Edit tour

Windows Analysis Report
https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530

Overview

General Information

Sample URL:	https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530
Analysis ID:	1311408
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found URL in obfuscated visual basic script code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3252 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 8D1C4713ACB7CC2AAAEE4477C58A80BA)

chrome.exe (PID: 5200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1928 --field-trial-handle=1960,i,9941111934938006839,15065013555028939376,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 8D1C4713ACB7CC2AAAEE4477C58A80BA)

chrome.exe (PID: 3332 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530 MD5: 8D1C4713ACB7CC2AAAEE4477C58A80BA)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+070

Source: classification engine

Classification label: clean0.win@18/59@14/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\chrome_BITS_3252_299822034

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1928 --field-trial-handle=1960,i,9941111934938006839,15065013555028939376,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1928 --field-trial-handle=1960,i,9941111934938006839,15065013555028939376,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\chrome_BITS_3252_299822034

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Scripting	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	1 Scripting	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://c.circuitbee.com/build/r/schematic-embed.html?id=$1	0%	Avira URL Cloud	safe
http://www.videojug.com/oembed.json	0%	Avira URL Cloud	safe
http://player.ordienetworks.com/flash/fodplayer.swf?	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
http://www.xtranormal.com/xtraplayr/$1/$2	0%	Avira URL Cloud	safe
http://kyruus.com	0%	Avira URL Cloud	safe
http://skitch.com/oembed/?format=json&url=	0%	Avira URL Cloud	safe
http://c.circuitbee.com/build/r/schematic-embed.html?id=$1	0%	Virustotal		Browse
http://www.videojug.com/oembed.json	0%	Virustotal		Browse
http://www.rdio.com/api/oembed/	0%	Avira URL Cloud	safe
http://ljpic.seacrow.com/json/$2$4?jsonp=?	0%	Avira URL Cloud	safe
http://www.xtranormal.com/xtraplayr/$1/$2	0%	Virustotal		Browse
http://www.viddy.com/embed/video/$1	0%	Avira URL Cloud	safe
http://api.minoto-video.com/publishers/.	0%	Avira URL Cloud	safe
http://kyruus.com	0%	Virustotal		Browse
https://www.ponga.com/embedded?id=$1	0%	Avira URL Cloud	safe
http://www.reelapp.com/$1/embed	0%	Avira URL Cloud	safe
http://www.kinomap.com/oembed	0%	Avira URL Cloud	safe
http://skitch.com/oembed/?format=json&url=	0%	Virustotal		Browse
http://tourwrist.com/tour_embed.js	0%	Avira URL Cloud	safe
http://www.yfrog.com/api/oembed	0%	Avira URL Cloud	safe
http://api.aniboom.com/e/$1	0%	Avira URL Cloud	safe
http://www.rdio.com/api/oembed/	0%	Virustotal		Browse
http://vodpod.com/oembed.js	0%	Avira URL Cloud	safe
http://www.kinomap.com/oembed	0%	Virustotal		Browse
http://tourwrist.com/tour_embed.js	0%	Virustotal		Browse
http://www.reelapp.com/$1/embed	0%	Virustotal		Browse
http://api.aniboom.com/e/$1	0%	Virustotal		Browse
http://www.yfrog.com/api/oembed	0%	Virustotal		Browse
http://vodpod.com/oembed.js	1%	Virustotal		Browse

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
myraben.com	195.68.193.49	true	false	high
accounts.google.com	172.217.13.141	true	false	high
www.google.com	172.217.13.100	true	false	high
clients.l.google.com	172.217.13.174	true	false	high
oftc.myraben.com	195.68.193.49	true	false	high
clients2.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://oftc.myraben.com/pages/en_GB/Shipment/Shipment_CustomerInfo.page.xml?638296872624383688	false	high
https://oftc.myraben.com/img/RabenTheme$Images$raben_foot.png?638296872624383688	false	high
https://myraben.com/xas/	false	high
https://myraben.com/metamodel.json?638259668588883546	false	high
https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530	false	high
https://oftc.myraben.com/pages/en_GB/Shipment/AnonymousShipment_ReadOnly_New2021.page.xml?638296872624383688	false	high
https://oftc.myraben.com/raben.css?638296872624383688	false	high
https://myraben.com/pages/en_GB/Redirections/Redirect.page.xml?638259668588883546	false	high
https://oftc.myraben.com/favicon.ico	false	high
https://myraben.com/widgets/widgets.js?638259668588883546	false	high
https://oftc.myraben.com/mxclientsystem/mxui/mxui.js?638296872624383688	false	high
https://oftc.myraben.com/widgets/widgets.js?638296872624383688	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://oftc.myraben.com/img/Layouts$Images$eta_48.png?638296872624383688	false	high
https://oftc.myraben.com/metamodel.json?638296872624383688	false	high
https://myraben.com/theme.compiled.css?638259668588883546	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://player.youku.com/player.php/sid/$1/v.swf	chromecache_167.1.dr	false		high
http://www.videojug.com/oembed.json	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://chirb.it/oembed.json	chromecache_167.1.dr	false		high
http://www.xtranormal.com/xtraplayr/$1/$2	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://api.dailymile.com/oembed	chromecache_167.1.dr	false		high
http://charts.stocktwits.com/production/original_$1.png?	chromecache_167.1.dr	false		high
http://creativecommons.org/licenses/by/3.0/	chromecache_179.1.dr	false		high
http://cdn.pearltrees.com/s/embed/getApp?	chromecache_167.1.dr	false		high
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://www.tudou.com/v/$1/v.swf	chromecache_167.1.dr	false		high
http://twitter.com/fontawesome.	chromecache_179.1.dr	false		high
http://c.circuitbee.com/build/r/schematic-embed.html?id=$1	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://julia.readthedocs.org/en/latest/manual/integers-and-floating-point-numbers/	chromecache_167.1.dr	false		high
http://player.ordienetworks.com/flash/fodplayer.swf?	chromecache_167.1.dr	false	Avira URL Cloud: safe	unknown
http://www.zapiks.fr/index.php?action=playerIframe&media_id=$1&autoStart=fals	chromecache_167.1.dr	false		high
http://getbootstrap.com)	chromecache_180.1.dr, chromecache_163.1.dr	false	Avira URL Cloud: safe	low
http://www.mixcloud.com/oembed/	chromecache_167.1.dr	false		high
http://twitter.com/davegandy	chromecache_179.1.dr	false		high
http://www.ustream.tv/oembed	chromecache_167.1.dr	false		high
http://www.youtube.com/oembed	chromecache_167.1.dr	false		high
http://kyruus.com	chromecache_179.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://web.archive.org/web/20160513042710/https://support.office.com/en-us/article/Excel-functions-	chromecache_167.1.dr	false		high
http://mixlr.com/embed/$1?autoplay=ae	chromecache_167.1.dr	false		high
http://skitch.com/oembed/?format=json&url=	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.scivee.tv/flash/embedCast.swf?	chromecache_167.1.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://static.polldaddy.com/p/$1.js	chromecache_167.1.dr	false		high
http://www.rdio.com/api/oembed/	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://dotsub.com/services/oembed	chromecache_167.1.dr	false		high
http://media.mtvnservices.com/mgid:moses:video:gametrailers.com:$2	chromecache_167.1.dr	false		high
https://www.circuitlab.com/circuit/$1/screenshot/540x405/	chromecache_167.1.dr	false		high
http://requirejs.org	chromecache_167.1.dr, chromecache_139.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://api.dribbble.com/shots/$1?callback=?	chromecache_167.1.dr	false		high
http://ljpic.seacrow.com/json/$2$4?jsonp=?	chromecache_167.1.dr	false	Avira URL Cloud: safe	unknown
http://static.bambuser.com/r/player.swf?vid=$1	chromecache_167.1.dr	false		high
https://api.github.com/repos/$1/$2?callback=?	chromecache_167.1.dr	false		high
http://www.23hq.com/23/oembed	chromecache_167.1.dr	false		high
http://vhx.tv/services/oembed.json	chromecache_167.1.dr	false		high
https://quilljs.com/	chromecache_179.1.dr, chromecache_173.1.dr	false		high
https://www.linkedin.com/cws/member/public_profile?public_profile_url=$1&format=inline&isFramed=true	chromecache_167.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_180.1.dr, chromecache_163.1.dr	false		high
http://stackoverflow.com/questions/	chromecache_167.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://cacoo.com/oembed.json	chromecache_167.1.dr	false		high
http://videos.sapo.pt/oembed	chromecache_167.1.dr	false		high
http://api.bambuser.com/oembed/iframe.json	chromecache_167.1.dr	false		high
http://www.screenr.com/embed/$1	chromecache_167.1.dr	false		high
http://api.smugmug.com/services/oembed/	chromecache_167.1.dr	false		high
http://www.viddy.com/embed/video/$1	chromecache_167.1.dr	false	Avira URL Cloud: safe	unknown
http://photobucket.com/oembed/	chromecache_167.1.dr	false		high
http://rcm.amazon.com/e/cm?t=_APIKEY_&o=1&p=8&l=as1&asins=$1&ref=qf_br_asin_til&fc1=000000&IS2=1&lt1	chromecache_167.1.dr	false		high
http://cloudup.com/$1?chromeless	chromecache_167.1.dr	false		high
http://speakerdeck.com/oembed.json	chromecache_167.1.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_167.1.dr, chromecache_139.1.dr	false		high
https://hertzen.com	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://jsbin.com/$1/?	chromecache_167.1.dr	false		high
http://api.minoto-video.com/publishers/.	chromecache_167.1.dr	false	Avira URL Cloud: safe	unknown
http://twitgoo.com/show/thumb/$1	chromecache_167.1.dr	false		high
https://bugs.dojotoolkit.org/ticket/9622	chromecache_167.1.dr, chromecache_139.1.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://jsfiddle.net/$1/embedded/result	chromecache_167.1.dr	false		high
http://huffduffer.com/oembed	chromecache_167.1.dr	false		high
http://roomshare.jp/oembed.json	chromecache_167.1.dr	false		high
https://www.ponga.com/embedded?id=$1	chromecache_167.1.dr	false	Avira URL Cloud: safe	unknown
http://www.reelapp.com/$1/embed	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.kinomap.com/oembed	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.twitter.com/1/statuses/oembed.json	chromecache_167.1.dr	false		high
http://www.collegehumor.com/moogaloop/moogaloop.swf?clip_id=$1&use_node_id=true&fullscreen=1	chromecache_167.1.dr	false		high
http://tourwrist.com/tour_embed.js	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://popplet.com/app/Popplet_Alpha.swf?page_id=$1&em=1	chromecache_167.1.dr	false		high
http://stackoverflow.com/questions/1349404/generate-a-string-of-5-random-characters-in-javascript	chromecache_167.1.dr	false		high
http://www.yfrog.com/api/oembed	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.ietf.org/rfc/rfc3339.txt)	chromecache_139.1.dr	false		high
http://ckeditor.com/license	chromecache_167.1.dr	false		high
http://pastebin.com/embed_iframe.php?i=$1	chromecache_167.1.dr	false		high
http://api.aniboom.com/e/$1	chromecache_167.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://maps.google.com/maps?t=m&q=$1&output=embed	chromecache_167.1.dr	false		high
http://bugs.jquery.com/ticket/13378	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://jsfiddle.net/yHPTv/577/	chromecache_139.1.dr	false		high
http://jsperf.com/thor-indexof-vs-for/5	chromecache_167.1.dr, chromecache_139.1.dr	false		high
http://vodpod.com/oembed.js	chromecache_167.1.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
195.68.193.49	myraben.com	Poland	29023	RABEN-ASPL	false
172.217.13.100	www.google.com	United States	15169	GOOGLEUS	false
172.217.13.174	clients.l.google.com	United States	15169	GOOGLEUS	false
172.217.13.141	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1311408
Start date and time:	2023-09-20 10:24:38 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@18/59@14/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 172.217.13.99, 34.104.35.123, 172.217.13.106, 172.217.13.163, 172.217.13.202, 172.217.13.138, 172.217.13.170, 172.217.13.195
Excluded domains from analysis (whitelisted): www.bing.com, geover.prod.do.dsp.mp.microsoft.com, fonts.googleapis.com, fs.microsoft.com, geo.prod.do.dsp.mp.microsoft.com, content-autofill.googleapis.com, fonts.gstatic.com, tse1.mm.bing.net, clientservices.googleapis.com, arc.msn.com, kv601.prod.do.dsp.mp.microsoft.com, edgedl.me.gvt1.com, update.googleapis.com, displaycatalog.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30127)
Category:	downloaded
Size (bytes):	1325393
Entropy (8bit):	5.407145158503497
Encrypted:	false
SSDEEP:	24576:6kEKxljl69Hadpevbseuyh26imZiuVtTxljl69Hadpevbsqu3ald:6kEKxljl69Hadpevbseuyh26iWiuVtTC
MD5:	0E34F67E18FF97A5213EF2246CCD621D
SHA1:	A8607956BFE498CBB45D2FDE2F4D416100B3BA6B
SHA-256:	8772EF2D064CAC46379412544B344D45B86E36D26AD9DDCDFF51ABB962DA12E9
SHA-512:	FDE76092ED8092EEAF5D45DBF39BCD7F18F3105E144392204B508DE5207118AE604334D108E8104E55FDA5E677B7F6B543722AD8B9A8146150EEB499F33C8889
Malicious:	false
Reputation:	low
URL:	https://oftc.myraben.com/widgets/widgets.js?638296872624383688
Preview:	require({cache:{.'HTMLSnippet/widget/HTMLSnippet':function(){.define(["dojo/_base/declare","mxui/widget/_WidgetBase","dojo/dom-style","dojo/dom-attr","dojo/dom-construct","dojo/_base/lang","dojo/html","dijit/layout/LinkPane"],function(__WEBPACK_EXTERNAL_MODULE__52__,__WEBPACK_EXTERNAL_MODULE__93__,__WEBPACK_EXTERNAL_MODULE__94__,__WEBPACK_EXTERNAL_MODULE__95__,__WEBPACK_EXTERNAL_MODULE__96__,__WEBPACK_EXTERNAL_MODULE__97__,__WEBPACK_EXTERNAL_MODULE__98__,__WEBPACK_EXTERNAL_MODULE__99__){return function(t){function e(e){for(var n,o,i=e[0],c=e[1],u=0,s=[];u<i.length;u++)o=i[u],Object.prototype.hasOwnProperty.call(r,o)&&r[o]&&s.push(r[o][0]),r[o]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(t[n]=c[n]);for(a&&a(e);s.length;)s.shift()()}var n={},r={0:0};function o(e){if(n[e])return n[e].exports;var r=n[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(t){var e=[],n=r[t];if(0!==n)if(n)e.push(n[2]);else{var i=new Promise(function(e,o)

