Edit tour

Windows Analysis Report
https://thetollroads.com-wfmo.xyz/us

Overview

General Information

Sample URL:	https://thetollroads.com-wfmo.xyz/us
Analysis ID:	1582932
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious URL

Performs DNS queries to domains with low reputation

Form action URLs do not match main URL

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5100 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://thetollroads.com-wfmo.xyz/us" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING Transit Scam Domain in DNS Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-01T00:21:51.023131+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	56398	1.1.1.1	53	UDP
2025-01-01T00:21:51.023344+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	55386	1.1.1.1	53	UDP
2025-01-01T00:21:51.043699+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	58135	1.1.1.1	53	UDP
2025-01-01T00:21:52.117944+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	54749	1.1.1.1	53	UDP
2025-01-01T00:21:52.118108+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	64589	1.1.1.1	53	UDP
2025-01-01T00:21:57.145003+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59251	1.1.1.1	53	UDP
2025-01-01T00:21:57.145389+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	61002	1.1.1.1	53	UDP
2025-01-01T00:21:57.165787+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59221	1.1.1.1	53	UDP
2025-01-01T00:22:02.312971+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	60286	1.1.1.1	53	UDP
2025-01-01T00:22:02.313090+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	55180	1.1.1.1	53	UDP
2025-01-01T00:22:02.323194+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	52373	1.1.1.1	53	UDP
2025-01-01T00:22:03.355570+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59324	1.1.1.1	53	UDP
2025-01-01T00:22:03.355700+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	55058	1.1.1.1	53	UDP
2025-01-01T00:22:08.392541+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	57000	1.1.1.1	53	UDP
2025-01-01T00:22:08.392710+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	52270	1.1.1.1	53	UDP
2025-01-01T00:22:08.410491+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	56196	1.1.1.1	53	UDP
2025-01-01T00:22:12.412101+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	55591	1.1.1.1	53	UDP
2025-01-01T00:22:12.412317+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	52546	1.1.1.1	53	UDP
2025-01-01T00:22:13.453182+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	53250	1.1.1.1	53	UDP
2025-01-01T00:22:13.453311+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	53065	1.1.1.1	53	UDP
2025-01-01T00:22:13.462480+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	56886	1.1.1.1	53	UDP
2025-01-01T00:22:17.148439+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	53739	1.1.1.1	53	UDP
2025-01-01T00:22:17.148808+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	51522	1.1.1.1	53	UDP
2025-01-01T00:22:17.161595+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	53091	1.1.1.1	53	UDP
2025-01-01T00:22:17.161862+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	57432	1.1.1.1	53	UDP
2025-01-01T00:22:19.313729+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	65080	1.1.1.1	53	UDP
2025-01-01T00:22:19.313879+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59520	1.1.1.1	53	UDP
2025-01-01T00:22:19.322972+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59959	1.1.1.1	53	UDP
2025-01-01T00:22:24.354847+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	55950	1.1.1.1	53	UDP
2025-01-01T00:22:24.355645+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	49919	1.1.1.1	53	UDP
2025-01-01T00:22:24.378092+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	57377	1.1.1.1	53	UDP
2025-01-01T00:22:37.193755+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59777	1.1.1.1	53	UDP
2025-01-01T00:22:37.194094+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	58169	1.1.1.1	53	UDP
2025-01-01T00:22:37.209175+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	54865	1.1.1.1	53	UDP
2025-01-01T00:22:38.267754+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	65181	1.1.1.1	53	UDP
2025-01-01T00:22:38.267932+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	57077	1.1.1.1	53	UDP
2025-01-01T00:22:43.305648+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	58373	1.1.1.1	53	UDP
2025-01-01T00:22:43.305798+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	60481	1.1.1.1	53	UDP
2025-01-01T00:22:43.320731+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	54778	1.1.1.1	53	UDP
2025-01-01T00:23:02.844595+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59217	1.1.1.1	53	UDP
2025-01-01T00:23:13.354114+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	60905	1.1.1.1	53	UDP
2025-01-01T00:23:13.354273+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	58160	1.1.1.1	53	UDP
2025-01-01T00:23:13.369147+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	59200	1.1.1.1	53	UDP
2025-01-01T00:23:30.506821+0100	2058564	2	Possible Social Engineering Attempted	192.168.2.16	56328	1.1.1.1	53	UDP

ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-01T00:22:33.334612+0100	2823606	1	Exploit Kit Activity Detected	45.60.150.166	443	192.168.2.16	49811	TCP
2025-01-01T00:22:34.273341+0100	2823606	1	Exploit Kit Activity Detected	45.60.150.166	443	192.168.2.16	49827	TCP

HTTP traffic detected: POST /g/collect?v=2&tid=G-FXMPC209X2&gtm=45je4cc1v9123471210za200&_p=1735687348951&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=412420669.1735687350&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1735687350&sct=1&seg=0&dl=https%3A%2F%2Fthetollroads.com%2F&dt=Home%20%7C%20The%20Toll%20Roads&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3751 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://thetollroads.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_180.1.dr, chromecache_125.1.dr, chromecache_178.1.dr, chromecache_232.1.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_224.1.dr, chromecache_196.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: chromecache_232.1.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_136.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_164.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=935729
Source: chromecache_164.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=999088
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_164.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=195016)
Source: chromecache_164.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=201297)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_164.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=190655)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=773687
Source: chromecache_136.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Window/innerWidth#usage_notes
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://drafts.csswg.org/selectors/#relational
Source: chromecache_223.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_223.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_224.1.dr, chromecache_196.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_224.1.dr, chromecache_196.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_193.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://getbootstrap.com/docs/5.3/forms/input-group/
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/facebook/flow/issues/1414
Source: chromecache_164.1.dr	String found in binary or memory: https://github.com/jensimmons/cssremedy/issues/14#issuecomment-634934210)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/157)
Source: chromecache_193.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/299)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_180.1.dr, chromecache_125.1.dr, chromecache_178.1.dr, chromecache_232.1.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_164.1.dr	String found in binary or memory: https://github.com/mozdevs/cssremedy/issues/14)
Source: chromecache_164.1.dr	String found in binary or memory: https://github.com/mozdevs/cssremedy/issues/4)
Source: chromecache_164.1.dr	String found in binary or memory: https://github.com/mozilla/gecko-dev/blob/2f9eacd9d3d995c937b4251a5557d95d494c9be1/layout/style/res/
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/popperjs/popper-core/issues/1078
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/popperjs/popper-core/issues/1223
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/popperjs/popper-core/issues/837
Source: chromecache_164.1.dr	String found in binary or memory: https://github.com/tailwindcss/tailwindcss/pull/116)
Source: chromecache_164.1.dr	String found in binary or memory: https://github.com/tailwindlabs/tailwindcss/issues/3300)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_193.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/32273
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.37.1/LICENSE
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1008
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://goo.gl/pxwQGp)
Source: chromecache_136.1.dr	String found in binary or memory: https://google.com
Source: chromecache_136.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_136.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_136.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_232.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://popper.js.org)
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_232.1.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_136.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_232.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_164.1.dr	String found in binary or memory: https://tailwindcss.com
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-get-regexp.prototype.flags
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-regexp.prototype.exec
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_136.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_130.1.dr	String found in binary or memory: https://thetollroads.com-
Source: chromecache_188.1.dr	String found in binary or memory: https://thetollroads.com-wfmo
Source: chromecache_196.1.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_224.1.dr, chromecache_196.1.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.charistheo.io/blog/2021/02/restart-a-css-animation-with-javascript/#restarting-a-css-ani
Source: chromecache_136.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_196.1.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_224.1.dr, chromecache_196.1.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_136.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_136.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_136.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_136.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_165.1.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_196.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_224.1.dr, chromecache_196.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_224.1.dr, chromecache_196.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_136.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.quirksmode.org/blog/archives/2014/02/mouse_event_bub.html
Source: chromecache_209.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_232.1.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal48.troj.win@44/194@108/18

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://thetollroads.com-wfmo.xyz/us"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5100 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5100 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://thetollroads.com-wfmo.xyz/us	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://thetollroads.com-	0%	Avira URL Cloud	safe
https://drafts.csswg.org/selectors/#relational	0%	Avira URL Cloud	safe
https://thetollroads.com-wfmo	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=999088	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.185.206	true	false	high
i.ytimg.com	142.250.186.182	true	false	high
static.doubleclick.net	172.217.18.6	true	false	high
stats.g.doubleclick.net	108.177.15.155	true	false	high
youtube-ui.l.google.com	142.250.181.238	true	false	high
www3.l.google.com	142.250.184.206	true	false	high
googleads.g.doubleclick.net	172.217.16.194	true	false	high
play.google.com	142.250.186.142	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.250.185.132	true	false	high
analytics.google.com	216.58.206.78	true	false	high
td.doubleclick.net	172.217.18.2	true	false	high
thetollroads.com	45.60.150.166	true	false	high
wfmo.xyz	unknown	unknown	false	high
translate.google.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
thetollroads.com-wfmo	unknown	unknown	false	high
thetollroads.com-wfmo.xyz	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollr&oit=1&cp=8&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-wfmo&oit=3&cp=29&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thet&oit=1&cp=4&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://thetollroads.com/	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads.co&oit=3&cp=15&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://thetollroads.com/media/cmkllpaa/icon_linkedin-white.svg	false	high
https://thetollroads.com/site-media/icons/icon_footer-walk-in-center.svg	false	high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	high
https://thetollroads.com/media/e2ybixdp/google_play_store_badge_en.svg	false	high
https://thetollroads.com/media/zw1kviit/board_highlights_2.png	false	high
https://thetollroads.com/site-media/toll_roads_logo.svg	false	high
https://thetollroads.com/js/global.js?v=1734624164460	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-&oit=3&cp=25&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://thetollroads.com/media/dv5d04qo/icon_youtube-white.svg	false	high
https://www.google.com/js/th/WuArCo6uiOC32QOIiNWeSH9h2H5vf_jv_ihZ0ZQebSo.js	false	high
https://thetollroads.com/css/global.css?v=1734624164460	false	high
https://thetollroads.com/media/b35pwkub/icon_homepage-toll-violations.svg	false	high
https://thetollroads.com/media/a2afb2cf/sr-241-loma-ridge-1220x600.png	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-w&oit=3&cp=26&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://thetollroads.com/media/qljj3avn/closures_1200x800.jpg	false	high
https://thetollroads.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1388295675	false	high
https://thetollroads.com/site-media/icons/icon_logo-tca-color.svg	false	high
https://thetollroads.com/media/lzdjsoqt/download_on_the_app_store_badge.svg	false	high
https://i.ytimg.com/vi_webp/3M2FsVe0muU/default.webp	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=theto&oit=1&cp=5&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://thetollroads.com/_Incapsula_Resource?SWKMTFSR=1&e=0.36632120898314513	false	high
https://thetollroads.com/media/safjozvp/icon_homepage-pay-tolls.svg	false	high
https://thetollroads.com/site-media/icons/icon_footer-phone.svg	false	high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_136.1.dr	false		high
https://tailwindcss.com	chromecache_164.1.dr	false		high
https://github.com/tailwindcss/tailwindcss/pull/116)	chromecache_164.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://github.com/zloirock/core-js	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://github.com/facebook/flow/issues/1414	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://thetollroads.com-	chromecache_130.1.dr	true	Avira URL Cloud: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://www.youtube.com	chromecache_209.1.dr	false		high
https://fontawesome.com	chromecache_223.1.dr	false		high
https://github.com/tc39/proposal-array-filtering	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://admin.youtube.com	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://github.com/popperjs/popper-core/issues/837	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://github.com/es-shims/es5-shim/issues/150	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://yurt.corp.google.com	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://tc39.es/ecma262/#sec-getmethod	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://html.spec.whatwg.org/#nonce-attributes	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://drafts.csswg.org/selectors/#relational	chromecache_206.1.dr, chromecache_193.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/popperjs/popper-core/issues/1223	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://github.com/zloirock/core-js/issues/1130	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://jquery.com/	chromecache_206.1.dr, chromecache_193.1.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_180.1.dr, chromecache_125.1.dr, chromecache_178.1.dr, chromecache_232.1.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-tolength	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_193.1.dr	false		high
https://thetollroads.com-wfmo	chromecache_188.1.dr	true	Avira URL Cloud: safe	unknown
https://www.google.com/images/cleardot.gif	chromecache_196.1.dr	false		high
https://github.com/zloirock/core-js/issues/1128	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://github.com/zloirock/core-js/issues/1008	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://angular.dev/license	chromecache_125.1.dr, chromecache_232.1.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://fontawesome.com/license/free	chromecache_223.1.dr	false		high
https://youtu.be/	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.find	chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-object.keys	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://github.com/kitcambridge/es5-shim/commit/4f738ac066346	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=999088	chromecache_164.1.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.every	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://drafts.csswg.org/cssom/#resolved-values	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-toprimitive	chromecache_206.1.dr, chromecache_193.1.dr	false		high
http://kenwheeler.github.io/slick	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_232.1.dr	false		high
https://github.com/twbs/bootstrap/issues/32273	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://tc39.es/ecma262/#sec-isconstructor	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://googleads.g.doubleclick.net	chromecache_136.1.dr	false		high
https://promisesaplus.com/#point-59	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://docs.google.com/get_video_info	chromecache_125.1.dr, chromecache_232.1.dr	false		high
https://promisesaplus.com/#point-57	chromecache_206.1.dr, chromecache_193.1.dr	false		high
https://getbootstrap.com/)	chromecache_193.1.dr	false		high
https://promisesaplus.com/#point-54	chromecache_206.1.dr, chromecache_193.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.177.15.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.78	analytics.google.com	United States	15169	GOOGLEUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
142.250.186.70	unknown	United States	15169	GOOGLEUS	false
142.250.186.54	unknown	United States	15169	GOOGLEUS	false
142.250.186.182	i.ytimg.com	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
45.60.150.166	thetollroads.com	United States	19551	INCAPSULAUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.6	static.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.2	td.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	play.google.com	United States	15169	GOOGLEUS	false
172.217.16.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582932
Start date and time:	2025-01-01 00:21:19 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://thetollroads.com-wfmo.xyz/us
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.troj.win@44/194@108/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 108.177.15.84, 142.250.184.206, 142.250.185.174, 142.250.185.238, 172.217.18.110, 142.250.185.110, 172.217.16.206, 142.250.181.238, 142.250.186.174, 142.250.184.234, 142.250.185.227, 142.250.181.232, 142.250.185.99, 142.250.185.202, 142.250.185.232, 142.250.186.74, 172.217.23.106, 142.250.185.234, 216.58.206.42, 172.217.18.106, 142.250.185.170, 172.217.16.138, 142.250.184.202, 216.58.206.74, 142.250.186.170, 142.250.185.138, 142.250.185.106, 216.58.212.138, 142.250.186.138, 142.250.181.234, 172.217.18.10, 172.217.16.202, 142.250.186.106, 142.250.186.42, 142.250.74.202, 142.250.185.74, 172.217.18.3, 216.58.212.170, 142.250.181.227, 142.250.184.227, 142.250.186.78, 142.250.185.142, 142.250.185.78, 142.250.184.238, 184.28.90.27, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, jnn-pa.googleapis.com, translate-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, translate.googleapis.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://thetollroads.com-wfmo.xyz/us

Input	Output
URL: https://thetollroads.com-wfmo.xyz Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://thetollroads.com-wfmo.xyz
URL: about:srcdoc... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script appears to be a sandboxed messaging system that allows communication between a parent window and an iframe. It uses the Trusted Types API to create safe script URLs, which mitigates some risks. However, the script also dynamically executes remote code, which is a high-risk indicator. Additionally, the script is obfuscated, making it more difficult to analyze. Overall, the script exhibits both benign and potentially risky behaviors, warranting a medium-risk score." }
(function(){'use strict';var f=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,c,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[c]=b.value;return a};function g(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var c=0;c<a.length;++c){var b=a[c];if(b&&b.Math==Math)return b}throw Error("Cannot find global object");}var h=g(this); function k(a,c){if(c)a:{var b=h;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in b))break a;b=b[e]}a=a[a.length-1];d=b[a];c=c(d);c!=d&&c!=null&&f(b,a,{configurable:!0,writable:!0,value:c})}}k("globalThis",function(a){return a\|\|h});/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0 */ var l=globalThis.trustedTypes,m;function n(){var a=null;if(!l)return a;try{var c=function(b){return b};a=l.createPolicy("goog#html",{createHTML:c,createScript:c,createScriptURL:c})}catch(b){}return a};function p(a){this.g=a}p.prototype.toString=function(){return this.g+""};function q(a){m===void 0&&(m=n());return new p(m?m.createScriptURL(a):a)};if(!function(){if(self.origin)return self.origin==="null";if(location.host!=="")return!1;try{return window.parent.escape(""),!1}catch(a){return!0}}())throw Error("sandboxing error"); window.addEventListener("message",function(a){var c=a.ports[0];a=a.data;var b=a.callbackName.split("."),d=window;b[0]==="window"&&b.shift();for(var e=0;e<b.length-1;e++)d[b[e]]={},d=d[b[e]];d[b[b.length-1]]=function(r){c.postMessage(JSON.stringify(r))};b=document.createElement("script");a=q(a.url);if(a instanceof p)a=a.g;else throw Error("");b.src=a;document.body.appendChild(b)},!0);}).call(this);
URL: https://www.gstatic.com/cv/js/sender/v1/cast_sende... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that loads the Google Cast SDK for Chrome. It checks the user agent, Chrome version, and other contextual factors to determine the appropriate script URLs to load. While it uses some dynamic code execution techniques like `eval()` and the `Function` constructor, these are likely for legitimate purposes related to the Cast SDK integration. The script does not exhibit any clear signs of malicious intent or data exfiltration, and the use of trusted domains like `www.gstatic.com` suggests this is a benign script. Overall, the risk score is low, with some minor concerns around the use of dynamic code execution." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ 'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d]; return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="AssertionError";var w=function(a,b){throw new v("Failure"+(a?": "+a:""),Array.prototype.slice.call(arguments,1));};var x;var A=function(a,b){this.g=b===z?a:""};A.prototype.toString=function(){return this.g+""};var z={};var B=function(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},C=function(a){return!!document.currentScript&&(-1!=document.currentScript.src.indexOf("?"+a)\|\|-1!=document.currentScript.src.indexOf("&"+a))},D=function(){return"function"==typeof window.__onGCastApiAvailable?window.__onGCastApiAvailable:null},F=function(a){a.length?E(a.shift(),function(){F(a)}):G()},H=function(a){return"chrome-extension://"+a+"/cast_sender.js"},E=function(a,b,e){var c=document.createElement("script"); c.onerror=b;e&&(c.onload=e);if(void 0===x)if(b=null,(e=m.trustedTypes)&&e.createPolicy){try{b=e.createPolicy("goog#html",{createHTML:t,createScript:t,createScriptURL:t})}catch(y){m.console&&m.console.error(y.message)}x=b}else x=b;a=(b=x)?b.createScriptURL(a):a;a=new A(a,z);a:{try{var g=c&&c.ownerDocument,k=g&&(g.defaultView\|\|g.parentWindow);k=k\|\|m;if(k.Element&&k.Location){var f=k;break a}}catch(y){}f=null}if(f&&"undefined"!=typeof f.HTMLScriptElement&&(!c\|\|!(c instanceof f.HTMLScriptElement)&&(c instanceof f.Location\|\|c instanceof f.Element))){f=typeof c;if("object"==f&&null!=c\|\|"function"==f)try{var d=c.constructor.displayName\|\|c.constructor.name\|\|Object.prototype.toString.call(c)}catch(y){d="<object could not be stringified>"}else d=void 0===c?"undefined":null===c?"null":typeof c;w("Argument is not a %s (or a non-Element, non-Location mock); got: %s","HTMLScriptElement",d)}a instanceof A&&a.constructor===A?d=a.g:(d=typeof a,w("expected object of type TrustedResourceUrl, got '"+a+"' of type "+("object"!= d?d:a?Array.isArray(a)?"array":d:"null")),d="type_error:TrustedResourceUrl");c.src=d;(d=c.ownerDocument&&c.ownerDocument.defaultView)&&d!=m?d=q(d.document):(null===p&&(p=q(m.document)),d=p);d&&c.setAttribute("nonce",d);(document.head\|\|document.documentElement).appendChild(c)},I=function(){var a=B(),b=[];if(1<a){var e=a-1;b.push("//www.gstatic.com/eureka/clank/"+a+"/cast_sender.js");b.push("//www.gstatic.com/eureka/clank/"+e+"/cast_sender.js")}return b},G=function(){var a=D();a&&a(!1,"No cast extension found")}, K=function(){if(J){var a=2,b=D(),e=function(){a--;0==a&&b&&b(!0)};window.__onGCastApiAvailable=e;E("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",G,e)}},J=C("loadCastFramework")\|\|C("loadCastApplicationFramework"),L=["pkedcjkdefgpdelpbcmbmeomcjbeemfm","enhhojjnijigcajfphajepfemndkmdlo"];if(0<=window.navigator.userAgent.indexOf("Android")&&0<=window.navigator.userAgent.indexOf("Chrome/")&&window.navigator.presentation){if(60<=B()){K();var M=I();M.push("//www.gstatic.com/eureka/clank/cast_sender.js");F(M)}}else if(!window.chrome\|\|!window.navigator.presentation\|\|0<=window.navigator.userAgent.indexOf("Edge"))G();else if(89<=B()){K();var N=I(),O=N.push,P=O.apply,h=L.map(H),Q;if(h instanceof Array)Q=h;e
URL: https://thetollroads.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Open Account", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://thetollroads.com/ Model: Joe Sandbox AI	{ "brands": [ "The Toll Roads" ] }
	{ "brands": [ "The Toll Roads" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 22:21:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9917357538800675
Encrypted:	false
SSDEEP:	48:8xdiTuWfFHWidAKZdA1FehwiZUklqehyy+3:8unKdy
MD5:	0AF5BAA6B7B3F51B7874E1D1B2B18328
SHA1:	71507FEA17B3C22ADB9B1A8D12DA17B2B70ED4F2
SHA-256:	A2D1844F0FA47791E18831E74110AA03F0C7DA57877DFCA76093A956DBE8D504
SHA-512:	CCEC00186BB8663D6B85154C79E7411EE952FE0CEAAB842559473FB56538E7DBC90F0774AE99925408FEF7A213D03AA3D4787A37BEEBA12E4009122DAF632F16
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..R.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 22:21:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.007731276777353
Encrypted:	false
SSDEEP:	48:80MdiTuWfFHWidAKZdA1seh/iZUkAQkqehNy+2:8ank9Qoy
MD5:	C622BAFA821E50F1E4B7C6AB03E761FC
SHA1:	A80534B83DDAA7401DB8E9CA9646C7E67290682E
SHA-256:	90F1AD1FF8C92A071E4CE9E568FD7B5F13E370D09BEDEB691D97BA88F1AC9256
SHA-512:	914F9E46E18A582A410AAAEFFBEBBB1E5CC8A391C043A192D97897B873FBF5624713AA7B7364616AE3E75A4C07733D126B8FD89F75844C7B2EBAEB558A094270
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....;<...[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..R.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.012083750367263
Encrypted:	false
SSDEEP:	48:8DdiTuWfAHWidAKZdA14meh7sFiZUkmgqeh7sDy+BX:8onXn5y
MD5:	3DBE2C7D4EE28465D35D53FD4AD624CA
SHA1:	A49E695804839CEE69271079DD29F2CC759C5723
SHA-256:	DF92FD5BD5B5045BC8954A2E0F83A84B81BD70C45DA09A9664279238F9AB6962
SHA-512:	F9356A0439C69E61D68F894A5A45D25EE3282BAE47F5B8764BFE6ED8D77C496ABEC446D6689CB2177FF027674519E92D83171A1E6AAB71B73FFD498108F6D420
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..R.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 22:21:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.005362462718204
Encrypted:	false
SSDEEP:	48:8/diTuWfFHWidAKZdA1TehDiZUkwqehBy+R:8cn/Ly
MD5:	C19B3670A6CB6C5CB34F0418306352CF
SHA1:	A8B58B33DB12177D3D557922D0725141C330225C
SHA-256:	13646A3DAC9A2C66782776E513625974BB9A2E0598022EA6288195FCDB04FCDE
SHA-512:	78DFCF844F3DFFE23130500B13D9296E3B49BE0249C884D32633D2C75ACD303E3C06F71F35E8911600951F35EA48BC655020E80A43C7CF0E9A46B8D64EE4ADF5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..R.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 22:21:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9946744120103097
Encrypted:	false
SSDEEP:	48:8ndiTuWfFHWidAKZdA1dehBiZUk1W1qeh/y+C:80nf9fy
MD5:	321902EF95F2A9336652975510664C95
SHA1:	72D99875CA8486916691E12D0DA1B9416FC8827F
SHA-256:	77AC0A1F9AE6C33BA24867D81D6012F1C77C84B1CE9EB85D8714B3D351C3CFA7
SHA-512:	25B65F65374F759DA71675F4D6CCA3F256E18392334AF176FCF6BFECB3BFF4F929EC670C40D5676C64BD790A5C9E09CAD217E2AC843819EA91C1000617858486
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..R.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 31 22:21:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002635977776276
Encrypted:	false
SSDEEP:	48:8mdiTuWfFHWidAKZdA1duTeehOuTbbiZUk5OjqehOuTb5y+yT+:8jnjTfTbxWOvTb5y7T
MD5:	FBA05F2CA461460BFF286CCEC02B6F30
SHA1:	72BA267B789C652589FDE9E4B4EFA82CA2EEE933
SHA-256:	48D0DDA3F61EA6FC962F4C0B7E464C1C06D6B2DE6CFD746D43B13DFAFD268A20
SHA-512:	298FB9CCDAEBD32027F3B9DF50F6BEAD383D29D9B0B6AEEFDF4738973F9AEFFC58F47A4E50CACB575A622CA2B104E156CEFDD5735D23A85F41A958E1656764A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....0....[..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..R.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2508425
Entropy (8bit):	5.691430200092614
Encrypted:	false
SSDEEP:	24576:Fbf/WfCvTo1a0XMOgsy8LyfoeIoA8gtPnCxmKNzz9kcZ96r:ZfOfNaNcsoeIoA8gt6X6r
MD5:	DFFD0E78D2A33BB0404F98E7848D6B96
SHA1:	C335A1BC309E53CB713BB2D0CC4F019E183D0A3D
SHA-256:	7862B9DC103362C7C2C4311A421F0AC223522F9E5E39DC7C06E81AC03A700893
SHA-512:	D88DD77DDE3D3B98CA27B52E87574F47AA89AD61E7C034CF03662CFB3B83084DE4B22F65C7B2CEE463139680CEAB5D4B4E3FA2AA89C570DB8A1A1D90A7AF3034
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/03dbdfab/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3187
Entropy (8bit):	4.794061070303357
Encrypted:	false
SSDEEP:	96:lEbYECjcr+Nf8qphtWDnBJ1qr1zVJQFJX9JJYVEFDWEVNwFnWV/VsO:l8D+Z8atWadcbqClNjwAR7
MD5:	98653A08FEA437F2E009E15A2C51412B
SHA1:	A16A0EDFEC3577391DB420C9D26DEEA6DF238470
SHA-256:	D740E7D75521ABEC5B9F178028275F5CE60C7DAC186632E421E72FCB80999A59
SHA-512:	080D29F3082D7A644234FC6B081A28DCFA0AB5F15B5B34540922564100AA599BB32B26F55A03883D763679FF66451941F89086CF75854BD4AC5C5CD9F81F3AD0
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/css/components/capital-programs.css
Preview:	@use "sass:math";./* media query mixin /./ get rid of list formatting /./ prevent long links from breaking out of container /./ creates a colored circle with an icon in the middle /./ formats the placeholder text within an input field /./ styles for capital programs page only /..capital-programs-wrap {. padding: 5.625rem;. padding-top: 0; }. @media (max-width: 74.9375rem) {. .capital-programs-wrap {. padding: 3.75rem;. padding-top: 0; } }. @media (max-width: 47.9375rem) {. .capital-programs-wrap {. padding: 1.875rem;. padding-top: 0; } }../ styles for capital programs standard view */..capital-programs {. display: flex;. flex-wrap: wrap;. flex-direction: row;. gap: 1.5625rem;. row-gap: 1.5625rem; }. .capital-programs .capital-program {. width: calc(50% - 12.5px);. height: auto; }. @media (max-width: 35.9375rem) {. .capital-programs .capital-program {. width: 100%; } }...capital-program-item {. height: 100%;. display

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	544
Entropy (8bit):	5.100953646706404
Encrypted:	false
SSDEEP:	12:TMHdVv1Zrg8z+mbGn/D5AMwVfzK5MXXzWhAX7m:2dV1OApbm2MwxWrhqm
MD5:	8D2B1039B0BECE14E96CCB9113EF44BD
SHA1:	2E138AB1FBCBBC488C3394F741CE0D4E6DA87642
SHA-256:	64FC0B17133229FBB6FDDD7085110F5811C7AF754C804876969C5E9F69D8BF80
SHA-512:	BFE6DD1AC88FD03A70C7639E441E434873F42797B883E45D6A1A969DCAF4EAB1CC89DCBC3061B5E7296555E7A718C7E65AAB7EECACB53D1B834C4BFD16221659
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/3jyijhrd/icon_twitter-x-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><path class="cls-2" d="M6.65,67.93C6.65,34.08,34.09,6.65,67.93,6.65s61.29,27.44,61.29,61.29-27.44,61.29-61.29,61.29S6.65,101.78,6.65,67.93Z"/><path class="cls-1" d="M86.88,38.15h10.1l-22.07,25.23,25.97,34.33h-20.33l-15.92-20.82-18.22,20.82h-10.11l23.61-26.98-24.91-32.58h20.85l14.39,19.03,16.65-19.03ZM83.34,91.67h5.6l-36.14-47.78h-6.01l36.55,47.78Z"/></svg>

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1554869
Entropy (8bit):	7.986033053569487
Encrypted:	false
SSDEEP:	24576:luPRj+80Ef2Ee+KCaJRQjsg2Iyg977MPcsdOJtH5iPKVnll36hJ2foMt0j9cMy1W:loRj+80ES+KrMx27g9MPtdcH56K9D6mG
MD5:	C6760D8A236C9AC2591505D3EA32EB2D
SHA1:	0162E763845C9B1FB06CACFFEAD13D530C1ACCD0
SHA-256:	69F7B2AA8B97B2A155530F7F9F0837DAABC50C3402E2730606C53B5CE85B53FD
SHA-512:	FB11E35423AB6133A2B8F0E3637EBB3914BB562F18DBD813C10D1D0A8E973EED36101418F7A5F3B534020D6F518E3A6DE85B9300552FA36345E32A4F2164074A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....r.......gAMA....\|.Q.... cHRM...........R...@..}y.....<.....s<.w.../iCCPICC Profile..H..wTT....wz..0..z..0... ..Q.f......Ml..@D...E......H..b!(.`.H.Pb0...dF.J\|yy.......g.s..{....$O../... .'..z8.W.G....x....0Y.A..@$/7.z........H..e..O...O.T...._..lN:K.."N.....3"..$..F../JP.rb.[.}..Q..d.[..S..l1..x{..#b.G...\N..o.X3I....[ql2.....$..8.x.......t..r.p../8...p...C...f.q....K.njm.{r2.8...?......).L^6..g.,.qm."[.Z[Z....~Q....7%.."....3......R..`.j...[.~.:.. w....!.$E}k...yh.y...Rm..333..........:..}.=#.v.....e...tq.X)I)B>==......<..8..X....9<QD.h..8Q.yl....sy....0.OZ.k.(...5..H....>.....yP..........:.8......p.........Lg....k.k...$.......t.!0.V..8.7....`.........2A....@.....JP..A#h.'@.8.....:....`....`......a!2D..!UH.2.. .d..A>P ..ECq...B.......Z....:.]..B..=h...~....L...2...........5p.......N..........:\|......@...QC.....!.H,.G6 .H9R.. ]H/r..A..w(......Q.(OT...JCm@..QGQ...-.(j...MF+...6h/.t.:.]..G7....w...7......Xa<1...:L1....s.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.492897276113269
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpYn:wpoSySv6yF8pY
MD5:	C0DDB93C144B94DA946DC9F727D05538
SHA1:	517BA8265D63543D2F4F2D3E2247A9A9CEE79E9D
SHA-256:	4760B35732ACF6B7C363E144C5FD126EAFEE7315885510FEAF23B0D53938D33F
SHA-512:	FE7BBEF81355A517C2124C01EBA6CB7460E36F0E608849E37721C23B53FE1C9349CBE949016BCD2CABF97629AAB127CC6318B5EC4F6ED87BDB2982580843AD73
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9b?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgA=

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (327)
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	4.811573525552432
Encrypted:	false
SSDEEP:	6:Vw28i6/R0ciNnBHsL2YriFGhruc7JECwGHLTwGRVCJrwGd0wWeXFEL13:u28i6/R0cCnBHslriFwucJwuPwugw40B
MD5:	788B8F9D42B349744C6F14C073CCDF79
SHA1:	A5D55325E6A3514B62966F60BDD1A7DAA3819F5C
SHA-256:	2AC7194FF1143F4215C5EC3670F0A88246A014BB13BB540685750D9B9B07FDEE
SHA-512:	2AE891E84543E22C4EFF96CD134AC980CCE5920BD3217C06CE274976F6328369DE4D254C3E6AD6025B6D340CB8813105248FEDCEA5E01CB0D9E79CB7F7EA515F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-&oit=3&cp=25&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["https://thetollroads.com-",["https //thetollroads.com-violation"],[""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"//thetollroads.com-violation"}],"google:suggestrelevance":[600],"google:suggestsubtypes":[[160]],"google:suggesttype":["TAIL"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	126
Entropy (8bit):	4.672568464795353
Encrypted:	false
SSDEEP:	3:Vw9Kpp+4NwwBHsLpHbGWjLwWkzXFETH1u4:Vw9it5BHsLRGAwWeXFEL13
MD5:	8B8831B89C9E2E05A00F8299AACCCE08
SHA1:	34EBAFF11E74406E5A33E0A996F05AED7AC6E882
SHA-256:	BAA4110DFDF33A7A70E7723E82A682D3FD4E16BCB0BF25776684F9BC20B2ACF8
SHA-512:	7AA2E46C20399A04B9F3919AF4DAD863DA327376DC7FA158A920ACA6E21433EEDAD4E5F064A91C33E962E45D4109C33A972A531F5A235BCB087044E93289A920
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.x&oit=1&cp=6&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["wfmo.x",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance":851}]

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	33712
Entropy (8bit):	5.598353084576506
Encrypted:	false
SSDEEP:	384:YYRgyq+e8l9x9KWcdwxEU6xJ4eoWyDBaQkYdWG3U3iarjbqU8qqWEB339nxtZG3K:s+1l9OYEUK4tJkCW/3DbHiLxtZG3K
MD5:	2FE29ECE9B34EBF5E40FDF5E18BBF7F5
SHA1:	786D5FAF73AD1D55483701929067296DCDA53711
SHA-256:	EBA1E9985737A9A73052FB2C5568EAE0A6FFFA24CD5474437BF1ACCB4442ED35
SHA-512:	7EE26B0E7E0F59ED8444C712581B5B4E3C6E1D0172229E8786756C3677A6C84574D67D2918F373E2508F14838A4AF06B82B2CAE333020909ED815B3C0BCEEBF4
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var D7c=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.ew(p)},uup=function(){return{L:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path",TB:!0,B:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3 -1.01,.80 -1.21,1.40 l 0,-7.90 -3.28,0 z

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	700
Entropy (8bit):	5.0966418707187495
Encrypted:	false
SSDEEP:	12:TMHd6L4m1NnK5hoaFJKAApSRi/M1R2nDabrksPwKc+UxQ6Rvzh97sgWP/+:2d6L4eNK5dJKzSRAi2nmbrksPwSUxQWJ
MD5:	18DD9027CA5578A2396E006C488D4989
SHA1:	2D86174271F98F7855DB1F45AAE7072E317999DD
SHA-256:	C68F57BBBE51438D80CF7F43D869E91FB40EA0CB058D097484E6D285920EF001
SHA-512:	B110FD35A7D41CFDEB1A4F7D038CF695596639200B63B6F8B794D852A5D998FF35AAAE78F5A2B4FC5980791C79914AFACE69B2087BB24153ACF3FCDB0D50B8BC
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/d5kpftah/icon_facebook-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125.5 125.5">. <defs>. <style>. .cls-1 {. fill: #231f20;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. Generator: Adobe Illustrator 28.7.1, SVG Export Plug-In . SVG Version: 1.2.0 Build 142) -->. <g>. <g id="Layer_1">. <path class="cls-2" d="M1.5,62.8C1.5,28.9,28.9,1.5,62.8,1.5s61.3,27.4,61.3,61.3-27.4,61.3-61.3,61.3S1.5,96.6,1.5,62.8Z"/>. <path class="cls-1" d="M78.3,62.8h-10.2v36.2h-15.1v-36.2h-7.2v-12.8h7.2v-8.3c0-5.9,2.8-15.2,15.2-15.2h11.2v12.5h-8.1c-1.3,0-3.2.7-3.2,3.5v7.5h11.5l-1.3,12.8h0Z"/>. </g>. </g>.</svg>

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7145
Entropy (8bit):	4.403443005145906
Encrypted:	false
SSDEEP:	192:8knoSd+EBwObsfLTd9aDrAcxzYAkPB0KUNNS:PnoSdhwDlcNeBnUNg
MD5:	17615144CC51F86B469385D0A302141F
SHA1:	34F904D338FF74708B159943F7B248353E75A786
SHA-256:	B1C3A8F08AB75ACA270B20A11EF900A0F07E6BF494F9A2F372B9F9EE81EFF022
SHA-512:	77E594C14BB51AF2C5E8862547FA3CC79A24445A866B03961F9EFC0B3ABFAB11E0A9456140D3E4E938CA3EA3AA9057138E4229034C320F879A7E4CB7BB2CBC33
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="svg51" width="180" height="53.333" version="1.1" viewBox="0 0 180 53.333" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><metadata id="metadata9"><rdf:RDF><cc:Work rdf:about=""><dc:format>image/svg+xml</dc:format><dc:type rdf:resource="http://purl.org/dc/dcmitype/StillImage"/></cc:Work></rdf:RDF></metadata><path id="path11" d="m173.33 53.333h-166.66c-3.6666 0-6.6665-2.9999-6.6665-6.6665v-39.999c0-3.6666 2.9999-6.6665 6.6665-6.6665h166.66c3.6666 0 6.6665 2.9999 6.6665 6.6665v39.999c0 3.6666-2.9999 6.6665-6.6665 6.6665" fill="#100f0d" stroke-width=".13333"/><path id="path13" d="m173.33 1e-3h-166.66c-3.6666 0-6.6665 2.9999-6.6665 6.6665v39.999c0 3.6666 2.9999 6.6665 6.6665 6.6665h166.66c3.6666 0 6.6665-2.9999 6.6665-6.6665v-39.999c0-3.6666-2.9999-6.6665-6.6665-6.6665zm0 1.0661c3.0879 0 5.5999

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17021)
Category:	downloaded
Size (bytes):	389441
Entropy (8bit):	5.653461816264427
Encrypted:	false
SSDEEP:	6144:vCAskYnsmQ8MHZ1HcRCrdHe5NAaa0Mf3/wyfwuT+boeP:6h8m9MH7Hc8Je5a8fP
MD5:	8351B83882D28EAB7CCDBA9EA63FDE65
SHA1:	67AF9D40F04B86C324C5C0B33C1A0536B057DA01
SHA-256:	DF750978811B45A991908242B82134372B2CACB3F94E2FB5FDA7474EB9D475A5
SHA-512:	34B2B8D5CA47CA0A0A84438D54E66639C9BDF936A4EE752E9F2D22198A1697ED660BF2FBA34BC2B574DE4882150E711EB50909EF19F7E8FF69D338C687E158E3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-FXMPC209X2
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":11},{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":13},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","staging\\.thetollroads\\.com","thetollr\\.wwwls9\\.a2hosted\\.com","www\\.thetollroads\\.com","secure\\.thetollroads\\.com","thetollroads\\.com"],"tag_id":14},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualE

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.280895574824055
Encrypted:	false
SSDEEP:	24:E11XIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E11XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	FCDFE214C644BBBC6DFDCE139531BC9D
SHA1:	AFBE7DA92A932F6533D44F497591EE6664570050
SHA-256:	1DAEB8F2B20E643498E588A0F3BC753699FE28C787205ECE9B0FC5CD5A7B06BE
SHA-512:	75EE315A0D186E4D0D24CC31A4D960C3A0F0DA7B82397C04ADBFE91E535ADAFC99E36858952EAD793E71E5F79D765454A45A5BBCFBFBC13292CDFA7ECD137A4D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2311
Entropy (8bit):	4.699044042825758
Encrypted:	false
SSDEEP:	48:czbkmJKzoAM7KOiDC7ya1tLtKKJRz6UzrpDCZ/8rlDf03ixUWSYrOW:skmJkMBiDCOa1xkKJPz9uZ0bwVYOW
MD5:	5526AA5800576302480BFB8398D38237
SHA1:	F853148A4D415BB018D7EB2EA10196160D6ECA66
SHA-256:	64A48CD1D1366F0E256A240847E4AC0C7720ED207240AEA657B24ED25B00A936
SHA-512:	06ED870047B6D2E7511CACBCF8387C8059548EE60106C759519BA78ECF4B8EB7B3377D90AC2E9E40522E0114BD0A9DA60CDADE434846613A8B062C089F3697E9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 451.39 351.39">. <defs>. <style>. .cls-1 {. fill: #a51890;. }.. .cls-2 {. fill: #008c95;. }. </style>. </defs>. Generator: Adobe Illustrator 28.6.0, SVG Export Plug-In . SVG Version: 1.2.0 Build 709) -->. <g>. <g id="Layer_1">. <g>. <polygon class="cls-1" points="230.27 12.09 407.27 231.59 242.27 231.59 253.27 172.34 329.27 172.34 309.27 147.09 205.27 147.09 210.27 123.28 291.26 123.15 270.27 98.28 190.27 98.28 163.7 233.09 58.27 233.09 230.27 12.09 230.27 12.09"/>. <polygon class="cls-1" points="201.19 170.99 229.43 170.99 216.27 232.09 187.27 232.09 201.19 170.99 201.19 170.99"/>. </g>. <g>. <polygon class="cls-2" points="181.4 270.2 185.12 254.38 249.89 254.38 246.07 270.2 225.55 270.2 210.65 338.76 186.73 338.76 201.68 270.2 181.4 270.2"/>. <path class="cls-2" d="M317.79,310.7l13.54-

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2797
Entropy (8bit):	4.827711980776113
Encrypted:	false
SSDEEP:	48:QjkxnE7rMJg25t0TysXwqH/ggSBMy5kNefy5kHUIUy5heny5dpUk01sacbjU0cUf:lE7Kg25mTysx/g1zVY6UIbcgdpUf1sa+
MD5:	9688C6F6A515DB00CC3013150B4DE407
SHA1:	6DE270C745DC5EC563BEFA8053178A9BD7D5BB1A
SHA-256:	144F6951C9B6239C784CD4DD80D6F39D19BA8E0F2CB661ABC4FF4F29FEB14836
SHA-512:	918DA0F10EFC7C33BE0FC2E0D8C04107EABE46CE14FA6436BCF24C08FB78DCF53A44E00BD147D7A6E5945B3E675A25EEF32A9D63B73C320810178E17201469A1
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/css/components/capital-programs-list.css
Preview:	@use "sass:math";./* media query mixin /./ get rid of list formatting /./ prevent long links from breaking out of container /./ creates a colored circle with an icon in the middle /./ formats the placeholder text within an input field /./ styles for capital programs list view */..capital-programs-list__rotator--hidden {. display: none; }...capital-programs-list__rotator .slick-list {. overflow: visible !important; }...capital-programs-list__rotator .slick-track {. display: flex !important; }...capital-programs-list__rotator .slick-slide {. height: inherit !important;. margin: 0 25px; }. @media (max-width: 35.9375rem) {. .capital-programs-list__rotator .slick-slide {. margin: 0 15px; } }. .capital-programs-list__rotator .slick-slide > div {. height: 100%; }...capital-programs-list__rotator .slick-arrow {. position: relative;. width: 45px;. height: 45px;. top: 50%;. transform: translateY(-50%); }. .capital-programs-list__rotator .slick-arrow:after {.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	15346
Entropy (8bit):	4.1259339238496215
Encrypted:	false
SSDEEP:	192:ol8v1/EcrNu6c6oWCuKEhWrXoO6G5+N2CFCIjwrGFIX9eg4kswrXqykQLn2wAuZk:+8ZZN6KihXoE5M2GCX4MXqJmvIqEEs
MD5:	34B6BEE62D533647DDDC54C4893CC52C
SHA1:	193022860C9CE73D8224522818B1A4CB995BBC4C
SHA-256:	FD18BA6CAE03406C61DBE80CFB61C9EAAB44349BEADF7B932F84667A039AE5A4
SHA-512:	DAD39060DF6B7B50E7596B4C97C5701C4907B871390A804C56D382F6C7A8952922B0A8999306721C47CB9D55EFFC4BE77C48ABDBE63C4378B519B8BFB5D88D37
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/icons/icon_logo-tca-color.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 430.62 42.72"><defs><style>.cls-1{fill:#6c0060;}.cls-1,.cls-2,.cls-3,.cls-4,.cls-5{fill-rule:evenodd;stroke-width:0px;}.cls-2{fill:#87c4cd;}.cls-3{fill:#005d5f;}.cls-4{fill:#ceb2d0;}.cls-6{font-family:ArialMT, Arial;font-size:1px;}.cls-6,.cls-5{fill:#fff;}.cls-6,.cls-7{isolation:isolate;}</style></defs><g id="Group_2698"><path id="Path_2501" class="cls-4" d="M.88,35.6h69.31L47.18,5.05s-1.93-2.99-4.54-2.99c-2.46,0-5.77,2.77-5.77,2.77L.88,35.6Z"/><path id="Path_2502" class="cls-1" d="M20.22,36.26h71.63L63.69,3.44s-2.42-3.12-5.37-3.04c-2.67.08-4.95,2.82-4.95,2.82L20.22,36.26Z"/><path id="Path_2503" class="cls-3" d="M29.55,38.91h26.22s4.28-9.61,11.16-15.47,14.28-9.75,11.29-12.54-9.12-1.23-9.12-1.23l.35.55s3.74.83.6,2.35c-1.77.85-11.82,5.2-21.16,8.92-15.06,5.99-19.34,17.41-19.34,17.41"/><path id="Path_2504" class="cls-5" d="M37.65,39.36h7.27s2.3-10.06,10.53-14.55,22.15-9.8,20.14-13.36c-1.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 770, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	993202
Entropy (8bit):	7.980389117199469
Encrypted:	false
SSDEEP:	24576:kYGqUPPX0SWQ1KbUvWxM8REdHGMEAkMNCVpka9iX:kYViPX0u1KbUvHHH3kM+iX
MD5:	667E8F7F63CB44EE6F9D8F15F81D5DF1
SHA1:	29B4FB527776193539FC40614958A332FBF3E9AB
SHA-256:	C12E59A0130531465D380BC96343926F13E3885B517FEE880F09D62167FDBF87
SHA-512:	31D91C2BC3AFAD95C3A986CC2184F895869CC687D75CAD3E81ABA6FAE9FF4219C91D33A2DFFA7AA9D39F3A1870B0156426E648396EC8E740A65C0557F9934CA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............\|......sRGB.........sBIT....\|.d... .IDATx^..%K.%.V..Y..~..... ....n!.#x...7$$.t$.P../......;w.%6..>..g^..S..k.r...p777.af.q._.'...........w..\|y._~......../w...]..w_..~..C].9..{{.z...].b9\|...[?P.E....^__..owo.t.>_.T.(W...!(.s..m...x.*.m/.o..r.....I....:YuUz..]._m..o.....x......x....Y...3.v......\|..=.......h.j...hQ.\C...Q..../u..o....'}.O...o...!..6...9....5.......#...P...~.&$.yF.....L.iz...j..=..V..T..9.E...Y......}@'].k.......{..y..i..`.E_56...c.E........=............].~W.1?...........}=.....-....>.k.3...q....S.._....OOOc...9....]s..=.e....[g1.._^..'..u....m".s....{......"..{Y...X...?.Q....j.Y.=.X.w......{....7.....\.X.=..i.s..#?....'P.............+8.O.e......nO.......u.h.<.......\|k......gJ..3.8...1.W.<....;.[.>.{j...>..y.[...vH^_..L.e&/....z...^l.l..Y.G.']..$.s.OZU...Q...W....o/.?...n..\|DY.6..g.,..z......q..i..e......@..!y...q...:g.E6...:....U.M.....bo...B..}M....~Z.{_sx.....n.il....T.$..w

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1306895
Entropy (8bit):	7.984025050791912
Encrypted:	false
SSDEEP:	24576:5pN9+npDgZfXfVSeuCl9iGqidrCvg1xXN/6vG3J2l+30C9TrlnoUdJEuF564l:5pN9+pMlvVST/GPC4fXf3J2k308+3ksy
MD5:	19E3482F766BEFE2EAE897FF06C40274
SHA1:	60DC184B91E4ACB80748F9C0137FE67E3514C4D7
SHA-256:	C425B30E06A26F6C7644A6BCA070236F7D34DF9EEFC9D7DF34A32711CF58751E
SHA-512:	84A6E2D9AE0BE245A03B94D3377F9A8291C96C5A06091571CBF5F1A3F8A21F8387C0134847B6923EBB29338EE11298E062F1C206FEE8CC17D8834FDD5EB17960
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....r.......sRGB.........gAMA......a.....pHYs..$...$...c......tEXtSource.ILCE-7M3C..H...tEXtSoftware.Adobe Photoshop 25.11 (Macintosh).,.I....tIME.........7....tEXtAuthor.MICHAEL K. PHIPPS...L....tEXtCopyright.MEDIA STUDIO DESIGNSB..... tEXtCreationTime.2024:06:13 20:00:56e......!tEXtCreation Time.2024:06:13 20:00:56.C......IDATx^l...%I.d..g....`.8.............{.X..G...... ,...3s........o....._..o..o..oF...ku....?#m...q....P.<..\(....?.......o..X..[.H...)...2>._....G.....p......'.?..j......?.W.Q......X.._^.u...3e...!.f.......G..O...'..K....5f6..E...6......{..o`o....G....v,W.hj.....O.<L..(....Z.....r.p.^.UM%..okom.. z.u....<...w..\|uX....x........ .\....sf.y="..&3.{u.......~=P.....K].....VO.........#.W..K.;.a..=u....{8....q....?...g...\.....Y}k6?r.?.._....p.Z_...Y......q.Y.....]...yZ......G......!..&0..k6\|....0....#.`...uC.n../.q7.........Y......=.B....x3..AN>....0a.=y3..5....1.o...........>.....x..joY?..w.....J....

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	5.09149637169964
Encrypted:	false
SSDEEP:	12:TMHd6L4m1NnK5KAhoaFJKAApSRi/M1R2nDRPgySV5kOtblTMUPQLo8+:2d6L4eNKwAdJKzSRAi2nFPVaPYu
MD5:	0D56B4A5B4956DF9E52C4C9E31D8D72C
SHA1:	947A347F71640246A46E92FDAB76CD8D89D4C526
SHA-256:	1801F6DDC90B88586B33813BA72028F6D13936EF27F897BB26809734CCB52A09
SHA-512:	58EFCCD50704004BACC72ADEE8B5E69FE24C8AB0F3F6AEEBFEE86EF6E030558A891704BF6C54EFF9FF2A18B89FF6FBC3610147CF4C73A690E0556E12B641AFCB
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/dv5d04qo/icon_youtube-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125">. <defs>. <style>. .cls-1 {. fill: #231f20;. fill-rule: evenodd;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. Generator: Adobe Illustrator 28.7.1, SVG Export Plug-In . SVG Version: 1.2.0 Build 142) -->. <g>. <g id="Layer_1">. <circle class="cls-2" cx="62.5" cy="62.5" r="61.3"/>. <path class="cls-1" d="M99.1,47.8c0-6-4.9-11-10.9-11h-51.4c-6,0-11,4.9-11,11v29.4c0,6.1,4.9,10.9,11,10.9h51.4c6.1,0,10.9-4.9,10.9-10.9v-29.4ZM55.2,74.9v-27.6l20.9,13.8-20.9,13.8Z"/>. </g>. </g>.</svg>

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	5.11252970986795
Encrypted:	false
SSDEEP:	24:2d6L4eNK5dJKzSRAi2nFPVgruTbz4sRCeiG5:czZrJKzSRAdtgru3z4Q15
MD5:	9D4BF1CED71B1AFCD60F8B01D2D06063
SHA1:	BE0A11454AF7D4D96304DC541C50BE1B42C3012D
SHA-256:	96DA3C3CAF7CB60120C64221466E9FC3B00B09FD1D94A0BF58C2FB5993DE5EE8
SHA-512:	C6E4D05D41F54AD4246CE4AB77A14B244EBFCB414435CFC7A3AE347EB3ED67A99F30F4587F53A518C58D61499D9D109D683B39E0C7285A37404FA83EFAC2B26A
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/cmkllpaa/icon_linkedin-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125">. <defs>. <style>. .cls-1 {. fill: #231f20;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. Generator: Adobe Illustrator 28.7.1, SVG Export Plug-In . SVG Version: 1.2.0 Build 142) -->. <g>. <g id="Layer_1">. <circle class="cls-2" cx="62.5" cy="62.5" r="61.3"/>. <path class="cls-1" d="M97.7,67.4v24.4h-14.1v-22.8c0-5.7-2-9.6-7.2-9.6s-6.2,2.6-7.2,5.2c-.4.9-.5,2.2-.5,3.4v23.8h-14.1s.2-38.5,0-42.5h14.1v6s0,0,0,.1h0c1.9-3,5.2-7.2,12.8-7.2s16.3,6.1,16.3,19.1h0ZM39.7,28.7c-4.8,0-8,3.2-8,7.3s3.1,7.3,7.8,7.3h0c4.9,0,8-3.3,8-7.3,0-4.2-3.1-7.3-7.9-7.3h0ZM32.6,91.8h14.1v-42.5h-14.1v42.5Z"/>. </g>. </g>.</svg>

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 667, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	926522
Entropy (8bit):	7.983032517429907
Encrypted:	false
SSDEEP:	24576:DpG4H57Q5dSHncQ5D4pfY/wX0eShPrEYVq+XArL:Nd9AyND4e/wX0euDEY0t
MD5:	554DE2588B4FDD859C704294AB505930
SHA1:	AA9F272645E6CE0E893FF5FB35E4A4425BFE9A94
SHA-256:	38EB3D0738AB7AD74C477089910841F77AFDB9361CA6C3769CC98F2DD3DF3642
SHA-512:	F105AD6F7715F93DB8BD8B91156750B877C67D84D7762494CEA05F6BE3CD0F05AB0E6B042374243F6B9BDB59A448339CDBE43992C698EA3A43EA1F38B5E344EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............fb.?....gAMA......a... .IDATx..i..G........k..{.....T.2%!...1.....<...B.H ...B.9.Q.._v....q...w737.}.RY..C..w..=<.....\|..O.._{>..h......?.M~..h......G..\.m.~w.r.....G..?...G.a...~=:..u......::.\|..h..;.S..G.?.:.t..h.....n.~{.~...y...g....N.....%\........./..w..........>L...s...w...}?\|~0.v....c'F.....1.o........O.<...y_-..]w.F\....."..}.qq...R.4>C...\......4.f..M..Ke.....................{P.h.U......{.\Cs...^.:..:..q.._..S..k....6..}O......k-......w=iI.c.'.c:.}y....-........(.1;.[..w..=.......u..........]{d......(...dz6..v].O^.z..~.]<+g{....Z..9...x....k'..S....S......iL@K..1......f......Xp.t<..N..O.~X?G.,.s.mA.....9w.O...5.)..{.b......vy.p.hC..6..F.1..#.+....Y...s...........a..e...m....Xh}.....4-l[..;.k.L...Z.........R9W<.<F..x<......<.O.X......Mi../x.;..=T.f..Q..R.W.=.u%^.q..{D.f*.!...q.{..i6..........au./.3...O.Lw}..=.F....h.wF+....=px...1b.MS.Fo.8=...q..........s.}..\|..-k...m8:E,.n.?..\..../.o\|.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1139
Entropy (8bit):	4.857046596341803
Encrypted:	false
SSDEEP:	24:2dV1RzvlfxNb4VC+nJdbmPUrxkaLu2PWhRP2ttsmlUrxkaLk9BF:cjRlfvRmmUPWv2tts29BF
MD5:	2DEE34E6E6621AD18ABCC651349FE7BB
SHA1:	D4AF89B8ED71E2542FA938F1015BD435DBFBCD55
SHA-256:	7A7AD59DB6B99D4BC7E67B22EC04494FAA36AB93EDD94F19210983D872E8BA89
SHA-512:	B5D7EA54C3E3998E9B2BF8AAA4840938B38953C20F15BA8AC12F7ED6589D430960A8EBF5E2741F92060FF356957A55AA4C476C7C7845F5F62F85ED1D885555D3
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/cpwdwtyv/icon_homepage-my-account.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2,.cls-3{stroke-width:0px;}.cls-2{fill:#ffcf3e;}.cls-2,.cls-3{fill-rule:evenodd;}.cls-3{fill:#000;}</style></defs><path id="Path_2382" class="cls-2" d="M29.75,29.55c-1.83-3.59-6.23-5.03-9.82-3.2-1.35.69-2.45,1.78-3.16,3.12,3.11,3.6,8.55,4,12.15.89.29-.25.57-.53.83-.82"/><path id="Path_2383" class="cls-2" d="M19.52,20.27c0-2.14,1.74-3.86,3.87-3.86,2.14,0,3.86,1.74,3.86,3.87,0,2.14-1.74,3.86-3.87,3.86-2.13,0-3.86-1.73-3.86-3.86h0Z"/><path class="cls-1" d="M23.07.45C10.45.45.22,10.68.22,23.3c0,12.62,10.23,22.85,22.85,22.85,12.62,0,22.85-10.23,22.85-22.85h0c0-12.62-10.23-22.85-22.85-22.85"/><path class="cls-3" d="M23.07,12.86c-5.77,0-10.45,4.68-10.45,10.45s4.68,10.45,10.45,10.45,10.45-4.68,10.45-10.45-4.68-10.45-10.45-10.45ZM19.3,20.09c0-2.14,1.74-3.86,3.87-3.86,2.14,0,3.86,1.74,3.86,3.87,0,2.14-1.74,3.86-3.87,3.86-2.13,0-3.86-1.7

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 667, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	926522
Entropy (8bit):	7.983032517429907
Encrypted:	false
SSDEEP:	24576:DpG4H57Q5dSHncQ5D4pfY/wX0eShPrEYVq+XArL:Nd9AyND4e/wX0euDEY0t
MD5:	554DE2588B4FDD859C704294AB505930
SHA1:	AA9F272645E6CE0E893FF5FB35E4A4425BFE9A94
SHA-256:	38EB3D0738AB7AD74C477089910841F77AFDB9361CA6C3769CC98F2DD3DF3642
SHA-512:	F105AD6F7715F93DB8BD8B91156750B877C67D84D7762494CEA05F6BE3CD0F05AB0E6B042374243F6B9BDB59A448339CDBE43992C698EA3A43EA1F38B5E344EC
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/zw1kviit/board_highlights_2.png
Preview:	.PNG........IHDR.............fb.?....gAMA......a... .IDATx..i..G........k..{.....T.2%!...1.....<...B.H ...B.9.Q.._v....q...w737.}.RY..C..w..=<.....\|..O.._{>..h......?.M~..h......G..\.m.~w.r.....G..?...G.a...~=:..u......::.\|..h..;.S..G.?.:.t..h.....n.~{.~...y...g....N.....%\........./..w..........>L...s...w...}?\|~0.v....c'F.....1.o........O.<...y_-..]w.F\....."..}.qq...R.4>C...\......4.f..M..Ke.....................{P.h.U......{.\Cs...^.:..:..q.._..S..k....6..}O......k-......w=iI.c.'.c:.}y....-........(.1;.[..w..=.......u..........]{d......(...dz6..v].O^.z..~.]<+g{....Z..9...x....k'..S....S......iL@K..1......f......Xp.t<..N..O.~X?G.,.s.mA.....9w.O...5.)..{.b......vy.p.hC..6..F.1..#.+....Y...s...........a..e...m....Xh}.....4-l[..;.k.L...Z.........R9W<.<F..x<......<.O.X......Mi../x.;..=T.f..Q..R.W.=.u%^.q..{D.f*.!...q.{..i6..........au./.3...O.Lw}..=.F....h.wF+....=px...1b.MS.Fo.8=...q..........s.}..\|..-k...m8:E,.n.?..\..../.o\|.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1139
Entropy (8bit):	4.857046596341803
Encrypted:	false
SSDEEP:	24:2dV1RzvlfxNb4VC+nJdbmPUrxkaLu2PWhRP2ttsmlUrxkaLk9BF:cjRlfvRmmUPWv2tts29BF
MD5:	2DEE34E6E6621AD18ABCC651349FE7BB
SHA1:	D4AF89B8ED71E2542FA938F1015BD435DBFBCD55
SHA-256:	7A7AD59DB6B99D4BC7E67B22EC04494FAA36AB93EDD94F19210983D872E8BA89
SHA-512:	B5D7EA54C3E3998E9B2BF8AAA4840938B38953C20F15BA8AC12F7ED6589D430960A8EBF5E2741F92060FF356957A55AA4C476C7C7845F5F62F85ED1D885555D3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2,.cls-3{stroke-width:0px;}.cls-2{fill:#ffcf3e;}.cls-2,.cls-3{fill-rule:evenodd;}.cls-3{fill:#000;}</style></defs><path id="Path_2382" class="cls-2" d="M29.75,29.55c-1.83-3.59-6.23-5.03-9.82-3.2-1.35.69-2.45,1.78-3.16,3.12,3.11,3.6,8.55,4,12.15.89.29-.25.57-.53.83-.82"/><path id="Path_2383" class="cls-2" d="M19.52,20.27c0-2.14,1.74-3.86,3.87-3.86,2.14,0,3.86,1.74,3.86,3.87,0,2.14-1.74,3.86-3.87,3.86-2.13,0-3.86-1.73-3.86-3.86h0Z"/><path class="cls-1" d="M23.07.45C10.45.45.22,10.68.22,23.3c0,12.62,10.23,22.85,22.85,22.85,12.62,0,22.85-10.23,22.85-22.85h0c0-12.62-10.23-22.85-22.85-22.85"/><path class="cls-3" d="M23.07,12.86c-5.77,0-10.45,4.68-10.45,10.45s4.68,10.45,10.45,10.45,10.45-4.68,10.45-10.45-4.68-10.45-10.45-10.45ZM19.3,20.09c0-2.14,1.74-3.86,3.87-3.86,2.14,0,3.86,1.74,3.86,3.87,0,2.14-1.74,3.86-3.87,3.86-2.13,0-3.86-1.7

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1140
Entropy (8bit):	4.5389205834260355
Encrypted:	false
SSDEEP:	24:2dV1Rzvlw2PRbEiU2nm8rz8hBw341t42nhdv+sbKaipbTe:cjRl9PNEi3vyK3Q62nholNPe
MD5:	FD9AFF3BE81180254E66DEA0EE1736DF
SHA1:	AF78794DB3051F9845A3E9D9B25AABA57111A5B0
SHA-256:	4C43F463C5E1CE7774021F41A2A3CB3795D1D7F6BA61E4EABF960C5DCA9BC158
SHA-512:	24B82AF47BE504F7FFB5E81453837FE3D631A7BF8A911868CDA4AF1F632E437054E6EDC0AE336D69174DA212DA21FC15629AFF9441B369C7FD57DB42B5050A66
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/safjozvp/icon_homepage-pay-tolls.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.45.22,10.68.22,23.3c0,12.62,10.23,22.85,22.85,22.85,12.62,0,22.85-10.23,22.85-22.85h0c0-12.62-10.23-22.85-22.85-22.85"/><path class="cls-2" d="M24.79,31.97v1.68c0,.51-.42.92-.93.93h-1.57c-.51,0-.92-.42-.93-.93v-1.68c-1.9-.16-3.55-1.36-4.29-3.11-.19-.5.06-1.06.55-1.25.04-.02.08-.03.13-.04l1.39-.25c.43-.14.89.02,1.14.39.32.54.91.87,1.54.86h2.43c.98,0,1.78-.77,1.79-1.75,0,0,0,0,0,0v-.03c.01-.48-.19-.93-.54-1.25-.32-.35-.78-.54-1.25-.54h-2.25c-2.89.03-5.28-2.23-5.4-5.11-.04-1.41.5-2.77,1.5-3.75.85-.85,1.98-1.38,3.18-1.5v-1.69c0-.51.42-.92.93-.93h1.57c.51,0,.92.42.93.93v1.68c1.89.18,3.53,1.37,4.29,3.11.2.48-.03,1.04-.51,1.24,0,0,0,0,0,0-.05.02-.11.04-.17.05l-1.32.25c-.43.14-.89-.02-1.14-.39-.32-.55-.9-.89-1.54-.9h-2.43c-.47-.01-.92.17-1.25.5

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (521), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	118841
Entropy (8bit):	4.635777895502101
Encrypted:	false
SSDEEP:	3072:vdqG0taPSdNS/NhpRkeec7E8E864DVnWjx5AMhiOITwG9:vdqG0AU4DVnweOITwS
MD5:	2D94DFB849D6A045A8835121F2EF6A8C
SHA1:	78B89A9C01AC47C980A7541BB883BB65F2CC0791
SHA-256:	5D1FE9D10518C078B122BED69849F8098CCAA930E0ED2195CE2AEF5910F3D879
SHA-512:	6A8444491A8AFB4A96ADED021AC7A45EE91DFECD624482638E781A4031F1E945F9AC4367B30F340C7F7EA8C3546EE79061C414E79D13A83D593F07706C0A2265
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/
Preview:	<!DOCTYPE html>..<html lang="en">..<link rel="preconnect" href="https://fonts.googleapis.com">..<link rel="preconnect" crossorigin href="https://fonts.gstatic.com">..<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;700&display=swap">..<link rel="stylesheet" integrity="sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==" crossorigin="anonymous" referrerpolicy="no-referrer" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css" />..<link rel="stylesheet" href="/css/global.css?v=1734624164460" />..<link rel="shortcut icon" href="/site-media/favicon.ico" />....<link rel="stylesheet" href="/css/components/press-releases.css" />.<link rel="stylesheet" href="/css/components/press-releases-list.css" />.<link rel="stylesheet" href="/css/components/capital-programs-list.css" />.<link rel="stylesheet" href="/css/components/capital-programs.css" />.......<link rel="stylesheet" href="/

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1754
Entropy (8bit):	4.449591551609052
Encrypted:	false
SSDEEP:	24:2dV1OAOgX3802UbnhL69HTOKHrfhm/WPHYrNyxIHzKSlwLpfKUJUZAJG7j2kQCph:cj7X3aZy+yQHYZyxIeSkJUuJG7jPEQJT
MD5:	1555E919931E96CC2949487921258C17
SHA1:	FD3181C38B843E07952718C2DEB7456741C85684
SHA-256:	E0E0D3A55BBD7147A572E0B10510B1D978B59AC199B81719A017A94F3F624EA6
SHA-512:	0F6DFA6BE9BDB55778437435B6FF75F25EB088AEC56038C3273EB33D39ADFBE2922CE94C478C4FDADF83A1B0AC202983AB94DB78D3CE580B9E22FCA11633870A
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/5p2brkd1/icon_instagram-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><circle class="cls-2" cx="67.93" cy="67.93" r="61.29" transform="translate(-1.76 134.06) rotate(-88.49)"/><path class="cls-1" d="M68,30.43c5.03.09,10.07.14,15.1.28,4.37.12,8.6.9,12.4,3.22,4.98,3.04,8.02,7.51,9,13.2.59,3.4.79,6.9.84,10.36.11,7.44.07,14.88-.01,22.33-.04,3.91-.17,7.83-1.47,11.58-2.51,7.28-7.62,11.71-15.12,13.13-3.39.64-6.9.79-10.36.84-7.41.11-14.83.07-22.24-.01-3.91-.04-7.83-.17-11.59-1.46-7.29-2.49-11.72-7.6-13.17-15.09-.65-3.38-.8-6.9-.85-10.36-.11-7.44-.07-14.88.01-22.33.04-3.91.17-7.83,1.47-11.58,2.51-7.28,7.62-11.71,15.12-13.13,3.39-.64,6.9-.72,10.36-.85,3.5-.14,7-.03,10.51-.03,0-.04,0-.07,0-.1ZM98.77,67.37c-.05,0-.1,0-.15,0,0-2.96.06-5.91-.02-8.87-.07-2.84-.18-5.69-.47-8.51-.64-6.34-4.41-10.7-10.65-11.89-3.28-.62-6.68-.72-10.03-.78-6.35-.12-12.7-.1-19.04,0-3.16.05-6.36.17-9.48.65-5.4

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2311
Entropy (8bit):	4.699044042825758
Encrypted:	false
SSDEEP:	48:czbkmJKzoAM7KOiDC7ya1tLtKKJRz6UzrpDCZ/8rlDf03ixUWSYrOW:skmJkMBiDCOa1xkKJPz9uZ0bwVYOW
MD5:	5526AA5800576302480BFB8398D38237
SHA1:	F853148A4D415BB018D7EB2EA10196160D6ECA66
SHA-256:	64A48CD1D1366F0E256A240847E4AC0C7720ED207240AEA657B24ED25B00A936
SHA-512:	06ED870047B6D2E7511CACBCF8387C8059548EE60106C759519BA78ECF4B8EB7B3377D90AC2E9E40522E0114BD0A9DA60CDADE434846613A8B062C089F3697E9
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/hrwichhw/fastrak_logo_2024.svg?rmode=max&width=341&height=254
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 451.39 351.39">. <defs>. <style>. .cls-1 {. fill: #a51890;. }.. .cls-2 {. fill: #008c95;. }. </style>. </defs>. Generator: Adobe Illustrator 28.6.0, SVG Export Plug-In . SVG Version: 1.2.0 Build 709) -->. <g>. <g id="Layer_1">. <g>. <polygon class="cls-1" points="230.27 12.09 407.27 231.59 242.27 231.59 253.27 172.34 329.27 172.34 309.27 147.09 205.27 147.09 210.27 123.28 291.26 123.15 270.27 98.28 190.27 98.28 163.7 233.09 58.27 233.09 230.27 12.09 230.27 12.09"/>. <polygon class="cls-1" points="201.19 170.99 229.43 170.99 216.27 232.09 187.27 232.09 201.19 170.99 201.19 170.99"/>. </g>. <g>. <polygon class="cls-2" points="181.4 270.2 185.12 254.38 249.89 254.38 246.07 270.2 225.55 270.2 210.65 338.76 186.73 338.76 201.68 270.2 181.4 270.2"/>. <path class="cls-2" d="M317.79,310.7l13.54-

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Suserng: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2040
Entropy (8bit):	7.9033520715830825
Encrypted:	false
SSDEEP:	48:A/f/RMnFTZhDyQRtrdsCU46fqdVO2FX6z+E:A/f/RMFXdsCT60wz
MD5:	A7B7D460AFABDA81BC3340E673C66788
SHA1:	97DC3A6B810D9E91DAF77B6930B57331045366F1
SHA-256:	DB9485F7362F2905EADA5C98BB0C48D1D2A27E1979352A75B1CFDF673AA0F091
SHA-512:	9435016011B14842D25FBCFD456139B7EA8A5CD8D37E3AC65F4BD1A3EA3BC00BA4427D8748E0079FE7620F2ACDD72059063CFDDD2C459677A061132EC56DE5C6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....%...x.Z.>9..C.!!..v. ....;.A.<4.t=..L/6.].J..o..J.8........O./............_...........>s.....u..\....8Wm....]$.........m\|..J'H..gF..........Z...A.FWM..M.}!/.x.......tn.H.B...I......!9..K....5..U.\s,G..:J...u..m....M.5..#.}....'....S.4.4Sw}i4.N.w.&B.}..kze.+.......\|Z...X...4.q....[.@....N.'.y..L.Y.....s...!......@%s..)85..L..../n..mF....o.`j....'<. ..~.,.78......@$F..W.U.............^7..u(..afO.......xjga...t.V.^=M..;.JY7PS'{.....h^.Pu]x.88M...yY"..X...D...5.].z..b.,PeQ.].w.G!{c..<.T.5.)?H.YQ'j...?..}..)S.`...X...,...Y...H?j./ym.."..........ym+.(H85`....D...d..A.&,5...,.#.U?.a-..W.....`........\....@lB<.....x5..,{f8............f.o......I.1..x..=..i.B;_,{.]..\..#$.4..BZ."..j.U..S~..M?..A...Q...v.L...~.l.7"...L...ma.53..9.j...BG=5.2.`L.K........T.8.2.....z.c ....h..n....Nb....4d..Xa.....8G]........[h..OV..1.. .P.\...[...n.;a....J...e....YH=zR&..@...m..T..F4..l...p...A{.;.&.A....q.U...\.Q...f...jpXx..k2.D.SVkn.m

