/1/7009/i/i?a=185&e=175FF58A6D824FCF5DFC707CA4403F8D	false		high
https://x.bidswitch.net/sync?dsp_id=257&ssp=between&user_id=ym_user_f56d98dd-4cf3-411c-ac13-8eb702e1f3a4&bsw_param=ed99c1fb-4c58-4da7-872d-c081bcfb8e50	false		high
https://hlsvod.rambler.eaglecdn.com/gazeta/20220406/rYVI8fzfQzrMN.mp4/seg-12-v1-a1.ts	false		high
https://static.gazeta.ru/nm2021/img/icons/ui/tg_round_2024.svg	false		high
https://px.adhigh.net/p/cm/rambler?u=0000042e-6776-accc-1bdd-0cde8554f101	false		high
https://img.gazeta.ru/files3/233/19310233/20210705_zaa_p133_113-pic_32ratio_300x200-300x200-16964.jpg	false		high
https://mc.yandex.ru/watch/27775902/1?page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml&charset=utf-8&hittoken=1735830745_ba21af3c9c2ee7523aa341764db2f5e7a8ac2fea2d19d5e51fa67c42d4be6aaf&browser-info=nb%3A1%3Acl%3A2668%3Aar%3A1%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A1%3Als%3A954893397683%3Ahid%3A462599127%3Az%3A-300%3Ai%3A20250102101236%3Aet%3A1735830757%3Ac%3A1%3Arn%3A514552170%3Arqn%3A12%3Au%3A1735830742224369157%3Aw%3A1263x890%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1735830729103%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1735830757&t=gdpr(14)mc(p-11-h-1)clc(2-827-479)rqnt(12)aw(1)rcm(1)cdl(na)eco(42017284)dss(1)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D	false		high
https://hlsvod.rambler.eaglecdn.com/gazeta/20220406/rYVI8fzfQzrMN.mp4/seg-5-v1-a1.ts	false		high
https://top-fwz1.mail.ru/tracker?_=0.09957674758905077;id=8821;u=https%3A//www.gazeta.ru/politics/news/2024/12/22/24684854.shtml;title=%D0%92%C2%A0%D0%9A%D0%B8%D1%82%D0%B0%D0%B5%20%D0%B2%D1%8B%D1%80%D0%B0%D0%B7%D0%B8%D0%BB%D0%B8%20%D0%BD%D0%B5%D0%B4%D0%BE%D0%B2%D0%BE%D0%BB%D1%8C%D1%81%D1%82%D0%B2%D0%BE%20%D0%A1%D0%A8%D0%90%20%D0%B7%D0%B0%C2%A0%D0%B2%D0%BE%D0%B5%D0%BD%D0%BD%D1%83%D1%8E%20%D0%BF%D0%BE%D0%BC%D0%BE%D1%89%D1%8C%20%D0%A2%D0%B0%D0%B9%D0%B2%D0%B0%D0%BD%D1%8E%20-%20%D0%93%D0%B0%D0%B7%D0%B5%D1%82%D0%B0.Ru%20%7C%20%D0%9D%D0%BE%D0%B2%D0%BE%D1%81%D1%82%D0%B8;s=12801024;vp=1263890;touch=0;hds=1;sid=ba711278e45c9c1f;ver=60.6.0;tz=300%2FAmerica%2FNew_York;st=1735830733297;ct=13362/13368/13368/13372/3836;rt=3836/9518/0/0/0/3836/11691/11699/11699/12811/11700/12812/13149/13354;gl=u;ni=1.25//3g/350/0/;detect=0;lvid=1735830742470%3A1735830792019%3A3%3A6751500ec49599098d38fc1a56da9d56;opts=jst-ga-ym%2Ccnhp%3Dhttp/1.1%2Ccs%3D47083-47083-47383;fpid=ILxdDv7X1Bd7ybyz7H4p1;visible=true;js=13;e=PVT/15	false		high
https://mc.yandex.com/watch/27775902/1?page-url=goal%3A%2F%2Fvp.rambler.ru%2Fplayer_load&page-ref=https%3A%2F%2Fvp.rambler.ru%2Fplayer%2F1.142.1%2Fplayer.html%23id%3Drecord%253A%253A0c302d1b-a269-4fa9-8c0e-0564f2617d0e%26sspJparams%3D%257B%2522puid6%2522%253A%2522GAZETA_POLITICS%2522%252C%2522puid10%2522%253A%2522NO%2522%252C%2522puid15%2522%253A%2522news%2522%252C%2522puid18%2522%253A%2522GAZETA_POLITICS_NEWS%2522%252C%2522puid58%2522%253A%2522bayden-dzhozef%253Ablinken-entoni%253Arudenko-andrey%2522%252C%2522puid59%2522%253A%2522health%253Abc%253Amilitary%253Achecked%253Aweapon%2522%257D%26referrer%3Dhttps%253A%252F%252Fwww.gazeta.ru%252Fpolitics%252Fnews%252F2024%252F12%252F22%252F24684854.shtml%26docking%3Dleft-down%26dockingDirection%3Ddown%26enforceStartWhenPlayingInParent%3Dtrue%26aspectRatio%3D1.7777777777777777%26initialId%3Drecord%253A%253A0c302d1b-a269-4fa9-8c0e-0564f2617d0e%26debug%3Dfalse%26lazy%3Dfalse%26lazyOffset%3D300%26widgetId%3Dm5fgsuly.boi_1&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.134%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.134%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.134%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1735830749_0697e74be1ee89968da2d552d19eb623aa2b2bbe67dffbcc58213f61fc6c4f76&browser-info=ar%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A1%3Als%3A310504478223%3Ahid%3A851608975%3Aphid%3A462599127%3Az%3A-300%3Ai%3A20250102101228%3Aet%3A1735830749%3Ac%3A1%3Arn%3A843296601%3Arqn%3A1%3Au%3A1735830745545994989%3Aw%3A660x371%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A32%2C829%2C514%2C688%2C1%2C0%2C%2C231%2C0%2C2617%2C2619%2C0%2C2604%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1735830734361%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1735830749%3At%3ARamblerPlayer&t=gdpr(14)mc(g-1)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(4259840)ti(1)	false		high
https://mc.yandex.ru/webvisor/27775902?wv-type=9&wmode=0&wv-hit=462599127&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml&browser-info=et%3A1735830792%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101312%3Au%3A1735830742224369157%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830792&t=gdpr(14)ti(1)	false		high
https://hlsvod.rambler.eaglecdn.com/gazeta/20220406/rYVI8fzfQzrMN.mp4/seg-20-v1-a1.ts	false		high
https://img.24smi.net/400_400/5/c/5c6aef10781f58e11209ffa4f81ed0b6.jpeg	false		high
https://mc.yandex.ru/webvisor/27775902?wv-type=9&wmode=0&wv-hit=462599127&page-url=https%3A%2F%2Fwww.gazeta.ru%2Fpolitics%2Fnews%2F2024%2F12%2F22%2F24684854.shtml&browser-info=et%3A1735830765%3Aw%3A1263x890%3Av%3A1551%3Az%3A-300%3Ai%3A20250102101244%3Au%3A1735830742224369157%3Avf%3A14pwap7gbnncs44thfrhqpu3c8nz%3Ast%3A1735830765&t=gdpr(14)ti(1)	false		high
https://ads.betweendigital.com/match?bidder_id=253&external_user_id=GdObQBtyhBWR&callback_url=https%3A%2F%2Fads.betweendigital.com%2Fmatch%3Fbidder_id%3D22%26external_user_id%3Ded99c1fb-4c58-4da7-872d-c081bcfb8e50%26callback_url%3Dhttps%253A%252F%252Fap.lijit.com%252Fpixel%253Fredir%253Dhttps%25253A%25252F%25252Fads.betweendigital.com%25252Fmatch%25253Fbidder_id%25253D114%252526external_user_id%25253D%252524UID%252526forward%25253D1&ev=1&us_privacy=${us_privacy}&pid=562827	false		high
https://hlsvod.rambler.eaglecdn.com/gazeta/20220406/rYVI8fzfQzrMN.mp4/seg-25-v1-a1.ts	false		high