Source: chromecache_167.1.dr	Binary string: http://www.youtube.com/oembed',{useyql:'json'}), - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://www.veoh.com/swf/webplayer/webplayer.swf?versionafrontend.5.7.0.1337permalinkid$1playervideodetailsembeddedvideoautoplay0idanonymous,{ - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.collegehumor.com/moogaloop/moogaloop.swf?clip_id$1use_node_idtruefullscreen1, - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://static.bambuser.com/r/player.swf?vid$1, - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://www.twitvid.com/embed.php?guid$1autoplay0, - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://boxofficebuz.com/embed/$1/$2,{templateregex:[/.boxofficebuz.com/embed/(\w+)/([\w\-*]+)/],embedtag:{tag:'iframe',width:480,height:360}}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://eplayer.clipsyndicate.com/embed/iframe?pf_id1show_title0va_id$1windows1,{templateregex:[/.www.clipsyndicate.com/video/play/(\w+)/./,/.eplayer.clipsyndicate.com/embed/iframe\?.va_id(\w+)../],embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 6
Source: chromecache_167.1.dr	Binary string: http://www.coub.com/embed/$1?mutedfalseautostartfalseoriginalsizefalsehidetopbarfalsenositebuttonsfalsestartwithhdfalse,{templateregex:[/.coub.com/embed/(\w+)\?./,/.coub.com/view/(\w+).*/],embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 6
Source: chromecache_167.1.dr	Binary string: http://snagplayer.video.dp.discovery.com/$1/snag-it-player.htm?autono,{templateregex:[/.snagplayer.video.dp.discovery/(\w+)./],embedtag:{tag:'iframe',width:480,height:360}}), - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://www.telly.com/embed.php?guid$1autoplay0,{templateregex:[/.telly.com/embed.php\?guid(\w+)./,/.telly.com/(\w+)./],embedtag:{tag:'iframe',width:480,height:360}}), - obfuscation quality: 6
Source: chromecache_167.1.dr	Binary string: http://www.minilogs.com/e/$1,{templateregex:[/.minilogs.com/e/(\w+)./,/.minilogs.com/(\w+)./],embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.viddy.com/embed/video/$1,{templateregex:[/.viddy.com/embed/video/(.)/,/.viddy.com/video/(.)/],embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.worldstarhiphop.com/embed/$1,{templateregex:/.worldstarhiphop.com/embed/(\w+)./,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.zapiks.fr/index.php?actionplayeriframemedia_id$1autostartfals,{templateregex:/.zapiks.fr/index.php\?[\w\]media_id(\w+).*/,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 7
Source: chromecache_167.1.dr	Binary string: http://chirb.it/wp/$1,{templateregex:[/.chirb.it/wp/(\w+)./,/.chirb.it/(\w+)./],embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.achewood.com/comic.php?date$1,{templateregex:/.achewood.com/index.php\?date(\w+)./,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://www.fotokritik.com/embed/$1,{templateregex:[/.fotokritik.com/embed/(\w+)./,/.fotokritik.com/(\w+)./],embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.giflike.com/embed/$1,{templateregex:[/.giflike.com/embed/(\w+)./,/.giflike.com/a/(\w+)./],embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://popplet.com/app/popplet_alpha.swf?page_id$1em1, - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://togo.ebay.com/togo/langen-usmodenormalitemid$2query$1 - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://$1.wikipedia.org/w/api.php?actionparsepage$2formatjsonsection0callback?,{ - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://en.wikipedia.org/wiki'); - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.imdbapi.com/?i$1callback?, - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://c.circuitbee.com/build/r/schematic-embed.html?id$1, - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://pastebin.com/embed_iframe.php?i$1, - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://api.stackoverflow.com/1.1/questions/$1?bodytruejsonp? - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.gravatar.com/avatar/'+q.owner.email_hash+'?s32amp;didenticonamp;rpg></a></div><divclassoembedall-user-details>' - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://public-api.wordpress.com/oembed/1.0/?forjquery-oembed-all), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.scribd.com/embeds/$1/content?start_page1view_modelist, - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://rcm.amazon.com/e/cm?t_apikey_o1p8las1asins$1refqf_br_asin_tilfc1000000is21lt1_blankmamazonlc10000ffbc1000000bg1fffffffifr, - obfuscation quality: 5
Source: chromecache_167.1.dr	Binary string: http://360.io/$1,{templateregex:/.360.io/(\w+)./,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://on.bubb.li/$1,{templateregex:/.on.bubb.li/(\w+)./,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://cloudup.com/$1?chromeless,{templateregex:[/.cloudup.com/(\w+)./],embedtag:{tag:'iframe',width:480,height:360}}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://maps.google.com/maps?tmq$1outputembed,{templateregex:/.google.com/maps/place/([\w\+])/.*/,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 6
Source: chromecache_167.1.dr	Binary string: http://embed.imajize.com/$1,{templateregex:/.embed.imajize.com/(.)/,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://www.mapjam.com/$1,{templateregex:/.mapjam.com/(.)/,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 4
Source: chromecache_167.1.dr	Binary string: http://assets-polarb-com.a.ssl.fastly.net/api/v4/publishers/unknown/embedded_polls/iframe?poll_id$1,{templateregex:/.polarb.com/polls/(\w+)./,embedtag:{tag:'iframe',width:480,height:360},nocache:1}), - obfuscation quality: 5

Source: chromecache_167.1.dr	String found in binary or memory: //new $.fn.oembed.OEmbedProvider("youtube", "video", ["youtube\\.com/watch.+v=[\\w-]+&?", "youtu\\.be/[\\w-]+"], 'http://www.youtube.com/oembed', {useYQL:'json'}), equals www.youtube.com (Youtube)
Source: chromecache_167.1.dr	String found in binary or memory: new $.fn.oembed.OEmbedProvider("facebook", "rich", ["facebook.com/.+"], "https://www.facebook.com/plugins/post/oembed.json"), equals www.facebook.com (Facebook)
Source: chromecache_167.1.dr	String found in binary or memory: new $.fn.oembed.OEmbedProvider("linkedin", "rich", ["linkedin.com/pub/.+"], "https://www.linkedin.com/cws/member/public_profile?public_profile_url=$1&format=inline&isFramed=true", equals www.linkedin.com (Linkedin)
Source: chromecache_167.1.dr	String found in binary or memory: new $.fn.oembed.OEmbedProvider("youtube", "video", ["youtube\\.com/watch.+v=[\\w-]+&?", "youtu\\.be/[\\w-]+", "youtube.com/embed"], '//www.youtube.com/embed/$1?wmode=transparent', { equals www.youtube.com (Youtube)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 20, 2023 10:25:35.824551105 CEST	59094	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:35.824771881 CEST	54394	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:35.824987888 CEST	51984	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:35.825181007 CEST	54723	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:35.920932055 CEST	53	59094	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:35.921432018 CEST	53	51984	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:35.924645901 CEST	53	54723	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:35.924773932 CEST	53	57990	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:35.929918051 CEST	53	54394	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:36.612591028 CEST	53	56010	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:37.141892910 CEST	53807	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:37.142146111 CEST	58037	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:37.455219984 CEST	53	58037	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:37.455754995 CEST	53	53807	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:39.874305964 CEST	58173	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:39.874830008 CEST	59491	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:39.965293884 CEST	53	59491	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:39.971236944 CEST	53	58173	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:39.996695995 CEST	53	54709	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:40.626343012 CEST	53	51694	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:41.810617924 CEST	52828	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:41.810868979 CEST	64143	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:42.118769884 CEST	53	52828	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:42.125447035 CEST	53	64143	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:50.257131100 CEST	56923	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:50.257389069 CEST	53976	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:50.464992046 CEST	53	53976	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:50.571693897 CEST	53	56923	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:53.601269007 CEST	53	61493	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:56.401720047 CEST	61483	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:56.402086973 CEST	49186	53	192.168.2.6	8.8.8.8
Sep 20, 2023 10:25:56.499005079 CEST	53	61483	8.8.8.8	192.168.2.6
Sep 20, 2023 10:25:56.609927893 CEST	53	49186	8.8.8.8	192.168.2.6
Sep 20, 2023 10:26:00.695329905 CEST	53	63092	8.8.8.8	192.168.2.6
Sep 20, 2023 10:26:04.178263903 CEST	53	61208	8.8.8.8	192.168.2.6
Sep 20, 2023 10:26:11.094794035 CEST	53	62290	8.8.8.8	192.168.2.6
Sep 20, 2023 10:26:30.080504894 CEST	53	59314	8.8.8.8	192.168.2.6
Sep 20, 2023 10:26:35.273077965 CEST	53	54433	8.8.8.8	192.168.2.6