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 2000x1591, components 3
Category:	downloaded
Size (bytes):	965070
Entropy (8bit):	7.962903426759465
Encrypted:	false
SSDEEP:	24576:hdCQbPX8N9ACgSBTWmLAEab0TE0eIcsrfw9N:/PX8DACNTWm8kcL+8
MD5:	BD46A588479F2DAF738C03B7655E14ED
SHA1:	4F00A2574D57419518C5792CA03C7BBC8A431C5F
SHA-256:	E096F4EE85B5F4B735F4B00286BF4E8B5409EB4E9B06E68D88D95D4277817BDD
SHA-512:	6733E3C259D89E100B401FD0F02B3DC5ED179BC6E6F34594065C99499E0C6EBE523F77F6C6332A43D5C439CD958E668ED9F2FF1004B1C2C3777962980A931C13
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/tcuceq0z/homepage-intro-placeholder-tall-corpped.jpg
Preview:	.....C....................................................................C.......................................................................7...............................................V..........................!.1.."AQ2a.#Bq.R..$3b..C.%r...4S..c.Ds...5T..&..67.GUde...................................<........................!1A..Q"a.2q.........#B..R3bCr...$.............?.......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..B.(......P..@(......P..@(......P..@(.....4$P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	121443
Entropy (8bit):	5.539316251144751
Encrypted:	false
SSDEEP:	3072:AeqzfEBqbTKo0tNvQE3l+0WReALir2fmEG7vDv+KhD0qFTwFw+CHJ:jMKo0tNIE1+PRjLir2fmEG7vDv+KhD06
MD5:	A9FA2373F9DE7523BE77CEFFEAC9142D
SHA1:	8AB4B76993042FDA67151DAB2EF9032E3065E83F
SHA-256:	B653B19E773762A1B41B694B0EFE2F44E7AD1940C90698E296CD6C37FEAB61DB
SHA-512:	CB924C34C5E8BA7C9F496D4E04190270479B68D7FC67BC2DB50B5EA5A4F3C74AE5EDB9175FE3705927DC60F77B08456830E2236DB4C75E51AAE8E58715B702C1
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/03dbdfab/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var pl=function(p){g.yh(p,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.QL()).toString(36));return p},Cl=function(p,C,V){Array.isArray(V)\|\|(V=[String(V)]);.g.$$H(p.S,C,V)},TfF=function(p){if(p instanceof g.lf)return p;.if(typeof p.lT=="function")return p.lT(!1);if(g.ea(p)){var C=0,V=new g.lf;V.next=function(){for(;;){if(C>=p.length)return g.EU;if(C in p)return g.tT(p[C++]);C++}};.return V}throw Error("Not implemented");},M70=function(p,C,V){if(g.ea(p))g.lr(p,C,V);.else for(p=TfF(p);;){var N=p.next();if(N.done)break;C.call(V,N.value,void 0,p)}},Jpy=function(p,C){var V=[];.M70(C,function(N){try{var H=g.kF.prototype.C.call(this,N,!0)}catch(X){if(X=="Storage: Invalid value was encountered")return;throw X;}H===void 0?V.push(N):g.Vha(H)&&V.push(N)},p);.return V},mv8=function(p,C){Jpy(p,C).forEach(function(V){g.kF.prototype.remove.call(this,V)},p)},vQF=function(p){if(p.a$){if(p.a$.locationOverri

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	33712
Entropy (8bit):	5.598353084576506
Encrypted:	false
SSDEEP:	384:YYRgyq+e8l9x9KWcdwxEU6xJ4eoWyDBaQkYdWG3U3iarjbqU8qqWEB339nxtZG3K:s+1l9OYEUK4tJkCW/3DbHiLxtZG3K
MD5:	2FE29ECE9B34EBF5E40FDF5E18BBF7F5
SHA1:	786D5FAF73AD1D55483701929067296DCDA53711
SHA-256:	EBA1E9985737A9A73052FB2C5568EAE0A6FFFA24CD5474437BF1ACCB4442ED35
SHA-512:	7EE26B0E7E0F59ED8444C712581B5B4E3C6E1D0172229E8786756C3677A6C84574D67D2918F373E2508F14838A4AF06B82B2CAE333020909ED815B3C0BCEEBF4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/03dbdfab/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;'use strict';var D7c=function(p){p.mutedAutoplay=!1;p.endSeconds=NaN;p.limitedPlaybackDurationInSeconds=NaN;g.ew(p)},uup=function(){return{L:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},j:[{L:"path",TB:!0,B:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3 -1.01,.80 -1.21,1.40 l 0,-7.90 -3.28,0 z

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1191
Entropy (8bit):	4.367066927588275
Encrypted:	false
SSDEEP:	24:2dV1+4kec/UsTwBQC0cWWqGtV9r3EwzWgTIg8Cn:cjJkVxTwBN0tgPrr6gT8k
MD5:	02F292BDE2FB1C9A4FD31FC95C53EC7C
SHA1:	797BC4CCA1F5828EF4D35BB8F0B9B20AC7F821B2
SHA-256:	F7A20724BCA1CC54D701CF63C215DE7C344FC2E44FB6D053D7EFF99C57152370
SHA-512:	111E480B64403D266CF58A85643F7FD909EC3B21B3BD87CF22BCA250439175801DC4AE29526AEC4CD71B3E2F602AAF4BE7B8FA3A3492D3E94F4576C92C9A4929
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/icons/icon_footer-walk-in-center.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14.5,14.5-6.49,14.5-14.5S22.98.48,14.98.48ZM14.35,6.31c.46-.05.91.09,1.27.37.36.29.59.71.64,1.17.1.95-.59,1.8-1.54,1.91-.95.1-1.81-.59-1.91-1.54-.1-.95.59-1.81,1.54-1.91ZM18.2,22.78c-.13.05-.26.08-.4.09-.37,0-.7-.21-.86-.54l-1.47-3.12c-.15-.34-.27-.7-.33-1.07.12-.1.23-.2.33-.31.58-.58,1.21-1.18,1.3-1.26l.04-.04.19,1.21c.04.24.11.47.21.68l1.45,3.12c.21.47,0,1.02-.46,1.25ZM19.22,15.25c-.11.06-.23.09-.36.09-.28,0-.55-.15-.68-.4l-.39-.72c-.27-.48-.62-.91-1.04-1.28.05.56.14,1.21.17,1.59.09.79.27,1.35-.24,1.84-.18.17-2.46,2.4-2.46,2.4-.24.24-.41.53-.49.86l-.72,2.93c-.11.42-.48.71-.91.72-.08,0-.15-.01-.23-.03,0,0,0,0,0,0-.51-.12-.83-.63-.71-1.14l.71-2.91c.16-.67.5-1.29,1-1.77l1.23-1.19-.66-3c-.42.53-.92.98-1.49,1.35l-.8.52s-.01,0-.02.01c-.37.23

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (685), with CR, LF line terminators
Category:	downloaded
Size (bytes):	114116
Entropy (8bit):	5.000047332409332
Encrypted:	false
SSDEEP:	1536:yH2AM5e3e9TLWMoJfvj/55VBmYVXwvV2iNvxDje9WObr0PAdye:yGYVXoe
MD5:	BC0AA60E1C5C9CA706C3331AC9334D46
SHA1:	703F27EB1092642AD83DC3244426174319572027
SHA-256:	D668D9AFA10B909B5DE8A1CFC9019493E18056E58F76872FC30D6DD15DEFD0B3
SHA-512:	FFD648B4175A24BE4FF3412047A0136E6B328737EF542831D936967F63F18FD825DD8B26F38EDA42DA8297B4942AAAE46A37E4AC7BBC370743BDC01251E3E3AA
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/css/global.css?v=1734624164460
Preview:	/* min bootstrap rquirements */.:root,.[data-bs-theme="light"] {. --bs-blue: #0d6efd;. --bs-indigo: #6610f2;. --bs-purple: #6f42c1;. --bs-pink: #d63384;. --bs-red: #dc3545;. --bs-orange: #fd7e14;. --bs-yellow: #ffc107;. --bs-green: #198754;. --bs-teal: #20c997;. --bs-cyan: #0dcaf0;. --bs-black: #000;. --bs-white: #fff;. --bs-gray: #6c757d;. --bs-gray-dark: #343a40;. --bs-gray-100: #f8f9fa;. --bs-gray-200: #e9ecef;. --bs-gray-300: #dee2e6;. --bs-gray-400: #ced4da;. --bs-gray-500: #adb5bd;. --bs-gray-600: #6c757d;. --bs-gray-700: #495057;. --bs-gray-800: #343a40;. --bs-gray-900: #212529;. --bs-primary: #0d6efd;. --bs-secondary: #6c757d;. --bs-success: #198754;. --bs-info: #0dcaf0;. --bs-warning: #ffc107;. --bs-danger: #dc3545;. --bs-light: #f8f9fa;. --bs-dark: #212529;. --bs-primary-rgb: 13, 110, 253;. --bs-secondary-rgb: 108, 117, 125;. --bs-success-rgb: 25, 135, 84;. --bs-info-rgb: 13, 202, 240;. --bs-warning-rgb: 255, 193, 7;. --bs-danger-rgb: 220,

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	dropped
Size (bytes):	121443
Entropy (8bit):	5.539316251144751
Encrypted:	false
SSDEEP:	3072:AeqzfEBqbTKo0tNvQE3l+0WReALir2fmEG7vDv+KhD0qFTwFw+CHJ:jMKo0tNIE1+PRjLir2fmEG7vDv+KhD06
MD5:	A9FA2373F9DE7523BE77CEFFEAC9142D
SHA1:	8AB4B76993042FDA67151DAB2EF9032E3065E83F
SHA-256:	B653B19E773762A1B41B694B0EFE2F44E7AD1940C90698E296CD6C37FEAB61DB
SHA-512:	CB924C34C5E8BA7C9F496D4E04190270479B68D7FC67BC2DB50B5EA5A4F3C74AE5EDB9175FE3705927DC60F77B08456830E2236DB4C75E51AAE8E58715B702C1
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var pl=function(p){g.yh(p,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.QL()).toString(36));return p},Cl=function(p,C,V){Array.isArray(V)\|\|(V=[String(V)]);.g.$$H(p.S,C,V)},TfF=function(p){if(p instanceof g.lf)return p;.if(typeof p.lT=="function")return p.lT(!1);if(g.ea(p)){var C=0,V=new g.lf;V.next=function(){for(;;){if(C>=p.length)return g.EU;if(C in p)return g.tT(p[C++]);C++}};.return V}throw Error("Not implemented");},M70=function(p,C,V){if(g.ea(p))g.lr(p,C,V);.else for(p=TfF(p);;){var N=p.next();if(N.done)break;C.call(V,N.value,void 0,p)}},Jpy=function(p,C){var V=[];.M70(C,function(N){try{var H=g.kF.prototype.C.call(this,N,!0)}catch(X){if(X=="Storage: Invalid value was encountered")return;throw X;}H===void 0?V.push(N):g.Vha(H)&&V.push(N)},p);.return V},mv8=function(p,C){Jpy(p,C).forEach(function(V){g.kF.prototype.remove.call(this,V)},p)},vQF=function(p){if(p.a$){if(p.a$.locationOverri

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	544
Entropy (8bit):	5.100953646706404
Encrypted:	false
SSDEEP:	12:TMHdVv1Zrg8z+mbGn/D5AMwVfzK5MXXzWhAX7m:2dV1OApbm2MwxWrhqm
MD5:	8D2B1039B0BECE14E96CCB9113EF44BD
SHA1:	2E138AB1FBCBBC488C3394F741CE0D4E6DA87642
SHA-256:	64FC0B17133229FBB6FDDD7085110F5811C7AF754C804876969C5E9F69D8BF80
SHA-512:	BFE6DD1AC88FD03A70C7639E441E434873F42797B883E45D6A1A969DCAF4EAB1CC89DCBC3061B5E7296555E7A718C7E65AAB7EECACB53D1B834C4BFD16221659
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><path class="cls-2" d="M6.65,67.93C6.65,34.08,34.09,6.65,67.93,6.65s61.29,27.44,61.29,61.29-27.44,61.29-61.29,61.29S6.65,101.78,6.65,67.93Z"/><path class="cls-1" d="M86.88,38.15h10.1l-22.07,25.23,25.97,34.33h-20.33l-15.92-20.82-18.22,20.82h-10.11l23.61-26.98-24.91-32.58h20.85l14.39,19.03,16.65-19.03ZM83.34,91.67h5.6l-36.14-47.78h-6.01l36.55,47.78Z"/></svg>

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280
Category:	downloaded
Size (bytes):	156400
Entropy (8bit):	7.9965951555863395
Encrypted:	true
SSDEEP:	3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3
MD5:	1EC0BA058C021ACF7FEAA18081445D63
SHA1:	73E7EABF7A8AE9BE149A85D196C9F3F26622925B
SHA-256:	AE17C16AFBEA216707B2203EA1CF9BDB45B9BFE47D0F4AE3258DDBC6294DD02F
SHA-512:	16A1B8A067AD4A33DCF4483C8370CA42E32F1385E3C4E717F8D0CE9995CA1F8397B15A63C0CEE044C4B0FCA96C4B648C850F483EEB1188A20F8B6CBF11D2B208
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2
Preview:	wOF2......b........9..b..........................6.$. .`..D.......H..m. %..........y......).=<E............p\..... ..O~.._..w..G..g..W..w..O..o.._....)0.w.@.......o.._.;w~~J...]c.D.U...Q.u%Q..A7.aSw...m.Hw.`....\..f.....Z.K...L\|....OHM7=p&.G...+!..."..........q.'{.5l.fo.[k..M.M....~...-..&.;....^R.v..J ...l.r....v.....7ALxxd.\|...........?5#..".WJ.."H.Z9....C.a..I......2..pa...G".;y..U..oP....@..$J"E.....H...v.-.M+....g+/...8.....k..:...4gw......^.....!.....<..3.....^...t.F.I:......F. !.....d.....I .`.....6.i.q...mp`..'U..}S.)oJC!........C`@Qe$Q..*iH..\..k...9k.{]..Mo"GNE...g..v..AZWZ..).}......%(...!NK.#E..".J.v.....d ..M..8K.{.#..a.8w<.>...z..H.y~...\.....F.G..5.'z.!.!.....'....z.@...v!@..7..N......%...Zj......`w5UcI..K.V....q.LdG.q.\o'..8...$;.!..{.5..<...K..m...]....2....{.tvC,.;.n+.c.c'}.a7s.[!+v..,..X1G;.A...U.oC]d.............).....zhwZL.bj..s.....m.+....+e.S..\|..'.{...!2.r..K..,.V....e2..M.X.\..........$E7...V.7...1.}.^...&..O..

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1032
Entropy (8bit):	4.7689062344108795
Encrypted:	false
SSDEEP:	24:2dV1Rzvlw2PJYbMS/uZWJIh/uZjjGSSCP64RDy2:cjRl9PJ+Ml7SRPVDy2
MD5:	A3AD987907B760B90C27EACD28143349
SHA1:	620126AD81FAC8DB3900FC9DCA27F99931FEBD75
SHA-256:	A284DAF097A479ECF4EF7303B2636C471C3EB0D48FC4C5CC1CDFEB6BA42A3D02
SHA-512:	02024B3297A95810D8ADEC9BD1A09F66292537A347510D2664C7BF887165D8239C32A8FA602F29737786580A6004B5B9C329B9249048618D2864BC13678935D9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.45.22,10.68.22,23.3c0,12.62,10.23,22.85,22.85,22.85,12.62,0,22.85-10.23,22.85-22.85h0c0-12.62-10.23-22.85-22.85-22.85"/><g id="Group_5281"><path id="Path_5160" class="cls-2" d="M18.85,26.86h5.44c.46.02.81.41.79.87-.02.43-.36.77-.79.79h-5.44c-.46-.02-.81-.41-.79-.87.02-.43.36-.77.79-.79M18.85,22.55h8.44c.46.02.81.41.79.87-.02.43-.36.77-.79.79h-8.44c-.46-.02-.81-.41-.79-.87.02-.43.36-.77.79-.79M25.53,15.81c.1,0,.2.04.27.11l3,3c.15.15.15.39,0,.54-.07.07-.17.11-.27.11h-1.32c-1.1.04-2.02-.82-2.05-1.92,0,0,0,0,0,0v-1.46c0-.21.17-.38.38-.38h0ZM17.62,13.34c-1.58-.05-2.91,1.18-2.96,2.77,0,0,0,0,0,0v14.37c.05,1.58,1.37,2.82,2.95,2.77,0,0,0,0,0,0h10.9c1.58.05,2.91-1.18,2.96-2.76,0,0,0,0,0,0v-9.4c0-.99-.39-1.94-1.09-2.65l-4.01-4.01h0c-.7-.7-1.65-1.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (849)
Category:	downloaded
Size (bytes):	854
Entropy (8bit):	5.156435683343954
Encrypted:	false
SSDEEP:	24:e0e+DA9YlEBHslgT9lCuABAT0NsuoB7HHHHHHHYqmffffffo:ep+DA9dKlgZ01BAIsuSEqmffffffo
MD5:	2F7D6126588E9E0B4DD2EC6348C86BC1
SHA1:	9A1EC2BEDA320F6AA0DB7EEBEBBC197C83B3B414
SHA-256:	04FA446A7F5B70C7AAD7993C7CE9C1B1D517BDE8A5C33808D0438C9A67B3F482
SHA-512:	F34CAB1FD2C90B9F6A77DF24A9A16B802FB95EC7B5E5DABD2054E2B82B571F9298354B1514EFD922CA479D500611672648B3D0712B15A3EA690CAE80B0F04A96
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["us navy pilots shot down red sea","cheerful chase monopoly go rewards","sza lyrics","grocery stores open on christmas day","notre dame football vs georgia","christmas travel weather forecast","sza lyrics another life","unclaimed irs stimulus checks"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":2951934424215154820,"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 678 x 546, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	136654
Entropy (8bit):	7.958929299733769
Encrypted:	false
SSDEEP:	3072:89Xlq6xcXVVw1yQwN0fQaedZOOEE4MDYZu0RC9TZQp:89jxcXVVw1yQd4aedZOfVNu0RCTZQp
MD5:	6E9E0CCBD5ED241A5022CBB0516C830C
SHA1:	6B24B5895BFE7F700911FA4486E35BB587A11173
SHA-256:	89F3A7904EE28DDC605D5C89D42AB95E7548E9A0580D16AD2EEB4B671095D879
SHA-512:	E7DCA2DC5009E7C9C1ECB992731049B7E67AEE1D6EB353D1DB1530DE0C8C7EF0E85297A6D79A84C8417707330C5E10754F7C9632E4EC1AAC99108733581285E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".....-..c....PLTEGpL.........a........[?.LD4.........\|aJ............4+.0&....t[...(..".....4......w^...qD..sZ7/.?6..{a......J@....D:.J/..P"B(................`4.....x]....{a.....WK"h:.PE.....~;2.Q7";.....]Q'!.....Y>)..j..xI......k..c...~n(!.V..N)....`7B.m......eM......gM7..z..q`D0.S5.X:dX-....f.dF...^@r....e.kL.jP..oiXI.mUoS?.L/.te.sT[}...m....~..tF .v\Eo<.....tvB%...~_.yk...l.o`..w...XG9......vp^O........V.7...y....y....y.........\j...\|j[N>/.E'..Dj<DvdUd<)pEO`PA.......{K0..u.};..e........hm`2....oU.q[...Tt.mD1.kD.x`}MV.jU...ED@.yf~Q=.`9.U_..=.YF.......wk:.....bM.............;7-....U/.+".........wD.........yT....@.%...L(...mx...cp..RSQ..gJgy..s..S.......K.._..........n...8Sc..acebvwt.W....q.....{.!<F....,...........m...m.c:..)U].....tRNS........G..... .IDATx...]l.W..M1..i.....nN.m...^3..).<.j...?Z.......-[.p..Fc....>.\|H..EHLp.P&.ji...Vn..B..h.-$P.Q......cB:.\U...?..Z...~6m._......k{{zz.{.......:...5}

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12353
Entropy (8bit):	4.448551671198565
Encrypted:	false
SSDEEP:	192:WQXXvZrvijv+hXkZfNSRcvzU2rgchoDwnT2lIdNVa8XaPWty0WBYvy4SjK9igvqQ:WQXXvZrvUmyAqtDnTzV29kFmCz
MD5:	D0558D91063038236B60E3EF71FDC1FD
SHA1:	5EB1A238A24F928783BFDF3E8B093E1B38AEBE88
SHA-256:	25178AEEF6EB6B83B96F5F2D004EDA3BFFBB37122DE64AFBAEF7107B384A4132
SHA-512:	B11AD7A907B52EAC32339FB4EA7DA1C1FF92522485E1519BCB8AEB515D29C07E5C0DC75EA7B1E9FBEFA06C6242659B9F45754A418AFB9415504E6E1044540932
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/lzdjsoqt/download_on_the_app_store_badge.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="US_UK_Download_on_the" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" width="135px" height="40px" viewBox="0 0 135 40" enable-background="new 0 0 135 40" xml:space="preserve">..<g>...<path fill="#A6A6A6" d="M130.197,40H4.729C2.122,40,0,37.872,0,35.267V4.726C0,2.12,2.122,0,4.729,0h125.468....C132.803,0,135,2.12,135,4.726v30.541C135,37.872,132.803,40,130.197,40L130.197,40z"/>...<path d="M134.032,35.268c0,2.116-1.714,3.83-3.834,3.83H4.729c-2.119,0-3.839-1.714-3.839-3.83V4.725....c0-2.115,1.72-3.835,3.839-3.835h125.468c2.121,0,3.834,1.72,3.834,3.835L134.032,35.268L134.032,35.268z"/>...<g>....<g>.....<path fill="#FFFFFF" d="M30.128,19.784c-0.029-3.223,2.639-4.791,2.761-4.864c-1.511-2.203

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1554869
Entropy (8bit):	7.986033053569487
Encrypted:	false
SSDEEP:	24576:luPRj+80Ef2Ee+KCaJRQjsg2Iyg977MPcsdOJtH5iPKVnll36hJ2foMt0j9cMy1W:loRj+80ES+KrMx27g9MPtdcH56K9D6mG
MD5:	C6760D8A236C9AC2591505D3EA32EB2D
SHA1:	0162E763845C9B1FB06CACFFEAD13D530C1ACCD0
SHA-256:	69F7B2AA8B97B2A155530F7F9F0837DAABC50C3402E2730606C53B5CE85B53FD
SHA-512:	FB11E35423AB6133A2B8F0E3637EBB3914BB562F18DBD813C10D1D0A8E973EED36101418F7A5F3B534020D6F518E3A6DE85B9300552FA36345E32A4F2164074A
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/a2afb2cf/sr-241-loma-ridge-1220x600.png
Preview:	.PNG........IHDR.......X.....r.......gAMA....\|.Q.... cHRM...........R...@..}y.....<.....s<.w.../iCCPICC Profile..H..wTT....wz..0..z..0... ..Q.f......Ml..@D...E......H..b!(.`.H.Pb0...dF.J\|yy.......g.s..{....$O../... .'..z8.W.G....x....0Y.A..@$/7.z........H..e..O...O.T...._..lN:K.."N.....3"..$..F../JP.rb.[.}..Q..d.[..S..l1..x{..#b.G...\N..o.X3I....[ql2.....$..8.x.......t..r.p../8...p...C...f.q....K.njm.{r2.8...?......).L^6..g.,.qm."[.Z[Z....~Q....7%.."....3......R..`.j...[.~.:.. w....!.$E}k...yh.y...Rm..333..........:..}.=#.v.....e...tq.X)I)B>==......<..8..X....9<QD.h..8Q.yl....sy....0.OZ.k.(...5..H....>.....yP..........:.8......p.........Lg....k.k...$.......t.!0.V..8.7....`.........2A....@.....JP..A#h.'@.8.....:....`....`......a!2D..!UH.2.. .d..A>P ..ECq...B.......Z....:.]..B..=h...~....L...2...........5p.......N..........:\|......@...QC.....!.H,.G6 .H9R.. ]H/r..A..w(......Q.(OT...JCm@..QGQ...-.(j...MF+...6h/.t.:.]..G7....w...7......Xa<1...:L1....s.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=2832, bps=218, PhotometricIntepretation=RGB, description=Highway 241, manufacturer=NIKON CORPORATION, model=NIKON D3, orientation=upper-left, width=4256], progressive, precision 8, 4256x1416, components 3
Category:	downloaded
Size (bytes):	3931575
Entropy (8bit):	7.986821020584443
Encrypted:	false
SSDEEP:	98304:fR1JsQB5wqP5WE66ilRXQe2FJI6hdhe7OqPxSbP:fZvv5WELi3X/SJIcU7fobP
MD5:	DF65D289FD5D994B9548CE2ABA981450
SHA1:	6E737CD8EE56D1A6966B0051C88F82EE95699044
SHA-256:	7FEFA6F07E24268498A8ADEC2BEF1F0A912DE90087BE593C9D0BE80D5922348B
SHA-512:	9C5897458B3C5A25F63599ACD8F61E1A3471D76FCE7E9785D87581F3E03F96726B6D42CD992C494CE8AD090ED22AA75ECDBFFB298B5A664968EFB82DDAB13F53
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/4plinse4/241_santiagocreekbridge_cropped.jpg
Preview:	......Exif..II*...........................................................................................................................................(...........1...".......2.......9...;.......M.......'...]...i.....................Highway 241.NIKON CORPORATION.NIKON D3...$..'....$..'..Adobe Photoshop 25.11 (Macintosh).2024:09:24 14:31:34.Stephen Francis.2009 TCA / Stephen Francis Photography.%.........F...........N..."...........'...................0231........V...........j...........~...........................................................................................................91..........................................................................................................................................................................................................................2...........4...................-...........2009:02:18 09:24:34.2009:03:17 19:11:01.-07:00....S.@B................................................................................

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1306895
Entropy (8bit):	7.984025050791912
Encrypted:	false
SSDEEP:	24576:5pN9+npDgZfXfVSeuCl9iGqidrCvg1xXN/6vG3J2l+30C9TrlnoUdJEuF564l:5pN9+pMlvVST/GPC4fXf3J2k308+3ksy
MD5:	19E3482F766BEFE2EAE897FF06C40274
SHA1:	60DC184B91E4ACB80748F9C0137FE67E3514C4D7
SHA-256:	C425B30E06A26F6C7644A6BCA070236F7D34DF9EEFC9D7DF34A32711CF58751E
SHA-512:	84A6E2D9AE0BE245A03B94D3377F9A8291C96C5A06091571CBF5F1A3F8A21F8387C0134847B6923EBB29338EE11298E062F1C206FEE8CC17D8834FDD5EB17960
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/51tplex4/sr-73-catalina-view-improvements-1200x600.png
Preview:	.PNG........IHDR.......X.....r.......sRGB.........gAMA......a.....pHYs..$...$...c......tEXtSource.ILCE-7M3C..H...tEXtSoftware.Adobe Photoshop 25.11 (Macintosh).,.I....tIME.........7....tEXtAuthor.MICHAEL K. PHIPPS...L....tEXtCopyright.MEDIA STUDIO DESIGNSB..... tEXtCreationTime.2024:06:13 20:00:56e......!tEXtCreation Time.2024:06:13 20:00:56.C......IDATx^l...%I.d..g....`.8.............{.X..G...... ,...3s........o....._..o..o..oF...ku....?#m...q....P.<..\(....?.......o..X..[.H...)...2>._....G.....p......'.?..j......?.W.Q......X.._^.u...3e...!.f.......G..O...'..K....5f6..E...6......{..o`o....G....v,W.hj.....O.<L..(....Z.....r.p.^.UM%..okom.. z.u....<...w..\|uX....x........ .\....sf.y="..&3.{u.......~=P.....K].....VO.........#.W..K.;.a..=u....{8....q....?...g...\.....Y}k6?r.?.._....p.Z_...Y......q.Y.....]...yZ......G......!..&0..k6\|....0....#.`...uC.n../.q7.........Y......=.B....x3..AN>....0a.=y3..5....1.o...........>.....x..joY?..w.....J....

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7175
Entropy (8bit):	5.403687367208766
Encrypted:	false
SSDEEP:	192:rN5bN8NjNY3YNONCFNnNO6NfNANk3FNNN4YNYoNUXNVNeN13cNdNDxNl:R5hKZ22EANOA1uCrDfjUdb0Fqzzl
MD5:	04FCE85A4376AC7D4549B5401A08427F
SHA1:	4853A7DF6DDD20A01810FC0D8EB88A74542C76E6
SHA-256:	71CFDAE69236A935151761B96B4F46B54F95BE14372112E9B5C398EB87DB1B3A
SHA-512:	3BF84707B9F7CF4232DA8AC879005BEE3E0F87A28B80A7DC49CBF8EC2777368317A319A2B120938E592B59494072FB89B29FFB5F224FC9D2D0A1E4653EEEAE6E
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1200x800, components 3
Category:	downloaded
Size (bytes):	854091
Entropy (8bit):	7.977359296414499
Encrypted:	false
SSDEEP:	12288:r77oa3YkmOikOk+O66k7C/gs+P9hxrmuqmF1rZBkk7MjzI479efuQbwLg5nYtIpN:7o9kZvE42Hxrmqsk7MjztW9qSYupN
MD5:	98626BCCC6D9BE75E13EF54233613861
SHA1:	3933FDE6370E97D410B14ACB6FF851B7097788A5
SHA-256:	E6DBD2D54DD55BC5120792FD3D29EC58A18CC2A5DB70626A66509B7DA00E6359
SHA-512:	BF8F5CDD5160E0C4246CB0CC4CCC1DA6EE4DC883646ACA949E34E4555B25725E68B6C425ED882FACC2A5CF09877DDEF55FB5E98F0A19B927837955F7006C2018
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/qljj3avn/closures_1200x800.jpg
Preview:	.....C....................................................................C....................................................................... ................................................L.........................!..."1..2AQ.#a.Bq..$3R...b..%C..4Sr..&D......5c.7...................................S......................!..1.AQa..."q..2.........#B.R.$3bCr.....%4Ss...c...DT..&F.d............?...V........o.. #.T .....z..B..........&.....u..7mVUL.[c...2...H\1o. .u..I.z..............GH..,.&V`D..Vh...`Q...=..k.H$i..gt..$\.;...d.....F.2.8.pFX....s..#!..$..z......!..y..[K........m.:....p'...F.Q......zQ.....[...6.>$.UC..q.&....9'..".kI.\|...R%^-/kO_...=..]S%Hp...I...Fp...g..R`.<...H...D....J.#F#o3.....${.3.... ...B....@^..xr.js9`....y.ki.m...(.K......].x...........Q..X...:U......gp./L.]Y.......9.~.8.2a)&t....R......e(..c9p7..x.\..I....7...LA.....)..1H.q......<..Y....c..P..C..{/......X..f.p..E.$....6.R..3..:.P.S........q...w$..-"5..O..b...&w_.-.K`4^...Kg.wa....

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	340182
Entropy (8bit):	5.619523280644519
Encrypted:	false
SSDEEP:	3072:X6z3/7qKbELs5HxTpDViIque0WNRvGB3k+BR7fdEvdTt7:XO3J4s5RTpDzqZ0oY3k+BR7fWvT
MD5:	390A18444749FF1687C35276C0117042
SHA1:	3942E2F36C9C62CFAF8C179550B278EF6C570B47
SHA-256:	460695EFD3945DB005D79592C92768F4404939DA71A3EC4338F5F96BDF576BAA
SHA-512:	34A540BA553B15C63CB93DF639A35189FF13441E9FC053D16C8B50064FD300DCC6AEFEDEF2CCCE4DB72AF0F6DEC55F1B333FE41CB7556F9456558B49A9BB3750
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var r;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function u(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ca(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 770, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	993202
Entropy (8bit):	7.980389117199469
Encrypted:	false
SSDEEP:	24576:kYGqUPPX0SWQ1KbUvWxM8REdHGMEAkMNCVpka9iX:kYViPX0u1KbUvHHH3kM+iX
MD5:	667E8F7F63CB44EE6F9D8F15F81D5DF1
SHA1:	29B4FB527776193539FC40614958A332FBF3E9AB
SHA-256:	C12E59A0130531465D380BC96343926F13E3885B517FEE880F09D62167FDBF87
SHA-512:	31D91C2BC3AFAD95C3A986CC2184F895869CC687D75CAD3E81ABA6FAE9FF4219C91D33A2DFFA7AA9D39F3A1870B0156426E648396EC8E740A65C0557F9934CA3
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/lhsdgn3y/image-mobile-app-intro.png
Preview:	.PNG........IHDR..............\|......sRGB.........sBIT....\|.d... .IDATx^..%K.%.V..Y..~..... ....n!.#x...7$$.t$.P../......;w.%6..>..g^..S..k.r...p777.af.q._.'...........w..\|y._~......../w...]..w_..~..C].9..{{.z...].b9\|...[?P.E....^__..owo.t.>_.T.(W...!(.s..m...x.*.m/.o..r.....I....:YuUz..]._m..o.....x......x....Y...3.v......\|..=.......h.j...hQ.\C...Q..../u..o....'}.O...o...!..6...9....5.......#...P...~.&$.yF.....L.iz...j..=..V..T..9.E...Y......}@'].k.......{..y..i..`.E_56...c.E........=............].~W.1?...........}=.....-....>.k.3...q....S.._....OOOc...9....]s..=.e....[g1.._^..'..u....m".s....{......"..{Y...X...?.Q....j.Y.=.X.w......{....7.....\.X.=..i.s..#?....'P.............+8.O.e......nO.......u.h.<.......\|k......gJ..3.8...1.W.<....;.[.>.{j...>..y.[...vH^_..L.e&/....z...^l.l..Y.G.']..$.s.OZU...Q...W....o/.?...n..\|DY.6..g.,..z......q..i..e......@..!y...q...:g.E6...:....U.M.....bo...B..}M....~Z.{_sx.....n.il....T.$..w

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	340182
Entropy (8bit):	5.619523280644519
Encrypted:	false
SSDEEP:	3072:X6z3/7qKbELs5HxTpDViIque0WNRvGB3k+BR7fdEvdTt7:XO3J4s5RTpDzqZ0oY3k+BR7fWvT
MD5:	390A18444749FF1687C35276C0117042
SHA1:	3942E2F36C9C62CFAF8C179550B278EF6C570B47
SHA-256:	460695EFD3945DB005D79592C92768F4404939DA71A3EC4338F5F96BDF576BAA
SHA-512:	34A540BA553B15C63CB93DF639A35189FF13441E9FC053D16C8B50064FD300DCC6AEFEDEF2CCCE4DB72AF0F6DEC55F1B333FE41CB7556F9456558B49A9BB3750
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/03dbdfab/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var r;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function u(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ca(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6670
Entropy (8bit):	4.648008092950253
Encrypted:	false
SSDEEP:	192:llkYk2331uFyUgMJRFRMB+NKVFVh8PjAgx9IgpmZOnTct+MugLjdmqHJd:lWblwMTbY
MD5:	CF3E470F544412F3F897F68E51B76DD8
SHA1:	9F4757011A4A9544085251320412631597E76F6C
SHA-256:	EB2C55882229DB22529DA40124F426FB098FE957433152902051460779447DDD
SHA-512:	C4A7D3E89F524665FE8D8F35A5DD5382B72383B73BC9FAEF1E7124B7116B6E8718487C68D8C525FB01C7684857088F6D84927DC90BCA4C7BFEC970DAB79EC493
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/css/components/press-releases.css
Preview:	@use "sass:math";./* media query mixin /./ get rid of list formatting /./ prevent long links from breaking out of container /./ creates a colored circle with an icon in the middle /./ formats the placeholder text within an input field */..press-releases {. padding: 5.625rem; }. @media (max-width: 74.9375rem) {. .press-releases {. padding: 3.75rem; } }. @media (max-width: 47.9375rem) {. .press-releases {. padding: 1.875rem; } }. .press-releases__header {. display: flex;. margin-bottom: 3.125rem; }. @media (max-width: 61.9375rem) {. .press-releases__header {. flex-wrap: wrap; } }. .press-releases__header-text {. flex-shrink: 0; }. @media (max-width: 47.9375rem) {. .press-releases__header-text {. flex-shrink: 1; } }. .press-releases__header-text h1 {. font-size: 3.75rem;. margin: 0;. line-height: 1.2; }. @media (max-width: 47.9375rem) {. .press-releases__header-text h1 {

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/03dbdfab/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7145
Entropy (8bit):	4.403443005145906
Encrypted:	false
SSDEEP:	192:8knoSd+EBwObsfLTd9aDrAcxzYAkPB0KUNNS:PnoSdhwDlcNeBnUNg
MD5:	17615144CC51F86B469385D0A302141F
SHA1:	34F904D338FF74708B159943F7B248353E75A786
SHA-256:	B1C3A8F08AB75ACA270B20A11EF900A0F07E6BF494F9A2F372B9F9EE81EFF022
SHA-512:	77E594C14BB51AF2C5E8862547FA3CC79A24445A866B03961F9EFC0B3ABFAB11E0A9456140D3E4E938CA3EA3AA9057138E4229034C320F879A7E4CB7BB2CBC33
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/e2ybixdp/google_play_store_badge_en.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="svg51" width="180" height="53.333" version="1.1" viewBox="0 0 180 53.333" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><metadata id="metadata9"><rdf:RDF><cc:Work rdf:about=""><dc:format>image/svg+xml</dc:format><dc:type rdf:resource="http://purl.org/dc/dcmitype/StillImage"/></cc:Work></rdf:RDF></metadata><path id="path11" d="m173.33 53.333h-166.66c-3.6666 0-6.6665-2.9999-6.6665-6.6665v-39.999c0-3.6666 2.9999-6.6665 6.6665-6.6665h166.66c3.6666 0 6.6665 2.9999 6.6665 6.6665v39.999c0 3.6666-2.9999 6.6665-6.6665 6.6665" fill="#100f0d" stroke-width=".13333"/><path id="path13" d="m173.33 1e-3h-166.66c-3.6666 0-6.6665 2.9999-6.6665 6.6665v39.999c0 3.6666 2.9999 6.6665 6.6665 6.6665h166.66c3.6666 0 6.6665-2.9999 6.6665-6.6665v-39.999c0-3.6666-2.9999-6.6665-6.6665-6.6665zm0 1.0661c3.0879 0 5.5999

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	58173
Entropy (8bit):	7.845188483807884
Encrypted:	false
SSDEEP:	1536:m4yJyJYt2Jmh3qDeIMExSYSkuHCv0emcAwRL6Xce:NIyclKAIv8cA0E
MD5:	38B47CE7CE66A14766E84A7EB9F12C9E
SHA1:	003866E8F25315A977BD1CBB06FFC0ED77917B16
SHA-256:	CD2EB5CDD3EE94CE4F21FF63DD7CE45D42DF22AE0B4772CD8922438F7AD80DC6
SHA-512:	B653D431359B2ADD89CAB14ADCE2CAFBE0CDEB8495CA62E10CC1EC879A9D24E21ED2007F538C35DE8EAEB35C3432294999AF6CD37006DF4BA665322BB859EDE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...8.....cr.... .IDATx...w.e.....C.}GTP6Q..P@qA.\`DA...Q....A.AAPP.G.D.E.HH....HB...I...............s..3T.]..IWW........1.........'.......!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!.. PW.......V.n.<.x.Xc....(..(./.......oCXsA5...i: .$...hK.G...u.....?.n.(..(....R-.j.U...F.:Jw.F".h.k..wK..s.C......EQ.EQ.A..H.F.f...DCC.tgk....@....g...)..(...4...9-%[.u..}...Tb..i..~...d.$.7S.EQ.EQ.V.7../k..KC}.t..Q......wv..-..R.EQ.EQ.^..l..ZP.&.s..+P[.Z..t.v....(..(..U....h.jG.;b.!..........(EQ.EQ...R.hS...}.W.T..UY.y...K..(..(.R.Z.`u.t.,..A...x..2o...)..(..(..+..

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1200x800, components 3
Category:	dropped
Size (bytes):	854091
Entropy (8bit):	7.977359296414499
Encrypted:	false
SSDEEP:	12288:r77oa3YkmOikOk+O66k7C/gs+P9hxrmuqmF1rZBkk7MjzI479efuQbwLg5nYtIpN:7o9kZvE42Hxrmqsk7MjztW9qSYupN
MD5:	98626BCCC6D9BE75E13EF54233613861
SHA1:	3933FDE6370E97D410B14ACB6FF851B7097788A5
SHA-256:	E6DBD2D54DD55BC5120792FD3D29EC58A18CC2A5DB70626A66509B7DA00E6359
SHA-512:	BF8F5CDD5160E0C4246CB0CC4CCC1DA6EE4DC883646ACA949E34E4555B25725E68B6C425ED882FACC2A5CF09877DDEF55FB5E98F0A19B927837955F7006C2018
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C....................................................................... ................................................L.........................!..."1..2AQ.#a.Bq..$3R...b..%C..4Sr..&D......5c.7...................................S......................!..1.AQa..."q..2.........#B.R.$3bCr.....%4Ss...c...DT..&F.d............?...V........o.. #.T .....z..B..........&.....u..7mVUL.[c...2...H\1o. .u..I.z..............GH..,.&V`D..Vh...`Q...=..k.H$i..gt..$\.;...d.....F.2.8.pFX....s..#!..$..z......!..y..[K........m.:....p'...F.Q......zQ.....[...6.>$.UC..q.&....9'..".kI.\|...R%^-/kO_...=..]S%Hp...I...Fp...g..R`.<...H...D....J.#F#o3.....${.3.... ...B....@^..xr.js9`....y.ki.m...(.K......].x...........Q..X...:U......gp./L.]Y.......9.~.8.2a)&t....R......e(..c9p7..x.\..I....7...LA.....)..1H.q......<..Y....c..P..C..{/......X..f.p..E.$....6.R..3..:.P.S........q...w$..-"5..O..b...&w_.-.K`4^...Kg.wa....

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	611
Entropy (8bit):	5.143150641984
Encrypted:	false
SSDEEP:	12:TMHdVv1W480lOtuz+0fLiJahTFyYb+KJQiwZeRPHZizlfJpFjX5A:2dV1fBlPZfFVb+2hizjpRq
MD5:	5EF2BDAB1A867A01034C1DE18EB30811
SHA1:	7B7456EAD1199CDE7D76AFB5AC3DFD306597B706
SHA-256:	DE38C924D48A171A328D521874F642502A2268B448C6172B3623B70D2298232E
SHA-512:	E5FAC9C2B7D08D65A5803DE63348BCE437EE69F65F24451E9D9B2A55E6E4C80A88A0A6D229FAB28AC316C7ECC3C9DA23E0C48E179A85AC407A3931B5594E90C5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#888;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#fff;}</style></defs><circle id="Ellipse_181" class="cls-1" cx="23.07" cy="23.53" r="22.5"/><g id="Group_5387"><path id="Path_5202" class="cls-2" d="M14.73,24.45l5.39,5.38c.51.49,1.31.49,1.82,0,.49-.51.49-1.31,0-1.82l-3.18-3.2h11.76c.71,0,1.29-.58,1.29-1.29s-.58-1.29-1.29-1.29h-11.76l3.18-3.18c.51-.5.51-1.32,0-1.83-.5-.51-1.32-.51-1.83,0,0,0,0,0-.01.01l-5.37,5.37c-.24.24-.38.57-.39.92,0,.35.13.68.39.92Z"/></g></svg>

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	787
Entropy (8bit):	5.11252970986795
Encrypted:	false
SSDEEP:	24:2d6L4eNK5dJKzSRAi2nFPVgruTbz4sRCeiG5:czZrJKzSRAdtgru3z4Q15
MD5:	9D4BF1CED71B1AFCD60F8B01D2D06063
SHA1:	BE0A11454AF7D4D96304DC541C50BE1B42C3012D
SHA-256:	96DA3C3CAF7CB60120C64221466E9FC3B00B09FD1D94A0BF58C2FB5993DE5EE8
SHA-512:	C6E4D05D41F54AD4246CE4AB77A14B244EBFCB414435CFC7A3AE347EB3ED67A99F30F4587F53A518C58D61499D9D109D683B39E0C7285A37404FA83EFAC2B26A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125">. <defs>. <style>. .cls-1 {. fill: #231f20;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. Generator: Adobe Illustrator 28.7.1, SVG Export Plug-In . SVG Version: 1.2.0 Build 142) -->. <g>. <g id="Layer_1">. <circle class="cls-2" cx="62.5" cy="62.5" r="61.3"/>. <path class="cls-1" d="M97.7,67.4v24.4h-14.1v-22.8c0-5.7-2-9.6-7.2-9.6s-6.2,2.6-7.2,5.2c-.4.9-.5,2.2-.5,3.4v23.8h-14.1s.2-38.5,0-42.5h14.1v6s0,0,0,.1h0c1.9-3,5.2-7.2,12.8-7.2s16.3,6.1,16.3,19.1h0ZM39.7,28.7c-4.8,0-8,3.2-8,7.3s3.1,7.3,7.8,7.3h0c4.9,0,8-3.3,8-7.3,0-4.2-3.1-7.3-7.9-7.3h0ZM32.6,91.8h14.1v-42.5h-14.1v42.5Z"/>. </g>. </g>.</svg>

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (438)
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	4.91213164573384
Encrypted:	false
SSDEEP:	12:u28w/R0LR0s5BHslriFwuxeHJuRwuZwwuv9w48wzC3:K5BHslghepuZ53m+
MD5:	6F876C291080DF27FA95B6AC4278F16C
SHA1:	E6919350E723856CD0C611FFEB4E5C340CA8C890
SHA-256:	D0D9D763B65EB5E8173721564039094724A46B23970D694A381769354E7EF464
SHA-512:	BA08FE2DBEE017D33E08112EAED8C7DFA7767666FAF6AF0B73FB825DF302CE99E01A7F4A82EBB2E38CD3863F16BF731EDBF039D46C222725DDA6475A8A136CDC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-wfmo&oit=3&cp=29&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["https://thetollroads.com-wfmo",["https //thetollroads.com-wfmonline","https //thetollroads.com-wfmo.com"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"//thetollroads.com-wfmonline"},{"mp":"\u2026 ","t":"//thetollroads.com-wfmo.com"}],"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[160],[160]],"google:suggesttype":["TAIL","TAIL"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2107
Entropy (8bit):	4.899816704519616
Encrypted:	false
SSDEEP:	48:QjkxnEQWCUpThFWe2CMZV3hUVvThBeqWLjQAlU7K+Y1UjsIG:lEXXiRC7/eq3d5sIG
MD5:	6769A7F48CFDCB5C084C6CFA5684A16D
SHA1:	0B62065D0324091DF94FDCE92454E82927666085
SHA-256:	127B453E1B174E1C6EED410157790720DD5B14BEFE7B80EDF15CC2DCB13651BB
SHA-512:	C71B2A0FB8B744BAE5EB8FA7A5B7B9AB35AEC5FCE10AB1B1B808B16D3E679B77B51B47EB722CE33C08CB1919F86E4652AF2F084872D12609C48A06484B5D301F
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/css/components/intro-box-overlapping.css
Preview:	@use "sass:math";./* media query mixin /./ get rid of list formatting /./ prevent long links from breaking out of container /./ creates a colored circle with an icon in the middle /./ formats the placeholder text within an input field */..intro-box-overlapping-wrap {. padding: 0;. position: relative; }...intro-box-overlapping {. width: 100%;. position: relative;. background-repeat: no-repeat;. background-size: cover;. background-position: center; }. @media (max-width: 61.9375rem) {. .intro-box-overlapping {. display: none; } }...intro-box-overlapping__text-wrap {. padding: 5% 0;. position: relative;. margin-left: 0px;. margin-right: 0px;. display: flex;. align-items: center; }. @media (max-width: 74.9375rem) {. .intro-box-overlapping__text-wrap {. padding: 7% 0; } }. @media (max-width: 61.9375rem) {. .intro-box-overlapping__text-wrap {. display: none; } }...intro-box-overlapping__text {. position: relative;. background-color: #fff;. co

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1191
Entropy (8bit):	4.367066927588275
Encrypted:	false
SSDEEP:	24:2dV1+4kec/UsTwBQC0cWWqGtV9r3EwzWgTIg8Cn:cjJkVxTwBN0tgPrr6gT8k
MD5:	02F292BDE2FB1C9A4FD31FC95C53EC7C
SHA1:	797BC4CCA1F5828EF4D35BB8F0B9B20AC7F821B2
SHA-256:	F7A20724BCA1CC54D701CF63C215DE7C344FC2E44FB6D053D7EFF99C57152370
SHA-512:	111E480B64403D266CF58A85643F7FD909EC3B21B3BD87CF22BCA250439175801DC4AE29526AEC4CD71B3E2F602AAF4BE7B8FA3A3492D3E94F4576C92C9A4929
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14.5,14.5-6.49,14.5-14.5S22.98.48,14.98.48ZM14.35,6.31c.46-.05.91.09,1.27.37.36.29.59.71.64,1.17.1.95-.59,1.8-1.54,1.91-.95.1-1.81-.59-1.91-1.54-.1-.95.59-1.81,1.54-1.91ZM18.2,22.78c-.13.05-.26.08-.4.09-.37,0-.7-.21-.86-.54l-1.47-3.12c-.15-.34-.27-.7-.33-1.07.12-.1.23-.2.33-.31.58-.58,1.21-1.18,1.3-1.26l.04-.04.19,1.21c.04.24.11.47.21.68l1.45,3.12c.21.47,0,1.02-.46,1.25ZM19.22,15.25c-.11.06-.23.09-.36.09-.28,0-.55-.15-.68-.4l-.39-.72c-.27-.48-.62-.91-1.04-1.28.05.56.14,1.21.17,1.59.09.79.27,1.35-.24,1.84-.18.17-2.46,2.4-2.46,2.4-.24.24-.41.53-.49.86l-.72,2.93c-.11.42-.48.71-.91.72-.08,0-.15-.01-.23-.03,0,0,0,0,0,0-.51-.12-.83-.63-.71-1.14l.71-2.91c.16-.67.5-1.29,1-1.77l1.23-1.19-.66-3c-.42.53-.92.98-1.49,1.35l-.8.52s-.01,0-.02.01c-.37.23

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2252
Entropy (8bit):	4.511213774608069
Encrypted:	false
SSDEEP:	48:cj8z6SYz9mW8EQiuk4LuRLTSgvYTk44WvkS5fcOrG7so+R/:bWSQ+Ji34L0LT/gTk4l8qvG7sbR/
MD5:	7E2295EE2708E28A7FA3771713A5F6A8
SHA1:	101D5756451A8567A09DEAE916091408D817BD7B
SHA-256:	6EEDEAA68C74847BE9055646079B999AAC493385D18DA9C27684866EEE9EF1B2
SHA-512:	A6A5D1686F9EA0F916E69CB8B2ACFE049B454D1D3869CF72E4F8CE5047104EEE0AD93395723A5B5DF8DECC36DB77301B8271246F1EB25B27764441F74CC98935
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 49.54 21.19"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><g id="Group_2795-2"><path id="Path_2601" class="cls-1" d="M36.55,5.11l-.15-.17.1.16h.05"/><path id="Path_2602" class="cls-1" d="M43.46,9.83c-.2-.36-2.18-.63-2.41-.66h-.03l.36.26s1.7-.06.73.64c-.06.04-.14.09-.23.15-2.28,1.12-4.62,2.11-7.02,2.96-.66.24-1.3.48-1.9.69-6.9,2.41-9.47,7.32-9.47,7.32h4.82s1.76-4.26,4.83-5.91c.08-.04.15-.08.23-.12,3.21-1.55,6.98-2.95,8.83-3.79.18-.08.33-.16.47-.23,1.37-.72.92-1.07.79-1.31"/><path id="Path_2603" class="cls-1" d="M24.02,2.41s-1-1.55-2.36-1.55c-1.28,0-2.99,1.43-2.99,1.43L0,18.26h9.86L24.76,3.4l-.75-.99Z"/><path id="Path_2604" class="cls-1" d="M25.06,10.81c4.84-1.93,10.06-4.18,10.98-4.62.18-.08.35-.19.5-.32.04-.04.07-.08.1-.12l-.55-.64s-.32-.37-.4-.46l-2.64-3.07c-.68-.88-1.68-1.45-2.78-1.58-1.01.16-1.92.68-2.57,1.46L10.5,18.6h5.15l.08-.13c2.18-3.52,5.46-6.21,9.33-7.66"/>

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	826
Entropy (8bit):	5.043295607303914
Encrypted:	false
SSDEEP:	12:TMHdMGL4CnEiSVElA9IFQQ6ad9yXPTeIJoY5t9ADapbW2BOP1yLXqHbaKuLVcLBC:2dnL4CLka0IKKITew5PAKbuokiRclQR
MD5:	E23FF6CA3253EE17CD934B7DB41433AE
SHA1:	4DB5F7B09A8C96B0B3841CC5852D13E32B3A8A1D
SHA-256:	C18164FD35C487465498B73453F5F971809201324435A435B983A10E9395B2B9
SHA-512:	644C8E400499F4AD3793FE8C0BDCC26C486B0DF5A92842889E8C0B2844C851AD439B5F35FA5BC3C617EB61EAB0E7FF68F442670B6250B887C8F24AD55B5D45E9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 29.8 29.8">.. <defs>.. <style>.. .cls-1 {.. fill: #000;.. }.... .cls-1, .cls-2 {.. stroke-width: 0px;.. }.... .cls-2 {.. fill: #fff;.. }.. </style>.. </defs>.. <circle class="cls-2" cx="15" cy="15.1" r="10.2"/>.. <circle id="Ellipse_142" data-name="Ellipse 142" class="cls-2" cx="14.8" cy="14.7" r="9.2"/>.. <path id="iconInformation" class="cls-1" d="M14.8,10.9c-1.1,0-2-.9-2-2.1s.9-2,2.1-2,2,.9,2,2.1c0,.5-.2,1.1-.6,1.4-.4.4-.9.6-1.4.6h0ZM13.1,21.2v-6.7c0-.9.8-1.7,1.7-1.7s1.7.8,1.7,1.7h0v6.7c0,.9-.8,1.7-1.7,1.7s-1.7-.8-1.7-1.7h0ZM14.8.1C6.7.1.1,6.7.1,14.9s6.6,14.7,14.7,14.7,14.7-6.6,14.7-14.7S23,.1,14.8.1h0Z"/>..</svg>

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (497)
Category:	downloaded
Size (bytes):	1663268
Entropy (8bit):	5.9492248971532415
Encrypted:	false
SSDEEP:	24576:puVYmD4/cZQ/coLGVFyCJTiPf7A8rOdUOtu77hO2s:puVYmD4/cZQ/PLGVFyCJTiPf7A8qys
MD5:	A64279CDF451F5E1E52FFFA15FAD9BA2
SHA1:	41E62CF9856071408CD04673C776E8C3FA148D43
SHA-256:	78DD8B551EEB2A75A3AA78077D7A7D87A4914C907F3BA7AB805E08F50FDC357C
SHA-512:	544D40A17FF50ABD24B00E0D8F77B3D81594987B879A0590441A8BEB6CAFCFCFF56E8346429C3678D3C4178D71C1A607A3BBA295AE88157831302C2FA41EC065
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/js/global.js?v=1734624164460
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){./*. @popperjs/core v2.11.8 - MIT License. */..'use strict';..Object.defineProperty(exports, '__esModule', { value: true });..function getWindow(node) {. if (node == null) {. return window;. }.. if (node.toString() !== '[object Window]') {. var ownerDocument = node.ownerDocument;. return ownerDocument ? ownerDocument.defaultView \|\| window : window;. }.. return node;.}..function isElement(node) {. var OwnElement = getWindow(node).Element;. return node instanceof OwnElement \|\| node

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	826
Entropy (8bit):	5.043295607303914
Encrypted:	false
SSDEEP:	12:TMHdMGL4CnEiSVElA9IFQQ6ad9yXPTeIJoY5t9ADapbW2BOP1yLXqHbaKuLVcLBC:2dnL4CLka0IKKITew5PAKbuokiRclQR
MD5:	E23FF6CA3253EE17CD934B7DB41433AE
SHA1:	4DB5F7B09A8C96B0B3841CC5852D13E32B3A8A1D
SHA-256:	C18164FD35C487465498B73453F5F971809201324435A435B983A10E9395B2B9
SHA-512:	644C8E400499F4AD3793FE8C0BDCC26C486B0DF5A92842889E8C0B2844C851AD439B5F35FA5BC3C617EB61EAB0E7FF68F442670B6250B887C8F24AD55B5D45E9
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/icons/icon-informationWhite.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 29.8 29.8">.. <defs>.. <style>.. .cls-1 {.. fill: #000;.. }.... .cls-1, .cls-2 {.. stroke-width: 0px;.. }.... .cls-2 {.. fill: #fff;.. }.. </style>.. </defs>.. <circle class="cls-2" cx="15" cy="15.1" r="10.2"/>.. <circle id="Ellipse_142" data-name="Ellipse 142" class="cls-2" cx="14.8" cy="14.7" r="9.2"/>.. <path id="iconInformation" class="cls-1" d="M14.8,10.9c-1.1,0-2-.9-2-2.1s.9-2,2.1-2,2,.9,2,2.1c0,.5-.2,1.1-.6,1.4-.4.4-.9.6-1.4.6h0ZM13.1,21.2v-6.7c0-.9.8-1.7,1.7-1.7s1.7.8,1.7,1.7h0v6.7c0,.9-.8,1.7-1.7,1.7s-1.7-.8-1.7-1.7h0ZM14.8.1C6.7.1.1,6.7.1,14.9s6.6,14.7,14.7,14.7,14.7-6.6,14.7-14.7S23,.1,14.8.1h0Z"/>..</svg>

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2475)
Category:	downloaded
Size (bytes):	218588
Entropy (8bit):	5.564623072657112
Encrypted:	false
SSDEEP:	3072:oyMlCE11Sl7B+UUavhCkVyFVKJI1PYMJuGqNJ6a35t1yNtLAdhV:Fi8JdL5tq8l
MD5:	673BA6129E010CAD4E0C0E37E5A6D7DD
SHA1:	5A5380A9F66A8F9AA612825EFBF92A1DA4E7A671
SHA-256:	B71EA4595DC1050F08DF9BF3A90322E3E22F9FBD944259FEF7BBE1AEC043314A
SHA-512:	7E234CE23DD6655DC63F542408E6D593AFD876423309AF76FA41A3F71939B1019AD541C80D72547064C267B37020EE50FFBEA8E418EFB658AFF1D4BE0A4D410E
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.rn12Fy6SzHc.O/am=ACA/d=1/exm=el_conf/ed=1/rs=AN8SPfrRwmOjAdSBhDjpxyeTlR3OAc-Rbg/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Tg,Ug,Yg,Zg,$g,bh,ch,eh,fh,gh,hh,ih,kh,mh,nh;_.Sg=function(a,b,c){if(a.forEach&&typeof a.forEach=="function")a.forEach(b,c);else if(_.sa(a)\|\|typeof a==="string")Array.prototype.forEach.call(a,b,c);else for(var d=_.nf(a),e=_.mf(a),f=e.length,g=0;g<f;g++)b.call(c,e[g],d&&d[g],a)};Tg=function(a,b){if(b){b=Number(b);if(isNaN(b)\|\|b<0)throw Error("L`"+b);a.B=b}else a.B=null};Ug=function(a,b){return a?b?decodeURI(a.replace(/%25/g,"%2525")):decodeURIComponent(a):""};._.Vg=function(a,b,c){a.j=c?Ug(b,!0):b;return a};_.Wg=function(a,b,c){a.h=c?Ug(b,!0):b;return a};_.Xg=function(a,b,c){a.l=c?Ug(b,!0):b;a.l&&(a.l=a.l.replace(/:$/,""));return a};Yg=/[#\/\?@]/g;Zg=/[#\?]/g;$g=/[#\?:]/g;bh=/#/g;ch=/[#\?@]/g;_.dh=function(a){var b=_.pc();a.g.set("zx",b)};eh=function(a){a=a.charCodeAt(0);return"%"+(a>>4&15).toString(16)+(a&15).toString(16)};fh=function(a,b,c){return typeof a==="string"?(a=encodeURI(a).replace(b,eh),c

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53770)
Category:	dropped
Size (bytes):	55054
Entropy (8bit):	5.733834861934599
Encrypted:	false
SSDEEP:	1536:jMKHsdNIJwnXw6U+lvedkhUxSex0x+ddCZe3MIa5:InN3nXtUuQOlki
MD5:	79F6DDC470861B03077B2F28713E548D
SHA1:	C3AF0CC83846784186CCA9F611BB5A3E0B9D980B
SHA-256:	5AE02B0A8EAE88E0B7D9038888D59E487F61D87E6F7FF8EFFE2859D1941E6D2A
SHA-512:	2CE4FCD2B41E8E768B212E592C0D054B49F1DC0C7FDF5CEBE260F1B5BFAA6B42BDFFC2564A2335A46E2ECCB947FDCF9A57BC95B34A68C7FE5D627D61318AEC34
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function N(g){return g}var q=function(g,n,z,l,M,R,S,b,C,B,L,c){for(c=29,L=46;;)try{if(c==z)break;else{if(c==81)return L=46,C;if(c==29)C=S,b=Z.trustedTypes,c=98;else if(c==18)L=46,c=l;else{if(c==g)return C;c==n?(Z.console[M](B.message),c=81):c==l?c=Z.console?n:81:c==90?(L=21,C=b.createPolicy(R,{createHTML:E,createScript:E,createScriptURL:E}),c=81):c==98&&(c=b&&b.createPolicy?90:g)}}}catch(X){if(L==46)throw X;L==21&&(B=X,c=18)}},E=function(g){return N.call(this,g)},Z=this\|\|self;(0,eval)(function(g,n){return(n=q(33,34,99,85,"error","ad",null))&&g.eval(n.createScript("1"))===1?function(z){return n.createScript(z)}:function(z){return""+z}}(Z)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (344)
Category:	downloaded
Size (bytes):	349
Entropy (8bit):	4.85897023192824
Encrypted:	false
SSDEEP:	6:Vw96QsNUs+ol7sBHsL2YriFGHLNjQKu7kwGRVtVSCs9RewGd/fff0wWeXFEL13:u9aNUsgBHslriFuZsd7kwuy9Rew4/ffI
MD5:	C795F3AADAB97377EF1E36FE7F066977
SHA1:	E734A348484EFFEA7117BA1DA18158BBE0B91370
SHA-256:	9B70874FC75C59272F02C41F6D14336BB225F23D9D90C93978FB6857F4394691
SHA-512:	174FC3249423E0F03EB6C0B032B777A5F4D4D3E007B4A88B1B24F7674711B93747F7A2BF85BDD1763D94D1753CEB2CF2C7B1C1011B9D95859BE0F463627CDA89
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.&oit=1&cp=5&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["wfmo.",["wfmu radio","wfmo meaning","wfmo am","tulane wfmo","noaa wfmo"],["","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,552,551,550],"google:suggestsubtypes":[[30,10],[30],[30],[5,30],[5,30]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	700
Entropy (8bit):	5.0966418707187495
Encrypted:	false
SSDEEP:	12:TMHd6L4m1NnK5hoaFJKAApSRi/M1R2nDabrksPwKc+UxQ6Rvzh97sgWP/+:2d6L4eNK5dJKzSRAi2nmbrksPwSUxQWJ
MD5:	18DD9027CA5578A2396E006C488D4989
SHA1:	2D86174271F98F7855DB1F45AAE7072E317999DD
SHA-256:	C68F57BBBE51438D80CF7F43D869E91FB40EA0CB058D097484E6D285920EF001
SHA-512:	B110FD35A7D41CFDEB1A4F7D038CF695596639200B63B6F8B794D852A5D998FF35AAAE78F5A2B4FC5980791C79914AFACE69B2087BB24153ACF3FCDB0D50B8BC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125.5 125.5">. <defs>. <style>. .cls-1 {. fill: #231f20;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. Generator: Adobe Illustrator 28.7.1, SVG Export Plug-In . SVG Version: 1.2.0 Build 142) -->. <g>. <g id="Layer_1">. <path class="cls-2" d="M1.5,62.8C1.5,28.9,28.9,1.5,62.8,1.5s61.3,27.4,61.3,61.3-27.4,61.3-61.3,61.3S1.5,96.6,1.5,62.8Z"/>. <path class="cls-1" d="M78.3,62.8h-10.2v36.2h-15.1v-36.2h-7.2v-12.8h7.2v-8.3c0-5.9,2.8-15.2,15.2-15.2h11.2v12.5h-8.1c-1.3,0-3.2.7-3.2,3.5v7.5h11.5l-1.3,12.8h0Z"/>. </g>. </g>.</svg>

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	30884
Entropy (8bit):	5.396878850736056
Encrypted:	false
SSDEEP:	384:4o63kjilKDknpjTqty5qTWZhuHjiyBMAtmN4C4SYCG3EzZYBFS/+0O/txrncOnk5:Utlrpgy5GZHm4C4N10kv0O/zrYe1M
MD5:	32C99FE6533A025BDB08BDE87A9B4F6E
SHA1:	F1B48F220F4B4B81CCDBB1A9289B821A66CFA1D3
SHA-256:	14939503C8A97BEF459CE94218F0E65933AB569F7B1D726BCB0B3C1031EBCCF9
SHA-512:	8D454CC89659899B923B9467FD1F488F0DEA432D4FDAEDB59FAA83C29D4FEDD045AA445BE34D094103E4D81BD4773B61F926C381F14FC7388E34D89D51F4582D
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=da(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	675
Entropy (8bit):	4.758458294337748
Encrypted:	false
SSDEEP:	12:TMHdVv1He4o/7eJn0QFFBLDLG8HUyhkhpijVPajeMp/fpQ8uWhVAT:2dV1+4keyQFFBLDLShKanhIWhVg
MD5:	1EAC1325D3A82A6B45154BE01C49A415
SHA1:	7BF33CD31ABB32D8D88351F567BC088B80369248
SHA-256:	C62F5BA0A084BE31A6F7C63EE36981960B538DD2FAA51EFA095E16BB5BA586BC
SHA-512:	B40841BA94400E1D0786445C01AA49DB44F1A24ADC32D54C42DE27B88397FACA0EA0125EA79A4AEC9601B5C429E7E045028EC29B782C81B8F675105342899DA1
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/icons/icon_footer-phone.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14.5,14.5-6.49,14.5-14.5S22.98.48,14.98.48ZM22.51,19.8s-.04.06-.06.09l-1.29,1.96c-.3.47-.83.73-1.39.7-.6-.03-1.19-.11-1.77-.24-4.92-1.53-8.77-5.38-10.3-10.3-.12-.58-.21-1.16-.24-1.75-.03-.55.23-1.07.69-1.37l1.97-1.32c.47-.31,1.1-.18,1.41.29.02.03.04.06.06.1l1.6,3.09c.22.44.11.97-.27,1.28l-1.44,1.12c.55,1.1,1.29,2.11,2.17,2.97.85.86,1.84,1.59,2.92,2.14l1.13-1.46c.3-.39.84-.5,1.28-.27l3.1,1.6c.5.26.7.87.44,1.38Z"/></svg>

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53770)
Category:	downloaded
Size (bytes):	55054
Entropy (8bit):	5.733834861934599
Encrypted:	false
SSDEEP:	1536:jMKHsdNIJwnXw6U+lvedkhUxSex0x+ddCZe3MIa5:InN3nXtUuQOlki
MD5:	79F6DDC470861B03077B2F28713E548D
SHA1:	C3AF0CC83846784186CCA9F611BB5A3E0B9D980B
SHA-256:	5AE02B0A8EAE88E0B7D9038888D59E487F61D87E6F7FF8EFFE2859D1941E6D2A
SHA-512:	2CE4FCD2B41E8E768B212E592C0D054B49F1DC0C7FDF5CEBE260F1B5BFAA6B42BDFFC2564A2335A46E2ECCB947FDCF9A57BC95B34A68C7FE5D627D61318AEC34
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/WuArCo6uiOC32QOIiNWeSH9h2H5vf_jv_ihZ0ZQebSo.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function N(g){return g}var q=function(g,n,z,l,M,R,S,b,C,B,L,c){for(c=29,L=46;;)try{if(c==z)break;else{if(c==81)return L=46,C;if(c==29)C=S,b=Z.trustedTypes,c=98;else if(c==18)L=46,c=l;else{if(c==g)return C;c==n?(Z.console[M](B.message),c=81):c==l?c=Z.console?n:81:c==90?(L=21,C=b.createPolicy(R,{createHTML:E,createScript:E,createScriptURL:E}),c=81):c==98&&(c=b&&b.createPolicy?90:g)}}}catch(X){if(L==46)throw X;L==21&&(B=X,c=18)}},E=function(g){return N.call(this,g)},Z=this\|\|self;(0,eval)(function(g,n){return(n=q(33,34,99,85,"error","ad",null))&&g.eval(n.createScript("1"))===1?function(z){return n.createScript(z)}:function(z){return""+z}}(Z)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12353
Entropy (8bit):	4.448551671198565
Encrypted:	false
SSDEEP:	192:WQXXvZrvijv+hXkZfNSRcvzU2rgchoDwnT2lIdNVa8XaPWty0WBYvy4SjK9igvqQ:WQXXvZrvUmyAqtDnTzV29kFmCz
MD5:	D0558D91063038236B60E3EF71FDC1FD
SHA1:	5EB1A238A24F928783BFDF3E8B093E1B38AEBE88
SHA-256:	25178AEEF6EB6B83B96F5F2D004EDA3BFFBB37122DE64AFBAEF7107B384A4132
SHA-512:	B11AD7A907B52EAC32339FB4EA7DA1C1FF92522485E1519BCB8AEB515D29C07E5C0DC75EA7B1E9FBEFA06C6242659B9F45754A418AFB9415504E6E1044540932
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="US_UK_Download_on_the" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" width="135px" height="40px" viewBox="0 0 135 40" enable-background="new 0 0 135 40" xml:space="preserve">..<g>...<path fill="#A6A6A6" d="M130.197,40H4.729C2.122,40,0,37.872,0,35.267V4.726C0,2.12,2.122,0,4.729,0h125.468....C132.803,0,135,2.12,135,4.726v30.541C135,37.872,132.803,40,130.197,40L130.197,40z"/>...<path d="M134.032,35.268c0,2.116-1.714,3.83-3.834,3.83H4.729c-2.119,0-3.839-1.714-3.839-3.83V4.725....c0-2.115,1.72-3.835,3.839-3.835h125.468c2.121,0,3.834,1.72,3.834,3.835L134.032,35.268L134.032,35.268z"/>...<g>....<g>.....<path fill="#FFFFFF" d="M30.128,19.784c-0.029-3.223,2.639-4.791,2.761-4.864c-1.511-2.203

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-FXMPC209X2&gacid=412420669.1735687350&gtm=45je4cc1v9123471210za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1254518336
Preview:	<html></html>

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 375, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	634569
Entropy (8bit):	7.9814491963875955
Encrypted:	false
SSDEEP:	12288:MtlAN+2KgOhgT/eZkkw4C5CcHnyZCbuXABdgNMFkz+FwbMroELE7:MfgSimJoCcHyZ0ulNjmhroELi
MD5:	C4B2903F4E25CAFEB9A18FE6348E3E6C
SHA1:	32915EBCDC3FA91F1279EF12D7AF2860F03EFE9C
SHA-256:	C6F8FBA514474F4CD32D618AA602A4A3932529005160F9780BFA483DA4442DDA
SHA-512:	909AD7EF78B48D18FDD87FCEDDDEC3EC0A78AA60B3E79CEFEFB19A8B15BEF38AFAF5E623CF4A2233061C2AF59D13F259FFC3090D4FD902AE42E0F709597F1666
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/vbxdaes3/241_cp_1200x600.png
Preview:	.PNG........IHDR.......w.....u.Y.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (497)
Category:	dropped
Size (bytes):	1663268
Entropy (8bit):	5.9492248971532415
Encrypted:	false
SSDEEP:	24576:puVYmD4/cZQ/coLGVFyCJTiPf7A8rOdUOtu77hO2s:puVYmD4/cZQ/PLGVFyCJTiPf7A8qys
MD5:	A64279CDF451F5E1E52FFFA15FAD9BA2
SHA1:	41E62CF9856071408CD04673C776E8C3FA148D43
SHA-256:	78DD8B551EEB2A75A3AA78077D7A7D87A4914C907F3BA7AB805E08F50FDC357C
SHA-512:	544D40A17FF50ABD24B00E0D8F77B3D81594987B879A0590441A8BEB6CAFCFCFF56E8346429C3678D3C4178D71C1A607A3BBA295AE88157831302C2FA41EC065
Malicious:	false
Reputation:	low
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){./*. @popperjs/core v2.11.8 - MIT License. */..'use strict';..Object.defineProperty(exports, '__esModule', { value: true });..function getWindow(node) {. if (node == null) {. return window;. }.. if (node.toString() !== '[object Window]') {. var ownerDocument = node.ownerDocument;. return ownerDocument ? ownerDocument.defaultView \|\| window : window;. }.. return node;.}..function isElement(node) {. var OwnElement = getWindow(node).Element;. return node instanceof OwnElement \|\| node

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	674
Entropy (8bit):	5.09149637169964
Encrypted:	false
SSDEEP:	12:TMHd6L4m1NnK5KAhoaFJKAApSRi/M1R2nDRPgySV5kOtblTMUPQLo8+:2d6L4eNKwAdJKzSRAi2nFPVaPYu
MD5:	0D56B4A5B4956DF9E52C4C9E31D8D72C
SHA1:	947A347F71640246A46E92FDAB76CD8D89D4C526
SHA-256:	1801F6DDC90B88586B33813BA72028F6D13936EF27F897BB26809734CCB52A09
SHA-512:	58EFCCD50704004BACC72ADEE8B5E69FE24C8AB0F3F6AEEBFEE86EF6E030558A891704BF6C54EFF9FF2A18B89FF6FBC3610147CF4C73A690E0556E12B641AFCB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125">. <defs>. <style>. .cls-1 {. fill: #231f20;. fill-rule: evenodd;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. Generator: Adobe Illustrator 28.7.1, SVG Export Plug-In . SVG Version: 1.2.0 Build 142) -->. <g>. <g id="Layer_1">. <circle class="cls-2" cx="62.5" cy="62.5" r="61.3"/>. <path class="cls-1" d="M99.1,47.8c0-6-4.9-11-10.9-11h-51.4c-6,0-11,4.9-11,11v29.4c0,6.1,4.9,10.9,11,10.9h51.4c6.1,0,10.9-4.9,10.9-10.9v-29.4ZM55.2,74.9v-27.6l20.9,13.8-20.9,13.8Z"/>. </g>. </g>.</svg>

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1032
Entropy (8bit):	4.7689062344108795
Encrypted:	false
SSDEEP:	24:2dV1Rzvlw2PJYbMS/uZWJIh/uZjjGSSCP64RDy2:cjRl9PJ+Ml7SRPVDy2
MD5:	A3AD987907B760B90C27EACD28143349
SHA1:	620126AD81FAC8DB3900FC9DCA27F99931FEBD75
SHA-256:	A284DAF097A479ECF4EF7303B2636C471C3EB0D48FC4C5CC1CDFEB6BA42A3D02
SHA-512:	02024B3297A95810D8ADEC9BD1A09F66292537A347510D2664C7BF887165D8239C32A8FA602F29737786580A6004B5B9C329B9249048618D2864BC13678935D9
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/b35pwkub/icon_homepage-toll-violations.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.45.22,10.68.22,23.3c0,12.62,10.23,22.85,22.85,22.85,12.62,0,22.85-10.23,22.85-22.85h0c0-12.62-10.23-22.85-22.85-22.85"/><g id="Group_5281"><path id="Path_5160" class="cls-2" d="M18.85,26.86h5.44c.46.02.81.41.79.87-.02.43-.36.77-.79.79h-5.44c-.46-.02-.81-.41-.79-.87.02-.43.36-.77.79-.79M18.85,22.55h8.44c.46.02.81.41.79.87-.02.43-.36.77-.79.79h-8.44c-.46-.02-.81-.41-.79-.87.02-.43.36-.77.79-.79M25.53,15.81c.1,0,.2.04.27.11l3,3c.15.15.15.39,0,.54-.07.07-.17.11-.27.11h-1.32c-1.1.04-2.02-.82-2.05-1.92,0,0,0,0,0,0v-1.46c0-.21.17-.38.38-.38h0ZM17.62,13.34c-1.58-.05-2.91,1.18-2.96,2.77,0,0,0,0,0,0v14.37c.05,1.58,1.37,2.82,2.95,2.77,0,0,0,0,0,0h10.9c1.58.05,2.91-1.18,2.96-2.76,0,0,0,0,0,0v-9.4c0-.99-.39-1.94-1.09-2.65l-4.01-4.01h0c-.7-.7-1.65-1.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.280895574824055
Encrypted:	false
SSDEEP:	24:E11XIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E11XmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	FCDFE214C644BBBC6DFDCE139531BC9D
SHA1:	AFBE7DA92A932F6533D44F497591EE6664570050
SHA-256:	1DAEB8F2B20E643498E588A0F3BC753699FE28C787205ECE9B0FC5CD5A7B06BE
SHA-512:	75EE315A0D186E4D0D24CC31A4D960C3A0F0DA7B82397C04ADBFE91E535ADAFC99E36858952EAD793E71E5F79D765454A45A5BBCFBFBC13292CDFA7ECD137A4D
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 667, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	983413
Entropy (8bit):	7.985415158290568
Encrypted:	false
SSDEEP:	24576:ye3BrGpl8fCwaO4ANQwJ8ehMfYAOMzeHtl5EPCuXgoILXW:LrGpyqYNhJ8k/Mml5OcW
MD5:	020514DB0768F7D80B651B61974E6C2C
SHA1:	8239DFCF22E8EE1A446A15EE1825D4DEC4404458
SHA-256:	29A045D897C3E2BFAA7C2ED75124BBEDA6F63FC64F7B989D50464B91DFCF5463
SHA-512:	50B11D0850CF2C1A61974E48FE8B051F4A51237A9F46EDED78C370D6339BBBAB33434F667E70B96C955BADF88E106EDE884609A5C403A4FBA6871BB1C12077B8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............fb.?....gAMA......a... .IDATx..g..G......w....}...c5.4#..G....o..x.. @.y.....F.\|....O.7.Y.....U..{...z....2.....i.o...}..j..G.{g?.._..N...w..........v...[7sc..K..o........o{....Y.......#...n.....z..z.w....zGW......\|...+[?.]......}..?_..Y.P..,WBy.z.~=..}x...9.>...\|v...=6.7n...Nm8....O.>...?..Zq0...._z.7}..0...M......!....6. .F..zO.....NT....Q...{p.yk.....-......9~.q....x.V.#.7...p.^..7...No......?......J..v.....V.w\..^....U.x.......>.6..../.........}b{..x.......<...U..fu.<.\T.z>.s.({..~..7.\.=...}W.%F....:..7.?oS.....ci_...vK.i..'....../....R...6.....=v..~.u.......r......V....u_\...V..1.k.g._.5F.?.=..u].......#~N....;l.+............;..........r.6.....5.1.q......>.x..fe..R.q[}.......s..g...S?.!.+.../...1>..sj.b?..&e...N.<.._.?..=......?..~...~"\|.%....i_..../.3N..L.s.2..DV..,.<M..).g.i..G..e...^...d......g.J...,..~_.h...i\.?..9.mY}.Y.j...Q.>.:.....k>7..#=^.s.{>n...A.P}..]l.....r...h.q+.sU.S.....y.=_?{.....