Name	Source	Malicious	Reputation
https://static.gazeta.ru/nm2021/img/icons/sport/puck.svg);	chromecache_268.3.dr	false	high
https://f.creativecdn.com	chromecache_548.3.dr, chromecache_247.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_700_cyr_ext.woff2)	chromecache_288.3.dr, chromecache_545.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/lora_400.woff)	chromecache_288.3.dr, chromecache_545.3.dr	false	high
https://static.gazeta.ru/nm2021/img/logo_2021_wh.svg)	chromecache_268.3.dr	false	high
https://www.fmprc.gov.cn/rus/	chromecache_653.3.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_522.3.dr, chromecache_429.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_500_greek_ext.woff)	chromecache_545.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/zen_round_2024.svg)	chromecache_268.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/lora_latin.woff2)	chromecache_288.3.dr, chromecache_545.3.dr	false	high
https://static.gazeta.ru/nm2021//img/icons/sport/yellow_card.svg)	chromecache_268.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/comment_tounge_cnt_bubble_red.svg)	chromecache_653.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_400_greek_ext.woff)	chromecache_545.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/sport/yellow_red_card.svg);	chromecache_268.3.dr	false	high
https://schema.org/SearchAction	chromecache_653.3.dr	false	high
https://www.gazeta.ru/amp/politics/news/2024/12/22/24684854.shtml	chromecache_653.3.dr	false	high
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	chromecache_548.3.dr, chromecache_247.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/yt_round_2024.svg)	chromecache_268.3.dr	false	high
http://schema.org/ImageObject	chromecache_653.3.dr	false	high
https://img.gazeta.ru/files3/456/20333456/photo_2025-01-02_17-00-23-pic_32ratio_300x200-300x200-6721	chromecache_653.3.dr	false	high
https://www.gazeta.ru/recommended_tech_rules.shtml	chromecache_653.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/sport/puck_bullit.svg);	chromecache_268.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_400.woff)	chromecache_288.3.dr	false	high
http://schema.org/NewsArticle	chromecache_653.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/audio_play_white.svg)	chromecache_268.3.dr	false	high
http://schema.org/BreadcrumbList	chromecache_653.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/ui/vk_round_2024.svg)	chromecache_268.3.dr	false	high
https://static.gazeta.ru/nm2021//img/icons/sport/ball_auto1.svg);	chromecache_268.3.dr	false	high
https://static.gazeta.ru//nm2021//img/triangle_rounded.svg)	chromecache_268.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_400_vietnamese.woff2)	chromecache_288.3.dr, chromecache_545.3.dr	false	high
https://static.smi2.net/static/logo/smi2.svg	chromecache_653.3.dr	false	high
https://static.gazeta.ru/nm2021/img/icons/sport/change.svg);	chromecache_268.3.dr	false	high
https://static.gazeta.ru/nm2021//img/icons/sport/red_card.svg)	chromecache_268.3.dr	false	high
https://www.gazeta.ru/credits.shtml	chromecache_653.3.dr	false	high
https://static.gazeta.ru/nm2015/i/__svg/camera_2020.svg)	chromecache_268.3.dr	false	high
https://schema.org/WebPage	chromecache_653.3.dr	false	high
http://schema.org/Person	chromecache_653.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_500_greek_ext.woff2)	chromecache_288.3.dr, chromecache_545.3.dr	false	high
https://static.gazeta.ru//nm2021/fonts/new/roboto_700_vietnamese.woff2)	chromecache_288.3.dr, chromecache_545.3.dr	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
88.212.201.198	unknown	Russian Federation	39134	UNITEDNETRU	false
87.250.250.119	unknown	Russian Federation	13238	YANDEXRU	false
93.189.58.218	sync.upravel.com	Lithuania	56630	MELBICOM-EU-ASMelbikomasUABNL	false
84.252.144.187	visor.sberbank.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
87.242.92.190	sandbox.ssp.rambler.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
195.209.109.18	ssp.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
91.192.148.28	unknown	Russian Federation	42481	BEGUN-ASRU	false
188.42.34.64	ssp.ads.betweendigital.com	Luxembourg	7979	SERVERS-COMUS	false
95.163.84.7	const.uno	Russian Federation	12695	DINET-ASRU	false
77.88.21.90	an.yandex.ru	Russian Federation	13238	YANDEXRU	false
81.19.89.18	kraken.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
95.163.52.67	top-fwz1.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
87.250.247.181	avatars.mds.yandex.net	Russian Federation	13238	YANDEXRU	false
87.250.250.90	unknown	Russian Federation	13238	YANDEXRU	false
87.250.247.182	unknown	Russian Federation	13238	YANDEXRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.220.120.9	unknown	Russian Federation	202173	MAXIMATELECOMRU	false
88.212.202.52	counter.yadro.ru	Russian Federation	39134	UNITEDNETRU	false
46.243.182.93	lb-prod.adlook.me	Russian Federation	209974	ITGLOBALRU	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
47.253.61.56	bid-iad-static.yeahtargeter.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
216.58.212.162	securepubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
45.9.24.193	balance.segmento.ru	Russian Federation	210053	R5IT-ASRU	false
151.236.71.248	2e2qdr4l9f.a.trbcdn.net	Russian Federation	57363	CDNVIDEO-ASRU	false
81.19.78.77	id.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.78.78	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
194.190.76.38	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
87.242.95.157	ssp01.rambler.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
87.242.89.90	sync.1dmp.io	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
52.30.86.151	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
87.242.127.163	cls.ad-tech.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
65.109.65.188	unknown	United States	11022	ALABANZA-BALTUS	false
81.19.82.57	rcm-tr.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States	26228	SERVEPATHUS	false
81.19.82.56	rcmjs.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
178.154.131.217	unknown	Russian Federation	13238	YANDEXRU	false
81.19.82.58	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
178.154.131.215	yastatic.net	Russian Federation	13238	YANDEXRU	false
31.172.81.146	sync.bumlam.com	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
46.243.201.48	img02.ad-tech.ru	Netherlands	56595	FLUENCYGB	false
142.251.168.157	unknown	United States	15169	GOOGLEUS	false
81.19.72.2	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
93.158.134.36	favicon.yandex.net	Russian Federation	13238	YANDEXRU	false
193.232.150.45	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
95.163.52.89	krf.r.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
82.146.48.146	1026--f1ffa3a7-68b6-4037-9bae-9cdb175b03db.stbid.ru	Russian Federation	29182	THEFIRST-ASRU	false
81.19.82.50	comments.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.72.1	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
77.88.21.36	unknown	Russian Federation	13238	YANDEXRU	false
81.19.72.0	gazeta.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
65.109.23.99	ssp.bidvol.com	United States	11022	ALABANZA-BALTUS	false
185.15.175.131	unknown	Russian Federation	43226	SAFEDATAUplinksRU	false
172.67.70.192	unknown	United States	13335	CLOUDFLARENETUS	false
108.177.15.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
81.19.87.48	vp.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
87.250.251.15	log.strm.yandex.ru	Russian Federation	13238	YANDEXRU	false
185.15.175.145	dmg.digitaltarget.ru	Russian Federation	43226	SAFEDATAUplinksRU	false
138.201.139.144	cm.p.altergeo.ru	Germany	24940	HETZNER-ASDE	false
93.158.134.119	mc.webvisor.org	Russian Federation	13238	YANDEXRU	false
87.250.251.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
194.55.244.178	unknown	unknown	34959	KVIKTEL_LLCRU	false
81.19.87.44	hlsvod.rambler.eaglecdn.com	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
91.220.120.21	tms.dmp.wi-fi.ru	Russian Federation	202173	MAXIMATELECOMRU	false
81.19.87.40	unknown	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
213.180.204.90	unknown	Russian Federation	13238	YANDEXRU	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
5.255.255.77	unknown	Russian Federation	13238	YANDEXRU	false
91.192.149.28	ssp.rambler.ru	Russian Federation	42481	BEGUN-ASRU	false
81.19.87.28	static.eaglecdn.com	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.87.29	gazeta.media.eagleplatform.com	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
81.19.82.7	atlas.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
104.26.9.117	data.24smi.net	United States	13335	CLOUDFLARENETUS	false
81.19.82.12	static.rambler.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
62.76.157.185	autocontext.begun.ru	Russian Federation	60826	STOLOTO-ASRU	false
88.212.252.2	lbs-ru1.ads.betweendigital.com	Russian Federation	7979	SERVERS-COMUS	false
194.226.130.227	unknown	Russian Federation	52016	TNSMSK-RU	false
194.226.130.226	www.tns-counter.ru	Russian Federation	52016	TNSMSK-RU	false
194.226.130.229	unknown	Russian Federation	52016	TNSMSK-RU	false
74.125.250.129	stun3.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
81.19.73.31	sentry-saas.rambler-co.ru	Russian Federation	24638	RAMBLER-TELECOM-ASRU	false
77.88.44.55	yandex.ru	Russian Federation	13238	YANDEXRU	false
89.108.120.76	x01.aidata.io	Russian Federation	43146	AGAVA3RU	false
91.192.149.12	unknown	Russian Federation	42481	BEGUN-ASRU	false
54.73.51.224	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
212.11.155.134	stats.mos.ru	Russian Federation	8901	MoscowMayorsOfficeRU	false
45.138.161.78	unknown	Russian Federation	134121	RAINBOW-HKRainbownetworklimitedHK	false
212.11.155.136	unknown	Russian Federation	8901	MoscowMayorsOfficeRU	false
77.88.21.179	ads.adfox.ru	Russian Federation	13238	YANDEXRU	false
45.138.161.71	unknown	Russian Federation	134121	RAINBOW-HKRainbownetworklimitedHK	false
35.190.24.218	redirect.frontend.weborama.fr	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583393
Start date and time:	2025-01-02 16:11:01 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@24/640@285/96
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: https://www.gazeta.ru Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.gazeta.ru
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": true, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": true, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": true, "contains_fake_security_alerts": false }

URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	640
Entropy (8bit):	7.551207837475733
Encrypted:	false
SSDEEP:	12:6v/7i1qU8efyfhVHVM/1BOpViClNnRXl2g01I1SBZyf/LciDjGD+RTXp98sf8/Wj:HqUjfgrifCnhl2g01hcfIiDjqi598+84
MD5:	12C22C4D76887C60D988FCC9185E6C18
SHA1:	84475AE6BFB0B3B8047F0CF79D3087609A7C2635
SHA-256:	65361756FBEEB484699E581DCE37C9174737DC4F6CC3E9F976DBD44693EE40D7
SHA-512:	9037F95011691C365BAAD9CEC6A198CAA235469B6A8A66DE07DB7A768CE3D6C0F9AFE9ADD0EE2ABF102B4598D432833593469184D477FE350CB0ECF2829FD114
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....GIDATx..5p.a...=Y.V_./.]..03s...1....l.ah..Q_.Q.....X......7._.'g.D.!g...z......$...3HBL.....o..o..!..9.r.I.....A.\|1i......N.e........(.Cl.....x.N._ .......c...kw.6.S..]\|..k....`.NJ..(.1."c.Hk.3.Ty.;q.....\..7.L.Z<..b...}..z....=Y..(5.w ......Wo.A..;Q..g.a.P....A.hB!.......<T.D....(D......zD]A.H-L.5.." .1..K....\.....B...`.\..p.]@.9rh?.>..2<:.Y.420.L25.'...oM.I\U.k-....R.....'I.rB...).Qmq.Vj+../VMq"..yB............~..$...T+.+*.5.v.n.d..8z.7TR.........u.gv.7VB..F.sAo...e....r..vb.l.c...7...N.<......m..v.+1.p..?....C..0.1Ee:......w.s..........9.B.W.c)....IEND.B`.