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:36 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=115.0.5790.171&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-115.0.5790.171 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-09-20 08:25:36 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-zX3tC2Cw5Q0XbaSK12xI2w' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Sep 2023 08:25:36 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6106 X-Daystart: 5136 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-09-20 08:25:36 UTC	1	IN	Data Raw: 32 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 30 36 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 31 33 36 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 20 Data Ascii: 2c8<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6106" elapsed_seconds="5136"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-09-20 08:25:36 UTC	2	IN	Data Raw: 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 3f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-09-20 08:25:36 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:36 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+070
2023-09-20 08:25:36 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-09-20 08:25:36 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Sep 2023 08:25:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-1efTKI_XoaDGOXUT7OO_Bw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-09-20 08:25:36 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-09-20 08:25:36 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:42 UTC	1605	OUT	POST /xas/ HTTP/1.1 Host: myraben.com Connection: keep-alive Content-Length: 236 x-mx-reqtoken: 1695198340865-1 accept: application/json content-type: application/json sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://myraben.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myraben.com/index3.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html
2023-09-20 08:25:42 UTC	1606	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 22 3a 22 67 65 74 5f 73 65 73 73 69 6f 6e 5f 64 61 74 61 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 68 79 62 72 69 64 22 3a 66 61 6c 73 65 2c 22 6f 66 66 6c 69 6e 65 22 3a 74 72 75 65 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 70 72 6f 66 69 6c 65 22 3a 22 22 2c 22 74 69 6d 65 7a 6f 6e 65 6f 66 66 73 65 74 22 3a 2d 31 32 30 2c 22 74 69 6d 65 7a 6f 6e 65 49 64 22 3a 22 45 75 72 6f 70 65 2f 42 65 72 6c 69 6e 22 2c 22 70 72 65 66 65 72 72 65 64 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 2d 55 53 22 2c 22 65 6e 22 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 32 7d 2c 22 70 72 6f 66 69 6c 65 64 61 74 61 22 3a 7b 22 31 36 39 35 31 39 38 33 33 39 39 30 39 2d 30 22 3a 37 38 31 7d 7d Data Ascii: {"action":"get_session_data","params":{"hybrid":false,"offline":true,"referrer":null,"profile":"","timezoneoffset":-120,"timezoneId":"Europe/Berlin","preferredLanguages":["en-US","en"],"version":2},"profiledata":{"1695198339909-0":781}}
2023-09-20 08:25:42 UTC	1607	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:42 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store Set-Cookie: SessionTimeZoneOffset=-120; Path=/; Secure; HttpOnly; SameSite=Strict Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; Path=/; Secure; HttpOnly; SameSite=Strict Set-Cookie: xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; Path=/; Secure; HttpOnly; SameSite=Strict Set-Cookie: DeviceType=Desktop; Path=/; Expires=Thu, 19-Sep-2024 08:25:42 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=Strict Set-Cookie: Profile=Responsive; Path=/; Expires=Thu, 19-Sep-2024 08:25:42 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=Strict X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000;
2023-09-20 08:25:42 UTC	1608	IN	Data Raw: 31 64 31 63 0d 0a 7b 22 63 61 63 68 65 62 75 73 74 22 3a 22 36 33 38 32 35 39 36 36 38 35 38 38 38 38 33 35 34 36 22 2c 22 63 68 61 6e 67 65 73 22 3a 7b 7d 2c 22 63 6f 6d 6d 69 74 73 22 3a 5b 22 35 38 32 36 35 33 32 30 31 39 33 36 39 37 39 39 36 22 2c 22 33 30 36 38 30 37 37 32 34 36 31 34 36 31 35 30 36 22 5d 2c 22 63 6f 6d 6d 69 74 74 65 64 4f 62 6a 65 63 74 73 4f 6d 69 74 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 73 74 61 6e 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 44 65 65 70 4c 69 6e 6b 2e 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 4e 61 6d 65 22 2c 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 22 3a 22 6c 69 6e 6b 22 7d 5d 2c 22 63 73 72 66 74 6f 6b 65 6e 22 3a 22 64 34 63 61 37 39 32 65 2d 34 63 32 32 2d 34 34 36 39 2d 39 37 Data Ascii: 1d1c{"cachebust":"638259668588883546","changes":{},"commits":["58265320193697996","30680772461461506"],"committedObjectsOmitted":false,"constants":[{"name":"DeepLink.RequestHandlerName","type":"String","value":"link"}],"csrftoken":"d4ca792e-4c22-4469-97
2023-09-20 08:25:42 UTC	1615	IN	Data Raw: 32 30 30 30 0d 0a 22 2c 22 57 61 6c 6c 69 73 20 61 6e 64 20 46 75 74 75 6e 61 22 5d 2c 5b 22 57 65 73 74 65 72 6e 5f 53 61 68 61 72 61 22 2c 22 57 65 73 74 65 72 6e 20 53 61 68 61 72 61 22 5d 2c 5b 22 59 65 6d 65 6e 22 2c 22 59 65 6d 65 6e 22 5d 2c 5b 22 5a 61 6d 62 69 61 22 2c 22 5a 61 6d 62 69 61 22 5d 2c 5b 22 5a 69 6d 62 61 62 77 65 22 2c 22 5a 69 6d 62 61 62 77 65 22 5d 5d 2c 22 52 65 67 69 73 74 72 61 74 69 6f 6e 2e 52 65 67 69 73 74 72 61 74 69 6f 6e 53 74 61 74 75 73 22 3a 5b 5b 22 5f 6e 65 77 22 2c 22 6e 65 77 22 5d 2c 5b 22 70 72 65 70 61 72 65 64 22 2c 22 70 72 65 70 61 72 65 64 22 5d 2c 5b 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 5d 2c 5b 22 64 6f 6e 65 22 2c 22 64 6f 6e 65 22 5d 2c 5b 22 72 Data Ascii: 2000","Wallis and Futuna"],["Western_Sahara","Western Sahara"],["Yemen","Yemen"],["Zambia","Zambia"],["Zimbabwe","Zimbabwe"]],"Registration.RegistrationStatus":[["_new","new"],["prepared","prepared"],["configuration","configuration"],["done","done"],["r
2023-09-20 08:25:42 UTC	1623	IN	Data Raw: 6e 2e 41 63 63 6f 75 6e 74 22 2c 22 6e 65 65 64 73 52 65 61 63 68 61 62 6c 65 53 74 61 74 65 22 3a 7b 22 63 72 65 61 74 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 6d 69 74 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 64 65 6c 65 74 65 22 3a 66 61 6c 73 65 7d 2c 22 70 65 72 73 69 73 74 61 62 6c 65 22 3a 74 72 75 65 7d 2c 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 4e 61 6d 65 22 3a 0d 0a Data Ascii: n.Account","needsReachableState":{"create":false,"commit":false,"rollback":false,"delete":false},"persistable":true},{"attributes":{"Name":
2023-09-20 08:25:42 UTC	1623	IN	Data Raw: 32 30 30 30 0d 0a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 48 61 73 43 6f 6e 74 65 6e 74 73 22 3a 7b 22 74 79 70 65 22 3a 22 42 6f 6f 6c 65 61 6e 22 2c 22 73 79 6e 63 22 3a 66 61 6c 73 65 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 53 79 73 74 65 6d 2e 63 68 61 6e 67 65 64 42 79 22 3a 7b 22 74 79 70 65 22 3a 22 4f 62 6a 65 63 74 52 65 66 65 72 65 6e 63 65 22 2c 22 6b 6c 61 73 73 22 3a 22 53 79 73 74 65 6d 2e 55 73 65 72 22 2c 22 73 79 6e 63 22 3a 66 61 6c 73 65 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 53 69 7a 65 22 3a 7b 22 74 79 70 65 22 3a 22 4c 6f 6e 67 22 2c 22 73 79 6e 63 22 3a 66 61 6c 73 65 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 53 79 73 Data Ascii: 2000{"type":"String","readonly":true},"HasContents":{"type":"Boolean","sync":false,"readonly":true},"System.changedBy":{"type":"ObjectReference","klass":"System.User","sync":false,"readonly":true},"Size":{"type":"Long","sync":false,"readonly":true},"Sys
2023-09-20 08:25:42 UTC	1631	IN	Data Raw: 32 30 30 30 0d 0a 69 62 75 74 65 73 22 3a 7b 22 55 52 4c 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 7d 2c 22 50 61 74 68 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 7d 2c 22 51 75 65 72 79 53 74 72 69 6e 67 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 7d 2c 22 44 65 65 70 4c 69 6e 6b 2e 44 65 65 70 4c 69 6e 6b 55 52 4c 5f 44 65 65 70 4c 69 6e 6b 22 3a 7b 22 74 79 70 65 22 3a 22 4f 62 6a 65 63 74 52 65 66 65 72 65 6e 63 65 22 2c 22 6b 6c 61 73 73 22 3a 22 44 65 65 70 4c 69 6e 6b 2e 44 65 65 70 4c 69 6e 6b 22 7d 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 73 75 62 63 6c 61 73 73 65 73 22 3a 5b 5d 2c 22 73 75 70 65 72 63 6c 61 73 73 65 73 22 3a 5b 5d 7d 2c 22 6f 62 6a 65 63 74 54 79 70 65 22 3a 22 44 65 65 70 4c 69 6e 6b Data Ascii: 2000ibutes":{"URL":{"type":"String"},"Path":{"type":"String"},"QueryString":{"type":"String"},"DeepLink.DeepLinkURL_DeepLink":{"type":"ObjectReference","klass":"DeepLink.DeepLink"}},"properties":{"subclasses":[],"superclasses":[]},"objectType":"DeepLink
2023-09-20 08:25:42 UTC	1639	IN	Data Raw: 69 6f 6e 2e 52 4f 22 3a 7b 22 61 22 3a 5b 5d 2c 22 70 22 3a 5b 22 52 65 67 69 73 74 72 61 74 69 6f 6e 2e 43 75 73 74 6f 6d 65 72 52 65 67 69 73 74 72 61 74 69 6f 6e 22 5d 7d 2c 22 52 65 67 69 73 74 72 61 74 69 6f 6e 2e 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 4f 6e 43 68 61 6e 67 65 22 3a 7b 22 61 22 3a 5b 5d 2c 22 70 22 3a 5b 22 52 65 67 69 73 74 72 61 74 69 6f 6e 2e 43 75 73 74 6f 6d 65 72 52 65 67 69 73 74 72 61 74 69 6f 6e 22 5d 7d 2c 22 52 65 67 69 73 74 72 0d 0a Data Ascii: ion.RO":{"a":[],"p":["Registration.CustomerRegistration"]},"Registration.Registration_OnChange":{"a":[],"p":["Registration.CustomerRegistration"]},"Registr
2023-09-20 08:25:42 UTC	1640	IN	Data Raw: 31 30 30 30 0d 0a 61 74 69 6f 6e 2e 53 4b 22 3a 7b 22 61 22 3a 5b 5d 2c 22 70 22 3a 5b 22 52 65 67 69 73 74 72 61 74 69 6f 6e 2e 43 75 73 74 6f 6d 65 72 52 65 67 69 73 74 72 61 74 69 6f 6e 22 5d 7d 2c 22 52 65 67 69 73 74 72 61 74 69 6f 6e 2e 55 41 22 3a 7b 22 61 22 3a 5b 5d 2c 22 70 22 3a 5b 22 52 65 67 69 73 74 72 61 74 69 6f 6e 2e 43 75 73 74 6f 6d 65 72 52 65 67 69 73 74 72 61 74 69 6f 6e 22 5d 7d 2c 22 53 70 6f 74 4f 66 66 65 72 2e 42 47 22 3a 7b 22 61 22 3a 5b 5d 2c 22 70 22 3a 5b 22 53 70 6f 74 4f 66 66 65 72 2e 53 70 6f 74 4f 66 66 65 72 22 5d 7d 2c 22 53 70 6f 74 4f 66 66 65 72 2e 43 5a 22 3a 7b 22 61 22 3a 5b 5d 2c 22 70 22 3a 5b 22 53 70 6f 74 4f 66 66 65 72 2e 53 70 6f 74 4f 66 66 65 72 22 5d 7d 2c 22 53 70 6f 74 4f 66 66 65 72 2e 43 68 61 6e Data Ascii: 1000ation.SK":{"a":[],"p":["Registration.CustomerRegistration"]},"Registration.UA":{"a":[],"p":["Registration.CustomerRegistration"]},"SpotOffer.BG":{"a":[],"p":["SpotOffer.SpotOffer"]},"SpotOffer.CZ":{"a":[],"p":["SpotOffer.SpotOffer"]},"SpotOffer.Chan
2023-09-20 08:25:42 UTC	1644	IN	Data Raw: 32 64 37 0d 0a 72 22 2c 22 53 70 72 69 6e 74 72 46 65 65 64 62 61 63 6b 57 69 64 67 65 74 2e 53 70 72 69 6e 74 72 46 65 65 64 62 61 63 6b 22 2c 22 54 61 62 53 77 69 74 63 68 65 72 2e 77 69 64 67 65 74 2e 54 61 62 53 77 69 74 63 68 65 72 22 5d 7d 2c 22 75 73 65 72 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 4e 61 6d 65 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 5f 30 34 36 33 35 30 37 66 2d 33 30 37 32 2d 34 35 65 61 2d 39 61 37 32 2d 30 39 38 38 33 62 35 30 66 38 39 65 22 7d 2c 22 53 79 73 74 65 6d 2e 63 68 61 6e 67 65 64 42 79 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 6e 75 6c 6c 7d 2c 22 49 73 41 6e 6f 6e 79 6d 6f 75 73 22 3a 7b 22 72 65 Data Ascii: 2d7r","SprintrFeedbackWidget.SprintrFeedback","TabSwitcher.widget.TabSwitcher"]},"user":{"attributes":{"Name":{"readonly":true,"value":"Anonymous_0463507f-3072-45ea-9a72-09883b50f89e"},"System.changedBy":{"readonly":true,"value":null},"IsAnonymous":{"re
2023-09-20 08:25:42 UTC	1644	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:42 UTC	1606	OUT	GET /favicon.ico HTTP/1.1 Host: myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html
2023-09-20 08:25:42 UTC	1644	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:42 GMT Content-Type: image/x-icon Content-Length: 894 Last-Modified: Fri, 15 Apr 2022 12:40:04 GMT Connection: close ETag: "625967a4-37e" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:42 UTC	1645	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 18 00 68 03 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 18 00 00 00 00 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff df dd f6 c4 c0 ee c5 c1 ef d4 d1 f3 ff ff ff ff ff ff fe fe ff db d9 f5 c4 c0 ef c4 c1 ee dd db f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 70 67 d7 13 00 be 10 00 bd 49 3a cc fe fe ff ff ff ff f7 f6 fd 48 3b cc 12 00 be 0b 00 bc b2 ac e9 fd fd fe ff ff ff ff Data Ascii: h( @pgI:H;

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:42 UTC	1607	OUT	GET /metamodel.json?638259668588883546 HTTP/1.1 Host: myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html
2023-09-20 08:25:42 UTC	1645	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:42 GMT Content-Type: application/json Content-Length: 41800 Last-Modified: Wed, 26 Jul 2023 09:14:34 GMT Connection: close ETag: "64c0e3fa-a348" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:42 UTC	1646	IN	Data Raw: 7b 22 6c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 5f 47 42 22 2c 22 70 6c 5f 50 4c 22 2c 22 65 74 5f 45 45 22 2c 22 6c 76 5f 4c 56 22 2c 22 6c 74 5f 4c 54 22 2c 22 63 73 5f 43 5a 22 2c 22 68 75 5f 48 55 22 2c 22 75 6b 5f 55 41 22 2c 22 6e 6c 5f 4e 4c 22 2c 22 64 65 5f 44 45 22 2c 22 73 6b 5f 53 4b 22 2c 22 72 6f 5f 52 4f 22 2c 22 69 74 5f 49 54 22 2c 22 62 67 5f 42 47 22 2c 22 65 6c 5f 47 52 22 5d 2c 22 73 79 73 74 65 6d 54 65 78 74 73 22 3a 7b 22 6d 65 6e 64 69 78 2e 6c 69 62 2e 4d 78 44 61 74 61 53 6f 75 72 63 65 2e 73 74 61 74 75 73 22 3a 5b 22 7b 31 7d 20 74 6f 20 7b 32 7d 20 6f 66 20 7b 33 7d 22 2c 22 7b 31 7d 20 74 6f 20 7b 32 7d 20 6f 66 20 7b 33 7d 22 2c 22 7b 31 7d 20 74 6f 20 7b 32 7d 20 6f 66 20 7b 33 7d 22 2c 22 7b 31 7d 20 74 6f 20 7b 32 7d Data Ascii: {"languages":["en_GB","pl_PL","et_EE","lv_LV","lt_LT","cs_CZ","hu_HU","uk_UA","nl_NL","de_DE","sk_SK","ro_RO","it_IT","bg_BG","el_GR"],"systemTexts":{"mendix.lib.MxDataSource.status":["{1} to {2} of {3}","{1} to {2} of {3}","{1} to {2} of {3}","{1} to {2}
2023-09-20 08:25:43 UTC	1661	IN	Data Raw: 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 69 6e 20 61 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 2e 22 2c 22 55 20 68 65 62 74 20 6e 69 65 74 20 67 65 6e 6f 65 67 20 72 65 63 68 74 65 6e 20 6f 6d 20 64 65 7a 65 20 70 61 67 69 6e 61 20 74 65 20 6f 70 65 6e 65 6e 2e 20 55 20 6b 75 6e 74 20 70 72 6f 62 65 72 65 6e 20 61 61 6e 20 74 65 20 6d 65 6c 64 65 6e 20 61 6c 73 20 65 65 6e 20 61 6e 64 65 72 65 20 67 65 62 72 75 69 6b 65 72 2e 22 2c 22 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 65 6e 6f 75 67 68 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 69 6e 20 61 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 Data Ascii: age. You may try to login as a different user.","U hebt niet genoeg rechten om deze pagina te openen. U kunt proberen aan te melden als een andere gebruiker.","You don't have enough permissions to access this page. You may try to login as a different user
2023-09-20 08:25:43 UTC	1677	IN	Data Raw: 28 65 6d 70 74 79 29 22 2c 22 28 65 6d 70 74 79 29 22 5d 2c 22 6d 78 75 69 2e 77 69 64 67 65 74 2e 44 69 61 6c 6f 67 4d 65 73 73 61 67 65 2e 63 61 6e 63 65 6c 22 3a 5b 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 41 6e 6e 75 6c 65 72 65 6e 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 2c 22 43 61 6e 63 65 6c 22 5d 2c 22 6d 78 75 69 2e 77 69 64 67 65 74 2e 44 69 61 6c 6f 67 4d 65 73 73 61 67 65 2e 66 69 6c 65 5f 64 6f 77 6e 6c 6f 61 64 22 3a 5b 22 44 6f 77 6e 6c 6f 61 64 20 66 69 6c 65 22 2c 22 Data Ascii: (empty)","(empty)"],"mxui.widget.DialogMessage.cancel":["Cancel","Cancel","Cancel","Cancel","Cancel","Cancel","Cancel","Cancel","Annuleren","Cancel","Cancel","Cancel","Cancel","Cancel","Cancel"],"mxui.widget.DialogMessage.file_download":["Download file","