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2252
Entropy (8bit):	4.511213774608069
Encrypted:	false
SSDEEP:	48:cj8z6SYz9mW8EQiuk4LuRLTSgvYTk44WvkS5fcOrG7so+R/:bWSQ+Ji34L0LT/gTk4l8qvG7sbR/
MD5:	7E2295EE2708E28A7FA3771713A5F6A8
SHA1:	101D5756451A8567A09DEAE916091408D817BD7B
SHA-256:	6EEDEAA68C74847BE9055646079B999AAC493385D18DA9C27684866EEE9EF1B2
SHA-512:	A6A5D1686F9EA0F916E69CB8B2ACFE049B454D1D3869CF72E4F8CE5047104EEE0AD93395723A5B5DF8DECC36DB77301B8271246F1EB25B27764441F74CC98935
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/tca-logo-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 49.54 21.19"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><g id="Group_2795-2"><path id="Path_2601" class="cls-1" d="M36.55,5.11l-.15-.17.1.16h.05"/><path id="Path_2602" class="cls-1" d="M43.46,9.83c-.2-.36-2.18-.63-2.41-.66h-.03l.36.26s1.7-.06.73.64c-.06.04-.14.09-.23.15-2.28,1.12-4.62,2.11-7.02,2.96-.66.24-1.3.48-1.9.69-6.9,2.41-9.47,7.32-9.47,7.32h4.82s1.76-4.26,4.83-5.91c.08-.04.15-.08.23-.12,3.21-1.55,6.98-2.95,8.83-3.79.18-.08.33-.16.47-.23,1.37-.72.92-1.07.79-1.31"/><path id="Path_2603" class="cls-1" d="M24.02,2.41s-1-1.55-2.36-1.55c-1.28,0-2.99,1.43-2.99,1.43L0,18.26h9.86L24.76,3.4l-.75-.99Z"/><path id="Path_2604" class="cls-1" d="M25.06,10.81c4.84-1.93,10.06-4.18,10.98-4.62.18-.08.35-.19.5-.32.04-.04.07-.08.1-.12l-.55-.64s-.32-.37-.4-.46l-2.64-3.07c-.68-.88-1.68-1.45-2.78-1.58-1.01.16-1.92.68-2.57,1.46L10.5,18.6h5.15l.08-.13c2.18-3.52,5.46-6.21,9.33-7.66"/>

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 2000x1591, components 3
Category:	dropped
Size (bytes):	965070
Entropy (8bit):	7.962903426759465
Encrypted:	false
SSDEEP:	24576:hdCQbPX8N9ACgSBTWmLAEab0TE0eIcsrfw9N:/PX8DACNTWm8kcL+8
MD5:	BD46A588479F2DAF738C03B7655E14ED
SHA1:	4F00A2574D57419518C5792CA03C7BBC8A431C5F
SHA-256:	E096F4EE85B5F4B735F4B00286BF4E8B5409EB4E9B06E68D88D95D4277817BDD
SHA-512:	6733E3C259D89E100B401FD0F02B3DC5ED179BC6E6F34594065C99499E0C6EBE523F77F6C6332A43D5C439CD958E668ED9F2FF1004B1C2C3777962980A931C13
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C.......................................................................7...............................................V..........................!.1.."AQ2a.#Bq.R..$3b..C.%r...4S..c.Ds...5T..&..67.GUde...................................<........................!1A..Q"a.2q.........#B..R3bCr...$.............?.......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..B.(......P..@(......P..@(......P..@(.....4$P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	619
Entropy (8bit):	5.1343012554284915
Encrypted:	false
SSDEEP:	12:TMHdVv1W4EQlOtuM0fLiJahTFyYbjFTjBkl/SnU+nsB6Bk3zMiAb5KCA:2dV1fvlvfFVbjFTNZU6BISW
MD5:	7A513E0644F9196D7E5F401BFB3B46EF
SHA1:	3FADE6E86B7886FD21DE3EA7B58308C7F99F86CE
SHA-256:	845D1163C18EDC6DA688E9045C8338D3DB7866B8897AED44779BC6B1A5C96784
SHA-512:	904ED7D1FB257328B91BD9C7092A81C8AB59E9A5EF4E7334AFCBD91FD707435E7B941082B477D874C032A97248E072330C6EA84557D233967330B38D2BB3C5B8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><circle id="Ellipse_181" class="cls-1" cx="23.07" cy="23.53" r="22.5"/><g id="Group_5387"><path id="Path_5202" class="cls-2" d="M31.41,22.62l-5.39-5.38c-.51-.49-1.31-.49-1.82,0-.49.51-.49,1.31,0,1.82l3.18,3.2h-11.76c-.71,0-1.29.58-1.29,1.29s.58,1.29,1.29,1.29h11.76l-3.18,3.18c-.51.5-.51,1.32,0,1.83.5.51,1.32.51,1.83,0,0,0,0,0,.01-.01l5.37-5.37c.24-.24.38-.57.39-.92,0-.35-.13-.68-.39-.92Z"/></g></svg>

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17021)
Category:	dropped
Size (bytes):	389441
Entropy (8bit):	5.65347320427559
Encrypted:	false
SSDEEP:	6144:vCAskYnsmQ8MXZ1HcRCrdHe5NAaa0Mf3/wyfwuT+boeP:6h8m9MX7Hc8Je5a8fP
MD5:	C9CFD8B33F449D73F38971D45D011BA0
SHA1:	ABC194C972DC596D65943526E1CAE8EE002B5B66
SHA-256:	4D41B07B3AC0EF0C95E00603A8D758A1BF9D3C2ACD4EF1228711535A6AF7418F
SHA-512:	CA160253175BE139C5F4DA92E33EFA4B31BFEA3640CA43C666FFF758962B9F9876BE1E100E9CB8B6E99936E8E7AB9403DD547DC14485D02F3EEC36F587D6841B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":13,"vtp_value":true,"tag_id":11},{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":13},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","staging\\.thetollroads\\.com","thetollr\\.wwwls9\\.a2hosted\\.com","www\\.thetollroads\\.com","secure\\.thetollroads\\.com","thetollroads\\.com"],"tag_id":14},{"function":"__ogt_session_timeout","priority":13,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualE

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=DAY/d=0/rs=AN8SPfrCcgxoBri2FVMQptvuOBiOsolgBw/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 678 x 546, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	136654
Entropy (8bit):	7.958929299733769
Encrypted:	false
SSDEEP:	3072:89Xlq6xcXVVw1yQwN0fQaedZOOEE4MDYZu0RC9TZQp:89jxcXVVw1yQd4aedZOfVNu0RCTZQp
MD5:	6E9E0CCBD5ED241A5022CBB0516C830C
SHA1:	6B24B5895BFE7F700911FA4486E35BB587A11173
SHA-256:	89F3A7904EE28DDC605D5C89D42AB95E7548E9A0580D16AD2EEB4B671095D879
SHA-512:	E7DCA2DC5009E7C9C1ECB992731049B7E67AEE1D6EB353D1DB1530DE0C8C7EF0E85297A6D79A84C8417707330C5E10754F7C9632E4EC1AAC99108733581285E2
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/3pzp4doo/the-toll-roads-mobile-app-over-shoulder-2x.png
Preview:	.PNG........IHDR.......".....-..c....PLTEGpL.........a........[?.LD4.........\|aJ............4+.0&....t[...(..".....4......w^...qD..sZ7/.?6..{a......J@....D:.J/..P"B(................`4.....x]....{a.....WK"h:.PE.....~;2.Q7";.....]Q'!.....Y>)..j..xI......k..c...~n(!.V..N)....`7B.m......eM......gM7..z..q`D0.S5.X:dX-....f.dF...^@r....e.kL.jP..oiXI.mUoS?.L/.te.sT[}...m....~..tF .v\Eo<.....tvB%...~_.yk...l.o`..w...XG9......vp^O........V.7...y....y....y.........\j...\|j[N>/.E'..Dj<DvdUd<)pEO`PA.......{K0..u.};..e........hm`2....oU.q[...Tt.mD1.kD.x`}MV.jU...ED@.yf~Q=.`9.U_..=.YF.......wk:.....bM.............;7-....U/.+".........wD.........yT....@.%...L(...mx...cp..RSQ..gJgy..s..S.......K.._..........n...8Sc..acebvwt.W....q.....{.!<F....,...........m...m.c:..)U].....tRNS........G..... .IDATx...]l.W..M1..i.....nN.m...^3..).<.j...?Z.......-[.p..Fc....>.\|H..EHLp.P&.ji...Vn..B..h.-$P.Q......cB:.\U...?..Z...~6m._......k{{zz.{.......:...5}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 667, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	983413
Entropy (8bit):	7.985415158290568
Encrypted:	false
SSDEEP:	24576:ye3BrGpl8fCwaO4ANQwJ8ehMfYAOMzeHtl5EPCuXgoILXW:LrGpyqYNhJ8k/Mml5OcW
MD5:	020514DB0768F7D80B651B61974E6C2C
SHA1:	8239DFCF22E8EE1A446A15EE1825D4DEC4404458
SHA-256:	29A045D897C3E2BFAA7C2ED75124BBEDA6F63FC64F7B989D50464B91DFCF5463
SHA-512:	50B11D0850CF2C1A61974E48FE8B051F4A51237A9F46EDED78C370D6339BBBAB33434F667E70B96C955BADF88E106EDE884609A5C403A4FBA6871BB1C12077B8
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/ppung3sx/board_highlights_1.png
Preview:	.PNG........IHDR.............fb.?....gAMA......a... .IDATx..g..G......w....}...c5.4#..G....o..x.. @.y.....F.\|....O.7.Y.....U..{...z....2.....i.o...}..j..G.{g?.._..N...w..........v...[7sc..K..o........o{....Y.......#...n.....z..z.w....zGW......\|...+[?.]......}..?_..Y.P..,WBy.z.~=..}x...9.>...\|v...=6.7n...Nm8....O.>...?..Zq0...._z.7}..0...M......!....6. .F..zO.....NT....Q...{p.yk.....-......9~.q....x.V.#.7...p.^..7...No......?......J..v.....V.w\..^....U.x.......>.6..../.........}b{..x.......<...U..fu.<.\T.z>.s.({..~..7.\.=...}W.%F....:..7.?oS.....ci_...vK.i..'....../....R...6.....=v..~.u.......r......V....u_\...V..1.k.g._.5F.?.=..u].......#~N....;l.+............;..........r.6.....5.1.q......>.x..fe..R.q[}.......s..g...S?.!.+.../...1>..sj.b?..&e...N.<.._.?..=......?..~...~"\|.%....i_..../.3N..L.s.2..DV..,.<M..).g.i..G..e...^...d......g.J...,..~_.h...i\.?..9.mY}.Y.j...Q.>.:.....k>7..#=^.s.{>n...A.P}..]l.....r...h.q+.sU.S.....y.=_?{.....

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 375, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	634569
Entropy (8bit):	7.9814491963875955
Encrypted:	false
SSDEEP:	12288:MtlAN+2KgOhgT/eZkkw4C5CcHnyZCbuXABdgNMFkz+FwbMroELE7:MfgSimJoCcHyZ0ulNjmhroELi
MD5:	C4B2903F4E25CAFEB9A18FE6348E3E6C
SHA1:	32915EBCDC3FA91F1279EF12D7AF2860F03EFE9C
SHA-256:	C6F8FBA514474F4CD32D618AA602A4A3932529005160F9780BFA483DA4442DDA
SHA-512:	909AD7EF78B48D18FDD87FCEDDDEC3EC0A78AA60B3E79CEFEFB19A8B15BEF38AFAF5E623CF4A2233061C2AF59D13F259FFC3090D4FD902AE42E0F709597F1666
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......w.....u.Y.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52282)
Category:	downloaded
Size (bytes):	103009
Entropy (8bit):	4.782008653752139
Encrypted:	false
SSDEEP:	1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J
MD5:	C325BE79A5ECCA85D68EB9E5B65A547A
SHA1:	F2A96686228994A46961657DF4C9405AFEC8E9C2
SHA-256:	5CEAABA22D75B58E04150311F596306562A3E595E27ED4B1DFA451B82DDA9E50
SHA-512:	4A71F958AF9B67180F1ECE38B96217F8B2C9009F7FD8F90F299E508808FA4DAF3AC3E7EC6F64E47267D1C955F7A419CC15C57BA103C9925F507AF4825ABDD6E8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css
Preview:	/!. Font Awesome Free 6.5.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2024 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2475)
Category:	dropped
Size (bytes):	218588
Entropy (8bit):	5.564623072657112
Encrypted:	false
SSDEEP:	3072:oyMlCE11Sl7B+UUavhCkVyFVKJI1PYMJuGqNJ6a35t1yNtLAdhV:Fi8JdL5tq8l
MD5:	673BA6129E010CAD4E0C0E37E5A6D7DD
SHA1:	5A5380A9F66A8F9AA612825EFBF92A1DA4E7A671
SHA-256:	B71EA4595DC1050F08DF9BF3A90322E3E22F9FBD944259FEF7BBE1AEC043314A
SHA-512:	7E234CE23DD6655DC63F542408E6D593AFD876423309AF76FA41A3F71939B1019AD541C80D72547064C267B37020EE50FFBEA8E418EFB658AFF1D4BE0A4D410E
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Tg,Ug,Yg,Zg,$g,bh,ch,eh,fh,gh,hh,ih,kh,mh,nh;_.Sg=function(a,b,c){if(a.forEach&&typeof a.forEach=="function")a.forEach(b,c);else if(_.sa(a)\|\|typeof a==="string")Array.prototype.forEach.call(a,b,c);else for(var d=_.nf(a),e=_.mf(a),f=e.length,g=0;g<f;g++)b.call(c,e[g],d&&d[g],a)};Tg=function(a,b){if(b){b=Number(b);if(isNaN(b)\|\|b<0)throw Error("L`"+b);a.B=b}else a.B=null};Ug=function(a,b){return a?b?decodeURI(a.replace(/%25/g,"%2525")):decodeURIComponent(a):""};._.Vg=function(a,b,c){a.j=c?Ug(b,!0):b;return a};_.Wg=function(a,b,c){a.h=c?Ug(b,!0):b;return a};_.Xg=function(a,b,c){a.l=c?Ug(b,!0):b;a.l&&(a.l=a.l.replace(/:$/,""));return a};Yg=/[#\/\?@]/g;Zg=/[#\?]/g;$g=/[#\?:]/g;bh=/#/g;ch=/[#\?@]/g;_.dh=function(a){var b=_.pc();a.g.set("zx",b)};eh=function(a){a=a.charCodeAt(0);return"%"+(a>>4&15).toString(16)+(a&15).toString(16)};fh=function(a,b,c){return typeof a==="string"?(a=encodeURI(a).replace(b,eh),c

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6400
Entropy (8bit):	4.457487754648974
Encrypted:	false
SSDEEP:	96:QKHCfAkoqy+dbQu64LH+6lKKhdb1Z0LuQfAkoqy+dbQu64LH+6lKKhdb1Z0L75Nh:G4rKiu64q6Rhd04rKiu64q6RhdMLcaD
MD5:	D125D936562249BE1E4BE85CB8041614
SHA1:	603C9832E4CC065BFAE87DF114AA6C066DBA9CDA
SHA-256:	490A7E6E57BBAF270417984E4FA3D605D18138A498F495169A51B6628269D977
SHA-512:	23EE47D7251598254AED5C6BAE3875E95F299A39A237124D37F8C81C26336761CB3FAC4AADAE3743321409D09C4E346A44C52530C6FBE12B8EC5E9FC06232884
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 187.49 26.94"><defs><style>.cls-1{fill:url(#linear-gradient);}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style><linearGradient id="linear-gradient" x1="89.46" y1="1" x2="89.46" y2="25.91" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fee600"/><stop offset="1" stop-color="#fdba13"/></linearGradient></defs><path class="cls-1" d="M91.95,13.02c-2.03-7.73-1.59-12.02-1.59-12.02h-5.21s-.43,4.3,1.6,12.02c2.03,7.72,1.85,12.88,1.85,12.88h5.2s.18-5.16-1.85-12.88"/><path class="cls-2" d="M88.04,13.02c-2.03-7.73-1.59-12.02-1.59-12.02h-5.21s-.43,4.3,1.6,12.02c2.03,7.72,1.85,12.88,1.85,12.88h5.2s.18-5.16-1.85-12.88"/><path class="cls-2" d="M95.91,13.02c-2.03-7.73-1.6-12.02-1.6-12.02h-5.2s-.43,4.3,1.59,12.02c2.03,7.72,1.85,12.88,1.85,12.88h5.2s.18-5.16-1.84-12.88"/><polygon class="cls-2" points="4.94 16.74 0 16.74 0 14.49 15.21 14.49

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1754
Entropy (8bit):	4.449591551609052
Encrypted:	false
SSDEEP:	24:2dV1OAOgX3802UbnhL69HTOKHrfhm/WPHYrNyxIHzKSlwLpfKUJUZAJG7j2kQCph:cj7X3aZy+yQHYZyxIeSkJUuJG7jPEQJT
MD5:	1555E919931E96CC2949487921258C17
SHA1:	FD3181C38B843E07952718C2DEB7456741C85684
SHA-256:	E0E0D3A55BBD7147A572E0B10510B1D978B59AC199B81719A017A94F3F624EA6
SHA-512:	0F6DFA6BE9BDB55778437435B6FF75F25EB088AEC56038C3273EB33D39ADFBE2922CE94C478C4FDADF83A1B0AC202983AB94DB78D3CE580B9E22FCA11633870A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><circle class="cls-2" cx="67.93" cy="67.93" r="61.29" transform="translate(-1.76 134.06) rotate(-88.49)"/><path class="cls-1" d="M68,30.43c5.03.09,10.07.14,15.1.28,4.37.12,8.6.9,12.4,3.22,4.98,3.04,8.02,7.51,9,13.2.59,3.4.79,6.9.84,10.36.11,7.44.07,14.88-.01,22.33-.04,3.91-.17,7.83-1.47,11.58-2.51,7.28-7.62,11.71-15.12,13.13-3.39.64-6.9.79-10.36.84-7.41.11-14.83.07-22.24-.01-3.91-.04-7.83-.17-11.59-1.46-7.29-2.49-11.72-7.6-13.17-15.09-.65-3.38-.8-6.9-.85-10.36-.11-7.44-.07-14.88.01-22.33.04-3.91.17-7.83,1.47-11.58,2.51-7.28,7.62-11.71,15.12-13.13,3.39-.64,6.9-.72,10.36-.85,3.5-.14,7-.03,10.51-.03,0-.04,0-.07,0-.1ZM98.77,67.37c-.05,0-.1,0-.15,0,0-2.96.06-5.91-.02-8.87-.07-2.84-.18-5.69-.47-8.51-.64-6.34-4.41-10.7-10.65-11.89-3.28-.62-6.68-.72-10.03-.78-6.35-.12-12.7-.1-19.04,0-3.16.05-6.36.17-9.48.65-5.4

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	611
Entropy (8bit):	5.143150641984
Encrypted:	false
SSDEEP:	12:TMHdVv1W480lOtuz+0fLiJahTFyYb+KJQiwZeRPHZizlfJpFjX5A:2dV1fBlPZfFVb+2hizjpRq
MD5:	5EF2BDAB1A867A01034C1DE18EB30811
SHA1:	7B7456EAD1199CDE7D76AFB5AC3DFD306597B706
SHA-256:	DE38C924D48A171A328D521874F642502A2268B448C6172B3623B70D2298232E
SHA-512:	E5FAC9C2B7D08D65A5803DE63348BCE437EE69F65F24451E9D9B2A55E6E4C80A88A0A6D229FAB28AC316C7ECC3C9DA23E0C48E179A85AC407A3931B5594E90C5
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/icons/icon_arrow-left-disabled.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#888;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#fff;}</style></defs><circle id="Ellipse_181" class="cls-1" cx="23.07" cy="23.53" r="22.5"/><g id="Group_5387"><path id="Path_5202" class="cls-2" d="M14.73,24.45l5.39,5.38c.51.49,1.31.49,1.82,0,.49-.51.49-1.31,0-1.82l-3.18-3.2h11.76c.71,0,1.29-.58,1.29-1.29s-.58-1.29-1.29-1.29h-11.76l3.18-3.18c.51-.5.51-1.32,0-1.83-.5-.51-1.32-.51-1.83,0,0,0,0,0-.01.01l-5.37,5.37c-.24.24-.38.57-.39.92,0,.35.13.68.39.92Z"/></g></svg>

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	58173
Entropy (8bit):	7.845188483807884
Encrypted:	false
SSDEEP:	1536:m4yJyJYt2Jmh3qDeIMExSYSkuHCv0emcAwRL6Xce:NIyclKAIv8cA0E
MD5:	38B47CE7CE66A14766E84A7EB9F12C9E
SHA1:	003866E8F25315A977BD1CBB06FFC0ED77917B16
SHA-256:	CD2EB5CDD3EE94CE4F21FF63DD7CE45D42DF22AE0B4772CD8922438F7AD80DC6
SHA-512:	B653D431359B2ADD89CAB14ADCE2CAFBE0CDEB8495CA62E10CC1EC879A9D24E21ED2007F538C35DE8EAEB35C3432294999AF6CD37006DF4BA665322BB859EDE0
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/media/pcknkbmi/1.png
Preview:	.PNG........IHDR...8...8.....cr.... .IDATx...w.e.....C.}GTP6Q..P@qA.\`DA...Q....A.AAPP.G.D.E.HH....HB...I...............s..3T.]..IWW........1.........'.......!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!..............!.. PW.......V.n.<.x.Xc....(..(./.......oCXsA5...i: .$...hK.G...u.....?.n.(..(....R-.j.U...F.:Jw.F".h.k..wK..s.C......EQ.EQ.A..H.F.f...DCC.tgk....@....g...)..(...4...9-%[.u..}...Tb..i..~...d.$.7S.EQ.EQ.V.7../k..KC}.t..Q......wv..-..R.EQ.EQ.^..l..ZP.&.s..+P[.Z..t.v....(..(..U....h.jG.;b.!..........(EQ.EQ...R.hS...}.W.T..UY.y...K..(..(.R.Z.`u.t.,..A...x..2o...)..(..(..+..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	31238
Entropy (8bit):	3.6789428266488717
Encrypted:	false
SSDEEP:	192:STvoh18oLO8HniPFncLUVizrTvoU18oLO8HniPFncLUViT:Goh08CPWLlznoU08CPWLlT
MD5:	B7060D3B5CE888E901593AF33400CEE3
SHA1:	28FA868C9029E0B9B57FAD21E1437CFAB9C806C7
SHA-256:	8A056FD192A8EA16FCC3CC2CB33E093440EC225DC7E23584D7EE139EFD15E0F1
SHA-512:	F97199CA06D726494166D7081A45D79A9D39D6A61569374311CF5E4EF1564CD25CF0BABC77CE8221013E535C1402782414529B40E2B91DC537E737512748819F
Malicious:	false
Reputation:	low
Preview:	// API callback.callback({. "sourceLanguages": [. {. "language": "auto",. "name": "Detect language". },. {. "language": "ab",. "name": "Abkhaz". },. {. "language": "ace",. "name": "Acehnese". },. {. "language": "ach",. "name": "Acholi". },. {. "language": "aa",. "name": "Afar". },. {. "language": "af",. "name": "Afrikaans". },. {. "language": "sq",. "name": "Albanian". },. {. "language": "alz",. "name": "Alur". },. {. "language": "am",. "name": "Amharic". },. {. "language": "ar",. "name": "Arabic". },. {. "language": "hy",. "name": "Armenian". },. {. "language": "as",. "name": "Assamese". },. {. "language": "av",. "name": "Avar". },. {. "language": "awa",. "name": "Awadhi". },. {. "language": "ay",. "name": "Aymara". },. {. "language": "az",

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Suserng: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2040
Entropy (8bit):	7.9033520715830825
Encrypted:	false
SSDEEP:	48:A/f/RMnFTZhDyQRtrdsCU46fqdVO2FX6z+E:A/f/RMFXdsCT60wz
MD5:	A7B7D460AFABDA81BC3340E673C66788
SHA1:	97DC3A6B810D9E91DAF77B6930B57331045366F1
SHA-256:	DB9485F7362F2905EADA5C98BB0C48D1D2A27E1979352A75B1CFDF673AA0F091
SHA-512:	9435016011B14842D25FBCFD456139B7EA8A5CD8D37E3AC65F4BD1A3EA3BC00BA4427D8748E0079FE7620F2ACDD72059063CFDDD2C459677A061132EC56DE5C6
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/3M2FsVe0muU/default.webp
Preview:	RIFF....WEBPVP8 .....%...x.Z.>9..C.!!..v. ....;.A.<4.t=..L/6.].J..o..J.8........O./............_...........>s.....u..\....8Wm....]$.........m\|..J'H..gF..........Z...A.FWM..M.}!/.x.......tn.H.B...I......!9..K....5..U.\s,G..:J...u..m....M.5..#.}....'....S.4.4Sw}i4.N.w.&B.}..kze.+.......\|Z...X...4.q....[.@....N.'.y..L.Y.....s...!......@%s..)85..L..../n..mF....o.`j....'<. ..~.,.78......@$F..W.U.............^7..u(..afO.......xjga...t.V.^=M..;.JY7PS'{.....h^.Pu]x.88M...yY"..X...D...5.].z..b.,PeQ.].w.G!{c..<.T.5.)?H.YQ'j...?..}..)S.`...X...,...Y...H?j./ym.."..........ym+.(H85`....D...d..A.&,5...,.#.U?.a-..W.....`........\....@lB<.....x5..,{f8............f.o......I.1..x..=..i.B;_,{.]..\..#$.4..BZ."..j.U..S~..M?..A...Q...v.L...~.l.7"...L...ma.53..9.j...BG=5.2.`L.K........T.8.2.....z.c ....h..n....Nb....4d..Xa.....8G]........[h..OV..1.. .P.\...[...n.;a....J...e....YH=zR&..@...m..T..F4..l...p...A{.;.&.A....q.U...\.Q...f...jpXx..k2.D.SVkn.m

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6400
Entropy (8bit):	4.457487754648974
Encrypted:	false
SSDEEP:	96:QKHCfAkoqy+dbQu64LH+6lKKhdb1Z0LuQfAkoqy+dbQu64LH+6lKKhdb1Z0L75Nh:G4rKiu64q6Rhd04rKiu64q6RhdMLcaD
MD5:	D125D936562249BE1E4BE85CB8041614
SHA1:	603C9832E4CC065BFAE87DF114AA6C066DBA9CDA
SHA-256:	490A7E6E57BBAF270417984E4FA3D605D18138A498F495169A51B6628269D977
SHA-512:	23EE47D7251598254AED5C6BAE3875E95F299A39A237124D37F8C81C26336761CB3FAC4AADAE3743321409D09C4E346A44C52530C6FBE12B8EC5E9FC06232884
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/toll_roads_logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 187.49 26.94"><defs><style>.cls-1{fill:url(#linear-gradient);}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style><linearGradient id="linear-gradient" x1="89.46" y1="1" x2="89.46" y2="25.91" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#fee600"/><stop offset="1" stop-color="#fdba13"/></linearGradient></defs><path class="cls-1" d="M91.95,13.02c-2.03-7.73-1.59-12.02-1.59-12.02h-5.21s-.43,4.3,1.6,12.02c2.03,7.72,1.85,12.88,1.85,12.88h5.2s.18-5.16-1.85-12.88"/><path class="cls-2" d="M88.04,13.02c-2.03-7.73-1.59-12.02-1.59-12.02h-5.21s-.43,4.3,1.6,12.02c2.03,7.72,1.85,12.88,1.85,12.88h5.2s.18-5.16-1.85-12.88"/><path class="cls-2" d="M95.91,13.02c-2.03-7.73-1.6-12.02-1.6-12.02h-5.2s-.43,4.3,1.59,12.02c2.03,7.72,1.85,12.88,1.85,12.88h5.2s.18-5.16-1.84-12.88"/><polygon class="cls-2" points="4.94 16.74 0 16.74 0 14.49 15.21 14.49

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2508425
Entropy (8bit):	5.691430200092614
Encrypted:	false
SSDEEP:	24576:Fbf/WfCvTo1a0XMOgsy8LyfoeIoA8gtPnCxmKNzz9kcZ96r:ZfOfNaNcsoeIoA8gt6X6r
MD5:	DFFD0E78D2A33BB0404F98E7848D6B96
SHA1:	C335A1BC309E53CB713BB2D0CC4F019E183D0A3D
SHA-256:	7862B9DC103362C7C2C4311A421F0AC223522F9E5E39DC7C06E81AC03A700893
SHA-512:	D88DD77DDE3D3B98CA27B52E87574F47AA89AD61E7C034CF03662CFB3B83084DE4B22F65C7B2CEE463139680CEAB5D4B4E3FA2AA89C570DB8A1A1D90A7AF3034
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1140
Entropy (8bit):	4.5389205834260355
Encrypted:	false
SSDEEP:	24:2dV1Rzvlw2PRbEiU2nm8rz8hBw341t42nhdv+sbKaipbTe:cjRl9PNEi3vyK3Q62nholNPe
MD5:	FD9AFF3BE81180254E66DEA0EE1736DF
SHA1:	AF78794DB3051F9845A3E9D9B25AABA57111A5B0
SHA-256:	4C43F463C5E1CE7774021F41A2A3CB3795D1D7F6BA61E4EABF960C5DCA9BC158
SHA-512:	24B82AF47BE504F7FFB5E81453837FE3D631A7BF8A911868CDA4AF1F632E437054E6EDC0AE336D69174DA212DA21FC15629AFF9441B369C7FD57DB42B5050A66
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.45.22,10.68.22,23.3c0,12.62,10.23,22.85,22.85,22.85,12.62,0,22.85-10.23,22.85-22.85h0c0-12.62-10.23-22.85-22.85-22.85"/><path class="cls-2" d="M24.79,31.97v1.68c0,.51-.42.92-.93.93h-1.57c-.51,0-.92-.42-.93-.93v-1.68c-1.9-.16-3.55-1.36-4.29-3.11-.19-.5.06-1.06.55-1.25.04-.02.08-.03.13-.04l1.39-.25c.43-.14.89.02,1.14.39.32.54.91.87,1.54.86h2.43c.98,0,1.78-.77,1.79-1.75,0,0,0,0,0,0v-.03c.01-.48-.19-.93-.54-1.25-.32-.35-.78-.54-1.25-.54h-2.25c-2.89.03-5.28-2.23-5.4-5.11-.04-1.41.5-2.77,1.5-3.75.85-.85,1.98-1.38,3.18-1.5v-1.69c0-.51.42-.92.93-.93h1.57c.51,0,.92.42.93.93v1.68c1.89.18,3.53,1.37,4.29,3.11.2.48-.03,1.04-.51,1.24,0,0,0,0,0,0-.05.02-.11.04-.17.05l-1.32.25c-.43.14-.89-.02-1.14-.39-.32-.55-.9-.89-1.54-.9h-2.43c-.47-.01-.92.17-1.25.5

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=2832, bps=218, PhotometricIntepretation=RGB, description=Highway 241, manufacturer=NIKON CORPORATION, model=NIKON D3, orientation=upper-left, width=4256], progressive, precision 8, 4256x1416, components 3
Category:	dropped
Size (bytes):	3931575
Entropy (8bit):	7.986821020584443
Encrypted:	false
SSDEEP:	98304:fR1JsQB5wqP5WE66ilRXQe2FJI6hdhe7OqPxSbP:fZvv5WELi3X/SJIcU7fobP
MD5:	DF65D289FD5D994B9548CE2ABA981450
SHA1:	6E737CD8EE56D1A6966B0051C88F82EE95699044
SHA-256:	7FEFA6F07E24268498A8ADEC2BEF1F0A912DE90087BE593C9D0BE80D5922348B
SHA-512:	9C5897458B3C5A25F63599ACD8F61E1A3471D76FCE7E9785D87581F3E03F96726B6D42CD992C494CE8AD090ED22AA75ECDBFFB298B5A664968EFB82DDAB13F53
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................................................................................................................................(...........1...".......2.......9...;.......M.......'...]...i.....................Highway 241.NIKON CORPORATION.NIKON D3...$..'....$..'..Adobe Photoshop 25.11 (Macintosh).2024:09:24 14:31:34.Stephen Francis.2009 TCA / Stephen Francis Photography.%.........F...........N..."...........'...................0231........V...........j...........~...........................................................................................................91..........................................................................................................................................................................................................................2...........4...................-...........2009:02:18 09:24:34.2009:03:17 19:11:01.-07:00....S.@B................................................................................

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6056
Entropy (8bit):	4.738548498799423
Encrypted:	false
SSDEEP:	96:lEa+vqUXBKiusUiNeWH5qqNU3rCma/yVo+uXxUWH0tVKERv5:lF+vqUXBKiusUikWH5qqNU3rCma/yVoa
MD5:	33FB2249D22045BB6D7F5D6C254727B9
SHA1:	454A76FCED5AD73AD71DC6DCD9D392675527E71A
SHA-256:	0E635B55DDE87617AD7B71931E7D7F7A1E9B6A2EC8E2E52AADCA7DD219B66AB7
SHA-512:	63CFFBF46D2783ED98332000009AF4011CF00ED4624CC40A7E42BDE5546CF2123FE7D6DD5B57FEDD9D732EA790D41B71279AB25EADE5FEE3CCDDB3A483764CD8
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/css/components/intro-split-view.css
Preview:	@use "sass:math";./* media query mixin /./ get rid of list formatting /./ prevent long links from breaking out of container /./ creates a colored circle with an icon in the middle /./ formats the placeholder text within an input field */..intro-split-view-wrap {. position: relative;. overflow: hidden; }. .intro-split-view-wrap--wide .container {. max-inline-size: none; }. @media (max-width: 93.75rem) {. .intro-split-view-wrap--wide .container {. max-inline-size: inherit; } }...intro-split-view-bg {. position: absolute;. top: 0;. left: 0;. width: 100%;. height: 101%;. z-index: 0;. display: flex; }. .intro-split-view-bg--reverse {. flex-direction: row-reverse; }. .intro-split-view-bg > div {. flex: 1; }. .intro-split-view-bg__img {. background-repeat: no-repeat;. background-size: cover;. background-position: center; }. @media (max-width: 47.9375rem) {. .intro-split-view-bg__img {. background: none !important; } }. .int

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	405818
Entropy (8bit):	5.175244667426714
Encrypted:	false
SSDEEP:	1536:hIzoaFUgMnTthFgVMMMg7UDBcdILvPptpm8p7M6oya+MOn4yBOx5juDEnXrDJc7M:ioaFU5FgqMMg7UDBcQpoyAufNwcb8o3m
MD5:	D40F4ABA2C94932F3FF32710E76271A9
SHA1:	A99A9BA2172AEB27F1EE28454C01C065958304FF
SHA-256:	AB4F3618647D7F83F07977628600ECA4726338C3863119A42B7374E8C4144A85
SHA-512:	EF1A5B8C6009C68DB1DEC4237041C1CE24B50A232BC8213C0FDC4F6C7D4F836635A14E48F5267CB14B710FCEBF94C85FB41CD5632DD402D3F6756E2AF53FA955
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/03dbdfab/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	619
Entropy (8bit):	5.1343012554284915
Encrypted:	false
SSDEEP:	12:TMHdVv1W4EQlOtuM0fLiJahTFyYbjFTjBkl/SnU+nsB6Bk3zMiAb5KCA:2dV1fvlvfFVbjFTNZU6BISW
MD5:	7A513E0644F9196D7E5F401BFB3B46EF
SHA1:	3FADE6E86B7886FD21DE3EA7B58308C7F99F86CE
SHA-256:	845D1163C18EDC6DA688E9045C8338D3DB7866B8897AED44779BC6B1A5C96784
SHA-512:	904ED7D1FB257328B91BD9C7092A81C8AB59E9A5EF4E7334AFCBD91FD707435E7B941082B477D874C032A97248E072330C6EA84557D233967330B38D2BB3C5B8
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/site-media/icons/icon_arrow-right-active.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><circle id="Ellipse_181" class="cls-1" cx="23.07" cy="23.53" r="22.5"/><g id="Group_5387"><path id="Path_5202" class="cls-2" d="M31.41,22.62l-5.39-5.38c-.51-.49-1.31-.49-1.82,0-.49.51-.49,1.31,0,1.82l3.18,3.2h-11.76c-.71,0-1.29.58-1.29,1.29s.58,1.29,1.29,1.29h11.76l-3.18,3.18c-.51.5-.51,1.32,0,1.83.5.51,1.32.51,1.83,0,0,0,0,0,.01-.01l5.37-5.37c.24-.24.38-.57.39-.92,0-.35-.13-.68-.39-.92Z"/></g></svg>

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	675
Entropy (8bit):	4.758458294337748
Encrypted:	false
SSDEEP:	12:TMHdVv1He4o/7eJn0QFFBLDLG8HUyhkhpijVPajeMp/fpQ8uWhVAT:2dV1+4keyQFFBLDLShKanhIWhVg
MD5:	1EAC1325D3A82A6B45154BE01C49A415
SHA1:	7BF33CD31ABB32D8D88351F567BC088B80369248
SHA-256:	C62F5BA0A084BE31A6F7C63EE36981960B538DD2FAA51EFA095E16BB5BA586BC
SHA-512:	B40841BA94400E1D0786445C01AA49DB44F1A24ADC32D54C42DE27B88397FACA0EA0125EA79A4AEC9601B5C429E7E045028EC29B782C81B8F675105342899DA1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14.5,14.5-6.49,14.5-14.5S22.98.48,14.98.48ZM22.51,19.8s-.04.06-.06.09l-1.29,1.96c-.3.47-.83.73-1.39.7-.6-.03-1.19-.11-1.77-.24-4.92-1.53-8.77-5.38-10.3-10.3-.12-.58-.21-1.16-.24-1.75-.03-.55.23-1.07.69-1.37l1.97-1.32c.47-.31,1.1-.18,1.41.29.02.03.04.06.06.1l1.6,3.09c.22.44.11.97-.27,1.28l-1.44,1.12c.55,1.1,1.29,2.11,2.17,2.97.85.86,1.84,1.59,2.92,2.14l1.13-1.46c.3-.39.84-.5,1.28-.27l3.1,1.6c.5.26.7.87.44,1.38Z"/></svg>

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	15346
Entropy (8bit):	4.1259339238496215
Encrypted:	false
SSDEEP:	192:ol8v1/EcrNu6c6oWCuKEhWrXoO6G5+N2CFCIjwrGFIX9eg4kswrXqykQLn2wAuZk:+8ZZN6KihXoE5M2GCX4MXqJmvIqEEs
MD5:	34B6BEE62D533647DDDC54C4893CC52C
SHA1:	193022860C9CE73D8224522818B1A4CB995BBC4C
SHA-256:	FD18BA6CAE03406C61DBE80CFB61C9EAAB44349BEADF7B932F84667A039AE5A4
SHA-512:	DAD39060DF6B7B50E7596B4C97C5701C4907B871390A804C56D382F6C7A8952922B0A8999306721C47CB9D55EFFC4BE77C48ABDBE63C4378B519B8BFB5D88D37
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 430.62 42.72"><defs><style>.cls-1{fill:#6c0060;}.cls-1,.cls-2,.cls-3,.cls-4,.cls-5{fill-rule:evenodd;stroke-width:0px;}.cls-2{fill:#87c4cd;}.cls-3{fill:#005d5f;}.cls-4{fill:#ceb2d0;}.cls-6{font-family:ArialMT, Arial;font-size:1px;}.cls-6,.cls-5{fill:#fff;}.cls-6,.cls-7{isolation:isolate;}</style></defs><g id="Group_2698"><path id="Path_2501" class="cls-4" d="M.88,35.6h69.31L47.18,5.05s-1.93-2.99-4.54-2.99c-2.46,0-5.77,2.77-5.77,2.77L.88,35.6Z"/><path id="Path_2502" class="cls-1" d="M20.22,36.26h71.63L63.69,3.44s-2.42-3.12-5.37-3.04c-2.67.08-4.95,2.82-4.95,2.82L20.22,36.26Z"/><path id="Path_2503" class="cls-3" d="M29.55,38.91h26.22s4.28-9.61,11.16-15.47,14.28-9.75,11.29-12.54-9.12-1.23-9.12-1.23l.35.55s3.74.83.6,2.35c-1.77.85-11.82,5.2-21.16,8.92-15.06,5.99-19.34,17.41-19.34,17.41"/><path id="Path_2504" class="cls-5" d="M37.65,39.36h7.27s2.3-10.06,10.53-14.55,22.15-9.8,20.14-13.36c-1.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2788
Entropy (8bit):	4.795029238390408
Encrypted:	false
SSDEEP:	48:QjkxnEMrMz4etem32DScGX+qBpagS7My5kNofy5kH+SUy5hony5dp+mbeo1ePsUd:lEMkcs2DScGNpaPzvY6+SbWgdp+vo4P9
MD5:	C77FEE448BA331D2A08E14E179876802
SHA1:	1D1F130D0305D47A96337162B302ABF30F08B6B0
SHA-256:	0A6EBFB57D16415CFACF1E4819053346DD431AB375BE55A42C9047C45ECC969A
SHA-512:	CFB7626BA9E2E4A80E5801F8B380D1FEF6592FC51C6E3BE56A32E01775C0A6A0247567A8C4BC5DD724640E34647D220A0B59F5F9E3A64DA23140BFA8DEBEF3E2
Malicious:	false
Reputation:	low
URL:	https://thetollroads.com/css/components/press-releases-list.css
Preview:	@use "sass:math";./* media query mixin /./ get rid of list formatting /./ prevent long links from breaking out of container /./ creates a colored circle with an icon in the middle /./ formats the placeholder text within an input field */..press-releases-list__rotator--hidden {. display: none; }...press-releases-list__rotator .slick-list {. overflow: visible !important;. margin: 0 -15px; }. @media (max-width: 47.9375rem) {. .press-releases-list__rotator .slick-list {. margin: 0; } }...press-releases-list__rotator .slick-track {. display: flex !important; }...press-releases-list__rotator .slick-slide {. height: inherit !important;. margin: 0 15px; }. .press-releases-list__rotator .slick-slide > div {. height: 100%; }...press-releases-list__rotator .slick-arrow {. position: relative;. width: 45px;. height: 45px;. top: 50%;. transform: translateY(-50%); }. .press-releases-list__rotator .slick-arrow:after {. content: '';. width: 100%;. height: 100%;