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:00 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 54 69 36 63 67 44 65 4c 75 30 6d 78 55 49 67 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 64 61 32 36 38 61 65 31 35 61 65 32 35 65 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ti6cgDeLu0mxUIg8.1Context: 2da268ae15ae25e1
2025-01-02 15:12:00 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-01-02 15:12:00 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 54 69 36 63 67 44 65 4c 75 30 6d 78 55 49 67 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 64 61 32 36 38 61 65 31 35 61 65 32 35 65 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 45 33 6f 51 72 65 41 41 4c 7a 70 30 75 66 66 53 63 38 48 76 6a 32 54 49 2b 73 7a 67 38 78 42 71 4b 6d 55 73 72 71 67 64 7a 63 2b 67 6d 6d 33 64 47 48 30 59 4b 38 64 30 49 65 4a 53 72 57 47 5a 45 31 66 4b 51 6f 55 46 6e 34 73 62 70 6b 72 62 34 4f 2f 35 42 65 5a 66 46 43 54 44 51 70 67 33 72 56 7a 39 56 76 57 79 66 6d 66 54 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Ti6cgDeLu0mxUIg8.2Context: 2da268ae15ae25e1<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUE3oQreAALzp0uffSc8Hvj2TI+szg8xBqKmUsrqgdzc+gmm3dGH0YK8d0IeJSrWGZE1fKQoUFn4sbpkrb4O/5BeZfFCTDQpg3rVz9VvWyfmfT
2025-01-02 15:12:00 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 54 69 36 63 67 44 65 4c 75 30 6d 78 55 49 67 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 64 61 32 36 38 61 65 31 35 61 65 32 35 65 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Ti6cgDeLu0mxUIg8.3Context: 2da268ae15ae25e1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-01-02 15:12:00 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-01-02 15:12:00 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 35 38 54 6c 6c 57 72 50 45 6b 65 32 6a 76 37 2f 35 44 67 74 58 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 58TllWrPEke2jv7/5DgtXg.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:11 UTC	695	OUT	GET /politics/news/2024/12/22/24684854.shtml HTTP/1.1 Host: www.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 15:12:11 UTC	1016	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=60 Expires: Thu, 02 Jan 2025 15:13:11 GMT Access-Control-Allow-Origin: * Link: <https://static.gazeta.ru/nm2021/css/fonts_2022.css>; rel=preload; as=style Link: <https://static.gazeta.ru/nm2021/css/desktop_styles_collect.v207.css>; rel=preload; as=style Link: <https://static.gazeta.ru/nm2021/css/_ie.css>; rel=preload; as=style Link: <https://static.gazeta.ru/nm2021/js/common.v50.js>; rel=preload; as=script Link: <https://static.gazeta.ru/nm2021/js/noindex/getemoji_v5.js>; rel=preload; as=script Link: <https://id.rambler.ru/rambler-id-helper/auth_events.js>; rel=preload; as=script Link: <https://ssp.rambler.ru/capirs_async.js>; rel=preload; as=script Set-Cookie: uid=URNIAGd2rMt7bl9XIljXAg==; expires=Fri, 02-Jan-26 15:12:11 GMT; domain=.gazeta.ru; path=/ P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
2025-01-02 15:12:11 UTC	15368	IN	Data Raw: 66 62 31 39 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 72 75 22 3e 0a 3c 68 65 61 64 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: fb19<!DOCTYPE html><html lang="ru"><head>
2025-01-02 15:12:11 UTC	16384	IN	Data Raw: 2c 70 75 69 64 32 36 3a 27 27 2c 70 75 69 64 32 37 3a 27 27 2c 70 75 69 64 32 38 3a 27 27 2c 70 75 69 64 32 39 3a 27 27 2c 70 75 69 64 33 30 3a 27 27 2c 70 75 69 64 33 31 3a 27 27 2c 70 75 69 64 33 32 3a 27 27 2c 70 75 69 64 33 33 3a 27 27 2c 70 75 69 64 33 34 3a 27 27 2c 70 75 69 64 33 35 3a 27 27 2c 70 75 69 64 33 36 3a 27 27 2c 70 75 69 64 33 37 3a 27 27 2c 70 75 69 64 33 38 3a 27 27 2c 70 75 69 64 33 39 3a 27 27 2c 70 75 69 64 34 30 3a 27 27 2c 70 75 69 64 34 31 3a 27 27 2c 70 75 69 64 34 32 3a 27 27 2c 70 75 69 64 34 33 3a 27 27 2c 70 75 69 64 34 34 3a 27 27 2c 70 75 69 64 34 35 3a 27 27 2c 70 75 69 64 34 36 3a 27 27 2c 70 75 69 64 34 37 3a 27 27 2c 70 75 69 64 34 38 3a 27 27 2c 70 75 69 64 34 39 3a 27 27 2c 70 75 69 64 35 30 3a 27 27 2c 70 75 69 64 Data Ascii: ,puid26:'',puid27:'',puid28:'',puid29:'',puid30:'',puid31:'',puid32:'',puid33:'',puid34:'',puid35:'',puid36:'',puid37:'',puid38:'',puid39:'',puid40:'',puid41:'',puid42:'',puid43:'',puid44:'',puid45:'',puid46:'',puid47:'',puid48:'',puid49:'',puid50:'',puid
2025-01-02 15:12:11 UTC	16384	IN	Data Raw: 44 61 72 6b 3a 20 74 72 75 65 7d 29 3b 0a 7d 0a 7d 29 0a 7d 0a 69 66 28 65 78 63 68 61 6e 67 65 49 73 56 65 72 74 69 63 61 6c 29 7b 0a 72 6f 6f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 6d 5f 63 6f 6c 27 29 3b 0a 7d 0a 69 66 28 70 61 72 74 6e 65 72 55 72 6c 29 7b 0a 6c 65 74 20 68 65 61 64 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 61 27 29 3b 0a 68 65 61 64 65 72 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 68 65 61 64 65 72 27 3b 0a 68 65 61 64 65 72 2e 68 72 65 66 20 3d 20 70 61 72 74 6e 65 72 55 72 6c 3b 0a 68 65 61 64 65 72 2e 74 61 72 67 65 74 20 3d 20 27 5f 62 6c 61 6e 6b 27 3b 0a 72 6f 6f 74 2e 61 70 70 65 6e 64 28 68 65 61 64 65 72 29 3b 0a 69 66 28 70 61 72 74 6e 65 72 6c 6f 67 6f 29 7b 0a 6c 65 Data Ascii: Dark: true});}})}if(exchangeIsVertical){root.classList.add('m_col');}if(partnerUrl){let header = document.createElement('a');header.className = 'header';header.href = partnerUrl;header.target = '_blank';root.append(header);if(partnerlogo){le
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 65 22 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 6f 70 2d 66 77 7a 31 2e 6d 61 69 6c 2e 72 75 2f 63 6f 75 6e 74 65 72 3f 69 64 3d 38 38 32 31 3b 6a 73 3d 6e 61 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 39 39 39 39 70 78 3b 22 20 61 6c 74 3d 22 54 6f 70 2e 4d 61 69 6c 2e 52 75 22 20 2f 3e 0a 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 2f 2f 52 61 74 69 6e 67 40 4d 61 69 6c 2e 72 75 20 63 6f 75 6e 74 65 72 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 54 6f 70 31 30 30 20 28 4b 72 61 6b 65 6e 29 20 57 69 64 67 65 74 20 2d 2d 3e 0a 3c 64 69 76 20 69 64 3d 22 74 6f 70 Data Ascii: e");</script><noscript><div><img src="https://top-fwz1.mail.ru/counter?id=8821;js=na" style="border:0;position:absolute;left:-9999px;" alt="Top.Mail.Ru" /></div></noscript>... //Rating@Mail.ru counter -->... Top100 (Kraken) Widget --><div id="top
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 65 72 5f 70 73 65 75 64 6f 3a 3a 6d 65 6e 75 3a 3a 68 69 73 74 6f 72 79 2e 73 68 74 6d 6c 22 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 68 69 73 74 6f 72 79 2e 73 68 74 6d 6c 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e d0 a1 d0 bf d0 b5 d1 86 d0 bf d1 80 d0 be d0 b5 d0 ba d1 82 d1 8b 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 5f 6d 65 6e 75 2d 69 74 65 6d 22 20 64 61 74 61 2d 67 61 7a 65 74 61 3d 22 67 61 7a 65 74 61 5f 64 65 73 6b 74 6f 70 3a 3a 63 72 6f 73 73 5f 73 65 63 74 69 6f 6e 3a 3a 68 65 61 64 65 72 3a 3a 6d 65 6e 75 3a 3a 63 69 76 69 6c 69 7a 61 74 69 6f 6e 22 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 73 75 62 6a 65 63 74 73 2f 63 69 76 69 6c 69 7a 61 74 69 6f 6e 2f 22 20 73 74 79 6c 65 3d 22 77 68 69 74 65 2d 73 70 61 63 Data Ascii: er_pseudo::menu::history.shtml"><a href="/history.shtml" tabindex="-1"></a></div><div class="b_menu-item" data-gazeta="gazeta_desktop::cross_section::header::menu::civilization"><a href="/subjects/civilization/" style="white-spac
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 6e 64 59 61 20 3d 20 63 72 65 61 74 65 59 61 4d 65 74 72 69 63 53 65 6e 64 46 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 49 64 2c 20 6c 65 76 65 6c 49 64 29 3b 0a 2f 2f 20 73 65 6e 64 59 61 28 22 73 65 74 75 70 22 29 3b 0a 2f 2f 20 5f 69 64 5f 74 6f 70 6e 65 77 73 5f 63 6f 6e 74 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 63 72 6f 6c 6c 27 2c 20 65 3d 3e 7b 0a 2f 2f 20 69 66 28 69 73 49 6e 56 69 65 77 28 62 6c 6f 63 6b 29 29 7b 0a 2f 2f 20 69 66 28 21 77 61 73 56 69 73 69 62 6c 65 29 7b 0a 2f 2f 20 73 65 6e 64 59 61 28 22 76 69 65 77 22 29 3b 0a 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 76 69 65 77 27 29 3b 0a 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 64 69 72 28 62 6c 6f 63 6b 29 3b 0a 2f 2f 20 77 61 73 56 69 73 69 62 6c 65 20 3d 20 74 72 Data Ascii: ndYa = createYaMetricSendFunction(rootId, levelId);// sendYa("setup");// _id_topnews_content.addEventListener('scroll', e=>{// if(isInView(block)){// if(!wasVisible){// sendYa("view");// console.log('view');// console.dir(block);// wasVisible = tr
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 6e 74 73 3e 30 29 7b 0a 63 6f 6d 6d 65 6e 74 54 6f 75 6e 67 65 4c 69 73 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 0a 63 6f 6d 6d 65 6e 74 54 6f 75 6e 67 65 44 4f 4d 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 6d 5f 73 68 6f 77 5f 6e 6f 74 69 63 65 27 29 3b 0a 63 6f 6d 6d 65 6e 74 54 6f 75 6e 67 65 43 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 63 6f 6d 6d 65 6e 74 73 53 74 61 63 6b 2e 74 6f 74 61 6c 43 6f 6d 6d 65 6e 74 73 3b 0a 66 6f 72 28 6c 65 74 20 61 72 74 69 63 6c 65 20 69 6e 20 63 6f 6d 6d 65 6e 74 73 53 74 61 63 6b 29 7b 0a 69 66 28 61 72 74 69 63 6c 65 53 74 61 63 6b 5b 61 72 74 69 63 6c 65 5d 29 7b 0a 6c 65 74 20 6c 69 73 74 49 74 65 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 61 27 29 3b 0a Data Ascii: nts>0){commentToungeList.innerHTML = '';commentToungeDOM.classList.add('m_show_notice');commentToungeCnt.innerHTML = commentsStack.totalComments;for(let article in commentsStack){if(articleStack[article]){let listItem = document.createElement('a');
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 64 6f 63 6b 69 6e 67 2d 64 69 72 65 63 74 69 6f 6e 3d 22 64 6f 77 6e 22 0a 64 61 74 61 2d 65 6e 66 6f 72 63 65 2d 73 74 61 72 74 2d 77 68 65 6e 2d 70 6c 61 79 69 6e 67 2d 69 6e 2d 70 61 72 65 6e 74 3d 22 74 72 75 65 22 0a 0a 63 6c 61 73 73 3d 22 5f 73 5f 72 61 6d 62 6c 65 72 5f 76 69 64 65 6f 22 0a 3e 3c 2f 64 69 76 3e 0a 3c 73 63 72 69 70 74 3e 0a 7b 0a 69 66 28 21 77 69 6e 64 6f 77 2e 5f 67 5f 72 61 6d 62 6c 65 72 5f 76 69 64 65 6f 5f 6f 66 66 29 7b 0a 6c 65 74 20 72 61 6d 62 6c 65 72 56 69 64 65 6f 49 64 20 3d 20 27 72 65 63 6f 72 64 3a 3a 30 63 33 30 32 64 31 62 2d 61 32 36 39 2d 34 66 61 39 2d 38 63 30 65 2d 30 35 36 34 66 32 36 31 37 64 30 65 27 3b 0a 6c 65 74 20 70 6c 61 79 65 72 44 6f 6d 45 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 Data Ascii: docking-direction="down"data-enforce-start-when-playing-in-parent="true"class="_s_rambler_video"></div><script>{if(!window._g_rambler_video_off){let ramblerVideoId = 'record::0c302d1b-a269-4fa9-8c0e-0564f2617d0e';let playerDomElement = document.q
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 2c 0a 65 78 63 68 61 6e 67 65 4e 61 6d 65 3a 20 65 78 63 68 61 6e 67 65 4e 61 6d 65 2c 0a 61 72 74 69 63 6c 65 43 6f 75 6e 74 65 72 3a 20 61 72 74 69 63 6c 65 43 6f 75 6e 74 65 72 2c 0a 0a 0a 7d 29 3b 0a 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 32 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 20 3c 2f 64 69 76 3e 0a 20 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 67 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 5f 6d 61 69 6e 22 20 69 64 3d 22 5f 69 64 5f 61 6e 63 68 6f 72 22 20 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 5f 70 72 65 6c 6f 61 64 65 72 20 6d 5f 68 69 64 65 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 5f 70 72 65 6c 6f 61 64 65 72 2d 64 6f 74 Data Ascii: ,exchangeName: exchangeName,articleCounter: articleCounter,});}</script><div class="p2"></div></div> </div> <div class="rg"></div><div class="b_main" id="_id_anchor" ><div class="b_preloader m_hide"><span class="b_preloader-dot
2025-01-02 15:12:12 UTC	11280	IN	Data Raw: 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 5f 66 6f 6f 74 65 72 2d 69 6e 66 6f 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 74 65 6d 22 20 69 74 65 6d 69 64 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 7a 65 74 61 2e 72 75 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3e 0a 3c 64 69 76 3e 0a 0a 3c 70 3e 26 23 31 36 39 3b 20 d0 90 d0 9e 20 c2 ab d0 93 d0 b0 d0 b7 d0 b5 d1 82 d0 b0 2e d0 a0 d1 83 c2 bb 20 28 31 39 39 39 2d 32 30 32 35 29 20 26 23 38 32 31 31 3b 20 d0 93 d0 bb d0 b0 d0 b2 d0 bd d1 8b d0 b5 20 d0 bd d0 be d0 b2 d0 be d1 81 d1 82 d0 b8 20 d0 b4 d0 bd d1 8f 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: v><div class="b_footer-info"><div class="item" itemid="https://www.gazeta.ru/#organization" itemscope itemtype="http://schema.org/Organization"><div><p>© . (1999-2025) – </p></d