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:43 UTC	1687	OUT	GET /widgets/widgets.css?638259668588883546 HTTP/1.1 Host: myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://myraben.com/index3.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:43 UTC	1689	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:43 GMT Content-Type: text/css Content-Length: 116980 Last-Modified: Wed, 26 Jul 2023 09:14:36 GMT Connection: close ETag: "64c0e3fc-1c8f4" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:43 UTC	1689	IN	Data Raw: 2e 61 70 70 2d 73 77 69 74 63 68 65 72 5f 5f 6c 61 75 6e 63 68 70 61 64 7b 68 65 69 67 68 74 3a 34 30 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 61 70 70 2d 73 77 69 74 63 68 65 72 5f 5f 6c 61 75 6e 63 68 70 61 64 2d 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 61 70 70 2d 73 77 69 74 63 68 65 72 5f 5f 65 66 66 65 63 74 2d 2d 73 68 61 64 6f 77 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 37 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 7d 2e 61 70 70 2d 73 77 69 74 63 68 65 72 5f 5f 65 66 66 65 63 74 2d 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: .app-switcher__launchpad{height:400px;margin-bottom:15px}.app-switcher__launchpad-frame{border:none;display:block;width:100%;height:400px}.app-switcher__effect--shadow{box-shadow:0 0 7px 0 rgba(0,0,0,.14)}.app-switcher__effect--hide{display:none!important
2023-09-20 08:25:43 UTC	1737	IN	Data Raw: 72 69 6e 74 72 46 65 65 64 62 61 63 6b 5f 5f 73 69 64 65 62 61 72 5f 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 70 72 69 6e 74 72 46 65 65 64 62 61 63 6b 5f 5f 72 6f 6f 74 2c 2e 73 70 72 69 6e 74 72 46 65 65 64 62 61 63 6b 5f 5f 72 6f 6f 74 20 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 2c 53 65 67 6f 65 20 55 49 2c 54 61 68 6f 6d 61 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 73 70 72 69 6e 74 72 46 65 65 64 62 61 63 6b 5f 5f 72 6f 6f 74 20 2e 70 6f 70 75 70 2d 6f 76 65 72 6c 61 79 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 31 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 21 69 6d 70 6f 72 74 61 6e Data Ascii: rintrFeedback__sidebar_button:last-child:after{display:none}.sprintrFeedback__root,.sprintrFeedback__root *{font-family:Open Sans,Segoe UI,Tahoma,sans-serif}.sprintrFeedback__root .popup-overlay{z-index:1000001!important;background:rgba(0,0,0,.1)!importan
2023-09-20 08:25:43 UTC	1753	IN	Data Raw: 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 35 35 35 7d 2e 73 70 72 69 6e 74 72 46 65 65 64 62 61 63 6b 20 2e 54 6f 61 73 74 69 66 79 5f 5f 74 6f 61 73 74 2d 62 6f 64 79 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 35 70 78 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 73 70 72 69 6e 74 72 46 65 65 64 62 61 63 6b 20 2e 54 6f 61 73 74 69 66 79 5f 5f 74 6f 61 73 74 2d 62 6f 64 79 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 Data Ascii: margin:0;color:#555}.sprintrFeedback .Toastify__toast-body .notification-title{font-size:14px;font-weight:400;line-height:16px;max-width:calc(100% - 15px);margin-bottom:6px}.sprintrFeedback .Toastify__toast-body .notification-content{font-size:12px;font-w
2023-09-20 08:25:43 UTC	1785	IN	Data Raw: 0a 0d 0a 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 73 6f 72 74 20 2e 73 6f 72 74 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 44 37 44 37 44 37 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 Data Ascii: .widget-header-sort .sort-header{display:flex;align-items:center;border-color:#D7D7D7;border-top-width:0;border-right:0;border-bottom-width:1px;border-left:0;background-color:transparent;justify-content:space-between;cursor:pointer;font-weight:bold;tex
2023-09-20 08:25:43 UTC	1801	IN	Data Raw: 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 30 3b 20 7d 0a 0a 2e 77 69 64 67 65 74 2d 72 69 63 68 2d 74 65 78 74 20 2e 77 69 64 67 65 74 2d 72 69 63 68 2d 74 65 78 74 2d 71 75 69 6c 6c 2e 71 6c 2d 64 69 73 61 62 6c 65 64 20 2e 71 6c 2d 65 64 69 74 6f 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 20 7d 0a 0a 2e 77 69 64 67 65 74 2d 72 69 63 68 2d 74 65 78 74 2e 64 69 73 61 62 6c 65 64 2d 74 65 78 74 20 2e 71 6c 2d 65 64 69 74 6f 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 7d 0a 0a 2e 77 69 64 67 65 74 2d 72 69 63 68 2d 74 65 78 74 2e 64 69 73 61 62 6c 65 64 2d 74 65 78 74 20 70 20 7b 0a 20 Data Ascii: border-top-left-radius: 0; border-top-right-radius: 0; }.widget-rich-text .widget-rich-text-quill.ql-disabled .ql-editor { cursor: default; }.widget-rich-text.disabled-text .ql-editor { padding: 0; }.widget-rich-text.disabled-text p {
2023-09-20 08:25:43 UTC	1849	IN	Data Raw: 71 6c 2d 66 69 6c 6c 2c 0a 2e 71 6c 2d 73 6e 6f 77 20 2e 71 6c 2d 73 74 72 6f 6b 65 2e 71 6c 2d 66 69 6c 6c 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 34 34 34 3b 20 7d 0a 0a 2e 71 6c 2d 73 6e 6f 77 20 2e 71 6c 2d 65 6d 70 74 79 20 7b 0a 20 20 66 69 6c 6c 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 71 6c 2d 73 6e 6f 77 20 2e 71 6c 2d 65 76 65 6e 20 7b 0a 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 20 7d 0a 0a 2e 71 6c 2d 73 6e 6f 77 20 2e 71 6c 2d 74 68 69 6e 2c 0a 2e 71 6c 2d 73 6e 6f 77 20 2e 71 6c 2d 73 74 72 6f 6b 65 2e 71 6c 2d 74 68 69 6e 20 7b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 31 3b 20 7d 0a 0a 2e 71 6c 2d 73 6e 6f 77 20 2e 71 6c 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 34 3b 20 7d 0a Data Ascii: ql-fill,.ql-snow .ql-stroke.ql-fill { fill: #444; }.ql-snow .ql-empty { fill: none; }.ql-snow .ql-even { fill-rule: evenodd; }.ql-snow .ql-thin,.ql-snow .ql-stroke.ql-thin { stroke-width: 1; }.ql-snow .ql-transparent { opacity: 0.4; }
2023-09-20 08:25:43 UTC	1881	IN	Data Raw: 0a 0a 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 69 6e 64 65 6e 74 2d 37 3a 6e 6f 74 28 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 29 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 31 65 6d 3b 20 7d 0a 0a 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 2e 71 6c 2d 69 6e 64 65 6e 74 2d 37 3a 6e 6f 74 28 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 29 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 32 2e 35 65 6d 3b 20 7d 0a 0a 2e 71 6c 2d 65 64 69 74 6f 72 20 2e 71 6c 2d 69 6e 64 65 6e 74 2d 37 2e 71 6c 2d 64 69 72 65 63 74 69 6f 6e 2d 72 74 6c 2e 71 6c 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 31 65 6d 3b 20 7d 0a 0a 2e 71 6c 2d 65 64 69 74 6f 72 20 6c 69 2e 71 6c 2d Data Ascii: .ql-editor .ql-indent-7:not(.ql-direction-rtl) { padding-left: 21em; }.ql-editor li.ql-indent-7:not(.ql-direction-rtl) { padding-left: 22.5em; }.ql-editor .ql-indent-7.ql-direction-rtl.ql-align-right { padding-right: 21em; }.ql-editor li.ql-
2023-09-20 08:25:43 UTC	1897	IN	Data Raw: 71 6c 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2e 71 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 71 6c 2d 70 69 63 6b 65 72 2d 69 74 65 6d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 7d 0a 0a 2e 71 6c 2d 62 75 62 62 6c 65 20 2e 71 6c 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2e 71 6c 2d 63 6f 6c 6f 72 20 2e 71 6c 2d 70 69 63 6b 65 72 2d 69 74 65 6d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 7d 0a 0a 2e 71 6c 2d 62 75 62 62 6c 65 20 2e 71 6c 2d 74 6f 6f 6c 62 61 72 20 2e 71 6c 2d 66 6f 72 6d 61 74 73 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 20 31 32 70 78 20 38 70 78 20 30 70 78 3b 20 7d 0a 0a 2e 71 6c 2d 62 75 62 62 6c 65 20 2e 71 6c 2d 74 6f 6f 6c 62 61 72 20 2e 71 6c Data Ascii: ql-color-picker.ql-background .ql-picker-item { background-color: #fff; }.ql-bubble .ql-color-picker.ql-color .ql-picker-item { background-color: #000; }.ql-bubble .ql-toolbar .ql-formats { margin: 8px 12px 8px 0px; }.ql-bubble .ql-toolbar .ql

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (695), with no line terminators
Category:	dropped
Size (bytes):	698
Entropy (8bit):	5.221024950253452
Encrypted:	false
SSDEEP:	12:MM3i+mB7JhV2diUlUY8CbjKCdhz5RH04pXVlq+7B:p5mB7JT2diUlUY8ChJ5x2+
MD5:	34AEF68E52CAF0B090621FD52A33C386
SHA1:	1D7BEAE1524AF0714831E2189CD6BBCCE2936C71
SHA-256:	5D062DE34C187E1845FC6FF87682BF982D0EE81893AB7AD32EEE8FB701181737
SHA-512:	7BE4B2B08C42AE9E1A38C280AC459E5207B3A5CA46528325501AA5C950097656DE4E845472E212C89CFE89162F3FCA1B7B7AE520FE48C31515EE505F74685A14
Malicious:	false
Reputation:	low
Preview:	.<?xml version='1.0' encoding='utf-8'?><m:layout id='9d237089-7db6-4264-bc21-f7393e210a50' xmlns='http://www.w3.org/1999/xhtml' xmlns:m='http://schemas.mendix.com/forms/1.0'><m:arguments><m:argument><div data-mendix-id='212.Layouts.EmptyLayout.scrollContainer1' data-mendix-type='mxui.widget.HorizontalScrollContainer' data-mendix-props='"fixed":true,"config":[{"position":"center"}]' class='mx-scrollcontainer mx-scrollcontainer-horizontal mx-scrollcontainer-fixed'><div class='mx-scrollcontainer-center '><div class='mx-scrollcontainer-wrapper'><div data-mx-placeholder='b95c42fc-fd0b-4b80-a145-f64c793bf57d' class='mx-placeholder'></div></div></div></div></m:argument></m:arguments></m:layout>

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5306
Entropy (8bit):	3.923089810879598
Encrypted:	false
SSDEEP:	96:3oB+aUqUb/DUqNHD8arXla4CGGuqqQpu4ggrKopoknSmgygfo0gJNw/Fq:YBQDTYaRhPGu1LUr/69mgy+o0gziq
MD5:	1B180AC08092E501147A6D05A57DC09C
SHA1:	D7F06B5D4DE4D6284701379908F9486AC525C3EA
SHA-256:	62F30CD0F264A0B0BFCA7664FB6D74501BD585FE37F3ABB49C7A1A18695657FD
SHA-512:	C8054CA2C16C46B454067343532A9233F63FBC060321A3F8C68BE79FC6262CBEDE867126BC76AD52F201B9B60FA75A7D8D77826F7618ACF7077864B417EA43C0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="273" height="60" viewBox="0 0 273 60"><g fill="#DF0020" fill-rule="nonzero"><path d="M54.3419675 56.0508151c-.3368304-.7894481-.4491072-2.3683443-.4491072-4.3983537v-4.6239103c0-4.3983537-.5613839-7.5561461-1.571875-9.8117121-1.0104912-2.1427877-3.817411-4.1727971-8.3084827-5.9772499 2.9191966-.7894481 5.2770093-2.255566 7.1857147-4.7366886 1.7964287-2.4811226 2.694643-5.638915 2.694643-9.6989338 0-5.1878018-1.4595983-9.13504231-4.3787949-11.7289432C45.5843777 1.6916745 38.5109398 0 28.5183053 0H0v58.9830508h19.1993315V38.4574003h2.9191966c2.2455358 0 4.1542413.1127783 5.5015628.2255566h.2245536c1.4595983.1127783 2.8069198.3383349 3.9296877.6766698 2.2455359.7894481 3.3683038 3.9472405 3.7051342 9.3605989.2245536 5.5261367.561384 8.9094856 1.0104911 10.2628252h19.5361619v-1.6916745c-.8982143.1127783-1.4595983-.4511132-1.6841519-1.2405612M34.4689753 23.683443c-1.3473215 1.2405613-3.5928574 1.8044528-6.8488844 1.8044528H19.1993315V13.7589526

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4692
Entropy (8bit):	5.340678966702
Encrypted:	false
SSDEEP:	96:cWOEaPOEaMVc+oyOEaDNcWOXaAfOXaAdVc+oyOXaAWNcWOpaAvOpaAtVc+oyOpam:chY2yayi0hMIoEP8+hL9w
MD5:	B323E214D02FFE050449A63DCF8AC1AE
SHA1:	F7D2E5B82B22EC52A58249F939EDF8FC6472D317
SHA-256:	4273DED0458481F8F0635E8973F625739021A3EBB26C37B7511D7B2AC5F30204
SHA-512:	D9899464B93308D5E1ADCAEE9A020A587D5B8ABB8721758C3344034D95A5BAC7FB1C19B81BD10153C258741C76A2EA523609EBF826DD3B057CBB342B93E34DF0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Barlow:wght@400;500;700;900&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Barlow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_A8s52Hs.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Barlow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_Ass52Hs.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Barlow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2) format('woff2');. unicode-range: U+0000-00FF, U+013

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1395
Entropy (8bit):	4.984073487320348
Encrypted:	false
SSDEEP:	24:1pwmvN0Wz6Mn3HcQtyCiyneoabkcSMlIkOjl9MZFvqM5FmcweMShQyj:1/N0OMAO/3YzMlIk0MZFiM+PShQ6
MD5:	DC4D1D67E7D66F8CB7E01F62EF67590A
SHA1:	242FA081809F759964040957DE552D7EDE164739
SHA-256:	096E00B5E12EF841A0C39A96039BACDD360F44CF9015C757F8FC4FFDD85348B1
SHA-512:	CB584307D84D2ADB4A65BBE3A32E765ECC764224B5FE6AD2C0D2CD60C48841361F710827C5BA7312F4C559035E6EAF5FE92E2560B1AFF84E3264640657E8E20C
Malicious:	false
Reputation:	low
URL:	https://myraben.com/app.css?638259668588883546
Preview:	.flexSameWidth {display: flex; flex-wrap: wrap;}...appsAccessBox {flex-grow: 1; color: #fff; margin-right: 15px ; max-width: 15%;}...appsAccessBox:last-child {margin: 0;}...appsAccessBox input, .appsAccessBox .appBox .form-control-static {position: absolute !important; right: 10px !important; top:14px !important; }...appsAccessBox .form-group {margin:0}...appsAccessBox .appBox {margin: 0;}...appsAccessBox .appBox label {margin: 0; padding: 4px 0;}...appsAccessBox .disabled {opacity: 0.6;}...appsAccessBox .appBox::before {background-color: #f7f7f7 !important;}...appsAccessBox .appBox .form-control-static {border:0; padding: 0; color: #fff;}...appDashboard .appBox::before {background-size: 60px auto !important; width: 70px; height: 60px; background-color: #f7f7f7; }...appDashboard .appBox {padding:10px 10px 10px 90px; line-height: 15px; max-height: 60px; overflow: hidden; white-space: nowrap;}...appDashboard .mx-templategrid-item {background: none; border: 0; padding: 0; display: block;}