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 1, 2025 00:21:51.023130894 CET	192.168.2.16	1.1.1.1	0xe317	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:51.023344040 CET	192.168.2.16	1.1.1.1	0x8a28	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:21:51.043699026 CET	192.168.2.16	1.1.1.1	0x5207	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:51.104968071 CET	192.168.2.16	8.8.8.8	0x5e8e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:51.105441093 CET	192.168.2.16	1.1.1.1	0xd4b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:52.117944002 CET	192.168.2.16	1.1.1.1	0x7a87	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:52.118108034 CET	192.168.2.16	1.1.1.1	0x121d	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:21:54.934773922 CET	192.168.2.16	1.1.1.1	0xa844	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:54.934977055 CET	192.168.2.16	1.1.1.1	0x96f3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 1, 2025 00:21:57.145003080 CET	192.168.2.16	1.1.1.1	0x651a	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:57.145389080 CET	192.168.2.16	1.1.1.1	0x3e85	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:21:57.165786982 CET	192.168.2.16	1.1.1.1	0x45f9	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.312971115 CET	192.168.2.16	1.1.1.1	0xe22d	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.313090086 CET	192.168.2.16	1.1.1.1	0xb7e2	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:02.323194027 CET	192.168.2.16	1.1.1.1	0x1383	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.340384960 CET	192.168.2.16	1.1.1.1	0xe2ea	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.340873957 CET	192.168.2.16	8.8.8.8	0x7757	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:03.355570078 CET	192.168.2.16	1.1.1.1	0xa6cd	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:03.355700016 CET	192.168.2.16	1.1.1.1	0x7437	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:08.392540932 CET	192.168.2.16	1.1.1.1	0x4461	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:08.392709970 CET	192.168.2.16	1.1.1.1	0x2723	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:08.410490990 CET	192.168.2.16	1.1.1.1	0x3808	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:12.412101030 CET	192.168.2.16	1.1.1.1	0x78d6	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:12.412317038 CET	192.168.2.16	1.1.1.1	0xd42d	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:12.440568924 CET	192.168.2.16	1.1.1.1	0x93f9	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:12.440819025 CET	192.168.2.16	8.8.8.8	0xe28d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:13.453181982 CET	192.168.2.16	1.1.1.1	0x9f74	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:13.453310966 CET	192.168.2.16	1.1.1.1	0xc507	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:13.462480068 CET	192.168.2.16	1.1.1.1	0x888c	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:17.148438931 CET	192.168.2.16	1.1.1.1	0x704f	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:17.148808002 CET	192.168.2.16	1.1.1.1	0x116b	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:17.161595106 CET	192.168.2.16	1.1.1.1	0x9329	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:17.161861897 CET	192.168.2.16	1.1.1.1	0x3027	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:19.313729048 CET	192.168.2.16	1.1.1.1	0xefcc	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:19.313879013 CET	192.168.2.16	1.1.1.1	0x305d	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:19.322972059 CET	192.168.2.16	1.1.1.1	0xe96d	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:19.338396072 CET	192.168.2.16	1.1.1.1	0xb6ca	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:19.338834047 CET	192.168.2.16	8.8.8.8	0xc9e	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:24.354846954 CET	192.168.2.16	1.1.1.1	0x80b9	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:24.355644941 CET	192.168.2.16	1.1.1.1	0x1469	Standard query (0)	thetollroads.com-wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:22:24.378092051 CET	192.168.2.16	1.1.1.1	0x74b4	Standard query (0)	thetollroads.com-wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:27.299858093 CET	192.168.2.16	1.1.1.1	0x3408	Standard query (0)	thetollroads.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:27.299999952 CET	192.168.2.16	1.1.1.1	0xb1e2	Standard query (0)	thetollroads.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:28.602972984 CET	192.168.2.16	1.1.1.1	0x415b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:28.603157997 CET	192.168.2.16	1.1.1.1	0xd8c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:29.573033094 CET	192.168.2.16	1.1.1.1	0xd027	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.573321104 CET	192.168.2.16	1.1.1.1	0x670a	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:29.614748955 CET	192.168.2.16	1.1.1.1	0x53d6	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.615161896 CET	192.168.2.16	1.1.1.1	0xaa24	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:29.910147905 CET	192.168.2.16	1.1.1.1	0xa608	Standard query (0)	thetollroads.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.910340071 CET	192.168.2.16	1.1.1.1	0x3bc6	Standard query (0)	thetollroads.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:30.732615948 CET	192.168.2.16	1.1.1.1	0x6fb1	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.732824087 CET	192.168.2.16	1.1.1.1	0xabf0	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:30.840152979 CET	192.168.2.16	1.1.1.1	0x90ae	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.840312958 CET	192.168.2.16	1.1.1.1	0xfc02	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:31.047497988 CET	192.168.2.16	1.1.1.1	0x317b	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.047641993 CET	192.168.2.16	1.1.1.1	0xcafb	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:31.048168898 CET	192.168.2.16	1.1.1.1	0xcaf1	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.048327923 CET	192.168.2.16	1.1.1.1	0xb6c4	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2025 00:22:31.056797981 CET	192.168.2.16	1.1.1.1	0x91cf	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.056956053 CET	192.168.2.16	1.1.1.1	0x6fd6	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2025 00:22:31.676794052 CET	192.168.2.16	1.1.1.1	0x6b22	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.676932096 CET	192.168.2.16	1.1.1.1	0xa1fe	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:31.870310068 CET	192.168.2.16	1.1.1.1	0xfd45	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.870609999 CET	192.168.2.16	1.1.1.1	0xe95b	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:33.872108936 CET	192.168.2.16	1.1.1.1	0xbac	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:33.872445107 CET	192.168.2.16	1.1.1.1	0xb752	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2025 00:22:33.882183075 CET	192.168.2.16	1.1.1.1	0x76b3	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:33.882312059 CET	192.168.2.16	1.1.1.1	0xde04	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2025 00:22:34.134094954 CET	192.168.2.16	1.1.1.1	0x2126	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.134445906 CET	192.168.2.16	1.1.1.1	0xdd5c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:34.442763090 CET	192.168.2.16	1.1.1.1	0xafc8	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.442925930 CET	192.168.2.16	1.1.1.1	0xde99	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:34.801120043 CET	192.168.2.16	1.1.1.1	0xfa6f	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.801302910 CET	192.168.2.16	1.1.1.1	0xedfb	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2025 00:22:35.282459021 CET	192.168.2.16	1.1.1.1	0x5288	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:35.282624960 CET	192.168.2.16	1.1.1.1	0xef48	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:35.384464979 CET	192.168.2.16	1.1.1.1	0xbe4c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:35.384732962 CET	192.168.2.16	1.1.1.1	0xf217	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 1, 2025 00:22:35.759820938 CET	192.168.2.16	1.1.1.1	0x545e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:35.759969950 CET	192.168.2.16	1.1.1.1	0x931b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2025 00:22:37.193754911 CET	192.168.2.16	1.1.1.1	0x24a8	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:37.194093943 CET	192.168.2.16	1.1.1.1	0x7d0b	Standard query (0)	thetollroads.com-wfmo	65	IN (0x0001)	false
Jan 1, 2025 00:22:37.209175110 CET	192.168.2.16	1.1.1.1	0xa572	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:37.259166956 CET	192.168.2.16	1.1.1.1	0xb817	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:37.259517908 CET	192.168.2.16	8.8.8.8	0xb65c	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:38.267754078 CET	192.168.2.16	1.1.1.1	0xd018	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:38.267931938 CET	192.168.2.16	1.1.1.1	0xceb3	Standard query (0)	thetollroads.com-wfmo	65	IN (0x0001)	false
Jan 1, 2025 00:22:43.305648088 CET	192.168.2.16	1.1.1.1	0xb268	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:43.305798054 CET	192.168.2.16	1.1.1.1	0x48ea	Standard query (0)	thetollroads.com-wfmo	65	IN (0x0001)	false
Jan 1, 2025 00:22:43.320730925 CET	192.168.2.16	1.1.1.1	0xcbc1	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:02.844594955 CET	192.168.2.16	1.1.1.1	0xf9da	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:13.354114056 CET	192.168.2.16	1.1.1.1	0xcddb	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:13.354273081 CET	192.168.2.16	1.1.1.1	0xfa99	Standard query (0)	thetollroads.com-wfmo	65	IN (0x0001)	false
Jan 1, 2025 00:23:13.369147062 CET	192.168.2.16	1.1.1.1	0x6052	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:30.506820917 CET	192.168.2.16	1.1.1.1	0xa4d6	Standard query (0)	thetollroads.com-wfmo	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.641781092 CET	192.168.2.16	1.1.1.1	0xec65	Standard query (0)	wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.642148972 CET	192.168.2.16	1.1.1.1	0x84d6	Standard query (0)	wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:23:31.660991907 CET	192.168.2.16	1.1.1.1	0xa0a6	Standard query (0)	wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.681364059 CET	192.168.2.16	1.1.1.1	0x7642	Standard query (0)	wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.681586981 CET	192.168.2.16	1.1.1.1	0x6b6b	Standard query (0)	wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:23:31.704991102 CET	192.168.2.16	1.1.1.1	0x44c4	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.705446959 CET	192.168.2.16	8.8.8.8	0x138d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:32.715296984 CET	192.168.2.16	1.1.1.1	0xb073	Standard query (0)	wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:32.715450048 CET	192.168.2.16	1.1.1.1	0x7dd9	Standard query (0)	wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:23:37.749568939 CET	192.168.2.16	1.1.1.1	0x5c70	Standard query (0)	wfmo.xyz	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:37.749744892 CET	192.168.2.16	1.1.1.1	0x3c06	Standard query (0)	wfmo.xyz	65	IN (0x0001)	false
Jan 1, 2025 00:23:37.759653091 CET	192.168.2.16	1.1.1.1	0x9c7f	Standard query (0)	wfmo.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 1, 2025 00:21:51.041203022 CET	1.1.1.1	192.168.2.16	0xe317	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:51.043138027 CET	1.1.1.1	192.168.2.16	0x8a28	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:21:51.062545061 CET	1.1.1.1	192.168.2.16	0x5207	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:51.114666939 CET	1.1.1.1	192.168.2.16	0xd4b	No error (0)	google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:51.116054058 CET	8.8.8.8	192.168.2.16	0x5e8e	No error (0)	google.com		142.251.37.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:52.126779079 CET	1.1.1.1	192.168.2.16	0x7a87	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:52.127899885 CET	1.1.1.1	192.168.2.16	0x121d	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:21:54.943185091 CET	1.1.1.1	192.168.2.16	0x96f3	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 1, 2025 00:21:54.943212986 CET	1.1.1.1	192.168.2.16	0xa844	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:57.164714098 CET	1.1.1.1	192.168.2.16	0x3e85	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:21:57.164731026 CET	1.1.1.1	192.168.2.16	0x651a	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:21:57.183614016 CET	1.1.1.1	192.168.2.16	0x45f9	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.321872950 CET	1.1.1.1	192.168.2.16	0xe22d	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.322643042 CET	1.1.1.1	192.168.2.16	0xb7e2	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:02.331720114 CET	1.1.1.1	192.168.2.16	0x1383	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.347140074 CET	1.1.1.1	192.168.2.16	0xe2ea	No error (0)	google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:02.348170996 CET	8.8.8.8	192.168.2.16	0x7757	No error (0)	google.com		142.251.37.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:03.367326021 CET	1.1.1.1	192.168.2.16	0x7437	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:03.370800018 CET	1.1.1.1	192.168.2.16	0xa6cd	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:08.401750088 CET	1.1.1.1	192.168.2.16	0x2723	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:08.409940958 CET	1.1.1.1	192.168.2.16	0x4461	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:08.418292999 CET	1.1.1.1	192.168.2.16	0x3808	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:12.427958965 CET	1.1.1.1	192.168.2.16	0x78d6	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:12.428196907 CET	1.1.1.1	192.168.2.16	0xd42d	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:12.447638988 CET	1.1.1.1	192.168.2.16	0x93f9	No error (0)	google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:12.447922945 CET	8.8.8.8	192.168.2.16	0xe28d	No error (0)	google.com		142.251.37.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:13.461824894 CET	1.1.1.1	192.168.2.16	0x9f74	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:13.461997032 CET	1.1.1.1	192.168.2.16	0xc507	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:13.470804930 CET	1.1.1.1	192.168.2.16	0x888c	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:17.156361103 CET	1.1.1.1	192.168.2.16	0x116b	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:17.157815933 CET	1.1.1.1	192.168.2.16	0x704f	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:17.170192957 CET	1.1.1.1	192.168.2.16	0x9329	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:17.170368910 CET	1.1.1.1	192.168.2.16	0x3027	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:19.322273970 CET	1.1.1.1	192.168.2.16	0x305d	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:19.322377920 CET	1.1.1.1	192.168.2.16	0xefcc	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:19.331218004 CET	1.1.1.1	192.168.2.16	0xe96d	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:19.345113039 CET	1.1.1.1	192.168.2.16	0xb6ca	No error (0)	google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:19.346003056 CET	8.8.8.8	192.168.2.16	0xc9e	No error (0)	google.com		142.251.37.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:24.367518902 CET	1.1.1.1	192.168.2.16	0x1469	Name error (3)	thetollroads.com-wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:24.373040915 CET	1.1.1.1	192.168.2.16	0x80b9	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:24.389050007 CET	1.1.1.1	192.168.2.16	0x74b4	Name error (3)	thetollroads.com-wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:27.414526939 CET	1.1.1.1	192.168.2.16	0x3408	No error (0)	thetollroads.com		45.60.150.166	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:27.414526939 CET	1.1.1.1	192.168.2.16	0x3408	No error (0)	thetollroads.com		45.60.170.166	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:28.609848022 CET	1.1.1.1	192.168.2.16	0x415b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:28.609848022 CET	1.1.1.1	192.168.2.16	0x415b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:28.609864950 CET	1.1.1.1	192.168.2.16	0xd8c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 1, 2025 00:22:29.579731941 CET	1.1.1.1	192.168.2.16	0xd027	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:29.579731941 CET	1.1.1.1	192.168.2.16	0xd027	No error (0)	www3.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.579886913 CET	1.1.1.1	192.168.2.16	0x670a	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621632099 CET	1.1.1.1	192.168.2.16	0xaa24	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621632099 CET	1.1.1.1	192.168.2.16	0xaa24	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:29.621644020 CET	1.1.1.1	192.168.2.16	0x53d6	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.124058008 CET	1.1.1.1	192.168.2.16	0xa608	No error (0)	thetollroads.com		45.60.150.166	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.124058008 CET	1.1.1.1	192.168.2.16	0xa608	No error (0)	thetollroads.com		45.60.170.166	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.739919901 CET	1.1.1.1	192.168.2.16	0x6fb1	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:30.739919901 CET	1.1.1.1	192.168.2.16	0x6fb1	No error (0)	www3.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.740431070 CET	1.1.1.1	192.168.2.16	0xabf0	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:30.846648932 CET	1.1.1.1	192.168.2.16	0x90ae	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.054270029 CET	1.1.1.1	192.168.2.16	0x317b	No error (0)	analytics.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.054730892 CET	1.1.1.1	192.168.2.16	0xcafb	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:31.055461884 CET	1.1.1.1	192.168.2.16	0xcaf1	No error (0)	stats.g.doubleclick.net		108.177.15.155	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.055461884 CET	1.1.1.1	192.168.2.16	0xcaf1	No error (0)	stats.g.doubleclick.net		108.177.15.154	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.055461884 CET	1.1.1.1	192.168.2.16	0xcaf1	No error (0)	stats.g.doubleclick.net		108.177.15.156	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.055461884 CET	1.1.1.1	192.168.2.16	0xcaf1	No error (0)	stats.g.doubleclick.net		108.177.15.157	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.063488960 CET	1.1.1.1	192.168.2.16	0x91cf	No error (0)	td.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683319092 CET	1.1.1.1	192.168.2.16	0xa1fe	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683319092 CET	1.1.1.1	192.168.2.16	0xa1fe	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.683549881 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877250910 CET	1.1.1.1	192.168.2.16	0xe95b	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877250910 CET	1.1.1.1	192.168.2.16	0xe95b	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:31.877522945 CET	1.1.1.1	192.168.2.16	0xfd45	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:33.880366087 CET	1.1.1.1	192.168.2.16	0xb752	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 1, 2025 00:22:33.880433083 CET	1.1.1.1	192.168.2.16	0xbac	No error (0)	googleads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:33.890707970 CET	1.1.1.1	192.168.2.16	0x76b3	No error (0)	static.doubleclick.net		172.217.18.6	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.142304897 CET	1.1.1.1	192.168.2.16	0x2126	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.144037008 CET	1.1.1.1	192.168.2.16	0xdd5c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.451021910 CET	1.1.1.1	192.168.2.16	0xafc8	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:34.809786081 CET	1.1.1.1	192.168.2.16	0xfa6f	No error (0)	static.doubleclick.net		142.250.186.70	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:35.289186001 CET	1.1.1.1	192.168.2.16	0x5288	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:35.289200068 CET	1.1.1.1	192.168.2.16	0xef48	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 1, 2025 00:22:35.390997887 CET	1.1.1.1	192.168.2.16	0xbe4c	No error (0)	play.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:35.766547918 CET	1.1.1.1	192.168.2.16	0x931b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 1, 2025 00:22:35.767343998 CET	1.1.1.1	192.168.2.16	0x545e	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:37.202941895 CET	1.1.1.1	192.168.2.16	0x7d0b	Name error (3)	thetollroads.com-wfmo	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:37.208605051 CET	1.1.1.1	192.168.2.16	0x24a8	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:37.223866940 CET	1.1.1.1	192.168.2.16	0xa572	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:37.265640974 CET	1.1.1.1	192.168.2.16	0xb817	No error (0)	google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:37.268310070 CET	8.8.8.8	192.168.2.16	0xb65c	No error (0)	google.com		142.251.37.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:38.276196957 CET	1.1.1.1	192.168.2.16	0xceb3	Name error (3)	thetollroads.com-wfmo	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:38.282445908 CET	1.1.1.1	192.168.2.16	0xd018	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:43.315351963 CET	1.1.1.1	192.168.2.16	0x48ea	Name error (3)	thetollroads.com-wfmo	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:22:43.320051908 CET	1.1.1.1	192.168.2.16	0xb268	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:22:43.335223913 CET	1.1.1.1	192.168.2.16	0xcbc1	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:02.864847898 CET	1.1.1.1	192.168.2.16	0xf9da	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:13.368429899 CET	1.1.1.1	192.168.2.16	0xcddb	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:13.368613005 CET	1.1.1.1	192.168.2.16	0xfa99	Name error (3)	thetollroads.com-wfmo	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:23:13.385581970 CET	1.1.1.1	192.168.2.16	0x6052	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:30.516988039 CET	1.1.1.1	192.168.2.16	0xa4d6	Name error (3)	thetollroads.com-wfmo	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.660195112 CET	1.1.1.1	192.168.2.16	0x84d6	Name error (3)	wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:23:31.660429955 CET	1.1.1.1	192.168.2.16	0xec65	Name error (3)	wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.671736956 CET	1.1.1.1	192.168.2.16	0xa0a6	Name error (3)	wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.693485975 CET	1.1.1.1	192.168.2.16	0x6b6b	Name error (3)	wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:23:31.696599007 CET	1.1.1.1	192.168.2.16	0x7642	Name error (3)	wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.714289904 CET	1.1.1.1	192.168.2.16	0x44c4	No error (0)	google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:31.721760035 CET	8.8.8.8	192.168.2.16	0x138d	No error (0)	google.com		142.251.37.14	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:32.725702047 CET	1.1.1.1	192.168.2.16	0xb073	Name error (3)	wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:32.726592064 CET	1.1.1.1	192.168.2.16	0x7dd9	Name error (3)	wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:23:37.758142948 CET	1.1.1.1	192.168.2.16	0x5c70	Name error (3)	wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2025 00:23:37.759094000 CET	1.1.1.1	192.168.2.16	0x3c06	Name error (3)	wfmo.xyz	none	none	65	IN (0x0001)	false
Jan 1, 2025 00:23:37.768408060 CET	1.1.1.1	192.168.2.16	0x9c7f	Name error (3)	wfmo.xyz	none	none	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49709	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:21:58 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:21:58 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:21:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MpOQzQIvj6u-icduntC4Mw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:21:58 UTC	124	IN	Data Raw: 38 65 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 67 6f 6e 7a 61 67 61 20 62 61 73 6b 65 74 62 61 6c 6c 20 70 6c 61 6e 65 20 63 72 61 73 68 22 2c 22 72 61 72 65 20 62 69 63 65 6e 74 65 6e 6e 69 61 6c 20 71 75 61 72 74 65 72 22 2c 22 70 65 72 75 20 74 73 75 6e 61 6d 69 20 77 61 76 65 73 22 2c 22 61 72 63 74 69 63 20 62 6c 61 73 74 20 32 30 32 35 20 74 65 6d 70 65 72 61 74 Data Ascii: 8e9)]}'["",["gonzaga basketball plane crash","rare bicentennial quarter","peru tsunami waves","arctic blast 2025 temperat
2024-12-31 23:21:58 UTC	1390	IN	Data Raw: 75 72 65 22 2c 22 72 61 72 65 73 74 20 70 6f 6b 65 6d 6f 6e 20 74 63 67 20 70 6f 63 6b 65 74 20 63 61 72 64 73 22 2c 22 67 65 6e 65 72 61 6c 20 68 6f 73 70 69 74 61 6c 22 2c 22 6d 65 74 61 20 71 75 65 73 74 20 33 73 20 73 6f 66 74 77 61 72 65 20 75 70 64 61 74 65 22 2c 22 79 61 6e 6e 69 63 6b 20 6e 67 61 6b 6f 75 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c Data Ascii: ure","rarest pokemon tcg pocket cards","general hospital","meta quest 3s software update","yannick ngakoue"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","googl
2024-12-31 23:21:58 UTC	774	IN	Data Raw: 59 72 55 58 64 59 65 6b 45 7a 4d 33 4e 55 65 6e 52 30 59 54 4e 49 52 30 6c 4e 63 48 70 6c 62 33 41 34 63 33 46 76 63 54 42 56 64 33 46 42 65 6d 52 43 64 58 42 5a 62 45 52 31 62 30 34 33 59 6d 64 6b 65 47 5a 71 64 6a 4e 59 54 58 56 76 63 54 51 31 62 6c 42 77 62 55 30 77 4d 55 31 36 63 6b 6c 78 52 6d 31 4d 54 6e 46 50 63 47 68 30 63 30 4a 6d 4e 54 6c 7a 53 45 6c 4c 4e 57 6b 77 63 32 52 57 55 31 4e 34 64 30 31 56 51 6d 52 73 54 79 74 74 65 45 4a 32 4c 32 6f 7a 52 30 78 68 4e 30 5a 50 56 47 46 58 55 6d 4e 35 56 32 74 36 51 32 39 36 51 30 74 78 65 53 74 76 62 47 74 6e 63 6b 4d 33 65 6b 74 73 55 57 52 44 52 6c 42 4d 57 55 4e 33 52 79 74 34 4f 58 70 6d 61 6e 56 6a 63 48 42 78 62 6a 5a 30 4e 46 70 78 62 56 46 43 55 33 56 79 57 6b 52 76 53 6a 56 59 4f 58 5a 51 4e Data Ascii: YrUXdYekEzM3NUenR0YTNIR0lNcHplb3A4c3FvcTBVd3FBemRCdXBZbER1b043YmdkeGZqdjNYTXVvcTQ1blBwbU0wMU16cklxRm1MTnFPcGh0c0JmNTlzSElLNWkwc2RWU1N4d01VQmRsTytteEJ2L2ozR0xhN0ZPVGFXUmN5V2t6Q296Q0txeStvbGtnckM3ektsUWRDRlBMWUN3Ryt4OXpmanVjcHBxbjZ0NFpxbVFCU3VyWkRvSjVYOXZQN
2024-12-31 23:21:58 UTC	91	IN	Data Raw: 35 35 0d 0a 68 6d 4d 6d 55 72 51 30 5a 49 56 54 6c 50 62 6a 67 34 61 6d 6c 74 4d 57 78 6b 4b 31 6c 35 4d 58 4a 49 56 44 4e 47 65 56 42 56 4e 79 39 42 53 58 64 49 62 58 70 6d 54 47 46 55 54 6e 41 32 5a 58 5a 79 52 58 41 31 53 6a 56 52 65 47 68 46 52 45 5a 59 53 6b 70 0d 0a Data Ascii: 55hmMmUrQ0ZIVTlPbjg4amltMWxkK1l5MXJIVDNGeVBVNy9BSXdIbXpmTGFUTnA2ZXZyRXA1SjVReGhFREZYSkp
2024-12-31 23:21:58 UTC	1390	IN	Data Raw: 31 32 65 35 0d 0a 56 51 33 64 47 61 48 67 7a 64 48 70 6e 5a 6d 30 76 61 58 4a 4b 4f 48 4e 78 53 57 46 4c 64 58 41 32 4e 54 42 6b 4b 33 4e 7a 61 31 67 33 56 6e 55 35 4c 31 63 31 4d 31 63 35 5a 30 38 72 53 6d 31 77 56 6d 52 6c 4c 30 46 52 59 57 52 58 4c 31 68 72 57 6b 77 31 5a 6c 4a 78 53 55 70 46 56 58 6c 4b 63 6a 5a 73 4e 7a 4a 42 4e 31 64 4b 4b 7a 52 34 5a 6e 42 77 59 33 5a 71 57 6a 5a 58 53 6c 6b 32 62 56 4e 5a 5a 56 4a 61 55 55 4e 44 4e 46 56 30 62 30 34 72 52 46 6c 59 64 47 68 4c 65 6b 74 6b 4e 6e 46 6c 5a 55 74 73 61 30 56 6b 53 6c 67 77 4e 6c 52 54 52 31 4e 4e 52 58 42 76 57 58 4a 77 4d 30 38 79 62 30 34 33 61 54 5a 68 64 53 73 32 59 58 5a 70 59 58 52 68 53 30 74 73 61 48 46 75 51 57 68 68 4e 6e 70 46 4e 32 35 54 62 31 4a 6d 65 6e 42 49 54 30 56 76 Data Ascii: 12e5VQ3dGaHgzdHpnZm0vaXJKOHNxSWFLdXA2NTBkK3Nza1g3VnU5L1c1M1c5Z08rSm1wVmRlL0FRYWRXL1hrWkw1ZlJxSUpFVXlKcjZsNzJBN1dKKzR4ZnBwY3ZqWjZXSlk2bVNZZVJaUUNDNFV0b04rRFlYdGhLektkNnFlZUtsa0VkSlgwNlRTR1NNRXBvWXJwM08yb043aTZhdSs2YXZpYXRhS0tsaHFuQWhhNnpFN25Tb1JmenBIT0Vv
2024-12-31 23:21:58 UTC	1390	IN	Data Raw: 34 63 33 4e 6e 54 6d 64 56 4d 46 67 7a 4f 54 6c 6d 63 44 4a 34 56 54 42 75 56 6e 5a 78 59 54 5a 46 4f 47 4e 32 64 45 30 76 4c 7a 4a 52 50 54 30 36 45 45 64 6c 62 6d 56 79 59 57 77 67 53 47 39 7a 63 47 6c 30 59 57 78 4b 42 79 4d 30 4d 6a 51 79 4e 44 4a 53 4f 32 64 7a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 55 55 44 46 55 59 33 64 4f 63 6c 64 76 61 55 52 6b 5a 7a 6c 43 53 6b 6c 55 4f 44 46 4d 54 46 56 79 54 56 56 6a 61 6b 6c 4d 65 54 64 4a 54 45 56 75 54 55 46 52 51 69 31 58 51 57 78 36 63 42 4d 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 6f 76 62 53 38 77 64 32 64 71 63 44 52 6d 45 68 4e 47 62 32 39 30 59 6d 46 73 62 43 42 73 Data Ascii: 4c3NnTmdVMFgzOTlmcDJ4VTBuVnZxYTZFOGN2dE0vLzJRPT06EEdlbmVyYWwgSG9zcGl0YWxKByM0MjQyNDJSO2dzX3NzcD1lSnpqNHRUUDFUY3dOcldvaURkZzlCSklUODFMTFVyTVVjaklMeTdJTEVuTUFRQi1XQWx6cBM\u003d","zl":10002},{"zl":10002},{"google:entityinfo":"CgovbS8wd2dqcDRmEhNGb290YmFsbCBs
2024-12-31 23:21:58 UTC	1390	IN	Data Raw: 72 63 54 45 31 63 55 46 68 4d 55 59 7a 51 55 78 46 51 55 51 30 4e 45 4e 44 54 33 4e 36 54 33 52 71 63 48 46 54 62 47 74 78 59 54 5a 5a 61 32 6c 4f 55 45 56 6d 54 57 35 69 4e 57 34 30 52 45 64 69 61 57 6c 74 4d 7a 4e 48 4e 55 78 54 65 44 46 45 4f 44 4a 61 55 6a 46 48 56 46 4e 42 54 32 74 6b 55 58 52 70 62 33 5a 6d 56 56 46 69 4c 7a 5a 33 54 44 6b 76 64 55 59 31 61 44 46 6c 4d 47 46 69 51 6e 70 4a 65 45 6c 51 56 47 39 55 59 69 74 7a 56 58 4e 35 62 7a 5a 36 54 45 70 71 55 54 45 77 56 48 64 36 62 30 4a 79 55 6e 4a 59 63 31 4a 30 4d 44 68 33 59 31 4a 47 65 6b 78 4f 53 45 39 7a 51 57 74 61 55 55 45 30 56 6d 49 32 61 6a 55 79 64 32 78 52 61 30 68 4f 64 48 4e 50 4d 47 6b 78 54 6d 52 73 4d 56 70 58 65 56 64 45 4e 6d 78 48 4e 31 64 42 61 6e 5a 32 4f 48 49 32 5a 6e Data Ascii: rcTE1cUFhMUYzQUxFQUQ0NENDT3N6T3RqcHFTbGtxYTZZa2lOUEVmTW5iNW40REdiaWltMzNHNUxTeDFEODJaUjFHVFNBT2tkUXRpb3ZmVVFiLzZ3TDkvdUY1aDFlMGFiQnpJeElQVG9UYitzVXN5bzZ6TEpqUTEwVHd6b0JyUnJYc1J0MDh3Y1JGekxOSE9zQWtaUUE0VmI2ajUyd2xRa0hOdHNPMGkxTmRsMVpXeVdENmxHN1dBanZ2OHI2Zn
2024-12-31 23:21:58 UTC	675	IN	Data Raw: 46 52 75 52 48 4a 55 62 47 63 79 64 55 31 6e 4d 6a 46 6b 55 6d 70 52 61 47 30 76 51 7a 68 73 53 44 64 43 53 54 56 47 52 47 55 76 53 30 56 6a 62 30 59 35 56 33 4a 79 59 53 39 59 5a 6b 4e 46 4d 58 56 56 4e 69 39 77 54 79 73 7a 57 54 51 30 55 56 6c 50 52 56 70 70 61 30 31 4c 63 33 63 32 5a 45 31 52 5a 6d 6c 43 63 57 46 30 62 32 31 5a 51 33 68 71 59 6c 4e 6d 54 56 68 49 4f 54 52 78 4e 55 64 36 65 48 68 4e 62 33 56 44 64 47 64 51 56 45 59 76 61 54 5a 49 62 6c 70 57 55 6a 46 55 62 54 64 53 56 45 64 46 5a 57 70 4c 56 79 39 33 51 32 59 7a 65 47 35 71 56 6e 52 48 62 54 6b 34 59 56 41 76 4f 57 73 39 4f 67 39 5a 59 57 35 75 61 57 4e 72 49 45 35 6e 59 57 74 76 64 57 56 4b 42 79 4d 30 4d 6a 51 79 4e 44 4a 53 4f 32 64 7a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 4d Data Ascii: FRuRHJUbGcydU1nMjFkUmpRaG0vQzhsSDdCSTVGRGUvS0Vjb0Y5V3JyYS9YZkNFMXVVNi9wTyszWTQ0UVlPRVppa01Lc3c2ZE1RZmlCcWF0b21ZQ3hqYlNmTVhIOTRxNUd6eHhNb3VDdGdQVEYvaTZIblpWUjFUbTdSVEdFZWpLVy93Q2YzeG5qVnRHbTk4YVAvOWs9Og9ZYW5uaWNrIE5nYWtvdWVKByM0MjQyNDJSO2dzX3NzcD1lSnpqNHRM
2024-12-31 23:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49714	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:07 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:07 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:07 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-y-8FDceJOGXvsIRIrMk4zQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:07 UTC	124	IN	Data Raw: 35 38 37 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 6f 63 69 61 6c 20 73 65 63 75 72 69 74 79 20 62 65 6e 65 66 69 74 73 22 2c 22 72 6f 63 6b 73 74 61 72 20 67 61 6d 65 73 20 67 74 61 20 36 20 74 72 61 69 6c 65 72 20 32 22 2c 22 66 6f 72 64 20 72 65 63 61 6c 6c 73 20 32 30 32 34 22 2c 22 76 79 62 7a 20 6b 61 72 74 65 6c 20 66 72 65 65 64 6f 6d 20 73 74 72 65 65 74 20 63 Data Ascii: 587)]}'["",["social security benefits","rockstar games gta 6 trailer 2","ford recalls 2024","vybz kartel freedom street c
2024-12-31 23:22:07 UTC	1298	IN	Data Raw: 6f 6e 63 65 72 74 22 2c 22 73 65 6e 74 72 79 20 67 6f 6c 66 20 74 6f 75 72 6e 61 6d 65 6e 74 22 2c 22 6e 65 77 20 79 65 61 72 20 65 76 65 20 68 6f 75 72 73 22 2c 22 31 30 34 2e 37 20 74 68 65 20 66 69 73 68 22 2c 22 72 6f 79 61 6c 20 63 61 72 69 62 62 65 61 6e 20 6e 65 77 20 62 65 76 65 72 61 67 65 20 70 6f 6c 69 63 79 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 Data Ascii: oncert","sentry golf tournament","new year eve hours","104.7 the fish","royal caribbean new beverage policy"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","goog
2024-12-31 23:22:07 UTC	90	IN	Data Raw: 35 34 0d 0a 62 6d 64 70 4d 30 35 6e 5a 55 39 69 4e 6a 6c 47 57 6c 6b 30 62 45 52 4b 51 6a 4e 58 62 47 5a 7a 4f 44 4d 78 55 48 42 6d 4f 55 64 50 5a 55 74 6c 62 44 59 79 56 33 59 35 54 7a 4e 75 59 6d 46 4b 61 45 74 54 57 57 78 74 53 57 6c 32 4d 6e 52 5a 57 48 51 33 0d 0a Data Ascii: 54bmdpM05nZU9iNjlGWlk0bERKQjNXbGZzODMxUHBmOUdPZUtlbDYyV3Y5TzNuYmFKaEtTWWxtSWl2MnRZWHQ3
2024-12-31 23:22:07 UTC	1390	IN	Data Raw: 37 32 32 0d 0a 57 43 39 50 63 44 6c 53 4d 6d 51 32 62 58 56 4f 52 32 6f 32 53 6e 52 79 51 54 52 30 4d 6d 73 35 55 47 63 77 56 7a 52 32 53 45 5a 30 4f 56 5a 4b 55 45 55 77 63 31 4e 52 64 58 70 34 63 55 78 73 4d 55 46 4f 64 31 41 34 51 57 56 31 52 30 35 31 55 32 38 35 61 44 68 45 62 48 55 78 56 6c 56 58 4d 32 4a 73 63 7a 59 72 51 33 51 32 63 55 74 31 62 6e 4a 4b 4d 54 59 72 4d 56 4e 75 63 57 52 43 52 48 6c 34 55 44 5a 69 59 7a 67 35 4c 32 4d 32 4f 55 74 6a 57 45 74 4e 64 43 39 48 62 58 56 6d 64 57 4e 7a 57 46 52 58 4e 32 59 30 53 47 56 49 57 6b 70 78 61 6d 52 5a 64 6d 6c 58 4e 79 74 57 4d 31 4e 4c 63 6d 77 34 4e 56 52 35 64 45 77 78 53 6c 6c 36 5a 54 59 79 64 6d 6c 46 51 7a 68 6e 5a 32 4e 58 52 33 4e 6a 63 56 4e 71 4f 58 4e 69 61 6c 4e 77 4e 6d 59 78 62 47 Data Ascii: 722WC9PcDlSMmQ2bXVOR2o2SnRyQTR0Mms5UGcwVzR2SEZ0OVZKUEUwc1NRdXp4cUxsMUFOd1A4QWV1R051U285aDhEbHUxVlVXM2JsczYrQ3Q2cUt1bnJKMTYrMVNucWRCRHl4UDZiYzg5L2M2OUtjWEtNdC9HbXVmdWNzWFRXN2Y0SGVIWkpxamRZdmlXNytWM1NLcmw4NVR5dEwxSll6ZTYydmlFQzhnZ2NXR3NjcVNqOXNialNwNmYxbG
2024-12-31 23:22:07 UTC	443	IN	Data Raw: 46 6b 79 65 55 52 61 5a 7a 6c 43 53 58 4a 55 63 7a 42 79 53 32 46 77 56 56 4e 4e 58 31 42 54 56 6b 31 76 65 56 4d 34 64 48 6c 72 64 6b 31 43 57 57 39 42 51 55 77 34 56 6b 4d 74 51 58 41 48 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 37 35 36 37 37 36 32 39 36 37 39 32 34 31 36 34 39 35 38 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 30 35 37 2c 31 30 35 36 2c 31 30 35 35 2c 31 30 35 34 2c 31 30 35 33 2c 31 30 35 32 2c 31 30 35 31 2c 31 30 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b Data Ascii: FkyeURaZzlCSXJUczByS2FwVVNNX1BTVk1veVM4dHlrdk1CWW9BQUw4VkMtQXAH","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":7567762967924164958,"google:suggestrelevance":[1057,1056,1055,1054,1053,1052,1051,1050],"google:suggestsubtypes":[
2024-12-31 23:22:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49715	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:21 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:21 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:21 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-LIbTYUMRt5Cg4sW585JviA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:21 UTC	124	IN	Data Raw: 38 30 32 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 79 63 20 63 6f 6e 67 65 73 74 69 6f 6e 20 70 72 69 63 69 6e 67 22 2c 22 6d 61 72 76 65 6c 20 66 72 69 65 6e 64 6c 79 20 6e 65 69 67 68 62 6f 72 68 6f 6f 64 20 73 70 69 64 65 72 20 6d 61 6e 22 2c 22 66 63 20 62 61 72 63 65 6c 6f 6e 61 20 64 61 6e 69 20 6f 6c 6d 6f 22 2c 22 69 72 73 20 73 74 69 6d 75 6c 75 73 20 63 68 65 Data Ascii: 802)]}'["",["nyc congestion pricing","marvel friendly neighborhood spider man","fc barcelona dani olmo","irs stimulus che
2024-12-31 23:22:21 UTC	1390	IN	Data Raw: 63 6b 73 22 2c 22 77 68 61 74 73 61 70 70 20 32 30 32 35 20 75 70 64 61 74 65 22 2c 22 73 70 61 63 65 78 20 72 6f 63 6b 65 74 20 6c 61 75 6e 63 68 20 74 6f 64 61 79 22 2c 22 64 61 6c 6c 61 73 20 6d 61 76 65 72 69 63 6b 73 20 76 73 20 73 61 63 72 61 6d 65 6e 74 6f 20 6b 69 6e 67 73 22 2c 22 72 6f 79 61 6c 20 63 61 72 69 62 62 65 61 6e 20 6e 65 77 20 62 65 76 65 72 61 67 65 20 70 6f 6c 69 63 79 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 Data Ascii: cks","whatsapp 2025 update","spacex rocket launch today","dallas mavericks vs sacramento kings","royal caribbean new beverage policy"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmc
2024-12-31 23:22:21 UTC	543	IN	Data Raw: 62 47 31 47 54 45 4a 53 4d 56 46 77 65 6b 70 49 53 45 5a 55 54 58 68 53 53 57 78 7a 61 32 70 6a 59 57 68 32 57 55 64 34 57 57 55 76 5a 6c 6c 5a 55 7a 64 56 59 57 46 56 4e 45 31 55 54 58 42 61 54 6b 64 58 54 58 52 36 59 56 42 76 65 6b 78 74 61 30 70 74 56 55 74 52 4d 48 4a 74 4b 33 4e 59 53 6a 64 53 55 45 52 6b 63 6c 70 6f 64 6e 51 30 57 56 52 36 4c 79 39 42 51 6d 46 61 59 55 30 78 56 6b 56 77 61 32 6c 4a 54 33 42 53 64 56 55 34 4c 7a 4d 31 5a 6a 4e 4f 61 58 46 4a 4e 57 39 30 56 44 5a 57 54 33 56 35 65 45 4d 31 52 6e 4a 45 5a 6e 68 32 64 69 74 51 54 45 5a 49 53 30 30 32 62 58 6c 68 4e 6b 38 7a 56 6e 42 44 5a 44 41 33 55 56 70 51 4f 45 46 71 5a 54 4e 34 64 6a 64 5a 4e 45 52 6b 62 47 5a 68 54 6e 6c 76 62 31 56 4c 4c 33 5a 4e 4d 55 55 77 57 57 78 4e 4e 55 68 Data Ascii: bG1GTEJSMVFwekpISEZUTXhSSWxza2pjYWh2WUd4WWUvZllZUzdVYWFVNE1UTXBaTkdXTXR6YVBvekxta0ptVUtRMHJtK3NYSjdSUERkclpodnQ0WVR6Ly9BQmFaYU0xVkVwa2lJT3BSdVU4LzM1ZjNOaXFJNW90VDZWT3V5eEM1RnJEZnh2ditQTEZIS002bXlhNk8zVnBDZDA3UVpQOEFqZTN4djdZNERkbGZhTnlvb1VLL3ZNMUUwWWxNNUh
2024-12-31 23:22:21 UTC	89	IN	Data Raw: 35 33 0d 0a 46 70 4e 4d 32 56 76 64 32 70 78 62 55 51 31 51 6e 68 53 55 6d 5a 78 59 69 74 4a 56 45 78 44 64 56 63 78 4f 56 5a 59 57 6d 70 6b 54 32 31 76 4d 47 52 52 63 58 52 6f 64 33 52 36 65 47 55 72 62 7a 49 31 4f 45 31 54 63 33 64 36 56 32 35 79 53 6b 70 4a 0d 0a Data Ascii: 53FpNM2Vvd2pxbUQ1QnhSUmZxYitJVExDdVcxOVZYWmpkT21vMGRRcXRod3R6eGUrbzI1OE1Tc3d6V25ySkpJ
2024-12-31 23:22:21 UTC	1390	IN	Data Raw: 38 32 66 0d 0a 53 56 70 53 54 54 5a 32 4d 6d 35 51 65 6a 4a 53 4d 30 52 31 4f 58 4e 61 59 57 39 75 63 6b 30 30 62 45 70 6c 53 6e 70 43 51 55 35 6a 5a 32 6c 52 4e 6c 56 43 4e 56 6b 79 4e 48 5a 7a 54 47 35 35 52 30 74 57 51 6c 52 56 65 6b 56 50 61 32 46 4e 54 46 64 44 53 54 4a 72 63 31 42 4b 61 48 6f 32 59 6d 56 61 65 46 46 57 4e 55 4e 79 62 55 4e 50 62 7a 52 30 4f 55 45 78 54 45 35 50 64 33 42 78 55 55 5a 42 51 58 68 4b 54 45 31 43 4f 54 49 72 4d 33 52 70 56 47 31 46 4d 57 56 5a 4d 6c 6c 53 61 54 4e 4a 4e 31 4a 32 4f 46 64 34 5a 6d 70 54 53 32 39 77 4d 43 74 75 4c 32 70 52 54 46 70 52 63 54 64 4c 54 30 78 6c 56 30 70 74 59 58 67 78 54 6b 35 55 64 46 56 6b 59 31 4e 6e 51 7a 52 57 62 45 63 30 4f 58 4e 50 53 32 74 4d 53 6a 4a 4f 61 32 31 6d 62 32 78 6f 59 55 Data Ascii: 82fSVpSTTZ2Mm5QejJSM0R1OXNaYW9uck00bEplSnpCQU5jZ2lRNlVCNVkyNHZzTG55R0tWQlRVekVPa2FNTFdDSTJrc1BKaHo2YmVaeFFWNUNybUNPbzR0OUExTE5Pd3BxUUZBQXhKTE1COTIrM3RpVG1FMWVZMllSaTNJN1J2OFd4ZmpTS29wMCtuL2pRTFpRcTdLT0xlV0ptYXgxTk5UdFVkY1NnQzRWbEc0OXNPS2tMSjJOa21mb2xoYU
2024-12-31 23:22:21 UTC	712	IN	Data Raw: 31 64 46 57 55 31 73 4c 33 5a 52 61 6d 30 7a 5a 44 56 71 52 31 52 76 53 79 74 58 62 33 46 4a 4e 6c 56 52 63 55 6b 79 5a 54 56 46 5a 48 68 5a 5a 44 6b 72 4e 6a 46 7a 59 55 5a 34 53 55 74 78 54 6d 77 78 53 58 46 78 4d 58 6c 48 4d 6d 4a 71 57 57 6f 7a 52 30 74 7a 5a 57 68 52 61 30 4a 5a 63 32 4a 4e 4c 7a 6c 72 50 54 6f 6e 62 57 46 79 64 6d 56 73 49 47 5a 79 61 57 56 75 5a 47 78 35 49 47 35 6c 61 57 64 6f 59 6d 39 79 61 47 39 76 5a 43 42 7a 63 47 6c 6b 5a 58 49 67 62 57 46 75 53 67 63 6a 59 54 4d 79 4f 44 4d 30 55 6c 6c 6e 63 31 39 7a 63 33 41 39 5a 55 70 36 61 6a 52 30 52 46 41 78 56 47 4e 33 63 58 6c 33 4d 6b 31 74 52 44 42 56 63 7a 6c 4f 54 45 4e 77 54 48 70 57 52 6b 6c 4c 4f 48 42 4e 65 6c 56 32 53 6e 46 57 56 45 6c 54 4f 44 46 4e 65 6a 42 71 53 30 77 34 Data Ascii: 1dFWU1sL3ZRam0zZDVqR1RvSytXb3FJNlVRcUkyZTVFZHhZZDkrNjFzYUZ4SUtxTmwxSXFxMXlHMmJqWWozR0tzZWhRa0JZc2JNLzlrPTonbWFydmVsIGZyaWVuZGx5IG5laWdoYm9yaG9vZCBzcGlkZXIgbWFuSgcjYTMyODM0Ullnc19zc3A9ZUp6ajR0RFAxVGN3cXl3Mk1tRDBVczlOTENwTHpWRklLOHBNelV2SnFWVElTODFNejBqS0w4
2024-12-31 23:22:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:22 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:22 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:22 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9U5a7QGPxgj_QAwXC2ikRQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:22 UTC	124	IN	Data Raw: 37 30 37 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6d 65 74 61 20 71 75 65 73 74 20 33 73 20 73 6f 66 74 77 61 72 65 20 75 70 64 61 74 65 22 2c 22 6d 61 72 76 65 6c 20 72 69 76 61 6c 73 20 74 69 65 72 20 6c 69 73 74 22 2c 22 79 61 6e 6e 69 63 6b 20 6e 67 61 6b 6f 75 65 22 2c 22 73 70 61 63 65 78 20 72 6f 63 6b 65 74 20 6c 61 75 6e 63 68 20 74 6f 64 61 79 22 2c 22 77 65 61 Data Ascii: 707)]}'["",["meta quest 3s software update","marvel rivals tier list","yannick ngakoue","spacex rocket launch today","wea
2024-12-31 23:22:22 UTC	1390	IN	Data Raw: 74 68 65 72 20 66 6f 72 65 63 61 73 74 20 70 6f 6c 61 72 20 76 6f 72 74 65 78 22 2c 22 67 65 6e 73 68 69 6e 20 69 6d 70 61 63 74 20 35 2e 33 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 77 61 6c 6d 61 72 74 20 68 65 72 6d 65 73 20 62 69 72 6b 69 6e 20 62 61 67 73 22 2c 22 6e 6f 73 66 65 72 61 74 75 20 6d 6f 76 69 65 20 62 6f 78 20 6f 66 66 69 63 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 Data Ascii: ther forecast polar vortex","genshin impact 5.3 release date","walmart hermes birkin bags","nosferatu movie box office"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u
2024-12-31 23:22:22 UTC	292	IN	Data Raw: 6e 5a 48 56 6c 5a 45 55 7a 46 72 52 57 31 59 52 7a 42 35 54 30 4e 79 54 44 46 33 55 7a 52 5a 4e 48 4e 78 56 46 68 33 65 6c 52 35 53 33 42 59 57 6a 41 77 4e 30 68 45 56 45 56 51 52 31 45 7a 55 56 46 6c 54 33 4a 4e 53 56 70 48 57 46 4e 53 4b 31 63 79 52 6d 56 32 62 47 78 77 61 56 5a 6b 64 31 4e 69 4e 6d 52 33 54 44 52 6f 62 7a 67 72 63 54 45 31 63 55 46 68 4d 55 59 7a 51 55 78 46 51 55 51 30 4e 45 4e 44 54 33 4e 36 54 33 52 71 63 48 46 54 62 47 74 78 59 54 5a 5a 61 32 6c 4f 55 45 56 6d 54 57 35 69 4e 57 34 30 52 45 64 69 61 57 6c 74 4d 7a 4e 48 4e 55 78 54 65 44 46 45 4f 44 4a 61 55 6a 46 48 56 46 4e 42 54 32 74 6b 55 58 52 70 62 33 5a 6d 56 56 46 69 4c 7a 5a 33 54 44 6b 76 64 55 59 31 61 44 46 6c 4d 47 46 69 51 6e 70 4a 65 45 6c 51 56 47 39 55 59 69 74 7a Data Ascii: nZHVlZEUzFrRW1YRzB5T0NyTDF3UzRZNHNxVFh3elR5S3BYWjAwN0hEVEVQR1EzUVFlT3JNSVpHWFNSK1cyRmV2bGxwaVZkd1NiNmR3TDRobzgrcTE1cUFhMUYzQUxFQUQ0NENDT3N6T3RqcHFTbGtxYTZZa2lOUEVmTW5iNW40REdiaWltMzNHNUxTeDFEODJaUjFHVFNBT2tkUXRpb3ZmVVFiLzZ3TDkvdUY1aDFlMGFiQnpJeElQVG9UYitz
2024-12-31 23:22:22 UTC	89	IN	Data Raw: 35 33 0d 0a 33 59 31 4a 47 65 6b 78 4f 53 45 39 7a 51 57 74 61 55 55 45 30 56 6d 49 32 61 6a 55 79 64 32 78 52 61 30 68 4f 64 48 4e 50 4d 47 6b 78 54 6d 52 73 4d 56 70 58 65 56 64 45 4e 6d 78 48 4e 31 64 42 61 6e 5a 32 4f 48 49 32 5a 6e 42 6e 62 6d 74 56 54 6b 0d 0a Data Ascii: 533Y1JGekxOSE9zQWtaUUE0VmI2ajUyd2xRa0hOdHNPMGkxTmRsMVpXeVdENmxHN1dBanZ2OHI2ZnBnbmtVTk
2024-12-31 23:22:22 UTC	1390	IN	Data Raw: 37 34 39 0d 0a 74 4c 59 56 46 51 55 46 52 68 4e 7a 4a 45 51 31 56 58 64 6d 68 56 63 58 4d 77 62 57 74 6f 54 6b 6c 43 62 32 6c 32 4e 48 67 77 54 45 68 35 4f 55 31 57 55 6b 6b 76 4e 6c 4e 53 4f 47 49 30 4e 30 30 31 55 6b 74 79 52 44 42 4f 54 6d 5a 73 54 6c 4a 4b 55 45 64 52 56 45 31 69 4d 30 64 75 5a 69 74 4e 55 33 67 31 51 6b 74 77 59 57 46 4e 55 30 78 69 57 57 64 4d 4d 33 64 46 65 56 4e 32 54 55 5a 6d 56 48 52 4b 54 54 68 6a 57 57 78 59 56 7a 68 69 59 56 64 57 54 43 74 4c 65 44 6c 4d 4e 44 41 33 55 48 4d 35 62 58 6c 36 54 46 63 77 4d 45 78 48 55 6d 68 77 52 33 42 73 53 6b 6b 34 65 56 4a 30 64 6d 45 30 4f 57 55 7a 56 45 56 68 64 33 70 70 63 6b 39 7a 51 30 70 57 4e 55 35 57 4e 56 52 58 56 6d 78 4f 53 55 68 46 55 6c 68 73 52 32 39 56 52 47 38 79 4d 32 59 32 Data Ascii: 749tLYVFQUFRhNzJEQ1VXdmhVcXMwbWtoTklCb2l2NHgwTEh5OU1WUkkvNlNSOGI0N001UktyRDBOTmZsTlJKUEdRVE1iM0duZitNU3g1QktwYWFNU0xiWWdMM3dFeVN2TUZmVHRKTThjWWxYVzhiYVdWTCtLeDlMNDA3UHM5bXl6TFcwMExHUmhwR3BsSkk4eVJ0dmE0OWUzVEVhd3ppck9zQ0pWNU5WNVRXVmxOSUhFUlhsR29VRG8yM2Y2
2024-12-31 23:22:22 UTC	482	IN	Data Raw: 55 59 32 39 55 4f 44 68 78 54 55 56 72 65 6c 6c 51 56 47 6c 79 4d 48 70 4e 65 54 68 30 54 58 70 73 59 6b 6c 54 4d 46 39 4e 65 6d 6b 35 54 6b 4a 52 51 30 78 74 5a 32 35 71 63 41 5a 77 42 77 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 2d 33 35 37 30 38 34 30 35 34 34 34 36 35 33 30 33 39 35 39 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 Data Ascii: UY29UODhxTUVrellQVGlyMHpNeTh0TXpsYklTMF9Nemk5TkJRQ0xtZ25qcAZwBw\u003d\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":-3570840544465303959,"google:suggestrelevance":[1257,1256,1255,1254,1253,125
2024-12-31 23:22:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49717	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:24 UTC	649	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=the&oit=1&cp=3&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49718	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:25 UTC	650	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thet&oit=1&cp=4&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49719	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:25 UTC	651	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=theto&oit=1&cp=5&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49720	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:25 UTC	653	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetoll&oit=1&cp=7&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:25 UTC	654	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollr&oit=1&cp=8&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49722	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:25 UTC	655	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollro&oit=1&cp=9&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49723	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:26 UTC	657	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroa&oit=1&cp=10&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49724	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:26 UTC	659	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads&oit=1&cp=12&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49725	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:26 UTC	660	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads.&oit=1&cp=13&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49726	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:26 UTC	661	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads.c&oit=1&cp=14&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49727	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:26 UTC	662	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads.co&oit=3&cp=15&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49731	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:28 UTC	659	OUT	GET / HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:28 UTC	1211	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; Expires=Tue, 07 Jan 2025 23:22:28 GMT; Path=/ Set-Cookie: AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; Expires=Tue, 07 Jan 2025 23:22:28 GMT; Path=/; SameSite=None; Secure Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Set-Cookie: visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; expires=Wed, 31 Dec 2025 06:25:20 GMT; HttpOnly; path=/; Domain=.thetollroads.com; Secure; SameSite=None Set-Cookie: nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; HttpOnly; path=/; Domain=.thetollroads.com; Secure; SameSite=None Set-Cookie: incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; path=/; Domain=.thetollroads.com; Secure; SameSite=None X-CDN: Imperva X-Iinfo: 18-261309905-261309969 NNNN CT(83 158 0) RT(1735687347736 295) q(0 0 2 0) r(4 4) U12
2024-12-31 23:22:28 UTC	241	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 Data Ascii: 2000<!DOCTYPE html><html lang="en"><link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" crossorigin href="https://fonts.gstatic.com"><link rel="stylesheet" href="https://fonts.googleapis.com/css2?family
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 3d 52 6f 62 6f 74 6f 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 53 6e 48 35 57 4b 2b 62 5a 78 67 50 48 73 34 34 75 57 49 58 2b 4c 4c 4a 41 4a 39 2f 32 50 6b 50 4b 5a 35 51 69 41 6a 36 54 61 38 36 77 2b 66 73 62 32 54 6b 63 6d 66 52 79 56 58 33 70 42 6e 4d 46 63 56 37 6f 51 50 4a 6b 6c 39 51 65 76 53 43 57 72 33 57 36 41 3d 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 72 65 66 65 72 72 65 72 70 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 Data Ascii: =Roboto:wght@300;400;700&display=swap"><link rel="stylesheet" integrity="sha512-SnH5WK+bZxgPHs44uWIX+LLJAJ9/2PkPKZ5QiAj6Ta86w+fsb2TkcmfRyVX3pBnMFcV7oQPJkl9QevSCWr3W6A==" crossorigin="anonymous" referrerpolicy="no-referrer" href="https://cdnjs.cloudf
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 46 58 4d 50 43 32 30 39 58 32 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0d 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 Data Ascii: t async src="https://www.googletagmanager.com/gtag/js?id=G-FXMPC209X2"></script> <script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config'
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 29 20 7b 0d 0a 09 24 61 6c 65 72 74 73 2e 66 6f 72 45 61 63 68 28 28 24 61 6c 65 72 74 29 20 3d 3e 20 7b 0d 0a 09 09 63 6f 6e 73 74 20 63 6c 6f 73 65 50 65 72 69 6f 64 20 3d 20 24 61 6c 65 72 74 2e 64 61 74 61 73 65 74 2e 63 6c 6f 73 65 50 65 72 69 6f 64 20 3f 3f 20 22 53 65 73 73 69 6f 6e 22 3b 0d 0a 09 09 63 6f 6e 73 74 20 63 75 73 74 6f 6d 43 6c 6f 73 65 50 65 72 69 6f 64 20 3d 20 24 61 6c 65 72 74 2e 64 61 74 61 73 65 74 2e 63 75 73 74 6f 6d 43 6c 6f 73 65 50 65 72 69 6f 64 3b 0d 0a 09 09 63 6f 6e 73 74 20 69 73 43 6c 6f 73 65 64 20 3d 20 28 29 20 3d 3e 20 7b 0d 0a 09 09 09 69 66 20 28 63 6c 6f 73 65 50 65 72 69 6f 64 20 3d 3d 3d 20 22 50 65 72 6d 61 6e 65 6e 74 22 29 20 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e Data Ascii: ) {$alerts.forEach(($alert) => {const closePeriod = $alert.dataset.closePeriod ?? "Session";const customClosePeriod = $alert.dataset.customClosePeriod;const isClosed = () => {if (closePeriod === "Permanent") {return localStorage.
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 6e 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 62 73 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 3d 22 23 64 65 73 6b 2d 73 65 61 72 63 68 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 64 65 73 6b 2d 73 65 61 72 63 68 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 0d 0a 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 38 70 78 3b 77 69 64 74 68 3a 31 38 70 78 22 20 63 6c 61 73 Data Ascii: n" data-bs-toggle="collapse" data-bs-target="#desk-search" aria-expanded="false" aria-controls="desk-search" > <div style="height:18px;width:18px" clas
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 6f 64 64 22 20 64 3d 22 4d 31 30 2e 37 20 31 31 2e 37 39 20 38 2e 34 34 20 39 2e 35 37 6c 2e 30 33 2d 2e 30 33 61 31 35 2e 33 33 20 31 35 2e 33 33 20 30 20 30 20 30 20 33 2e 32 39 2d 35 2e 38 31 68 32 2e 36 31 56 31 2e 39 35 68 2d 36 2e 32 56 2e 31 37 48 36 2e 33 39 76 31 2e 37 38 48 2e 31 36 76 31 2e 37 37 68 39 2e 39 32 61 31 34 2e 32 34 20 31 34 2e 32 34 20 30 20 30 20 31 2d 32 2e 38 31 20 34 2e 37 36 63 2d 2e 38 31 2d 2e 39 2d 31 2e 35 2d 31 2e 39 2d 32 2e 30 35 2d 32 2e 39 38 48 33 2e 34 34 61 31 35 2e 37 39 20 31 35 2e 37 39 20 30 20 30 20 30 20 32 2e 36 34 20 34 2e 30 35 6c 2d 34 2e 35 32 20 34 2e 34 37 20 31 2e 32 35 20 31 2e 32 35 20 34 2e 34 34 2d 34 2e 34 34 20 32 2e 37 36 20 32 2e 37 36 2e 36 37 2d 31 2e 38 31 68 2e 30 31 5a 6d 35 2e 30 31 2d Data Ascii: odd" d="M10.7 11.79 8.44 9.57l.03-.03a15.33 15.33 0 0 0 3.29-5.81h2.61V1.95h-6.2V.17H6.39v1.78H.16v1.77h9.92a14.24 14.24 0 0 1-2.81 4.76c-.81-.9-1.5-1.9-2.05-2.98H3.44a15.79 15.79 0 0 0 2.64 4.05l-4.52 4.47 1.25 1.25 4.44-4.44 2.76 2.76.67-1.81h.01Zm5.01-
2024-12-31 23:22:28 UTC	699	IN	Data Raw: 65 66 3d 22 23 22 3e 4b 68 6d 65 72 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 64 61 74 61 2d 76 61 6c 75 65 3d 22 6b 6f 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 68 72 65 66 3d 22 23 22 3e 4b 6f 72 65 61 6e 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 64 61 74 61 2d 76 61 6c 75 65 3d 22 66 61 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 68 72 65 66 3d 22 23 22 3e 50 65 72 73 69 61 6e 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 64 61 74 61 2d 76 61 6c 75 65 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 Data Ascii: ef="#">Khmer</a></li> <li><a data-value="ko" class="dropdown-item" href="#">Korean</a></li> <li><a data-value="fa" class="dropdown-item" href="#">Persian</a></li> <li><a data-value="pt" class="dropdown-it
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 34 30 30 30 0d 0a 22 20 68 72 65 66 3d 22 23 22 3e 55 6b 72 61 69 6e 69 61 6e 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 64 61 74 61 2d 76 61 6c 75 65 3d 22 75 72 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 68 72 65 66 3d 22 23 22 3e 55 72 64 75 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 64 61 74 61 2d 76 61 6c 75 65 3d 22 76 69 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 68 72 65 66 3d 22 23 22 3e 56 69 65 74 6e 61 6d 65 73 65 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d Data Ascii: 4000" href="#">Ukrainian</a></li> <li><a data-value="ur" class="dropdown-item" href="#">Urdu</a></li> <li><a data-value="vi" class="dropdown-item" href="#">Vietnamese</a></li> </ul> </div>
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 53 65 61 72 63 68 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 6e 61 76 5f 5f 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 6e 61 76 5f 5f 6c 6f 67 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f Data Ascii: <span class="sr-only">Search</span> </button> </div> </form> </div> </div> <div class="main-nav__header"> <h1 class="main-nav__logo"> <a href="/
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 54 6f 67 67 6c 65 20 4e 61 76 69 67 61 74 69 6f 6e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 6e 61 76 5f 5f 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 2d 63 6f 6c 6c 61 70 73 65 64 22 3e 0d 0a 0d 0a 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 32 35 70 78 22 20 63 6c 61 73 73 3d 22 69 63 6f 6e 20 77 61 2d 6d 65 6e 75 2d 62 61 72 73 22 3e 0d 0a 20 20 20 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 37 2e 34 38 20 32 30 2e 35 31 22 3e 0d 0a 20 20 3c 72 65 63 Data Ascii: lass="sr-only">Toggle Navigation</span> <span class="main-nav__toggle-button-icon--collapsed"><div style="height:25px;width:25px" class="icon wa-menu-bars"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 27.48 20.51"> <rec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49730	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:28 UTC	1068	OUT	GET /css/global.css?v=1734624164460 HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:28 UTC	348	IN	HTTP/1.1 200 OK Etag: "1db522f72c579c4" Last-Modified: Thu, 19 Dec 2024 16:02:48 GMT Content-Type: text/css Content-Length: 114116 Cache-Control: max-age=33284, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:28 GMT X-CDN: Imperva X-Iinfo: 18-261309906-261310087 2CNN RT(1735687347737 865) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 2f 2a 20 6d 69 6e 20 62 6f 6f 74 73 74 72 61 70 20 72 71 75 69 72 65 6d 65 6e 74 73 20 2a 2f 0a 3a 72 6f 6f 74 2c 0a 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 5d 20 7b 0a 20 20 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 64 36 65 66 64 3b 0a 20 20 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 0a 20 20 2d 2d 62 73 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0a 20 20 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 64 36 33 33 38 34 3b 0a 20 20 2d 2d 62 73 2d 72 65 64 3a 20 23 64 63 33 35 34 35 3b 0a 20 20 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0a 20 20 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 66 63 31 30 37 3b 0a 20 20 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 31 39 38 37 35 34 3b 0a 20 20 2d 2d 62 73 Data Ascii: /* min bootstrap rquirements */:root,[data-bs-theme="light"] { --bs-blue: #0d6efd; --bs-indigo: #6610f2; --bs-purple: #6f42c1; --bs-pink: #d63384; --bs-red: #dc3545; --bs-orange: #fd7e14; --bs-yellow: #ffc107; --bs-green: #198754; --bs
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 64 31 65 37 64 64 3b 0a 20 20 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 66 66 34 66 63 3b 0a 20 20 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 66 66 33 63 64 3b 0a 20 20 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 38 64 37 64 61 3b 0a 20 20 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 63 66 63 66 64 3b 0a 20 20 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 65 64 34 64 61 3b 0a 20 20 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 65 63 35 66 65 3b 0a 20 20 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f Data Ascii: bs-success-bg-subtle: #d1e7dd; --bs-info-bg-subtle: #cff4fc; --bs-warning-bg-subtle: #fff3cd; --bs-danger-bg-subtle: #f8d7da; --bs-light-bg-subtle: #fcfcfd; --bs-dark-bg-subtle: #ced4da; --bs-primary-border-subtle: #9ec5fe; --bs-secondary-bo
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 33 2c 20 32 33 36 2c 20 32 33 39 3b 0a 20 20 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 20 33 37 2c 20 34 31 2c 20 30 2e 35 29 3b 0a 20 20 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 33 33 2c 20 33 37 2c 20 34 31 3b 0a 20 20 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 20 23 66 38 66 39 66 61 3b 0a 20 20 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 20 32 34 38 2c 20 32 34 39 2c 20 32 35 30 3b 0a 20 20 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 20 23 30 64 36 65 66 64 3b 0a 20 20 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 31 33 2c 20 31 31 30 Data Ascii: 3, 236, 239; --bs-tertiary-color: rgba(33, 37, 41, 0.5); --bs-tertiary-color-rgb: 33, 37, 41; --bs-tertiary-bg: #f8f9fa; --bs-tertiary-bg-rgb: 248, 249, 250; --bs-heading-color: inherit; --bs-link-color: #0d6efd; --bs-link-color-rgb: 13, 110
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 63 6f 6c 6f 72 2d 72 67 62 3a 20 32 32 32 2c 20 32 32 36 2c 20 32 33 30 3b 0a 20 20 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 3a 20 23 32 31 32 35 32 39 3b 0a 20 20 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 2d 72 67 62 3a 20 33 33 2c 20 33 37 2c 20 34 31 3b 0a 20 20 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 0a 20 20 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 32 32 2c 20 32 32 36 2c 20 32 33 30 2c 20 30 2e 37 35 29 3b 0a 20 20 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 32 32 32 2c 20 32 32 36 2c 20 32 33 30 3b 0a 20 20 2d 2d 62 73 2d Data Ascii: color-rgb: 222, 226, 230; --bs-body-bg: #212529; --bs-body-bg-rgb: 33, 37, 41; --bs-emphasis-color: #fff; --bs-emphasis-color-rgb: 255, 255, 255; --bs-secondary-color: rgba(222, 226, 230, 0.75); --bs-secondary-color-rgb: 222, 226, 230; --bs-
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 31 31 30 2c 20 31 36 38 2c 20 32 35 34 3b 0a 20 20 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 31 33 39 2c 20 31 38 35 2c 20 32 35 34 3b 0a 20 20 2d 2d 62 73 2d 63 6f 64 65 2d 63 6f 6c 6f 72 3a 20 23 65 36 38 35 62 35 3b 0a 20 20 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 64 65 65 32 65 36 3b 0a 20 20 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 20 23 36 36 34 64 30 33 3b 0a 20 20 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 39 35 30 35 37 3b 0a 20 20 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 35 Data Ascii: s-link-color-rgb: 110, 168, 254; --bs-link-hover-color-rgb: 139, 185, 254; --bs-code-color: #e685b5; --bs-highlight-color: #dee2e6; --bs-highlight-bg: #664d03; --bs-border-color: #495057; --bs-border-color-translucent: rgba(255, 255, 255, 0.15
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 20 30 2e 32 35 72 65 6d 20 72 67 62 61 28 31 33 2c 20 31 31 30 2c 20 32 35 33 2c 20 30 2e 32 35 29 3b 20 7d 0a 20 20 2e 6e 61 76 2d 6c 69 6e 6b 2e 64 69 73 61 62 6c 65 64 2c 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 6e 61 76 2d 6c 69 6e 6b 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 29 3b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 20 7d 0a 0a 2e 6e 61 76 2d 74 61 62 73 20 7b 0a 20 20 2d 2d 62 73 2d 6e 61 76 2d 74 61 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 3b 0a 20 20 2d 2d 62 73 2d 6e 61 76 2d 74 61 Data Ascii: 0.25rem rgba(13, 110, 253, 0.25); } .nav-link.disabled, .nav-link:disabled { color: var(--bs-nav-link-disabled-color); pointer-events: none; cursor: default; }.nav-tabs { --bs-nav-tabs-border-width: var(--bs-border-width); --bs-nav-ta
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 62 73 2d 6e 61 76 2d 74 61 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 29 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 30 3b 20 7d 0a 0a 2e 6e 61 76 2d 70 69 6c 6c 73 20 7b 0a 20 20 2d 2d 62 73 2d 6e 61 76 2d 70 69 6c 6c 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 3b 0a 20 20 2d 2d 62 73 2d 6e 61 76 2d 70 69 6c 6c 73 2d 6c 69 6e 6b 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a Data Ascii: .dropdown-menu { margin-top: calc(-1 * var(--bs-nav-tabs-border-width)); border-top-left-radius: 0; border-top-right-radius: 0; }.nav-pills { --bs-nav-pills-border-radius: var(--bs-border-radius); --bs-nav-pills-link-active-color: #fff;
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 6e 61 76 2d 69 74 65 6d 20 2e 6e 61 76 2d 6c 69 6e 6b 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 0a 2e 74 61 62 2d 63 6f 6e 74 65 6e 74 20 3e 20 2e 74 61 62 2d 70 61 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 74 61 62 2d 63 6f 6e 74 65 6e 74 20 3e 20 2e 61 63 74 69 76 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 0a 0a 2e 6e 61 76 62 61 72 20 7b 0a 20 20 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 70 61 64 64 69 6e 67 2d 78 3a 20 30 3b 0a 20 20 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 70 61 64 64 69 6e 67 2d 79 3a 20 30 2e 35 72 65 6d 3b 0a 20 20 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 2d 72 67 Data Ascii: nav-item .nav-link { width: 100%; }.tab-content > .tab-pane { display: none; }.tab-content > .active { display: block; }.navbar { --bs-navbar-padding-x: 0; --bs-navbar-padding-y: 0.5rem; --bs-navbar-color: rgba(var(--bs-emphasis-color-rg
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 65 78 3b 0a 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 70 61 64 64 69 6e 67 2d 79 29 20 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 70 61 64 64 69 6e 67 2d 78 29 3b 20 7d 0a 20 20 2e 6e 61 76 62 61 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 20 2e 6e 61 76 62 61 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 20 2e 6e 61 76 62 61 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 20 2e 6e 61 Data Ascii: ex; flex-wrap: wrap; align-items: center; justify-content: space-between; padding: var(--bs-navbar-padding-y) var(--bs-navbar-padding-x); } .navbar > .container, .navbar > .container-fluid, .navbar > .container-sm, .navbar > .container-md, .na
2024-12-31 23:22:28 UTC	1452	IN	Data Raw: 3a 20 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 63 6f 6c 6f 72 29 3b 20 7d 0a 20 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 20 61 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 29 3b 20 7d 0a 0a 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 7b 0a 20 20 66 6c 65 78 2d 62 61 73 69 73 3a 20 31 30 30 25 3b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 0a 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 76 61 72 28 2d Data Ascii: : var(--bs-navbar-color); } .navbar-text a, .navbar-text a:hover, .navbar-text a:focus { color: var(--bs-navbar-active-color); }.navbar-collapse { flex-basis: 100%; flex-grow: 1; align-items: center; }.navbar-toggler { padding: var(-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49737	104.17.25.14	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	573	OUT	GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://thetollroads.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:29 UTC	942	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:29 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"660cc074-5556" Last-Modified: Wed, 03 Apr 2024 02:35:32 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 308962 Expires: Sun, 21 Dec 2025 23:22:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b8odky56nbYnxnV2FW4FfgyO0LLTmvFT1GY3ibrotGWmbq6dJwP333RfvWE8162CXvKkb991J5wZSs5%2BtHHjEofOydwgAnTPIYZgcUk26UX7%2BOe2RBca5t9V13qBwmtG3VyMVwB8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fae030c4e864210-EWR alt-svc: h3=":443"; ma=86400
2024-12-31 23:22:29 UTC	427	IN	Data Raw: 33 39 38 34 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 35 2e 32 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 Data Ascii: 3984/! Font Awesome Free 6.5.2 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2024 Fonticons, Inc. */.fa{font-family:var(--fa-style
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 72 65 67 75 6c 61 72 2c 2e 66 61 2d 73 6f 6c 69 64 2c 2e 66 61 72 2c 2e 66 61 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 46 72 65 65 22 7d 2e 66 61 2d 62 72 61 6e 64 73 2c 2e 66 61 62 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e Data Ascii: webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Fon
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 Data Ascii: eft{float:left;margin-right:var(--fa-pull-margin,.3em)}.fa-pull-right{float:right;margin-left:var(--fa-pull-margin,.3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay,0s);animation-delay:va
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 7d 2e 66 61 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d Data Ascii: timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1));animation-timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1))}.fa-fade{-webkit-animation-name:fa-fade;animation-name:fa-fade;-webkit-animation-iteration-count:var(--
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 Data Ascii: mation-delay,0s);animation-delay:var(--fa-animation-delay,0s);-webkit-animation-direction:var(--fa-animation-direction,normal);animation-direction:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,1s);animation-du
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 Data Ascii: --fa-animation-duration,2s);animation-duration:var(--fa-animation-duration,2s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite);-webkit-animation-timing-f
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: -duration:0s;transition-duration:0s}}@-webkit-keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-beat-scale,1.25))}}@keyframes fa-beat{0%,90%{-webkit-trans
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 Data Ascii: nsform:scale(1) translateY(0)}to{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}}@keyframes fa-bounce{0%{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}10%{-webkit-transform:scale(var(--fa-bounce-start
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 74 79 2c 2e 34 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 30 25 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 74 79 2c 2e Data Ascii: beat-fade-opacity,.4);-webkit-transform:scale(1);transform:scale(1)}50%{opacity:1;-webkit-transform:scale(var(--fa-beat-fade-scale,1.125));transform:scale(var(--fa-beat-fade-scale,1.125))}}@keyframes fa-beat-fade{0%,to{opacity:var(--fa-beat-fade-opacity,.
2024-12-31 23:22:29 UTC	1369	IN	Data Raw: 74 61 74 65 28 2d 31 32 64 65 67 29 7d 33 36 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 7d 34 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 68 61 6b 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 7d 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 3b 74 72 61 6e Data Ascii: tate(-12deg)}36%{-webkit-transform:rotate(12deg);transform:rotate(12deg)}40%,to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes fa-shake{0%{-webkit-transform:rotate(-15deg);transform:rotate(-15deg)}4%{-webkit-transform:rotate(15deg);tran

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49733	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1071	OUT	GET /css/components/press-releases.css HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	346	IN	HTTP/1.1 200 OK Etag: "1db522f735d408e" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/css Content-Length: 6670 Cache-Control: max-age=33282, public Expires: Wed, 01 Jan 2025 08:37:11 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 17-227070757-227057110 2CNN RT(1735687348871 279) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 40 75 73 65 20 22 73 61 73 73 3a 6d 61 74 68 22 3b 0a 2f 2a 20 6d 65 64 69 61 20 71 75 65 72 79 20 6d 69 78 69 6e 20 2a 2f 0a 2f 2a 20 67 65 74 20 72 69 64 20 6f 66 20 6c 69 73 74 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f 0a 2f 2a 20 70 72 65 76 65 6e 74 20 6c 6f 6e 67 20 6c 69 6e 6b 73 20 66 72 6f 6d 20 62 72 65 61 6b 69 6e 67 20 6f 75 74 20 6f 66 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0a 2f 2a 20 63 72 65 61 74 65 73 20 61 20 63 6f 6c 6f 72 65 64 20 63 69 72 63 6c 65 20 77 69 74 68 20 61 6e 20 69 63 6f 6e 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 2a 2f 0a 2f 2a 20 66 6f 72 6d 61 74 73 20 74 68 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 65 78 74 20 77 69 74 68 69 6e 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 2a 2f 0a 2e 70 72 65 73 73 2d 72 65 Data Ascii: @use "sass:math";/* media query mixin // get rid of list formatting // prevent long links from breaking out of container // creates a colored circle with an icon in the middle // formats the placeholder text within an input field */.press-re
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 2e 31 32 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 30 2e 36 32 35 72 65 6d 3b 20 7d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 31 2e 39 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 2e 70 72 65 73 73 2d 72 65 6c 65 61 73 65 73 5f 5f 68 65 61 64 65 72 2d 73 65 61 72 63 68 20 66 6f 72 6d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 20 7d 20 7d 0a 20 20 20 20 20 20 2e 70 72 65 73 73 2d 72 65 6c 65 61 73 65 73 5f 5f 68 65 61 64 65 72 2d 73 65 61 72 63 68 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 20 20 20 20 68 65 Data Ascii: width: 100%; height: 3.125rem; max-width: 30.625rem; } @media (max-width: 61.9375rem) { .press-releases__header-search form { max-width: none; } } .press-releases__header-search input { he
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 20 20 20 20 20 67 61 70 3a 20 31 2e 38 37 35 72 65 6d 3b 20 7d 20 7d 0a 20 20 2e 70 72 2d 66 65 61 74 75 72 65 64 5f 5f 69 6d 61 67 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 35 25 3b 0a 20 20 20 20 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 20 31 2e 35 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 36 32 35 72 65 6d 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 Data Ascii: gap: 1.875rem; } } .pr-featured__image { width: 45%; aspect-ratio: 1.5; border-radius: 0.625rem; background-repeat: no-repeat; background-size: contain; background-position: center; flex-shrink: 0; } @media (max-widt
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 70 72 2d 66 65 61 74 75 72 65 64 5f 5f 63 6f 6e 74 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 33 2e 37 35 72 65 6d 3b 20 7d 20 7d 0a 20 20 20 20 2e 70 72 2d 66 65 61 74 75 72 65 64 5f 5f 63 6f 6e 74 65 6e 74 2d 64 61 74 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 38 33 31 33 72 65 Data Ascii: m) { .pr-featured__content-description { max-width: 43.75rem; } } .pr-featured__content-date { font-size: 0.875rem; font-weight: bold; text-transform: uppercase; color: #666666; letter-spacing: 0.08313re
2024-12-31 23:22:29 UTC	862	IN	Data Raw: 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 63 36 63 36 63 3b 20 7d 0a 20 20 2e 70 72 2d 61 72 74 69 63 6c 65 2d 69 74 65 6d 5f 5f 69 6d 61 67 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 20 31 2e 35 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 36 32 35 72 65 6d 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 2e Data Ascii: text-decoration: underline; color: #6c6c6c; } .pr-article-item__image { width: 100%; aspect-ratio: 1.5; border-radius: 0.625rem; background-repeat: no-repeat; background-size: contain; background-position: center; } .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49732	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1076	OUT	GET /css/components/press-releases-list.css HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	346	IN	HTTP/1.1 200 OK Etag: "1db522f735d5064" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/css Content-Length: 2788 Cache-Control: max-age=33283, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 17-227070758-227053329 2CNN RT(1735687348871 281) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 40 75 73 65 20 22 73 61 73 73 3a 6d 61 74 68 22 3b 0a 2f 2a 20 6d 65 64 69 61 20 71 75 65 72 79 20 6d 69 78 69 6e 20 2a 2f 0a 2f 2a 20 67 65 74 20 72 69 64 20 6f 66 20 6c 69 73 74 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f 0a 2f 2a 20 70 72 65 76 65 6e 74 20 6c 6f 6e 67 20 6c 69 6e 6b 73 20 66 72 6f 6d 20 62 72 65 61 6b 69 6e 67 20 6f 75 74 20 6f 66 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0a 2f 2a 20 63 72 65 61 74 65 73 20 61 20 63 6f 6c 6f 72 65 64 20 63 69 72 63 6c 65 20 77 69 74 68 20 61 6e 20 69 63 6f 6e 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 2a 2f 0a 2f 2a 20 66 6f 72 6d 61 74 73 20 74 68 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 65 78 74 20 77 69 74 68 69 6e 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 2a 2f 0a 2e 70 72 65 73 73 2d 72 65 Data Ascii: @use "sass:math";/* media query mixin // get rid of list formatting // prevent long links from breaking out of container // creates a colored circle with an icon in the middle // formats the placeholder text within an input field */.press-re
2024-12-31 23:22:29 UTC	1336	IN	Data Raw: 64 69 73 61 62 6c 65 64 2e 73 76 67 22 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 70 72 65 73 73 2d 72 65 6c 65 61 73 65 73 2d 6c 69 73 74 5f 5f 72 6f 74 61 74 6f 72 20 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 73 69 74 65 2d 6d 65 64 69 61 2f 69 63 6f 6e 73 2f 69 63 6f 6e 5f 61 72 72 6f 77 2d 6c 65 66 74 2d 61 63 74 69 76 65 2e 73 76 67 22 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2e 70 72 65 73 73 2d 72 65 6c 65 61 73 65 73 2d 6c 69 73 74 5f 5f 72 6f 74 61 74 6f 72 20 2e 73 6c 69 63 6b 2d 6e 65 78 74 20 7b 0a 20 20 72 69 67 68 74 3a 20 30 3b 20 7d 0a 20 20 2e 70 72 65 73 73 2d 72 65 6c 65 61 73 65 73 2d 6c 69 73 74 5f 5f 72 6f 74 Data Ascii: disabled.svg") !important; } .press-releases-list__rotator .slick-prev:after { background-image: url("/site-media/icons/icon_arrow-left-active.svg") !important; }.press-releases-list__rotator .slick-next { right: 0; } .press-releases-list__rot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49736	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1078	OUT	GET /css/components/capital-programs-list.css HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	346	IN	HTTP/1.1 200 OK Etag: "1db522f735d506d" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/css Content-Length: 2797 Cache-Control: max-age=33282, public Expires: Wed, 01 Jan 2025 08:37:11 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 17-227070761-227052148 2CNN RT(1735687348883 289) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 40 75 73 65 20 22 73 61 73 73 3a 6d 61 74 68 22 3b 0a 2f 2a 20 6d 65 64 69 61 20 71 75 65 72 79 20 6d 69 78 69 6e 20 2a 2f 0a 2f 2a 20 67 65 74 20 72 69 64 20 6f 66 20 6c 69 73 74 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f 0a 2f 2a 20 70 72 65 76 65 6e 74 20 6c 6f 6e 67 20 6c 69 6e 6b 73 20 66 72 6f 6d 20 62 72 65 61 6b 69 6e 67 20 6f 75 74 20 6f 66 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0a 2f 2a 20 63 72 65 61 74 65 73 20 61 20 63 6f 6c 6f 72 65 64 20 63 69 72 63 6c 65 20 77 69 74 68 20 61 6e 20 69 63 6f 6e 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 2a 2f 0a 2f 2a 20 66 6f 72 6d 61 74 73 20 74 68 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 65 78 74 20 77 69 74 68 69 6e 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 2a 2f 0a 2f 2a 20 73 74 79 6c 65 73 Data Ascii: @use "sass:math";/* media query mixin // get rid of list formatting // prevent long links from breaking out of container // creates a colored circle with an icon in the middle // formats the placeholder text within an input field // styles
2024-12-31 23:22:29 UTC	1345	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 73 69 74 65 2d 6d 65 64 69 61 2f 69 63 6f 6e 73 2f 69 63 6f 6e 5f 61 72 72 6f 77 2d 6c 65 66 74 2d 64 69 73 61 62 6c 65 64 2e 73 76 67 22 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 63 61 70 69 74 61 6c 2d 70 72 6f 67 72 61 6d 73 2d 6c 69 73 74 5f 5f 72 6f 74 61 74 6f 72 20 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 73 69 74 65 2d 6d 65 64 69 61 2f 69 63 6f 6e 73 2f 69 63 6f 6e 5f 61 72 72 6f 77 2d 6c 65 66 74 2d 61 63 74 69 76 65 2e 73 76 67 22 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 0a 2e 63 61 70 69 74 61 6c 2d 70 72 6f 67 72 61 6d 73 2d 6c 69 73 74 5f 5f 72 6f 74 61 Data Ascii: ckground-image: url("/site-media/icons/icon_arrow-left-disabled.svg") !important; } .capital-programs-list__rotator .slick-prev:after { background-image: url("/site-media/icons/icon_arrow-left-active.svg") !important; }.capital-programs-list__rota