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	542	OUT	GET /rambler-id-helper/auth_events.js HTTP/1.1 Host: id.rambler.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 15:12:12 UTC	1562	IN	HTTP/1.1 200 OK Server: nginx/1.22.0 Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: application/javascript Content-Length: 36556 Connection: close x-amz-request-id: 4be01dbe-1b3a-41d5-8664-84660f827e66 etag: "a35b3200fa3539448c7829591fe316e1" cache-control: max-age=300, public vary: Accept, Origin last-modified: Sun, 15 Dec 2024 12:39:04 GMT x-varnish: 531833899 531317962 age: 518 via: 1.1 varnish (Varnish/6.2) x-varnish-hostname: 4aaf1f22a2f4990af6501c825af6cdc7 accept-ranges: bytes x-bytes-rcv: 0 x-bytes-snd: 0 x-time: -6 x-upstream-addr: 10.128.18.23:80 x-upstream-connecttime: 0 x-upstream-headertime: 1 x-upstream-responsetime: -7 Content-Security-Policy: default-src 'self'; img-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'none'; font-src 'none'; child-src 'self'; media-src 'none'; object-src 'none'; form-action 'self'; connect-src 'self' https://sentry-id-00.rambler-co.ru https://sentry-saas.rambler-co.ru; report-uri https://csp.rambler-co.ru; X-Content-Security-Policy: default-src 'self'; img-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'none'; font-src 'none'; child-src 'self'; media-src 'none'; object-src 'none'; form-action 'self'; connect-src 'self' https://sentry-id-00.rambler-co.ru https://sentry-saas.rambler-co.ru; report-uri https://csp.rambler-co.ru; P3P: CP="CAO PSA OUR" Set-Cookie: ruid=LgQAAMysdmfeDN0bAfFUhQB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/; Secure; SameSite=None P3P: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
2025-01-02 15:12:12 UTC	14822	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 75 74 68 5f 65 76 65 6e 74 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 38 37 36 3a 28 65 2c 74 2c 73 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: /! For license information please see auth_events.js.LICENSE.txt /(()=>{var e={876:(e,t,s)=>{"use strict";function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==
2025-01-02 15:12:12 UTC	16384	IN	Data Raw: 20 63 65 3d 6f 65 28 29 28 22 69 64 3a 68 65 6c 70 65 72 3a 65 6d 69 74 74 65 72 22 29 3b 63 6c 61 73 73 20 6c 65 20 65 78 74 65 6e 64 73 20 61 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 41 55 54 48 5f 45 56 45 4e 54 53 3d 5b 56 2e 4c 4f 47 49 4e 2c 56 2e 4f 41 55 54 48 4c 4f 47 49 4e 2c 56 2e 4c 4f 47 4f 55 54 5d 2c 74 68 69 73 2e 50 52 4f 50 41 47 41 54 45 44 5f 45 56 45 4e 54 53 3d 5b 2e 2e 2e 74 68 69 73 2e 41 55 54 48 5f 45 56 45 4e 54 53 2c 2e 2e 2e 59 2c 56 2e 52 45 53 50 4f 4e 53 45 5f 51 52 5f 43 4f 44 45 2c 56 2e 53 45 4c 45 43 54 50 52 4f 46 49 4c 45 5d 2c 74 68 69 73 2e 50 52 4f 50 41 47 41 54 45 44 5f 45 56 45 4e 54 53 5f 4f 4e 43 45 3d 5b 56 2e 53 45 4c 45 43 54 50 52 4f 46 49 4c 45 5d 2c 74 68 Data Ascii: ce=oe()("id:helper:emitter");class le extends ae{constructor(t){super(),this.AUTH_EVENTS=[V.LOGIN,V.OAUTHLOGIN,V.LOGOUT],this.PROPAGATED_EVENTS=[...this.AUTH_EVENTS,...Y,V.RESPONSE_QR_CODE,V.SELECTPROFILE],this.PROPAGATED_EVENTS_ONCE=[V.SELECTPROFILE],th
2025-01-02 15:12:12 UTC	5350	IN	Data Raw: 77 20 75 28 7b 6d 65 73 73 61 67 65 3a 73 2c 63 6f 64 65 3a 74 2c 64 65 74 61 69 6c 73 3a 69 7d 29 3a 6e 65 77 20 45 72 72 6f 72 28 73 29 7d 29 28 29 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 28 6e 75 6c 6c 2c 74 29 3a 74 3f 65 28 7b 72 63 63 69 64 3a 74 7d 29 3a 7a 28 7b 7d 2c 28 28 74 2c 73 29 3d 3e 7b 74 26 26 74 68 69 73 2e 65 6d 69 74 28 56 2e 45 52 52 4f 52 2c 74 29 2c 66 28 74 3f 3f 73 3f 2e 72 63 63 69 64 29 2c 65 28 73 3f 7b 72 63 63 69 64 3a 73 2e 72 63 63 69 64 7d 3a 6e 75 6c 6c 2c 74 29 7d 29 29 7d 63 72 65 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 57 69 6e 64 6f 77 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 68 61 73 54 72 61 63 6b 69 6e 67 50 72 65 76 65 6e 74 69 6f 6e 7c 7c 4f 7c 7c 52 3f 6e 75 6c 6c 3a 77 69 6e 64 6f Data Ascii: w u({message:s,code:t,details:i}):new Error(s)})();t instanceof Error?e(null,t):t?e({rccid:t}):z({},((t,s)=>{t&&this.emit(V.ERROR,t),f(t??s?.rccid),e(s?{rccid:s.rccid}:null,t)}))}createPropagationWindow(){return!this.hasTrackingPrevention\|\|O\|\|R?null:windo