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:43 UTC	1688	OUT	GET /xas/ HTTP/1.1 Host: myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:43 UTC	1721	IN	HTTP/1.1 401 Unauthorized Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:43 GMT Transfer-Encoding: chunked Connection: close
2023-09-20 08:25:43 UTC	1721	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:46 UTC	4067	OUT	GET /widgets/nls/widgets_en-us.js?638259668588883546 HTTP/1.1 Host: myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://myraben.com/index3.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:46 UTC	4068	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:46 GMT Content-Type: application/javascript Content-Length: 146 Last-Modified: Wed, 26 Jul 2023 09:14:50 GMT Connection: close ETag: "64c0e40a-92" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:46 UTC	4068	IN	Data Raw: 64 65 66 69 6e 65 28 27 77 69 64 67 65 74 73 2f 6e 6c 73 2f 77 69 64 67 65 74 73 5f 65 6e 2d 75 73 27 2c 7b 0a 27 64 69 6a 69 74 2f 6e 6c 73 2f 6c 6f 61 64 69 6e 67 27 3a 7b 22 6c 6f 61 64 69 6e 67 53 74 61 74 65 22 3a 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 2c 22 65 72 72 6f 72 53 74 61 74 65 22 3a 22 53 6f 72 72 79 2c 20 61 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 22 2c 22 5f 6c 6f 63 61 6c 69 7a 65 64 22 3a 7b 7d 7d 0a 7d 29 3b Data Ascii: define('widgets/nls/widgets_en-us',{'dijit/nls/loading':{"loadingState":"Loading...","errorState":"Sorry, an error occurred","_localized":{}}});

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:47 UTC	4068	OUT	GET /pages/en_GB/Redirections/Redirect.page.xml?638259668588883546 HTTP/1.1 Host: myraben.com Connection: keep-alive x-mx-reqtoken: 1695198345542-2 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" x-csrf-token: d4ca792e-4c22-4469-97a5-e9da094e9470 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myraben.com/index3.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:47 UTC	4069	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:47 GMT Content-Type: text/xml Content-Length: 1096 Last-Modified: Wed, 26 Jul 2023 09:14:32 GMT Connection: close ETag: "64c0e3f8-448" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:47 UTC	4069	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 75 74 66 2d 38 27 3f 3e 3c 6d 3a 70 61 67 65 20 69 64 3d 27 33 61 62 65 32 36 62 34 2d 32 34 63 37 2d 34 35 38 36 2d 39 33 38 62 2d 64 37 34 35 30 65 64 37 31 65 32 64 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 74 69 74 6c 65 3d 27 27 20 78 6d 6c 6e 73 3a 6d 3d 27 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 65 6e 64 69 78 2e 63 6f 6d 2f 66 6f 72 6d 73 2f 31 2e 30 27 3e 3c 6d 3a 6c 61 79 6f 75 74 73 3e 3c 6d 3a 6c 61 79 6f 75 74 20 70 61 74 68 3d 27 4c 61 79 6f 75 74 73 2f 45 6d 70 74 79 4c 61 79 6f 75 74 2e 6c 61 79 6f 75 74 2e 78 6d 6c 27 3e 3c 2f 6d 3a 6c 61 79 6f 75 74 3e 3c 2f Data Ascii: <?xml version='1.0' encoding='utf-8'?><m:page id='3abe26b4-24c7-4586-938b-d7450ed71e2d' xmlns='http://www.w3.org/1999/xhtml' title='' xmlns:m='http://schemas.mendix.com/forms/1.0'><m:layouts><m:layout path='Layouts/EmptyLayout.layout.xml'></m:layout></

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:49 UTC	4070	OUT	GET /images/logo_inverse.svg HTTP/1.1 Host: myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://myraben.com/raben.css?638259668588883546 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:49 UTC	4073	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:49 GMT Content-Type: image/svg+xml Content-Length: 5306 Last-Modified: Fri, 15 Apr 2022 12:40:04 GMT Connection: close ETag: "625967a4-14ba" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:49 UTC	4073	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 37 33 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 37 33 20 36 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 34 2e 33 34 31 39 36 37 35 20 35 36 2e 30 35 30 38 31 35 31 63 2d 2e 33 33 36 38 33 30 34 2d 2e 37 38 39 34 34 38 31 2d 2e 34 34 39 31 30 37 32 2d 32 2e 33 36 38 33 34 34 33 2d 2e 34 34 39 31 30 37 32 2d 34 2e 33 39 38 33 35 33 37 76 2d 34 2e 36 32 33 39 31 30 33 63 30 2d 34 2e 33 39 38 33 35 33 37 2d 2e 35 36 31 33 38 33 39 2d 37 2e 35 35 36 31 34 36 31 2d 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="273" height="60" viewBox="0 0 273 60"><g fill="#FFFFFF" fill-rule="nonzero"><path d="M54.3419675 56.0508151c-.3368304-.7894481-.4491072-2.3683443-.4491072-4.3983537v-4.6239103c0-4.3983537-.5613839-7.5561461-1

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:49 UTC	4071	OUT	GET /pages/en_GB/Redirections/Redirect.page.xml?638259668588883546 HTTP/1.1 Host: myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:49 UTC	4079	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:49 GMT Content-Type: text/xml Content-Length: 1096 Last-Modified: Wed, 26 Jul 2023 09:14:32 GMT Connection: close ETag: "64c0e3f8-448" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:49 UTC	4079	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 75 74 66 2d 38 27 3f 3e 3c 6d 3a 70 61 67 65 20 69 64 3d 27 33 61 62 65 32 36 62 34 2d 32 34 63 37 2d 34 35 38 36 2d 39 33 38 62 2d 64 37 34 35 30 65 64 37 31 65 32 64 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 74 69 74 6c 65 3d 27 27 20 78 6d 6c 6e 73 3a 6d 3d 27 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 65 6e 64 69 78 2e 63 6f 6d 2f 66 6f 72 6d 73 2f 31 2e 30 27 3e 3c 6d 3a 6c 61 79 6f 75 74 73 3e 3c 6d 3a 6c 61 79 6f 75 74 20 70 61 74 68 3d 27 4c 61 79 6f 75 74 73 2f 45 6d 70 74 79 4c 61 79 6f 75 74 2e 6c 61 79 6f 75 74 2e 78 6d 6c 27 3e 3c 2f 6d 3a 6c 61 79 6f 75 74 3e 3c 2f Data Ascii: <?xml version='1.0' encoding='utf-8'?><m:page id='3abe26b4-24c7-4586-938b-d7450ed71e2d' xmlns='http://www.w3.org/1999/xhtml' title='' xmlns:m='http://schemas.mendix.com/forms/1.0'><m:layouts><m:layout path='Layouts/EmptyLayout.layout.xml'></m:layout></

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:37 UTC	4	OUT	GET /link/ShipmentInformation?ShipmentNumber=528234000006530 HTTP/1.1 Host: myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-09-20 08:25:38 UTC	4	IN	HTTP/1.1 303 See Other Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:38 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; Path=/; Secure; HttpOnly; SameSite=Strict Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; Path=/; Secure; HttpOnly; SameSite=Strict Location: /index3.html X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000;
2023-09-20 08:25:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:49 UTC	4072	OUT	GET /pages/en_GB/Layouts/EmptyLayout.layout.xml?638259668588883546 HTTP/1.1 Host: myraben.com Connection: keep-alive x-mx-reqtoken: 1695198346855-3 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" x-csrf-token: d4ca792e-4c22-4469-97a5-e9da094e9470 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myraben.com/index3.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:49 UTC	4078	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:49 GMT Content-Type: text/xml Content-Length: 698 Last-Modified: Wed, 26 Jul 2023 09:14:32 GMT Connection: close ETag: "64c0e3f8-2ba" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:49 UTC	4078	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 75 74 66 2d 38 27 3f 3e 3c 6d 3a 6c 61 79 6f 75 74 20 69 64 3d 27 39 64 32 33 37 30 38 39 2d 37 64 62 36 2d 34 32 36 34 2d 62 63 32 31 2d 66 37 33 39 33 65 32 31 30 61 35 30 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 6d 3d 27 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 65 6e 64 69 78 2e 63 6f 6d 2f 66 6f 72 6d 73 2f 31 2e 30 27 3e 3c 6d 3a 61 72 67 75 6d 65 6e 74 73 3e 3c 6d 3a 61 72 67 75 6d 65 6e 74 3e 3c 64 69 76 20 64 61 74 61 2d 6d 65 6e 64 69 78 2d 69 64 3d 27 32 31 32 2e 4c 61 79 6f 75 74 73 2e 45 6d 70 74 79 4c 61 79 6f 75 74 2e 73 63 72 6f 6c 6c 43 6f 6e Data Ascii: <?xml version='1.0' encoding='utf-8'?><m:layout id='9d237089-7db6-4264-bc21-f7393e210a50' xmlns='http://www.w3.org/1999/xhtml' xmlns:m='http://schemas.mendix.com/forms/1.0'><m:arguments><m:argument><div data-mendix-id='212.Layouts.EmptyLayout.scrollCon

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:50 UTC	4080	OUT	GET /pages/en_GB/Layouts/EmptyLayout.layout.xml?638259668588883546 HTTP/1.1 Host: myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:51 UTC	4082	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:50 GMT Content-Type: text/xml Content-Length: 698 Last-Modified: Wed, 26 Jul 2023 09:14:32 GMT Connection: close ETag: "64c0e3f8-2ba" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:51 UTC	4083	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 75 74 66 2d 38 27 3f 3e 3c 6d 3a 6c 61 79 6f 75 74 20 69 64 3d 27 39 64 32 33 37 30 38 39 2d 37 64 62 36 2d 34 32 36 34 2d 62 63 32 31 2d 66 37 33 39 33 65 32 31 30 61 35 30 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 6d 3d 27 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 65 6e 64 69 78 2e 63 6f 6d 2f 66 6f 72 6d 73 2f 31 2e 30 27 3e 3c 6d 3a 61 72 67 75 6d 65 6e 74 73 3e 3c 6d 3a 61 72 67 75 6d 65 6e 74 3e 3c 64 69 76 20 64 61 74 61 2d 6d 65 6e 64 69 78 2d 69 64 3d 27 32 31 32 2e 4c 61 79 6f 75 74 73 2e 45 6d 70 74 79 4c 61 79 6f 75 74 2e 73 63 72 6f 6c 6c 43 6f 6e Data Ascii: <?xml version='1.0' encoding='utf-8'?><m:layout id='9d237089-7db6-4264-bc21-f7393e210a50' xmlns='http://www.w3.org/1999/xhtml' xmlns:m='http://schemas.mendix.com/forms/1.0'><m:arguments><m:argument><div data-mendix-id='212.Layouts.EmptyLayout.scrollCon

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:50 UTC	4081	OUT	GET /images/logo_inverse.svg HTTP/1.1 Host: myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:51 UTC	4083	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:50 GMT Content-Type: image/svg+xml Content-Length: 5306 Last-Modified: Fri, 15 Apr 2022 12:40:04 GMT Connection: close ETag: "625967a4-14ba" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:51 UTC	4084	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 37 33 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 37 33 20 36 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 34 2e 33 34 31 39 36 37 35 20 35 36 2e 30 35 30 38 31 35 31 63 2d 2e 33 33 36 38 33 30 34 2d 2e 37 38 39 34 34 38 31 2d 2e 34 34 39 31 30 37 32 2d 32 2e 33 36 38 33 34 34 33 2d 2e 34 34 39 31 30 37 32 2d 34 2e 33 39 38 33 35 33 37 76 2d 34 2e 36 32 33 39 31 30 33 63 30 2d 34 2e 33 39 38 33 35 33 37 2d 2e 35 36 31 33 38 33 39 2d 37 2e 35 35 36 31 34 36 31 2d 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="273" height="60" viewBox="0 0 273 60"><g fill="#FFFFFF" fill-rule="nonzero"><path d="M54.3419675 56.0508151c-.3368304-.7894481-.4491072-2.3683443-.4491072-4.3983537v-4.6239103c0-4.3983537-.5613839-7.5561461-1

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:51 UTC	4089	OUT	GET /index.html HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://myraben.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7
2023-09-20 08:25:51 UTC	4090	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:51 GMT Content-Type: text/html Content-Length: 2565 Last-Modified: Thu, 07 Sep 2023 10:41:26 GMT Connection: close ETag: "64f9a8d6-a05" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:51 UTC	4090	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 6d 79 52 61 62 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 Data Ascii: <!doctype html><html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <title>myRaben</title> <meta name="viewport" content="width=device-width, user-scalable=no, initial-sca

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Windows Analysis Report
https://myraben.com/link/ShipmentInformation?ShipmentNumber=528234000006530

