[Белый шум]

document.body.append( document.createElement('iframe') );
history.__proto__.pushState = window.frames[0].history.pushState;