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	589	OUT	GET /nm2021/css/fonts_2022.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:13 UTC	486	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 21868 Connection: close Last-Modified: Thu, 03 Oct 2024 09:28:45 GMT Vary: Accept-Encoding ETag: "66fe63cd-556c" X-Balancer: 1node0301.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15898	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 6f 72 61 27 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 73 72 63 3a 20 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 67 61 7a 65 74 61 2e 72 75 2f 2f 6e 6d 32 30 32 31 2f 66 6f 6e 74 73 2f 6e 65 77 2f 6c 6f 72 61 5f 69 74 61 6c 69 63 35 30 30 5f 63 79 72 5f 65 78 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: /* cyrillic-ext */ @font-face { font-family: 'Lora'; font-style: italic; font-weight: 500; font-display: block; src: url(https://static.gazeta.ru//nm2021/fonts/new/lora_italic500_cyr_ext.woff2) format('woff2'),
2025-01-02 15:12:13 UTC	5970	IN	Data Raw: 2e 72 75 2f 2f 6e 6d 32 30 32 31 2f 66 6f 6e 74 73 2f 6e 65 77 2f 72 6f 62 6f 74 6f 5f 37 30 30 5f 67 72 65 65 6b 5f 65 78 74 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 0a 20 20 20 20 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f Data Ascii: .ru//nm2021/fonts/new/roboto_700_greek_ext.woff) format('woff'); unicode-range: U+1F00-1FFF; } /* greek */ @font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; fo

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	606	OUT	GET /nm2021/css/desktop_styles_collect.v207.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:13 UTC	488	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 230174 Connection: close Last-Modified: Mon, 09 Dec 2024 07:43:40 GMT Vary: Accept-Encoding ETag: "67569fac-3831e" X-Balancer: 1node0300.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15896	IN	Data Raw: 0a 0a 0a 0a 20 20 20 20 0a 20 20 20 20 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 68 74 6d 6c 20 2a 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 Data Ascii: @charset "UTF-8";html * { padding: 0; margin: 0; outline: none; border: 0; background: transparent; font-size: inherit; line-height: inherit; box-sizing: border-box; text-decoration: none; -webkit-font-smoothing: antialia
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 6c 65 66 74 3a 20 33 30 70 78 3b 0a 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 7d 0a 20 20 2e 62 5f 65 61 72 2e 6d 5f 6f 75 74 6c 69 6e 65 33 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 41 45 41 45 41 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 20 20 2e 62 5f 65 61 72 2e 6d 5f 6f 75 74 6c Data Ascii: sition: absolute; left: 30px; bottom: 20px; } .b_ear.m_outline3 { position: relative; border: 1px solid #EAEAEA; box-sizing: border-box; display: flex; align-items: center; justify-content: center; } .b_ear.m_outl
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 61 67 65 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 32 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 2e 77 5f 63 6f 6c 31 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 2c 20 2e 77 5f 63 6f 6c 32 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 2c 20 2e 77 5f 63 6f 6c 5f 77 69 64 65 32 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 61 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b Data Ascii: age, .w_col_wide .b_ear-image, .w_col_wide2 .b_ear-image { display: flex; align-items: center; justify-content: center; } .w_col1 .b_ear-image a, .w_col2 .b_ear-image a, .w_col_wide .b_ear-image a, .w_col_wide2 .b_ear-image a { display: block;
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 72 74 69 63 6c 65 20 2e 62 5f 65 61 72 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 72 74 69 63 6c 65 20 2e 62 5f 65 61 72 2d 74 65 78 74 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 63 61 Data Ascii: w: row-reverse; align-items: flex-start; } .b_article-incut.m_article .b_ear-image { width: 110px; flex-shrink: 0; margin-left: 40px; } .b_article-incut.m_article .b_ear-textblock { width: ca
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 74 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 75 64 69 6f 20 2e 62 5f 61 75 64 69 6f 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 37 30 30 20 31 36 70 78 2f 31 2e 35 20 22 4c 6f 72 61 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 39 32 39 32 39 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 69 6e 63 75 74 2e 6d 5f 61 75 64 69 6f 20 2e 62 5f 61 75 64 69 6f 2d 69 6e 66 6f 20 2e 73 72 63 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: ticle-incut.m_audio .b_audio-info { position: relative; font: 700 16px/1.5 "Lora", sans-serif; color: #292929; text-align: center; margin-bottom: 7px; } .b_article-incut.m_audio .b_audio-info .src {
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 20 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 73 63 6f 72 65 62 6f 61 72 64 2d 74 65 61 6d 73 20 2e 69 74 65 6d 2e 6d 5f 73 63 6f 72 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 62 6f 6c 64 20 34 34 70 78 2f 34 34 70 78 20 22 4c 6f 72 61 22 2c 20 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 42 31 31 31 31 36 3b 0a 20 20 20 20 20 20 20 20 20 20 77 Data Ascii: flex-flow: column; align-items: center; justify-content: flex-start; } .b_article-scoreboard-teams .item.m_score { padding-top: 20px; font: bold 44px/44px "Lora", serif; color: #B11116; w
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 3b 20 7d 0a 20 20 2e 62 5f 61 72 74 69 63 6c 65 20 69 66 72 61 6d 65 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 20 20 2e 62 5f 61 72 74 69 63 6c 65 2d 65 72 69 64 74 6f 6b 65 6e 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 61 65 61 65 61 3b 0a 20 20 20 20 66 6f 6e 74 3a 20 34 30 30 20 31 33 70 78 2f 31 2e 32 35 20 52 6f 62 6f 74 6f 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 66 37 66 37 66 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 20 7d 0a 0a 2e 5f 73 5f 61 64 64 65 64 5f 61 72 74 69 63 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 Data Ascii: n: all 0.3s ease; } .b_article iframe { max-width: 100%; } .b_article-eridtoken { padding: 5px 10px; background: #eaeaea; font: 400 13px/1.25 Roboto; color: #7f7f7f; margin-bottom: 10px; }._s_added_article { position: relat
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 77 2d 77 72 61 70 70 65 72 20 2e 69 74 65 6d 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 5f 67 61 6c 6c 65 72 79 20 2e 70 72 65 76 69 65 77 2d 77 72 61 70 70 65 72 20 2e 69 74 65 6d 3a 68 6f 76 65 72 20 2e 69 74 65 6d 2d 69 6d 61 67 65 20 Data Ascii: w-wrapper .item-image { position: relative; z-index: 1; display: inline-flex; height: 100%; opacity: 0.6; transition: all 0.3s ease; } .i_gallery .preview-wrapper .item:hover .item-image
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 20 2a 2f 20 7d 0a 20 20 20 20 2e 69 5f 67 61 6c 6c 65 72 79 5f 76 32 34 20 2e 6d 61 69 6e 61 72 65 61 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d Data Ascii: splay: none; } } */ } .i_gallery_v24 .mainarea-wrapper { position: absolute; top: 0; left: 0; bottom: 0; right: 0; overflow: hidden; display: flex; flex-flow: row nowrap; align-
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 65 68 61 76 69 6f 72 3a 20 73 6d 6f 6f 74 68 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 20 7d 0a 20 20 20 20 20 20 2e 69 5f 67 61 6c 6c 65 72 79 5f 76 32 34 20 2e 70 72 65 76 69 65 77 2d 77 72 61 70 70 65 72 20 2e 69 74 65 6d 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c Data Ascii: ehavior: smooth; display: flex; flex-flow: row nowrap; align-items: flex-start; justify-content: flex-start; } .i_gallery_v24 .preview-wrapper .item { position: relative; z-index: 2; display: inline-fl

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Windows Analysis Report
https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	582	OUT	GET /nm2021/css/_ie.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:12 UTC	483	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 541 Connection: close Last-Modified: Thu, 01 Jul 2021 08:56:59 GMT Vary: Accept-Encoding ETag: "60dd835b-21d" X-Balancer: 1node0301.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:12 UTC	541	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 30 5c 30 29 20 7b 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 20 7b 0a 09 09 77 69 64 74 68 3a 20 31 33 32 32 70 78 3b 09 09 0a 09 7d 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 09 77 68 69 72 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 09 7d 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 2e 69 74 65 6d 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 09 09 0a 09 7d 0a 09 2e 62 5f 74 6f 70 6e 65 77 73 2d 63 6f 6e 74 65 6e 74 20 2e Data Ascii: @media screen and (min-width:0\0) {.b_topnews {width: 1322px;}.b_topnews-content {display: block;width: 100%;whire-space: nowrap;}.b_topnews-content .item {display: inline-block;vertical-align: top;}.b_topnews-content .