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:51 UTC	4094	OUT	GET /raben.css?638296872624383688 HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oftc.myraben.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7
2023-09-20 08:25:52 UTC	4112	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:52 GMT Content-Type: text/css Content-Length: 77054 Last-Modified: Thu, 05 Jan 2023 14:09:36 GMT Connection: close ETag: "63b6da20-12cfe" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:52 UTC	4112	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 42 61 72 6c 6f 77 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 37 30 30 3b 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0a 0a 0a 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 20 20 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 2d 6c 61 72 67 65 3a 20 33 30 70 78 3b 0a 20 20 20 20 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 3a 20 31 35 70 78 3b 0a 20 20 20 20 2d 2d 68 65 61 64 65 72 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 20 20 20 20 2d 2d 67 72 65 79 2d 63 6f 6c 6f 72 3a 23 34 37 34 62 34 64 3b 0a 20 20 20 20 Data Ascii: @import url('https://fonts.googleapis.com/css2?family=Barlow:wght@400;500;700;900&display=swap');:root { --padding-size: 20px; --padding-size-large: 30px; --padding-size-small: 15px; --header-height: 60px; --grey-color:#474b4d;
2023-09-20 08:25:52 UTC	4208	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 7d 0a 2e 77 65 62 73 69 74 65 48 65 61 64 65 72 53 74 79 6c 65 3a 62 65 66 6f 72 65 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 72 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 35 30 76 77 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 72 61 62 65 6e 2d 63 6f 6c 6f 72 29 3b 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 20 74 6f 70 3a 30 3b 20 7d 0a 2e 77 68 53 74 79 6c 65 20 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 76 61 72 28 2d 2d 77 65 62 73 69 74 65 2d 73 65 63 6f 6e 64 6d 65 6e 75 2d 68 65 69 67 68 74 29 3b 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 2e 68 31 2c 20 2e 68 32 2c 20 2e 68 33 2c 20 Data Ascii: portant;}.websiteHeaderStyle:before {position: absolute; height: 100%; right: 100%; width: 50vw; background-color: var(--raben-color); content: ''; top:0; }.whStyle {padding-top: var(--website-secondmenu-height);}h1, h2, h3, h4, h5, h6, .h1, .h2, .h3,
2023-09-20 08:25:52 UTC	4256	IN	Data Raw: 2e 6d 78 2d 73 63 72 6f 6c 6c 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 6d 78 2d 73 63 72 6f 6c 6c 63 6f 6e 74 61 69 6e 65 72 2d 6f 70 65 6e 29 20 2e 6c 65 66 74 4d 65 6e 75 20 7b 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 6c 65 66 74 2d 6d 65 6e 75 2d 77 69 64 74 68 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 20 7a 2d 69 6e 64 65 78 3a 20 75 6e 73 65 74 3b 7d 0a 2e 6c 65 66 74 4d 65 6e 75 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 0a 2e 6c 65 66 74 4d 65 6e 75 20 6c 69 20 7b 62 6f 72 64 65 72 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d Data Ascii: .mx-scrollcontainer:not(.mx-scrollcontainer-open) .leftMenu {width: var(--left-menu-width) !important; box-shadow: none; z-index: unset;}.leftMenu {overflow: visible !important; position: relative;}.leftMenu li {border:0 !important; position: relative;}
2023-09-20 08:25:52 UTC	4320	IN	Data Raw: 69 67 61 74 69 6f 6e 74 72 65 65 20 61 3a 6c 61 6e 67 28 75 61 29 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 7d 0a 0a 0a 2f 2a 20 57 65 62 73 69 74 65 20 74 6f 70 20 6d 65 6e 75 20 2a 2f 0a 2e 6c 61 79 6f 75 74 2d 61 74 6c 61 73 20 2e 77 65 62 73 69 74 65 48 65 61 64 65 72 20 7b 20 62 6f 72 64 65 72 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 7d 0a 2e 77 65 62 73 69 74 65 48 65 61 64 65 72 20 2e 74 6f 70 62 61 72 2d 63 6f 6e 74 65 6e 74 20 7b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 77 65 62 73 69 74 65 2d 6d 65 6e 75 2d 68 65 69 67 68 74 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 Data Ascii: igationtree a:lang(ua) {font-family: 'Open Sans', sans-serif;}/* Website top menu */.layout-atlas .websiteHeader { border:0 !important; height: auto; z-index: 3;}.websiteHeader .topbar-content {height:var(--website-menu-height); background-color: var
2023-09-20 08:25:52 UTC	4336	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 7d 0a 2e 70 61 64 64 69 6e 67 4c 65 66 74 4c 61 72 67 65 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 70 61 64 64 69 6e 67 52 69 67 68 74 4c 61 72 67 65 20 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 0a 2e 6d 61 72 67 69 6e 20 7b 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 6d 61 72 67 69 6e 56 65 72 74 69 63 61 6c 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 20 Data Ascii: portant;}.paddingLeftLarge {padding-left:var(--padding-size-large) !important;}.paddingRightLarge {padding-right:var(--padding-size-large) !important;}.margin {margin:var(--padding-size) !important;}.marginVertical {margin-bottom:var(--padding-size)

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:52 UTC	4094	OUT	GET /app.css?638296872624383688 HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://oftc.myraben.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7
2023-09-20 08:25:52 UTC	4128	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:52 GMT Content-Type: text/css Content-Length: 49112 Last-Modified: Wed, 17 May 2023 06:55:06 GMT Connection: close ETag: "64647a4a-bfd8" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:52 UTC	4128	IN	Data Raw: 2e 70 72 6f 66 69 6c 65 2d 70 68 6f 6e 65 20 2e 73 74 61 74 75 73 4c 61 62 65 6c 73 20 2e 73 74 61 74 75 73 4c 61 62 65 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 7d 0d 0a 2e 73 74 61 74 75 73 4c 61 62 65 6c 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 73 74 61 74 75 73 4c 61 62 65 6c 20 6c 61 62 65 6c 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 73 68 69 70 6d 65 6e 74 53 74 61 74 75 73 20 7b 77 69 64 74 68 3a 20 37 32 35 70 78 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 0d 0a 2e 70 72 6f 66 69 6c Data Ascii: .profile-phone .statusLabels .statusLabel{padding:4px;}.statusLabel {text-align: center; padding-top: 0 !important;}.statusLabel label {font-weight: 600 !important; padding-top: 0 !important;}.shipmentStatus {width: 725px; max-width: 100%;}.profil
2023-09-20 08:25:52 UTC	4240	IN	Data Raw: 44 5a 2f 68 58 34 68 5a 31 52 43 4a 71 66 30 72 4e 63 41 4a 2b 78 4f 34 79 6a 2b 63 42 31 79 62 5a 4a 68 6e 46 53 37 64 73 30 50 32 45 67 47 41 65 72 53 77 51 43 72 57 30 43 62 45 32 79 37 59 78 36 52 53 43 71 5a 7a 73 76 6d 43 77 57 31 43 39 79 6f 2f 6d 73 58 75 52 43 57 30 57 77 58 47 69 72 43 68 5a 48 75 35 6c 31 38 6d 32 71 31 2b 30 43 39 31 4f 47 4b 33 6c 50 30 76 54 2b 2b 73 43 65 36 67 44 64 4e 4e 67 7a 77 6b 76 61 74 70 55 30 5a 54 53 54 56 62 49 68 53 70 65 74 31 62 4f 76 55 6a 31 4e 67 72 55 74 62 78 4f 56 30 45 79 65 6f 49 66 39 45 58 55 45 47 36 36 58 31 47 74 61 2b 6a 49 30 42 36 61 4a 35 73 41 30 30 52 79 59 4a 70 6f 44 55 30 64 72 4f 54 41 39 74 46 32 67 34 63 44 30 30 48 6f 4f 54 43 38 36 44 6b 77 76 6a 68 79 59 65 6b 79 42 6f 51 4e 54 78 Data Ascii: DZ/hX4hZ1RCJqf0rNcAJ+xO4yj+cB1ybZJhnFS7ds0P2EgGAerSwQCrW0CbE2y7Yx6RSCqZzsvmCwW1C9yo/msXuRCW0WwXGirChZHu5l18m2q1+0C91OGK3lP0vT++sCe6gDdNNgzwkvatpU0ZTSTVbIhSpet1bOvUj1NgrUtbxOV0EyeoIf9EXUEG66X1Gta+jI0B6aJ5sA00RyYJpoDU0drOTA9tF2g4cD00HoOTC86DkwvjhyYekyBoQNTx
2023-09-20 08:25:52 UTC	4272	IN	Data Raw: 68 62 6f 61 72 64 2d 70 61 72 74 20 7b 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 61 75 74 6f 20 34 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 70 72 6f 66 69 6c 65 2d 70 68 6f 6e 65 20 2e 64 61 73 68 62 6f 61 72 64 2d 69 6e 2d 70 72 6f 67 72 65 73 73 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 61 75 74 6f 20 33 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 70 72 6f 66 69 6c 65 2d 70 68 6f 6e 65 20 2e 64 61 73 68 62 6f 61 72 64 2d 76 61 6c 75 65 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 7d 0d 0a 2e 70 72 6f 66 69 Data Ascii: hboard-part { background-size: auto 40px; background-position: 0 10px !important;}.profile-phone .dashboard-in-progress {background-size: auto 30px; background-position: 0 20px !important;}.profile-phone .dashboard-value {margin-bottom: 0;}.profi
2023-09-20 08:25:52 UTC	4288	IN	Data Raw: 74 61 74 75 73 63 6f 6d 70 6c 65 74 65 64 2c 20 2e 70 72 6f 66 69 6c 65 2d 64 65 73 6b 74 6f 70 20 2e 77 68 53 74 61 74 75 73 4c 6f 61 64 65 64 2c 20 2e 70 72 6f 66 69 6c 65 2d 64 65 73 6b 74 6f 70 20 2e 77 73 49 6e 62 6f 75 6e 64 4e 65 77 2c 20 2e 70 72 6f 66 69 6c 65 2d 64 65 73 6b 74 6f 70 20 2e 77 73 49 6e 62 6f 75 6e 64 50 72 6f 67 72 65 73 73 2c 20 2e 70 72 6f 66 69 6c 65 2d 64 65 73 6b 74 6f 70 20 2e 77 73 49 6e 62 6f 75 6e 64 43 6f 6d 70 6c 65 74 65 64 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 20 61 75 74 6f 3b 7d 0d 0a 7d 0d 0a 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 0d 0a 20 20 20 20 2e 61 6e 6f 6e 79 6d 6f 75 73 4c 61 6e 67 20 2e 62 74 6e 20 7b 70 61 64 64 69 6e 67 Data Ascii: tatuscompleted, .profile-desktop .whStatusLoaded, .profile-desktop .wsInboundNew, .profile-desktop .wsInboundProgress, .profile-desktop .wsInboundCompleted {background-size: 100% auto;}}@media (max-width: 600px) { .anonymousLang .btn {padding

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:56 UTC	5693	OUT	GET /metamodel.json?638296872624383688 HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive x-mx-reqtoken: 1695198354303-0 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oftc.myraben.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7; originURI=/login.html
2023-09-20 08:25:56 UTC	5696	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:56 GMT Content-Type: application/json Content-Length: 40543 Last-Modified: Thu, 07 Sep 2023 10:42:54 GMT Connection: close ETag: "64f9a92e-9e5f" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:56 UTC	5696	IN	Data Raw: 7b 22 6c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 5f 47 42 22 2c 22 70 6c 5f 50 4c 22 2c 22 64 65 5f 44 45 22 2c 22 68 75 5f 48 55 22 2c 22 73 6b 5f 53 4b 22 2c 22 63 73 5f 43 5a 22 2c 22 75 6b 5f 55 41 22 2c 22 6e 6c 5f 4e 4c 22 2c 22 69 74 5f 49 54 22 2c 22 65 6c 5f 47 52 22 2c 22 6c 76 5f 4c 56 22 2c 22 6c 74 5f 4c 54 22 2c 22 65 74 5f 45 45 22 2c 22 72 6f 5f 52 4f 22 2c 22 62 67 5f 42 47 22 5d 2c 22 73 79 73 74 65 6d 54 65 78 74 73 22 3a 7b 22 6d 65 6e 64 69 78 2e 6c 69 62 2e 4d 78 44 61 74 61 53 6f 75 72 63 65 2e 73 74 61 74 75 73 22 3a 5b 22 7b 31 7d 20 74 6f 20 7b 32 7d 20 6f 66 20 7b 33 7d 22 2c 22 7b 31 7d 20 64 6f 20 7b 32 7d 20 7a 20 7b 33 7d 22 2c 22 7b 31 7d 20 62 69 73 20 7b 32 7d 20 76 6f 6e 20 7b 33 7d 22 2c 22 7b 31 7d 2d 74 c5 91 6c 20 Data Ascii: {"languages":["en_GB","pl_PL","de_DE","hu_HU","sk_SK","cs_CZ","uk_UA","nl_NL","it_IT","el_GR","lv_LV","lt_LT","et_EE","ro_RO","bg_BG"],"systemTexts":{"mendix.lib.MxDataSource.status":["{1} to {2} of {3}","{1} do {2} z {3}","{1} bis {2} von {3}","{1}-tl
2023-09-20 08:25:56 UTC	5712	IN	Data Raw: 6e 6f 75 67 68 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 69 6e 20 61 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 2e 22 2c 22 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 65 6e 6f 75 67 68 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 69 6e 20 61 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 2e 22 2c 22 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 65 6e 6f 75 67 68 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 Data Ascii: nough permissions to access this page. You may try to login as a different user.","You don't have enough permissions to access this page. You may try to login as a different user.","You don't have enough permissions to access this page. You may try to log
2023-09-20 08:25:56 UTC	5728	IN	Data Raw: 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 Data Ascii: le?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure y

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:38 UTC	5	OUT	GET /index3.html HTTP/1.1 Host: myraben.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=0d7a7323-1347-48fb-8479-4b86fe01ff5d; XASID=0.81859b25-9dbc-4263-8dd5-10e95e2d08ff
2023-09-20 08:25:38 UTC	6	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:38 GMT Content-Type: text/html Content-Length: 2565 Last-Modified: Wed, 26 Jul 2023 09:14:24 GMT Connection: close ETag: "64c0e3f0-a05" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:38 UTC	6	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 6d 79 52 61 62 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 Data Ascii: <!doctype html><html> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <title>myRaben</title> <meta name="viewport" content="width=device-width, user-scalable=no, initial-sca

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:56 UTC	5694	OUT	GET /favicon.ico HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://oftc.myraben.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7; originURI=/login.html
2023-09-20 08:25:56 UTC	5694	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:56 GMT Content-Type: image/x-icon Content-Length: 894 Last-Modified: Thu, 21 Apr 2022 13:18:28 GMT Connection: close ETag: "626159a4-37e" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:56 UTC	5695	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 18 00 68 03 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 18 00 00 00 00 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff df dd f6 c4 c0 ee c5 c1 ef d4 d1 f3 ff ff ff ff ff ff fe fe ff db d9 f5 c4 c0 ef c4 c1 ee dd db f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 70 67 d7 13 00 be 10 00 bd 49 3a cc fe fe ff ff ff ff f7 f6 fd 48 3b cc 12 00 be 0b 00 bc b2 ac e9 fd fd fe ff ff ff ff Data Ascii: h( @pgI:H;