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49734	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1073	OUT	GET /css/components/capital-programs.css HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	346	IN	HTTP/1.1 200 OK Etag: "1db522f735d56f3" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/css Content-Length: 3187 Cache-Control: max-age=33283, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 18-261310128-261310143 2CNN RT(1735687348872 350) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 40 75 73 65 20 22 73 61 73 73 3a 6d 61 74 68 22 3b 0a 2f 2a 20 6d 65 64 69 61 20 71 75 65 72 79 20 6d 69 78 69 6e 20 2a 2f 0a 2f 2a 20 67 65 74 20 72 69 64 20 6f 66 20 6c 69 73 74 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f 0a 2f 2a 20 70 72 65 76 65 6e 74 20 6c 6f 6e 67 20 6c 69 6e 6b 73 20 66 72 6f 6d 20 62 72 65 61 6b 69 6e 67 20 6f 75 74 20 6f 66 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0a 2f 2a 20 63 72 65 61 74 65 73 20 61 20 63 6f 6c 6f 72 65 64 20 63 69 72 63 6c 65 20 77 69 74 68 20 61 6e 20 69 63 6f 6e 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 2a 2f 0a 2f 2a 20 66 6f 72 6d 61 74 73 20 74 68 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 65 78 74 20 77 69 74 68 69 6e 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 2a 2f 0a 2f 2a 20 73 74 79 6c 65 73 Data Ascii: @use "sass:math";/* media query mixin // get rid of list formatting // prevent long links from breaking out of container // creates a colored circle with an icon in the middle // formats the placeholder text within an input field // styles
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 63 36 63 36 63 3b 20 7d 0a 20 20 2e 63 61 70 69 74 61 6c 2d 70 72 6f 67 72 61 6d 2d 69 74 65 6d 5f 5f 69 6d 61 67 65 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 20 7d 0a 20 20 2e 63 61 70 69 74 61 6c 2d 70 72 6f 67 72 61 6d 2d 69 74 65 6d 5f 5f 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: text-decoration: underline; color: #6c6c6c; } .capital-program-item__image { padding-top: 50%; background-position: center; background-size: cover; background-repeat: no-repeat; } .capital-program-item__content { height: 100
2024-12-31 23:22:29 UTC	283	IN	Data Raw: 67 72 6f 75 6e 64 3a 20 23 66 66 63 66 33 65 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 2e 39 33 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 32 35 72 65 6d 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 30 39 33 37 35 72 65 6d 3b 20 7d 0a 20 20 20 20 2e 63 61 70 69 74 61 6c 2d 70 72 6f 67 72 61 6d 2d 69 74 65 6d 5f 5f 63 6f 6e 74 65 6e 74 2d 74 65 78 74 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 32 35 72 65 6d 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 20 7d 0a 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d Data Ascii: ground: #ffcf3e; margin-top: 0.9375rem; margin-bottom: 1.25rem; border-radius: 0.09375rem; } .capital-program-item__content-text { font-size: 1.125rem; font-weight: normal; line-height: 1.4; }/*# sourceMappingURL=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49739	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1073	OUT	GET /css/components/intro-split-view.css HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	343	IN	HTTP/1.1 200 OK Etag: "1db522f735d4d28" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/css Content-Length: 6056 Cache-Control: max-age=33283, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 7-21118456-21091496 2CNN RT(1735687349132 329) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 40 75 73 65 20 22 73 61 73 73 3a 6d 61 74 68 22 3b 0a 2f 2a 20 6d 65 64 69 61 20 71 75 65 72 79 20 6d 69 78 69 6e 20 2a 2f 0a 2f 2a 20 67 65 74 20 72 69 64 20 6f 66 20 6c 69 73 74 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f 0a 2f 2a 20 70 72 65 76 65 6e 74 20 6c 6f 6e 67 20 6c 69 6e 6b 73 20 66 72 6f 6d 20 62 72 65 61 6b 69 6e 67 20 6f 75 74 20 6f 66 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0a 2f 2a 20 63 72 65 61 74 65 73 20 61 20 63 6f 6c 6f 72 65 64 20 63 69 72 63 6c 65 20 77 69 74 68 20 61 6e 20 69 63 6f 6e 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 2a 2f 0a 2f 2a 20 66 6f 72 6d 61 74 73 20 74 68 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 65 78 74 20 77 69 74 68 69 6e 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 2a 2f 0a 2e 69 6e 74 72 6f 2d 73 70 Data Ascii: @use "sass:math";/* media query mixin // get rid of list formatting // prevent long links from breaking out of container // creates a colored circle with an icon in the middle // formats the placeholder text within an input field */.intro-sp
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 6c 75 6d 6e 3b 20 7d 0a 20 20 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 2d 2d 6d 6f 62 69 6c 65 2d 72 65 76 65 72 73 65 20 7b 0a 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 3b 20 7d 20 7d 0a 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 2d 2d 72 6f 75 6e 64 65 64 65 64 67 65 73 20 7b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 2e 39 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 2d 2d 72 6f 75 6e 64 65 64 65 64 67 65 73 20 7b 0a 20 20 20 20 20 20 20 20 67 61 70 3a 20 33 2e 37 35 72 65 6d 3b 20 7d 20 7d Data Ascii: lumn; } .intro-split-view--mobile-reverse { flex-direction: column-reverse; } } .intro-split-view--roundededges { align-items: center; } @media (max-width: 47.9375rem) { .intro-split-view--roundededges { gap: 3.75rem; } }
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 6c 69 74 2d 76 69 65 77 5f 5f 74 65 78 74 2d 2d 66 75 6c 6c 62 6c 65 65 64 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 2e 38 37 35 72 65 6d 20 30 3b 20 7d 20 7d 0a 20 20 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 5f 5f 74 65 78 74 2d 2d 66 75 6c 6c 62 6c 65 65 64 2e 6c 65 73 73 2d 70 61 64 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 2e 37 35 72 65 6d 20 33 2e 37 35 72 65 6d 20 33 2e 37 35 72 65 6d 20 30 3b 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 2e 39 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 5f 5f 74 65 78 74 2d 2d 66 75 6c 6c 62 6c 65 65 64 2e 6c 65 73 73 2d 70 61 64 64 69 6e 67 20 7b Data Ascii: lit-view__text--fullbleed { padding: 1.875rem 0; } } .intro-split-view__text--fullbleed.less-padding { padding: 3.75rem 3.75rem 3.75rem 0; } @media (max-width: 47.9375rem) { .intro-split-view__text--fullbleed.less-padding {
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 6d 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 5f 5f 74 65 78 74 2d 74 69 74 6c 65 20 68 31 2e 6c 61 72 67 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 20 7d 20 7d 0a 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 5f 5f 74 65 78 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 33 37 35 72 65 6d 3b 20 7d 0a 20 20 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 5f 5f 74 65 78 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 Data Ascii: m; } .intro-split-view__text-title h1.large { font-size: 1.5rem; } } .intro-split-view__text-description p { font-size: 1.375rem; } .intro-split-view__text-description p:last-child { margin-bottom: 0; } @media (max-wi
2024-12-31 23:22:29 UTC	248	IN	Data Raw: 65 6d 73 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 2e 39 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 5f 5f 76 69 64 65 6f 20 7b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 20 7d 0a 20 20 2e 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 5f 5f 76 69 64 65 6f 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 32 35 72 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 2e 36 32 35 72 65 6d 3b 20 7d 0a 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 69 6e 74 72 6f 2d 73 70 6c 69 74 2d 76 69 65 77 2e 63 73 73 2e 6d 61 70 20 2a 2f 0a Data Ascii: ems: center; } @media (max-width: 47.9375rem) { .intro-split-view__video { width: 100%; } } .intro-split-view__video-description { font-size: 1.125rem; margin-top: 0.625rem; }/# sourceMappingURL=intro-split-view.css.map /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49740	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1078	OUT	GET /css/components/intro-box-overlapping.css HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	343	IN	HTTP/1.1 200 OK Etag: "1db522f735d52bb" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/css Content-Length: 2107 Cache-Control: max-age=33283, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 7-21118459-21114125 2CNN RT(1735687349167 300) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 40 75 73 65 20 22 73 61 73 73 3a 6d 61 74 68 22 3b 0a 2f 2a 20 6d 65 64 69 61 20 71 75 65 72 79 20 6d 69 78 69 6e 20 2a 2f 0a 2f 2a 20 67 65 74 20 72 69 64 20 6f 66 20 6c 69 73 74 20 66 6f 72 6d 61 74 74 69 6e 67 20 2a 2f 0a 2f 2a 20 70 72 65 76 65 6e 74 20 6c 6f 6e 67 20 6c 69 6e 6b 73 20 66 72 6f 6d 20 62 72 65 61 6b 69 6e 67 20 6f 75 74 20 6f 66 20 63 6f 6e 74 61 69 6e 65 72 20 2a 2f 0a 2f 2a 20 63 72 65 61 74 65 73 20 61 20 63 6f 6c 6f 72 65 64 20 63 69 72 63 6c 65 20 77 69 74 68 20 61 6e 20 69 63 6f 6e 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 2a 2f 0a 2f 2a 20 66 6f 72 6d 61 74 73 20 74 68 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 74 65 78 74 20 77 69 74 68 69 6e 20 61 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 20 2a 2f 0a 2e 69 6e 74 72 6f 2d 62 6f Data Ascii: @use "sass:math";/* media query mixin // get rid of list formatting // prevent long links from breaking out of container // creates a colored circle with an icon in the middle // formats the placeholder text within an input field */.intro-bo
2024-12-31 23:22:29 UTC	655	IN	Data Raw: 70 61 64 64 69 6e 67 3a 20 33 2e 37 35 72 65 6d 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 31 2e 39 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 2e 69 6e 74 72 6f 2d 62 6f 78 2d 6f 76 65 72 6c 61 70 70 69 6e 67 5f 5f 74 65 78 74 2d 6d 6f 62 69 6c 65 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 20 7d 0a 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 2e 39 33 37 35 72 65 6d 29 20 7b 0a 20 20 20 20 2e 69 6e 74 72 6f 2d 62 6f 78 2d 6f 76 65 72 6c 61 70 70 69 6e 67 5f 5f 74 65 78 74 2d 6d 6f 62 69 6c 65 20 7b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 2e 38 37 35 72 65 6d 3b 20 7d 20 7d 0a 20 20 2e 69 6e 74 72 6f 2d Data Ascii: padding: 3.75rem; display: none; } @media (max-width: 61.9375rem) { .intro-box-overlapping__text-mobile { display: block; } } @media (max-width: 47.9375rem) { .intro-box-overlapping__text-mobile { padding: 1.875rem; } } .intro-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49741	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1113	OUT	GET /site-media/tca-logo-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	351	IN	HTTP/1.1 200 OK Etag: "1db522f706262cc" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 2252 Cache-Control: max-age=33283, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 14-107583150-107577115 2CNN RT(1735687349526 276) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 2e 35 34 20 32 31 2e 31 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 37 39 35 2d 32 22 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 36 30 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 36 2e 35 35 2c 35 2e 31 31 6c 2d 2e 31 35 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 49.54 21.19"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><g id="Group_2795-2"><path id="Path_2601" class="cls-1" d="M36.55,5.11l-.15
2024-12-31 23:22:29 UTC	800	IN	Data Raw: 64 3d 22 50 61 74 68 5f 32 36 30 37 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 31 2e 38 33 2c 31 33 2e 37 63 2e 36 2d 2e 32 31 2c 31 2e 32 34 2d 2e 34 34 2c 31 2e 39 2d 2e 36 39 6c 2e 35 37 2d 2e 32 32 63 2e 32 39 2d 2e 32 39 2e 35 39 2d 2e 35 38 2e 39 2d 2e 38 34 2c 31 2e 35 34 2d 31 2e 33 31 2c 33 2e 31 33 2d 32 2e 34 33 2c 34 2e 33 31 2d 33 2e 34 2c 31 2e 35 37 2d 31 2e 32 38 2c 32 2e 34 33 2d 32 2e 32 39 2c 31 2e 35 35 2d 33 2e 31 31 2d 31 2e 34 35 2d 31 2e 33 35 2d 34 2e 33 36 2d 2e 37 33 2d 34 2e 37 32 2d 2e 36 34 6c 2e 32 39 2e 33 32 63 2e 33 33 2e 30 39 2c 31 2e 31 38 2e 33 39 2e 36 39 2e 38 37 2d 2e 31 35 2e 31 33 2d 2e 33 32 2e 32 34 2d 2e 35 2e 33 32 2d 2e 39 32 2e 34 34 2d 36 2e 31 33 2c 32 2e 37 2d 31 30 2e 39 37 2c 34 2e Data Ascii: d="Path_2607" class="cls-1" d="M31.83,13.7c.6-.21,1.24-.44,1.9-.69l.57-.22c.29-.29.59-.58.9-.84,1.54-1.31,3.13-2.43,4.31-3.4,1.57-1.28,2.43-2.29,1.55-3.11-1.45-1.35-4.36-.73-4.72-.64l.29.32c.33.09,1.18.39.69.87-.15.13-.32.24-.5.32-.92.44-6.13,2.7-10.97,4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49742	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:29 UTC	1114	OUT	GET /site-media/toll_roads_logo.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:29 UTC	351	IN	HTTP/1.1 200 OK Etag: "1db522f70627300" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 6400 Cache-Control: max-age=33282, public Expires: Wed, 01 Jan 2025 08:37:11 GMT Date: Tue, 31 Dec 2024 23:22:29 GMT X-CDN: Imperva X-Iinfo: 16-194337069-194319975 2CNN RT(1735687349536 288) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 37 2e 34 39 20 32 36 2e 39 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 75 72 6c 28 23 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 29 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 187.49 26.94"><defs><style>.cls-1{fill:url(#linear-gradient);}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#0
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 35 2d 38 2e 36 39 2d 34 2e 34 35 73 33 2e 33 36 2d 34 2e 34 33 2c 38 2d 34 2e 34 33 63 35 2e 35 34 2c 30 2c 37 2e 35 34 2c 32 2e 32 33 2c 37 2e 35 34 2c 34 2e 37 35 76 2e 35 34 68 2d 31 30 2e 33 33 5a 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 70 6f 69 6e 74 73 3d 22 35 38 2e 37 39 20 31 36 2e 36 38 20 35 33 2e 38 35 20 31 36 2e 36 38 20 35 33 2e 38 35 20 31 34 2e 34 33 20 36 39 2e 30 36 20 31 34 2e 34 33 20 36 39 2e 30 36 20 31 36 2e 36 38 20 36 34 2e 31 32 20 31 36 2e 36 38 20 36 34 2e 31 32 20 32 35 2e 38 31 20 35 38 2e 37 39 20 32 35 2e 38 31 20 35 38 2e 37 39 20 31 36 2e 36 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 37 37 2e 36 35 2c 32 31 2e 35 37 63 30 2d 31 2e 32 37 2d 2e Data Ascii: 5-8.69-4.45s3.36-4.43,8-4.43c5.54,0,7.54,2.23,7.54,4.75v.54h-10.33Z"/><polygon class="cls-2" points="58.79 16.68 53.85 16.68 53.85 14.43 69.06 14.43 69.06 16.68 64.12 16.68 64.12 25.81 58.79 25.81 58.79 16.68"/><path class="cls-2" d="M77.65,21.57c0-1.27-.
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 31 33 2e 39 38 2d 33 2e 31 33 2c 32 2e 31 2c 30 2c 31 2e 33 35 2c 31 2e 31 37 2c 32 2e 32 38 2c 33 2e 31 33 2c 32 2e 32 38 4d 31 37 31 2e 33 34 2c 32 35 2e 38 31 68 2d 34 2e 37 37 76 2d 31 2e 35 32 68 2d 2e 30 36 63 2d 2e 36 36 2e 39 34 2d 32 2e 37 35 2c 31 2e 37 31 2d 35 2e 31 33 2c 31 2e 37 31 2d 34 2e 34 35 2c 30 2d 36 2e 38 33 2d 32 2e 30 39 2d 36 2e 38 33 2d 34 2e 36 2c 30 2d 32 2e 30 39 2c 32 2e 32 36 2d 34 2e 32 39 2c 36 2e 34 2d 34 2e 32 39 2c 32 2e 30 37 2c 30 2c 33 2e 38 32 2e 33 31 2c 35 2e 31 33 2c 31 2e 32 39 68 2e 30 36 76 2d 34 2e 38 33 68 35 2e 32 76 31 32 2e 32 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 37 32 2e 36 32 2c 32 33 2e 34 36 63 31 2e 32 2e 33 2c 32 2e 39 38 2e 35 39 2c 34 2e 38 35 Data Ascii: 13.98-3.13,2.1,0,1.35,1.17,2.28,3.13,2.28M171.34,25.81h-4.77v-1.52h-.06c-.66.94-2.75,1.71-5.13,1.71-4.45,0-6.83-2.09-6.83-4.6,0-2.09,2.26-4.29,6.4-4.29,2.07,0,3.82.31,5.13,1.29h.06v-4.83h5.2v12.23Z"/><path class="cls-2" d="M172.62,23.46c1.2.3,2.98.59,4.85
2024-12-31 23:22:29 UTC	1452	IN	Data Raw: 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 30 39 2e 39 39 2c 31 39 2e 31 36 68 31 2e 34 63 31 2e 37 33 2c 30 2c 33 2e 39 2d 2e 30 34 2c 33 2e 39 2d 31 2e 33 32 2c 30 2d 31 2e 30 35 2d 31 2e 38 36 2d 31 2e 32 35 2d 33 2e 39 2d 31 2e 32 35 68 2d 31 2e 34 76 32 2e 35 38 4d 31 30 34 2e 36 36 2c 31 34 2e 34 33 68 39 2e 35 32 63 33 2e 35 36 2c 30 2c 36 2e 34 36 2e 39 32 2c 36 2e 34 36 2c 32 2e 38 37 2c 30 2c 31 2e 35 32 2d 31 2e 32 36 2c 32 2e 35 33 2d 33 2e 38 35 2c 32 2e 38 37 76 2e 30 33 63 31 2e 37 32 2e 32 36 2c 31 2e 38 34 2c 31 2e 31 32 2c 32 2e 38 34 2c 32 2e 35 31 6c 31 2e 39 35 2c 33 2e 31 68 2d 35 2e 35 36 6c 2d 31 2e 31 35 2d 32 2e 30 35 63 2d 31 2e 30 39 2d 31 2e 39 36 2d 31 2e 37 38 2d 32 2e 34 35 2d 33 2e 37 36 Data Ascii: ><path class="cls-2" d="M109.99,19.16h1.4c1.73,0,3.9-.04,3.9-1.32,0-1.05-1.86-1.25-3.9-1.25h-1.4v2.58M104.66,14.43h9.52c3.56,0,6.46.92,6.46,2.87,0,1.52-1.26,2.53-3.85,2.87v.03c1.72.26,1.84,1.12,2.84,2.51l1.95,3.1h-5.56l-1.15-2.05c-1.09-1.96-1.78-2.45-3.76
2024-12-31 23:22:29 UTC	592	IN	Data Raw: 32 2c 37 2e 36 39 2e 32 38 2c 37 2e 36 39 2c 33 2e 35 2c 30 2c 32 2e 32 37 2d 33 2e 35 39 2c 32 2e 38 34 2d 36 2e 39 38 2c 32 2e 38 34 2d 32 2e 33 32 2c 30 2d 33 2e 39 2d 2e 31 33 2d 35 2e 34 32 2d 2e 34 31 6c 2e 32 39 2d 32 2e 31 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 38 35 2e 33 33 2c 31 33 2e 33 31 63 2e 38 36 2c 30 2c 31 2e 35 35 2e 37 2c 31 2e 35 35 2c 31 2e 35 38 73 2d 2e 36 39 2c 31 2e 35 38 2d 31 2e 35 35 2c 31 2e 35 38 2d 31 2e 35 36 2d 2e 36 39 2d 31 2e 35 36 2d 31 2e 35 38 2e 37 2d 31 2e 35 38 2c 31 2e 35 36 2d 31 2e 35 38 68 30 5a 4d 31 38 35 2e 33 32 2c 31 33 2e 35 35 63 2d 2e 36 39 2c 30 2d 31 2e 32 36 2e 35 39 2d 31 2e 32 36 2c 31 2e 33 33 73 2e 35 37 2c 31 2e 33 34 2c 31 2e 32 37 2c 31 2e 33 Data Ascii: 2,7.69.28,7.69,3.5,0,2.27-3.59,2.84-6.98,2.84-2.32,0-3.9-.13-5.42-.41l.29-2.14"/><path class="cls-2" d="M185.33,13.31c.86,0,1.55.7,1.55,1.58s-.69,1.58-1.55,1.58-1.56-.69-1.56-1.58.7-1.58,1.56-1.58h0ZM185.32,13.55c-.69,0-1.26.59-1.26,1.33s.57,1.34,1.27,1.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49746	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1145	OUT	GET /media/3pzp4doo/the-toll-roads-mobile-app-over-shoulder-2x.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	347	IN	HTTP/1.1 200 OK Etag: "1db0003cbb1606b" Last-Modified: Fri, 06 Sep 2024 02:23:44 GMT Content-Type: image/png Content-Length: 136654 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 12-57941471-57940129 2CNN RT(1735687349848 281) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 a6 00 00 02 22 08 03 00 00 00 2d 84 fa 63 00 00 03 00 50 4c 54 45 47 70 4c b1 9f 91 08 03 01 fe fe fe 61 81 97 02 01 00 f4 f9 f3 5b 3f 18 4c 44 34 1a 16 06 1e 0a 03 b4 a1 93 7c 61 4a af 9c 8e e5 de d9 2e 13 07 b6 a4 96 34 2b 0a 30 26 0a e2 db d4 92 74 5b ee ec e5 28 11 05 22 0e 03 de d6 c9 34 18 09 ea e5 e0 94 77 5e e7 e1 dd 71 44 17 8e 73 5a 37 2f 0b 3f 36 11 9d 7b 61 ea ea e3 ee ef ea 4a 40 19 ad 99 8b 44 3a 15 4a 2f 1d 7f 50 22 42 28 15 e7 e5 df e1 d9 ce d9 cd c0 cf c0 b1 b9 a7 99 60 34 15 14 06 02 99 78 5d a9 95 87 97 7b 61 dc d2 c4 a5 92 82 57 4b 22 68 3a 15 50 45 1d eb e8 df a2 8e 7e 3b 32 0f 51 37 22 3b 1d 0d ce e1 e7 5d 51 27 21 1c 05 af 99 82 59 3e 29 9e 82 6a d2 c4 b4 78 49 1b d3 c8 b8 e6 Data Ascii: PNGIHDR"-cPLTEGpLa[?LD4\|aJ.4+0&t[("4w^qDsZ7/?6{aJ@D:J/P"B(`4x]{aWK"h:PE~;2Q7";]Q'!Y>)jxI
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 0a 6f 40 ea 87 e1 b3 67 c3 d7 14 03 a7 e7 66 ba 0f 34 8d 4e 8f 0f 97 00 d3 57 77 fc 66 5b c0 f4 ea d6 ab 81 d2 eb fb 53 4c 37 eb ed af a0 f5 a7 2f 49 aa 30 1a 20 dd db b3 57 40 6d ec 51 3d 5d 17 c7 9c 97 fa 11 16 d9 48 4e c3 3a dc 0b 5a 1a d4 34 e8 68 f9 70 39 ac f0 0c 6a 8a 5a 3a bc 30 b0 30 60 62 8a 8c 2a a5 cb ca a9 40 aa a4 4e 80 9a 22 aa 80 27 de 95 53 60 74 6d 2e 20 1a be a1 6b 78 43 3d 45 31 45 35 42 39 1d 22 54 3d a8 c8 2a be 37 43 72 0a eb 5c 67 c0 a0 93 00 20 4c eb 55 4d db 91 56 8f 69 7d 3d d1 a9 2f 12 35 c5 df 72 c6 ab 69 f7 54 00 15 5e cc b0 ba c3 5f 0f 20 ad 20 a4 f3 3e 86 48 e8 60 55 ad e2 df 99 fe 9a a8 d4 41 55 8f 89 ae 1e af 2d 1c 2f 20 a7 a8 9b fc d7 64 5c eb 3f fc f0 2c c1 fa 21 49 ea f1 a0 a6 dd 6b 86 e9 8e 1d 3b b6 fd cf 6d db 81 d2 Data Ascii: o@gf4NWwf[SL7/I0 W@mQ=]HN:Z4hp9jZ:00`b@N"'S`tm. kxC=E1E5B9"T=7Cr\g LUMVi}=/5riT^_ >H`UAU-/ d\?,!Ik;m
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: d1 31 49 6e 55 d0 55 ce 57 8b 67 19 55 b4 4d 4f 62 cc a7 d4 14 7d 53 56 53 aa f4 a3 a0 bf 61 6a ba 65 cb 83 2c a5 9f 30 98 d7 f6 fa 75 4d a5 b4 87 13 00 ba fb ea 2a 07 db 46 c9 5c 7b 22 2d a5 f4 94 cb a8 43 04 69 b8 63 6e 7a d8 72 d3 e1 e1 85 61 8c f9 21 33 1d e7 cc 94 95 d4 53 ea fc a8 74 25 55 94 b9 51 13 19 31 c5 9b 56 fd 91 e9 8f df d5 29 35 a7 a6 a8 aa 22 41 85 f0 39 d3 35 d3 25 ae 64 87 53 53 2d a0 22 6b 5f c2 3e 7c 06 dc fd a2 96 50 50 43 05 4a 3b c4 93 22 2b 1f 1d 29 fe 91 00 43 ea 0c c5 7c 52 d3 f9 09 a9 9f 90 cb 78 c9 ff d5 22 27 00 ea 57 ad e1 1a b1 c2 70 50 75 f5 5c 67 c7 31 ca 01 f0 27 0e 49 0d 84 16 c2 5b f3 31 31 f7 87 01 d3 b6 57 77 a0 6f 9a a7 a6 99 98 ff 23 57 86 d3 9f ec 4d f0 24 41 ed d9 1b 2b 2b 6a ab 66 ab f1 53 0a 2a 46 fe 9e 58 50 Data Ascii: 1InUUWgUMOb}SVSaje,0uMF\{"-Cicnzra!3St%UQ1V)5"A95%dSS-"k_>\|PPCJ;"+)C\|Rx"'WpPu\g1'I[11Wwo#WM$A++jfSFXP
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: b4 3a a4 39 2a dc a6 fc 90 d4 24 4d 1e c5 98 e6 15 fa 84 29 f6 a1 2c ee 53 72 ca 9c a2 2d 05 fd 28 ea f0 c3 ef 0e 43 58 93 20 a8 90 a6 52 b5 bf e6 f4 94 2d 29 8b fc 16 f4 e3 d8 ef 44 35 f2 00 e2 ca 0a ff e1 55 1b 64 00 29 1d eb ef 47 4a 4b ad 54 e8 bf 1a 72 d3 ff a9 83 7c 9b 33 cb 7b 52 1b b0 7e ea eb a7 df f2 5b 94 a6 6a 8e 9a 28 68 8f c9 6a 8f cb 5e d9 15 e8 c9 70 aa f3 27 69 6a 0a 52 5a e2 91 68 98 8b 82 80 1f 8d 46 99 b9 9f a4 a6 d1 f0 73 42 e1 9c 73 f2 e3 d7 0e 52 7a 96 70 3f c4 70 0e 19 ab 34 26 0d df b5 4a d5 04 75 a8 ca 62 a3 6a 3a 89 23 72 cd 39 2d 7d 43 f5 bc a8 69 7d 7b aa a6 8c a9 d3 d3 4e 9a 43 c1 89 26 2a 67 3a 41 62 43 e4 1f a4 5e 18 95 fb 98 a0 9b 9e c6 ee e9 95 0c a7 54 68 b9 04 20 8b 2a c3 5a a1 49 31 f8 93 2a e1 8f 19 eb af 51 4a 1f b6 Data Ascii: :9$M),Sr-(CX R-)D5Ud)GJKTr\|3{R~[j(hj^p'ijRZhFsBsRzp?p4&Jubj:#r9-}Ci}{NC&g:AbC^Th ZI1QJ
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 79 a5 c4 62 2a 3d 7d 68 ea 6f db 0a 86 54 5e 6e aa 3b 4d 5e 96 54 97 23 e4 ff 92 9f 24 de fe 6f 55 56 bf 3f 15 88 09 55 3d 8d 46 4f 32 73 fb 36 b6 0f 67 48 f4 96 f6 94 b4 84 d2 22 ca a6 f8 dc ac e9 6a ec 9b fa 89 52 27 a7 c4 69 95 67 ef b1 4e e7 32 48 22 78 45 bd 25 39 44 42 02 bd 43 76 48 b3 d3 a1 14 d5 41 67 46 81 94 5a 6a 6a fb 4a 8b 69 05 55 af a8 e2 27 19 53 ab f4 8b 71 7e 4a 5c ba 75 5c 35 f6 58 07 59 ab e7 a8 96 0a ac 56 f9 1f 04 09 0c 6c d4 b7 6d d1 cb 96 af ae 6a 16 a0 88 2e a6 19 c0 22 7f 50 50 85 69 8a f1 10 d4 60 53 ba c4 fc 56 92 d3 57 01 53 19 3d d9 1c fb a6 5b e4 e5 0f d2 d3 08 d2 cc 8c d5 4f 05 53 2d 9e 9c 1f 95 eb f8 7b 6e ff 1b ef 31 a6 3d d9 02 ea 90 0b f9 34 18 45 27 9d f4 96 e8 b4 13 2a a0 d0 d9 07 cb 74 c5 99 fb f2 53 ce 93 27 49 ab Data Ascii: yb=}hoT^n;M^T#$oUV?U=FO2s6gH"jR'igN2H"xE%9DBCvHAgFZjjJiU'Sq~J\u\5XYVlmj."PPi`SVWS=[OS-{n1=4E'tS'I
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 12 3a db 7c 4a 63 3e 89 29 16 4f 08 6a 4b 6b 6b b8 ef 09 b7 56 56 53 62 15 31 1d 58 48 8e 8e 4a 6d d3 e7 13 be 0b e5 f4 54 ec cf 21 ae a3 88 52 d7 92 af 0a 86 11 a7 5d 34 f1 d4 25 18 ae a3 b3 2e 35 15 35 a5 0d 26 85 da 82 4f 4e 73 d3 52 f4 a3 0a 99 f1 28 a1 b4 10 15 f9 86 a9 46 7e cc 50 d5 1a 88 08 97 9e 55 07 e6 ab c4 aa 5a 56 7c 38 6b b5 3a 65 3e 80 67 35 27 5b a5 42 1f 30 6d bd df fa b0 95 57 9b c8 a9 4e 9f ec cf 56 51 7f c5 d4 7e e6 17 a4 1f c8 60 fa db 17 bc 27 80 ca a6 68 bf ff c9 cd 41 37 a6 52 da 18 07 7c 5c 2d 7d ad 00 2a 66 e6 f7 11 d3 05 b2 f7 fd 81 27 2e 33 5d e4 39 3e 2a f4 27 24 3b 7d ee b7 8f 78 3b 4a dc 4f 0f aa a5 a6 06 9f b0 49 e2 23 22 d4 15 93 e9 99 b6 af 93 b0 df ec 4f e6 49 a2 fe 79 7d b0 21 be a2 64 a8 7e 2a da 17 f9 94 9b c6 98 d6 Data Ascii: :\|Jc>)OjKkkVVSb1XHJmT!R]4%.55&ONsR(F~PUZV\|8k:e>g5'[B0mWNVQ~`'hA7R\|\-}f'.3]9>'$;}x;JOI#"OIy}!d~*
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 5e 5a 8b 7e b7 15 5b 56 f4 0f 32 7b 15 07 02 69 78 65 6e 22 84 7d 8a fa 20 9f 1a f5 5b 4f b7 b5 f1 36 68 91 d3 9c 6d d0 df 5b 44 6d 5e f7 9d 75 30 b5 da 5d 18 b5 0e 3d 69 e8 4d 7e cb 04 78 7e dd c8 07 44 47 96 be bf 5c d9 be 43 bd 87 b4 c4 a7 88 ff 6e df 6e 08 fa 41 52 c3 3d 14 51 ca 68 79 21 a7 13 65 e7 75 e9 0e 68 0a fb d1 44 b4 35 a1 74 d4 54 3a a5 99 d9 66 3f 94 27 96 93 e3 d4 e7 a5 ca a9 96 cd ee fd 66 c9 4c 91 17 f1 86 64 4f 54 82 29 c5 7c a2 53 33 54 cd 21 a5 8d 2f f3 27 cd 1d 51 d8 b7 34 35 a1 b4 b6 60 aa 2a 75 94 b2 0a ae c3 d9 7a fb 91 d0 9f 06 73 57 95 54 4d 57 f1 b4 93 39 92 53 c0 f4 21 57 fb ad bd ad 0f fb 1e 52 6e 0a 98 e2 96 a8 44 4d 39 31 7d 31 a6 d9 02 eb 7b 48 dd 24 a9 66 74 b6 be be 6a ec b9 d6 d8 a3 1f 9e 75 da 69 f1 5e 0e da 4f 0f 32 Data Ascii: ^Z~[V2{ixen"} [O6hm[Dm^u0]=iM~x~DG\CnnAR=Qhy!euhD5tT:f?'fLdOT)\|S3T!/'Q45`*uzsWTMW9S!WRnDM91}1{H$ftjui^O2
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: c5 ea 9e 24 95 f9 ec 11 58 1b cd 82 fa 9d 83 34 a9 f1 29 ea f3 95 9e 09 d3 a0 a5 a0 a6 6d e1 de f6 2e de 77 a3 a6 06 29 6d 5d 29 59 b5 0f fb f6 22 50 e1 a4 ce 71 4e 51 a3 33 b9 74 94 5f fb 51 15 cd 50 d5 9a aa fa 3d 7a 6e 2c 3a 16 53 6d 40 c5 bd 52 8d fb 59 35 6d ee e8 68 8e e4 94 a6 42 4c be 88 4e 29 f3 11 53 03 a2 e8 4a 18 38 28 2a 03 9f 35 9d 34 f0 37 bf 48 4d b9 db 1f 87 7d 1d a0 2e 9a a6 ba b1 d8 70 3b 1b fe 72 67 e3 7c 15 ae 07 d5 39 38 84 57 30 a1 b0 df 27 05 14 51 fa 2a fa a6 75 7c a8 44 ee 6e fd dc 14 e0 af c5 b4 91 e4 73 56 f2 4e 44 52 e3 3b 95 f8 8c 26 02 3b 8b c9 e8 6c 22 a5 a9 a5 ef c5 54 4d 53 b2 a3 50 4b 9d 9a b6 b6 ed be cf c9 69 09 f5 74 49 e6 4e 87 25 41 d5 4b 41 bb ed d0 ab ab d1 85 39 32 95 14 6b ea 50 c5 06 a2 35 31 f5 fd a7 94 53 97 Data Ascii: $X4)m.w)m])Y"PqNQ3t_QP=zn,:Sm@RY5mhBLN)SJ8(547HM}.p;rg\|98W0'Qu\|DnsVNDR;&;l"TMSPKitIN%AKA92kP51S
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: a5 b2 93 b4 1e 2d 28 65 b4 20 01 df 41 b6 8e a2 a6 f9 aa 13 d6 66 9f b8 e6 80 ea 26 06 4c 53 dd e6 69 09 fa ae e6 13 61 2d d6 36 13 a6 d3 50 43 51 11 d5 87 5e e2 11 8f e9 76 70 4e 37 67 47 a3 37 1e 53 a1 d3 5e b2 8a ba a2 29 cf 88 6a 64 1d cd 76 49 bd 9c f2 34 34 8b 29 51 fa 8b 36 14 d3 9f 11 a8 d8 34 6d 6d c1 32 aa 84 56 bf 99 fd 0b e5 95 61 70 fb 87 49 4e 07 d4 99 92 fc 74 71 31 15 d4 09 11 d5 b9 8c 95 3a e4 cf 95 d0 7e be cd 41 77 b8 61 93 0e 35 f5 5d b4 57 6c 9b 25 e2 77 b8 f9 65 49 4f b1 b0 36 3b 9f d4 b4 be a8 9b 97 58 4a b5 09 1f 01 9b 88 a9 35 9f a2 0f 66 a0 cc f6 fb 65 57 81 3d b9 6a 4a 4f a5 32 5e 8d 58 da 64 50 db 3c 09 98 8e 72 72 8a 35 54 2b 1b 52 be d2 cf 53 53 bb 6d 08 a6 d2 98 8f 02 7e a3 78 a5 6c e4 53 bf 34 1e 7d ce a4 a5 8d 2e ea ef d3 Data Ascii: -(e Af&LSia-6PCQ^vpN7gG7S^)jdvI44)Q64mm2VapINtq1:~Awa5]Wl%weIO6;XJ5feW=jJO2^XdP<rr5T+RSSm~xlS4}.
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: a9 b1 90 2a a5 20 a4 f8 00 dd 7c a9 ec b5 c4 c7 31 46 9a 3e 69 e1 5d b6 2d fc 48 a0 62 dc 2f 93 a2 c2 7d a1 4c 16 ea 00 9b a8 84 2a 16 53 b7 16 57 a7 a1 9c 0a a2 5a 93 f5 a8 b2 a6 ff 90 6e 47 91 03 26 aa 72 f4 99 7a 53 aa a7 cd 1a de a5 64 fa c6 89 9a e4 aa 5a f0 e7 8b 55 6d c1 01 a7 de 7c b3 72 cd 5f 54 5c e7 57 eb 2f 8b 06 a5 b9 c2 ca 04 7f fd fd e2 bf 4d 4e 1a 9c 47 6a 50 d3 0e dc 11 45 23 fc 65 f1 a4 68 96 cf 7a fa 57 f3 0c 29 bd de de 8f c2 33 ab a6 c0 e6 4d 82 52 16 fa fb 3a d4 87 7e 7f 2a a6 ae 09 15 d9 fb d1 c8 09 87 7c 9c 8c 42 50 df 3d 1d 20 3d f2 2e f7 f4 43 5e ba bb 75 b7 80 da 52 6a b9 0f cf 70 d6 79 4b 09 c3 fe 9e 15 ba 26 0f 43 0a 09 ea f0 30 16 fd 84 aa 90 7a 0a 72 d4 b0 a6 57 09 d5 9a d5 7e 37 92 ba 9c 80 6a 92 aa a2 ea 2c ff 41 37 cc df Data Ascii: * \|1F>i]-Hb/}LSWZnG&rzSdZUm\|r_T\W/MNGjPE#ehzW)3MR:~\|BP= =.C^uRjpyK&C0zrW~7j,A7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49745	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1126	OUT	GET /media/safjozvp/icon_homepage-pay-tolls.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	351	IN	HTTP/1.1 200 OK Etag: "1dadbf61153e374" Last-Modified: Mon, 22 Jul 2024 05:14:46 GMT Content-Type: image/svg+xml Content-Length: 1140 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 18-261310417-261310303 2CNN RT(1735687349853 297) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:30 UTC	1140	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 36 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 33 2e 30 37 2e 34 35 43 31 30 2e 34 35 2e 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49743	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1052	OUT	GET /js/global.js?v=1734624164460 HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	353	IN	HTTP/1.1 200 OK Etag: "1db522f73443ba4" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/javascript Content-Length: 1663268 Cache-Control: max-age=33282, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 8-29368541-29361060 2CNN RT(1735687349857 292) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 69 2c 21 30 29 3b 69 66 28 75 29 72 65 74 75 72 6e 20 75 28 69 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 70 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}}
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 69 6e 3b 0a 76 61 72 20 72 6f 75 6e 64 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 41 53 74 72 69 6e 67 28 29 20 7b 0a 20 20 76 61 72 20 75 61 44 61 74 61 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 3b 0a 0a 20 20 69 66 20 28 75 61 44 61 74 61 20 21 3d 20 6e 75 6c 6c 20 26 26 20 75 61 44 61 74 61 2e 62 72 61 6e 64 73 20 26 26 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 75 61 44 61 74 61 2e 62 72 61 6e 64 73 29 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 75 61 44 61 74 61 2e 62 72 61 6e 64 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 20 28 69 74 65 6d 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 74 65 6d 2e 62 72 61 6e 64 20 2b 20 22 2f 22 20 2b 20 69 74 65 6d 2e 76 65 72 Data Ascii: in;var round = Math.round;function getUAString() { var uaData = navigator.userAgentData; if (uaData != null && uaData.brands && Array.isArray(uaData.brands)) { return uaData.brands.map(function (item) { return item.brand + "/" + item.ver
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 69 64 74 68 2c 0a 20 20 20 20 68 65 69 67 68 74 3a 20 68 65 69 67 68 74 2c 0a 20 20 20 20 74 6f 70 3a 20 79 2c 0a 20 20 20 20 72 69 67 68 74 3a 20 78 20 2b 20 77 69 64 74 68 2c 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 79 20 2b 20 68 65 69 67 68 74 2c 0a 20 20 20 20 6c 65 66 74 3a 20 78 2c 0a 20 20 20 20 78 3a 20 78 2c 0a 20 20 20 20 79 3a 20 79 0a 20 20 7d 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 28 6e 6f 64 65 29 20 7b 0a 20 20 76 61 72 20 77 69 6e 20 3d 20 67 65 74 57 69 6e 64 6f 77 28 6e 6f 64 65 29 3b 0a 20 20 76 61 72 20 73 63 72 6f 6c 6c 4c 65 66 74 20 3d 20 77 69 6e 2e 70 61 67 65 58 4f 66 66 73 65 74 3b 0a 20 20 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 77 69 6e 2e 70 61 67 65 59 4f 66 66 73 65 74 Data Ascii: idth, height: height, top: y, right: x + width, bottom: y + height, left: x, x: x, y: y };}function getWindowScroll(node) { var win = getWindow(node); var scrollLeft = win.pageXOffset; var scrollTop = win.pageYOffset
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 74 44 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 65 6e 74 29 29 2e 6c 65 66 74 20 2b 20 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 28 65 6c 65 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 67 65 74 57 69 6e 64 6f 77 28 65 6c 65 6d 65 6e 74 29 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 6c 65 6d 65 6e 74 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 63 72 6f 6c 6c 50 61 72 65 6e 74 28 65 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 2f 2f 20 46 69 72 65 66 6f 78 20 77 61 6e 74 73 20 75 73 20 74 6f 20 63 68 65 63 6b 20 60 2d 78 60 20 61 6e 64 20 60 2d 79 60 20 76 61 72 69 61 74 Data Ascii: tDocumentElement(element)).left + getWindowScroll(element).scrollLeft;}function getComputedStyle(element) { return getWindow(element).getComputedStyle(element);}function isScrollParent(element) { // Firefox wants us to check `-x` and `-y` variat
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 2c 0a 20 20 20 20 79 3a 20 30 0a 20 20 7d 3b 0a 0a 20 20 69 66 20 28 69 73 4f 66 66 73 65 74 50 61 72 65 6e 74 41 6e 45 6c 65 6d 65 6e 74 20 7c 7c 20 21 69 73 4f 66 66 73 65 74 50 61 72 65 6e 74 41 6e 45 6c 65 6d 65 6e 74 20 26 26 20 21 69 73 46 69 78 65 64 29 20 7b 0a 20 20 20 20 69 66 20 28 67 65 74 4e 6f 64 65 4e 61 6d 65 28 6f 66 66 73 65 74 50 61 72 65 6e 74 29 20 21 3d 3d 20 27 62 6f 64 79 27 20 7c 7c 20 2f 2f 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 70 6f 70 70 65 72 6a 73 2f 70 6f 70 70 65 72 2d 63 6f 72 65 2f 69 73 73 75 65 73 2f 31 30 37 38 0a 20 20 20 20 69 73 53 63 72 6f 6c 6c 50 61 72 65 6e 74 28 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 20 7b 0a 20 20 20 20 20 20 73 63 72 6f 6c 6c 20 3d 20 67 65 74 4e 6f 64 65 53 Data Ascii: , y: 0 }; if (isOffsetParentAnElement \|\| !isOffsetParentAnElement && !isFixed) { if (getNodeName(offsetParent) !== 'body' \|\| // https://github.com/popperjs/popper-core/issues/1078 isScrollParent(documentElement)) { scroll = getNodeS
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 6e 20 28 2f 2f 20 74 68 69 73 20 69 73 20 61 20 71 75 69 63 6b 65 72 20 28 62 75 74 20 6c 65 73 73 20 74 79 70 65 20 73 61 66 65 29 20 77 61 79 20 74 6f 20 73 61 76 65 20 71 75 69 74 65 20 73 6f 6d 65 20 62 79 74 65 73 20 66 72 6f 6d 20 74 68 65 20 62 75 6e 64 6c 65 0a 20 20 20 20 2f 2f 20 24 46 6c 6f 77 46 69 78 4d 65 5b 69 6e 63 6f 6d 70 61 74 69 62 6c 65 2d 72 65 74 75 72 6e 5d 0a 20 20 20 20 2f 2f 20 24 46 6c 6f 77 46 69 78 4d 65 5b 70 72 6f 70 2d 6d 69 73 73 69 6e 67 5d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 20 7c 7c 20 2f 2f 20 73 74 65 70 20 69 6e 74 6f 20 74 68 65 20 73 68 61 64 6f 77 20 44 4f 4d 20 6f 66 20 74 68 65 20 70 61 72 65 6e 74 20 6f 66 20 61 20 73 6c 6f 74 74 65 64 20 6e 6f 64 65 0a 20 20 20 20 65 6c Data Ascii: n (// this is a quicker (but less type safe) way to save quite some bytes from the bundle // $FlowFixMe[incompatible-return] // $FlowFixMe[prop-missing] element.assignedSlot \|\| // step into the shadow DOM of the parent of a slotted node el
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 20 76 61 72 20 74 61 72 67 65 74 20 3d 20 69 73 42 6f 64 79 20 3f 20 5b 77 69 6e 5d 2e 63 6f 6e 63 61 74 28 77 69 6e 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 20 7c 7c 20 5b 5d 2c 20 69 73 53 63 72 6f 6c 6c 50 61 72 65 6e 74 28 73 63 72 6f 6c 6c 50 61 72 65 6e 74 29 20 3f 20 73 63 72 6f 6c 6c 50 61 72 65 6e 74 20 3a 20 5b 5d 29 20 3a 20 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3b 0a 20 20 76 61 72 20 75 70 64 61 74 65 64 4c 69 73 74 20 3d 20 6c 69 73 74 2e 63 6f 6e 63 61 74 28 74 61 72 67 65 74 29 3b 0a 20 20 72 65 74 75 72 6e 20 69 73 42 6f 64 79 20 3f 20 75 70 64 61 74 65 64 4c 69 73 74 20 3a 20 2f 2f 20 24 46 6c 6f 77 46 69 78 4d 65 5b 69 6e 63 6f 6d 70 61 74 69 62 6c 65 2d 63 61 6c 6c 5d 3a 20 69 73 42 6f 64 79 20 74 65 6c 6c 73 20 75 73 20 74 61 72 67 Data Ascii: var target = isBody ? [win].concat(win.visualViewport \|\| [], isScrollParent(scrollParent) ? scrollParent : []) : scrollParent; var updatedList = list.concat(target); return isBody ? updatedList : // $FlowFixMe[incompatible-call]: isBody tells us targ
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 4e 6f 64 65 29 3b 20 2f 2f 20 54 68 69 73 20 69 73 20 6e 6f 6e 2d 65 78 68 61 75 73 74 69 76 65 20 62 75 74 20 63 6f 76 65 72 73 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 43 53 53 20 70 72 6f 70 65 72 74 69 65 73 20 74 68 61 74 0a 20 20 20 20 2f 2f 20 63 72 65 61 74 65 20 61 20 63 6f 6e 74 61 69 6e 69 6e 67 20 62 6c 6f 63 6b 2e 0a 20 20 20 20 2f 2f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 65 6e 2d 55 53 2f 64 6f 63 73 2f 57 65 62 2f 43 53 53 2f 43 6f 6e 74 61 69 6e 69 6e 67 5f 62 6c 6f 63 6b 23 69 64 65 6e 74 69 66 79 69 6e 67 5f 74 68 65 5f 63 6f 6e 74 61 69 6e 69 6e 67 5f 62 6c 6f 63 6b 0a 0a 20 20 20 20 69 66 20 28 63 73 73 2e 74 72 61 6e 73 66 6f 72 6d 20 21 3d 3d 20 27 6e 6f 6e 65 27 20 7c Data Ascii: Node); // This is non-exhaustive but covers the most common CSS properties that // create a containing block. // https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block if (css.transform !== 'none' \|
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 69 6e 67 50 61 72 65 6e 74 73 20 3d 20 27 63 6c 69 70 70 69 6e 67 50 61 72 65 6e 74 73 27 3b 0a 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 27 76 69 65 77 70 6f 72 74 27 3b 0a 76 61 72 20 70 6f 70 70 65 72 20 3d 20 27 70 6f 70 70 65 72 27 3b 0a 76 61 72 20 72 65 66 65 72 65 6e 63 65 20 3d 20 27 72 65 66 65 72 65 6e 63 65 27 3b 0a 76 61 72 20 76 61 72 69 61 74 69 6f 6e 50 6c 61 63 65 6d 65 6e 74 73 20 3d 20 2f 2a 23 5f 5f 50 55 52 45 5f 5f 2a 2f 62 61 73 65 50 6c 61 63 65 6d 65 6e 74 73 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 20 28 61 63 63 2c 20 70 6c 61 63 65 6d 65 6e 74 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 61 63 63 2e 63 6f 6e 63 61 74 28 5b 70 6c 61 63 65 6d 65 6e 74 20 2b 20 22 2d 22 20 2b 20 73 74 61 72 74 2c 20 70 6c 61 63 65 6d 65 6e 74 Data Ascii: ingParents = 'clippingParents';var viewport = 'viewport';var popper = 'popper';var reference = 'reference';var variationPlacements = /#__PURE__/basePlacements.reduce(function (acc, placement) { return acc.concat([placement + "-" + start, placement
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 64 65 70 4d 6f 64 69 66 69 65 72 20 3d 20 6d 61 70 2e 67 65 74 28 64 65 70 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 70 4d 6f 64 69 66 69 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 6f 72 74 28 64 65 70 4d 6f 64 69 66 69 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 72 65 73 75 6c 74 2e 70 75 73 68 28 6d 6f 64 69 66 69 65 72 29 3b 0a 20 20 7d 0a 0a 20 20 6d 6f 64 69 66 69 65 72 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 6d 6f 64 69 66 69 65 72 29 20 7b 0a 20 20 20 20 69 66 20 28 21 76 69 73 69 74 65 64 2e 68 61 73 28 6d 6f 64 69 66 69 65 72 2e 6e 61 6d 65 29 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 63 68 65 63 6b 20 66 6f 72 20 Data Ascii: var depModifier = map.get(dep); if (depModifier) { sort(depModifier); } } }); result.push(modifier); } modifiers.forEach(function (modifier) { if (!visited.has(modifier.name)) { // check for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49744	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1132	OUT	GET /media/b35pwkub/icon_homepage-toll-violations.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	351	IN	HTTP/1.1 200 OK Etag: "1dadbf60b5e0208" Last-Modified: Mon, 22 Jul 2024 05:14:36 GMT Content-Type: image/svg+xml Content-Length: 1032 Cache-Control: max-age=82207, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 17-227070890-227050385 2CNN RT(1735687349858 292) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:30 UTC	1032	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 36 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 33 2e 30 37 2e 34 35 43 31 30 2e 34 35 2e 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49750	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1127	OUT	GET /media/cpwdwtyv/icon_homepage-my-account.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	351	IN	HTTP/1.1 200 OK Etag: "1dadbf604cf8af3" Last-Modified: Mon, 22 Jul 2024 05:14:25 GMT Content-Type: image/svg+xml Content-Length: 1139 Cache-Control: max-age=82207, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 18-261310477-261310153 2CNN RT(1735687350178 277) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:30 UTC	1139	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 36 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 33 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 63 66 33 65 3b 7d 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 33 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2,.cls-3{stroke-width:0px;}.cls-2{fill:#ffcf3e;}.cls-2,.cls-3{fill-rule:evenodd;}.cls-3{fill:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49751	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1151	OUT	GET /media/hrwichhw/fastrak_logo_2024.svg?rmode=max&width=341&height=254 HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db0ecaa317fa07" Last-Modified: Tue, 24 Sep 2024 21:42:22 GMT Content-Type: image/svg+xml Content-Length: 2311 Cache-Control: max-age=71094, public Expires: Wed, 01 Jan 2025 19:07:24 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 13-81195668-0 0CNN RT(1735687350196 278) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:30 UTC	1107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 35 31 2e 33 39 20 33 35 31 2e 33 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 61 35 31 38 39 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 38 63 39 35 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 451.39 351.39"> <defs> <style> .cls-1 { fill: #a51890; } .cls-2 { fill: #008c95; } </style> </de
2024-12-31 23:22:30 UTC	1204	IN	Data Raw: 37 2e 31 37 2d 36 2e 31 38 2c 37 2e 34 31 2d 38 2e 38 36 2c 37 2e 37 37 4d 34 33 30 2e 39 33 2c 32 37 30 2e 32 68 2d 32 34 2e 30 33 6c 2d 32 32 2e 34 37 2c 32 34 2e 34 38 2c 35 2e 34 31 2d 32 34 2e 34 38 68 2d 32 30 2e 34 37 6c 2d 31 33 2e 35 33 2c 36 32 2e 33 35 2d 31 30 2e 34 36 2d 36 32 2e 33 35 68 2d 32 32 2e 39 38 6c 2d 33 34 2e 39 35 2c 35 37 2e 36 31 63 2d 2e 37 33 2d 34 2e 34 36 2d 31 2e 33 37 2d 31 31 2e 32 34 2d 32 2e 35 33 2d 31 35 2e 33 33 2d 31 2e 35 37 2d 35 2e 36 39 2d 35 2e 39 39 2d 38 2e 34 35 2d 35 2e 39 39 2d 38 2e 34 35 2c 30 2c 30 2c 31 38 2e 34 39 2d 31 2e 30 37 2c 31 38 2e 34 39 2d 31 38 2e 30 35 73 2d 31 37 2e 39 39 2d 31 35 2e 37 38 2d 31 37 2e 39 39 2d 31 35 2e 37 38 68 2d 33 33 2e 33 35 6c 2d 31 35 2e 31 36 2c 36 38 2e 35 36 68 Data Ascii: 7.17-6.18,7.41-8.86,7.77M430.93,270.2h-24.03l-22.47,24.48,5.41-24.48h-20.47l-13.53,62.35-10.46-62.35h-22.98l-34.95,57.61c-.73-4.46-1.37-11.24-2.53-15.33-1.57-5.69-5.99-8.45-5.99-8.45,0,0,18.49-1.07,18.49-18.05s-17.99-15.78-17.99-15.78h-33.35l-15.16,68.56h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49752	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	876	OUT	GET /site-media/tca-logo-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db522f706262cc" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 2252 Cache-Control: max-age=33282, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 13-81195681-0 0CNN RT(1735687350445 281) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:30 UTC	1107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 2e 35 34 20 32 31 2e 31 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 37 39 35 2d 32 22 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 36 30 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 36 2e 35 35 2c 35 2e 31 31 6c 2d 2e 31 35 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 49.54 21.19"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><g id="Group_2795-2"><path id="Path_2601" class="cls-1" d="M36.55,5.11l-.15
2024-12-31 23:22:30 UTC	1145	IN	Data Raw: 2d 2e 32 31 2c 31 2e 30 37 2d 31 2e 31 32 2c 31 2e 36 38 2d 31 2e 37 36 2c 31 2e 31 38 2d 35 2e 30 35 2c 32 2e 35 31 2d 37 2e 33 32 2c 33 2e 37 2d 31 2e 33 39 2e 37 36 2d 32 2e 35 33 2c 31 2e 38 39 2d 33 2e 33 31 2c 33 2e 32 37 2d 2e 34 38 2e 38 31 2d 2e 38 35 2c 31 2e 36 38 2d 31 2e 31 2c 32 2e 35 38 68 34 2e 39 63 2e 31 34 2d 2e 38 39 2e 33 39 2d 31 2e 37 35 2e 37 34 2d 32 2e 35 38 2e 33 35 2d 2e 39 33 2e 39 33 2d 31 2e 37 35 2c 31 2e 36 37 2d 32 2e 34 31 2c 31 2e 31 32 2d 2e 39 2c 33 2e 34 39 2d 32 2e 33 35 2c 35 2e 32 31 2d 33 2e 36 35 2c 31 2e 32 35 2d 2e 39 34 2c 32 2e 31 35 2d 31 2e 38 2c 31 2e 39 38 2d 32 2e 33 31 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 36 30 36 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 37 2e Data Ascii: -.21,1.07-1.12,1.68-1.76,1.18-5.05,2.51-7.32,3.7-1.39.76-2.53,1.89-3.31,3.27-.48.81-.85,1.68-1.1,2.58h4.9c.14-.89.39-1.75.74-2.58.35-.93.93-1.75,1.67-2.41,1.12-.9,3.49-2.35,5.21-3.65,1.25-.94,2.15-1.8,1.98-2.31"/><path id="Path_2606" class="cls-1" d="M37.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49753	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	877	OUT	GET /site-media/toll_roads_logo.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	346	IN	HTTP/1.1 200 OK Etag: "1db522f70627300" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 6400 Cache-Control: max-age=33281, public Expires: Wed, 01 Jan 2025 08:37:11 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 16-194337207-0 0CNN RT(1735687350452 298) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:30 UTC	1106	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 37 2e 34 39 20 32 36 2e 39 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 75 72 6c 28 23 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 29 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 187.49 26.94"><defs><style>.cls-1{fill:url(#linear-gradient);}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#0
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 68 2e 30 36 63 31 2e 31 32 2d 2e 38 38 2c 32 2e 37 35 2d 31 2e 34 35 2c 34 2e 39 39 2d 31 2e 34 35 2c 34 2e 30 38 2c 30 2c 35 2e 37 31 2c 31 2e 36 33 2c 35 2e 37 31 2c 33 2e 33 39 76 35 2e 33 68 2d 35 2e 31 37 76 2d 34 2e 31 31 63 30 2d 31 2e 36 2d 2e 39 37 2d 32 2e 31 33 2d 32 2e 33 38 2d 32 2e 31 33 2d 32 2e 31 32 2c 30 2d 33 2e 32 31 2e 38 33 2d 33 2e 32 31 2c 32 2e 36 36 76 33 2e 35 39 68 2d 35 2e 31 37 76 2d 31 32 2e 32 33 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 34 34 2e 30 38 2c 32 30 2e 37 35 63 30 2d 2e 39 37 2d 2e 38 2d 31 2e 37 37 2d 32 2e 38 37 2d 31 2e 37 37 2d 31 2e 38 37 2c 30 2d 32 2e 37 36 2e 38 2d 32 2e 38 37 2c 31 2e 37 37 68 35 2e 37 34 4d 33 38 2e 34 2c 32 32 2e 34 32 63 2e 32 39 2c 31 2e 31 37 Data Ascii: h.06c1.12-.88,2.75-1.45,4.99-1.45,4.08,0,5.71,1.63,5.71,3.39v5.3h-5.17v-4.11c0-1.6-.97-2.13-2.38-2.13-2.12,0-3.21.83-3.21,2.66v3.59h-5.17v-12.23"/><path class="cls-2" d="M44.08,20.75c0-.97-.8-1.77-2.87-1.77-1.87,0-2.76.8-2.87,1.77h5.74M38.4,22.42c.29,1.17
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 63 2d 31 2e 31 38 2c 31 2e 30 36 2d 32 2e 36 31 2c 31 2e 35 34 2d 34 2e 37 34 2c 31 2e 35 34 2d 32 2e 39 36 2c 30 2d 35 2e 35 39 2d 2e 38 34 2d 35 2e 35 39 2d 32 2e 36 38 2c 30 2d 32 2e 35 39 2c 34 2e 39 37 2d 32 2e 39 2c 37 2e 37 32 2d 32 2e 39 2e 38 33 2c 30 2c 31 2e 37 35 2e 30 35 2c 32 2e 34 31 2e 31 31 2d 2e 30 32 2d 31 2e 31 36 2d 31 2e 35 34 2d 31 2e 34 37 2d 33 2e 34 31 2d 31 2e 34 37 2d 31 2e 36 36 2c 30 2d 33 2e 33 33 2e 31 38 2d 34 2e 37 37 2e 36 33 6c 2d 2e 30 38 2d 31 2e 39 39 63 31 2e 38 33 2d 2e 34 33 2c 33 2e 37 36 2d 2e 36 2c 35 2e 39 36 2d 2e 36 2c 33 2e 38 32 2c 30 2c 37 2e 31 31 2e 39 33 2c 37 2e 31 31 2c 33 2e 35 32 76 33 2e 31 36 63 30 2c 2e 36 37 2e 30 37 2c 31 2e 33 34 2e 32 39 2c 32 2e 30 31 68 2d 34 2e 37 33 5a 22 2f 3e 3c 70 61 Data Ascii: c-1.18,1.06-2.61,1.54-4.74,1.54-2.96,0-5.59-.84-5.59-2.68,0-2.59,4.97-2.9,7.72-2.9.83,0,1.75.05,2.41.11-.02-1.16-1.54-1.47-3.41-1.47-1.66,0-3.33.18-4.77.63l-.08-1.99c1.83-.43,3.76-.6,5.96-.6,3.82,0,7.11.93,7.11,3.52v3.16c0,.67.07,1.34.29,2.01h-4.73Z"/><pa
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 70 6f 69 6e 74 73 3d 22 35 38 2e 37 39 20 31 36 2e 36 38 20 35 33 2e 38 35 20 31 36 2e 36 38 20 35 33 2e 38 35 20 31 34 2e 34 33 20 36 39 2e 30 36 20 31 34 2e 34 33 20 36 39 2e 30 36 20 31 36 2e 36 38 20 36 34 2e 31 32 20 31 36 2e 36 38 20 36 34 2e 31 32 20 32 35 2e 38 31 20 35 38 2e 37 39 20 32 35 2e 38 31 20 35 38 2e 37 39 20 31 36 2e 36 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 37 37 2e 36 35 2c 32 31 2e 35 37 63 30 2d 31 2e 32 37 2d 2e 39 38 2d 32 2e 34 2d 33 2e 33 36 2d 32 2e 34 73 2d 33 2e 33 36 2c 31 2e 31 33 2d 33 2e 33 36 2c 32 2e 34 2e 39 38 2c 32 2e 33 38 2c 33 2e 33 36 2c 32 2e 33 38 2c 33 2e 33 36 2d 31 2e 31 33 2c 33 2e 33 36 2d 32 2e 33 38 4d 36 35 2e 36 2c Data Ascii: class="cls-2" points="58.79 16.68 53.85 16.68 53.85 14.43 69.06 14.43 69.06 16.68 64.12 16.68 64.12 25.81 58.79 25.81 58.79 16.68"/><path class="cls-2" d="M77.65,21.57c0-1.27-.98-2.4-3.36-2.4s-3.36,1.13-3.36,2.4.98,2.38,3.36,2.38,3.36-1.13,3.36-2.38M65.6,
2024-12-31 23:22:30 UTC	938	IN	Data Raw: 2d 32 2e 37 35 2c 31 2e 37 31 2d 35 2e 31 33 2c 31 2e 37 31 2d 34 2e 34 35 2c 30 2d 36 2e 38 33 2d 32 2e 30 39 2d 36 2e 38 33 2d 34 2e 36 2c 30 2d 32 2e 30 39 2c 32 2e 32 36 2d 34 2e 32 39 2c 36 2e 34 2d 34 2e 32 39 2c 32 2e 30 37 2c 30 2c 33 2e 38 32 2e 33 31 2c 35 2e 31 33 2c 31 2e 32 39 68 2e 30 36 76 2d 34 2e 38 33 68 35 2e 32 76 31 32 2e 32 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 37 32 2e 36 32 2c 32 33 2e 34 36 63 31 2e 32 2e 33 2c 32 2e 39 38 2e 35 39 2c 34 2e 38 35 2e 35 39 2c 31 2e 30 36 2c 30 2c 32 2e 30 39 2d 2e 31 2c 32 2e 30 39 2d 2e 36 39 2c 30 2d 31 2e 34 34 2d 37 2e 33 34 2d 2e 34 32 2d 37 2e 33 34 2d 33 2e 34 39 2c 30 2d 31 2e 39 35 2c 33 2e 33 39 2d 32 2e 37 35 2c 36 2e 33 37 2d 32 2e 37 Data Ascii: -2.75,1.71-5.13,1.71-4.45,0-6.83-2.09-6.83-4.6,0-2.09,2.26-4.29,6.4-4.29,2.07,0,3.82.31,5.13,1.29h.06v-4.83h5.2v12.23Z"/><path class="cls-2" d="M172.62,23.46c1.2.3,2.98.59,4.85.59,1.06,0,2.09-.1,2.09-.69,0-1.44-7.34-.42-7.34-3.49,0-1.95,3.39-2.75,6.37-2.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49754	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1134	OUT	GET /media/4plinse4/241_santiagocreekbridge_cropped.jpg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	351	IN	HTTP/1.1 200 OK Etag: "1db0ec93f7b0737" Last-Modified: Tue, 24 Sep 2024 21:32:25 GMT Content-Type: image/jpeg Content-Length: 3931575 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 16-194337225-194331966 2CNN RT(1735687350523 276) q(0 1 1 -1) r(1 1)
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: ff d8 ff e1 12 fb 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 11 00 00 01 03 00 01 00 00 00 a0 10 00 00 01 01 03 00 01 00 00 00 10 0b 00 00 02 01 03 00 03 00 00 00 da 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 0c 00 00 00 e0 00 00 00 0f 01 02 00 12 00 00 00 ec 00 00 00 10 01 02 00 09 00 00 00 fe 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 07 01 00 00 1b 01 05 00 01 00 00 00 0f 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 22 00 00 00 17 01 00 00 32 01 02 00 14 00 00 00 39 01 00 00 3b 01 02 00 10 00 00 00 4d 01 00 00 98 82 02 00 27 00 00 00 5d 01 00 00 69 87 04 00 01 00 00 00 84 01 00 00 f4 03 00 00 08 00 08 00 08 00 48 69 67 68 77 61 79 20 32 34 31 00 4e 49 4b 4f 4e 20 43 Data Ascii: ExifII*(1"29;M']iHighway 241NIKON C
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 cd 2e cd 1b 5d 34 b9 ba 13 73 1d ed e3 e9 bf 6f b5 fe df f0 6a 63 29 b5 34 3e d8 6b 27 dd 63 24 86 fe e7 a8 0f d0 59 e7 3d d4 5a 1b 70 7e 30 92 0d d5 30 16 c9 9d d3 41 fd 15 8c 7f fc 0d 9f Data Ascii: euF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?.]4sojc)4>k'c$Y=Zp~00A
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 32 00 d1 bc a6 a1 c6 c7 fa b7 b2 97 5a 24 32 e6 7b 5e 5a e1 0e f6 39 9e dd fb 93 8e 9b d6 0b 4f af 91 48 7f a8 5e 1c 03 9d 0d 77 d2 67 be a6 7b bf 96 ed e9 df 87 69 c9 fb 33 b3 a8 6d e5 bb c5 45 8e 0e d9 cb 5c 5a eb 3d 27 21 51 e8 41 d3 5e 12 9a 91 e8 74 61 76 06 2b 01 2f b8 d0 5f ed f7 b8 3b dc 7f 35 a3 da e7 2a b9 5d 2b ed 58 90 cc 86 7b 3e 89 79 2c 68 fc c8 73 4f ab f9 cb 4b ec 77 87 7a ae ca 63 ed 69 24 91 8e 03 a0 f3 1f a7 fc ef e4 22 5b d3 99 90 d6 d7 65 86 36 80 f8 ae 5a 76 c4 43 2b 77 b7 f7 52 13 94 48 a9 1d 0f 48 ca 5f b1 69 85 82 08 df c5 cf e9 ac ea f8 ac b0 58 5a 44 8d ae 24 eb 1e dd b6 07 7b ae f6 ff 00 36 ff 00 4f fe b8 ad f5 3f b2 f5 4c 26 f4 fc 80 dc 4b 8d 8c b3 d6 70 75 b5 3b 66 e3 ee a6 3d 4f 77 d1 f6 28 e6 74 db eb af d4 e9 de a3 f2 98 Data Ascii: 2Z$2{^Z9OH^wg{i3mE\Z='!QA^tav+/_;5*]+X{>y,hsOKwzci$"[e6ZvC+wRHH_iXZD${6O?L&Kpu;f=Ow(t
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: ef 52 df 76 f6 6f 7d bf a3 ff 00 ad aa ff 00 62 67 a8 c1 56 1b 7e c6 eb 9d 63 9d 20 b4 d6 1b b5 cc 0f 73 dd 92 ca 99 b5 ec f5 3f eb d5 a3 1c d0 1a 10 23 7d 6c 70 ff 00 2f ea a2 50 97 77 ff d2 e5 9b e8 76 db 3d f8 94 4f 64 69 fe bf 72 e3 d2 55 47 d1 90 fd 5e c8 6c d3 f8 ff 00 b5 39 2e 1f 41 a1 c6 34 97 47 fd f1 eb 8c 49 3c 2d 2f 7b 57 ec cf b2 b0 dd f6 9f b6 90 fd e1 bb 3e ce 39 f4 3d 37 7f 48 77 b7 6f af bd a9 b1 fe cd e8 fe 9c 8f 5e 0c e9 af fd 6f 79 f4 77 7e ee f5 c1 a4 a3 c9 b1 f9 ff 00 c0 5f 1e 9b 7d 5f 4d c5 f4 b7 33 d1 db 12 79 f4 a6 74 dd fd 9d bf 41 73 d4 fa 3f 68 f6 71 bc fc 79 5c 9a 4a 3e 5f e6 96 fd 3e 6d d3 3d 83 eb af 9f f9 9d ce 9b f3 38 88 8d cc fd d5 9f 83 e9 ee 6e fd be 9c 57 33 b6 27 f3 77 7e 76 ed cb cc 92 43 2f cb f5 1f f4 57 e3 dc 3e Data Ascii: Rvo}bgV~c s?#}lp/Pwv=OdirUG^l9.A4GI<-/{W>9=7Hwo^oyw~_}_M3ytAs?hqy\J>_>m=8nW3'w~vC/W>
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 f0 00 00 00 01 00 01 00 f0 00 00 00 01 00 01 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 03 f2 00 00 00 00 00 0a 00 00 ff ff ff ff ff ff 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 Data Ascii: Scl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM8BIM&?8BIM8BIM8BIM
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 6f 74 74 6f 6d 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 72 69 67 68 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 04 28 00 00 00 00 00 0c 00 00 00 02 3f f0 00 00 00 00 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 05 38 42 49 4d 04 0c 00 00 00 00 0e bd 00 00 00 01 00 00 00 9f 00 00 00 35 00 00 01 e0 00 00 63 60 00 00 0e a1 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 Data Ascii: ottomOutsetlongrightOutsetlong8BIM(?8BIM8BIM8BIM5c`Adobe_CMAdobed
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 58 dd ff 00 bb fc d2 85 9d 3b 29 ae b1 b7 54 6e 7b 46 c0 6b 77 b4 19 fe 7e 9d ad fa 2d db f9 f5 aa e0 75 b1 f4 0c a7 c5 95 16 96 3d cc 68 7d 66 36 58 e7 b5 bb 8e d2 e7 35 9b cf b3 76 ef 66 f6 3f f4 95 ab 03 ec d6 31 a2 e6 6f dd 00 b1 8d db a1 d5 e5 a6 7f 7b db fb ea b9 ab ac e1 be aa 6c a4 5f 57 e6 d9 07 92 61 af b1 c4 b7 67 f6 df f4 11 7f 65 75 13 6d 76 63 d1 6b 47 3f a5 63 b8 3f 49 ae 6b ab 7d 5f 4b f7 53 24 06 fc 43 fb d1 3d 92 3c 8f d5 1b fa 63 18 d1 67 4e bd cd 71 f6 ba b7 e9 a8 fc dd f2 df 73 7f 92 a3 93 67 51 f4 45 77 38 b1 cc 86 fa 72 03 dc 06 ad d8 ef dd 67 fd 69 68 d7 d1 7a 99 6b 83 58 29 3b 77 34 0d d2 24 fe 8c 37 d8 df dd fc fb 51 99 d2 ba 83 ac a8 93 5d b7 30 8b 1a d7 0d a6 b1 f4 65 bb f6 bd cd fd ff 00 7a 67 ba 74 d4 4a 8d d9 16 55 c1 da c5 Data Ascii: X;)Tn{Fkw~-u=h}f6X5vf?1o{l_WageumvckG?c?Ik}_KS$C=<cgNqsgQEw8rgihzkX);w4$7Q]0ezgtJU
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 99 f6 50 2c 21 ee 78 2e 3e 99 8b 40 af dc ef 6b 92 c2 e9 ee ca 78 1b bd 36 69 2f 0d dd a9 fc c1 2e 67 b9 34 e5 11 16 49 d3 fa d3 97 fd 14 88 19 69 43 fc 58 ba 96 fd 6e 2e 30 dc 2c 53 a4 0d cc 7d 87 4f 93 15 0b 7a cb ec bc 64 b3 17 1e ab db a8 b2 ba 5a d7 0d 36 7e 73 dd f9 bf c8 4f d5 fa 5d 7d 3f 0e bb a8 b9 d6 58 fb 03 0e f0 03 76 96 bd fe d6 37 f3 b7 37 f7 d6 46 55 39 bf 63 66 55 25 ed a5 a4 b3 22 c6 68 03 8c 7a 5e a6 df a1 bb f7 be 82 6e 3c 90 9c 78 a2 00 17 57 5f f7 c9 90 9c 4d 12 6f cf fe f5 d3 b3 ab f5 4b 06 e3 6b 9a 07 81 0d 1f f8 1b 18 b3 32 3a a6 63 af 15 ba e7 39 83 5b 09 2e 76 9e 0d de f7 35 66 ba a7 13 2f 7b 9e 7f 94 49 ff 00 aa 49 f2 d6 c9 93 e4 ac 47 cf f6 31 48 27 c3 ea b9 98 d6 3a c6 3c b9 d6 02 2c 6c ed 6b 81 fc df 61 6a d3 af aa 55 90 c7 Data Ascii: P,!x.>@kx6i/.g4IiCXn.0,S}OzdZ6~sO]}?Xv77FU9cfU%"hz^n<xW_MoKk2:c9[.v5f/{IIG1H':<,lkajU