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	592	OUT	GET /nm2021/css/fonts_2022_v2.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:13 UTC	485	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 21703 Connection: close Last-Modified: Thu, 26 Dec 2024 18:57:33 GMT Vary: Accept-Encoding ETag: "676da71d-54c7" X-Balancer: 1node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15899	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 6f 72 61 27 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 73 72 63 3a 20 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 67 61 7a 65 74 61 2e 72 75 2f 2f 6e 6d 32 30 32 31 2f 66 6f 6e 74 73 2f 6e 65 77 2f 6c 6f 72 61 5f 69 74 61 6c 69 63 35 30 30 5f 63 79 72 5f 65 78 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: /* cyrillic-ext */ @font-face { font-family: 'Lora'; font-style: italic; font-weight: 500; font-display: block; src: url(https://static.gazeta.ru//nm2021/fonts/new/lora_italic500_cyr_ext.woff2) format('woff2'),
2025-01-02 15:12:13 UTC	5804	IN	Data Raw: 20 20 20 20 20 20 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 0a 20 20 20 20 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 67 61 7a 65 74 61 2e 72 75 2f 2f 6e 6d Data Ascii: unicode-range: U+1F00-1FFF; } /* greek */ @font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; font-display: block; src: url(https://static.gazeta.ru//nm

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	526	OUT	GET /capirs_async.js HTTP/1.1 Host: ssp.rambler.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 15:12:13 UTC	473	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: application/x-javascript Content-Length: 418225 Last-Modified: Fri, 29 Nov 2024 08:11:25 GMT Connection: close ETag: "6749772d-661b1" X-Passed: 1bal2 Expires: Thu, 02 Jan 2025 15:13:12 GMT Cache-Control: max-age=60 Strict-Transport-Security: max-age=0 p3p: policyref="/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA" Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15911	IN	Data Raw: 76 61 72 20 53 53 50 6a 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 33 33 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 68 69 73 2e 72 65 67 56 61 6c 69 64 4b 65 79 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2d 5d 7b 30 2c 7d 29 22 2c 22 69 22 29 2c 74 68 69 73 2e 68 61 73 68 3d 65 7c 7c 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 Data Ascii: var SSPjs;!function(){var e,t,n={3324:function(e,t){"use strict";var n=function(){function e(e){this.regValidKey=new RegExp("([a-zA-Z0-9_-]{0,})","i"),this.hash=e\|\|location.hostname}return e.prototype.isSupported=function(){return"object"==typeof document
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 7d 2e 69 6e 76 69 65 77 2d 74 69 6d 65 72 73 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 75 6d 6e 2e 69 73 2d 64 69 72 65 63 74 69 6f 6e 2d 69 6e 64 69 63 61 74 6f 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 7d 2e 69 6e 76 69 65 77 2d 74 69 6d 65 72 73 2d 77 72 61 70 70 65 72 20 2e 63 6f 6c 75 6d 6e 2e 69 73 2d 64 69 72 65 63 74 69 6f 6e 2d 69 6e 64 69 63 61 74 6f 72 3a 3a Data Ascii: }.inview-timers-wrapper .column.is-direction-indicator{-webkit-transform-origin:50% 50%;-moz-transform-origin:50% 50%;-ms-transform-origin:50% 50%;-o-transform-origin:50% 50%;transform-origin:50% 50%}.inview-timers-wrapper .column.is-direction-indicator::
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 26 26 22 70 75 73 68 53 74 61 74 65 22 69 6e 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 7d 69 66 28 72 28 29 29 7b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2c 69 3d 6f 2e 70 75 73 68 53 74 61 74 65 3b 6f 2e 70 75 73 68 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 69 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 28 77 69 6e 64 6f 77 2c 22 70 75 73 68 73 74 61 74 65 22 2c 65 29 2c 74 28 77 69 6e 64 6f 77 2c 22 63 68 61 6e 67 65 73 74 61 74 65 22 2c 65 29 2c 6e 7d 3b 76 61 72 20 61 3d 6f 2e 72 65 70 6c 61 63 65 53 74 61 74 65 3b 6f 2e 72 65 70 6c 61 63 65 53 74 61 Data Ascii: fined"!=typeof window&&window.history&&"pushState"in window.history}if(r()){var o=window.history,i=o.pushState;o.pushState=function(e){var n=i.apply(o,arguments);return t(window,"pushstate",e),t(window,"changestate",e),n};var a=o.replaceState;o.replaceSta
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 65 29 3f 22 5b 22 2b 51 28 69 65 2c 4e 29 2b 22 5d 22 3a 22 5b 20 22 2b 4f 2e 63 61 6c 6c 28 69 65 2c 22 2c 20 22 29 2b 22 20 5d 22 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 21 3d 3d 7a 28 65 29 7c 7c 41 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 41 20 69 6e 20 65 29 7d 28 74 29 29 7b 76 61 72 20 61 65 3d 5a 28 74 2c 57 29 3b 72 65 74 75 72 6e 22 63 61 75 73 65 22 69 6e 20 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 21 28 22 63 61 75 73 65 22 69 6e 20 74 29 7c 7c 52 2e 63 61 6c 6c 28 74 2c 22 63 61 75 73 65 22 29 3f 30 3d 3d 3d 61 65 2e 6c 65 6e 67 74 68 3f 22 5b 22 2b 53 74 72 69 6e 67 28 74 29 2b 22 5d 22 3a 22 7b 20 5b 22 2b 53 74 72 69 6e 67 28 Data Ascii: e)?"["+Q(ie,N)+"]":"[ "+O.call(ie,", ")+" ]"}if(function(e){return!("[object Error]"!==z(e)\|\|A&&"object"==typeof e&&A in e)}(t)){var ae=Z(t,W);return"cause"in Error.prototype\|\|!("cause"in t)\|\|R.call(t,"cause")?0===ae.length?"["+String(t)+"]":"{ ["+String(
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 7b 76 61 72 20 61 3d 74 5b 69 5d 3b 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 74 5b 69 5d 3d 65 28 61 2c 6e 2c 72 29 3a 74 2e 70 75 73 68 28 6e 29 7d 65 6c 73 65 20 74 5b 69 5d 3d 6e 7d 29 29 2c 74 29 3a 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 61 3d 6e 5b 69 5d 3b 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 74 2c 69 29 3f 74 5b 69 5d 3d 65 28 74 5b 69 5d 2c 61 2c 72 29 3a 74 5b 69 5d 3d 61 2c 74 7d 29 2c 61 29 7d 7d 7d 2c 34 31 37 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 52 61 76 65 6e 43 6f 6e 66 69 67 45 72 Data Ascii: {var a=t[i];a&&"object"==typeof a&&n&&"object"==typeof n?t[i]=e(a,n,r):t.push(n)}else t[i]=n})),t):Object.keys(n).reduce((function(t,i){var a=n[i];return o.call(t,i)?t[i]=e(t[i],a,r):t[i]=a,t}),a)}}},4171:function(e){function t(e){this.name="RavenConfigEr
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 20 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 2e 63 61 70 74 75 72 65 42 72 65 61 64 63 72 75 6d 62 28 7b 6d 65 73 73 61 67 65 3a 74 2c 6c 65 76 65 6c 3a 6e 2e 6c 65 76 65 6c 2c 63 61 74 65 67 6f 72 79 3a 22 63 6f 6e 73 6f 6c 65 22 7d 29 7d 3b 62 28 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 46 28 63 6f 6e 73 6f 6c 65 2c 74 2c 75 29 7d 29 29 7d 7d 2c 5f 72 65 73 74 6f 72 65 42 75 69 6c 74 49 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3b 74 68 69 73 2e 5f 77 72 61 70 70 65 64 42 75 69 6c 74 49 6e 73 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 74 3d 28 65 3d 74 68 69 73 2e 5f 77 72 61 70 70 65 64 42 75 69 6c 74 Data Ascii: u=function(t,n){e.captureBreadcrumb({message:t,level:n.level,category:"console"})};b(["debug","info","warn","error","log"],(function(e,t){F(console,t,u)}))}},_restoreBuiltIns:function(){for(var e;this._wrappedBuiltIns.length;){var t=(e=this._wrappedBuilt
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 6e 28 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 69 2e 6f 6e 65 72 72 6f 72 3d 65 2c 74 3d 21 31 2c 65 3d 76 6f 69 64 20 30 7d 28 29 2c 6e 3d 5b 5d 7d 2c 67 7d 28 29 2c 6f 2e 63 6f 6d 70 75 74 65 53 74 61 63 6b 54 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 2e 73 74 61 63 6b 26 26 65 2e 73 74 61 63 6b 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 6f 3d 2f 5e 5c 73 2a 61 74 20 28 3f 3a 28 2e 2a 3f 29 20 3f 5c 28 29 3f 28 28 3f 3a 66 69 6c 65 7c 68 74 74 70 73 3f 7c 62 6c 6f 62 7c 63 68 72 6f 6d 65 2d 65 78 74 65 6e 73 69 6f 6e 7c 6e 61 74 69 76 65 7c 65 76 61 6c 7c 77 65 62 70 61 63 6b 7c 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 7c 5b 61 2d 7a 5d 3a 7c 5c 2f 29 2e 2a 3f 29 28 Data Ascii: n(){if(!t)return;i.onerror=e,t=!1,e=void 0}(),n=[]},g}(),o.computeStackTrace=function(){function e(e){if(void 0!==e.stack&&e.stack){for(var t,n,r,o=/^\sat (?:(.?) ?\()?((?:file\|https?\|blob\|chrome-extension\|native\|eval\|webpack\|<anonymous>\|[a-z]:\|\/).*?)(
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 28 22 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 22 2c 21 30 29 2c 64 3d 6f 28 22 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 22 2c 21 30 29 2c 68 3d 6f 28 22 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 22 2c 21 30 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 65 3b 6e 75 6c 6c 21 3d 3d 28 6e 3d 72 2e 6e 65 78 74 29 3b 72 3d 6e 29 69 66 28 6e 2e 6b 65 79 3d 3d 3d 74 29 72 65 74 75 72 6e 20 72 2e 6e 65 78 74 3d 6e 2e 6e 65 78 74 2c 6e 2e 6e 65 78 74 3d 65 2e 6e 65 78 74 2c 65 2e 6e 65 78 74 3d 6e 2c 6e 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 3d 7b 61 73 73 65 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 72 2e 68 61 73 Data Ascii: ("Map.prototype.get",!0),d=o("Map.prototype.set",!0),h=o("Map.prototype.has",!0),v=function(e,t){for(var n,r=e;null!==(n=r.next);r=n)if(n.key===t)return r.next=n.next,n.next=e.next,e.next=n,n};e.exports=function(){var e,t,n,r={assert:function(e){if(!r.has
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 73 42 72 61 76 65 3d 3d 61 26 26 28 74 5b 66 5d 3d 22 42 72 61 76 65 22 29 2c 74 7d 2c 74 68 69 73 2e 67 65 74 43 50 55 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 5b 67 5d 3d 69 2c 4a 2e 63 61 6c 6c 28 65 2c 72 2c 77 2e 63 70 75 29 2c 65 7d 2c 74 68 69 73 2e 67 65 74 44 65 76 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 5b 68 5d 3d 69 2c 65 5b 70 5d 3d 69 2c 65 5b 64 5d 3d 69 2c 4a 2e 63 61 6c 6c 28 65 2c 72 2c 77 2e 64 65 76 69 63 65 29 2c 5f 26 26 21 65 5b 64 5d 26 26 6d 26 26 6d 2e 6d 6f 62 69 6c 65 26 26 28 65 5b 64 5d 3d 79 29 2c 5f 26 26 22 4d 61 63 69 6e 74 6f 73 68 22 3d 3d 65 5b 70 5d 26 26 6e 26 26 74 79 70 65 6f 66 20 6e 2e 73 74 61 6e 64 61 6c 6f 6e Data Ascii: sBrave==a&&(t[f]="Brave"),t},this.getCPU=function(){var e={};return e[g]=i,J.call(e,r,w.cpu),e},this.getDevice=function(){var e={};return e[h]=i,e[p]=i,e[d]=i,J.call(e,r,w.device),_&&!e[d]&&m&&m.mobile&&(e[d]=y),_&&"Macintosh"==e[p]&&n&&typeof n.standalon
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 25 32 30 31 2e 30 36 32 25 32 30 30 6c 31 34 2e 33 36 36 2d 31 34 2e 33 34 61 2e 37 36 32 2e 37 36 32 25 32 30 30 25 32 30 30 25 32 30 30 25 32 30 30 2d 31 2e 30 37 31 6c 2d 32 2e 31 32 35 2d 32 2e 31 34 7a 25 32 32 25 32 46 25 33 45 25 33 43 25 32 46 73 76 67 25 33 45 25 33 43 25 32 46 64 69 76 25 33 45 25 33 43 64 69 76 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 63 6f 6c 75 6d 6e 25 32 30 69 73 2d 72 65 6c 6f 61 64 65 64 2d 69 6e 64 69 63 61 74 6f 72 25 32 32 25 33 45 25 33 43 73 76 67 25 32 30 78 6d 6c 6e 73 25 33 44 25 32 32 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 25 32 32 25 32 30 77 69 64 74 68 25 33 44 25 32 32 31 36 25 32 32 25 32 30 68 65 69 67 68 74 25 33 44 25 32 32 31 36 25 32 Data Ascii: %201.062%200l14.366-14.34a.762.762%200%200%200%200-1.071l-2.125-2.14z%22%2F%3E%3C%2Fsvg%3E%3C%2Fdiv%3E%3Cdiv%20class%3D%22column%20is-reloaded-indicator%22%3E%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20width%3D%2216%22%20height%3D%2216%2

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	596	OUT	GET /nm2021/css/_print_desktop_v2.css HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:12 UTC	483	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 3457 Connection: close Last-Modified: Thu, 03 Oct 2024 09:28:47 GMT Vary: Accept-Encoding ETag: "66fe63cf-d81" X-Balancer: 1node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:12 UTC	3457	IN	Data Raw: 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 40 70 61 67 65 7b 73 69 7a 65 3a 41 34 20 70 6f 72 74 72 61 69 74 3b 6d 61 72 67 69 6e 3a 31 35 6d 6d 20 30 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 6d 6d 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 62 6f 64 79 20 64 69 76 5b 63 6c 61 73 73 5e 3d 22 5f 73 5f 62 61 6e 6e 65 72 22 5d 2c 62 6f 64 79 20 64 69 76 5b 64 61 74 61 2d 61 64 76 2d 6c 6f 61 64 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 62 6f 64 79 2e 6d 5f 66 61 6d 69 6c 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 2e 6d 5f 66 61 6d 69 6c 79 20 2e 62 5f 72 75 62 72 69 63 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 62 6f 64 79 2e 6d 5f 66 61 6d 69 6c 79 20 23 5f Data Ascii: @media print{@page{size:A4 portrait;margin:15mm 0}html{font-size:2.5mm}body{background:#fff}body div[class^="_s_banner"],body div[data-adv-load]{display:none}body.m_family{background:#fff !important}body.m_family .b_rubricbar{display:none}body.m_family #_

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:12 UTC	573	OUT	GET /nm2021/js/common.v50.js HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:13 UTC	502	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:12 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 101497 Connection: close Last-Modified: Mon, 21 Oct 2024 16:06:05 GMT Vary: Accept-Encoding ETag: "67167bed-18c79" X-Balancer: 1node0300.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:12 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	15882	IN	Data Raw: 0a 0a 0a 20 20 20 20 2f 2f 20 67 65 74 43 6f 6f 6b 69 65 28 29 2c 20 73 65 74 43 6f 6f 6b 69 65 28 29 2c 20 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 29 0a 0a 76 61 72 20 67 5f 47 61 7a 65 74 61 4a 53 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 3b 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 43 6f 6e 73 74 72 75 63 74 5f 73 69 6e 67 6c 65 74 6f 6e 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 73 74 61 6e 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 73 74 61 6e 63 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 20 26 26 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 3d 3d 20 43 6f 6e Data Ascii: // getCookie(), setCookie(), deleteCookie()var g_GazetaJS = (function () { var instance; return function Construct_singletone() { if (instance) { return instance; } if (this && this.constructor === Con
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 45 6c 20 20 20 20 20 20 20 20 20 20 20 3d 20 70 72 6f 70 73 2e 64 6f 6d 45 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 66 69 6e 69 74 65 20 20 20 20 20 20 20 20 3d 20 70 72 6f 70 73 2e 69 6e 66 69 6e 69 74 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 65 76 69 65 77 43 6f 6e 74 72 6f 6c 20 20 3d 20 70 72 6f 70 73 2e 70 72 65 76 69 65 77 43 6f 6e 74 72 6f 6c 3b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 6c 79 20 66 6f 72 20 69 6e 63 75 74 73 20 67 61 7a 65 74 61 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6d 69 74 20 20 20 20 20 20 20 20 20 20 20 3d 20 70 72 6f 70 73 2e 6c 69 6d 69 74 20 20 20 20 20 20 20 7c 7c 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 61 66 65 51 6e 74 20 Data Ascii: { var domEl = props.domEl; var infinite = props.infinite; var previewControl = props.previewControl; // only for incuts gazeta var limit = props.limit \|\| null; var safeQnt
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 6e 46 72 61 6d 65 28 61 6e 69 6d 61 74 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 49 74 65 6d 20 20 20 20 20 20 20 20 20 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 43 6f 72 6e 20 20 20 20 20 20 20 20 20 20 20 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 43 6f 72 6e 20 20 20 20 20 20 20 20 20 20 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: nFrame(animate); } else { activeItem = null; leftCorn = 0; rightCorn = 0;
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 6c 65 72 79 28 29 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 61 6c 6c 65 72 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 6f 75 63 68 73 74 61 72 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 69 6e 63 68 46 6c 61 67 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 72 74 50 6f 69 6e 74 58 20 3d 20 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 72 74 50 6f 69 6e 74 59 20 3d 20 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: lery(){ gallery.addEventListener('touchstart', function(e){ pinchFlag = false; startPointX = e.touches[0].clientX; startPointY = e.touches[0].clientY;
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 20 27 73 5f 73 68 6f 77 5f 64 69 67 65 73 74 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 21 69 6e 66 69 6e 69 74 65 20 26 26 20 64 61 74 61 49 74 65 6d 3d 3d 30 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 68 61 6e 67 65 49 74 65 6d 73 28 64 61 74 61 49 74 65 6d 2d 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 's_show_digest'); if(!infinite && dataItem==0){ return false; } else { changeItems(dataItem-1); } } })
2025-01-02 15:12:13 UTC	16384	IN	Data Raw: 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 20 7d 2c 20 35 30 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 68 61 6e 67 65 49 74 65 6d 28 63 75 72 49 74 65 6d 2c 20 27 69 6e 73 74 61 6e 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 7d 0a 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2f 20 61 63 74 69 6f 6e 20 70 61 72 74 0a 0a 20 20 20 20 20 20 20 20 69 66 28 21 6c 69 6d 69 74 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 6d 61 74 63 68 28 2f 70 68 6f 74 6f 5f 6e 75 6d 3d 28 5c 64 2b 29 2f 29 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 72 65 71 75 69 72 65 64 50 68 6f 74 6f 20 3d 20 2b 6c Data Ascii: t'); // }, 500) // } else { changeItem(curItem, 'instant'); // } } // action part if(!limit && location.search.match(/photo_num=(\d+)/)){ let requiredPhoto = +l
2025-01-02 15:12:13 UTC	3695	IN	Data Raw: 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 50 6f 73 69 74 69 6f 6e 28 70 65 72 63 65 6e 74 50 6f 73 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 54 69 6d 65 50 4c 61 79 69 6e 67 20 3d 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 73 65 74 54 69 6d 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 54 69 6d 65 50 4c 61 79 69 6e 67 20 3d 20 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 73 65 74 54 69 6d 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 Data Ascii: setTimePosition(percentPos, true); reqTimePLaying = window.requestAnimationFrame(setTiming); } reqTimePLaying = window.requestAnimationFrame(setTiming); })

