{"title":"Blacklight Inspection","page_title":"RussianPanda Research Blog","uri_ins":"http://russianpanda.com/","uri_dest":"https://russianpanda.com/","uri_redirects":["http://russianpanda.com/"],"secure_connection":{},"host":"russianpanda.com","config":{"emulateDevice":{"name":"Pixel 2 XL","userAgent":"Mozilla/5.0 (Linux; Android 8.0.0; Pixel 2 XL Build/OPD1.170816.004) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3765.0 Mobile Safari/537.36","viewport":{"width":411,"height":823,"deviceScaleFactor":3.5,"isMobile":true,"hasTouch":true,"isLandscape":false}},"cleareCache":true,"captureHar":true,"captureLinks":false,"enableAdBlock":false,"saveBrowserProfile":false,"numPages":2,"defaultTimeout":35000,"defaultWaitUntil":"networkidle2","headless":true,"headers":{},"extraChromiumArgs":["--disable-features=TrackingProtection3pcd","--website-analysis-scan=b0285fea-0e0f-4d90-bc38-b1fca34c2f3a"],"extraPuppeteerOptions":{}},"browser":{"name":"Chromium","version":"Chrome/127.0.6533.88","user_agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/127.0.0.0 Safari/537.36","platform":{"name":"Linux","version":"4.4.302+"}},"script":{"host":"f55531b6c604","version":{"npm":"3.11.0","commit":"dev"},"node_version":"v24.20.0"},"start_time":"2026-09-11T06:40:56.991Z","end_time":"2026-09-11T06:41:22.657Z","browsing_history":["https://russianpanda.com/","https://russianpanda.com/MetaStealer-Part-2","https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis"],"hosts":{"requests":{"first_party":["russianpanda.com"],"third_party":["fonts.googleapis.com","fonts.gstatic.com","cdnjs.cloudflare.com","player.vimeo.com","f.vimeocdn.com","i.vimeocdn.com","vimeo.com","www.gstatic.com","vod-adaptive-ak.vimeocdn.com","arclight.vimeo.com","russianpanda.disqus.com","disqus.com","referrer.disqus.com","c.disquscdn.com","cdn.viglink.com","links.services.disqus.com"]}},"reports":{"behaviour_event_listeners":{"MOUSE":{"https://c.disquscdn.com/embedv2/latest/embedv2.js":["scroll"],"https://c.disquscdn.com/next/embed/common.bundle.712217b7f5a618b8bc684129c2acd47a.js":["click"],"https://c.disquscdn.com/next/embed/lounge.bundle.56587242107f7f290d4779d6435b5483.js":["click","scroll","mousemove"],"https://russianpanda.disqus.com/embed.js":["click","scroll","mousemove"],"https://russianpanda.com/js/common.js":["scroll"],"https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis":["scroll"],"https://f.vimeocdn.com/p/4.46.109/js/player.module.js":["click","mousedown"],"https://russianpanda.com/MetaStealer-Part-2":["scroll"]},"KEYBOARD":{"https://c.disquscdn.com/next/embed/common.bundle.712217b7f5a618b8bc684129c2acd47a.js":["keypress"],"https://russianpanda.com/js/common.js":["keydown"],"https://f.vimeocdn.com/p/4.46.109/js/player.module.js":["keydown","keyup","keypress"]},"SENSOR":{"https://f.vimeocdn.com/p/4.46.109/js/player.module.js":["orientationchange"]}},"canvas_fingerprinters":{"data_url":{"https://f.vimeocdn.com/p/4.46.109/js/vendor.module.js":["data:image/webp;base64,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"]},"fingerprinters":[],"styles":{},"texts":{}},"canvas_font_fingerprinters":{"canvas_font":{},"text_measure":{}},"cookies":[{"domain":"russianpanda.com","name":"disqusauth","path":"/","script":"https://c.disquscdn.com/next/embed/lounge.bundle.56587242107f7f290d4779d6435b5483.js","type":"js","value":"","third_party":false},{"domain":"russianpanda.com","name":"disqus_unique","path":"/","script":"https://c.disquscdn.com/next/embed/lounge.bundle.56587242107f7f290d4779d6435b5483.js","type":"js","value":"","third_party":false},{"domain":"russianpanda.com","name":"__jid","path":"/","script":"https://c.disquscdn.com/next/embed/lounge.bundle.56587242107f7f290d4779d6435b5483.js","type":"js","value":"","third_party":false},{"domain":"russianpanda.com","name":"vuid","path":"/","script":"https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js","type":"js","value":"pl2134336209.262346898","third_party":false}],"fb_pixel_events":[],"tiktok_pixel_events":[],"twitter_pixel_events":[],"google_analytics_events":[],"key_logging":{},"session_recorders":{},"third_party_trackers":[{"data":{"body":"format=jsonp&jsonp=vglnk_17891088822917&key=cfdfcf52dffd0a702a61bad27507376d&subId=7491491&loc=https%3A%2F%2Frussianpanda.com%2FPure-Logs-Stealer-Malware-Analysis&v=2","filter":"||disqus.com