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 61 75 78 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e Data Ascii: //ns.adobe.com/exif/1.0/aux/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://n
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 65 42 61 6c 61 6e 63 65 3d 22 41 73 20 53 68 6f 74 22 20 63 72 73 3a 49 6e 63 72 65 6d 65 6e 74 61 6c 54 65 6d 70 65 72 61 74 75 72 65 3d 22 30 22 20 63 72 73 3a 49 6e 63 72 65 6d 65 6e 74 61 6c 54 69 6e 74 3d 22 30 22 20 63 72 73 3a 53 68 61 64 6f 77 73 3d 22 35 22 20 63 72 73 3a 42 72 69 67 68 74 6e 65 73 73 3d 22 2b 35 30 22 20 63 72 73 3a 43 6f 6e 74 72 61 73 74 3d 22 2b 32 35 22 20 63 72 73 3a 45 78 70 6f 73 75 72 65 32 30 31 32 3d 22 30 2e 30 30 22 20 63 72 73 3a 43 6f 6e 74 72 61 73 74 32 30 31 32 3d 22 30 22 20 63 72 73 3a 48 69 67 68 6c 69 67 68 74 73 32 30 31 32 3d 22 30 22 20 63 72 73 3a 53 68 61 64 6f 77 73 32 30 31 32 3d 22 30 22 20 63 72 73 3a 57 68 69 74 65 73 32 30 31 32 3d 22 30 22 20 63 72 73 3a 42 6c 61 63 6b 73 32 30 31 32 3d 22 30 22 Data Ascii: eBalance="As Shot" crs:IncrementalTemperature="0" crs:IncrementalTint="0" crs:Shadows="5" crs:Brightness="+50" crs:Contrast="+25" crs:Exposure2012="0.00" crs:Contrast2012="0" crs:Highlights2012="0" crs:Shadows2012="0" crs:Whites2012="0" crs:Blacks2012="0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49756	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	1120	OUT	GET /media/qljj3avn/closures_1200x800.jpg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db18e5b9b5327a" Last-Modified: Mon, 07 Oct 2024 18:21:28 GMT Content-Type: image/jpeg Content-Length: 854091 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 18-261310540-261310086 2CNN RT(1735687350526 320) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: ff d8 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c0 00 11 08 03 20 04 b0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 06 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 05 06 07 00 04 08 09 0a 0b ff c4 00 4c 10 00 02 01 03 03 03 02 05 03 03 02 04 04 03 00 13 01 02 03 04 05 11 06 12 21 00 07 13 22 31 08 14 32 41 51 09 23 61 15 42 71 16 81 24 33 52 91 0a 17 62 a1 18 25 43 b1 19 34 53 Data Ascii: CC L!"12AQ#aBq$3Rb%C4S
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 81 3f bf e2 85 59 a3 91 42 b0 c0 1e a4 55 0c 7c 6b 9c 19 49 66 25 15 88 c2 8c 11 9c f4 88 0a 4a a4 19 e3 cf 97 3e 66 9c 78 48 13 6a 51 4b 86 42 cc 98 29 fb ac 8a 64 89 49 66 56 a6 cb 38 20 b2 f3 b7 ff 00 57 f1 d0 1c a4 28 00 66 6d 36 3f f9 b4 f9 f2 e7 4e 0a 81 d4 69 7e 1e 54 05 b1 b1 48 0a ae 39 50 59 63 55 cf ed 46 19 7f 73 73 63 92 33 ec 7a 78 9c c4 49 23 e3 cc f0 f2 f3 a6 90 0a 66 d3 f0 e5 46 59 1b d1 20 65 66 2c 14 fb 32 f9 1d d8 79 17 71 55 91 14 b7 a8 11 91 90 7e ae 98 a4 5d 24 40 8f 90 dd c4 72 f8 69 4e 09 80 a1 ac fc cd 2a 37 e0 2f a4 2b 29 42 4a ec 28 09 3b 52 35 4c e5 c9 24 2b 02 70 39 3d 04 a6 49 8b cc f1 9f 3e 5c be 14 63 80 d3 ad 39 f3 f8 d1 73 eb 42 a7 0c 43 46 7d 2a 41 11 32 95 2a ad fb 3b 77 29 dc 1b 1c 8c e7 a7 ff 00 15 48 e7 f1 f9 f9 47 Data Ascii: ?YBU\|kIf%J>fxHjQKB)dIfV8 W(fm6?Ni~TH9PYcUFssc3zxI#fFY ef,2yqU~]$@riN7/+)BJ(;R5L$+p9=I>\c9sBCF}A2*;w)HG
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 48 18 85 90 be 32 98 e4 81 c8 e3 a6 23 2f 84 81 f8 3c 38 73 e1 b8 d2 d6 14 27 ad ff 00 6a 21 3b 76 1d ed 92 c1 24 49 08 38 3b 8e c8 d4 fa 83 ca 02 fd 27 8c 72 47 b1 e9 c5 e4 45 a2 d1 f3 27 80 e7 e9 4f 31 17 f3 9e b5 a3 8d c4 3f b9 db 97 6c 0c 1d ac 09 c3 82 5b 24 36 4f 19 5d bc 1e 9a c0 a7 9d bf 8f de f3 4f ef 66 eb e3 42 54 a3 2a 16 c1 73 b5 a4 03 dd 82 70 0a a6 e3 1a 63 9c 93 ee 7e de dd 30 20 82 a8 d3 77 af cc d3 11 96 2f d7 e2 85 19 bc 81 5b 6a 79 24 5c 16 00 15 78 d7 7a 02 50 95 04 28 ce 0f 27 39 e9 10 32 98 93 03 eb 6d f4 c0 99 be ff 00 b5 08 72 70 85 76 7a 8b 3b 26 c6 90 c8 e0 28 51 b8 81 b7 27 18 ce d1 cf 4c 53 12 a0 66 db f4 81 d7 9d 15 fd d8 8b fa d0 89 0a ee 21 07 a8 7a 13 78 12 21 19 e0 6e e2 41 ce 0a fb 9e 09 e0 74 b2 cc 49 d3 7c 58 fe 3c ff Data Ascii: H2#/<8s'j!;v$I8;'rGE'O1?l[$6O]OfBT*spc~0 w/[jy$\xzP('92mrpvz;&(Q'LSf!zx!nAtI\|X<
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: ad e9 f3 0b fe ff 00 5d 23 e9 43 e6 3b ce c0 55 bd 25 db d0 37 70 06 e2 54 9d a0 0f 66 e3 20 03 ee 79 59 04 09 b8 dd d7 db ed 4b 31 dd ad 0b 96 38 31 b0 66 6c 31 c6 40 11 2a 80 18 02 e7 73 0d a7 f8 fb 7b f4 c0 01 65 0f 0f df e1 61 fc d3 92 4c 41 bf da 93 0e 14 04 5c 82 51 89 5f 74 5c fd 79 52 76 6c 7e 09 00 fa 30 4f 3d 16 52 6e 74 9f 5f cc fd 74 a1 cc 05 87 0f 87 5f 2d 68 5d c6 e2 01 42 9b 97 00 30 73 eb 2c 18 80 ea 32 ed 9d d9 23 d5 8c 74 c9 16 04 83 3d 70 dd ba da 53 4d ed 11 c3 f9 f8 d1 77 b2 9c 06 19 8d 86 c9 01 c2 2e e2 bb e5 45 2a 09 6f 48 2c 4f 00 fb 7b 9e 8b 28 30 4a 6c 45 c6 ff 00 2f c6 fe 34 32 41 30 74 3d 1f cd 61 75 0a c1 59 8b 80 c5 f9 07 7b 06 c9 5c 7b 38 91 70 40 e0 1c 71 d2 ca 49 04 81 1b ba dd 1c 68 a6 c4 03 7a 32 b2 b7 00 6e 6d c3 11 12 Data Ascii: ]#C;U%7pTf yYK181fl1@s{eaLA\Q_t\yRvl~0O=Rnt_t_-h]B0s,2#t=pSMw.EoH,O{(0JlE/42A0t=auY{\{8p@qIhz2nm
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 20 f2 6e 2a 63 0a f1 11 1b 78 d4 63 78 41 cb c8 bc 82 0e 4b 60 0e 3a 33 21 2a 39 60 19 b1 bd fc f8 68 77 46 b4 36 91 e2 f8 75 ad 16 46 8a 46 88 c4 55 53 05 2a 51 b7 8c 63 71 56 50 5b 78 76 f7 ca 81 c9 6f b9 e4 92 16 90 b0 a9 27 fc 4f 42 23 cf 96 ea 05 14 a8 a6 08 03 43 d7 e3 9d 22 04 6c 83 0d 19 7c 1c 19 18 4a 88 a8 7d 9f 01 b1 86 43 c6 71 cf b7 47 2a 0a 32 0e 5e 56 d7 f9 f3 a6 b1 03 49 a0 62 0a 7b 85 40 04 91 b3 e1 36 12 57 7b 8c 0d cc 54 8f ee c1 27 03 1b 7d 90 90 ae 27 43 17 9e 03 f8 dd 37 9a 4a 88 d4 0e ba d7 e1 44 e1 9e 46 63 88 c9 62 55 1b 72 8c 71 16 5f 19 66 0c a0 6f 1e de ff 00 c7 47 70 94 80 25 63 e3 ce df 6f 4a 6b 49 24 f8 7e 5c a9 32 d2 3a b2 a8 e0 a1 2d 1a 30 6d d2 28 4d e6 59 19 4f 9d 5c 2f b8 c7 44 02 52 41 3a ce bc b9 0d d4 2a 26 08 1b c7 Data Ascii: ncxcxAK`:3!9`hwF6uFFUSQcqVP[xvo'OB#C"l\|J}CqG2^VIb{@6W{T'}'C7JDFcbUrq_foGp%coJkI$~\2:-0m(MYO\/DRA:*&
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 41 2a ff 00 2f 9d 28 b1 86 de 41 1e 35 60 03 ed de 43 28 c3 f8 a3 93 6a fd 67 1f 83 ef d0 29 51 96 47 8c 8d 34 f2 92 39 5e 88 09 cc 7f c7 8f e2 69 55 0c 11 98 20 55 0d b6 33 22 23 cb b8 b6 fd a9 8e 24 8e 66 60 32 7d 38 f7 c9 f7 13 05 40 15 49 8b c1 81 c2 fc 08 f8 d1 21 46 0c 08 13 6b 49 fd e6 95 93 7c 71 0c 36 52 22 0f d3 ca 70 3c b9 40 4b 8d d9 3e e3 68 1e d9 e3 00 98 52 cc 8f 11 f9 f0 be 9f 7a 25 92 13 ad 87 2f 8d 66 30 91 c6 ce 8a d2 6e 95 18 60 29 da d9 24 e3 0c e8 c3 96 27 18 3e e3 a5 aa 94 a0 93 02 c7 ad c7 85 34 10 90 09 12 6f 4a e6 5f 1b 23 37 a7 20 a9 c0 c6 d1 81 85 56 f7 00 92 71 c3 1c 81 9e 82 11 98 28 26 fd 75 c0 6b 4f 70 20 9b 52 ca e0 95 0a cc b1 b6 0b aa 47 86 91 63 18 7c 97 53 e3 45 23 d4 72 18 8f 62 7a 02 0c 12 44 a8 68 67 49 d3 cc f0 dd Data Ascii: A*/(A5`C(jg)QG49^iU U3"#$f`2}8@I!FkI\|q6R"p<@K>hRz%/f0n`)$'>4oJ_#7 Vq(&ukOp RGc\|SE#rbzDhgI
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: b7 65 c8 e0 11 ed c7 4d 04 c1 30 4c 5b 5b ff 00 3b 87 0a 2f 77 49 8e be 9b e8 0b 61 4a 86 59 f6 b2 85 25 81 c4 ac ec b2 28 90 a8 1b 48 e0 01 c1 f7 1d 38 12 41 20 a6 47 cb 75 ba e7 4f c8 5f f3 bf af 85 62 17 5d fb 30 ee 0c 81 55 40 fd ac 81 ff 00 31 03 7a 4a 82 37 32 9e 4e 7e dd 25 00 72 e6 b0 b7 af 91 fa 03 ca 98 4c 98 bf db ae 22 94 1f 5a 39 95 f7 ac 65 18 65 77 c5 86 c4 a2 26 0a 14 6f c8 19 18 da 0f 42 7d d5 27 20 82 7d 0f 09 f2 f9 d3 8d 52 66 ff 00 4a 14 18 45 52 ca 55 18 e5 17 d0 ec e4 b2 95 46 8c aa 78 58 b7 3f 7c f2 3f 1d 31 d4 90 0c 9d fa 88 e7 3b ff 00 8a 28 10 04 d8 7a 7c 39 51 89 8d d3 d5 b1 d4 1c 6c 75 d9 1f a4 85 93 c6 a8 73 e4 24 e4 7b 1c 0d d8 cf 4d e2 4a ad 20 f1 1a f2 99 dd fc 50 ca 48 bc 11 d6 9d 73 a0 67 db 88 98 33 6d 3b 40 53 e8 2a 88 Data Ascii: eM0L[[;/wIaJY%(H8A GuO_b]0U@1zJ72N~%rL"Z9eew&oB}' }RfJERUFxX?\|?1;(z\|9Qlus${MJ PHsg3m;@S*
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 7d b9 1c 72 3a 10 90 49 93 33 f1 b6 ff 00 87 e6 8a 60 0b 69 d7 5f 0a 4c ae f2 e0 86 ff 00 ef c4 87 2a a5 c1 21 55 0b 61 7d 65 88 0b ce 73 ce 07 b9 ce 50 2e 38 69 36 fd b8 d0 c4 93 23 9f ed eb 47 3e a5 5c c6 66 7c ae f6 52 c3 92 bb 77 e0 10 51 4e 38 19 dc 48 cf db a6 d0 98 54 27 70 fb 73 fa 53 ee 06 24 f5 7a 47 73 2b 1d 9c 06 e7 92 7d 32 32 15 8e 42 8c 00 91 99 47 2a 08 dc 31 d1 58 81 26 e3 e9 37 13 bb cf 71 9a 19 83 20 75 d7 c6 8c a5 98 6f 6d c4 15 08 63 fa 42 a7 1f 49 3f 44 44 00 39 e3 df 18 3d 31 00 78 47 19 9e 7f 9e af 4f 33 e2 eb f8 ac 6f a8 78 ce 18 6e 70 83 60 da 63 72 ed 1a e0 14 74 d9 c0 c1 cb 0f e7 a4 05 bc 5a 69 bf 78 89 e2 2f c7 4f 2a 6d 0c 03 7f c5 fd 7f 14 21 f2 a5 47 90 6e 0c f9 28 be 34 de b9 21 40 05 bc 87 6f d4 0f a4 f4 b2 dc 13 16 b6 b7 Data Ascii: }r:I3`i_L!Ua}esP.8i6#G>\f\|RwQN8HT'psS$zGs+}22BG1X&7q uomcBI?DD9=1xGO3oxnp`crtZix/O*m!Gn(4!@o
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: f7 3c ab 0c 81 10 91 b3 00 a1 dc 02 95 06 43 b6 47 32 95 2c 63 db ef 8f 58 3e 9e 7a 60 92 a2 35 9b fc b4 b7 1f 3b 6f b5 39 39 44 db f9 e7 d1 dd 45 76 0a e0 a3 61 98 60 92 8a 49 c8 08 48 50 49 5c ed 05 47 b0 18 c6 3a 20 09 49 cc 2c 3c fa 3c 09 df 40 54 24 41 bd 10 8d c8 a5 58 9c ba b4 9e 4f 4e dc 1e 1d 95 73 b7 62 8f a4 10 39 c8 1e fd 38 30 a3 23 75 a3 e9 eb c7 5e 74 a2 40 20 ef bc d0 36 14 e7 83 89 0c be 40 a9 12 95 f5 13 95 27 fb 94 e5 33 c0 3c 7e 3a 71 7b 46 e8 8b 9e b9 d2 26 3e 3e 5d 72 a4 53 77 97 2a db 06 d3 1a 28 55 8a 34 91 b7 16 51 9c 99 32 1b 2d 96 e3 9c 73 d4 8a 8c 97 13 79 3b c9 1f 6e 55 1a 41 0a b5 b8 6e 13 f7 a0 fd c1 b5 58 c6 ad b1 f8 c9 0a d1 aa 95 52 30 1b 25 3d 8e 0a 96 3c 74 bc 26 48 04 89 1f 1f 96 bf 01 44 73 4d f5 fb 75 f1 a0 32 93 92 Data Ascii: <CG2,cX>z`5;o99DEva`IHPI\G: I,<<@T$AXONsb980#u^t@ 6@'3<~:q{F&>>]rSw*(U4Q2-sy;nUAnXR0%=<t&HDsMu2
2024-12-31 23:22:30 UTC	1452	IN	Data Raw: 85 88 2a 91 a8 5d df 95 1c 0c e7 a8 94 53 0a 24 e8 0d fe fc ce ef 3a 95 29 3e 1e 67 af cf 2a 57 1b 57 99 1f 64 80 aa 29 54 2e 51 88 05 95 40 fd bc aa 8d aa 43 6d 1f e7 1d 47 a9 f7 46 61 ae bd 1e 66 d3 45 6e 26 0e 9c 7a e1 47 4f 0a 89 81 56 ce d5 1b 70 84 bc 6e 36 a3 bb 7d 5c 36 78 e1 8e 73 9c e3 a6 56 72 51 04 44 fc 08 d4 0d da 7a 0a 6f 0f 8a 46 ef 8f 0e b5 ad e2 11 c3 96 29 98 d5 5c 96 90 92 4a 61 63 df bb 11 c7 0e 48 c9 e7 ed 91 f7 ea b8 2a 49 4c 4d cf 0f 8c 6f 26 a7 b4 99 8b 0e b9 45 2a a0 ed 66 75 53 8f 1b 18 d4 bb 33 49 20 e4 fe e7 a6 28 d9 77 73 c9 d8 b9 c0 1d 04 f8 92 12 ae 37 b6 83 cb 53 a7 a9 8d 69 cc c1 31 fb cf 9e 9f 8a 55 54 9c 8d 87 c6 cc 00 89 8e d0 92 36 14 03 18 dc 04 98 c6 72 40 2b c8 c7 20 81 20 47 8b c4 06 bc 47 9f 0f bd 8c d1 a4 4c 82 Data Ascii: ]S$:)>gWWd)T.Q@CmGFafEn&zGOVpn6}\6xsVrQDzoF)\JacHILMo&EfuS3I (ws7Si1UT6r@+ GGL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49755	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	889	OUT	GET /media/safjozvp/icon_homepage-pay-tolls.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:30 UTC	346	IN	HTTP/1.1 200 OK Etag: "1dadbf61153e374" Last-Modified: Mon, 22 Jul 2024 05:14:46 GMT Content-Type: image/svg+xml Content-Length: 1140 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:30 GMT X-CDN: Imperva X-Iinfo: 16-194337226-0 0CNN RT(1735687350535 289) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:30 UTC	1106	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 36 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 33 2e 30 37 2e 34 35 43 31 30 2e 34 35 2e 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.4
2024-12-31 23:22:30 UTC	34	IN	Data Raw: 33 2c 32 2e 37 2d 32 2e 30 38 2c 34 2e 39 35 2d 34 2e 37 36 2c 35 2e 32 32 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 3,2.7-2.08,4.95-4.76,5.22"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49757	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:30 UTC	895	OUT	GET /media/b35pwkub/icon_homepage-toll-violations.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	346	IN	HTTP/1.1 200 OK Etag: "1dadbf60b5e0208" Last-Modified: Mon, 22 Jul 2024 05:14:36 GMT Content-Type: image/svg+xml Content-Length: 1032 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 15-142566201-0 0CNN RT(1735687350539 507) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:31 UTC	1032	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 36 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 33 2e 30 37 2e 34 35 43 31 30 2e 34 35 2e 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><path class="cls-1" d="M23.07.45C10.45.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49758	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	1142	OUT	GET /media/tcuceq0z/homepage-intro-placeholder-tall-corpped.jpg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	350	IN	HTTP/1.1 200 OK Etag: "1dae20d678d59ed" Last-Modified: Mon, 29 Jul 2024 23:16:56 GMT Content-Type: image/jpeg Content-Length: 965070 Cache-Control: max-age=82210, public Expires: Wed, 01 Jan 2025 22:12:41 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 16-194337279-194334534 2CNN RT(1735687350765 274) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: ff d8 ff db 00 43 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 06 37 07 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 07 01 03 08 02 09 0a ff c4 00 56 10 00 01 03 03 03 02 05 02 05 01 07 02 04 00 02 1b 01 02 03 04 00 05 11 06 12 21 13 31 07 14 22 41 51 32 61 15 23 42 71 81 52 08 16 24 33 62 91 a1 43 b1 25 72 82 c1 17 34 53 d1 e1 Data Ascii: CC7V!1"AQ2a#BqR$3bC%r4S
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 e2 84 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 05 8a 0b 19 a0 b1 40 28 2c 50 58 a0 39 a0 38 a0 b3 9a 12 28 40 a0 14 02 84 8a 01 40 28 05 00 a0 14 02 80 50 0a Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(@(P@(P@(P@(P@(P@(P@(P@(@(,PX98(@@(P
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 07 ce 6a 49 19 a1 03 34 03 34 03 34 03 34 03 34 03 34 07 39 a0 19 a0 19 a0 19 a0 19 a0 19 a0 19 a0 19 a0 19 a0 19 a0 19 a0 14 02 80 66 80 66 80 66 80 66 80 50 0a 01 40 33 40 73 40 71 9a 01 40 73 40 2a 00 a9 02 a0 0a 01 52 05 40 14 02 80 50 0a 01 40 28 05 48 15 00 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(jI4444449ffffP@3@s@q@s@*R@P@(HP@(P@(P@(P@(P@(P@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49759	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	908	OUT	GET /media/3pzp4doo/the-toll-roads-mobile-app-over-shoulder-2x.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	344	IN	HTTP/1.1 200 OK Etag: "1db0003cbb1606b" Last-Modified: Fri, 06 Sep 2024 02:23:44 GMT Content-Type: image/png Content-Length: 136654 Cache-Control: max-age=82205, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 16-194337280-0 0CNN RT(1735687350769 277) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:31 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 a6 00 00 02 22 08 03 00 00 00 2d 84 fa 63 00 00 03 00 50 4c 54 45 47 70 4c b1 9f 91 08 03 01 fe fe fe 61 81 97 02 01 00 f4 f9 f3 5b 3f 18 4c 44 34 1a 16 06 1e 0a 03 b4 a1 93 7c 61 4a af 9c 8e e5 de d9 2e 13 07 b6 a4 96 34 2b 0a 30 26 0a e2 db d4 92 74 5b ee ec e5 28 11 05 22 0e 03 de d6 c9 34 18 09 ea e5 e0 94 77 5e e7 e1 dd 71 44 17 8e 73 5a 37 2f 0b 3f 36 11 9d 7b 61 ea ea e3 ee ef ea 4a 40 19 ad 99 8b 44 3a 15 4a 2f 1d 7f 50 22 42 28 15 e7 e5 df e1 d9 ce d9 cd c0 cf c0 b1 b9 a7 99 60 34 15 14 06 02 99 78 5d a9 95 87 97 7b 61 dc d2 c4 a5 92 82 57 4b 22 68 3a 15 50 45 1d eb e8 df a2 8e 7e 3b 32 0f 51 37 22 3b 1d 0d ce e1 e7 5d 51 27 21 1c 05 af 99 82 59 3e 29 9e 82 6a d2 c4 b4 78 49 1b d3 c8 b8 e6 Data Ascii: PNGIHDR"-cPLTEGpLa[?LD4\|aJ.4+0&t[("4w^qDsZ7/?6{aJ@D:J/P"B(`4x]{aWK"h:PE~;2Q7";]Q'!Y>)jxI
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: c3 aa b7 d5 ee 57 7d 7b f8 40 f8 34 7c 4d b1 10 be 0c 5f 16 6a 6b 9b 9b 3b 3a 26 27 3b 61 85 df ae 6b 70 66 70 66 66 ea e4 14 dc 79 9d 84 8f 85 3f 14 ff 4a e1 af 57 ad c2 5f b8 42 ff 1a fe 17 e2 3f 05 56 15 ff 7a e1 6f d7 19 fe 6a 9d 1d b0 9a 9b f9 ef 87 8b ff 92 67 f9 6f f8 21 be e1 63 58 ed 1f 9e 6d 0f b7 b0 f0 21 ac e3 c7 8f 4d 9e 9b 99 1a 69 1a ad 19 1f 28 b7 b6 1d 39 b2 63 47 5d dd b6 ed db b7 6f dd 0f 6b b3 ad 2d 7f fd ba fe e0 8b 9f fe f4 27 7f bf 0e 8e eb 30 ba 17 57 0f ae 46 66 95 10 a5 07 03 36 fa 50 ce 3a d4 68 fc 3a 4c 0f 31 a8 e1 5e 0a b7 3d 4c 69 c0 b3 b4 82 a4 2e 2c 94 91 52 b8 5d 39 a5 94 9e 8a 31 65 44 03 a4 cb 8e d1 79 4f e9 04 7e 23 e1 86 df 4c b8 d3 c3 9a 43 75 64 08 6e 43 f8 d6 0d 94 86 9b c0 3a 08 f7 70 1b 14 48 a7 10 9a 99 c1 73 40 Data Ascii: W}{@4\|M_jk;:&';akpfpffy?JW_B?Vzojgo!cXm!Mi(9cG]ok-'0WFf6P:h:L1^=Li.,R]91eDyO~#LCudnC:pHs@
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 9b 42 da e8 d5 55 9f 29 39 c8 16 52 f4 20 98 82 98 42 09 75 b8 c4 90 2e 94 85 d2 a0 a5 c3 54 3e 8d 47 6a ea 38 5d b5 40 17 f9 51 f3 51 d0 e7 5b 9e 9a 52 31 45 75 94 ab fc 47 cc a4 f2 f6 14 d7 ff aa a7 21 8d 3c 17 30 85 ef 76 ac a6 45 0e f9 79 6a 2a 8a 8a 90 2a a6 c7 20 3b ed 42 35 45 43 0a 40 ed a6 0a 6e 08 e8 3a c9 94 62 c8 5f b3 90 2f 94 62 da 8e ff 41 24 ab cb 96 00 ac 4d 84 5f 21 65 95 0a ab b1 0a b2 0a a8 36 43 61 85 c9 2a 9b 00 94 b3 86 5a ff f8 b1 49 f0 a3 42 6a 3a cc a9 69 08 fa 0f 54 4d 5d 6e 8a f5 3d 90 b9 01 61 7f 9d c0 ff 5b 65 f4 9f 35 e6 53 d0 a7 a7 bd 02 ea 8b c4 95 51 6d cc e6 ae 87 7c 0d b5 8f f2 53 00 35 28 29 bc 11 a4 c3 c3 c3 c0 28 67 a6 0b 42 29 a7 a5 a7 9c 5e 48 ed 94 f1 4d 27 22 4e e7 38 ea cf a9 25 35 41 35 d4 9a 73 a6 2a 96 a3 52 Data Ascii: BU)9R Bu.T>Gj8]@QQ[R1EuG!<0vEyj** ;B5EC@n:b_/bA$M_!e6CaZIBj:iTM]n=a[e5SQm\|S5()(gB)^HM'"N8%5A5sR
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 52 11 e5 38 c5 5a 6a f0 dc 20 98 fd 0a ed 0c 8d 9e 48 11 45 98 6a d4 07 09 bd c2 f9 29 bf 56 07 c0 d7 54 ab 3e a7 c7 76 15 25 00 94 01 0c e1 3f 4c 52 80 73 41 49 91 d2 a6 e5 9a 69 8e f9 10 f4 eb a0 d2 df 7e 35 24 a7 62 9c e6 64 a7 b8 36 34 3d 95 0e e9 3f d3 0b d1 d6 6b ee d1 e9 a9 53 d5 48 5f f7 3a 42 13 50 e3 a8 bf 4f 7d d3 32 a9 29 ca 69 59 46 4e b4 51 ba e0 1a 50 56 b8 2e 7b 48 6d c5 e9 a8 b6 47 d5 94 9a 4b 8c 53 6a 40 45 72 ba 96 70 6a a8 12 a9 40 29 f8 8e d5 a9 ea e0 a0 70 4a 6a 0a 61 9f 7a a5 3c 5a 22 4e a9 8a e9 79 7e 3f 12 d4 a2 25 a7 b0 a0 90 9a 9c 3c 07 03 78 50 4a 75 02 a3 9d f0 06 0f d0 eb a7 16 03 c8 29 e8 29 b5 a0 16 5d 11 75 8a 7a 21 12 f5 4d 55 2d fc d7 40 b2 2a 1e 40 ec ad 52 0a 20 55 db e0 0c fd 89 43 21 15 46 4a 51 4c 1f b6 61 d0 0f 94 Data Ascii: R8Zj HEj)VT>v%?LRsAIi~5$bd64=?kSH_:BPO}2)iYFNQPV.{HmGKSj@Erpj@)pJjaz<Z"Ny~?%<xPJu))]uz!MU-@*@R UC!FJQLa
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 3e 82 0a 35 54 b4 c7 24 9e 90 8a d4 74 e3 92 d3 ab 1c f3 b9 d4 67 31 fd ed de 4f e8 89 f8 8c 20 b5 7c 60 3d 35 dd 1b b5 f5 65 86 cf 83 7a 98 b2 d3 7d cc 28 ee 7b a6 f2 09 03 7f 39 df 36 65 b3 8f bc 3e 1a 2e 99 cf e4 a6 c6 e6 10 e0 06 b7 21 dd 8c a7 e5 fc 4b ac 21 f9 75 88 e9 a0 c0 3a 48 90 76 d1 ae cd ae 2e bf 15 2a a0 56 af 75 7e 7b b6 5b 4a 23 d1 6a ec 47 fd d2 48 4f a9 e8 97 45 02 7b 8c d4 75 92 ec 2a 01 15 e6 61 2a 5c 43 32 ab 34 92 12 27 01 48 a1 e8 a8 a5 af a6 b0 51 0f c0 58 0d 90 9e 1a bf 32 30 8c 31 5f d4 f4 48 ac a6 49 17 ca b2 d3 8d 13 53 88 fa 7f ff 62 79 7c 49 71 fd df 2a a6 71 05 65 f3 d0 8e 51 ec 3f f5 ee 81 0a aa 17 76 e8 87 ff 04 92 d1 15 37 1f 15 0a fd 01 ad a0 d4 dd c7 a0 3f 61 b3 7a f3 49 d0 9f b3 d8 5d 1d 0a 35 10 78 49 95 2a b7 90 24 Data Ascii: >5T$tg1O \|`=5ez}({96e>.!K!u:Hv.Vu~{[J#jGHOE{ua\C24'HQX201_HISby\|IqqeQ?v7?azI]5xI*$
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 66 54 55 d4 f4 b7 5e 42 d3 74 f4 25 12 53 1a 8e ca 3b 72 2a 37 e6 87 80 df 8b 3f a1 50 43 b6 50 d0 5f 11 4b 8a 43 fe 78 7a c2 d9 a2 96 50 cf 7d 1b 2a 99 77 56 db b3 a2 d6 29 45 74 87 69 66 c5 1f 33 50 39 3d a8 56 fd 17 70 01 d5 c5 e7 87 35 53 0b 2a 3a e7 2c d7 dd 27 2d d5 c1 e8 48 4d 19 53 5f 38 71 e0 2f c8 71 8f 84 2a f1 1a c4 55 70 96 c9 aa 49 f2 aa 26 bb 30 63 a5 bf 29 1e 84 a1 b0 c2 1e 5a 7f ac 4f 8e ae 9e 62 cb 8a 48 0d 94 c2 99 5e 54 3d 95 24 37 25 35 dd 51 47 33 52 3e ee fb 1e d4 5f 01 e9 0b 3e b8 29 a6 f2 b7 09 b0 2f b1 7a 32 f5 7d 3c be 67 53 a6 fb 04 d2 3d 28 a6 ad f0 46 79 8f a8 69 79 25 5b e7 2f c6 86 94 db 55 62 73 a6 d9 dc 74 88 23 3f d5 fa 95 a4 82 f2 58 76 d1 59 a5 09 b3 9a 18 50 e1 24 d9 01 7d 3d 65 a7 7c 7c 68 67 ac a6 51 cc ff 30 83 69 Data Ascii: fTU^Bt%S;r7?PCP_KCxzP}wV)Etif3P9=Vp5S:,'-HMS_8q/qUpI&0c)ZObH^T=$7%5QG3R>_>)/z2}<gS=(Fyiy%[/Ubst#?XvYP$}=e\|\|hgQ0i
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: a8 d5 ca 7f ad 97 55 33 ad 06 b9 73 35 15 39 56 d8 05 58 0c 98 0e af e0 ae 67 4a 4e b5 ab ef b3 53 de ac 9f 96 50 3f d0 3d fd be 2f de 44 0d ce 68 a2 59 0c 26 60 54 1e af e5 70 e9 92 51 4b 4a 5d 91 ef d6 be 43 8e 51 08 f9 7d 6d bb 43 9a 03 72 0a 8a 7a 3f 64 a7 de 90 8a 07 f9 4e 9d ca 1a fc 88 e9 f3 68 6f b3 cd e1 e1 b8 53 d5 15 fa d6 fb e4 f4 34 2a a1 ba d4 62 12 2d 65 1a bb 14 c7 0c ae 1d 5c 3d 75 88 e4 59 be 58 90 33 a3 d7 31 a5 c8 2e 95 43 78 63 35 ad 95 4c b4 b9 d9 85 7d 0b f9 fa 69 8b fe bc 0c ce 48 b2 0b 26 ad a4 ab 1d 1d cd 3e 5f 8d ec d5 2a 0f 8f e3 76 c0 f9 55 e0 14 06 a2 59 4d 97 7a 5b a1 9e 78 78 da d4 b4 6e 1b 6e 88 ca a8 e9 96 ef 73 a5 7e a8 d8 6e d2 f0 6d 49 a8 08 26 89 29 00 3a cb 6f eb 61 ea 8c 52 91 52 db f0 ec 9c 7d a4 94 c4 b4 ad 0f 87 Data Ascii: U3s59VXgJNSP?=/DhY&`TpQKJ]CQ}mCrz?dNhoS4b-e\=uYX31.Cxc5L}iH&>_vUYMz[xxnns~nmI&):oaRR}
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 12 a6 51 81 df 78 28 19 38 39 24 7b 9f 58 4d 77 87 dc f4 5d b4 35 42 01 d5 d6 fa 6e eb ee dd d0 32 5e d1 01 94 05 db 12 c5 e3 d1 a7 78 5b 14 96 52 ee b4 c3 68 90 5f 1a a6 d5 39 6c 3b 09 98 2e ea 8b 96 4a 3b 5f 6a 28 95 52 ed d6 6b cc ef ea f4 89 a9 5b 66 9b 5a af 28 52 53 de 65 5a b4 ed cf ed dc cb 97 98 5f 88 28 75 fb 9f 9c a6 8a 4d ea a3 bf e9 6d 2a a5 85 dc c8 af 43 2a 2c a7 74 c9 2a 83 f5 6c f1 ec 77 c7 f9 2f a4 39 c0 64 e0 34 84 fd 1a ca 4e 41 4b 29 ee b3 96 62 57 5f 4e 95 88 b7 ed 6d c9 60 fa e3 41 dd d4 68 94 4a 5c 9f 15 16 11 56 84 34 a0 38 2b 5a 3a 0b cc ce 36 26 4b 72 d2 b4 8f 7f 88 b5 54 d5 34 48 69 b8 13 a6 b8 ee b7 a1 98 de 2f 69 76 6a 94 ba 43 7a fc 58 9f cb 50 97 5d 47 2a aa a4 aa ce dd 17 58 a5 72 72 6d fd 41 99 7e 8a db a4 96 9b 76 78 4d Data Ascii: Qx(89${XMw]5Bn2^x[Rh_9l;.J;_j(Rk[fZ(RSeZ_(uMmC,tlw/9d4NAK)bW_Nm`AhJ\V48+Z:6&KrT4Hi/ivjCzXP]GXrrmA~vxM
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 55 e7 54 11 29 c8 e4 69 d1 9a a6 b8 e4 28 88 38 e4 cb e6 a5 6c d3 29 c6 34 b1 a1 58 4d 2d db 78 91 9a ea 58 0c 6f f5 2b f8 24 95 6f d6 51 15 a7 b7 a8 72 aa c5 3e 45 fd 23 16 f4 15 53 55 d3 8d 1d db 37 4c 1b cd 5e 72 b5 91 a0 8b 82 3a 6b 80 a6 e3 7a ac a8 ca 68 d4 cf 3f e4 e7 4c fb c8 db 0f 3a 4a 62 7a e4 67 c0 e9 ab 9a 9c b6 f2 40 5f 20 b5 54 32 6f 8a 4e 95 1a d6 c3 79 e9 04 34 37 33 b5 98 08 aa 9d da e3 f2 54 3a 61 a2 9a 44 7f 89 fa 9d 6e 7e 4f 31 cd 9a 52 ac a6 89 d3 df ec 1a a6 cd b5 05 af a7 16 f7 0b 3c fc 19 43 4a b3 4d 05 0b da 2f c2 b4 59 db 51 cc a7 0f fd 4a 6f 56 4d 6b e5 e7 20 0a fd 31 ab da 77 70 79 6a 7b 7b c0 b4 73 30 54 51 fd a1 88 2a 95 68 2a ba cd f9 a6 75 ee 3a d0 99 ed a5 1b 8b 29 77 92 7a 44 33 1b 1b 15 4a 5f 51 cd f2 c7 dd 55 9e b4 8c Data Ascii: UT)i(8l)4XM-xXo+$oQr>E#SU7L^r:kzh?L:Jbzg@_ T2oNy473T:aDn~O1R<CJM/YQJoVMk 1wpyj{{s0TQhu:)wzD3J_QU
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: fe 6f aa e9 ef 6c 3b 5e ce 5e 7c 2f ab 99 19 a9 c8 da 17 35 65 2d 3d d2 46 72 2a 8e 14 8d 9d b6 e1 19 28 21 3f dd d3 ca c7 6c 94 f6 10 a9 7c 81 68 e8 4a 0d 43 d1 1f 82 3f a2 8a d3 7d 68 a3 4e 73 f0 e7 d8 9f 48 6a 72 b0 34 1f 32 a5 c1 9f 4f 93 f2 4e aa d4 fd 69 1e aa e9 68 33 b3 49 8a 1a 15 e1 be 7e 4f 44 15 3e da 6c 66 a9 c7 54 bf 5e 3d cd 82 76 ac 1c 79 3a 79 92 c3 a9 b3 00 9c 0b 95 70 9a c5 34 61 b6 e8 d4 14 86 a4 9a 96 11 d3 32 7b 52 01 53 2e a1 64 cf 9e 74 4b d7 29 f5 ff f6 6a 8a 35 ff ac b5 00 72 26 a4 7c bf d4 5f 0b 22 1e 8e a2 46 69 df 2f b0 7e 02 45 45 db 54 2a a8 dd 21 de b7 b5 80 9c de c7 c3 25 f8 88 89 56 39 9b 1f 73 d4 32 3b 53 78 23 4a 07 4e 8d 8f 93 a0 86 1c 95 38 d5 aa df 69 2a 6d ec 57 2b d5 3a a8 34 e4 3f e8 0d ff 94 d3 74 93 9e ab 9a 58 Data Ascii: ol;^^\|/5e-=Fr(!?l\|hJC?}hNsHjr42ONih3I~OD>lfT^=vy:yp4a2{RS.dtK)j5r&\|_"Fi/~EET!%V9s2;Sx#JN8i*mW+:4?tX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49760	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	1134	OUT	GET /media/lzdjsoqt/download_on_the_app_store_badge.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	352	IN	HTTP/1.1 200 OK Etag: "1dadc1244a45f41" Last-Modified: Mon, 22 Jul 2024 08:36:38 GMT Content-Type: image/svg+xml Content-Length: 12353 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 17-227071087-227047762 2CNN RT(1735687350827 292) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 36 63 30 2e 38 37 34 2d 31 2e 30 39 33 2c 31 2e 34 37 32 2d 32 2e 35 38 2c 31 2e 33 30 36 2d 34 2e 30 38 39 63 2d 31 2e 32 36 35 2c 30 2e 30 35 36 2d 32 2e 38 34 37 2c 30 2e 38 37 35 2d 33 2e 37 35 38 2c 31 2e 39 34 34 0d 0a 09 09 09 09 63 2d 30 2e 38 30 36 2c 30 2e 39 34 32 2d 31 2e 35 32 36 2c 32 2e 34 38 36 2d 31 2e 33 34 2c 33 2e 39 33 38 43 32 34 2e 35 35 37 2c 31 32 2e 32 30 35 2c 32 36 2e 30 31 36 2c 31 31 2e 33 38 32 2c 32 36 2e 39 32 38 2c 31 30 2e 33 30 36 7a 22 2f 3e 0d 0a 09 09 3c 2f 67 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 3e 0d 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 35 33 2e 36 34 35 2c 33 31 2e 35 30 34 68 2d 32 2e 32 37 31 6c 2d 31 2e 32 34 34 2d 33 2e 39 30 39 68 2d 34 2e 33 32 34 6c 2d 31 2e Data Ascii: 6c0.874-1.093,1.472-2.58,1.306-4.089c-1.265,0.056-2.847,0.875-3.758,1.944c-0.806,0.942-1.526,2.486-1.34,3.938C24.557,12.205,26.016,11.382,26.928,10.306z"/></g></g><g><path fill="#FFFFFF" d="M53.645,31.504h-2.271l-1.244-3.909h-4.324l-1.
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 37 35 2e 36 39 39 2c 32 36 2e 35 38 38 7a 20 4d 37 33 2e 35 32 37 2c 32 36 2e 36 36 36 0d 0a 09 09 09 63 30 2d 30 2e 39 33 34 2d 30 2e 32 31 31 2d 31 2e 37 30 34 2d 30 2e 36 33 33 2d 32 2e 33 31 63 2d 30 2e 34 36 31 2d 30 2e 36 33 32 2d 31 2e 30 37 38 2d 30 2e 39 34 38 2d 31 2e 38 35 35 2d 30 2e 39 34 38 63 2d 30 2e 35 32 37 2c 30 2d 31 2e 30 30 34 2c 30 2e 31 37 36 2d 31 2e 34 33 32 2c 30 2e 35 32 33 0d 0a 09 09 09 63 2d 30 2e 34 32 38 2c 30 2e 33 35 2d 30 2e 37 30 37 2c 30 2e 38 30 37 2d 30 2e 38 33 38 2c 31 2e 33 37 33 63 2d 30 2e 30 36 35 2c 30 2e 32 36 34 2d 30 2e 30 39 39 2c 30 2e 34 38 2d 30 2e 30 39 39 2c 30 2e 36 35 76 31 2e 36 63 30 2c 30 2e 36 39 38 2c 30 2e 32 31 34 2c 31 2e 32 38 37 2c 30 2e 36 34 2c 31 2e 37 36 38 0d 0a 09 09 09 63 30 2e 34 Data Ascii: 75.699,26.588z M73.527,26.666c0-0.934-0.211-1.704-0.633-2.31c-0.461-0.632-1.078-0.948-1.855-0.948c-0.527,0-1.004,0.176-1.432,0.523c-0.428,0.35-0.707,0.807-0.838,1.373c-0.065,0.264-0.099,0.48-0.099,0.65v1.6c0,0.698,0.214,1.287,0.64,1.768c0.4
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 63 30 2c 31 2e 34 37 35 2d 30 2e 34 32 32 2c 32 2e 36 38 36 2d 31 2e 32 36 34 2c 33 2e 36 33 33 63 2d 30 2e 38 38 33 2c 30 2e 39 37 35 2d 32 2e 30 35 35 2c 31 2e 34 36 31 2d 33 2e 35 31 36 2c 31 2e 34 36 31 0d 0a 09 09 09 63 2d 31 2e 34 30 38 2c 30 2d 32 2e 35 32 39 2d 30 2e 34 36 37 2d 33 2e 33 36 35 2d 31 2e 34 30 31 73 2d 31 2e 32 35 34 2d 32 2e 31 31 33 2d 31 2e 32 35 34 2d 33 2e 35 33 34 63 30 2d 31 2e 34 38 37 2c 30 2e 34 33 2d 32 2e 37 30 35 2c 31 2e 32 39 33 2d 33 2e 36 35 32 63 30 2e 38 36 31 2d 30 2e 39 34 38 2c 32 2e 30 32 33 2d 31 2e 34 32 32 2c 33 2e 34 38 34 2d 31 2e 34 32 32 0d 0a 09 09 09 63 31 2e 34 30 38 2c 30 2c 32 2e 35 34 31 2c 30 2e 34 36 37 2c 33 2e 33 39 36 2c 31 2e 34 30 32 43 31 30 35 2e 32 38 33 2c 32 34 2e 30 32 31 2c 31 30 35 Data Ascii: c0,1.475-0.422,2.686-1.264,3.633c-0.883,0.975-2.055,1.461-3.516,1.461c-1.408,0-2.529-0.467-3.365-1.401s-1.254-2.113-1.254-3.534c0-1.487,0.43-2.705,1.293-3.652c0.861-0.948,2.023-1.422,3.484-1.422c1.408,0,2.541,0.467,3.396,1.402C105.283,24.021,105
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 38 2d 30 2e 34 31 34 2d 31 2e 36 33 39 63 2d 30 2e 33 36 39 2d 30 2e 35 39 33 2d 30 2e 39 33 36 2d 30 2e 38 38 39 2d 31 2e 36 39 39 2d 30 2e 38 38 39 63 2d 30 2e 36 39 37 2c 30 2d 31 2e 32 36 34 2c 30 2e 32 38 39 2d 31 2e 36 39 37 2c 30 2e 38 36 39 0d 0a 09 09 09 63 2d 30 2e 33 35 35 2c 30 2e 34 36 31 2d 30 2e 35 36 36 2c 31 2e 30 31 34 2d 30 2e 36 33 31 2c 31 2e 36 35 38 48 31 32 30 2e 31 32 33 7a 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 3e 0d 0a 09 09 3c 67 3e 0d 0a 09 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 34 39 2e 30 35 2c 31 30 2e 30 30 39 63 30 2c 31 2e 31 37 37 2d 30 2e 33 35 33 2c 32 2e 30 36 33 2d 31 2e 30 35 38 2c 32 2e 36 35 38 63 2d 30 2e 36 35 33 2c 30 2e 35 34 39 2d 31 2e 35 38 31 2c 30 2e 38 32 Data Ascii: 8-0.414-1.639c-0.369-0.593-0.936-0.889-1.699-0.889c-0.697,0-1.264,0.289-1.697,0.869c-0.355,0.461-0.566,1.014-0.631,1.658H120.123z"/></g><g><g><path fill="#FFFFFF" d="M49.05,10.009c0,1.177-0.353,2.063-1.058,2.658c-0.653,0.549-1.581,0.82
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 6c 2d 30 2e 36 34 39 2c 32 2e 30 34 37 68 2d 30 2e 39 37 31 6c 2d 31 2e 33 38 37 2d 34 2e 37 31 34 68 31 2e 30 37 37 6c 30 2e 35 33 33 2c 32 2e 32 34 31 63 30 2e 31 32 39 2c 30 2e 35 33 2c 30 2e 32 33 35 2c 31 2e 30 33 35 2c 30 2e 33 32 2c 31 2e 35 31 33 0d 0a 09 09 09 09 68 30 2e 30 31 39 63 30 2e 30 37 38 2d 30 2e 33 39 34 2c 30 2e 32 30 37 2d 30 2e 38 39 36 2c 30 2e 33 38 39 2d 31 2e 35 30 33 6c 30 2e 36 36 39 2d 32 2e 32 35 68 30 2e 38 35 34 6c 30 2e 36 34 31 2c 32 2e 32 30 32 63 30 2e 31 35 35 2c 30 2e 35 33 37 2c 30 2e 32 38 31 2c 31 2e 30 35 34 2c 30 2e 33 37 38 2c 31 2e 35 35 32 68 30 2e 30 32 39 0d 0a 09 09 09 09 63 30 2e 30 37 31 2d 30 2e 34 38 35 2c 30 2e 31 37 38 2d 31 2e 30 30 32 2c 30 2e 33 32 2d 31 2e 35 35 32 6c 30 2e 35 37 32 2d 32 2e 32 Data Ascii: l-0.649,2.047h-0.971l-1.387-4.714h1.077l0.533,2.241c0.129,0.53,0.235,1.035,0.32,1.513h0.019c0.078-0.394,0.207-0.896,0.389-1.503l0.669-2.25h0.854l0.641,2.202c0.155,0.537,0.281,1.054,0.378,1.552h0.029c0.071-0.485,0.178-1.002,0.32-1.552l0.572-2.2
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 2d 30 2e 37 38 31 2c 30 2e 36 35 2d 31 2e 33 37 37 2c 30 2e 36 35 0d 0a 09 09 09 09 63 2d 30 2e 34 34 35 2c 30 2d 30 2e 38 30 35 2d 30 2e 31 34 33 2d 31 2e 30 37 36 2d 30 2e 34 32 37 63 2d 30 2e 32 34 36 2d 30 2e 32 35 38 2d 30 2e 33 36 39 2d 30 2e 35 37 39 2d 30 2e 33 36 39 2d 30 2e 39 36 63 30 2d 30 2e 35 37 36 2c 30 2e 32 34 2d 31 2e 30 31 35 2c 30 2e 37 32 33 2d 31 2e 33 31 39 0d 0a 09 09 09 09 63 30 2e 34 38 32 2d 30 2e 33 30 34 2c 31 2e 31 36 2d 30 2e 34 35 33 2c 32 2e 30 33 33 2d 30 2e 34 34 36 56 31 30 2e 33 63 30 2d 30 2e 36 32 31 2d 30 2e 33 32 36 2d 30 2e 39 33 31 2d 30 2e 39 37 39 2d 30 2e 39 33 31 63 2d 30 2e 34 36 35 2c 30 2d 30 2e 38 37 35 2c 30 2e 31 31 37 2d 31 2e 32 32 39 2c 30 2e 33 34 39 6c 2d 30 2e 32 31 33 2d 30 2e 36 38 38 0d 0a 09 Data Ascii: -0.781,0.65-1.377,0.65c-0.445,0-0.805-0.143-1.076-0.427c-0.246-0.258-0.369-0.579-0.369-0.96c0-0.576,0.24-1.015,0.723-1.319c0.482-0.304,1.16-0.453,2.033-0.446V10.3c0-0.621-0.326-0.931-0.979-0.931c-0.465,0-0.875,0.117-1.229,0.349l-0.213-0.688
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 2e 36 35 34 2d 30 2e 36 38 39 63 2d 30 2e 34 31 2d 30 2e 34 35 39 2d 30 2e 36 31 35 2d 31 2e 30 33 38 2d 30 2e 36 31 35 2d 31 2e 37 33 36 63 30 2d 30 2e 37 33 2c 30 2e 32 31 31 2d 31 2e 33 32 39 2c 30 2e 36 33 35 2d 31 2e 37 39 34 73 30 2e 39 39 34 2d 30 2e 36 39 38 2c 31 2e 37 31 33 2d 30 2e 36 39 38 0d 0a 09 09 09 09 63 30 2e 36 39 31 2c 30 2c 31 2e 32 34 38 2c 30 2e 32 32 39 2c 31 2e 36 36 38 2c 30 2e 36 38 38 43 39 37 2e 30 34 37 2c 39 2e 37 35 37 2c 39 37 2e 32 34 38 2c 31 30 2e 33 33 33 2c 39 37 2e 32 34 38 2c 31 31 2e 30 33 37 7a 20 4d 39 36 2e 31 36 32 2c 31 31 2e 30 37 31 63 30 2d 30 2e 34 33 35 2d 30 2e 30 39 34 2d 30 2e 38 30 38 2d 30 2e 32 38 31 2d 31 2e 31 31 39 0d 0a 09 09 09 09 63 2d 30 2e 32 32 31 2d 30 2e 33 37 36 2d 30 2e 35 33 33 2d 30 Data Ascii: .654-0.689c-0.41-0.459-0.615-1.038-0.615-1.736c0-0.73,0.211-1.329,0.635-1.794s0.994-0.698,1.713-0.698c0.691,0,1.248,0.229,1.668,0.688C97.047,9.757,97.248,10.333,97.248,11.037z M96.162,11.071c0-0.435-0.094-0.808-0.281-1.119c-0.221-0.376-0.533-0
2024-12-31 23:22:31 UTC	737	IN	Data Raw: 32 2c 31 2e 30 37 38 2c 30 2e 34 32 37 63 30 2e 33 35 35 2c 30 2e 33 35 35 2c 30 2e 35 33 33 2c 30 2e 38 38 33 2c 30 2e 35 33 33 2c 31 2e 35 38 31 56 31 33 2e 34 33 33 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 31 32 31 2e 32 30 37 2c 31 30 2e 38 35 33 63 30 2c 30 2e 31 38 38 2d 30 2e 30 31 34 2c 30 2e 33 34 36 2d 30 2e 30 33 39 2c 30 2e 34 37 35 68 2d 33 2e 31 34 33 63 30 2e 30 31 34 2c 30 2e 34 36 36 2c 30 2e 31 36 34 2c 30 2e 38 32 31 2c 30 2e 34 35 35 2c 31 2e 30 36 37 0d 0a 09 09 09 09 63 30 2e 32 36 36 2c 30 2e 32 32 2c 30 2e 36 30 39 2c 30 2e 33 33 2c 31 2e 30 32 39 2c 30 2e 33 33 63 30 2e 34 36 35 2c 30 2c 30 2e 38 38 39 2d 30 2e 30 37 34 2c 31 2e 32 37 31 2d 30 2e 32 32 33 6c 30 2e 31 36 Data Ascii: 2,1.078,0.427c0.355,0.355,0.533,0.883,0.533,1.581V13.433z"/><path fill="#FFFFFF" d="M121.207,10.853c0,0.188-0.014,0.346-0.039,0.475h-3.143c0.014,0.466,0.164,0.821,0.455,1.067c0.266,0.22,0.609,0.33,1.029,0.33c0.465,0,0.889-0.074,1.271-0.223l0.16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49761	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	890	OUT	GET /media/cpwdwtyv/icon_homepage-my-account.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	346	IN	HTTP/1.1 200 OK Etag: "1dadbf604cf8af3" Last-Modified: Mon, 22 Jul 2024 05:14:25 GMT Content-Type: image/svg+xml Content-Length: 1139 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 16-194337285-0 0CNN RT(1735687350838 288) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:31 UTC	1106	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 36 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 33 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 63 66 33 65 3b 7d 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 33 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 46.6"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2,.cls-3{stroke-width:0px;}.cls-2{fill:#ffcf3e;}.cls-2,.cls-3{fill-rule:evenodd;}.cls-3{fill:
2024-12-31 23:22:31 UTC	33	IN	Data Raw: 2e 32 2d 2e 32 36 2e 32 39 2d 2e 35 33 2e 35 37 2d 2e 38 33 2e 38 32 5a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: .2-.26.29-.53.57-.83.82Z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49762	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	1129	OUT	GET /media/e2ybixdp/google_play_store_badge_en.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	348	IN	HTTP/1.1 200 OK Etag: "1dadc123fdfa0e9" Last-Modified: Mon, 22 Jul 2024 08:36:30 GMT Content-Type: image/svg+xml Content-Length: 7145 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 5-19357487-19351100 2CNN RT(1735687350849 279) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 73 76 67 35 31 22 20 77 69 64 74 68 3d 22 31 38 30 22 20 68 65 69 67 68 74 3d 22 35 33 2e 33 33 33 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 30 20 35 33 2e 33 33 33 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="svg51" width="180" height="53.333" version="1.1" viewBox="0 0 180 53.333" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elemen
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 39 37 20 31 2e 30 39 33 33 20 30 20 31 2e 36 30 39 33 20 30 2e 32 33 35 34 36 20 32 2e 32 37 33 33 20 30 2e 35 35 37 33 32 2d 30 2e 31 39 33 33 33 20 31 2e 35 34 34 32 2d 31 2e 35 32 32 36 20 32 2e 36 33 37 39 2d 32 2e 39 35 39 39 20 32 2e 36 33 37 39 7a 6d 30 2e 33 30 31 33 33 2d 39 2e 31 33 35 32 63 2d 31 2e 38 30 31 33 20 30 2d 33 2e 36 36 36 36 20 30 2e 37 39 33 37 31 2d 34 2e 34 33 38 36 20 32 2e 35 35 32 31 6c 32 2e 32 30 38 20 30 2e 39 32 31 38 34 63 30 2e 34 37 31 39 38 2d 30 2e 39 32 31 38 34 20 31 2e 33 35 30 36 2d 31 2e 32 32 31 38 20 32 2e 32 37 33 33 2d 31 2e 32 32 31 38 20 31 2e 32 38 36 36 20 30 20 32 2e 35 39 34 36 20 30 2e 37 37 31 33 31 20 32 2e 36 31 35 39 20 32 2e 31 34 34 32 76 30 2e 31 37 31 33 33 63 2d 30 2e 34 35 30 36 36 2d 30 2e Data Ascii: 97 1.0933 0 1.6093 0.23546 2.2733 0.55732-0.19333 1.5442-1.5226 2.6379-2.9599 2.6379zm0.30133-9.1352c-1.8013 0-3.6666 0.79371-4.4386 2.5521l2.208 0.92184c0.47198-0.92184 1.3506-1.2218 2.2733-1.2218 1.2866 0 2.5946 0.77131 2.6159 2.1442v0.17133c-0.45066-0.
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 34 38 38 20 35 2e 36 37 30 37 20 30 20 33 2e 31 37 39 31 20 32 2e 34 30 36 32 20 35 2e 36 37 30 37 20 35 2e 36 32 37 35 20 35 2e 36 37 30 37 20 32 2e 35 39 38 39 20 30 20 34 2e 31 30 33 31 2d 31 2e 35 38 39 20 34 2e 37 32 36 34 2d 32 2e 35 31 33 6c 2d 31 2e 39 33 33 33 2d 31 2e 32 38 39 63 2d 30 2e 36 34 34 36 35 20 30 2e 39 34 35 33 31 2d 31 2e 35 32 34 39 20 31 2e 35 36 38 32 2d 32 2e 37 39 33 31 20 31 2e 35 36 38 32 2d 31 2e 32 36 36 36 20 30 2d 32 2e 31 36 39 32 2d 30 2e 35 38 30 31 32 2d 32 2e 37 34 38 33 2d 31 2e 37 31 38 36 6c 37 2e 35 38 31 35 2d 33 2e 31 33 35 39 7a 6d 2d 36 30 2e 34 30 39 2d 31 2e 38 36 38 32 76 32 2e 34 30 35 37 68 35 2e 37 35 36 35 63 2d 30 2e 31 37 31 38 36 20 31 2e 33 35 33 32 2d 30 2e 36 32 32 39 32 20 32 2e 33 34 31 31 2d Data Ascii: 488 5.6707 0 3.1791 2.4062 5.6707 5.6275 5.6707 2.5989 0 4.1031-1.589 4.7264-2.513l-1.9333-1.289c-0.64465 0.94531-1.5249 1.5682-2.7931 1.5682-1.2666 0-2.1692-0.58012-2.7483-1.7186l7.5815-3.1359zm-60.409-1.8682v2.4057h5.7565c-0.17186 1.3532-0.62292 2.3411-
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 37 30 33 20 32 2e 38 34 30 36 20 30 2e 37 30 38 39 32 20 30 20 31 2e 33 37 34 35 2d 30 2e 31 39 31 36 36 20 31 2e 39 34 35 33 2d 30 2e 35 32 38 31 32 6c 30 2e 30 34 35 33 33 2d 30 2e 30 32 36 35 36 20 31 35 2e 39 37 38 2d 39 2e 32 32 2d 37 2e 34 37 39 2d 38 2e 31 34 31 22 20 66 69 6c 6c 3d 22 23 65 62 33 31 33 31 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 31 33 33 33 33 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 33 39 22 20 64 3d 22 6d 34 31 2e 39 38 33 20 32 33 2e 33 33 34 2d 30 2e 30 31 33 36 2d 30 2e 30 30 39 33 2d 36 2e 38 39 38 32 2d 33 2e 39 39 39 2d 37 2e 37 37 31 37 20 36 2e 39 31 35 36 20 37 2e 37 39 38 37 20 37 2e 37 39 37 37 20 36 2e 38 36 31 38 2d 33 2e 39 35 39 32 63 31 2e 32 30 33 2d 30 2e 36 34 39 34 35 20 32 2e 30 31 39 37 Data Ascii: 703 2.8406 0.70892 0 1.3745-0.19166 1.9453-0.52812l0.04533-0.02656 15.978-9.22-7.479-8.141" fill="#eb3131" stroke-width=".13333"/><path id="path39" d="m41.983 23.334-0.0136-0.0093-6.8982-3.999-7.7717 6.9156 7.7987 7.7977 6.8618-3.9592c1.203-0.64945 2.0197
2024-12-31 23:22:31 UTC	1337	IN	Data Raw: 20 31 2e 32 31 30 34 20 32 2e 39 35 38 32 20 31 2e 32 31 30 34 20 31 2e 32 32 32 39 20 30 20 32 2e 31 39 37 39 2d 30 2e 33 39 31 37 32 20 32 2e 39 34 37 39 2d 31 2e 31 38 37 36 20 30 2e 36 36 30 33 38 2d 30 2e 36 36 32 33 38 20 30 2e 39 39 37 38 34 2d 31 2e 35 35 38 32 20 30 2e 39 39 37 38 34 2d 32 2e 36 37 39 20 30 2d 30 2e 31 38 39 36 2d 30 2e 30 32 32 39 33 2d 30 2e 33 39 31 37 32 2d 30 2e 30 35 36 32 37 2d 30 2e 36 30 34 32 35 7a 6d 31 2e 35 30 36 38 2d 33 2e 37 33 33 32 76 38 2e 30 32 34 39 68 34 2e 36 38 35 32 76 2d 30 2e 39 38 35 34 34 68 2d 33 2e 36 35 34 76 2d 32 2e 35 34 35 37 68 33 2e 32 39 35 38 76 2d 30 2e 39 36 32 35 31 68 2d 33 2e 32 39 35 38 76 2d 32 2e 35 34 33 37 68 33 2e 36 35 34 76 2d 30 2e 39 38 37 35 38 7a 6d 31 31 2e 32 35 35 20 30 Data Ascii: 1.2104 2.9582 1.2104 1.2229 0 2.1979-0.39172 2.9479-1.1876 0.66038-0.66238 0.99784-1.5582 0.99784-2.679 0-0.1896-0.02293-0.39172-0.05627-0.60425zm1.5068-3.7332v8.0249h4.6852v-0.98544h-3.654v-2.5457h3.2958v-0.96251h-3.2958v-2.5437h3.654v-0.98758zm11.255 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49769	104.17.25.14	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	653	OUT	GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://thetollroads.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:31 UTC	977	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:31 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 156400 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "660cc074-262f0" Last-Modified: Wed, 03 Apr 2024 02:35:32 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 301907 Expires: Sun, 21 Dec 2025 23:22:31 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cpu7MFRzYumN4frSczZZMLNsA3DHI3N58SHz5%2B3ubNbwEr9wKgXkWcL2h22aLtJ5v7UUCo%2FBEX5sUOoNOvP3EIzPT4osDr4cT80DiReLp6T%2B0xVNgZxN0oCIrX6GHqJHsVS8uVy8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fae031a1f934397-EWR alt-svc: h3=":443"; ma=86400
2024-12-31 23:22:31 UTC	392	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 62 f0 00 0a 00 00 00 06 1c 39 00 02 62 a5 03 05 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 ab 44 00 81 91 2a ca 96 c6 1c cb ab 48 05 87 6d 07 20 25 1c 0e 93 87 b2 fb 00 00 aa c0 79 00 00 d8 aa 9f 87 11 29 9a 3d 3c 45 e4 ac d7 03 a0 aa aa aa aa aa 9a 97 10 70 5c db f6 aa 0a 00 20 f8 d1 4f 7e f6 8b 5f fd e6 77 7f f0 47 7f f2 67 7f f1 57 7f f3 77 ff f0 4f ff f2 6f ff f1 5f ff f3 7f ff 29 30 18 77 ff 40 98 96 ed b8 dc 1e af cf 6f f8 8f 5f be 3b 77 7e 7e 4a dd 84 d6 1e 5d 63 fb 44 d1 55 95 a0 f0 51 d8 a1 75 25 51 f1 cf 41 37 02 61 53 77 7f 19 0b 6d e9 48 77 06 60 e9 e5 9b 0d 00 5c b0 02 66 87 c8 d8 06 81 5a a7 4b 99 1a 00 4c 7c 2e fa 13 a5 4f 48 4d 37 3d 70 26 c7 47 93 e8 c8 2b 21 Data Ascii: wOF2b9b6$ `D*Hm %y)=<Ep\ O~_wGgWwOo_)0w@o_;w~~J]cDUQu%QA7aSwmHw`\fZKL\|.OHM7=p&G+!
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: 70 61 d2 c6 d7 47 22 b4 3b 79 fc 09 55 ad 7f 6f 50 06 03 cc 0c 40 a2 8c 24 4a 22 45 88 80 aa c5 11 48 c0 96 ed 84 76 e4 2d d5 97 4d 2b da d6 bd c9 15 67 2b 2f b9 d8 c9 b5 38 d7 2a b7 d6 dc 96 ce 6b dd d7 3a af ff df b7 34 67 77 c1 e3 c9 ca f9 af 5e 87 d7 af df eb d7 21 cd e4 9e e9 9d e9 dd 3c bd b3 33 bd b7 97 e6 f2 5e d2 ad ee a4 d3 9d 74 92 46 d2 49 3a 05 c4 0a a1 88 84 46 88 20 21 c2 82 08 02 13 06 64 8c 04 06 9f 09 49 20 0d 60 03 06 1b 9f c1 36 c1 69 9d 71 fc b2 fd 6d 70 60 f6 ff 27 55 fd de 7d 53 de bc 29 6f 4a 43 21 88 01 86 c0 80 05 04 86 43 60 40 51 65 24 51 cd 95 ae 2a 69 48 b1 be 5c 12 c3 6b ad 8f 1d 39 6b f8 7b 5d ff 89 4d 6f 22 47 4e 45 aa e5 c4 67 97 a9 76 ca f9 41 5a 57 5a e7 ef 8e b7 29 a5 7d 9f 80 ff 87 d3 aa fa 25 28 95 a0 c4 96 21 4e 4b Data Ascii: paG";yUoP@$J"EHv-M+g+/8k:4gw^!<3^tFI:F !dI `6iqmp`'U}S)oJC!C`@Qe$QiH\k9k{]Mo"GNEgvAZWZ)}%(!NK
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: c9 43 23 c7 cd 3f 81 9f f0 f6 f4 1d b3 c3 a0 e2 f7 3a cd ed 77 49 83 29 d3 67 76 59 19 ff 5e 04 a6 87 7e e6 1b cf 29 07 66 9f 3f b7 fc 8c 6c 10 fc 9b 0e 1b 39 d4 4f e3 3a f0 7c 57 9f 56 c6 b7 92 ec e8 5c f7 2e 71 8e d4 55 a2 9f ea 5b 4c d7 a9 f1 59 63 cd 91 05 a6 ca 71 cb 31 8b 7d 1b bc 20 b0 e7 0b e1 a2 7c 3b 97 58 17 c7 74 d5 7a 98 b1 60 fa a8 1e dd 53 7b a6 f7 ca 38 6c c1 1f 56 3e 7a b6 18 39 f2 ec 6b ab 5a 82 a1 17 c4 35 18 c9 5d 45 e6 de 45 c8 fa 68 d0 cd f2 f8 99 c9 a1 dc f6 67 eb 71 9e 36 d0 6b 0f fc 30 79 a6 82 45 b3 d5 e3 cd 50 fd 66 d9 67 d5 57 8f b6 57 75 ed ed ca cb 7e d3 d8 5e 3d af ff 0c 87 ae 38 84 17 f7 48 5f b3 fa 9c c7 7e bc 4e fa 95 ed 85 fa 5c 41 85 0f 37 68 54 73 53 3d 39 83 4f 2e ff 54 d2 d3 e3 84 de 1a 7f ae 50 cd 76 fd 34 c7 ed 5f Data Ascii: C#?:wI)gvY^~)f?l9O:\|WV\.qU[LYcq1} \|;Xtz`S{8lV>z9kZ5]EEhgq6k0yEPfgWWu~^=8H_~N\A7hTsS=9O.TPv4_
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: 3b cf f9 ae c0 d5 71 75 5d 3d 57 df ed 70 b5 ee a5 7b e5 de ba 77 ee a3 fb ec 7e b8 9f ee b7 fb 57 7a 27 d8 1f 5c 0d 6a 83 67 c1 ef e0 0f 41 45 8f 3e d3 98 c5 22 1a 46 e8 18 b0 1e 1b b0 11 1b b3 0d db b2 33 43 76 e5 08 8e e4 28 8e e6 18 8e e5 64 4e 61 19 97 73 05 57 b3 9c 15 ac 64 15 ab 59 c3 4d dc ca 1d dc c5 fd 3c c0 83 3c c4 c3 3c c2 a3 3c c6 e3 3c c1 93 3c c5 8b bc c3 bb 7c cc 27 7c ca 17 7c c9 57 fc ce 5f fc 2b 10 2d be 44 49 9c c4 4b 82 24 4a 8a a4 49 ba 64 48 a6 64 49 b6 14 89 95 a6 d2 5d 7a 4a 2f e9 23 03 65 90 0c 96 a1 32 49 b6 c8 56 d9 56 b7 45 5d 3c 94 cc 9f 30 7f fa fc 19 f2 e7 c8 df c4 c5 72 09 5d 32 57 d5 8d 72 b3 dc 1a b7 ce ed 75 07 dc 09 77 da 9d 77 77 dc 53 f7 c6 a9 14 95 0a 52 45 9a 49 77 e9 2b 03 65 bc cc 94 c5 b2 5e f6 c8 11 b9 20 17 Data Ascii: ;qu]=Wp{w~Wz'\jgAE>"F3Cv(dNasWdYM<<<<<<\|'\|\|W_+-DIK$JIdHdI]zJ/#e2IVVE]<0r]2WruwwwSREIw+e^
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: 4c d3 68 26 2d a0 45 b4 94 56 ab 7f 96 2e d1 d5 5f e7 11 bd a0 d7 f4 99 82 e8 2b 85 71 2a 2e c8 85 b8 18 17 e7 d2 5c 86 ab 71 75 5e c1 5b 78 27 ef e7 13 7c 9a cf f3 15 be c3 8f f8 a9 e6 fe 3c bf 88 33 ce 29 f9 a4 b0 94 91 0a 1b 6a 21 6d a5 93 74 97 9e d2 4f db 1a 2b 13 64 8a 4c 93 39 b2 5a d6 ca 56 4d 9e 9e df 8d 5d 3e 49 d0 ce bf 45 1d 46 fe 23 01 12 23 e5 9c 79 51 00 85 51 e1 cb 34 43 6b b4 47 67 f4 c3 00 0c c1 70 4c c4 54 cc c0 6c 2c c4 0a 7d f4 2d d8 8e 9d d8 87 43 38 85 73 b8 84 2b b8 8e 9b b8 87 87 da 05 0f f7 ff bf e9 fd 3a 20 3d 35 31 35 a5 5f 38 b5 48 6a f1 05 57 e9 cf 4d 5d 9c ba 6c 3e e7 fe ae 26 e7 45 ce f3 9c c7 39 f7 73 ee e2 c7 76 4e d9 1a 65 2b 95 2d 17 ff c6 67 f1 46 3c 17 cf c6 fd 71 6f dc 13 77 c5 ed 40 5c 19 17 c7 05 b1 7e ac 11 ab c6 Data Ascii: Lh&-EV._+q*.\qu^[x'\|<3)j!mtO+dL9ZVM]>IEF##yQQ4CkGgpLTl,}-C8s+: =515_8HjWM]l>&E9svNe+-gF<qow@\~
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: 9b 00 04 4b 80 84 9c 98 f5 0d 6c 1e 60 97 82 d7 80 4d 03 6c 0a 10 b4 0a da 00 81 3c f4 46 b4 c6 0f da c7 35 fa 7e e0 fb e8 04 f0 3d f4 58 cf c0 8c 68 1f bf 37 ab 3b 74 07 8c f8 41 f6 17 4a 1b 60 95 1a 67 9e 8b 36 81 ee c7 3f 31 ed 18 b0 a3 c0 0e 02 db 03 4e d5 77 71 19 b7 51 59 3d f9 eb da 10 4e 22 a3 0a f5 69 40 43 1a d1 98 26 34 a5 19 cd 69 41 4b 5a 51 41 6b da 50 a0 48 25 39 6d 29 11 94 69 47 7b 3a d0 91 4e 74 a6 0b 5d b9 9a bb ec 72 bb c2 ae b4 eb ec 7a bb c9 6e b1 5b ed 2e bb cf 9e b0 27 ed 29 7b cb de b7 0f ec 43 fb c8 3e b6 4f ec 53 fb dc be b0 2f ed 1b fb d6 be b3 9f ec 67 fb c5 7e b5 3f 6d 9e 2d b2 15 b6 d2 36 d8 46 49 d5 d5 54 cd 55 a1 92 ba aa 9b 7a a8 af fa a9 bf 06 6b a8 46 6b 8c c6 6a 82 26 6a 92 26 6b ba 66 68 96 e6 68 57 1d ab 93 75 aa ce Data Ascii: Kl`Ml<F5~=Xh7;tAJ`g6?1NwqQY=N"i@C&4iAKZQAkPH%9m)iG{:Nt]rzn[.'){C>OS/g~?m-6FITUzkFkj&j&kfhhWu
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: 6f 61 e8 22 d4 1f c3 56 d4 5f ad c5 d6 d4 03 d4 ed 78 ad 69 e6 61 2d b6 a3 59 84 66 f1 31 5a d3 2c 0d ec 4c b3 2e ec 42 b3 1d ec 4a b3 0b ec 46 b3 07 ec 4e 73 d8 5a ec 41 73 3c cd 09 63 b0 a6 39 8b b5 d8 9b e6 52 9a cb c6 5c 4d 73 33 b0 1f cd dd b0 3f cd e3 70 00 cd f3 70 20 cd cb 70 10 cd 7b 70 30 cd 07 70 08 cd 47 70 28 cd 0f 70 18 cd 2f 70 38 cd ef 70 04 cd ff 70 24 fd 91 63 38 8a fe b4 f4 a7 c3 d1 f4 e7 10 1c 4b 7f 09 38 8e fe 29 70 3c fd cb e1 04 fa 0f c1 89 f4 1f 83 93 e8 bf 00 27 d3 7f 75 0c a7 d0 7f 83 fe 9b 38 95 fe a0 e0 74 fa df c1 19 0c 4c 05 67 32 70 d7 18 ce 62 e0 1e 06 ee c5 d9 0c fc 26 38 97 76 71 38 8f 76 85 31 9c 4f bb 12 ed ca b8 80 76 77 c1 45 b4 fb 7d 45 17 d3 1e 48 7b 10 2e a1 3d 94 f6 30 5c 46 7b b6 e0 0a da f3 e1 4a da 1b be a2 ab Data Ascii: oa"V_xia-Yf1Z,L.BJFNsZAs<c9R\Ms3?pp p{p0pGp(p/p8pp$c8K8)p<'u8tLg2pb&8vq8v1OvwE}EH{.=0\F{J
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: bf 92 b1 34 35 51 87 22 96 a1 0e 47 1d 91 58 81 3a a1 24 56 a1 4e 2c b1 2a 75 5a 89 d5 a8 b3 17 0c b9 99 3a 0f 75 de 73 6a 3b d4 75 a9 1b 8c 0f b2 ba d1 22 b1 2e 75 d3 88 58 8f ba 39 75 0b 62 7d ea 61 92 34 2f f5 f0 82 34 1f f5 68 ea 31 57 98 b2 7a 2a 12 1b 53 af 2a 88 4d a8 0f 53 1f 99 a7 65 f5 31 24 36 a7 3e 25 b1 05 f5 b9 88 d8 92 fa 12 f5 15 62 2b ea 6b 92 d8 96 fa 91 c4 76 d4 4f 25 b6 a7 7e 25 b1 03 f5 a7 88 d8 91 fa 17 f5 6f 62 27 ea bf 92 c1 d9 d4 ff 25 76 a1 0d 2d b1 2b 6d 54 89 dd 68 93 4b ec 4e 9b 52 62 0f da 54 11 31 0d 6d 76 da 9c c4 9e b4 b9 55 10 fb d0 e6 a3 cd 7f 7d 2e 6b 0b 22 b1 3f 6d 11 89 03 68 8b 49 1c 48 5b 42 e2 20 da 52 12 07 d3 96 91 38 84 b6 82 c4 a1 b4 95 25 0e a3 ad 2a 71 38 6d 0d 89 23 68 eb 16 c4 91 b4 0d 69 1b cd 81 b3 b6 09 Data Ascii: 45Q"GX:$VN,uZ:usj;u".uX9ub}a4/4h1WzSMSe1$6>%b+kvO%~%ob'%v-+mThKNRbT1mvU}.k"?mhIH[B R8%q8m#hi
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: 3b 41 7e 29 b5 27 e4 cf 62 3b 43 fe 0f db 05 fd 7a 30 a9 ff 20 ef 44 ac 20 ef 4a ac 33 f2 ee a4 cd 8d bc 07 69 f3 20 ef 49 da bc c8 7b 91 d2 13 f9 60 52 ce 47 3e 9a d4 59 91 4f 20 ed 2f e4 13 49 4b e4 93 89 75 44 3e 85 58 27 e4 d3 89 2d 87 7c 56 52 1f 40 3e 1b 29 b7 20 9f 8b d8 4a c8 97 27 fa 0f f9 4a a4 1d 82 7c 65 b3 fb 6d 20 b6 3c f2 ed 48 1b 81 7c 0f 52 17 42 be 37 a9 8f 23 df 87 b4 b9 90 1f 4a f4 31 f2 c3 48 79 15 f9 e9 a4 5c 89 fc 6c 52 ef 43 7e 2e a9 5b 20 bf 88 e8 24 e4 17 93 b2 0f f2 ab 89 2e 47 7e 0d a9 7f 23 bf 91 b4 f3 91 df 46 ea a7 c8 ef 24 3a 16 f9 23 a4 ee 85 fc 51 52 d6 43 fe 18 b1 d9 91 3f 4e da 77 c8 9f 24 6d 7d e4 4f 11 fd 83 fc 19 52 0f 45 fe 1c 69 7b 21 7f 91 94 4f 90 bf 42 ea d1 c8 5f 27 f5 28 e4 6f 90 f6 15 f2 b7 48 db 1f f9 bb a4 Data Ascii: ;A~)'b;Cz0 D J3i I{`RG>YO /IKuD>X'-\|VR@>) J'J\|em <H\|RB7#J1Hy\lRC~.[ $.G~#F$:#QRC?Nw$m}OREi{!OB_'(oH
2024-12-31 23:22:31 UTC	1369	IN	Data Raw: 6b 5f 22 98 02 f0 da 57 08 f8 3f 01 af 7d 95 40 4e 01 5e bb 46 30 fe 0e f0 da b7 09 e6 ff 07 bc f6 1d 02 3c 0b f0 5a 4d 30 6a c0 27 1f 20 18 8f 02 3e f9 7a 02 39 09 f8 e4 e3 04 f3 2a e0 93 bf 48 30 2d c0 27 3f 41 30 fe 37 e0 93 bf fe 9f 14 cc c7 c0 02 98 4f 71 8c 53 b0 41 40 04 2d 18 02 54 15 ad 72 dd 50 45 5a e4 9a 56 2a 57 0d 4d ab b4 48 95 ae 7a 65 a5 75 59 ad e9 44 25 aa a1 6d 6a d3 35 9d e5 59 de 18 dd 71 c7 1d 77 e4 4f 3c f1 c4 1d b7 8f 6f bf fd f6 db 8b 27 9e 78 e2 f6 3b ea ff 42 21 23 ec 44 52 20 0a 19 d5 b3 48 0a 3c b8 74 e9 d2 a5 fa 6b 07 97 2e 4d 2f 5d ba 84 fc d2 f4 d2 a5 20 92 02 51 c8 a8 3e 8a a4 40 14 32 c2 09 00 00 99 7f 75 3e 83 67 e3 04 62 e8 02 84 83 5c eb 2c ed 52 3b 6e e8 48 25 c5 7e 55 0e 1b 46 59 95 79 96 db d4 56 89 1a 31 26 25 63 Data Ascii: k_"W?}@N^F0<ZM0j' >z9H0-'?A07OqSA@-TrPEZVWMHzeuYD%mj5YqwO<o'x;B!#DR H<tk.M/] Q>@2u>gb\,R;nH%~UFYyV1&%c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49766	216.58.206.46	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	489	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:31 UTC	612	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:31 UTC	778	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 62 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 62 61 2e 63 Data Ascii: reStackTrace)Error.captureStackTrace(this,_.ba);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};ca=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.ba.c
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 67 29 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 64 3b 72 65 74 75 72 6e 20 Data Ascii: sOwnProperty.call(e,g)\|\|(e[g]=!0,b[c++]=f)}b.length=c};Da=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};Ea=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};_.Fa=function(a){var b=[],c=0,d;for(d in a)b[c++]=d;return
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 72 69 70 74 22 2c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 0a 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 57 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 5f 2e 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 58 61 3f 21 21 5f 2e 59 61 26 26 5f 2e 59 61 2e 62 72 61 6e 64 73 2e 6c 65 6e Data Ascii: ript",a.ownerDocument&&a.ownerDocument.defaultView\|\|window))&&a.setAttribute("nonce",b)};_.Wa=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return _.Wa().indexOf(a)!=-1};_.Za=function(){return _.Xa?!!_.Ya&&_.Ya.brands.len
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f 2e 72 62 3d 71 62 28 74 68 69 73 29 3b 0a 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 5f 2e 72 62 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 Data Ascii: al];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.rb=qb(this);w=function(a,b){if(b)a:{var c=_.rb;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 6f 6e 73 74 72 75 63 74 29 7b 69 66 28 61 28 29 29 72 65 74 75 72 6e 20 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3b 76 61 72 20 62 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 63 3d 62 28 63 2c 64 29 3b 65 26 26 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 63 2c 65 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 63 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 63 29 3b 65 3d 74 62 28 65 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 Data Ascii: onstruct){if(a())return Reflect.construct;var b=Reflect.construct;return function(c,d,e){c=b(c,d);e&&Reflect.setPrototypeOf(c,e.prototype);return c}}return function(c,d,e){e===void 0&&(e=c);e=tb(e.prototype\|\|Object.prototype);return Function.prototype.app
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 43 62 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 44 62 7d 29 3b 5f 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 7b 7d 7d 29 3b 77 28 22 Data Ascii: =arguments[c];if(d)for(var e in d)Cb(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|Db});_.eb=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Reflect",function(a){return a?a:{}});w("
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 68 3d 21 31 7d 68 3f 74 68 69 73 2e 47 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6f 61 28 68 2c 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 Data Ascii: h=!1}h?this.G(g):this.s(g)}};e.prototype.G=function(g){var h=void 0;try{h=g.then}catch(l){this.o(l);return}typeof h=="function"?this.oa(h,g):this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 74 68 69 73 2e 68 3d 3d 0a 6e 75 6c 6c 3f 66 2e 68 28 6c 29 3a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: ){return this.then(void 0,g)};e.prototype.Ld=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;this.h==null?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g){return n
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 Data Ascii: m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$jscomp_hi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49771	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	914	OUT	GET /media/hrwichhw/fastrak_logo_2024.svg?rmode=max&width=341&height=254 HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	346	IN	HTTP/1.1 200 OK Etag: "1db0ecaa317fa07" Last-Modified: Tue, 24 Sep 2024 21:42:22 GMT Content-Type: image/svg+xml Content-Length: 2311 Cache-Control: max-age=71093, public Expires: Wed, 01 Jan 2025 19:07:24 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 16-194337326-0 0CNN RT(1735687351110 290) q(0 -1 -1 -1) r(1 -1)
2024-12-31 23:22:31 UTC	1106	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 35 31 2e 33 39 20 33 35 31 2e 33 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 61 35 31 38 39 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 38 63 39 35 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 451.39 351.39"> <defs> <style> .cls-1 { fill: #a51890; } .cls-2 { fill: #008c95; } </style> </de
2024-12-31 23:22:31 UTC	1205	IN	Data Raw: 2c 37 2e 31 37 2d 36 2e 31 38 2c 37 2e 34 31 2d 38 2e 38 36 2c 37 2e 37 37 4d 34 33 30 2e 39 33 2c 32 37 30 2e 32 68 2d 32 34 2e 30 33 6c 2d 32 32 2e 34 37 2c 32 34 2e 34 38 2c 35 2e 34 31 2d 32 34 2e 34 38 68 2d 32 30 2e 34 37 6c 2d 31 33 2e 35 33 2c 36 32 2e 33 35 2d 31 30 2e 34 36 2d 36 32 2e 33 35 68 2d 32 32 2e 39 38 6c 2d 33 34 2e 39 35 2c 35 37 2e 36 31 63 2d 2e 37 33 2d 34 2e 34 36 2d 31 2e 33 37 2d 31 31 2e 32 34 2d 32 2e 35 33 2d 31 35 2e 33 33 2d 31 2e 35 37 2d 35 2e 36 39 2d 35 2e 39 39 2d 38 2e 34 35 2d 35 2e 39 39 2d 38 2e 34 35 2c 30 2c 30 2c 31 38 2e 34 39 2d 31 2e 30 37 2c 31 38 2e 34 39 2d 31 38 2e 30 35 73 2d 31 37 2e 39 39 2d 31 35 2e 37 38 2d 31 37 2e 39 39 2d 31 35 2e 37 38 68 2d 33 33 2e 33 35 6c 2d 31 35 2e 31 36 2c 36 38 2e 35 36 Data Ascii: ,7.17-6.18,7.41-8.86,7.77M430.93,270.2h-24.03l-22.47,24.48,5.41-24.48h-20.47l-13.53,62.35-10.46-62.35h-22.98l-34.95,57.61c-.73-4.46-1.37-11.24-2.53-15.33-1.57-5.69-5.99-8.45-5.99-8.45,0,0,18.49-1.07,18.49-18.05s-17.99-15.78-17.99-15.78h-33.35l-15.16,68.56