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	582	OUT	GET /nm2021/js/noindex/getemoji_v5.js HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:13 UTC	498	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:13 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3070 Connection: close Last-Modified: Thu, 03 Oct 2024 09:28:41 GMT Vary: Accept-Encoding ETag: "66fe63c9-bfe" X-Balancer: 1node0301.lb.rambler.tech X-Upstream: 10.144.27.47:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:13 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:13 UTC	3070	IN	Data Raw: 0a 0a 77 69 6e 64 6f 77 2e 67 5f 67 65 74 45 6d 6f 6a 69 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 20 75 72 6c 29 7b 0a 20 20 20 20 0a 20 20 20 20 63 6f 6e 73 74 20 65 6d 6f 6a 69 42 6f 78 20 3d 20 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 5f 65 6d 6f 6a 69 2d 62 6f 78 27 29 20 7c 7c 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 69 66 28 65 6d 6f 6a 69 42 6f 78 20 26 26 20 75 72 6c 29 7b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 6c 65 74 20 65 6d 6f 6a 69 5f 61 72 72 20 3d 20 5b 5d 3b 0a 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 4a 73 6f 6e 54 6f 45 6d 6f 41 72 72 28 6a 73 6f 6e 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6d 6f 6a 69 5f 61 72 72 20 3d 20 6a 73 6f 6e 2e 6c 61 62 65 6c 73 2e 73 Data Ascii: window.g_getEmoji = function(root, url){ const emojiBox = root.querySelector('.b_emoji-box') \|\| null; if(emojiBox && url){ let emoji_arr = []; function sortJsonToEmoArr(json){ emoji_arr = json.labels.s

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	580	OUT	GET /nm2021/js/others_scripts_v6.js HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:14 UTC	497	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:13 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3618 Connection: close Last-Modified: Thu, 17 Oct 2024 08:18:13 GMT Vary: Accept-Encoding ETag: "6710c845-e22" X-Balancer: 1node0301.lb.rambler.tech X-Upstream: 10.16.28.18:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:13 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:14 UTC	3618	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 67 5f 73 68 6f 77 41 64 76 4f 77 6e 65 72 49 6e 45 61 72 20 28 61 64 76 45 61 72 29 7b 0a 0a 20 20 20 20 69 66 28 61 64 76 45 61 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7b 0a 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 64 76 4d 61 72 6b 65 72 20 20 20 3d 20 61 64 76 45 61 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 5f 65 61 72 2d 61 64 76 6d 61 72 6b 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 64 76 43 6c 6f 73 65 42 74 6e 20 20 3d 20 61 64 76 4d 61 72 6b 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 5f 65 61 72 2d 61 64 76 6d 61 72 6b 65 72 2d 63 6c 6f 73 65 62 74 6e 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 28 61 64 76 4d 61 72 6b 65 72 20 26 26 20 Data Ascii: function g_showAdvOwnerInEar (advEar){ if(advEar instanceof HTMLElement){ let advMarker = advEar.querySelector('.b_ear-advmarker'); let advCloseBtn = advMarker.querySelector('.b_ear-advmarker-closebtn'); if(advMarker &&

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	634	OUT	GET /nm2021/img/logo_2021.svg HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:14 UTC	496	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:13 GMT Content-Type: image/svg+xml; charset=windows-1251 Content-Length: 3871 Connection: close Last-Modified: Mon, 19 Apr 2021 09:20:53 GMT Vary: Accept-Encoding ETag: "607d4b75-f1f" X-Balancer: 1node0301.lb.rambler.tech X-Upstream: 10.144.26.17:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:13 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:14 UTC	3871	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 34 20 34 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 30 35 33 32 20 31 33 2e 31 34 32 56 33 2e 39 32 39 30 37 48 31 33 2e 34 30 31 37 56 33 37 2e 33 32 35 38 48 31 39 2e 39 39 38 33 56 34 30 2e 33 30 36 35 48 30 56 33 37 2e 33 32 35 38 48 36 2e 35 39 36 36 37 56 33 2e 39 32 39 30 37 48 30 56 30 2e 39 34 38 34 32 35 48 33 32 2e 39 31 33 39 56 31 33 2e 31 34 32 48 32 38 2e 30 35 33 32 5a 22 20 66 69 6c 6c 3d 22 23 32 39 32 39 32 39 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 35 2e Data Ascii: <svg width="334" height="42" viewBox="0 0 334 42" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M28.0532 13.142V3.92907H13.4017V37.3258H19.9983V40.3065H0V37.3258H6.59667V3.92907H0V0.948425H32.9139V13.142H28.0532Z" fill="#292929"/><path d="M75.

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:13 UTC	636	OUT	GET /nm2021/img/icon_search.svg HTTP/1.1 Host: static.gazeta.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.gazeta.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:14 UTC	494	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 15:12:14 GMT Content-Type: image/svg+xml; charset=windows-1251 Content-Length: 255 Connection: close Last-Modified: Mon, 19 Apr 2021 09:20:53 GMT Vary: Accept-Encoding ETag: "607d4b75-ff" X-Balancer: 1node0300.lb.rambler.tech X-Upstream: 10.144.26.17:80 X-Upstream-Status: 200 Expires: Fri, 02 Jan 2026 15:12:14 GMT Cache-Control: max-age=31536000 Cache-Control: public Access-Control-Allow-Origin: * Accept-Ranges: bytes
2025-01-02 15:12:14 UTC	255	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 20 31 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 63 69 72 63 6c 65 20 72 3d 22 35 2e 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 2d 31 20 30 20 30 20 31 20 36 2e 35 20 36 2e 35 29 22 20 73 74 72 6f 6b 65 3d 22 23 32 39 32 39 32 39 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 32 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 31 32 4c 31 36 20 31 36 22 20 73 74 72 6f 6b 65 3d 22 23 32 39 32 39 32 39 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="17" height="17" viewBox="0 0 17 17" fill="none" xmlns="http://www.w3.org/2000/svg"><circle r="5.5" transform="matrix(-1 0 0 1 6.5 6.5)" stroke="#292929" stroke-width="1.2"/><path d="M12 12L16 16" stroke="#292929" stroke-width="1.2"/></svg>

Timestamp	Bytes transferred	Direction	Data
2025-01-02 15:12:14 UTC	766	OUT	POST /atlas/metrics/ HTTP/1.1 Host: www.gazeta.ru Connection: keep-alive Content-Length: 2098 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain X-Media-Atlas-Auth: basic cm9vdDp3b294M1NoaWU5b2dvaERlaTF0YWhmZXNoaXhhaGZhaGNoZVNvaHNp sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.gazeta.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.gazeta.ru/politics/news/2024/12/22/24684854.shtml Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=URNIAGd2rMt7bl9XIljXAg==
2025-01-02 15:12:14 UTC	2098	OUT	Data Raw: 23 20 48 45 4c 50 20 d0 92 d1 80 d0 b5 d0 bc d1 8f 20 d0 b7 d0 b0 d0 b3 d1 80 d1 83 d0 b7 d0 ba d0 b8 20 63 61 70 69 72 73 2e 6a 73 0a 23 20 54 59 50 45 20 61 70 70 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 20 68 69 73 74 6f 67 72 61 6d 0a 61 70 70 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 62 75 63 6b 65 74 20 7b 61 70 70 3d 22 66 72 6f 6e 74 22 2c 20 73 79 73 74 65 6d 3d 22 67 61 7a 65 74 61 2d 64 65 73 6b 74 6f 70 22 2c 20 72 65 73 6f 75 72 63 65 3d 22 63 61 70 69 72 73 22 2c 20 64 69 72 65 63 74 69 6f 6e 3d 22 6f 75 74 22 2c 20 6c 65 76 65 6c 3d 22 72 65 71 75 65 73 74 22 2c 20 6c 65 3d 22 30 2e 32 22 7d 20 31 0a 61 70 70 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 62 75 63 6b 65 74 20 7b 61 70 70 3d 22 66 72 6f 6e 74 22 2c 20 73 79 73 74 65 6d 3d 22 67 61 Data Ascii: # HELP capirs.js# TYPE app_request_time histogramapp_request_time_bucket {app="front", system="gazeta-desktop", resource="capirs", direction="out", level="request", le="0.2"} 1app_request_time_bucket {app="front", system="ga
2025-01-02 15:12:14 UTC	179	IN	HTTP/1.1 504 Gateway Time-out Server: nginx Date: Thu, 02 Jan 2025 15:12:14 GMT Content-Type: text/html; charset=windows-1251 Transfer-Encoding: chunked Connection: close
2025-01-02 15:12:14 UTC	574	IN	Data Raw: 32 33 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 34 20 47 61 74 65 77 61 79 20 54 69 6d 65 2d 6f 75 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 34 20 47 61 74 65 77 61 79 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 Data Ascii: 232<html><head><title>504 Gateway Time-out</title></head><body><center><h1>504 Gateway Time-out</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disab