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:56 UTC	5735	OUT	POST /xas/ HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive Content-Length: 237 x-mx-reqtoken: 1695198355394-1 accept: application/json content-type: application/json sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://oftc.myraben.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oftc.myraben.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7; originURI=/login.html
2023-09-20 08:25:56 UTC	5736	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 22 3a 22 67 65 74 5f 73 65 73 73 69 6f 6e 5f 64 61 74 61 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 68 79 62 72 69 64 22 3a 66 61 6c 73 65 2c 22 6f 66 66 6c 69 6e 65 22 3a 74 72 75 65 2c 22 72 65 66 65 72 72 65 72 22 3a 6e 75 6c 6c 2c 22 70 72 6f 66 69 6c 65 22 3a 22 22 2c 22 74 69 6d 65 7a 6f 6e 65 6f 66 66 73 65 74 22 3a 2d 31 32 30 2c 22 74 69 6d 65 7a 6f 6e 65 49 64 22 3a 22 45 75 72 6f 70 65 2f 42 65 72 6c 69 6e 22 2c 22 70 72 65 66 65 72 72 65 64 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 2d 55 53 22 2c 22 65 6e 22 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 32 7d 2c 22 70 72 6f 66 69 6c 65 64 61 74 61 22 3a 7b 22 31 36 39 35 31 39 38 33 35 34 33 30 33 2d 30 22 3a 31 30 30 39 7d 7d Data Ascii: {"action":"get_session_data","params":{"hybrid":false,"offline":true,"referrer":null,"profile":"","timezoneoffset":-120,"timezoneId":"Europe/Berlin","preferredLanguages":["en-US","en"],"version":2},"profiledata":{"1695198354303-0":1009}}
2023-09-20 08:25:57 UTC	5755	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:57 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store Set-Cookie: SessionTimeZoneOffset=-120; Path=/; Secure; HttpOnly; SameSite=Strict Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; Path=/; Secure; HttpOnly; SameSite=Strict Set-Cookie: xasid=0.20f362db-b311-4d23-9b9f-dba203de84b7; Path=/; Secure; HttpOnly; SameSite=Strict Set-Cookie: DeviceType=Desktop; Path=/; Expires=Thu, 19-Sep-2024 08:25:57 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=Strict Set-Cookie: Profile=Responsive; Path=/; Expires=Thu, 19-Sep-2024 08:25:57 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=Strict X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000;
2023-09-20 08:25:57 UTC	5755	IN	Data Raw: 31 64 31 63 0d 0a 7b 22 63 61 63 68 65 62 75 73 74 22 3a 22 36 33 38 32 39 36 38 37 32 36 32 34 33 38 33 36 38 38 22 2c 22 63 68 61 6e 67 65 73 22 3a 7b 22 32 37 38 36 36 30 32 32 37 36 35 39 36 36 35 38 34 22 3a 7b 22 63 68 61 6e 67 65 64 44 61 74 65 22 3a 7b 22 68 61 73 68 22 3a 22 6b 47 72 75 34 2b 38 64 42 6e 53 70 58 2f 4a 34 59 39 56 65 64 2b 4f 6f 79 2b 7a 58 74 2b 34 4c 79 76 56 54 6a 53 4d 43 39 72 38 3d 22 2c 22 76 61 6c 75 65 22 3a 31 36 39 35 31 39 38 33 35 37 31 38 34 7d 2c 22 53 79 73 74 65 6d 2e 55 73 65 72 5f 4c 61 6e 67 75 61 67 65 22 3a 7b 22 68 61 73 68 22 3a 22 73 6f 7a 4e 73 37 66 6a 56 6a 33 75 7a 69 4a 65 2f 43 6b 4a 51 53 42 65 37 55 63 45 69 45 48 38 35 44 7a 62 54 56 33 4e 65 4d 73 3d 22 2c 22 76 61 6c 75 65 22 3a 22 33 39 36 38 Data Ascii: 1d1c{"cachebust":"638296872624383688","changes":{"27866022765966584":{"changedDate":{"hash":"kGru4+8dBnSpX/J4Y9Ved+Ooy+zXt+4LyvVTjSMC9r8=","value":1695198357184},"System.User_Language":{"hash":"sozNs7fjVj3uziJe/CkJQSBe7UcEiEH85DzbTV3NeMs=","value":"3968
2023-09-20 08:25:57 UTC	5763	IN	Data Raw: 32 30 30 30 0d 0a 69 76 65 72 79 5f 68 61 73 5f 62 65 65 6e 5f 73 74 6f 70 70 65 64 22 2c 22 44 65 6c 69 76 65 72 79 20 68 61 73 20 62 65 65 6e 20 73 74 6f 70 70 65 64 22 5d 2c 5b 22 4e 6f 74 5f 70 6f 73 73 69 62 6c 65 5f 5f 61 6c 72 65 61 64 79 5f 64 65 6c 69 76 65 72 65 64 22 2c 22 4e 6f 74 20 70 6f 73 73 69 62 6c 65 2c 20 61 6c 72 65 61 64 79 20 64 65 6c 69 76 65 72 65 64 22 5d 2c 5b 22 54 68 65 5f 66 6f 6c 6c 6f 77 69 6e 67 5f 64 65 6c 69 76 65 72 79 5f 64 61 74 65 5f 68 61 73 5f 62 65 65 6e 5f 61 67 72 65 65 64 5f 22 2c 22 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 65 6c 69 76 65 72 79 20 64 61 74 65 20 68 61 73 20 62 65 65 6e 20 61 67 72 65 65 64 3a 22 5d 2c 5b 22 57 69 6c 6c 5f 62 65 5f 61 64 76 69 63 65 64 5f 75 6e 74 69 6c 5f 22 2c 22 57 69 6c Data Ascii: 2000ivery_has_been_stopped","Delivery has been stopped"],["Not_possible__already_delivered","Not possible, already delivered"],["The_following_delivery_date_has_been_agreed_","The following delivery date has been agreed:"],["Will_be_adviced_until_","Wil
2023-09-20 08:25:57 UTC	5771	IN	Data Raw: 72 69 61 22 2c 22 41 6c 67 65 72 69 61 22 5d 2c 5b 22 41 6d 65 72 69 63 61 6e 5f 53 61 6d 6f 61 22 2c 22 41 6d 65 72 69 63 61 6e 20 53 61 6d 6f 61 22 5d 2c 5b 22 41 6e 64 6f 72 72 61 22 2c 22 41 6e 64 6f 72 72 61 22 5d 2c 5b 22 41 6e 67 6f 6c 61 22 2c 22 41 6e 67 6f 6c 61 22 5d 2c 5b 22 41 6e 67 75 69 6c 6c 61 22 2c 22 41 6e 67 75 69 6c 6c 61 22 5d 2c 5b 22 41 6e 74 61 72 63 74 69 63 61 22 2c 22 41 6e 74 61 72 63 0d 0a Data Ascii: ria","Algeria"],["American_Samoa","American Samoa"],["Andorra","Andorra"],["Angola","Angola"],["Anguilla","Anguilla"],["Antarctica","Antarc
2023-09-20 08:25:57 UTC	5771	IN	Data Raw: 32 30 30 30 0d 0a 74 69 63 61 22 5d 2c 5b 22 41 6e 74 69 67 75 61 5f 61 6e 64 5f 42 61 72 62 75 64 61 22 2c 22 41 6e 74 69 67 75 61 20 61 6e 64 20 42 61 72 62 75 64 61 22 5d 2c 5b 22 41 72 67 65 6e 74 69 6e 61 22 2c 22 41 72 67 65 6e 74 69 6e 61 22 5d 2c 5b 22 41 72 6d 65 6e 69 61 22 2c 22 41 72 6d 65 6e 69 61 22 5d 2c 5b 22 41 72 75 62 61 22 2c 22 41 72 75 62 61 22 5d 2c 5b 22 41 75 73 74 72 61 6c 69 61 22 2c 22 41 75 73 74 72 61 6c 69 61 22 5d 2c 5b 22 41 75 73 74 72 69 61 22 2c 22 41 75 73 74 72 69 61 22 5d 2c 5b 22 41 7a 65 72 62 61 69 6a 61 6e 22 2c 22 41 7a 65 72 62 61 69 6a 61 6e 22 5d 2c 5b 22 42 61 68 61 6d 61 73 22 2c 22 42 61 68 61 6d 61 73 22 5d 2c 5b 22 42 61 68 72 65 69 6e 22 2c 22 42 61 68 72 65 69 6e 22 5d 2c 5b 22 42 61 6e 67 6c 61 64 65 Data Ascii: 2000tica"],["Antigua_and_Barbuda","Antigua and Barbuda"],["Argentina","Argentina"],["Armenia","Armenia"],["Aruba","Aruba"],["Australia","Australia"],["Austria","Austria"],["Azerbaijan","Azerbaijan"],["Bahamas","Bahamas"],["Bahrein","Bahrein"],["Banglade
2023-09-20 08:25:57 UTC	5779	IN	Data Raw: 32 30 30 30 0d 0a 6f 6e 64 69 74 69 6f 6e 22 2c 22 6e 6f 74 20 64 65 6c 69 76 65 72 65 64 20 2d 20 66 6f 72 63 65 20 6d 61 6a 65 75 72 65 2f 62 61 64 20 72 6f 61 64 20 63 6f 6e 64 69 74 69 6f 6e 22 5d 2c 5b 22 45 31 33 5f 54 68 65 5f 73 68 69 70 6d 65 6e 74 5f 6e 6f 74 5f 64 65 6c 69 76 65 72 65 64 5f 63 6f 6e 73 67 69 6e 65 65 5f 6e 6f 74 5f 61 76 69 61 6c 61 62 6c 65 22 2c 22 6e 6f 74 20 64 65 6c 69 76 65 72 65 64 20 2d 20 63 6f 6e 73 69 67 6e 65 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 5d 2c 5b 22 45 31 34 5f 54 68 65 5f 73 68 69 70 6d 65 6e 74 5f 6e 6f 74 5f 64 65 6c 69 76 65 72 65 64 5f 64 65 6c 69 76 65 72 79 5f 72 65 66 75 73 65 64 22 2c 22 6e 6f 74 20 64 65 6c 69 76 65 72 65 64 20 2d 20 64 65 6c 69 76 65 72 79 20 72 65 66 75 73 65 64 22 5d Data Ascii: 2000ondition","not delivered - force majeure/bad road condition"],["E13_The_shipment_not_delivered_consginee_not_avialable","not delivered - consignee not available"],["E14_The_shipment_not_delivered_delivery_refused","not delivered - delivery refused"]
2023-09-20 08:25:57 UTC	5787	IN	Data Raw: 72 65 61 74 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 6d 69 74 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 64 65 6c 65 74 65 22 3a 66 61 6c 73 65 7d 2c 22 70 65 72 73 69 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 54 65 6c 65 70 68 6f 6e 65 4e 75 6d 62 65 72 32 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 45 4d 61 69 0d 0a Data Ascii: reate":false,"commit":false,"rollback":false,"delete":false},"persistable":false},{"attributes":{"TelephoneNumber2":{"type":"String","readonly":true},"EMai
2023-09-20 08:25:57 UTC	5811	IN	Data Raw: 32 30 30 30 0d 0a 6c 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 42 75 73 69 6e 65 73 73 55 6e 69 74 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 44 65 70 6f 74 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 53 68 69 70 6d 65 6e 74 2e 45 73 63 61 6c 61 74 69 6f 6e 50 61 74 68 5f 53 68 69 70 6d 65 6e 74 22 3a 7b 22 74 79 70 65 22 3a 22 4f 62 6a 65 63 74 52 65 66 65 72 65 6e 63 65 22 2c 22 6b 6c 61 73 73 22 3a 22 53 68 69 70 6d 65 6e 74 2e 53 68 69 70 6d 65 6e 74 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 50 6f 73 69 74 69 6f 6e 22 3a 7b 22 74 79 Data Ascii: 2000l":{"type":"String","readonly":true},"BusinessUnit":{"type":"String","readonly":true},"Depot":{"type":"String","readonly":true},"Shipment.EscalationPath_Shipment":{"type":"ObjectReference","klass":"Shipment.Shipment","readonly":true},"Position":{"ty
2023-09-20 08:25:57 UTC	5819	IN	Data Raw: 32 30 30 30 0d 0a 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 7d 2c 22 4c 61 6e 67 22 3a 7b 22 74 79 70 65 22 3a 22 45 6e 75 6d 22 2c 22 6b 6c 61 73 73 22 3a 22 53 68 69 70 6d 65 6e 74 2e 4c 61 6e 67 75 61 67 65 22 7d 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 73 75 62 63 6c 61 73 73 65 73 22 3a 5b 5d 2c 22 73 75 70 65 72 63 6c 61 73 73 65 73 22 3a 5b 5d 7d 2c 22 6f 62 6a 65 63 74 54 79 70 65 22 3a 22 53 68 69 70 6d 65 6e 74 2e 41 6e 6f 6e 79 6d 6f 75 73 53 65 61 72 63 68 22 2c 22 6e 65 65 64 73 52 65 61 63 68 61 62 6c 65 53 74 61 74 65 22 3a 7b 22 63 72 65 61 74 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 6d 69 74 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 64 65 6c 65 74 65 22 3a 66 61 6c 73 65 7d 2c 22 70 65 72 73 69 Data Ascii: 2000type":"String"},"Lang":{"type":"Enum","klass":"Shipment.Language"}},"properties":{"subclasses":[],"superclasses":[]},"objectType":"Shipment.AnonymousSearch","needsReachableState":{"create":false,"commit":false,"rollback":false,"delete":false},"persi
2023-09-20 08:25:57 UTC	5826	IN	Data Raw: 22 6e 65 65 64 73 52 65 61 63 68 61 62 6c 65 53 74 61 74 65 22 3a 7b 22 63 72 65 61 74 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 6d 69 74 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 64 65 6c 65 74 65 22 3a 66 61 6c 73 65 7d 2c 22 70 65 72 73 69 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 0d 0a Data Ascii: "needsReachableState":{"create":false,"commit":false,"rollback":false,"delete":false},"persistable":false},{"attributes":{"Description":{"type":"String","readonly":true},"
2023-09-20 08:25:57 UTC	5827	IN	Data Raw: 32 30 30 30 0d 0a 53 74 61 74 75 73 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 54 4d 53 53 74 61 74 75 73 5f 42 75 73 69 6e 65 73 73 55 6e 69 74 22 3a 7b 22 74 79 70 65 22 3a 22 4f 62 6a 65 63 74 52 65 66 65 72 65 6e 63 65 22 2c 22 6b 6c 61 73 73 22 3a 22 43 4d 53 2e 42 75 73 69 6e 65 73 73 55 6e 69 74 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 52 65 70 6f 72 74 53 74 61 74 75 73 5f 52 65 74 75 72 6e 22 3a 7b 22 74 79 70 65 22 3a 22 45 6e 75 6d 22 2c 22 6b 6c 61 73 73 22 3a 22 53 74 61 74 75 73 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 52 65 70 6f 72 74 53 74 61 74 75 73 5f 52 65 74 75 72 6e 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 49 6e 76 65 6e 74 6f 72 79 22 3a 7b 22 74 79 70 65 22 3a 22 42 6f 6f 6c 65 61 6e 22 2c 22 Data Ascii: 2000StatusConfiguration.TMSStatus_BusinessUnit":{"type":"ObjectReference","klass":"CMS.BusinessUnit","readonly":true},"ReportStatus_Return":{"type":"Enum","klass":"StatusConfiguration.ReportStatus_Return","readonly":true},"Inventory":{"type":"Boolean","
2023-09-20 08:25:57 UTC	5835	IN	Data Raw: 32 30 30 30 0d 0a 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 73 75 62 63 6c 61 73 73 65 73 22 3a 5b 5d 2c 22 73 75 70 65 72 63 6c 61 73 73 65 73 22 3a 5b 5d 7d 2c 22 6f 62 6a 65 63 74 54 79 70 65 22 3a 22 53 79 73 74 65 6d 2e 4c 61 6e 67 75 61 67 65 22 2c 22 6e 65 65 64 73 52 65 61 63 68 61 62 6c 65 53 74 61 74 65 22 3a 7b 22 63 72 65 61 74 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 6d 69 74 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 64 65 6c 65 74 65 22 3a 66 61 6c 73 65 7d 2c 22 70 65 72 73 69 73 74 61 62 6c 65 22 3a 74 72 75 65 7d 2c 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 43 6f 64 65 22 3a 7b 22 74 79 70 65 22 3a 22 53 74 72 69 6e 67 22 2c 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 7d 2c 22 44 65 73 63 Data Ascii: 2000},"properties":{"subclasses":[],"superclasses":[]},"objectType":"System.Language","needsReachableState":{"create":false,"commit":false,"rollback":false,"delete":false},"persistable":true},{"attributes":{"Code":{"type":"String","readonly":true},"Desc
2023-09-20 08:25:57 UTC	5842	IN	Data Raw: 6c 6c 7d 2c 22 49 6e 64 65 78 50 61 67 65 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 6e 75 6c 6c 7d 2c 22 48 69 74 43 6f 75 6e 74 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 22 31 35 35 34 37 39 38 31 22 7d 2c 22 41 72 67 75 6d 65 6e 74 45 78 61 6d 70 6c 65 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 66 74 63 2e 6d 79 72 61 62 65 6e 2e 63 6f 6d 2f 6c 69 6e 6b 2f 53 68 69 70 6d 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 0d 0a Data Ascii: ll},"IndexPage":{"readonly":true,"value":null},"HitCount":{"readonly":true,"value":"15547981"},"ArgumentExample":{"readonly":true,"value":"https://oftc.myraben.com/link/ShipmentInformatio
2023-09-20 08:25:57 UTC	5843	IN	Data Raw: 64 37 31 0d 0a 6e 2f 22 7d 2c 22 4e 61 6d 65 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 22 53 68 69 70 6d 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 7d 2c 22 53 79 73 74 65 6d 2e 6f 77 6e 65 72 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 22 32 37 38 36 36 30 32 32 36 39 34 33 35 34 39 34 36 22 7d 2c 22 53 65 70 61 72 61 74 65 47 65 74 50 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 7d 2c 22 63 68 61 6e 67 65 64 44 61 74 65 22 3a 7b 22 72 65 61 64 6f 6e 6c 79 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 22 3a 31 36 39 35 31 39 38 33 35 37 32 33 30 7d 2c 22 4d 69 63 72 6f 66 6c 6f 77 22 3a 7b 22 72 65 61 64 6f 6e Data Ascii: d71n/"},"Name":{"readonly":true,"value":"ShipmentInformation"},"System.owner":{"readonly":true,"value":"27866022694354946"},"SeparateGetParameters":{"readonly":true,"value":true},"changedDate":{"readonly":true,"value":1695198357230},"Microflow":{"readon
2023-09-20 08:25:57 UTC	5846	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:56 UTC	5737	OUT	GET /metamodel.json?638296872624383688 HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7; originURI=/login.html
2023-09-20 08:25:57 UTC	5739	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:57 GMT Content-Type: application/json Content-Length: 40543 Last-Modified: Thu, 07 Sep 2023 10:42:54 GMT Connection: close ETag: "64f9a92e-9e5f" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:25:57 UTC	5739	IN	Data Raw: 7b 22 6c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 5f 47 42 22 2c 22 70 6c 5f 50 4c 22 2c 22 64 65 5f 44 45 22 2c 22 68 75 5f 48 55 22 2c 22 73 6b 5f 53 4b 22 2c 22 63 73 5f 43 5a 22 2c 22 75 6b 5f 55 41 22 2c 22 6e 6c 5f 4e 4c 22 2c 22 69 74 5f 49 54 22 2c 22 65 6c 5f 47 52 22 2c 22 6c 76 5f 4c 56 22 2c 22 6c 74 5f 4c 54 22 2c 22 65 74 5f 45 45 22 2c 22 72 6f 5f 52 4f 22 2c 22 62 67 5f 42 47 22 5d 2c 22 73 79 73 74 65 6d 54 65 78 74 73 22 3a 7b 22 6d 65 6e 64 69 78 2e 6c 69 62 2e 4d 78 44 61 74 61 53 6f 75 72 63 65 2e 73 74 61 74 75 73 22 3a 5b 22 7b 31 7d 20 74 6f 20 7b 32 7d 20 6f 66 20 7b 33 7d 22 2c 22 7b 31 7d 20 64 6f 20 7b 32 7d 20 7a 20 7b 33 7d 22 2c 22 7b 31 7d 20 62 69 73 20 7b 32 7d 20 76 6f 6e 20 7b 33 7d 22 2c 22 7b 31 7d 2d 74 c5 91 6c 20 Data Ascii: {"languages":["en_GB","pl_PL","de_DE","hu_HU","sk_SK","cs_CZ","uk_UA","nl_NL","it_IT","el_GR","lv_LV","lt_LT","et_EE","ro_RO","bg_BG"],"systemTexts":{"mendix.lib.MxDataSource.status":["{1} to {2} of {3}","{1} do {2} z {3}","{1} bis {2} von {3}","{1}-tl
2023-09-20 08:25:57 UTC	5787	IN	Data Raw: 6e 6f 75 67 68 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 69 6e 20 61 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 2e 22 2c 22 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 65 6e 6f 75 67 68 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 69 6e 20 61 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 2e 22 2c 22 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 65 6e 6f 75 67 68 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 20 59 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 6c 6f 67 Data Ascii: nough permissions to access this page. You may try to login as a different user.","You don't have enough permissions to access this page. You may try to login as a different user.","You don't have enough permissions to access this page. You may try to log
2023-09-20 08:25:57 UTC	5803	IN	Data Raw: 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 66 69 6c 65 3f 22 2c 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 Data Ascii: le?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure you want to download this file?","Are you sure y