/api/ping","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://links.services.disqus.com/api/ping"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"abe":0,"dnt":0,"embed_hidden":0,"event":"init_embed","experiment":"videofloorexp","forum":"russianpanda","forum_id":7491491,"imp":"8f3er6mlftbl9","load_time":469,"max_enabled":true,"promoted_enabled":true,"referrer":"https://russianpanda.com/","service":"dynamic","theme":"next","thread":10242390734,"thread_slug":"pure_logs_stealer_fails_to_impress_39","tracking_enabled":0,"user_type":"anon","variant":"active"}},"stack":[{"fileName":"https://disqus.com/embed/comments/?base=default&f=russianpanda&t_u=https%3A%2F%2Frussianpanda.com%2FPure-Logs-Stealer-Malware-Analysis&t_d=Pure%20Logs%20Stealer%20Fails%20to%20Impress&t_t=Pure%20Logs%20Stealer%20Fails%20to%20Impress&s_o=default#version=341dee12be34cd058eb373ee8584d1b1","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/event.gif?abe=0&embed_hidden=0&load_time=469&event=init_embed&thread=10242390734&forum=russianpanda&forum_id=7491491&imp=8f3er6mlftbl9&thread_slug=pure_logs_stealer_fails_to_impress_39&user_type=anon&theme=next&dnt=0&tracking_enabled=0&experiment=videofloorexp&variant=active&service=dynamic&promoted_enabled=true&max_enabled=true&referrer=https%3A%2F%2Frussianpanda.com%2F"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"area":"n/a","event":"activity","experiment":"videofloorexp","extra_data":{"anchor_color":"rgb(238,238,238)","color_scheme":"dark","gpc":0,"topics":"","typeface":"sans-serif","width":307},"forum":"russianpanda","forum_id":7491491,"imp":"8f3er6mlftbl9","object_id":"embed","object_type":"product","page_referrer":"direct","page_url":"https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis","product":"embed","section":"default","service":"dynamic","thread":10242390734,"thread_id":10242390734,"variant":"active","verb":"view","zone":"thread"}},"stack":[{"fileName":"https://disqus.com/embed/comments/?base=default&f=russianpanda&t_u=https%3A%2F%2Frussianpanda.com%2FPure-Logs-Stealer-Malware-Analysis&t_d=Pure%20Logs%20Stealer%20Fails%20to%20Impress&t_t=Pure%20Logs%20Stealer%20Fails%20to%20Impress&s_o=default#version=341dee12be34cd058eb373ee8584d1b1","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/event.js?experiment=videofloorexp&variant=active&page_referrer=direct&product=embed&thread=10242390734&thread_id=10242390734&forum=russianpanda&forum_id=7491491&zone=thread&page_url=https%3A%2F%2Frussianpanda.com%2FPure-Logs-Stealer-Malware-Analysis&service=dynamic&verb=view&object_type=product&object_id=embed&extra_data=%7B%22color_scheme%22%3A%22dark%22%2C%22anchor_color%22%3A%22rgb(238%2C238%2C238)%22%2C%22typeface%22%3A%22sans-serif%22%2C%22width%22%3A307%2C%22gpc%22%3A0%2C%22topics%22%3A%22%22%7D&event=activity&imp=8f3er6mlftbl9&section=default&area=n%2Fa"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"event":"cmp.gpp.absent"}},"stack":[{"fileName":"https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/stat.gif?event=cmp.gpp.absent"},{"data":{"body":{},"filter":"/pixel.gif?","listName":"easyprivacy.txt","query":{"ch":2,"rn":2.300782287131938}},"stack":[{"fileName":"https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://cdn.viglink.com/images/pixel.gif?ch=2&rn=2.300782287131938"},{"data":{"body":{},"filter":"/pixel.gif?","listName":"easyprivacy.txt","query":{"ch":1,"rn":2.300782287131938}},"stack":[{"fileName":"https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://cdn.viglink.com/images/pixel.gif?ch=1&rn=2.300782287131938"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"event":"lounge.loading.view"}},"stack":[{"fileName":"https://russianpanda.com/Pure-Logs-Stealer-Malware-Analysis","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/stat.gif?event=lounge.loading.view"},{"data":{"body":"format=jsonp&jsonp=vglnk_17891088754047&key=cfdfcf52dffd0a702a61bad27507376d&subId=7491491&loc=https%3A%2F%2Frussianpanda.com%2FMetaStealer-Part-2&v=2","filter":"||disqus.com/api/ping","listName":"easyprivacy.txt","query":{}},"stack":[{"fileName":"https://russianpanda.com/MetaStealer-Part-2","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://links.services.disqus.com/api/ping"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"abe":0,"dnt":0,"embed_hidden":0,"event":"init_embed","experiment":"videofloorexp","forum":"russianpanda","forum_id":7491491,"imp":"8f3el9u3qnt08c","load_time":458,"max_enabled":true,"promoted_enabled":true,"referrer":"https://russianpanda.com/","service":"dynamic","theme":"next","thread":10242276978,"thread_slug":"metastealer_part_2_google_cookie_refresher_madness_and_stealer_drama_72","tracking_enabled":0,"user_type":"anon","variant":"active"}},"stack":[{"fileName":"https://disqus.com/embed/comments/?base=default&f=russianpanda&t_u=https%3A%2F%2Frussianpanda.com%2FMetaStealer-Part-2&t_d=MetaStealer%20Part%202%2C%20Google%20Cookie%20Refresher%20Madness%20and%20Stealer%20Drama&t_t=MetaStealer%20Part%202%2C%20Google%20Cookie%20Refresher%20Madness%20and%20Stealer%20Drama&s_o=default#version=341dee12be34cd058eb373ee8584d1b1","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/event.gif?abe=0&embed_hidden=0&load_time=458&event=init_embed&thread=10242276978&forum=russianpanda&forum_id=7491491&imp=8f3el9u3qnt08c&thread_slug=metastealer_part_2_google_cookie_refresher_madness_and_stealer_drama_72&user_type=anon&theme=next&dnt=0&tracking_enabled=0&experiment=videofloorexp&variant=active&service=dynamic&promoted_enabled=true&max_enabled=true&referrer=https%3A%2F%2Frussianpanda.com%2F"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"area":"n/a","event":"activity","experiment":"videofloorexp","extra_data":{"anchor_color":"rgb(238,238,238)","color_scheme":"dark","gpc":0,"topics":"","typeface":"sans-serif","width":307},"forum":"russianpanda","forum_id":7491491,"imp":"8f3el9u3qnt08c","object_id":"embed","object_type":"product","page_referrer":"direct","page_url":"https://russianpanda.com/MetaStealer-Part-2","product":"embed","section":"default","service":"dynamic","thread":10242276978,"thread_id":10242276978,"variant":"active","verb":"view","zone":"thread"}},"stack":[{"fileName":"https://disqus.com/embed/comments/?base=default&f=russianpanda&t_u=https%3A%2F%2Frussianpanda.com%2FMetaStealer-Part-2&t_d=MetaStealer%20Part%202%2C%20Google%20Cookie%20Refresher%20Madness%20and%20Stealer%20Drama&t_t=MetaStealer%20Part%202%2C%20Google%20Cookie%20Refresher%20Madness%20and%20Stealer%20Drama&s_o=default#version=341dee12be34cd058eb373ee8584d1b1","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/event.js?experiment=videofloorexp&variant=active&page_referrer=direct&product=embed&thread=10242276978&thread_id=10242276978&forum=russianpanda&forum_id=7491491&zone=thread&page_url=https%3A%2F%2Frussianpanda.com%2FMetaStealer-Part-2&service=dynamic&verb=view&object_type=product&object_id=embed&extra_data=%7B%22color_scheme%22%3A%22dark%22%2C%22anchor_color%22%3A%22rgb(238%2C238%2C238)%22%2C%22typeface%22%3A%22sans-serif%22%2C%22width%22%3A307%2C%22gpc%22%3A0%2C%22topics%22%3A%22%22%7D&event=activity&imp=8f3el9u3qnt08c&section=default&area=n%2Fa"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"event":"cmp.gpp.absent"}},"stack":[{"fileName":"https://russianpanda.com/MetaStealer-Part-2","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/stat.gif?event=cmp.gpp.absent"},{"data":{"body":{},"filter":"/pixel.gif?","listName":"easyprivacy.txt","query":{"ch":2,"rn":2.146867007890239}},"stack":[{"fileName":"https://russianpanda.com/MetaStealer-Part-2","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://cdn.viglink.com/images/pixel.gif?ch=2&rn=2.146867007890239"},{"data":{"body":{},"filter":"/pixel.gif?","listName":"easyprivacy.txt","query":{"ch":1,"rn":2.146867007890239}},"stack":[{"fileName":"https://russianpanda.com/MetaStealer-Part-2","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://cdn.viglink.com/images/pixel.gif?ch=1&rn=2.146867007890239"},{"data":{"body":{},"filter":"||referrer.disqus.com^","listName":"easyprivacy.txt","query":{"event":"lounge.loading.view"}},"stack":[{"fileName":"https://russianpanda.com/MetaStealer-Part-2","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://referrer.disqus.com/juggler/stat.gif?event=lounge.loading.view"},{"data":{"body":{},"filter":"||vimeo.com/ablincoln/","listName":"easyprivacy.txt","query":{"pid":"9d49c045323e7afcfa1d3fa35249c98c03abb9041789108866"}},"stack":[{"fileName":"https://player.vimeo.com/video/898626856","source":"ThirdPartyTracker RequestHandler"}],"type":"TrackingRequest","url":"https://vimeo.com/ablincoln/vuid?pid=9d49c045323e7afcfa1d3fa35249c98c03abb9041789108866"}]}}