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49728	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:31 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:31 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6Te-uug3L6QWLohZkz7RqQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:31 UTC	124	IN	Data Raw: 37 37 66 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6c 61 20 63 6c 69 70 70 65 72 73 20 76 73 20 73 70 75 72 73 20 70 72 65 64 69 63 74 69 6f 6e 22 2c 22 6d 61 72 76 65 6c 20 66 72 69 65 6e 64 6c 79 20 6e 65 69 67 68 62 6f 72 68 6f 6f 64 20 73 70 69 64 65 72 20 6d 61 6e 22 2c 22 69 72 73 20 73 74 69 6d 75 6c 75 73 20 63 68 65 63 6b 73 22 2c 22 67 65 6e 73 68 69 6e 20 69 6d Data Ascii: 77f)]}'["",["la clippers vs spurs prediction","marvel friendly neighborhood spider man","irs stimulus checks","genshin im
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 70 61 63 74 20 35 2e 33 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 66 63 20 62 61 72 63 65 6c 6f 6e 61 20 64 61 6e 69 20 6f 6c 6d 6f 22 2c 22 66 6f 6f 64 20 72 65 63 61 6c 6c 73 22 2c 22 72 6f 79 61 6c 20 63 61 72 69 62 62 65 61 6e 20 6e 65 77 20 62 65 76 65 72 61 67 65 20 70 6f 6c 69 63 79 22 2c 22 77 68 61 74 73 61 70 70 20 32 30 32 35 20 75 70 64 61 74 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a Data Ascii: pact 5.3 release date","fc barcelona dani olmo","food recalls","royal caribbean new beverage policy","whatsapp 2025 update"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZ
2024-12-31 23:22:31 UTC	412	IN	Data Raw: 46 77 65 6b 70 49 53 45 5a 55 54 58 68 53 53 57 78 7a 61 32 70 6a 59 57 68 32 57 55 64 34 57 57 55 76 5a 6c 6c 5a 55 7a 64 56 59 57 46 56 4e 45 31 55 54 58 42 61 54 6b 64 58 54 58 52 36 59 56 42 76 65 6b 78 74 61 30 70 74 56 55 74 52 4d 48 4a 74 4b 33 4e 59 53 6a 64 53 55 45 52 6b 63 6c 70 6f 64 6e 51 30 57 56 52 36 4c 79 39 42 51 6d 46 61 59 55 30 78 56 6b 56 77 61 32 6c 4a 54 33 42 53 64 56 55 34 4c 7a 4d 31 5a 6a 4e 4f 61 58 46 4a 4e 57 39 30 56 44 5a 57 54 33 56 35 65 45 4d 31 52 6e 4a 45 5a 6e 68 32 64 69 74 51 54 45 5a 49 53 30 30 32 62 58 6c 68 4e 6b 38 7a 56 6e 42 44 5a 44 41 33 55 56 70 51 4f 45 46 71 5a 54 4e 34 64 6a 64 5a 4e 45 52 6b 62 47 5a 68 54 6e 6c 76 62 31 56 4c 4c 33 5a 4e 4d 55 55 77 57 57 78 4e 4e 55 68 69 56 6d 5a 30 56 56 64 31 59 Data Ascii: FwekpISEZUTXhSSWxza2pjYWh2WUd4WWUvZllZUzdVYWFVNE1UTXBaTkdXTXR6YVBvekxta0ptVUtRMHJtK3NYSjdSUERkclpodnQ0WVR6Ly9BQmFaYU0xVkVwa2lJT3BSdVU4LzM1ZjNOaXFJNW90VDZWT3V5eEM1RnJEZnh2ditQTEZIS002bXlhNk8zVnBDZDA3UVpQOEFqZTN4djdZNERkbGZhTnlvb1VLL3ZNMUUwWWxNNUhiVmZ0VVd1Y
2024-12-31 23:22:31 UTC	92	IN	Data Raw: 35 36 0d 0a 64 31 4a 61 57 57 38 79 62 45 39 6e 54 6d 52 4f 64 45 49 35 56 47 64 30 51 6c 59 78 5a 45 78 54 53 6d 31 73 54 57 46 56 56 6b 31 4e 61 32 70 53 65 46 5a 54 62 56 70 5a 59 6a 49 77 62 46 52 35 57 46 56 46 4d 6c 6b 7a 64 6d 4d 72 64 55 45 79 62 57 64 35 64 31 0d 0a Data Ascii: 56d1JaWW8ybE9nTmROdEI5VGd0QlYxZExTSm1sTWFVVk1Na2pSeFZTbVpZYjIwbFR5WFVFMlkzdmMrdUEybWd5d1
2024-12-31 23:22:31 UTC	1390	IN	Data Raw: 38 61 38 0d 0a 49 77 5a 45 39 4b 53 45 4d 33 55 6b 73 79 62 46 4e 6b 5a 30 4e 6d 65 57 56 6a 56 44 51 34 61 48 67 32 57 46 70 4e 4d 32 56 76 64 32 70 78 62 55 51 31 51 6e 68 53 55 6d 5a 78 59 69 74 4a 56 45 78 44 64 56 63 78 4f 56 5a 59 57 6d 70 6b 54 32 31 76 4d 47 52 52 63 58 52 6f 64 33 52 36 65 47 55 72 62 7a 49 31 4f 45 31 54 63 33 64 36 56 32 35 79 53 6b 70 4a 53 56 70 53 54 54 5a 32 4d 6d 35 51 65 6a 4a 53 4d 30 52 31 4f 58 4e 61 59 57 39 75 63 6b 30 30 62 45 70 6c 53 6e 70 43 51 55 35 6a 5a 32 6c 52 4e 6c 56 43 4e 56 6b 79 4e 48 5a 7a 54 47 35 35 52 30 74 57 51 6c 52 56 65 6b 56 50 61 32 46 4e 54 46 64 44 53 54 4a 72 63 31 42 4b 61 48 6f 32 59 6d 56 61 65 46 46 57 4e 55 4e 79 62 55 4e 50 62 7a 52 30 4f 55 45 78 54 45 35 50 64 33 42 78 55 55 5a 42 Data Ascii: 8a8IwZE9KSEM3UksybFNkZ0NmeWVjVDQ4aHg2WFpNM2Vvd2pxbUQ1QnhSUmZxYitJVExDdVcxOVZYWmpkT21vMGRRcXRod3R6eGUrbzI1OE1Tc3d6V25ySkpJSVpSTTZ2Mm5QejJSM0R1OXNaYW9uck00bEplSnpCQU5jZ2lRNlVCNVkyNHZzTG55R0tWQlRVekVPa2FNTFdDSTJrc1BKaHo2YmVaeFFWNUNybUNPbzR0OUExTE5Pd3BxUUZB
2024-12-31 23:22:31 UTC	833	IN	Data Raw: 48 56 48 4e 42 54 45 63 30 4f 45 39 43 5a 6a 56 33 57 45 38 31 53 58 41 32 59 56 4e 58 62 46 45 78 55 6c 4a 6b 56 54 4a 70 5a 45 64 44 63 6d 59 33 63 6d 4a 72 4e 32 74 59 4f 57 56 6a 53 6b 78 6a 5a 30 5a 46 64 56 52 47 4e 47 5a 4d 53 31 4e 4d 4c 30 68 79 4e 58 64 46 54 54 42 4e 62 46 51 35 56 6b 74 77 4e 6c 56 44 61 30 52 69 64 6b 6f 31 53 48 67 72 59 31 64 46 57 55 31 73 4c 33 5a 52 61 6d 30 7a 5a 44 56 71 52 31 52 76 53 79 74 58 62 33 46 4a 4e 6c 56 52 63 55 6b 79 5a 54 56 46 5a 48 68 5a 5a 44 6b 72 4e 6a 46 7a 59 55 5a 34 53 55 74 78 54 6d 77 78 53 58 46 78 4d 58 6c 48 4d 6d 4a 71 57 57 6f 7a 52 30 74 7a 5a 57 68 52 61 30 4a 5a 63 32 4a 4e 4c 7a 6c 72 50 54 6f 6e 62 57 46 79 64 6d 56 73 49 47 5a 79 61 57 56 75 5a 47 78 35 49 47 35 6c 61 57 64 6f 59 6d Data Ascii: HVHNBTEc0OE9CZjV3WE81SXA2YVNXbFExUlJkVTJpZEdDcmY3cmJrN2tYOWVjSkxjZ0ZFdVRGNGZMS1NML0hyNXdFTTBNbFQ5VktwNlVDa0Ridko1SHgrY1dFWU1sL3ZRam0zZDVqR1RvSytXb3FJNlVRcUkyZTVFZHhZZDkrNjFzYUZ4SUtxTmwxSXFxMXlHMmJqWWozR0tzZWhRa0JZc2JNLzlrPTonbWFydmVsIGZyaWVuZGx5IG5laWdoYm
2024-12-31 23:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49778	216.58.206.78	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	1234	OUT	POST /g/collect?v=2&tid=G-FXMPC209X2&gtm=45je4cc1v9123471210za200&_p=1735687348951&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=412420669.1735687350&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1735687350&sct=1&seg=0&dl=https%3A%2F%2Fthetollroads.com%2F&dt=Home%20%7C%20The%20Toll%20Roads&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3751 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://thetollroads.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:31 UTC	847	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://thetollroads.com Date: Tue, 31 Dec 2024 23:22:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49779	108.177.15.155	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	852	OUT	POST /g/collect?v=2&tid=G-FXMPC209X2&cid=412420669.1735687350&gtm=45je4cc1v9123471210za200&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://thetollroads.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:31 UTC	847	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://thetollroads.com Date: Tue, 31 Dec 2024 23:22:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49780	172.217.18.2	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	989	OUT	GET /td/ga/rul?tid=G-FXMPC209X2&gacid=412420669.1735687350&gtm=45je4cc1v9123471210za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1254518336 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:31 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 31 Dec 2024 23:22:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 31-Dec-2024 23:37:31 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:31 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-12-31 23:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49782	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	1122	OUT	GET /site-media/icons/icon_footer-phone.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
2024-12-31 23:22:31 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db522f706268a3" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 675 Cache-Control: max-age=33281, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 17-227071242-227053721 2CNN RT(1735687351485 273) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:31 UTC	675	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 2e 39 35 20 32 39 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 2e 39 38 2e 34 38 43 36 2e 39 37 2e 34 38 2e 34 38 2c 36 2e 39 37 2e 34 38 2c 31 34 2e 39 38 73 36 2e 34 39 2c 31 34 2e 35 2c 31 34 2e 35 2c 31 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49783	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	984	OUT	GET /media/lzdjsoqt/download_on_the_app_store_badge.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:31 UTC	347	IN	HTTP/1.1 200 OK Etag: "1dadc1244a45f41" Last-Modified: Mon, 22 Jul 2024 08:36:38 GMT Content-Type: image/svg+xml Content-Length: 12353 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 18-261310716-0 0CNN RT(1735687351492 274) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:31 UTC	1105	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 34 2c 30 2e 30 33 33 2d 34 2e 31 34 32 2c 31 2e 32 37 32 2d 35 2e 32 34 2c 33 2e 31 39 36 0d 0a 09 09 09 09 63 2d 32 2e 32 36 36 2c 33 2e 39 32 33 2d 30 2e 35 37 36 2c 39 2e 36 38 38 2c 31 2e 35 39 35 2c 31 32 2e 38 35 39 63 31 2e 30 38 36 2c 31 2e 35 35 33 2c 32 2e 33 35 35 2c 33 2e 32 38 37 2c 34 2e 30 31 36 2c 33 2e 32 32 36 63 31 2e 36 32 35 2d 30 2e 30 36 37 2c 32 2e 32 33 32 2d 31 2e 30 33 36 2c 34 2e 31 39 33 2d 31 2e 30 33 36 0d 0a 09 09 09 09 63 31 2e 39 34 33 2c 30 2c 32 2e 35 31 33 2c 31 2e 30 33 36 2c 34 2e 32 30 37 2c 30 2e 39 39 37 63 31 2e 37 34 34 2d 30 2e 30 32 38 2c 32 2e 38 34 32 2d 31 2e 35 36 2c 33 2e 38 39 2d 33 2e 31 32 37 63 31 2e 32 35 35 2d 31 2e 37 38 2c 31 2e 37 35 39 2d 33 2e 35 33 33 2c 31 2e 37 37 39 2d 33 2e 36 32 33 0d 0a Data Ascii: 4,0.033-4.142,1.272-5.24,3.196c-2.266,3.923-0.576,9.688,1.595,12.859c1.086,1.553,2.355,3.287,4.016,3.226c1.625-0.067,2.232-1.036,4.193-1.036c1.943,0,2.513,1.036,4.207,0.997c1.744-0.028,2.842-1.56,3.89-3.127c1.255-1.78,1.759-3.533,1.779-3.623
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 38 2c 36 32 2e 34 39 2c 32 36 2e 36 36 36 7a 22 2f 3e 0d 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 37 35 2e 36 39 39 2c 32 36 2e 35 38 38 63 30 2c 31 2e 36 33 32 2d 30 2e 34 34 31 2c 32 2e 39 32 32 2d 31 2e 33 32 34 2c 33 2e 38 36 39 63 2d 30 2e 37 38 39 2c 30 2e 38 34 33 2d 31 2e 37 37 2c 31 2e 32 36 34 2d 32 2e 39 34 31 2c 31 2e 32 36 34 0d 0a 09 09 09 63 2d 31 2e 32 36 34 2c 30 2d 32 2e 31 37 32 2d 30 2e 34 35 34 2d 32 2e 37 32 34 2d 31 2e 33 36 32 48 36 38 2e 36 37 76 35 2e 30 35 35 68 2d 32 2e 31 33 32 56 32 35 2e 30 36 37 63 30 2d 31 2e 30 32 36 2d 30 2e 30 32 37 2d 32 2e 30 37 39 2d 30 2e 30 37 39 2d 33 2e 31 35 39 68 31 2e 38 37 35 6c 30 2e 31 31 39 2c 31 2e 35 32 31 68 30 2e 30 34 0d 0a 09 09 09 63 30 2e Data Ascii: 8,62.49,26.666z"/><path fill="#FFFFFF" d="M75.699,26.588c0,1.632-0.441,2.922-1.324,3.869c-0.789,0.843-1.77,1.264-2.941,1.264c-1.264,0-2.172-0.454-2.724-1.362H68.67v5.055h-2.132V25.067c0-1.026-0.027-2.079-0.079-3.159h1.875l0.119,1.521h0.04c0.
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 0a 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 39 35 2e 30 38 38 2c 32 33 2e 35 30 38 68 2d 32 2e 33 35 76 34 2e 36 35 39 63 30 2c 31 2e 31 38 35 2c 30 2e 34 31 34 2c 31 2e 37 37 37 2c 31 2e 32 34 34 2c 31 2e 37 37 37 63 30 2e 33 38 31 2c 30 2c 30 2e 36 39 37 2d 30 2e 30 33 33 2c 30 2e 39 34 37 2d 30 2e 30 39 39 6c 30 2e 30 35 39 2c 31 2e 36 31 39 0d 0a 09 09 09 63 2d 30 2e 34 32 2c 30 2e 31 35 37 2d 30 2e 39 37 33 2c 30 2e 32 33 36 2d 31 2e 36 35 38 2c 30 2e 32 33 36 63 2d 30 2e 38 34 32 2c 30 2d 31 2e 35 2d 30 2e 32 35 37 2d 31 2e 39 37 35 2d 30 2e 37 37 63 2d 30 2e 34 37 33 2d 30 2e 35 31 34 2d 30 2e 37 31 31 2d 31 2e 33 37 36 2d 30 2e 37 31 31 2d 32 2e 35 38 37 76 2d 34 2e 38 33 37 68 2d 31 2e 34 76 2d 31 2e 36 68 Data Ascii: <path fill="#FFFFFF" d="M95.088,23.508h-2.35v4.659c0,1.185,0.414,1.777,1.244,1.777c0.381,0,0.697-0.033,0.947-0.099l0.059,1.619c-0.42,0.157-0.973,0.236-1.658,0.236c-0.842,0-1.5-0.257-1.975-0.77c-0.473-0.514-0.711-1.376-0.711-2.587v-4.837h-1.4v-1.6h
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 63 30 2e 39 34 37 2c 30 2c 31 2e 38 31 31 2d 30 2e 31 35 31 2c 32 2e 35 38 38 2d 30 2e 34 35 34 6c 30 2e 33 33 34 2c 31 2e 34 38 63 2d 30 2e 39 30 38 2c 30 2e 33 39 36 2d 31 2e 39 38 2c 30 2e 35 39 33 2d 33 2e 32 31 37 2c 30 2e 35 39 33 0d 0a 09 09 09 63 2d 31 2e 34 38 38 2c 30 2d 32 2e 36 35 36 2d 30 2e 34 33 38 2d 33 2e 35 30 36 2d 31 2e 33 31 33 63 2d 30 2e 38 34 38 2d 30 2e 38 37 35 2d 31 2e 32 37 33 2d 32 2e 30 35 2d 31 2e 32 37 33 2d 33 2e 35 32 34 63 30 2d 31 2e 34 34 37 2c 30 2e 33 39 35 2d 32 2e 36 35 32 2c 31 2e 31 38 36 2d 33 2e 36 31 33 0d 0a 09 09 09 63 30 2e 38 32 38 2d 31 2e 30 32 36 2c 31 2e 39 34 37 2d 31 2e 35 33 39 2c 33 2e 33 35 35 2d 31 2e 35 33 39 63 31 2e 33 38 33 2c 30 2c 32 2e 34 33 2c 30 2e 35 31 33 2c 33 2e 31 34 31 2c 31 2e 35 Data Ascii: c0.947,0,1.811-0.151,2.588-0.454l0.334,1.48c-0.908,0.396-1.98,0.593-3.217,0.593c-1.488,0-2.656-0.438-3.506-1.313c-0.848-0.875-1.273-2.05-1.273-3.524c0-1.447,0.395-2.652,1.186-3.613c0.828-1.026,1.947-1.539,3.355-1.539c1.383,0,2.43,0.513,3.141,1.5
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 38 38 2c 30 2e 33 31 31 2d 30 2e 32 38 31 2c 30 2e 36 39 2d 30 2e 32 38 31 2c 31 2e 31 33 38 0d 0a 09 09 09 09 63 30 2c 30 2e 34 33 35 2c 30 2e 30 39 34 2c 30 2e 38 30 38 2c 30 2e 32 38 31 2c 31 2e 31 31 39 63 30 2e 32 32 37 2c 30 2e 33 37 36 2c 30 2e 35 34 33 2c 30 2e 35 36 34 2c 30 2e 39 35 31 2c 30 2e 35 36 34 63 30 2e 34 2c 30 2c 30 2e 37 31 34 2d 30 2e 31 39 31 2c 30 2e 39 34 2d 30 2e 35 37 34 0d 0a 09 09 09 09 43 35 33 2e 37 32 35 2c 31 31 2e 38 38 32 2c 35 33 2e 38 32 32 2c 31 31 2e 35 30 36 2c 35 33 2e 38 32 32 2c 31 31 2e 30 37 31 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 36 32 2e 37 36 35 2c 38 2e 37 31 39 6c 2d 31 2e 34 37 35 2c 34 2e 37 31 34 68 2d 30 2e 39 36 6c 2d 30 2e 36 31 31 2d Data Ascii: 88,0.311-0.281,0.69-0.281,1.138c0,0.435,0.094,0.808,0.281,1.119c0.227,0.376,0.543,0.564,0.951,0.564c0.4,0,0.714-0.191,0.94-0.574C53.725,11.882,53.822,11.506,53.822,11.071z"/><path fill="#FFFFFF" d="M62.765,8.719l-1.475,4.714h-0.96l-0.611-
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 0a 09 09 09 09 63 2d 30 2e 32 31 39 2d 30 2e 33 37 36 2d 30 2e 35 33 33 2d 30 2e 35 36 34 2d 30 2e 39 33 39 2d 30 2e 35 36 34 63 2d 30 2e 34 32 32 2c 30 2d 30 2e 37 34 32 2c 30 2e 31 38 38 2d 30 2e 39 36 31 2c 30 2e 35 36 34 63 2d 30 2e 31 38 38 2c 30 2e 33 31 31 2d 30 2e 32 38 31 2c 30 2e 36 39 2d 30 2e 32 38 31 2c 31 2e 31 33 38 0d 0a 09 09 09 09 63 30 2c 30 2e 34 33 35 2c 30 2e 30 39 34 2c 30 2e 38 30 38 2c 30 2e 32 38 31 2c 31 2e 31 31 39 63 30 2e 32 32 37 2c 30 2e 33 37 36 2c 30 2e 35 34 33 2c 30 2e 35 36 34 2c 30 2e 39 35 31 2c 30 2e 35 36 34 63 30 2e 34 2c 30 2c 30 2e 37 31 33 2d 30 2e 31 39 31 2c 30 2e 39 33 39 2d 30 2e 35 37 34 0d 0a 09 09 09 09 43 37 36 2e 30 37 34 2c 31 31 2e 38 38 32 2c 37 36 2e 31 37 2c 31 31 2e 35 30 36 2c 37 36 2e 31 37 2c Data Ascii: c-0.219-0.376-0.533-0.564-0.939-0.564c-0.422,0-0.742,0.188-0.961,0.564c-0.188,0.311-0.281,0.69-0.281,1.138c0,0.435,0.094,0.808,0.281,1.119c0.227,0.376,0.543,0.564,0.951,0.564c0.4,0,0.713-0.191,0.939-0.574C76.074,11.882,76.17,11.506,76.17,
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 39 37 2c 30 2e 31 35 35 2d 30 2e 39 32 32 2c 30 2e 34 36 36 63 2d 30 2e 32 32 33 2c 30 2e 33 31 31 2d 30 2e 33 33 36 2c 30 2e 37 30 38 2d 30 2e 33 33 36 2c 31 2e 31 39 33 63 30 2c 30 2e 34 36 36 2c 30 2e 31 30 37 2c 30 2e 38 34 34 2c 30 2e 33 32 32 2c 31 2e 31 33 35 0d 0a 09 09 09 09 63 30 2e 32 32 37 2c 30 2e 33 31 2c 30 2e 35 33 33 2c 30 2e 34 36 35 2c 30 2e 39 31 36 2c 30 2e 34 36 35 63 30 2e 33 34 34 2c 30 2c 30 2e 36 31 39 2d 30 2e 31 32 39 2c 30 2e 38 32 38 2d 30 2e 33 38 38 43 38 37 2e 31 2c 31 32 2e 30 36 39 2c 38 37 2e 31 39 39 2c 31 31 2e 37 38 31 2c 38 37 2e 31 39 39 2c 31 31 2e 34 34 35 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 39 37 2e 32 34 38 2c 31 31 2e 30 33 37 63 30 2c 30 2e 37 Data Ascii: 97,0.155-0.922,0.466c-0.223,0.311-0.336,0.708-0.336,1.193c0,0.466,0.107,0.844,0.322,1.135c0.227,0.31,0.533,0.465,0.916,0.465c0.344,0,0.619-0.129,0.828-0.388C87.1,12.069,87.199,11.781,87.199,11.445z"/><path fill="#FFFFFF" d="M97.248,11.037c0,0.7
2024-12-31 23:22:31 UTC	1084	IN	Data Raw: 2e 33 35 2d 30 2e 36 37 36 2d 30 2e 33 35 2d 31 2e 32 37 31 56 39 2e 35 30 34 0d 0a 09 09 09 09 68 2d 30 2e 36 38 39 56 38 2e 37 31 39 68 30 2e 36 38 39 56 37 2e 38 35 35 6c 31 2e 30 32 37 2d 30 2e 33 31 76 31 2e 31 37 33 68 31 2e 31 35 34 56 39 2e 35 30 34 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 64 3d 22 4d 31 31 35 2e 34 38 34 2c 31 33 2e 34 33 33 68 2d 31 2e 30 34 39 76 2d 32 2e 36 38 63 30 2d 30 2e 38 34 35 2d 30 2e 33 31 36 2d 31 2e 32 36 38 2d 30 2e 39 34 39 2d 31 2e 32 36 38 63 2d 30 2e 34 38 36 2c 30 2d 30 2e 38 31 38 2c 30 2e 32 34 35 2d 31 2c 30 2e 37 33 35 0d 0a 09 09 09 09 63 2d 30 2e 30 33 31 2c 30 2e 31 30 33 2d 30 2e 30 34 39 2c 30 2e 32 32 39 2d 30 2e 30 34 39 2c 30 2e 33 37 37 76 32 2e 38 Data Ascii: .35-0.676-0.35-1.271V9.504h-0.689V8.719h0.689V7.855l1.027-0.31v1.173h1.154V9.504z"/><path fill="#FFFFFF" d="M115.484,13.433h-1.049v-2.68c0-0.845-0.316-1.268-0.949-1.268c-0.486,0-0.818,0.245-1,0.735c-0.031,0.103-0.049,0.229-0.049,0.377v2.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49784	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	1218	OUT	GET /site-media/icons/icon_footer-walk-in-center.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:31 UTC	349	IN	HTTP/1.1 200 OK Etag: "1db522f70626ea7" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 1191 Cache-Control: max-age=33281, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 13-81195693-81191463 2CNN RT(1735687351500 274) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:31 UTC	1191	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 2e 39 35 20 32 39 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 2e 39 38 2e 34 38 43 36 2e 39 37 2e 34 38 2e 34 38 2c 36 2e 39 37 2e 34 38 2c 31 34 2e 39 38 73 36 2e 34 39 2c 31 34 2e 35 2c 31 34 2e 35 2c 31 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49786	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:31 UTC	979	OUT	GET /media/e2ybixdp/google_play_store_badge_en.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:31 UTC	344	IN	HTTP/1.1 200 OK Etag: "1dadc123fdfa0e9" Last-Modified: Mon, 22 Jul 2024 08:36:30 GMT Content-Type: image/svg+xml Content-Length: 7145 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:31 GMT X-CDN: Imperva X-Iinfo: 4-12711065-0 0CNN RT(1735687351521 310) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:31 UTC	1108	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 73 76 67 35 31 22 20 77 69 64 74 68 3d 22 31 38 30 22 20 68 65 69 67 68 74 3d 22 35 33 2e 33 33 33 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 30 20 35 33 2e 33 33 33 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="svg51" width="180" height="53.333" version="1.1" viewBox="0 0 180 53.333" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elemen
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 30 34 76 2d 33 39 2e 39 39 39 63 30 2d 33 2e 30 38 37 39 20 32 2e 35 31 31 34 2d 35 2e 36 30 30 34 20 35 2e 35 39 39 33 2d 35 2e 36 30 30 34 68 31 36 36 2e 36 36 22 20 66 69 6c 6c 3d 22 23 61 32 61 32 61 31 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 31 33 33 33 33 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 33 35 22 20 64 3d 22 6d 31 34 32 2e 35 38 20 34 30 68 32 2e 34 38 37 39 76 2d 31 36 2e 36 36 39 68 2d 32 2e 34 38 37 39 7a 6d 32 32 2e 34 30 39 2d 31 30 2e 36 36 34 2d 32 2e 38 35 31 39 20 37 2e 32 32 36 34 68 2d 30 2e 30 38 35 33 6c 2d 32 2e 39 35 39 39 2d 37 2e 32 32 36 34 68 2d 32 2e 36 37 39 39 6c 34 2e 34 33 39 39 20 31 30 2e 31 2d 32 2e 35 33 31 39 20 35 2e 36 31 38 35 68 32 2e 35 39 34 36 6c 36 2e 38 34 31 32 2d 31 35 2e 37 31 38 Data Ascii: 04v-39.999c0-3.0879 2.5114-5.6004 5.5993-5.6004h166.66" fill="#a2a2a1" stroke-width=".13333"/><path id="path35" d="m142.58 40h2.4879v-16.669h-2.4879zm22.409-10.664-2.8519 7.2264h-0.0853l-2.9599-7.2264h-2.6799l4.4399 10.1-2.5319 5.6185h2.5946l6.8412-15.718
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 39 35 33 2d 32 2e 38 35 36 37 2d 32 2e 30 31 38 38 6c 2d 32 2e 31 36 39 31 20 30 2e 39 30 32 30 36 63 30 2e 36 32 32 33 38 20 31 2e 35 30 33 20 32 2e 32 37 35 39 20 33 2e 33 35 31 20 35 2e 30 32 35 39 20 33 2e 33 35 31 20 32 2e 39 32 31 38 20 30 20 35 2e 33 39 32 2d 31 2e 37 31 38 38 20 35 2e 33 39 32 2d 35 2e 39 30 37 37 76 2d 31 30 2e 31 38 31 68 2d 32 2e 33 36 33 34 7a 6d 34 2e 30 38 32 32 20 39 2e 37 33 30 34 68 32 2e 34 39 30 36 76 2d 31 36 2e 36 36 39 68 2d 32 2e 34 39 30 36 7a 6d 36 2e 31 36 34 2d 35 2e 34 39 38 38 63 2d 30 2e 30 36 34 31 2d 32 2e 31 39 31 31 20 31 2e 36 39 37 38 2d 33 2e 33 30 37 38 20 32 2e 39 36 34 35 2d 33 2e 33 30 37 38 20 30 2e 39 38 38 35 31 20 30 20 31 2e 38 32 35 34 20 30 2e 34 39 34 32 35 20 32 2e 31 30 35 37 20 31 2e 32 Data Ascii: 953-2.8567-2.0188l-2.1691 0.90206c0.62238 1.503 2.2759 3.351 5.0259 3.351 2.9218 0 5.392-1.7188 5.392-5.9077v-10.181h-2.3634zm4.0822 9.7304h2.4906v-16.669h-2.4906zm6.164-5.4988c-0.0641-2.1911 1.6978-3.3078 2.9645-3.3078 0.98851 0 1.8254 0.49425 2.1057 1.2
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 31 2e 34 38 31 37 20 33 2e 34 33 36 38 2d 33 2e 32 30 30 35 20 33 2e 34 33 36 38 7a 6d 30 2d 39 2e 31 30 37 35 63 2d 33 2e 31 33 35 38 20 30 2d 35 2e 36 39 31 35 20 32 2e 33 38 34 32 2d 35 2e 36 39 31 35 20 35 2e 36 37 30 37 20 30 20 33 2e 32 36 35 20 32 2e 35 35 35 37 20 35 2e 36 37 30 37 20 35 2e 36 39 31 35 20 35 2e 36 37 30 37 20 33 2e 31 33 37 20 30 20 35 2e 36 39 32 37 2d 32 2e 34 30 35 37 20 35 2e 36 39 32 37 2d 35 2e 36 37 30 37 20 30 2d 33 2e 32 38 36 35 2d 32 2e 35 35 35 37 2d 35 2e 36 37 30 37 2d 35 2e 36 39 32 37 2d 35 2e 36 37 30 37 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 31 33 33 33 33 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 33 37 22 20 64 3d 22 6d 32 37 2e 36 32 32 20 32 35 2e 38 39 Data Ascii: 1.4817 3.4368-3.2005 3.4368zm0-9.1075c-3.1358 0-5.6915 2.3842-5.6915 5.6707 0 3.265 2.5557 5.6707 5.6915 5.6707 3.137 0 5.6927-2.4057 5.6927-5.6707 0-3.2865-2.5557-5.6707-5.6927-5.6707" fill="#fff" stroke-width=".13333"/><path id="path37" d="m27.622 25.89
2024-12-31 23:22:31 UTC	1452	IN	Data Raw: 39 30 36 32 34 20 30 2e 34 34 37 39 39 20 30 20 30 2e 38 37 35 30 34 20 30 2e 30 37 37 30 37 20 31 2e 32 36 36 36 20 30 2e 32 34 35 38 36 20 30 2e 33 39 31 37 32 20 30 2e 31 36 38 36 36 20 30 2e 37 30 36 32 35 20 30 2e 34 30 34 31 32 20 30 2e 39 35 32 31 31 20 30 2e 37 30 36 32 35 6c 30 2e 37 33 39 35 38 2d 30 2e 37 33 39 35 38 63 2d 30 2e 33 33 35 34 36 2d 30 2e 33 38 31 33 32 2d 30 2e 37 36 30 33 38 2d 30 2e 36 37 32 39 32 2d 31 2e 32 38 37 36 2d 30 2e 38 38 35 34 34 2d 30 2e 35 32 37 30 35 2d 30 2e 32 31 32 35 33 2d 31 2e 30 37 37 2d 30 2e 33 31 34 35 33 2d 31 2e 36 37 30 38 2d 30 2e 33 31 34 35 33 2d 31 2e 31 36 34 35 20 30 2d 32 2e 31 35 31 39 20 30 2e 34 30 34 31 32 2d 32 2e 39 35 38 32 20 31 2e 32 31 30 34 2d 30 2e 38 30 36 32 35 20 30 2e 38 30 38 Data Ascii: 90624 0.44799 0 0.87504 0.07707 1.2666 0.24586 0.39172 0.16866 0.70625 0.40412 0.95211 0.70625l0.73958-0.73958c-0.33546-0.38132-0.76038-0.67292-1.2876-0.88544-0.52705-0.21253-1.077-0.31453-1.6708-0.31453-1.1645 0-2.1519 0.40412-2.9582 1.2104-0.80625 0.808
2024-12-31 23:22:31 UTC	229	IN	Data Raw: 37 32 39 31 2d 32 2e 32 39 37 38 7a 6d 38 2e 37 37 30 36 20 31 2e 33 31 32 35 2d 30 2e 30 34 33 37 2d 31 2e 35 34 38 68 30 2e 30 34 33 37 6c 34 2e 30 37 39 31 20 36 2e 35 34 35 37 68 31 2e 30 37 37 76 2d 38 2e 30 32 34 39 68 2d 31 2e 30 33 31 32 76 34 2e 36 39 35 37 6c 30 2e 30 34 33 37 20 31 2e 35 34 38 68 2d 30 2e 30 34 33 37 6c 2d 33 2e 38 39 39 39 2d 36 2e 32 34 33 37 68 2d 31 2e 32 35 36 32 76 38 2e 30 32 34 39 68 31 2e 30 33 31 32 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 32 36 36 36 36 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: 7291-2.2978zm8.7706 1.3125-0.0437-1.548h0.0437l4.0791 6.5457h1.077v-8.0249h-1.0312v4.6957l0.0437 1.548h-0.0437l-3.8999-6.2437h-1.2562v8.0249h1.0312z" fill="#fff" stroke="#fff" stroke-miterlimit="10" stroke-width=".26666"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49788	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	1209	OUT	GET /media/d5kpftah/icon_facebook-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	347	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37adbc" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 700 Cache-Control: max-age=82205, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 6-15503328-15496225 2CNN RT(1735687351892 296) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:32 UTC	700	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 35 2e 35 20 31 32 35 2e 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 33 31 66 32 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125.5 125.5"> <defs> <style> .cls-1 { fill: #231f20; } .cls-2 { fill: #fff; } </style> </defs>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49789	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	962	OUT	GET /js/global.js?v=1734624164460 HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	351	IN	HTTP/1.1 200 OK Etag: "1db522f73443ba4" Last-Modified: Thu, 19 Dec 2024 16:02:49 GMT Content-Type: text/javascript Content-Length: 1663268 Cache-Control: max-age=33280, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 17-227071310-0 0CNN RT(1735687351912 289) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:32 UTC	1101	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 66 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 69 2c 21 30 29 3b 69 66 28 75 29 72 65 74 75 72 6e 20 75 28 69 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 70 3d 6e 5b 69 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}}
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 3b 0a 20 20 72 65 74 75 72 6e 20 6e 6f 64 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 77 6e 45 6c 65 6d 65 6e 74 20 7c 7c 20 6e 6f 64 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 68 61 64 6f 77 52 6f 6f 74 28 6e 6f 64 65 29 20 7b 0a 20 20 2f 2f 20 49 45 20 31 31 20 68 61 73 20 6e 6f 20 53 68 61 64 6f 77 52 6f 6f 74 0a 20 20 69 66 20 28 74 79 70 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 4f 77 6e 45 6c 65 6d 65 6e 74 20 3d 20 67 65 74 57 69 6e 64 6f 77 28 6e 6f 64 65 29 2e 53 68 61 64 6f 77 52 6f 6f 74 3b 0a 20 20 72 65 74 75 72 6e 20 6e Data Ascii: ; return node instanceof OwnElement \|\| node instanceof HTMLElement;}function isShadowRoot(node) { // IE 11 has no ShadowRoot if (typeof ShadowRoot === 'undefined') { return false; } var OwnElement = getWindow(node).ShadowRoot; return n
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 77 70 6f 72 74 28 29 20 26 26 20 69 73 46 69 78 65 64 53 74 72 61 74 65 67 79 3b 0a 20 20 76 61 72 20 78 20 3d 20 28 63 6c 69 65 6e 74 52 65 63 74 2e 6c 65 66 74 20 2b 20 28 61 64 64 56 69 73 75 61 6c 4f 66 66 73 65 74 73 20 26 26 20 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 20 3f 20 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 6f 66 66 73 65 74 4c 65 66 74 20 3a 20 30 29 29 20 2f 20 73 63 61 6c 65 58 3b 0a 20 20 76 61 72 20 79 20 3d 20 28 63 6c 69 65 6e 74 52 65 63 74 2e 74 6f 70 20 2b 20 28 61 64 64 56 69 73 75 61 6c 4f 66 66 73 65 74 73 20 26 26 20 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 20 3f 20 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 6f 66 66 73 65 74 54 6f 70 20 3a 20 30 29 29 20 2f 20 73 63 61 6c 65 59 3b 0a 20 20 76 61 72 20 77 69 64 74 68 Data Ascii: wport() && isFixedStrategy; var x = (clientRect.left + (addVisualOffsets && visualViewport ? visualViewport.offsetLeft : 0)) / scaleX; var y = (clientRect.top + (addVisualOffsets && visualViewport ? visualViewport.offsetTop : 0)) / scaleY; var width
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 69 6c 6c 20 62 65 0a 20 20 2f 2f 20 69 6e 63 6f 72 72 65 63 74 20 66 6f 72 20 52 54 4c 2e 0a 20 20 2f 2f 20 50 6f 70 70 65 72 20 31 20 69 73 20 62 72 6f 6b 65 6e 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 61 6e 64 20 6e 65 76 65 72 20 68 61 64 20 61 20 62 75 67 20 72 65 70 6f 72 74 20 73 6f 20 6c 65 74 27 73 20 61 73 73 75 6d 65 0a 20 20 2f 2f 20 69 74 27 73 20 6e 6f 74 20 61 6e 20 69 73 73 75 65 2e 20 49 20 64 6f 6e 27 74 20 74 68 69 6e 6b 20 61 6e 79 6f 6e 65 20 65 76 65 72 20 73 70 65 63 69 66 69 65 73 20 77 69 64 74 68 20 6f 6e 20 3c 68 74 6d 6c 3e 0a 20 20 2f 2f 20 61 6e 79 77 61 79 2e 0a 20 20 2f 2f 20 42 72 6f 77 73 65 72 73 20 77 68 65 72 65 20 74 68 65 20 6c 65 66 74 20 73 63 72 6f 6c 6c 62 61 72 20 64 6f 65 73 6e 27 74 20 63 61 75 73 65 20 61 6e Data Ascii: ill be // incorrect for RTL. // Popper 1 is broken in this case and never had a bug report so let's assume // it's not an issue. I don't think anyone ever specifies width on <html> // anyway. // Browsers where the left scrollbar doesn't cause an
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 54 4d 4c 45 6c 65 6d 65 6e 74 28 6f 66 66 73 65 74 50 61 72 65 6e 74 29 3b 0a 20 20 76 61 72 20 6f 66 66 73 65 74 50 61 72 65 6e 74 49 73 53 63 61 6c 65 64 20 3d 20 69 73 48 54 4d 4c 45 6c 65 6d 65 6e 74 28 6f 66 66 73 65 74 50 61 72 65 6e 74 29 20 26 26 20 69 73 45 6c 65 6d 65 6e 74 53 63 61 6c 65 64 28 6f 66 66 73 65 74 50 61 72 65 6e 74 29 3b 0a 20 20 76 61 72 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 3d 20 67 65 74 44 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 28 6f 66 66 73 65 74 50 61 72 65 6e 74 29 3b 0a 20 20 76 61 72 20 72 65 63 74 20 3d 20 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 65 6c 65 6d 65 6e 74 4f 72 56 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 2c 20 6f 66 66 73 65 74 50 61 72 65 6e 74 49 73 53 63 61 6c 65 64 Data Ascii: TMLElement(offsetParent); var offsetParentIsScaled = isHTMLElement(offsetParent) && isElementScaled(offsetParent); var documentElement = getDocumentElement(offsetParent); var rect = getBoundingClientRect(elementOrVirtualElement, offsetParentIsScaled
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 74 68 29 20 3c 3d 20 31 29 20 7b 0a 20 20 20 20 77 69 64 74 68 20 3d 20 63 6c 69 65 6e 74 52 65 63 74 2e 77 69 64 74 68 3b 0a 20 20 7d 0a 0a 20 20 69 66 20 28 4d 61 74 68 2e 61 62 73 28 63 6c 69 65 6e 74 52 65 63 74 2e 68 65 69 67 68 74 20 2d 20 68 65 69 67 68 74 29 20 3c 3d 20 31 29 20 7b 0a 20 20 20 20 68 65 69 67 68 74 20 3d 20 63 6c 69 65 6e 74 52 65 63 74 2e 68 65 69 67 68 74 3b 0a 20 20 7d 0a 0a 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 78 3a 20 65 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 4c 65 66 74 2c 0a 20 20 20 20 79 3a 20 65 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 54 6f 70 2c 0a 20 20 20 20 77 69 64 74 68 3a 20 77 69 64 74 68 2c 0a 20 20 20 20 68 65 69 67 68 74 3a 20 68 65 69 67 68 74 0a 20 20 7d 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 Data Ascii: th) <= 1) { width = clientRect.width; } if (Math.abs(clientRect.height - height) <= 1) { height = clientRect.height; } return { x: element.offsetLeft, y: element.offsetTop, width: width, height: height };}function ge
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 74 27 73 20 70 6f 73 69 74 69 6f 6e 2e 0a 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 6c 69 73 74 53 63 72 6f 6c 6c 50 61 72 65 6e 74 73 28 65 6c 65 6d 65 6e 74 2c 20 6c 69 73 74 29 20 7b 0a 20 20 76 61 72 20 5f 65 6c 65 6d 65 6e 74 24 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 3b 0a 0a 20 20 69 66 20 28 6c 69 73 74 20 3d 3d 3d 20 76 6f 69 64 20 30 29 20 7b 0a 20 20 20 20 6c 69 73 74 20 3d 20 5b 5d 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 73 63 72 6f 6c 6c 50 61 72 65 6e 74 20 3d 20 67 65 74 53 63 72 6f 6c 6c 50 61 72 65 6e 74 28 65 6c 65 6d 65 6e 74 29 3b 0a 20 20 76 61 72 20 69 73 42 6f 64 79 20 3d 20 73 63 72 6f 6c 6c 50 61 72 65 6e 74 20 3d 3d 3d 20 28 28 5f 65 6c 65 6d 65 6e 74 24 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 20 3d 20 65 6c 65 6d 65 6e 74 2e 6f 77 6e 65 72 Data Ascii: t's position.*/function listScrollParents(element, list) { var _element$ownerDocumen; if (list === void 0) { list = []; } var scrollParent = getScrollParent(element); var isBody = scrollParent === ((_element$ownerDocumen = element.owner
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 70 75 74 65 64 53 74 79 6c 65 28 65 6c 65 6d 65 6e 74 29 3b 0a 0a 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 43 73 73 2e 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 27 66 69 78 65 64 27 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 0a 20 20 76 61 72 20 63 75 72 72 65 6e 74 4e 6f 64 65 20 3d 20 67 65 74 50 61 72 65 6e 74 4e 6f 64 65 28 65 6c 65 6d 65 6e 74 29 3b 0a 0a 20 20 69 66 20 28 69 73 53 68 61 64 6f 77 52 6f 6f 74 28 63 75 72 72 65 6e 74 4e 6f 64 65 29 29 20 7b 0a 20 20 20 20 63 75 72 72 65 6e 74 4e 6f 64 65 20 3d 20 63 75 72 72 65 6e 74 4e 6f 64 65 2e 68 6f 73 74 3b 0a 20 20 7d 0a 0a 20 20 77 68 69 6c 65 20 28 69 73 48 54 4d 4c 45 6c 65 6d 65 6e 74 28 63 75 72 72 65 6e 74 4e 6f 64 65 29 20 26 26 20 Data Ascii: putedStyle(element); if (elementCss.position === 'fixed') { return null; } } var currentNode = getParentNode(element); if (isShadowRoot(currentNode)) { currentNode = currentNode.host; } while (isHTMLElement(currentNode) &&
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 6f 64 79 27 20 26 26 20 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6f 66 66 73 65 74 50 61 72 65 6e 74 29 2e 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 27 73 74 61 74 69 63 27 29 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 0a 20 20 7d 0a 0a 20 20 72 65 74 75 72 6e 20 6f 66 66 73 65 74 50 61 72 65 6e 74 20 7c 7c 20 67 65 74 43 6f 6e 74 61 69 6e 69 6e 67 42 6c 6f 63 6b 28 65 6c 65 6d 65 6e 74 29 20 7c 7c 20 77 69 6e 64 6f 77 3b 0a 7d 0a 0a 76 61 72 20 74 6f 70 20 3d 20 27 74 6f 70 27 3b 0a 76 61 72 20 62 6f 74 74 6f 6d 20 3d 20 27 62 6f 74 74 6f 6d 27 3b 0a 76 61 72 20 72 69 67 68 74 20 3d 20 27 72 69 67 68 74 27 3b 0a 76 61 72 20 6c 65 66 74 20 3d 20 27 6c 65 66 74 27 3b 0a 76 61 72 20 61 75 74 6f 20 3d 20 27 61 75 74 6f 27 3b 0a Data Ascii: ody' && getComputedStyle(offsetParent).position === 'static')) { return window; } return offsetParent \|\| getContainingBlock(element) \|\| window;}var top = 'top';var bottom = 'bottom';var right = 'right';var left = 'left';var auto = 'auto';
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 6d 6f 64 69 66 69 65 72 29 20 7b 0a 20 20 20 20 6d 61 70 2e 73 65 74 28 6d 6f 64 69 66 69 65 72 2e 6e 61 6d 65 2c 20 6d 6f 64 69 66 69 65 72 29 3b 0a 20 20 7d 29 3b 20 2f 2f 20 4f 6e 20 76 69 73 69 74 69 6e 67 20 6f 62 6a 65 63 74 2c 20 63 68 65 63 6b 20 66 6f 72 20 69 74 73 20 64 65 70 65 6e 64 65 6e 63 69 65 73 20 61 6e 64 20 76 69 73 69 74 20 74 68 65 6d 20 72 65 63 75 72 73 69 76 65 6c 79 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 28 6d 6f 64 69 66 69 65 72 29 20 7b 0a 20 20 20 20 76 69 73 69 74 65 64 2e 61 64 64 28 6d 6f 64 69 66 69 65 72 2e 6e 61 6d 65 29 3b 0a 20 20 20 20 76 61 72 20 72 65 71 75 69 72 65 73 20 3d 20 5b 5d 2e 63 6f 6e 63 61 74 28 6d 6f 64 69 66 69 65 72 2e 72 65 71 75 69 72 65 73 20 7c 7c 20 5b 5d 2c 20 6d 6f 64 69 66 69 65 Data Ascii: modifier) { map.set(modifier.name, modifier); }); // On visiting object, check for its dependencies and visit them recursively function sort(modifier) { visited.add(modifier.name); var requires = [].concat(modifier.requires \|\| [], modifie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49790	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	1210	OUT	GET /media/5p2brkd1/icon_instagram-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	348	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37a9da" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 1754 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:38 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 6-15503329-15499990 2CNN RT(1735687351934 275) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 35 2e 38 37 20 31 33 35 2e 38 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 32 33 31 66 32 30 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 63 78 3d 22 36 37 2e 39 33 22 20 63 79 3d 22 36 37 2e 39 33 22 20 72 3d 22 36 31 2e 32 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><circle class="cls-2" cx="67.93" cy="67.93" r="61.29" transform="tran
2024-12-31 23:22:32 UTC	302	IN	Data Raw: 30 35 2c 31 39 2e 32 36 5a 4d 36 37 2e 39 33 2c 38 30 2e 34 35 63 36 2e 38 34 2c 30 2c 31 32 2e 34 38 2d 35 2e 36 33 2c 31 32 2e 34 39 2d 31 32 2e 34 37 2c 30 2d 36 2e 38 34 2d 35 2e 36 33 2d 31 32 2e 34 39 2d 31 32 2e 34 37 2d 31 32 2e 34 39 2d 36 2e 38 36 2c 30 2d 31 32 2e 34 38 2c 35 2e 36 32 2d 31 32 2e 34 39 2c 31 32 2e 34 37 2c 30 2c 36 2e 38 34 2c 35 2e 36 33 2c 31 32 2e 34 38 2c 31 32 2e 34 37 2c 31 32 2e 34 39 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 39 32 2e 34 32 2c 34 37 2e 39 36 63 30 2c 32 2e 35 32 2d 32 2e 30 32 2c 34 2e 35 36 2d 34 2e 35 2c 34 2e 35 35 2d 32 2e 34 39 2d 2e 30 32 2d 34 2e 35 35 2d 32 2e 30 39 2d 34 2e 35 33 2d 34 2e 35 35 2e 30 32 2d 32 2e 34 37 2c 32 2e 30 32 2d 34 2e 34 36 2c 34 Data Ascii: 05,19.26ZM67.93,80.45c6.84,0,12.48-5.63,12.49-12.47,0-6.84-5.63-12.49-12.47-12.49-6.86,0-12.48,5.62-12.49,12.47,0,6.84,5.63,12.48,12.47,12.49Z"/><path class="cls-1" d="M92.42,47.96c0,2.52-2.02,4.56-4.5,4.55-2.49-.02-4.55-2.09-4.53-4.55.02-2.47,2.02-4.46,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49791	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	970	OUT	GET /media/qljj3avn/closures_1200x800.jpg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	342	IN	HTTP/1.1 200 OK Etag: "1db18e5b9b5327a" Last-Modified: Mon, 07 Oct 2024 18:21:28 GMT Content-Type: image/jpeg Content-Length: 854091 Cache-Control: max-age=82204, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 1-7581623-0 0CNN RT(1735687351948 287) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:32 UTC	1110	IN	Data Raw: ff d8 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 02 02 02 02 02 02 02 02 02 03 03 03 03 03 03 03 03 03 03 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 02 02 01 02 02 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 ff c0 00 11 08 03 20 04 b0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 06 03 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 05 06 07 00 04 08 09 0a 0b ff c4 00 4c 10 00 02 01 03 03 03 02 05 03 03 02 04 04 03 00 13 01 02 03 04 05 11 06 12 21 00 07 13 22 31 08 14 32 41 51 09 23 61 15 42 71 16 81 24 33 52 91 0a 17 62 a1 18 25 43 b1 19 34 53 Data Ascii: CC L!"12AQ#aBq$3Rb%C4S
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 70 cc 58 c9 b5 83 30 68 ca 11 95 28 41 f2 15 0b fb 81 d8 e3 2b ce 3d fd ba 49 20 00 12 48 31 79 e7 bb 94 73 f4 a6 50 82 73 47 2f cf f1 46 2e ee c6 45 90 09 19 39 04 12 49 3e 9d e8 dc 22 49 18 1c b7 f6 8c 64 fd fa 10 12 90 12 53 e1 9f de 0e f2 0f 0d fb a9 66 24 e6 04 4c 75 ea 2b 60 1e 4a e3 61 8c b6 59 99 80 6c 61 da 40 e3 9c 22 26 ec 67 df 9f bf 51 91 60 66 41 fe 22 39 93 1e 5e 54 73 a8 e1 42 b3 20 2c 92 6d 70 7d 2b 31 50 c5 8b 1d e0 b6 0a a4 7e 47 1f 7e 42 f3 f7 e9 8b 6a 20 29 20 8e 5f 2f 33 03 e2 68 92 a0 2c 60 f3 ad 8f 23 03 2b 71 b5 c8 8b 08 7c 99 2c e1 44 72 36 13 92 18 ec 25 4a e7 92 71 93 d4 79 41 c8 3f c8 5f 87 a8 d7 d6 f3 ca 8c 28 ca 8f f8 f5 d0 b5 60 da 8c 57 c6 aa ad 1a b7 b8 90 46 bb 98 91 8f a6 31 ce 41 39 dc 7d f1 8c f4 ae a1 39 ae 0f 94 9f Data Ascii: pX0h(A+=I H1ysPsG/F.E9I>"IdSf$Lu+`JaYla@"&gQ`fA"9^TsB ,mp}+1P~G~Bj ) _/3h,`#+q\|,Dr6%JqyA?_(`WF1A9}9
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: db e0 3a d2 98 28 58 13 7f c5 09 70 37 16 ca f2 15 99 fd 7e 36 e1 b6 a1 04 be 09 3b 4f d4 c4 8e 4f 4b 2c c4 5f 90 b4 fd b9 ee 1c a9 f4 99 fe 28 db b0 83 c2 d8 7d 9b 16 35 7d c5 0b 96 5c 33 86 da d3 2a e7 3c 10 41 e7 a1 8f 17 8c 78 66 67 f6 e1 eb 44 55 61 94 df af 9d 0e e5 62 36 c9 88 e3 da f1 12 83 6a ec 04 6d 28 09 c1 fb f2 3e ae 9a 08 17 4f 88 d8 df 8f 3e ad 4a 64 d8 d8 69 4b 2b 9d ce b8 fa 36 b1 55 2b 17 1b 8b 87 21 58 ee 4d 99 07 27 2a 4e 3a 02 04 24 ce bc 6f e9 f1 e5 7a 20 ad dc 3d 3a 14 50 1d 4c 58 60 48 cb 79 36 86 29 b8 e5 99 80 db 9c 8c 7a 46 07 1f e7 a7 f0 9c d2 35 dd c7 ae 37 a4 66 53 7a c1 21 02 32 ab 19 47 60 ae c0 9d c3 69 03 c2 78 f5 e4 92 7d 47 69 c8 51 d3 94 82 54 09 32 05 bf 3c bd 2f a9 a7 0a 20 0b 08 3d 47 5e 54 7f 32 06 01 b3 eb 8e 52 Data Ascii: :(Xp7~6;OOK,_(}5}\3<AxfgDUab6jm(>O>JdiK+6U+!XM'N:$oz =:PLX`Hy6)zF57fSz!2G`ix}GiQT2</ =G^T2R
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 07 38 e3 1f 7e 9e 26 e3 4f 86 ba 7e 66 90 b6 a6 f4 ae f2 49 df b9 b2 5c 32 b6 c3 b0 39 0b 16 19 97 f7 08 20 e1 87 bb 74 39 44 78 63 77 1d da e9 a7 97 0a 22 48 89 1d 6e ac 32 6c 1b 59 9f 20 08 a2 56 8e 30 03 ae 01 1b 59 76 c8 15 70 7e f9 fb 9c f4 82 73 5c 01 1a 9b 9e 87 5b a9 25 56 82 4c e9 44 79 47 d7 95 6f 1c a1 11 a5 1b 48 98 86 dc 49 6c c8 c4 82 5b 07 0a 4f bf 00 0e 88 20 fb ba 4a 66 d7 b7 a5 b9 71 14 c5 5b c6 e3 17 e3 d7 a5 1c 3a 87 c0 03 2a 0e 77 e4 ec 00 82 76 9f 66 cf e7 dc 64 8c e3 a1 ca 62 78 fc fa fc 53 82 01 8a 10 c8 4a b6 c3 38 f5 3a ca c5 43 06 75 75 46 2d c6 d4 0a d8 03 df 3c 8c f4 a0 c1 19 b2 ee 8f 22 3a fa d3 4d c1 8c c3 ae a2 84 48 e8 41 91 c9 f2 60 ab b0 3c b0 4f 1a 46 a1 4e c0 a4 f2 43 63 20 fe 47 4d 95 2a 04 21 3a 7d 26 49 e3 f0 fa 1a Data Ascii: 8~&O~fI\29 t9Dxcw"Hn2lY V0Yvp~s\[%VLDyGoHIl[O Jfq[:wvfdbxSJ8:CuuF-<":MHA`<OFNCc GM!:}&I
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: b9 00 4c 83 60 8c 1c 07 d8 55 41 63 1a 95 21 8b 02 01 ca 83 c8 c7 19 e7 a3 cc 91 3d d9 f1 4f 09 f3 fe 78 d0 80 6d 98 5a 28 3c 85 cb 16 11 e5 4a b3 0c 21 55 90 e0 a0 30 9d cb 24 91 2e 08 72 0b 67 83 d3 e5 00 08 26 fe 7a 6f be e0 78 69 c2 98 aa 64 9d 7a dd cb 8d 27 83 b8 2f a9 94 ed 0a 00 12 b2 91 cb b9 0d 96 95 88 4c 1c 9f 4e 7f c7 47 68 27 43 f0 f2 1c 07 de 98 08 30 26 3e 3f cf da 8c c0 fa 9b 93 b8 b3 c9 22 27 93 03 90 d8 0c c0 81 21 ca 10 98 24 9e 4f bf 42 08 b0 e1 60 0d bc be 1a df f1 4e 64 fa f5 f3 d2 d4 93 92 18 89 13 6f d1 e3 46 01 8a 79 15 54 86 84 11 e4 5d ab 91 9f 51 fe 71 d1 a4 02 01 4a a7 59 3e 5c f7 5f d2 a2 24 85 19 11 d7 0d f4 93 64 61 46 f6 74 46 2c 70 a1 e4 23 33 20 e5 b6 ac 5f c0 e7 ff 00 b1 d1 a7 fd d6 ca 4f a0 dc 77 5c d3 9b 00 9b c8 fe Data Ascii: L`UAc!=OxmZ(<J!U0$.rg&zoxidz'/LNGh'C0&>?"'!$OB`NdoFyT]QqJY>\_$daFtF,p#3 _Ow\
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: f7 73 9f db 48 a5 e3 0c 01 00 02 e3 61 fd a2 5d cb 46 36 92 77 7a 24 c2 92 d9 c8 5d c4 7d ba 8d 64 1d fe 1b eb 6d 7e 9c 38 c5 4e 95 40 8e bf 7f cd 2c b0 ba b0 72 8a eb 20 28 c3 78 43 20 51 bd a4 19 03 09 1a 93 bc 0c e7 9e 06 47 51 95 a4 82 90 a2 08 be 93 1b a3 d7 74 c5 2c a6 64 81 06 b6 42 7a f2 aa a5 03 06 67 55 0b 01 59 4e 14 2e f6 dc 3e 90 cd ef cf 20 0e 7a 8a 7c 37 3e 28 d3 7d bc be 03 e1 35 29 48 9b 69 3a ee bf 5f b5 01 56 62 ab b6 37 c0 fd a1 b9 b6 39 57 3b d9 50 96 32 6e 2b ee 48 e5 7f 18 e9 e5 20 13 24 71 e2 2d c7 77 e0 f1 9a 02 93 61 03 95 6c 8d c1 b3 f4 97 0d 36 11 8b 3c 88 38 de ac 70 47 0d 83 90 49 fb 01 d4 46 08 8d c2 dc 81 e1 52 df 30 3b cd eb 69 16 45 50 4c a1 98 15 2b b4 15 62 e1 54 84 54 72 71 85 6e 42 81 ec 3d b1 d4 2a 29 26 02 6d f6 e3 Data Ascii: sHa]F6wz$]}dm~8N@,r (xC QGQt,dBzgUYN.> z\|7>(}5)Hi:_Vb79W;P2n+H $q-wal6<8pGIFR0;iEPL+bTTrqnB=*)&m
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 26 cd af c6 44 21 5b 70 fc e3 1f 7e 0c a4 0b 27 dd 8d dc f8 73 b4 50 89 df af 3e 5f 6a 59 64 65 65 cb b9 75 c8 c0 76 24 29 c2 ef 67 19 f5 38 5f 50 19 03 1c 7e 7a 02 90 41 f0 8c be 5f 28 fa 7c e8 b3 11 bc cf 5d 1a 04 66 99 15 9d 8e e0 1f 22 4c 6d 66 cb 6d 66 40 43 37 89 41 04 11 92 b9 e7 27 a4 a4 84 15 00 2d 6d 35 fc 5f 8f 1f 2a 64 9c e0 13 ad 18 10 ca 48 77 77 45 25 d5 4b 42 44 ac 14 86 cb 0f dc 83 69 c9 c0 24 0f f7 e9 88 20 8f 08 09 3a 6f b7 d8 d1 0b 83 73 20 79 5f ee 29 40 7d c3 65 46 54 6c 2a 59 84 8a 44 7e 28 80 62 b2 82 c7 0c 72 00 04 1f 7e 84 8e 1c 35 e5 ac 9e 1c 85 f7 8a 20 05 a7 ae 5c f9 9f 2a 23 4b e2 39 49 01 0e af 90 ac 58 86 18 90 ab 29 0c 08 0c 7d 2a 79 63 8e 73 d1 25 39 bd e4 e9 fc 7f 27 75 ed 14 ca 54 4c 2b 5a 55 54 aa 8d ce db c8 01 8b 86 Data Ascii: &D![p~'sP>_jYdeeuv$)g8_P~zA_(\|]f"Lmfmf@C7A'-m5_dHwwE%KBDi$ :os y_)@}eFTlYD~(br~5 \#K9IX)}ycs%9'uTL+ZUT
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 49 0a f7 84 4f 9f 56 1b a9 24 c1 b5 e8 77 ee 5d 9b 9b 00 61 5c 93 b9 64 91 c3 80 ef 9c 32 b6 3f 85 4e 33 cf 4d 96 0c c0 9e 1c 85 ad d4 9d d4 8a 81 b4 df ae b9 6f ac 2e 0a 23 00 19 98 23 61 c2 86 41 f5 2a ab 00 09 e5 be e7 8e 0e 7a 59 61 44 1b 0b e9 bf ae 54 d2 32 c8 b9 fa 72 a3 06 2a 59 55 94 3e d4 52 43 31 54 0c 48 dc de fb 04 8c 3d 3e e4 e3 a6 22 40 24 1c b3 f1 fe 37 e9 44 93 04 80 6f d7 42 85 91 70 d8 db ee 8c a1 1f 1e 42 30 a8 32 79 de 32 01 04 60 f3 9e 98 13 22 79 ea 34 e3 d6 ed d4 c4 03 c2 82 32 a4 28 24 86 66 de ca db 8b 31 74 6e 54 02 d8 2a c3 38 3e 8e 46 7a 25 03 78 16 02 3e 7d 73 a7 49 00 09 d7 ae b8 51 77 1d a5 01 05 41 60 ea 37 0d ea c3 2a 9b 01 e7 6b 0f 4e 70 a5 8e 7e dd 3c 09 9d fb b9 73 fc ef 02 86 44 45 0f aa 46 3e 82 c5 94 79 59 06 66 41 Data Ascii: IOV$w]a\d2?N3Mo.##aAzYaDT2rYU>RC1TH=>"@$7DoBpB02y2`"y42($f1tnT8>Fz%x>}sIQwA`7kNp~<sDEF>yYfA
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 35 c9 dd e5 36 ea f4 e5 50 01 22 c0 6f f3 ac 07 96 f4 e5 70 17 63 34 60 ab 6e 03 85 03 c6 ad ea 04 b1 18 c0 03 df 3d 23 ba 55 7e 37 fe 78 db d6 90 b4 da dc 28 0c 9b 59 5d c8 8d c6 1d f2 00 32 16 5d a8 4e dc 83 24 47 1e 90 06 41 cf df a5 97 30 29 48 91 a0 e5 c7 d0 f1 3b c4 52 cc 01 93 63 d7 51 49 21 0b 9f 5b 2a 80 4e 58 1e 14 02 00 0a cd 90 00 07 1c 11 8e 7d fa 91 40 98 f0 c9 eb ad d4 c3 4d 68 5e 58 c6 e3 e4 24 16 56 e2 2e 4c 8c 77 24 66 4e 76 b8 23 1c 80 02 f3 ef d3 25 0a 30 32 de 38 ee 1a 98 e1 f7 b5 25 28 5e f2 3c b7 ee 14 8a b2 8c 6e 0e 57 74 87 60 24 ca f2 6d f5 3a 28 1b 06 c6 e1 48 e3 ef f7 e8 cc 99 82 33 5b c8 0d c3 8d f7 fc 37 50 a4 ef dd 7f 32 68 c2 40 88 db f7 14 3b 4c 6a 32 cf 20 70 41 91 46 46 48 27 93 f8 ce 31 c7 4c 53 99 40 26 33 6f dc 04 6e Data Ascii: 56P"opc4`n=#U~7x(Y]2]N$GA0)H;RcQI![*NX}@Mh^X$V.Lw$fNv#%028%(^<nWt`$m:(H3[7P2h@;Lj2 pAFFH'1LS@&3on
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: ad 0a b5 af f6 a4 1d f6 96 df 19 50 c8 26 2a ab 1f d6 08 db 22 ef dd 18 84 10 30 0f d5 ef 81 f7 91 29 90 32 af 43 1b f4 e1 6b cf f1 34 d2 27 c4 2c 6f d7 2a 45 70 09 0a 21 24 8d ed e1 dc 0e c6 3e 86 12 4b b5 df df 6b 7d c9 38 f7 c7 52 19 20 12 55 13 02 78 ef b0 b0 e5 c2 84 40 b0 89 d6 dc 3c cd 13 fe 5c 8a 13 04 c8 87 77 a4 b8 5d db 95 59 49 63 23 33 7d 59 e0 ae dc 0e 9f de 49 2a d0 1f 2f db 97 39 a6 20 02 32 ea 7a f3 fe 2b 56 44 47 dd 1a ee fd dd cc e0 61 a5 48 f9 0c 70 7c 7b f2 c8 54 02 46 32 46 36 f5 32 54 a4 c2 cc 5b 4e 04 fc e3 8d be b5 59 40 2a 52 06 bf 11 d6 9f b5 37 05 5c 33 97 da 72 be 90 14 98 8e 59 77 21 55 08 60 76 38 6c 80 50 7b 73 d5 a9 24 84 81 23 eb e7 cc 6e d6 68 64 12 4c ef f8 7e dc 78 52 88 85 94 7d f0 aa a8 8f b5 f7 c8 c0 21 3b be a1 16 Data Ascii: P&"0)2Ck4',oEp!$>Kk}8R Ux@<\w]YIc#3}YI/9 2z+VDGaHp\|{TF2F62T[NY@R7\3rYw!U`v8lP{s$#nhdL~xR}!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49793	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	1210	OUT	GET /media/3jyijhrd/icon_twitter-x-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37ad20" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 544 Cache-Control: max-age=82205, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 17-227071335-227071148 2CNN RT(1735687352128 330) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:32 UTC	544	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 35 2e 38 37 20 31 33 35 2e 38 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 32 33 31 66 32 30 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 36 2e 36 35 2c 36 37 2e 39 33 43 36 2e 36 35 2c 33 34 2e 30 38 2c 33 34 2e 30 39 2c 36 2e 36 35 2c 36 37 2e 39 33 2c 36 2e 36 35 73 36 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><path class="cls-2" d="M6.65,67.93C6.65,34.08,34.09,6.65,67.93,6.65s6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49794	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	972	OUT	GET /site-media/icons/icon_footer-phone.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db522f706268a3" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 675 Cache-Control: max-age=33280, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 17-227071337-0 0CNN RT(1735687352129 329) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:32 UTC	675	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 2e 39 35 20 32 39 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 2e 39 38 2e 34 38 43 36 2e 39 37 2e 34 38 2e 34 38 2c 36 2e 39 37 2e 34 38 2c 31 34 2e 39 38 73 36 2e 34 39 2c 31 34 2e 35 2c 31 34 2e 35 2c 31 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49796	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	1208	OUT	GET /media/dv5d04qo/icon_youtube-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37ada2" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 674 Cache-Control: max-age=82206, public Expires: Wed, 01 Jan 2025 22:12:38 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 18-261310822-261310151 2CNN RT(1735687352144 325) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:32 UTC	674	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 35 20 31 32 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 33 31 66 32 30 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125"> <defs> <style> .cls-1 { fill: #231f20; fill-rule: evenodd; } .cls-2 { fill: #fff; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49797	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	981	OUT	GET /site-media/icons/icon_footer-walk-in-center.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	344	IN	HTTP/1.1 200 OK Etag: "1db522f70626ea7" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 1191 Cache-Control: max-age=33280, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 7-21118507-0 0CNN RT(1735687352171 292) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:32 UTC	1108	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 2e 39 35 20 32 39 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 2e 39 38 2e 34 38 43 36 2e 39 37 2e 34 38 2e 34 38 2c 36 2e 39 37 2e 34 38 2c 31 34 2e 39 38 73 36 2e 34 39 2c 31 34 2e 35 2c 31 34 2e 35 2c 31 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 29.95 29.95"><defs><style>.cls-1{fill:#fff;stroke-width:0px;}</style></defs><path class="cls-1" d="M14.98.48C6.97.48.48,6.97.48,14.98s6.49,14.5,14.5,14
2024-12-31 23:22:32 UTC	83	IN	Data Raw: 30 34 2e 38 33 2e 31 38 2c 31 2e 31 38 2e 34 32 2c 31 2e 30 39 2e 36 2c 31 2e 39 38 2c 31 2e 34 39 2c 32 2e 35 38 2c 32 2e 35 38 6c 2e 33 39 2e 37 68 2e 30 34 63 2e 32 2e 34 2e 30 35 2e 38 37 2d 2e 33 33 2c 31 2e 30 38 5a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 04.83.18,1.18.42,1.09.6,1.98,1.49,2.58,2.58l.39.7h.04c.2.4.05.87-.33,1.08Z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49799	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	992	OUT	GET /media/tcuceq0z/homepage-intro-placeholder-tall-corpped.jpg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	345	IN	HTTP/1.1 200 OK Etag: "1dae20d678d59ed" Last-Modified: Mon, 29 Jul 2024 23:16:56 GMT Content-Type: image/jpeg Content-Length: 965070 Cache-Control: max-age=82209, public Expires: Wed, 01 Jan 2025 22:12:41 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 18-261310838-0 0CNN RT(1735687352201 280) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:32 UTC	1107	IN	Data Raw: ff d8 ff db 00 43 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 06 37 07 d0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 07 01 03 08 02 09 0a ff c4 00 56 10 00 01 03 03 03 02 05 02 05 01 07 02 04 00 02 1b 01 02 03 04 00 05 11 06 12 21 13 31 07 14 22 41 51 32 61 15 23 42 71 81 52 08 16 24 33 62 91 a1 43 b1 25 72 82 c1 17 34 53 d1 e1 Data Ascii: CC7V!1"AQ2a#BqR$3bC%r4S
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 Data Ascii: @(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 71 42 0e 68 48 a0 14 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@qBhH
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 38 a1 02 80 e6 84 8a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(8@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 58 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 Data Ascii: P@(P@(P@(P@(P@(P@(P@(P@(P@(PXP@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49798	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	1209	OUT	GET /media/cmkllpaa/icon_linkedin-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37ac13" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 787 Cache-Control: max-age=82205, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 18-261310839-261310193 2CNN RT(1735687352202 292) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:32 UTC	787	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 35 20 31 32 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 33 31 66 32 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 21 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125"> <defs> <style> .cls-1 { fill: #231f20; } .cls-2 { fill: #fff; } </style> </defs> <!-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49807	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	1211	OUT	GET /site-media/icons/icon_logo-tca-color.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	352	IN	HTTP/1.1 200 OK Etag: "1db522f706251f2" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 15346 Cache-Control: max-age=33280, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 17-227071398-227053717 2CNN RT(1735687352583 279) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 33 30 2e 36 32 20 34 32 2e 37 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 30 30 36 30 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 33 2c 2e 63 6c 73 2d 34 2c 2e 63 6c 73 2d 35 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 38 37 63 34 63 64 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 430.62 42.72"><defs><style>.cls-1{fill:#6c0060;}.cls-1,.cls-2,.cls-3,.cls-4,.cls-5{fill-rule:evenodd;stroke-width:0px;}.cls-2{fill:#87c4cd;}.cls-3{fill
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 63 2d 2e 39 31 2d 31 2e 35 35 2d 36 2e 31 35 2d 31 2e 35 31 2d 36 2e 31 35 2d 31 2e 35 31 2c 30 2c 30 2c 34 2e 32 38 2e 35 34 2c 34 2e 36 38 2c 31 2e 32 37 2e 32 38 2e 35 32 2c 31 2e 33 2c 31 2e 32 37 2d 32 2e 34 34 2c 32 2e 39 37 2d 33 2e 35 37 2c 31 2e 36 33 2d 31 30 2e 38 33 2c 34 2e 33 32 2d 31 37 2e 30 32 2c 37 2e 33 73 2d 39 2e 37 35 2c 31 31 2e 36 32 2d 39 2e 37 35 2c 31 31 2e 36 32 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 30 37 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 31 31 37 2e 39 35 2c 31 39 2e 35 68 2d 33 2e 39 31 6c 2d 32 2e 33 32 2c 31 30 2e 37 35 68 2d 33 2e 32 34 6c 32 2e 33 32 2d 31 30 2e 37 35 68 2d 33 2e 38 38 6c 2e 35 35 2d 32 2e 35 39 68 31 31 2e 30 32 6c 2d 2e 35 35 2c 32 2e 35 39 5a 22 2f 3e 3c Data Ascii: c-.91-1.55-6.15-1.51-6.15-1.51,0,0,4.28.54,4.68,1.27.28.52,1.3,1.27-2.44,2.97-3.57,1.63-10.83,4.32-17.02,7.3s-9.75,11.62-9.75,11.62"/><path id="Path_2507" class="cls-5" d="M117.95,19.5h-3.91l-2.32,10.75h-3.24l2.32-10.75h-3.88l.55-2.59h11.02l-.55,2.59Z"/><