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:57 UTC	5848	OUT	GET /xas/ HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.20f362db-b311-4d23-9b9f-dba203de84b7; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:25:58 UTC	5880	IN	HTTP/1.1 401 Unauthorized Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:25:58 GMT Transfer-Encoding: chunked Connection: close
2023-09-20 08:25:58 UTC	5880	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:25:59 UTC	7476	OUT	GET /widgets/nls/widgets_en-us.js?638296872624383688 HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://oftc.myraben.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.20f362db-b311-4d23-9b9f-dba203de84b7; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:26:00 UTC	7477	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:26:00 GMT Content-Type: application/javascript Content-Length: 146 Last-Modified: Thu, 07 Sep 2023 10:43:18 GMT Connection: close ETag: "64f9a946-92" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:26:00 UTC	7477	IN	Data Raw: 64 65 66 69 6e 65 28 27 77 69 64 67 65 74 73 2f 6e 6c 73 2f 77 69 64 67 65 74 73 5f 65 6e 2d 75 73 27 2c 7b 0a 27 64 69 6a 69 74 2f 6e 6c 73 2f 6c 6f 61 64 69 6e 67 27 3a 7b 22 6c 6f 61 64 69 6e 67 53 74 61 74 65 22 3a 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 2c 22 65 72 72 6f 72 53 74 61 74 65 22 3a 22 53 6f 72 72 79 2c 20 61 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 22 2c 22 5f 6c 6f 63 61 6c 69 7a 65 64 22 3a 7b 7d 7d 0a 7d 29 3b Data Ascii: define('widgets/nls/widgets_en-us',{'dijit/nls/loading':{"loadingState":"Loading...","errorState":"Sorry, an error occurred","_localized":{}}});

Timestamp	kBytes transferred	Direction	Data
2023-09-20 08:26:01 UTC	7477	OUT	GET /pages/en_GB/Shipment/AnonymousShipment_ReadOnly_New2021.page.xml?638296872624383688 HTTP/1.1 Host: oftc.myraben.com Connection: keep-alive x-mx-reqtoken: 1695198359563-2 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" x-csrf-token: 63df2210-f3a4-43c6-86d0-5010f90cd073 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oftc.myraben.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XASSESSIONID=1d312324-8662-4b7b-86ba-5fda03a6bd08; XASID=0.20f362db-b311-4d23-9b9f-dba203de84b7; originURI=/login.html; SessionTimeZoneOffset=-120; xasid=0.20f362db-b311-4d23-9b9f-dba203de84b7; DeviceType=Desktop; Profile=Responsive
2023-09-20 08:26:01 UTC	7478	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Wed, 20 Sep 2023 08:26:01 GMT Content-Type: text/xml Content-Length: 55813 Last-Modified: Thu, 07 Sep 2023 10:41:58 GMT Connection: close ETag: "64f9a8f6-da05" X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; Accept-Ranges: bytes
2023-09-20 08:26:01 UTC	7479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 75 74 66 2d 38 27 3f 3e 3c 6d 3a 70 61 67 65 20 69 64 3d 27 63 36 31 33 38 66 33 36 2d 62 63 34 64 2d 34 31 61 65 2d 39 33 39 62 2d 36 66 32 61 64 33 39 64 39 62 65 33 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 74 69 74 6c 65 3d 27 53 68 69 70 6d 65 6e 74 27 20 63 6c 61 73 73 3d 27 6c 61 79 6f 75 74 2d 61 74 6c 61 73 20 6c 61 79 6f 75 74 2d 61 74 6c 61 73 2d 72 65 73 70 6f 6e 73 69 76 65 2d 64 65 66 61 75 6c 74 20 61 6e 6f 6e 79 6d 6f 75 73 50 61 67 65 20 6c 69 67 68 74 47 72 61 79 27 20 78 6d 6c 6e 73 3a 6d 3d 27 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 65 6e 64 69 78 2e 63 6f Data Ascii: <?xml version='1.0' encoding='utf-8'?><m:page id='c6138f36-bc4d-41ae-939b-6f2ad39d9be3' xmlns='http://www.w3.org/1999/xhtml' title='Shipment' class='layout-atlas layout-atlas-responsive-default anonymousPage lightGray' xmlns:m='http://schemas.mendix.co
2023-09-20 08:26:01 UTC	7494	IN	Data Raw: 6f 6e 74 72 6f 6c 22 3a 5b 7b 22 24 77 69 64 67 65 74 49 64 22 3a 22 32 36 30 2e 53 68 69 70 6d 65 6e 74 2e 41 6e 6f 6e 79 6d 6f 75 73 53 68 69 70 6d 65 6e 74 5f 52 65 61 64 4f 6e 6c 79 5f 4e 65 77 32 30 32 31 2e 74 65 78 74 42 6f 78 36 22 2c 22 77 69 64 67 65 74 22 3a 22 54 65 78 74 42 6f 78 22 2c 22 70 72 6f 70 73 22 3a 7b 22 69 6e 70 75 74 56 61 6c 75 65 22 3a 7b 22 24 74 79 70 65 22 3a 22 41 74 74 72 69 62 75 74 65 50 72 6f 70 65 72 74 79 22 2c 22 73 63 6f 70 65 22 3a 22 32 36 30 2e 53 68 69 70 6d 65 6e 74 2e 41 6e 6f 6e 79 6d 6f 75 73 53 68 69 70 6d 65 6e 74 5f 52 65 61 64 4f 6e 6c 79 5f 4e 65 77 32 30 32 31 2e 64 61 74 61 56 69 65 77 33 22 2c 22 70 61 74 68 22 3a 22 22 2c 22 65 6e 74 69 74 79 22 3a 22 53 68 69 70 6d 65 6e 74 2e 41 6e 6f 6e 79 6d 6f Data Ascii: ontrol":[{"$widgetId":"260.Shipment.AnonymousShipment_ReadOnly_New2021.textBox6","widget":"TextBox","props":{"inputValue":{"$type":"AttributeProperty","scope":"260.Shipment.AnonymousShipment_ReadOnly_New2021.dataView3","path":"","entity":"Shipment.Anonymo
2023-09-20 08:26:01 UTC	7510	IN	Data Raw: 52 65 61 64 4f 6e 6c 79 5f 4e 65 77 32 30 32 31 2e 69 6d 61 67 65 32 22 2c 22 77 69 64 67 65 74 22 3a 22 49 6d 61 67 65 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6c 61 73 73 22 3a 22 6d 78 2d 6e 61 6d 65 2d 69 6d 61 67 65 32 20 72 6f 75 6e 64 22 2c 22 61 6c 74 65 72 6e 61 74 69 76 65 54 65 78 74 22 3a 7b 22 24 74 79 70 65 22 3a 22 45 78 70 72 65 73 73 69 6f 6e 50 72 6f 70 65 72 74 79 22 2c 22 65 78 70 72 65 73 73 69 6f 6e 22 3a 7b 22 65 78 70 72 22 3a 7b 22 74 79 70 65 22 3a 22 6c 69 74 65 72 61 6c 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 22 61 72 67 73 22 3a 7b 7d 7d 7d 2c 22 68 65 69 67 68 74 22 3a 22 34 38 70 78 22 2c 22 77 69 64 74 68 22 3a 22 34 38 70 78 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 22 3a 7b 22 24 Data Ascii: ReadOnly_New2021.image2","widget":"Image","props":{"class":"mx-name-image2 round","alternativeText":{"$type":"ExpressionProperty","expression":{"expr":{"type":"literal","value":""},"args":{}}},"height":"48px","width":"48px","responsive":false,"source":{"$
2023-09-20 08:26:01 UTC	7526	IN	Data Raw: 3a 7b 7d 7d 2c 22 69 73 50 61 73 73 77 6f 72 64 22 3a 66 61 6c 73 65 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 24 74 79 70 65 22 3a 22 54 65 78 74 50 72 6f 70 65 72 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 22 6d 61 73 6b 22 3a 22 22 2c 22 72 65 61 64 4f 6e 6c 79 53 74 79 6c 65 22 3a 22 74 65 78 74 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 3a 35 30 2c 22 6f 6e 45 6e 74 65 72 22 3a 6e 75 6c 6c 2c 22 6f 6e 4c 65 61 76 65 22 3a 6e 75 6c 6c 2c 22 6f 6e 45 6e 74 65 72 4b 65 79 50 72 65 73 73 22 3a 6e 75 6c 6c 2c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3a 22 6f 6e 22 2c 22 73 75 62 6d 69 74 57 68 69 6c 65 45 64 69 74 69 6e 67 22 3a 66 61 6c 73 65 2c 22 73 75 62 6d 69 74 44 65 6c 61 79 22 3a 33 30 30 2c 22 69 64 22 3a 7b 22 24 74 79 70 65 22 3a 22 Data Ascii: :{}},"isPassword":false,"placeholder":{"$type":"TextProperty","value":""},"mask":"","readOnlyStyle":"text","maxLength":50,"onEnter":null,"onLeave":null,"onEnterKeyPress":null,"autocomplete":"on","submitWhileEditing":false,"submitDelay":300,"id":{"$type":"