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 2d 2e 32 34 2e 30 36 2d 2e 34 39 2e 30 37 2d 2e 37 33 2e 30 33 2d 2e 33 31 2d 2e 30 37 2d 2e 36 32 2d 2e 32 38 2d 2e 38 35 2d 2e 32 39 2d 2e 32 31 2d 2e 36 35 2d 2e 33 31 2d 31 2e 30 31 2d 2e 32 37 2d 2e 32 38 2c 30 2d 2e 35 36 2e 30 36 2d 2e 38 33 2e 31 37 2d 2e 33 37 2e 31 34 2d 2e 37 32 2e 33 2d 31 2e 30 35 2e 35 6c 2d 31 2e 35 33 2c 37 2e 31 32 68 2d 33 2e 30 34 6c 32 2e 31 38 2d 31 30 2e 30 37 68 33 2e 30 34 6c 2d 2e 32 35 2c 31 2e 31 31 63 2e 35 34 2d 2e 33 39 2c 31 2e 31 31 2d 2e 37 33 2c 31 2e 37 2d 31 2e 30 32 2e 35 33 2d 2e 32 35 2c 31 2e 31 31 2d 2e 33 37 2c 31 2e 36 39 2d 2e 33 37 2e 37 32 2d 2e 30 34 2c 31 2e 34 32 2e 31 39 2c 31 2e 39 37 2e 36 35 2e 35 2e 35 2e 37 35 2c 31 2e 32 2e 37 2c 31 2e 39 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 Data Ascii: -.24.06-.49.07-.73.03-.31-.07-.62-.28-.85-.29-.21-.65-.31-1.01-.27-.28,0-.56.06-.83.17-.37.14-.72.3-1.05.5l-1.53,7.12h-3.04l2.18-10.07h3.04l-.25,1.11c.54-.39,1.11-.73,1.7-1.02.53-.25,1.11-.37,1.69-.37.72-.04,1.42.19,1.97.65.5.5.75,1.2.7,1.9"/><path id="Pa
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 35 2d 2e 33 35 2e 33 39 2d 2e 32 33 2e 37 31 2d 2e 35 34 2e 39 35 2d 2e 39 32 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 31 33 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 31 38 32 2e 36 36 2c 32 33 2e 38 38 63 30 2c 2e 39 2d 2e 31 34 2c 31 2e 38 2d 2e 34 34 2c 32 2e 36 35 2d 2e 32 37 2e 37 38 2d 2e 37 2c 31 2e 35 2d 31 2e 32 35 2c 32 2e 31 32 2d 2e 35 34 2e 36 2d 31 2e 32 31 2c 31 2e 30 39 2d 31 2e 39 35 2c 31 2e 34 32 2d 2e 38 32 2e 33 35 2d 31 2e 37 2e 35 32 2d 32 2e 35 39 2e 35 2d 31 2e 31 38 2e 30 38 2d 32 2e 33 34 2d 2e 33 31 2d 33 2e 32 33 2d 31 2e 30 37 2d 2e 37 38 2d 2e 37 39 2d 31 2e 31 39 2d 31 2e 38 37 2d 31 2e 31 32 2d 32 2e 39 37 2c 30 2d 2e 38 37 2e 31 34 2d 31 2e 37 33 2e 34 32 2d 32 2e 35 35 2e 32 37 2d 2e Data Ascii: 5-.35.39-.23.71-.54.95-.92"/><path id="Path_2513" class="cls-5" d="M182.66,23.88c0,.9-.14,1.8-.44,2.65-.27.78-.7,1.5-1.25,2.12-.54.6-1.21,1.09-1.95,1.42-.82.35-1.7.52-2.59.5-1.18.08-2.34-.31-3.23-1.07-.78-.79-1.19-1.87-1.12-2.97,0-.87.14-1.73.42-2.55.27-.
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 2e 37 39 2e 35 35 2d 2e 31 39 2e 32 38 2d 2e 32 39 2e 36 31 2d 2e 32 37 2e 39 35 2d 2e 30 33 2e 32 39 2e 31 31 2e 35 37 2e 33 36 2e 37 33 2e 33 33 2e 31 36 2e 36 39 2e 32 33 2c 31 2e 30 35 2e 32 31 2e 33 33 2c 30 2c 2e 36 36 2d 2e 30 38 2e 39 36 2d 2e 32 32 2e 33 34 2d 2e 31 35 2e 36 37 2d 2e 33 33 2e 39 36 2d 2e 35 36 6c 2e 34 36 2d 32 2e 31 33 5a 4d 32 30 35 2e 39 2c 32 39 2e 31 39 6c 2d 2e 36 39 2e 34 37 63 2d 2e 32 34 2e 31 37 2d 2e 34 39 2e 33 31 2d 2e 37 35 2e 34 34 2d 2e 32 39 2e 31 33 2d 2e 35 38 2e 32 33 2d 2e 38 38 2e 33 31 2d 2e 33 38 2e 30 38 2d 2e 37 36 2e 31 32 2d 31 2e 31 35 2e 31 31 2d 2e 37 31 2e 30 33 2d 31 2e 34 2d 2e 32 32 2d 31 2e 39 32 2d 2e 37 2d 2e 35 2d 2e 34 38 2d 2e 37 37 2d 31 2e 31 34 2d 2e 37 34 2d 31 2e 38 33 2d 2e 30 32 2d Data Ascii: .79.55-.19.28-.29.61-.27.95-.03.29.11.57.36.73.33.16.69.23,1.05.21.33,0,.66-.08.96-.22.34-.15.67-.33.96-.56l.46-2.13ZM205.9,29.19l-.69.47c-.24.17-.49.31-.75.44-.29.13-.58.23-.88.31-.38.08-.76.12-1.15.11-.71.03-1.4-.22-1.92-.7-.5-.48-.77-1.14-.74-1.83-.02-
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 36 31 2c 31 2e 32 31 2d 31 2e 31 2c 31 2e 39 36 2d 31 2e 34 33 2e 38 32 2d 2e 33 36 2c 31 2e 37 31 2d 2e 35 34 2c 32 2e 36 2d 2e 35 32 2c 31 2e 31 37 2d 2e 30 38 2c 32 2e 33 33 2e 33 2c 33 2e 32 33 2c 31 2e 30 36 2e 37 37 2e 37 37 2c 31 2e 31 38 2c 31 2e 38 34 2c 31 2e 31 32 2c 32 2e 39 33 4d 32 33 32 2e 30 35 2c 32 37 2e 31 37 63 2e 32 36 2d 2e 34 32 2e 34 36 2d 2e 38 38 2e 35 38 2d 31 2e 33 37 2e 31 34 2d 2e 35 39 2e 32 31 2d 31 2e 31 39 2e 32 2d 31 2e 38 2e 30 33 2d 2e 35 2d 2e 31 2d 31 2d 2e 33 38 2d 31 2e 34 32 2d 2e 33 2d 2e 33 35 2d 2e 37 34 2d 2e 35 34 2d 31 2e 32 2d 2e 35 2d 2e 34 2c 30 2d 2e 37 39 2e 31 31 2d 31 2e 31 32 2e 33 33 2d 2e 33 35 2e 32 35 2d 2e 36 34 2e 35 37 2d 2e 38 35 2e 39 34 2d 2e 32 35 2e 34 33 2d 2e 34 34 2e 39 2d 2e 35 34 2c Data Ascii: 61,1.21-1.1,1.96-1.43.82-.36,1.71-.54,2.6-.52,1.17-.08,2.33.3,3.23,1.06.77.77,1.18,1.84,1.12,2.93M232.05,27.17c.26-.42.46-.88.58-1.37.14-.59.21-1.19.2-1.8.03-.5-.1-1-.38-1.42-.3-.35-.74-.54-1.2-.5-.4,0-.79.11-1.12.33-.35.25-.64.57-.85.94-.25.43-.44.9-.54,
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 2e 35 38 2e 35 2d 31 2e 31 38 2e 30 38 2d 32 2e 33 34 2d 2e 33 31 2d 33 2e 32 33 2d 31 2e 30 37 2d 2e 37 38 2d 2e 37 39 2d 31 2e 31 39 2d 31 2e 38 37 2d 31 2e 31 32 2d 32 2e 39 37 2c 30 2d 2e 38 37 2e 31 34 2d 31 2e 37 33 2e 34 32 2d 32 2e 35 35 2e 32 37 2d 2e 37 39 2e 36 39 2d 31 2e 35 31 2c 31 2e 32 34 2d 32 2e 31 33 2e 35 34 2d 2e 36 31 2c 31 2e 32 31 2d 31 2e 31 2c 31 2e 39 36 2d 31 2e 34 33 2e 38 32 2d 2e 33 36 2c 31 2e 37 31 2d 2e 35 34 2c 32 2e 36 31 2d 2e 35 32 2c 31 2e 31 37 2d 2e 30 38 2c 32 2e 33 33 2e 33 2c 33 2e 32 33 2c 31 2e 30 36 2e 37 37 2e 37 37 2c 31 2e 31 38 2c 31 2e 38 34 2c 31 2e 31 32 2c 32 2e 39 33 4d 32 37 34 2e 34 2c 32 37 2e 31 37 63 2e 32 36 2d 2e 34 32 2e 34 36 2d 2e 38 38 2e 35 38 2d 31 2e 33 37 2e 31 34 2d 2e 35 39 2e 32 31 Data Ascii: .58.5-1.18.08-2.34-.31-3.23-1.07-.78-.79-1.19-1.87-1.12-2.97,0-.87.14-1.73.42-2.55.27-.79.69-1.51,1.24-2.13.54-.61,1.21-1.1,1.96-1.43.82-.36,1.71-.54,2.61-.52,1.17-.08,2.33.3,3.23,1.06.77.77,1.18,1.84,1.12,2.93M274.4,27.17c.26-.42.46-.88.58-1.37.14-.59.21
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 2c 31 2e 37 34 2d 31 2e 35 2e 36 34 2d 2e 33 36 2c 31 2e 33 36 2d 2e 35 35 2c 32 2e 31 2d 2e 35 36 2e 34 35 2c 30 2c 2e 39 2e 30 35 2c 31 2e 33 34 2e 31 37 2e 34 31 2e 31 32 2e 38 2e 33 2c 31 2e 31 37 2e 35 31 6c 2e 39 33 2d 34 2e 33 68 33 2e 30 34 5a 4d 33 30 39 2e 39 39 2c 32 32 2e 35 35 63 2d 2e 32 2d 2e 31 2d 2e 34 32 2d 2e 31 37 2d 2e 36 34 2d 2e 32 33 2d 2e 32 33 2d 2e 30 36 2d 2e 34 36 2d 2e 31 2d 2e 36 39 2d 2e 31 2d 2e 34 36 2c 30 2d 2e 39 31 2e 31 31 2d 31 2e 33 2e 33 34 2d 2e 33 39 2e 32 33 2d 2e 37 33 2e 35 35 2d 2e 39 38 2e 39 33 2d 2e 32 37 2e 34 31 2d 2e 34 36 2e 38 37 2d 2e 35 37 2c 31 2e 33 35 2d 2e 31 34 2e 35 32 2d 2e 32 31 2c 31 2e 30 35 2d 2e 32 31 2c 31 2e 35 39 2d 2e 30 34 2e 34 37 2e 31 2e 39 35 2e 33 39 2c 31 2e 33 32 2e 33 32 2e Data Ascii: ,1.74-1.5.64-.36,1.36-.55,2.1-.56.45,0,.9.05,1.34.17.41.12.8.3,1.17.51l.93-4.3h3.04ZM309.99,22.55c-.2-.1-.42-.17-.64-.23-.23-.06-.46-.1-.69-.1-.46,0-.91.11-1.3.34-.39.23-.73.55-.98.93-.27.41-.46.87-.57,1.35-.14.52-.21,1.05-.21,1.59-.04.47.1.95.39,1.32.32.
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 38 34 2d 2e 34 36 2c 31 2e 36 34 2d 2e 38 38 2c 32 2e 33 38 2d 2e 33 35 2e 36 2d 2e 38 32 2c 31 2e 31 31 2d 31 2e 33 39 2c 31 2e 35 31 2d 2e 35 35 2e 33 38 2d 31 2e 31 37 2e 36 36 2d 31 2e 38 32 2e 38 31 2d 2e 37 32 2e 31 36 2d 31 2e 34 37 2e 32 34 2d 32 2e 32 31 2e 32 33 2d 2e 36 35 2c 30 2d 31 2e 33 2d 2e 30 34 2d 31 2e 39 35 2d 2e 31 33 2d 2e 35 33 2d 2e 30 37 2d 31 2e 30 35 2d 2e 31 37 2d 31 2e 35 37 2d 2e 33 6c 2e 34 36 2d 32 2e 34 37 68 2e 33 37 63 2e 34 36 2e 31 39 2e 39 33 2e 33 34 2c 31 2e 34 31 2e 34 35 2e 34 31 2e 31 2e 38 34 2e 31 36 2c 31 2e 32 37 2e 31 37 2e 34 37 2c 30 2c 2e 39 33 2d 2e 30 34 2c 31 2e 33 39 2d 2e 31 36 2e 36 37 2d 2e 31 34 2c 31 2e 32 33 2d 2e 35 39 2c 31 2e 35 2d 31 2e 32 32 2e 31 36 2d 2e 33 36 2e 32 38 2d 2e 37 33 2e 33 Data Ascii: 84-.46,1.64-.88,2.38-.35.6-.82,1.11-1.39,1.51-.55.38-1.17.66-1.82.81-.72.16-1.47.24-2.21.23-.65,0-1.3-.04-1.95-.13-.53-.07-1.05-.17-1.57-.3l.46-2.47h.37c.46.19.93.34,1.41.45.41.1.84.16,1.27.17.47,0,.93-.04,1.39-.16.67-.14,1.23-.59,1.5-1.22.16-.36.28-.73.3
2024-12-31 23:22:32 UTC	1452	IN	Data Raw: 38 2d 2e 38 35 2d 2e 32 39 2d 2e 32 31 2d 2e 36 35 2d 2e 33 31 2d 31 2e 30 31 2d 2e 32 37 2d 2e 32 38 2c 30 2d 2e 35 36 2e 30 36 2d 2e 38 33 2e 31 37 2d 2e 33 37 2e 31 34 2d 2e 37 32 2e 33 2d 31 2e 30 35 2e 35 6c 2d 31 2e 35 33 2c 37 2e 31 32 68 2d 33 2e 30 34 6c 32 2e 31 38 2d 31 30 2e 30 37 68 33 2e 30 34 6c 2d 2e 32 35 2c 31 2e 31 31 63 2e 35 34 2d 2e 33 39 2c 31 2e 31 31 2d 2e 37 33 2c 31 2e 37 2d 31 2e 30 32 2e 35 33 2d 2e 32 35 2c 31 2e 31 31 2d 2e 33 37 2c 31 2e 36 39 2d 2e 33 37 2e 37 32 2d 2e 30 34 2c 31 2e 34 32 2e 31 39 2c 31 2e 39 37 2e 36 35 2e 35 2e 35 2e 37 35 2c 31 2e 32 2e 37 2c 31 2e 39 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 33 33 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 33 39 34 2e 32 31 2c 33 30 Data Ascii: 8-.85-.29-.21-.65-.31-1.01-.27-.28,0-.56.06-.83.17-.37.14-.72.3-1.05.5l-1.53,7.12h-3.04l2.18-10.07h3.04l-.25,1.11c.54-.39,1.11-.73,1.7-1.02.53-.25,1.11-.37,1.69-.37.72-.04,1.42.19,1.97.65.5.5.75,1.2.7,1.9"/><path id="Path_2533" class="cls-5" d="M394.21,30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49808	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	972	OUT	GET /media/d5kpftah/icon_facebook-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37adbc" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 700 Cache-Control: max-age=82205, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 18-261310877-0 0CNN RT(1735687352591 289) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:32 UTC	700	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 35 2e 35 20 31 32 35 2e 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 33 31 66 32 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125.5 125.5"> <defs> <style> .cls-1 { fill: #231f20; } .cls-2 { fill: #fff; } </style> </defs>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49809	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:32 UTC	1213	OUT	GET /site-media/icons/icon-informationWhite.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:32 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db522f7062693a" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 826 Cache-Control: max-age=33280, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:32 GMT X-CDN: Imperva X-Iinfo: 17-227071401-227053711 2CNN RT(1735687352603 289) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:32 UTC	826	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 2e 38 20 32 39 2e 38 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 29.8 29.8"> <defs> <style> .cls-1 { fill: #000; } .cls-1, .cls-2 {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49810	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	973	OUT	GET /media/5p2brkd1/icon_instagram-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	346	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37a9da" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 1754 Cache-Control: max-age=82205, public Expires: Wed, 01 Jan 2025 22:12:38 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 17-227071422-0 0CNN RT(1735687352827 276) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:33 UTC	1106	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 35 2e 38 37 20 31 33 35 2e 38 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 32 33 31 66 32 30 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 63 78 3d 22 36 37 2e 39 33 22 20 63 79 3d 22 36 37 2e 39 33 22 20 72 3d 22 36 31 2e 32 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><circle class="cls-2" cx="67.93" cy="67.93" r="61.29" transform="tran
2024-12-31 23:22:33 UTC	648	IN	Data Raw: 35 36 2c 36 2e 34 34 2c 34 2e 34 38 2c 31 30 2e 38 33 2c 31 30 2e 38 33 2c 31 31 2e 39 39 2c 33 2e 32 36 2e 35 39 2c 36 2e 36 33 2e 36 37 2c 39 2e 39 36 2e 37 32 2c 36 2e 32 36 2e 31 31 2c 31 32 2e 35 33 2e 30 38 2c 31 38 2e 38 2c 30 2c 32 2e 38 37 2d 2e 30 33 2c 35 2e 37 34 2d 2e 31 39 2c 38 2e 35 39 2d 2e 34 37 2c 32 2e 36 37 2d 2e 32 36 2c 35 2e 31 37 2d 31 2e 31 34 2c 37 2e 33 31 2d 32 2e 38 34 2c 33 2e 34 38 2d 32 2e 37 36 2c 34 2e 38 33 2d 36 2e 35 38 2c 35 2e 30 33 2d 31 30 2e 38 31 2e 32 38 2d 35 2e 37 31 2e 33 33 2d 31 31 2e 34 33 2e 34 38 2d 31 37 2e 31 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 37 2e 31 37 2c 36 37 2e 39 39 63 30 2c 31 30 2e 36 37 2d 38 2e 35 36 2c 31 39 2e 32 32 2d 31 39 2e 32 36 Data Ascii: 56,6.44,4.48,10.83,10.83,11.99,3.26.59,6.63.67,9.96.72,6.26.11,12.53.08,18.8,0,2.87-.03,5.74-.19,8.59-.47,2.67-.26,5.17-1.14,7.31-2.84,3.48-2.76,4.83-6.58,5.03-10.81.28-5.71.33-11.43.48-17.14Z"/><path class="cls-1" d="M87.17,67.99c0,10.67-8.56,19.22-19.26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49813	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	973	OUT	GET /media/3jyijhrd/icon_twitter-x-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37ad20" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 544 Cache-Control: max-age=82204, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 15-142566388-0 0CNN RT(1735687352844 279) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:33 UTC	544	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 35 2e 38 37 20 31 33 35 2e 38 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 32 33 31 66 32 30 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 36 2e 36 35 2c 36 37 2e 39 33 43 36 2e 36 35 2c 33 34 2e 30 38 2c 33 34 2e 30 39 2c 36 2e 36 35 2c 36 37 2e 39 33 2c 36 2e 36 35 73 36 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 135.87 135.87"><defs><style>.cls-1{fill:#231f20;}.cls-2{fill:#fff;}</style></defs><path class="cls-2" d="M6.65,67.93C6.65,34.08,34.09,6.65,67.93,6.65s6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49811	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	1191	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1388295675 HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	138	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 82334
2024-12-31 23:22:33 UTC	1314	IN	Data Raw: 76 61 72 20 5f 30 78 37 35 39 34 3d 5b 27 5c 78 37 37 5c 78 36 66 5c 78 34 34 5c 78 34 34 5c 78 36 39 5c 78 35 33 5c 78 35 39 5c 78 33 64 27 2c 27 5c 78 34 66 5c 78 34 64 5c 78 34 62 5c 78 33 37 5c 78 35 36 5c 78 37 33 5c 78 34 66 5c 78 34 38 5c 78 37 37 5c 78 33 37 5c 78 36 61 5c 78 34 33 5c 78 37 34 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 33 35 5c 78 37 61 5c 78 34 65 5c 78 34 33 5c 78 36 38 5c 78 33 39 5c 78 37 37 5c 78 37 32 5c 78 35 61 5c 78 35 37 5c 78 37 37 5c 78 33 35 5c 78 34 31 5c 78 33 64 27 2c 27 5c 78 35 31 5c 78 33 38 5c 78 34 62 5c 78 36 65 5c 78 37 37 5c 78 33 34 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 32 66 5c 78 34 33 5c 78 36 63 5c 78 37 33 5c 78 34 62 5c 78 33 32 5c 78 35 37 5c Data Ascii: var _0x7594=['\x77\x6f\x44\x44\x69\x53\x59\x3d','\x4f\x4d\x4b\x37\x56\x73\x4f\x48\x77\x37\x6a\x43\x74\x67\x3d\x3d','\x77\x36\x35\x7a\x4e\x43\x68\x39\x77\x72\x5a\x57\x77\x35\x41\x3d','\x51\x38\x4b\x6e\x77\x34\x38\x3d','\x77\x70\x2f\x43\x6c\x73\x4b\x32\x57\
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 5c 78 37 32 5c 78 34 33 5c 78 36 61 5c 78 33 38 5c 78 34 66 5c 78 35 38 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 36 63 5c 78 33 30 5c 78 34 65 5c 78 36 39 5c 78 33 39 5c 78 35 32 5c 78 37 37 5c 78 37 31 5c 78 36 33 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 36 61 5c 78 34 34 5c 78 36 38 5c 78 34 38 5c 78 35 31 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 34 61 5c 78 35 37 5c 78 37 37 5c 78 36 66 5c 78 36 62 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 36 36 5c 78 34 34 5c 78 36 64 5c 78 34 31 5c 78 36 37 5c 78 33 64 27 2c 27 5c 78 34 61 5c 78 36 33 5c 78 34 62 5c 78 34 63 5c 78 37 37 5c 78 37 32 5c 78 35 35 5c 78 33 64 27 2c 27 5c 78 35 33 5c 78 36 33 5c 78 34 62 5c 78 36 36 5c 78 37 37 5c 78 33 36 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 Data Ascii: \x72\x43\x6a\x38\x4f\x58','\x77\x36\x6c\x30\x4e\x69\x39\x52\x77\x71\x63\x3d','\x77\x6f\x6a\x44\x68\x48\x51\x3d','\x77\x72\x4a\x57\x77\x6f\x6b\x3d','\x77\x34\x66\x44\x6d\x41\x67\x3d','\x4a\x63\x4b\x4c\x77\x72\x55\x3d','\x53\x63\x4b\x66\x77\x36\x45\x3d','\x
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 78 37 37 5c 78 37 32 5c 78 37 34 5c 78 35 38 5c 78 37 37 5c 78 37 30 5c 78 35 38 5c 78 34 33 5c 78 36 38 5c 78 37 33 5c 78 34 62 5c 78 37 61 5c 78 37 37 5c 78 36 66 5c 78 35 36 5c 78 35 37 5c 78 36 32 5c 78 33 38 5c 78 34 62 5c 78 37 30 5c 78 37 37 5c 78 37 30 5c 78 37 36 5c 78 34 33 5c 78 36 64 5c 78 36 33 5c 78 34 62 5c 78 35 38 5c 78 35 61 5c 78 34 64 5c 78 34 62 5c 78 36 61 5c 78 35 37 5c 78 34 64 5c 78 34 66 5c 78 33 39 5c 78 37 37 5c 78 33 36 5c 78 35 31 5c 78 34 61 5c 78 34 39 5c 78 33 31 5c 78 34 38 5c 78 34 34 5c 78 37 34 5c 78 36 33 5c 78 34 62 5c 78 34 36 5c 78 37 37 5c 78 33 35 5c 78 35 34 5c 78 34 33 5c 78 37 35 5c 78 34 64 5c 78 34 62 5c 78 36 64 5c 78 35 32 5c 78 37 61 5c 78 34 39 5c 78 35 30 5c 78 35 35 5c 78 37 33 5c 78 34 62 5c 78 33 35 Data Ascii: x77\x72\x74\x58\x77\x70\x58\x43\x68\x73\x4b\x7a\x77\x6f\x56\x57\x62\x38\x4b\x70\x77\x70\x76\x43\x6d\x63\x4b\x58\x5a\x4d\x4b\x6a\x57\x4d\x4f\x39\x77\x36\x51\x4a\x49\x31\x48\x44\x74\x63\x4b\x46\x77\x35\x54\x43\x75\x4d\x4b\x6d\x52\x7a\x49\x50\x55\x73\x4b\x35
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 33 5c 78 34 62 5c 78 34 66 5c 78 35 38 5c 78 35 34 5c 78 36 65 5c 78 34 33 5c 78 37 32 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 30 5c 78 37 33 5c 78 34 66 5c 78 35 37 5c 78 34 38 5c 78 36 33 5c 78 34 62 5c 78 36 35 5c 78 37 37 5c 78 37 32 5c 78 34 39 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 34 61 5c 78 33 38 5c 78 34 62 5c 78 37 39 5c 78 34 35 5c 78 36 33 5c 78 37 37 5c 78 33 34 5c 78 37 32 5c 78 34 34 5c 78 37 36 5c 78 33 38 5c 78 34 62 5c 78 34 66 5c 78 34 64 5c 78 35 33 5c 78 34 32 5c 78 34 66 5c 78 37 37 5c 78 37 32 5c 78 35 38 5c 78 34 33 5c 78 36 37 5c 78 36 33 5c 78 34 62 5c 78 36 66 5c 78 37 37 5c 78 33 35 5c 78 34 63 5c 78 34 34 5c 78 37 35 5c 78 36 33 5c 78 34 66 5c 78 34 35 5c 78 37 37 5c 78 33 35 5c 78 37 61 5c 78 34 33 Data Ascii: 3\x4b\x4f\x58\x54\x6e\x43\x72\x41\x3d\x3d','\x50\x73\x4f\x57\x48\x63\x4b\x65\x77\x72\x49\x3d','\x77\x37\x4a\x38\x4b\x79\x45\x63\x77\x34\x72\x44\x76\x38\x4b\x4f\x4d\x53\x42\x4f\x77\x72\x58\x43\x67\x63\x4b\x6f\x77\x35\x4c\x44\x75\x63\x4f\x45\x77\x35\x7a\x43
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 34 33 5c 78 37 31 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 32 5c 78 37 33 5c 78 34 66 5c 78 37 34 5c 78 37 37 5c 78 33 35 5c 78 37 38 5c 78 34 32 5c 78 37 37 5c 78 33 36 5c 78 34 63 5c 78 34 34 5c 78 36 65 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 32 5c 78 36 33 5c 78 34 62 5c 78 34 37 5c 78 37 37 5c 78 37 31 5c 78 36 66 5c 78 37 31 5c 78 36 34 5c 78 33 38 5c 78 34 62 5c 78 35 35 5c 78 37 37 5c 78 37 31 5c 78 36 33 5c 78 34 31 27 2c 27 5c 78 35 36 5c 78 34 64 5c 78 34 66 5c 78 34 39 5c 78 34 33 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 36 61 5c 78 34 34 5c 78 36 39 5c 78 37 38 5c 78 35 31 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 37 33 5c 78 33 32 5c 78 37 37 5c 78 33 35 5c 78 34 36 5c 78 Data Ascii: 43\x71\x41\x3d\x3d','\x42\x73\x4f\x74\x77\x35\x78\x42\x77\x36\x4c\x44\x6e\x41\x3d\x3d','\x42\x63\x4b\x47\x77\x71\x6f\x71\x64\x38\x4b\x55\x77\x71\x63\x41','\x56\x4d\x4f\x49\x43\x51\x3d\x3d','\x77\x71\x6a\x44\x69\x78\x51\x3d','\x77\x70\x73\x32\x77\x35\x46\x
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 31 5c 78 33 64 27 2c 27 5c 78 34 37 5c 78 37 33 5c 78 34 62 5c 78 36 37 5c 78 36 34 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 34 35 5c 78 35 35 5c 78 37 37 5c 78 33 36 5c 78 35 35 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 35 34 5c 78 34 34 5c 78 37 34 5c 78 34 38 5c 78 34 65 5c 78 33 33 5c 78 35 39 5c 78 33 38 5c 78 34 66 5c 78 37 39 5c 78 35 39 5c 78 36 64 5c 78 34 64 5c 78 37 34 5c 78 34 39 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 36 35 5c 78 33 38 5c 78 34 66 5c 78 34 33 5c 78 37 37 5c 78 37 31 5c 78 33 34 5c 78 33 37 5c 78 36 35 5c 78 33 31 5c 78 34 34 5c 78 34 33 5c 78 36 39 5c 78 34 31 5c 78 34 32 5c 78 35 39 5c 78 37 37 5c 78 33 35 5c 78 35 30 5c 78 34 34 5c 78 36 39 5c 78 34 36 5c 78 35 61 5c 78 Data Ascii: 1\x3d','\x47\x73\x4b\x67\x64\x67\x3d\x3d','\x77\x37\x45\x55\x77\x36\x55\x3d','\x77\x36\x54\x44\x74\x48\x4e\x33\x59\x38\x4f\x79\x59\x6d\x4d\x74\x49\x41\x3d\x3d','\x65\x38\x4f\x43\x77\x71\x34\x37\x65\x31\x44\x43\x69\x41\x42\x59\x77\x35\x50\x44\x69\x46\x5a\x
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 35 34 5c 78 34 33 5c 78 37 32 5c 78 33 38 5c 78 34 62 5c 78 35 61 27 2c 27 5c 78 36 31 5c 78 35 36 5c 78 34 64 5c 78 34 65 5c 78 37 37 5c 78 36 66 5c 78 33 33 5c 78 34 33 5c 78 36 37 5c 78 35 34 5c 78 35 39 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 37 61 5c 78 34 33 5c 78 36 63 5c 78 33 38 5c 78 34 62 5c 78 36 37 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 34 36 5c 78 34 36 5c 78 37 37 5c 78 33 37 5c 78 35 39 5c 78 33 31 5c 78 37 37 5c 78 37 31 5c 78 33 34 5c 78 35 61 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 34 65 5c 78 36 36 5c 78 37 37 5c 78 33 37 5c 78 37 33 5c 78 33 64 27 2c 27 5c 78 34 32 5c 78 33 33 5c 78 36 36 5c 78 34 34 5c 78 36 65 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c Data Ascii: x67\x3d\x3d','\x77\x70\x54\x43\x72\x38\x4b\x5a','\x61\x56\x4d\x4e\x77\x6f\x33\x43\x67\x54\x59\x3d','\x77\x6f\x7a\x43\x6c\x38\x4b\x67','\x77\x34\x46\x46\x77\x37\x59\x31\x77\x71\x34\x5a','\x77\x36\x4e\x66\x77\x37\x73\x3d','\x42\x33\x66\x44\x6e\x77\x3d\x3d',
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 78 37 37 5c 78 33 36 5c 78 37 61 5c 78 34 33 5c 78 37 32 5c 78 34 64 5c 78 34 66 5c 78 35 31 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 33 39 5c 78 34 33 5c 78 35 32 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 36 33 5c 78 34 64 5c 78 34 66 5c 78 34 31 5c 78 34 35 5c 78 34 64 5c 78 34 62 5c 78 36 32 5c 78 37 37 5c 78 37 32 5c 78 35 38 5c 78 34 34 5c 78 37 31 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 33 35 5c 78 37 61 5c 78 35 38 5c 78 36 38 5c 78 37 34 5c 78 32 66 5c 78 35 31 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 30 5c 78 33 32 5c 78 36 37 5c 78 34 37 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 34 38 5c 78 34 34 5c 78 37 33 5c 78 36 61 5c 78 35 31 5c 78 33 64 27 2c 27 5c 78 36 34 5c 78 33 30 5c 78 35 38 5c 78 Data Ascii: x77\x36\x7a\x43\x72\x4d\x4f\x51','\x77\x70\x39\x43\x52\x51\x3d\x3d','\x63\x4d\x4f\x41\x45\x4d\x4b\x62\x77\x72\x58\x44\x71\x67\x3d\x3d','\x77\x72\x35\x7a\x58\x68\x74\x2f\x51\x77\x3d\x3d','\x50\x32\x67\x47','\x77\x71\x48\x44\x73\x6a\x51\x3d','\x64\x30\x58\x
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 33 38 5c 78 34 66 5c 78 35 33 5c 78 36 35 5c 78 33 38 5c 78 34 66 5c 78 35 30 5c 78 35 39 5c 78 36 37 5c 78 35 38 5c 78 34 33 5c 78 36 66 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 35 5c 78 37 37 5c 78 32 66 5c 78 37 37 5c 78 36 66 5c 78 34 61 5c 78 33 31 5c 78 37 37 5c 78 37 30 5c 78 34 64 5c 78 35 61 5c 78 36 36 5c 78 35 34 5c 78 36 34 5c 78 35 34 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 34 64 5c 78 34 66 5c 78 37 37 5c 78 33 36 5c 78 34 64 5c 78 37 61 5c 78 34 65 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 36 37 5c 78 37 36 5c 78 37 37 5c 78 33 34 5c 78 35 61 5c 78 37 35 5c 78 37 37 5c 78 33 34 5c 78 36 66 5c 78 34 63 5c 78 35 30 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 38 5c 78 37 33 5c Data Ascii: 38\x4f\x53\x65\x38\x4f\x50\x59\x67\x58\x43\x6f\x67\x3d\x3d','\x77\x35\x77\x2f\x77\x6f\x4a\x31\x77\x70\x4d\x5a\x66\x54\x64\x54','\x77\x34\x4d\x4f\x77\x36\x4d\x7a\x4e\x77\x3d\x3d','\x77\x70\x67\x76\x77\x34\x5a\x75\x77\x34\x6f\x4c\x50\x51\x3d\x3d','\x48\x73\
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 5c 78 36 37 5c 78 37 37 5c 78 37 32 5c 78 36 61 5c 78 34 33 5c 78 37 35 5c 78 34 31 5c 78 34 63 5c 78 34 33 5c 78 37 34 5c 78 34 64 5c 78 34 66 5c 78 34 36 5c 78 37 37 5c 78 33 37 5c 78 33 38 5c 78 33 64 27 2c 27 5c 78 34 33 5c 78 33 38 5c 78 34 66 5c 78 34 63 5c 78 35 37 5c 78 34 64 5c 78 34 66 5c 78 33 33 5c 78 37 37 5c 78 33 37 5c 78 33 34 5c 78 33 64 27 2c 27 5c 78 35 61 5c 78 33 38 5c 78 34 62 5c 78 37 37 5c 78 37 37 5c 78 33 37 5c 78 36 66 5c 78 36 38 5c 78 37 37 5c 78 33 35 5c 78 35 38 5c 78 34 34 5c 78 37 33 5c 78 34 64 5c 78 34 62 5c 78 37 32 27 2c 27 5c 78 34 37 5c 78 36 33 5c 78 34 66 5c 78 36 63 5c 78 36 32 5c 78 37 33 5c 78 34 66 5c 78 37 37 5c 78 36 36 5c 78 35 31 5c 78 35 30 5c 78 34 34 5c 78 36 64 5c 78 33 38 5c 78 34 62 5c 78 34 37 27 2c Data Ascii: \x67\x77\x72\x6a\x43\x75\x41\x4c\x43\x74\x4d\x4f\x46\x77\x37\x38\x3d','\x43\x38\x4f\x4c\x57\x4d\x4f\x33\x77\x37\x34\x3d','\x5a\x38\x4b\x77\x77\x37\x6f\x68\x77\x35\x58\x44\x73\x4d\x4b\x72','\x47\x63\x4f\x6c\x62\x73\x4f\x77\x66\x51\x50\x44\x6d\x38\x4b\x47',
2024-12-31 23:22:33 UTC	1208	OUT	GET /media/ppung3sx/board_highlights_1.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49812	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	1191	OUT	GET /media/pcknkbmi/1.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	343	IN	HTTP/1.1 200 OK Etag: "1db557538328d87" Last-Modified: Mon, 23 Dec 2024 19:59:48 GMT Content-Type: image/png Content-Length: 58173 Cache-Control: max-age=11343, public Expires: Wed, 01 Jan 2025 02:31:36 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 15-142566390-0 0CNN RT(1735687352853 297) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:33 UTC	1109	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 02 00 00 00 63 72 fb d8 00 00 20 00 49 44 41 54 78 9c ec dd 89 77 14 65 da ff ff df ff 43 94 7d 47 54 50 36 51 16 19 50 40 71 41 14 5c 60 44 41 dc 07 14 51 c1 15 07 14 41 05 41 41 50 50 14 47 11 44 04 45 06 48 48 08 81 00 d9 48 42 c8 9e ee ec 49 cf ef 1e fa f9 e6 c9 93 ee ae ba bb ab ba af ba bb de af 73 1d cf 9c 33 54 f5 5d fb f5 49 57 57 fd 7f 0d 00 00 00 00 e0 31 ff 9f f4 00 00 00 00 00 a0 27 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf Data Ascii: PNGIHDR88cr IDATxweC}GTP6QP@qA\`DAQAAAPPGDEHHHBIs3T]IWW1'!!!!!!
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 91 cd 97 bf 90 ee a3 53 cd 5f 41 a5 a5 f8 53 e9 9d 8c a2 28 8a a2 28 8a a2 12 a9 96 e2 8d d2 dd 74 4a f9 28 a8 b4 16 bc 2d be 7b 51 14 45 51 14 45 51 54 c2 d5 5a f0 9e 74 4f 9d 3a 7e 09 2a 2d 25 5b 92 bd df 84 b2 c6 75 9e 99 dd 7e 6e 61 db c5 15 ad 85 1f b4 16 ae a3 28 8a a2 28 8a a2 7c 50 1f a8 f6 4f 35 81 aa 15 54 0d 61 b2 7b ce 6b 8f 2d f6 05 5f 04 95 e6 d2 3d c9 f8 5d 4a 67 ee 7d 2a d4 36 5d f9 35 58 7d b6 a1 be 4a 7a 29 01 00 00 e0 01 f5 55 aa 39 54 2d 62 6b c1 bb 9d b9 73 92 90 55 46 aa e6 56 7a 21 53 21 fd 83 4a 63 c5 61 17 9f f1 15 ca 9e da 76 61 45 53 d9 5e 3f 3f d3 1a 00 00 00 9a 02 b5 a5 aa 75 6c bb b0 3c 94 3d c5 b5 ac 92 79 93 6a 71 a5 97 2c e9 d2 3c a8 34 56 fe 3b 94 35 c6 9d ef 4f 72 66 34 95 ef 93 5e 20 00 00 00 98 aa a9 ec 07 d5 52 ba f3 Data Ascii: S_AS((tJ(-{QEQEQTZtO:~-%[u~na((\|PO5Ta{k-_=]Jg}6]5X}Jz)U9T-bksUFVz!S!JcavaES^??ul<=yjq,<4V;5Orf4^ R
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 Data Ascii: &!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 8b a7 02 0f 56 28 f3 96 40 6d a1 f4 c6 01 00 37 11 54 4c 42 50 01 e0 73 4d e5 3f 8b 47 02 cf 56 5b fe 8b d2 db 07 00 dc 44 50 31 09 41 05 80 cf 75 66 4f 15 cf 03 5e ae c6 ab c7 a5 37 11 00 b8 86 a0 62 12 82 0a 00 3f 6b 29 de 24 9e 04 3c 5e 9d b9 73 a4 b7 12 00 b8 86 a0 62 12 82 0a 00 df 0a d4 96 84 32 6f 11 4f 02 de af e6 d2 5d d2 db 0a 00 dc 41 50 31 09 41 05 80 6f b5 5d f8 87 78 06 30 a2 42 a7 27 06 ea 2a a4 37 17 00 b8 80 a0 62 12 82 0a 00 7f 0a 56 66 8a 07 00 83 aa b5 e0 5d e9 2d 06 00 2e 20 a8 98 84 a0 02 c0 9f 3a ce ce 15 ef fe cd aa 60 75 9e f4 46 03 00 a7 08 2a 26 21 a8 00 f0 a1 e6 b2 3d e2 7d bf 71 d5 7e fe 29 e9 ed 06 00 4e 11 54 4c 42 50 01 e0 37 81 fa ca d0 e9 49 e2 7d bf 89 d5 54 71 48 7a eb 01 80 23 04 15 93 10 54 00 f8 8d 3a 8f 89 77 fc 86 Data Ascii: V(@m7TLBPsM?GV[DP1AufO^7b?k)$<^sb2oO]AP1Ao]x0B'7bVf]-. :`uF&!=}q~)NTLBP7I}TqHz#T:w
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: b2 41 e5 89 7b fb 8a af 04 8b 0a 56 e7 49 ef 38 00 fc 8e a0 62 12 82 0a 00 e3 34 95 ed 15 ef b9 a3 d6 84 d1 29 7d cf 63 a4 49 5e 7d f3 63 b8 da cf 2d 96 de 77 00 f8 1d 41 c5 24 04 15 00 c6 09 9d 9e 24 de 73 47 ad b1 37 0b bc 41 a5 bb e1 83 33 c4 57 82 75 35 55 1c 92 de 7d 00 f8 1a 41 c5 24 04 15 00 66 69 29 5a 2f de 6d c7 aa 71 a3 84 83 8a 22 be 12 ac ab 33 e7 6e e9 3d 08 80 af 11 54 4c 42 50 01 60 90 40 6d a1 78 ab 6d 51 04 15 9d 6a 29 d9 22 bd 1f 01 f0 2f 82 8a 49 08 2a 00 0c d2 9e ff 9c 78 9f 6d 51 04 15 9d 0a 65 8d 09 d4 95 49 ef 4a 00 7c 8a a0 62 12 82 0a 00 53 34 5e 3d 2e de 64 5b 17 41 45 b3 da 2e ae 94 de 9b 00 f8 14 41 c5 24 04 15 00 a6 e8 cc 9d 23 de 61 5b 17 41 45 bf 82 55 39 d2 3b 14 00 3f 22 a8 98 84 a0 02 c0 08 cd 97 77 8a f7 d6 b6 45 50 d1 Data Ascii: A{VI8b4)}cI^}c-wA$$sG7A3Wu5U}A$fi)Z/mq"3n=TLBP`@mxmQj)"/I*xmQeIJ\|bS4^=.d[AE.A$#a[AEU9;?"wEP
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 88 fd 4c 65 e9 bc be e2 8b 9f e2 0a 9d 9e 24 bd 77 03 30 0c 41 c5 24 04 15 00 49 15 ac ce 17 6f 67 53 59 85 fb c4 ee fe fa 6b 9b 8f ee fb ea aa 96 a2 f5 d2 fb 38 00 93 10 54 4c 42 50 01 90 54 ed e7 97 88 f7 b2 29 ae f9 b3 04 1e 52 3c 7d 62 6f f1 05 97 aa 40 6d a1 f4 6e 0e c0 18 04 15 93 10 54 00 24 4f 63 c5 ef e2 5d 6c ea eb d4 8e a1 a9 0f 2a 07 37 fa f1 eb 94 70 b5 e7 3f 27 bd a7 03 30 06 41 c5 24 04 15 00 c9 d3 79 66 96 78 17 2b 52 cb 1e ee 97 ca 94 b2 60 b6 5f 5e 9f 12 ab 1a af 1e 97 de d9 01 98 81 a0 62 12 82 0a 80 24 69 29 d9 2a de bf 4a 55 ed e1 11 37 0d 4f d1 e3 bf 86 0c cc a8 38 30 5c 7c 91 65 ab f3 cc bd d2 fb 3b 00 33 10 54 4c 42 50 01 90 0c 81 ba b2 50 d6 78 f1 fe 55 b0 8e 6f 4b d1 0d 60 87 3e f1 ef 4d 5f dd ab f9 f2 4e e9 bd 1e 80 01 08 2a 26 Data Ascii: Le$w0A$IogSYk8TLBPT)R<}bo@mnT$Oc]l7p?'0A$yfx+R`_^b$i)JU7O80\\|e;3TLBPPxUoK`>M_N*&
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 7b 4a 43 7d 95 f4 41 06 20 75 08 2a 26 21 a8 00 b0 10 ac b9 28 de 4a 9a 58 a3 6e 48 fc ad 8e 89 a9 e3 bd f5 89 56 4b d1 7a e9 e3 0c 40 ea 10 54 4c 42 50 01 60 a1 3d 7f 99 78 1f 69 5c ed 7a 7b 50 8a 53 8a f2 e1 cb 03 c4 17 dc dc 0a d4 14 48 1f 6a 00 52 84 a0 62 12 82 0a 80 58 1a 2b 8e 8a 77 90 26 d6 ec 29 bd 53 1f 54 c6 8d ba 4e 7c c1 cd ad b6 0b 2f 49 1f 6d 00 52 84 a0 62 12 82 0a 80 58 3a 72 ef 17 ef 20 8d ab 2b bf 0c 4f 7d 4a 09 3b bd 73 a8 f8 e2 9b 5b c1 ea 3c e9 03 0e 40 2a 10 54 4c 42 50 01 10 55 53 d9 5e f1 de d1 c4 da 29 71 df 57 d8 3f 5f e4 ee af c4 ab 3d 7f 99 f4 31 07 20 15 08 2a 26 21 a8 00 88 aa 33 fb 4e f1 de d1 c4 5a f2 50 5f a9 a0 72 df b4 3e e2 8b 6f 74 35 56 9e 90 3e ec 00 24 1d 41 c5 24 04 15 00 91 5a 4a b6 88 77 8d 86 d6 b4 db ae 97 0a Data Ascii: {JC}A u&!(JXnHVKz@TLBP`=xi\z{PSHjRbX+w&)STN\|/ImRbX:r +O}J;s[<@TLBPUS^)qW?_=1 *&!3NZP_r>ot5V>$A$ZJw
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 79 b9 a4 8f 51 00 6e 22 a8 98 84 a0 02 f8 5c eb a5 d5 e2 8d 20 45 79 b6 3a 73 ee 92 3e 46 01 b8 89 a0 62 12 82 0a e0 73 cd 97 bf 14 ef 05 29 ca b3 d5 7e fe 29 e9 63 14 80 9b 08 2a 26 21 a8 00 3e d7 78 f5 98 78 2f 48 51 9e ad d6 c2 7f 4a 1f a3 00 dc 44 50 31 09 41 05 40 28 eb 56 f1 76 90 a2 bc 59 ea 2a 29 7d 80 02 70 13 41 c5 24 04 15 00 ed e7 9f 16 6f 07 29 ca 83 a5 32 bc f4 d1 09 c0 65 04 15 93 10 54 00 34 97 6c 13 ef 08 29 ca 83 a5 32 bc f4 d1 09 c0 65 04 15 93 10 54 00 04 6a 2e 8a 77 84 14 e5 c1 6a 2e dd 25 7d 74 02 70 19 41 c5 24 04 15 00 0d ff 7d 9b ca 42 f1 a6 90 a2 3c 55 a1 cc 5b 02 f5 95 d2 87 26 00 97 11 54 4c 42 50 01 a0 34 95 fd 20 de 17 52 94 a7 aa ed d2 2a e9 e3 12 80 fb 08 2a 26 21 a8 00 08 0b 9d be 4d bc 35 a4 28 ef 54 b0 2a 5b fa a0 04 e0 Data Ascii: yQn"\ Ey:s>Fbs)~)c&!>xx/HQJDP1A@(VvY)}pA$o)2eT4l)2eTj.wj.%}tpA$}B<U[&TLBP4 R*&!M5(T[
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 Data Ascii:
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 76 9d 5d d5 a1 71 f0 e0 c1 fc fc 7c d7 3f 2e 2e ea 82 75 ea d4 29 75 02 e9 3a eb 6e dd ba 55 0d 2c 81 97 8a aa 73 d1 9f 7f fe b9 63 c7 8e f0 32 aa 59 7d f1 c5 17 ea 2a 79 f9 f2 e5 64 8c bc 87 e2 e2 e2 03 07 0e a8 93 4c f8 5c ad 4e 83 ea f2 a1 4e 83 6a cd 8b 5c 3e d4 96 fd f6 db 6f d5 aa 58 bf 7e bd 1a 89 da b1 cb cb cb 53 3f 0c af 21 a8 98 84 a0 e2 9c f3 a0 a2 4e 6a 8f 59 52 97 96 1e 93 a8 b3 de aa 55 ab 26 4e 9c 18 eb 13 55 9f b4 70 e1 42 75 a2 b7 1d ff e1 c3 87 97 2e 5d 7a e3 8d 37 c6 9a d5 c0 81 03 1f 7f fc f1 bd 7b f7 c6 db 6e be f9 e6 9b d6 cb d5 23 7b a8 f3 fb a2 45 8b d4 c8 a3 0e 43 ad e7 19 33 66 a8 53 bf ba 12 c4 35 0c 1d aa 9d 55 5d f5 c3 0f 3f 3c 7c f8 70 8b ed 38 60 c0 80 7b ee b9 47 8d 41 ff 2e ff 48 b6 9b 5b 75 45 dd ff fd 91 23 47 e6 cd 9b Data Ascii: v]q\|?..u)u:nU,sc2Y}*ydL\NNj\>oX~S?!NjYRU&NUpBu.]z7{n#{EC3fS5U]?<\|p8`{GA.H[uE#G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49814	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	1208	OUT	GET /media/zw1kviit/board_highlights_2.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	349	IN	HTTP/1.1 200 OK Etag: "1db0f5271f1374e" Last-Modified: Wed, 25 Sep 2024 13:54:31 GMT Content-Type: image/png Content-Length: 926522 Cache-Control: max-age=82209, public Expires: Wed, 01 Jan 2025 22:12:42 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 15-142566393-142566120 2CNN RT(1735687352876 277) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 9b 08 06 00 00 00 66 62 a0 3f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 20 00 49 44 41 54 78 9c ec bd 69 b7 15 47 92 ae c9 a7 fe dc eb ae d5 dd 6b dd ea 7b bb aa b2 2a 87 ca 54 a6 32 25 21 a5 e6 09 31 cf 83 98 04 87 c3 3c 1f e0 00 42 12 48 20 94 1a 11 42 c0 39 87 51 80 a4 5f 76 7f c1 fe 05 71 fd b5 08 77 37 33 37 f3 88 7d 90 52 59 bd ea 43 ac bd 77 ec 18 3d 3c dc fd b1 d7 cc 7c c1 be 4f be fc 5f 7b 3e fa db 68 f2 c2 e5 d1 ce f7 3f 1a 4d 7e f8 c9 68 db e9 f7 c2 f7 0f 47 13 1f 5c 1c 6d 9d 7e 77 b4 72 cf fe d1 a2 ad db 47 93 e7 3f 1e 85 ed 47 13 61 bb 03 9f 7e 3d 3a fc e5 75 da e6 8d b7 b7 8c d6 1d 3a 3a da 7c f2 cc 68 ea db 3b a3 53 b3 0f 47 07 3f bb 3a da 74 fc d4 68 cb a9 b3 Data Ascii: PNGIHDRfb?gAMAa IDATxiGk{*T2%!1<BH B9Q_vqw737}RYCw=<\|O_{>h?M~hG\m~wrG?Ga~=:u::\|h;SG?:th
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: e7 2b eb 3a 7f 07 a7 2b cf b0 da 06 bb 65 a0 b6 65 ed 4a 5f db cc 9f 51 6f 5b 6d 9d b3 bb 9f b6 9e df a7 fb f1 ea 55 18 70 a6 72 a1 72 bc 7e b7 09 00 db 04 18 15 0b d6 d1 72 bd fb ef da ad 66 ea 1a 3e f1 1f 96 3b dd 76 77 da e5 7a de 9e 7e 5f 53 c7 09 0b ce 45 4b f1 4c e5 3b 17 df c7 f4 0e e2 7a 53 5b c0 ca a1 bb 67 3a 4e 3c 3f 5d cf dd 7c ac 78 3d 6a c9 f7 59 ae a3 e5 9b b9 e6 d8 d5 39 ba 9f 93 f1 1a 58 9d cd f5 ee 3b bb de de 94 ff e3 18 53 fc 7e 67 ca 7e 24 bf 2b 65 9b 6a b7 91 5e 1b f8 f8 8b 68 4f 67 bb 7a 7a fb 87 76 dc 78 eb 07 5a e2 3a fa 7e 9b 2f 3f 76 4b fb fd 8c 5a 4e 77 c7 e0 75 bd 6d 7b 7e 90 e3 0c ef f7 ed 7c fe 74 2d dd b5 95 e7 e2 d7 f7 63 77 3d 3f 14 d7 76 9a dd 17 5f d2 79 6f cb c5 3a 57 df 92 cb 84 5f 4f 79 6c fb 3f 6b 7f b9 e8 eb b4 ae Data Ascii: +:+eeJ_Qo[mUprr~rf>;vwz~_SEKL;zS[g:N<?]\|x=jY9X;S~g~$+ej^hOgzzvxZ:~/?vKZNwum{~\|t-cw=?v_yo:W_Oyl?k
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 8c 79 51 7d d3 6d 07 57 f5 4e 16 d7 69 bc b7 fa 9d 35 06 33 66 fd 37 07 ca 7c 70 53 96 8b 0b 86 fa 3d eb 5b bc eb 34 b6 29 a1 5c be 0f 9e e1 47 a8 12 bc 7e 98 cf c9 aa f7 46 9d 53 f5 3b 03 38 7f ef ca 77 4f 03 79 31 c0 b2 da a0 be 36 58 ef 3b 5f 40 77 eb c2 c3 5c ff bc ba a7 c0 3e b7 73 ba 7d b9 2f 94 68 02 50 a8 ea df dc 6a 8e 5e 9d e9 96 59 82 f4 08 ea 53 02 d0 ef 16 60 2f 54 75 a6 c6 9f 60 90 9e 00 3c 41 bc 54 bf 93 f2 de bd 7f c2 78 39 63 2b e7 19 c2 f3 71 4f 32 40 b7 c0 3c c2 79 bb 8e 83 f9 fd b2 7e 15 75 51 1a f1 b4 71 d4 f2 08 89 de 01 f1 de 04 a4 b3 7b cb eb b5 d7 8e 35 e6 b0 df b9 e2 fd e3 ff 1b ef 80 5b 87 b5 7a 67 00 a2 a7 0a 57 95 6d 03 22 4c f8 77 40 63 3e c0 e1 a9 fb 9e 81 41 42 ee 7c e1 dc 3f be 77 2f 7a 7b d7 88 60 80 5c f9 5c 4a cf 80 9a Data Ascii: yQ}mWNi53f7\|pS=[4)\G~FS;8wOy16X;_@w\>s}/hPj^YS`/Tu`<ATx9c+qO2@<y~uQq{5[zgWm"Lw@c>AB\|?w/z{`\\J
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 55 f5 89 d5 a3 c2 c0 d5 fd 97 dc dd 19 c4 66 a5 5b 02 b7 ad a8 33 f8 c6 ba ee 58 49 3d d7 9f 5a 0d 8f 5e 2b d1 98 20 00 fe 76 36 c4 17 31 ee 39 bc cd 74 c1 57 71 e8 49 79 67 b9 0d b8 e1 22 b5 7d cc b5 9e 6f 2f 55 72 95 3b 41 79 0c e8 fd 4b 6f 1d 16 52 e3 be 6f 7c 7d f6 2e d0 8b db de 2a 83 62 fa 6e 29 b1 1a 18 86 82 92 ab 10 f7 03 66 3e af 34 16 fc 5c 71 b4 5a 5d 2f af 5b 9e 5b 7f e7 fb 6b e8 d6 6e ed 35 75 b8 66 3c b0 af 57 1b 12 ea e5 59 c4 91 f7 8d c1 54 bb 95 c7 58 6c 1c c7 c6 5d 35 23 80 b5 0c 1a 63 ce c3 f0 50 9c 3f de bb fa 2f 7e da fd 59 ff 58 7f e8 38 fd a7 18 37 a7 31 b3 71 1e 3d de 17 c7 e2 cf ff 67 30 6e a1 2d 05 3b fe e9 e5 57 9b cd 53 a7 69 1d f2 8a c1 b3 fb ed 8e 25 09 d0 3b e5 1c ec b8 b5 8b 49 07 90 b7 2e ee ef a7 38 72 12 73 03 27 42 3d Data Ascii: Uf[3XI=Z^+ v619tWqIyg"}o/Ur;AyKoRo\|}.*bn)f>4\qZ]/[[kn5uf<WYTXl]5#cP?/~YX871q=g0n-;WSi%;I.8rs'B=
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: ca a2 02 c8 36 9c 7b 65 d4 77 7d f5 c4 7c e5 73 eb 16 3d e6 52 63 aa 3e 75 5b 82 b7 8c ab 2e 54 75 eb 98 1e f8 b3 eb 2b a1 72 38 a0 8b 38 6f 0d e3 dd 7f 7d ed 69 31 a6 70 8c ee b4 dc 62 06 0e c3 30 e0 e6 41 ea 33 d4 5a 80 ae b7 9b 63 ed bd 31 e6 b6 df e5 7a 9d 1a 0b ce 43 db 75 f8 cb 1b cd b3 4b 96 91 3a 1e 8f 01 17 77 28 cf 00 74 b8 a9 23 06 bd 4d 0c 77 ae 4b f4 96 13 be b5 f1 e5 e7 d9 ef 0b 34 23 18 d8 12 90 1e f3 99 b5 4a f7 c7 c9 4d 3d 7a 6c b7 49 c9 2f b6 8c 1a ce 01 f6 44 2e 37 b0 e8 8a 00 db 48 a6 0e d0 86 a7 f9 9a 03 ed 02 20 c7 27 e2 e4 21 42 53 42 3a b8 e3 23 a1 1d 62 e2 61 30 e8 12 cb ed 0a e7 08 c7 1a 2d 08 80 3c 6a e3 bf af 50 23 8e 1d a0 28 83 f2 17 6f df d9 bc 85 13 85 83 62 3d 92 b6 01 cc e1 5a 40 09 df 02 a0 43 71 c7 6f 64 46 85 75 19 89 Data Ascii: 6{ew}\|s=Rc>u[.Tu+r88o}i1pb0A3Zc1zCuK:w(t#MwK4#JM=zlI/D.7H '!BSB:#ba0-<jP#(ob=Z@CqodFu
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 96 61 67 58 48 05 c1 78 68 9f e0 75 bd 30 c0 f9 c6 a3 27 3b 60 6f b9 12 4c 08 71 96 66 16 83 72 4e aa f4 07 49 95 4e 33 7c bd ff 61 9a d7 3c ba 9e 83 73 a1 6a 93 ab 39 bc c7 03 80 93 eb 79 e0 60 30 2c 7e af de d7 2a e0 e0 e3 e8 46 8f a9 c4 79 32 38 84 5a e3 b8 80 79 b0 28 98 3a aa ed 13 6c 86 b1 76 ea b5 8f f2 75 75 31 ec 71 1b ec 13 8e 31 5a f0 f6 c9 33 23 50 3e 14 69 48 ec 6f 6c de 4a 20 0b d7 f6 d7 37 be 4d 71 e6 db cf bc 4f 37 40 6e ed 01 ae a1 48 ef 7c ff 62 eb d3 1f 2e 10 60 0c 10 c6 20 0e 1d d6 6e 9a b7 fc 62 9a b3 1c 2a 37 d2 e1 03 ca 51 19 51 d8 00 6b c4 5c c1 ea 41 99 da bb e4 6f c8 e4 8e 73 20 eb 7b cc e8 8a 6d 60 55 40 81 a0 00 a0 82 43 b5 27 20 47 0c 3a 5b a8 50 2e 5c 4e 99 f0 28 2e fd 62 3b 95 1b 0a 02 86 06 5d 09 b6 9e 3c 4b 09 f1 f0 5d 54 Data Ascii: agXHxhu0';`oLqfrNIN3\|a<sj9y`0,~Fy28Zy(:lvuu1q1Z3#P>iHolJ 7MqO7@nH\|b.` nb7QQk\Aos {m`U@C' G:[P.\N(.b;]<K]T
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 22 0d 25 3d 42 f8 ce 4e f9 de c1 60 7a c7 39 a6 80 33 d7 f4 f8 1d dc 0c 96 26 30 87 82 de cd 2e c6 a7 55 a3 69 da 12 ac e7 99 c6 76 74 c7 c1 3e 81 8f 47 0b b6 9f 7d 7f f4 ca da f5 cd 8b ab d7 d2 7c e4 b8 51 b8 8c af da 7f 88 d4 6a c4 9e c7 58 71 f8 d4 03 ca 11 cf 0d a5 1b 37 89 ce 07 ae 05 80 66 b8 b4 53 3a fb d3 ef 92 42 3e 3d fb 20 5c e4 47 e4 ff 1f ad 1f 50 b0 f1 b0 d0 89 fe fe f9 17 9a d5 7b 0f b6 50 1c d6 e1 7f 9c 13 56 8f e8 da 0e 55 1c c7 85 ca 0e 77 84 d6 1d 7f 8e d4 74 5c 0f b9 c4 5f fa bc 75 c1 0f df a1 d8 63 89 e9 ed 77 75 2a 3e 7e e3 da 90 cc ce 6a 80 16 6f db 41 d6 95 16 d0 99 8a d1 0d 3e ed 24 6f 72 3b 7b 30 39 1c c6 bd 41 96 35 e8 a9 82 d8 b8 20 67 59 a4 bd 63 0d 80 64 0e e8 ee 36 0e 94 6a 38 17 80 3e 00 cc 07 2f 06 00 eb ce a1 00 f4 f9 34 Data Ascii: "%=BN`z93&0.Uivt>G}\|QjXq7fS:B>= \GP{PVUwt\_ucwu*>~joA>$or;{09A5 gYcd6j8>/4
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 71 c1 fb 02 b0 ef fd f8 0b 82 5b 40 32 e6 3b c7 77 64 55 87 5b 39 7c ed 61 95 80 b5 00 c1 f4 8b b7 ef 20 b7 02 b8 9a 03 e4 d1 b9 a2 e2 61 5b 58 92 91 c6 1e d3 b0 3d fd e6 a2 e6 9f 9f 78 82 0a fb 57 4f fe 99 b2 f1 bd b6 71 13 c5 05 c0 30 00 17 81 c5 e1 38 48 59 1f b3 da 41 55 47 22 38 b8 bb b7 96 91 73 04 f5 b8 96 03 5d b6 f7 a8 b8 b7 2e ed 9f b4 85 83 c0 7d 01 e8 37 cd 06 f3 54 18 0c fd f9 d5 d7 52 12 39 53 fd b0 06 a5 c5 00 6d 7e 70 6e 2d 96 0a 54 db b6 17 b4 c7 59 1c a0 9c 4f 23 3a b8 31 ab 00 b9 fe de d7 70 0c b9 8e 68 a9 33 b3 b9 8f 61 14 28 1a 71 0d ff ac e1 f1 ca a0 38 96 75 4e ef fa fa 9e b7 b3 5d 1a 60 5b ae e8 7a 60 1e 17 0e e5 37 d8 d4 3c 37 9d 01 9e 01 bd 1a cc 4f 19 9f 3e a0 95 bf 35 b8 17 e1 28 ea f8 55 37 7c f3 bf 32 1e 3f fe 96 30 55 82 70 Data Ascii: q[@2;wdU[9\|a a[X=xWOq08HYAUG"8s].}7TR9Sm~pn-TYO#:1ph3a(q8uN]`[z`7<7O>5(U7\|2?0Up
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: e7 d2 67 a4 ca 03 e0 4f 84 02 c6 c5 3e bf 62 65 b3 e5 e4 59 2a 74 c0 3c 54 78 a8 eb 7f 7c f1 25 fa ff 00 5c e7 69 ea 34 ba e0 f6 f3 c0 21 2a fc 89 ae 60 70 ed 00 f4 d6 45 bf 05 72 2c f8 8d 4e 15 df 49 41 0f 0f 04 1d a5 d7 60 e2 de 9e 5d b2 2c bd d8 76 25 b3 dd 37 c6 85 74 ef c5 1e 02 ed 05 58 5b 0d 47 df 31 6b 8b 3e ae 01 84 a7 f9 62 01 a9 4e 4e 61 00 af 09 97 f3 00 78 0f a4 a7 ad 6b 34 3a 85 a1 46 82 22 0e ae 2f 16 bd 62 08 30 3b 25 e7 d8 bd 89 f6 74 1d d0 75 c4 00 f8 3e 80 a9 01 ad 00 54 53 bd 91 ae cd 26 a0 73 65 45 b8 ce 66 a8 f1 d4 59 0d 52 63 c1 79 55 25 37 dc 33 0d 48 f7 b6 15 03 d6 38 70 66 ae a1 53 5c d1 76 62 d0 f5 94 4e 02 46 0c 17 5e ae 0e 46 08 97 31 bb 39 a9 56 4e 0a 25 8d 05 22 cb 33 8f 71 67 5e 03 19 62 1f ca b2 4c 4b 1c c4 77 31 b0 ca 05 Data Ascii: gO>beYt<Tx\|%\i4!`pEr,NIA`],v%7tX[G1k>bNNaxk4:F"/b0;%tu>TS&seEfYRcyU%73H8pfS\vbNF^F19VN%"3qg^bLKw1
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: df 3c f1 e2 8b cd af ff f2 14 15 28 f6 85 3a 0e a0 de 7c e2 4c f3 64 d8 16 c7 a6 6c f2 01 d0 e1 7e 80 42 88 c9 e1 f0 09 f0 26 d5 3c 40 3a c5 a4 23 9b 3b dc de bf b8 16 f6 39 49 85 49 f3 a9 7f fa 35 59 ab 6b 0d 1a bc 02 5e 5c b5 26 55 ea f2 45 50 15 b2 06 3a c6 52 7d f9 6b 50 da 07 ae b5 ff 8d c6 69 d0 e2 9c 4b c3 ea a0 06 d3 6b e4 fa ce 6d 35 9c 03 81 ff 71 a0 5e 03 7a 1a 34 54 3a 1a af 63 a9 75 3c a6 db 91 63 00 28 1a d1 da f3 77 9e 23 6f 5c b5 51 44 37 b2 a5 ea cd 07 69 1a 46 b5 9b a4 af 92 d7 dc a6 93 b5 d9 f2 56 31 80 7c e8 52 aa e7 86 21 c1 4d 74 27 07 a7 1c b6 0b 35 e9 46 5f 66 e4 32 0e 9d 67 5a 2e e3 cf 25 30 54 13 57 f1 b8 5a e1 fa 9e a7 6e 13 50 71 3d ab e6 1a ce ed 41 ba b4 e8 a7 6d 66 72 cc b9 ce 82 dd 82 ca ad ec a6 6b 28 a8 27 85 8a 9b 07 22 Data Ascii: <(:\|Ldl~B&<@:#;9II5Yk^\&UEP:R}kPiKkm5q^z4T:cu<c(w#o\QD7iFV1\|R!Mt'5F_f2gZ.%0TWZnPq=Amfrk('"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49818	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	971	OUT	GET /media/dv5d04qo/icon_youtube-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37ada2" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 674 Cache-Control: max-age=82205, public Expires: Wed, 01 Jan 2025 22:12:38 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 18-261310994-0 0CNN RT(1735687353253 388) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:33 UTC	674	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 35 20 31 32 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 33 31 66 32 30 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125"> <defs> <style> .cls-1 { fill: #231f20; fill-rule: evenodd; } .cls-2 { fill: #fff; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49819	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	1205	OUT	GET /media/vbxdaes3/241_cp_1200x600.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	349	IN	HTTP/1.1 200 OK Etag: "1db143c234f79c9" Last-Modified: Tue, 01 Oct 2024 19:57:26 GMT Content-Type: image/png Content-Length: 634569 Cache-Control: max-age=82210, public Expires: Wed, 01 Jan 2025 22:12:43 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 18-261310996-261307266 2CNN RT(1735687353264 379) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 77 08 02 00 00 00 75 fe 59 8b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRwuYgAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 9c 6b 9e 61 be d9 bc db fc 8d 85 a5 45 9c c5 4a 8b 36 8b c7 96 da 96 7c cb 05 96 4d 96 f7 ac 98 56 3e 56 79 56 f5 56 d7 ac 49 d6 5c eb 2c eb 6d d6 57 6c 50 1b 57 9b 0c 9b 3a 9b cb b6 a8 ad 9b ad c4 76 9b 6d df 14 e2 14 8f 29 d2 29 f5 53 6e da 31 ec fc ec 0a ec 9a ec 06 ed 39 f6 61 f6 25 f6 6d f6 cf 1d cc 1c 12 1d d6 3b 74 3b 7c 72 74 75 cc 76 6c 70 bc eb a4 e1 34 c3 a9 c4 a9 c3 e9 57 67 1b 67 a1 73 9d f3 35 17 a6 4b 90 cb 12 97 76 97 17 53 6d a7 8a a7 6e 9f 7a cb 95 e5 1a ee ba d2 b5 d3 f5 a3 9b bb 9b dc ad d9 6d d4 dd cc 3d c5 7d ab fb 4d 2e 9b 1b c9 5d c3 3d ef 41 f4 f0 f7 58 e2 71 cc e3 9d a7 9b a7 c2 f3 90 e7 2f 5e 76 5e 59 5e fb bd 1e 4f b3 9c 26 9e d6 30 6d c8 db c4 5b e0 bd cb 7b 60 3a 3e 3d 65 fa ce e9 03 3e c6 3e 02 9f 7a 9f 87 be a6 be 22 df 3d Data Ascii: kaEJ6\|MV>VyVVI\,mWlPW:vm))Sn19a%m;t;\|rtuvlp4Wggs5KvSmnzm=}M.]=AXq/^v^Y^O&0m[{`:>=e>>z"=
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 2d 31 31 3a 35 32 3a 30 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 64 72 6f 6e 65 2d 64 6a 69 3d 22 68 74 74 70 3a Data Ascii: .1-c002 79.a6a63968a, 2024/03/06-11:52:05 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:drone-dji="http:
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 38 35 35 38 33 35 37 37 35 32 38 41 30 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 30 39 31 33 39 64 65 36 2d 62 63 64 33 2d 39 61 34 65 2d 38 30 61 37 2d 33 65 31 64 62 30 30 63 38 64 35 39 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 46 41 35 35 34 43 43 35 30 44 39 42 37 43 33 34 33 35 35 41 46 35 33 31 43 46 38 31 46 30 36 41 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 64 39 37 31 65 62 34 2d 63 38 38 38 2d 34 35 36 38 2d 39 32 36 30 2d 38 34 31 31 30 66 36 39 38 36 64 34 22 20 63 72 73 3a 52 61 77 46 69 6c 65 4e 61 6d Data Ascii: 85583577528A0" photoshop:ColorMode="3" xmpMM:DocumentID="adobe:docid:photoshop:09139de6-bcd3-9a4e-80a7-3e1db00c8d59" xmpMM:OriginalDocumentID="FA554CC50D9B7C34355AF531CF81F06A" xmpMM:InstanceID="xmp.iid:4d971eb4-c888-4568-9260-84110f6986d4" crs:RawFileNam
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 75 72 61 74 69 6f 6e 41 64 6a 75 73 74 6d 65 6e 74 4d 61 67 65 6e 74 61 3d 22 30 22 20 63 72 73 3a 4c 75 6d 69 6e 61 6e 63 65 41 64 6a 75 73 74 6d 65 6e 74 52 65 64 3d 22 30 22 20 63 72 73 3a 4c 75 6d 69 6e 61 6e 63 65 41 64 6a 75 73 74 6d 65 6e 74 4f 72 61 6e 67 65 3d 22 30 22 20 63 72 73 3a 4c 75 6d 69 6e 61 6e 63 65 41 64 6a 75 73 74 6d 65 6e 74 59 65 6c 6c 6f 77 3d 22 30 22 20 63 72 73 3a 4c 75 6d 69 6e 61 6e 63 65 41 64 6a 75 73 74 6d 65 6e 74 47 72 65 65 6e 3d 22 30 22 20 63 72 73 3a 4c 75 6d 69 6e 61 6e 63 65 41 64 6a 75 73 74 6d 65 6e 74 41 71 75 61 3d 22 30 22 20 63 72 73 3a 4c 75 6d 69 6e 61 6e 63 65 41 64 6a 75 73 74 6d 65 6e 74 42 6c 75 65 3d 22 30 22 20 63 72 73 3a 4c 75 6d 69 6e 61 6e 63 65 41 64 6a 75 73 74 6d 65 6e 74 50 75 72 70 6c 65 3d Data Ascii: urationAdjustmentMagenta="0" crs:LuminanceAdjustmentRed="0" crs:LuminanceAdjustmentOrange="0" crs:LuminanceAdjustmentYellow="0" crs:LuminanceAdjustmentGreen="0" crs:LuminanceAdjustmentAqua="0" crs:LuminanceAdjustmentBlue="0" crs:LuminanceAdjustmentPurple=
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 72 69 64 65 4c 6f 6f 6b 56 69 67 6e 65 74 74 65 3d 22 46 61 6c 73 65 22 20 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 4e 61 6d 65 32 30 31 32 3d 22 4c 69 6e 65 61 72 22 20 63 72 73 3a 43 61 6d 65 72 61 50 72 6f 66 69 6c 65 3d 22 45 6d 62 65 64 64 65 64 22 20 63 72 73 3a 43 61 6d 65 72 61 50 72 6f 66 69 6c 65 44 69 67 65 73 74 3d 22 35 34 36 35 30 41 33 34 31 42 35 42 35 43 43 41 45 38 34 34 32 44 30 42 34 33 41 39 32 42 43 45 22 20 63 72 73 3a 48 61 73 53 65 74 74 69 6e 67 73 3d 22 54 72 75 65 22 20 63 72 73 3a 43 72 6f 70 54 6f 70 3d 22 30 22 20 63 72 73 3a 43 72 6f 70 4c 65 66 74 3d 22 30 22 20 63 72 73 3a 43 72 6f 70 42 6f 74 74 6f 6d 3d 22 31 22 20 63 72 73 3a 43 72 6f 70 52 69 67 68 74 3d 22 31 22 20 63 72 73 3a 43 72 6f 70 41 6e 67 6c 65 3d 22 30 22 20 Data Ascii: rideLookVignette="False" crs:ToneCurveName2012="Linear" crs:CameraProfile="Embedded" crs:CameraProfileDigest="54650A341B5B5CCAE8442D0B43A92BCE" crs:HasSettings="True" crs:CropTop="0" crs:CropLeft="0" crs:CropBottom="1" crs:CropRight="1" crs:CropAngle="0"
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 30 4d 45 44 49 41 5c 44 4a 49 5f 30 34 36 31 2e 4a 50 47 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 64 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 69 6d 61 67 65 2f 6a 70 67 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 64 65 72 69 76 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 73 61 76 65 64 20 74 6f 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a Data Ascii: 0MEDIA\DJI_0461.JPG</rdf:li> </rdf:Alt> </dc:description> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpg to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="saved to new location"/> <rdf:li stEvt:
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 43 35 30 44 39 42 37 43 33 34 33 35 35 41 46 35 33 31 43 46 38 31 46 30 36 41 22 2f 3e 20 3c 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 3e 20 3c 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 52 65 64 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 Data Ascii: C50D9B7C34355AF531CF81F06A"/> <crs:ToneCurvePV2012> <rdf:Seq> <rdf:li>0, 0</rdf:li> <rdf:li>255, 255</rdf:li> </rdf:Seq> </crs:ToneCurvePV2012> <crs:ToneCurvePV2012Red> <rdf:Seq> <rdf:li>0, 0</rdf:li> <rdf:li>255, 255</rdf:li> </rdf:Seq> </crs:ToneCurvePV
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 4c 6f 63 61 6c 4c 75 6d 69 6e 61 6e 63 65 4e 6f 69 73 65 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 4d 6f 69 72 65 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 44 65 66 72 69 6e 67 65 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 54 65 6d 70 65 72 61 74 75 72 65 3d 22 2d 30 2e 34 36 35 39 30 33 22 20 63 72 73 3a 4c 6f 63 61 6c 54 69 6e 74 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 54 65 78 74 75 72 65 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 47 72 61 69 6e 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 43 6f 72 72 65 63 74 65 64 44 65 70 74 68 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 43 75 72 76 65 52 65 66 69 6e 65 53 61 74 75 72 61 74 69 6f 6e 3d 22 31 30 30 22 3e 20 3c 63 72 73 3a 43 6f 72 72 65 63 74 69 6f 6e 4d 61 73 6b 73 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c Data Ascii: LocalLuminanceNoise="0" crs:LocalMoire="0" crs:LocalDefringe="0" crs:LocalTemperature="-0.465903" crs:LocalTint="0" crs:LocalTexture="0" crs:LocalGrain="0" crs:LocalCorrectedDepth="0" crs:LocalCurveRefineSaturation="100"> <crs:CorrectionMasks> <rdf:Seq> <
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 40 c8 80 bc ae 30 02 10 00 30 9a 00 06 98 01 7b 63 0c 08 d5 00 02 a1 21 74 84 40 c8 8c a9 00 a4 9f 8f 01 8b a0 3f 27 20 da e7 19 68 08 05 28 8c c2 c8 8c 91 f5 57 c1 96 91 00 30 a6 82 22 2f 62 00 3c 32 31 74 25 0b 10 09 00 16 84 18 c0 3c 7f 92 81 40 58 06 2c 02 98 d0 12 1a 02 18 2d e9 34 0b 30 14 30 63 19 b0 90 15 25 24 c6 90 41 84 00 ac 23 ba 80 db 84 63 e6 4d 24 26 30 78 cc 94 19 4d 40 b6 dd bc 4b ba 9b 0d 21 06 ce 85 64 e4 a9 20 33 98 b9 80 82 6c 31 f9 2c d0 00 00 98 90 65 4d 18 45 f7 57 17 2a 98 54 04 80 08 64 eb 2f 83 97 0f c8 57 64 8b 8b 6d 07 57 3f 24 e8 82 c8 43 00 44 80 a1 af d0 c7 02 85 e7 bf 47 20 80 99 68 62 74 b2 bc 84 00 06 68 b2 01 40 b6 97 a9 f0 fc 46 d8 78 ea 83 10 f4 6f ba 35 a1 92 db 6c af 23 1b 3c 01 0c 26 90 6e 22 b8 21 ca cc 89 29 12 Data Ascii: @00{c!t@?' h(W0"/b<21t%<@X,-400c%$A#cM$&0xM@K!d 3l1,eMEW*Td/WdmW?$CDG hbth@Fxo5l#<&n"!)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49817	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	1216	OUT	GET /media/a2afb2cf/sr-241-loma-ridge-1220x600.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db0a1f5e59a8b5" Last-Modified: Wed, 18 Sep 2024 23:06:18 GMT Content-Type: image/png Content-Length: 1554869 Cache-Control: max-age=82210, public Expires: Wed, 01 Jan 2025 22:12:43 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 17-227071497-227053714 2CNN RT(1735687353250 300) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 02 58 08 06 00 00 00 72 e6 1f 1a 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 87 0f 00 00 8c 0f 00 00 fd 52 00 00 81 40 00 00 7d 79 00 00 e9 8b 00 00 3c e5 00 00 19 cc 73 3c 85 77 00 00 0a 2f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 c7 9d 96 77 54 54 d7 16 87 cf bd 77 7a a1 cd 30 d2 19 7a 93 2e 30 80 f4 2e 20 1d 04 51 18 66 06 18 ca 00 c3 0c 4d 6c 88 a8 40 44 11 11 01 45 90 a0 80 01 a3 a1 48 ac 88 62 21 28 a8 60 0f 48 10 50 62 30 8a a8 a8 64 46 d6 4a 7c 79 79 ef e5 e5 f7 c7 bd df da 67 ef 73 f7 d9 7b 9f b5 2e 00 24 4f 1f 2e 2f 05 96 02 20 99 27 e0 07 7a 38 d3 57 85 47 d0 b1 fd 00 06 78 80 01 a6 00 30 59 e9 a9 be 41 ee c1 40 24 2f 37 17 7a ba c8 Data Ascii: PNGIHDRXrgAMA\|Q cHRMR@}y<s<w/iCCPICC ProfileHwTTwz0z.0. QfMl@DEHb!(`HPb0dFJ\|yygs{.$O./ 'z8WGx0YA@$/7z
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: ab fa 23 0d 82 06 43 23 56 a3 4c a3 5b 63 46 53 55 d3 57 33 57 b3 59 f3 be 16 5e 8b a1 15 af b5 4f ab 57 6b 4e 5b 47 3b 4c 7b 9b 76 87 f6 a4 8e 9c 8e 97 4e 8e 4e b3 ce 43 5d b2 ae 83 6e 9a 6e 9d ee 6d 3d 8c 1e 43 2f 51 ef 80 de 4d 7d 58 df 42 3f 5e bf 4a ff 86 01 6c 60 69 c0 35 38 60 30 b0 14 bd d4 7a 29 6f 69 dd d2 61 43 92 a1 93 61 86 61 b3 e1 a8 11 cd c8 c7 28 cf a8 c3 e8 85 b1 a6 71 84 f1 6e e3 5e e3 4f 26 16 26 49 26 f5 26 0f 4c 65 4c 57 98 e6 99 76 99 fe 6a a6 6f c6 32 ab 32 bb 6d 4e 36 77 37 df 68 de 69 fe 72 99 c1 32 ce b2 83 cb ee 5a 50 2c 7c 2d b6 59 74 5b 7c b4 b4 b2 e4 5b b6 58 4e 59 69 5a 45 5b 55 5b 0d 33 a8 0c 7f 46 31 e3 8a 35 da da d9 7a a3 f5 69 eb 77 36 96 36 02 9b 13 36 bf d8 1a da 26 da 36 d9 4e 2e d7 59 ce 59 5e bf 7c cc 4e dd 8e 69 Data Ascii: #C#VL[cFSUW3WY^OWkN[G;L{vNNC]nnm=C/QM}XB?^Jl`i58`0z)oiaCaa(qn^O&&I&&LeLWvjo22mN6w7hir2ZP,\|-Yt[\|[XNYiZE[U[3F15ziw666&6N.YY^\|Ni
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 53 42 9e ee 99 00 00 00 20 74 45 58 74 43 72 65 61 74 69 6f 6e 54 69 6d 65 00 32 30 32 34 3a 30 35 3a 32 34 20 31 39 3a 32 30 3a 35 39 52 50 f5 a0 00 00 00 21 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 32 30 32 34 3a 30 35 3a 32 34 20 31 39 3a 32 30 3a 35 39 da df 96 66 00 00 f4 42 49 44 41 54 78 5e ec fd d9 b3 65 4b 92 de 87 c5 9e 87 33 e4 74 e7 5b 75 ab ab 27 56 03 22 09 09 26 52 26 33 bd ca f4 a4 07 bd ea 4d 7f 87 06 3e ea 81 e4 ab 64 26 33 51 52 0b 66 32 13 69 30 99 8c a2 48 82 c4 44 34 d4 00 d8 40 a3 d1 e8 6e 54 55 d7 74 ab ee 98 99 27 cf 39 7b 9e f4 fd 3e 0f 5f 6b ed 93 79 6f 57 37 d0 a4 04 94 9f dc 2b 22 3c dc 3d 3c 3c 86 bd c2 33 22 76 6f 7f 38 9d ca 2f e0 17 f0 0b f8 6f 15 18 85 bd 5e 4d 54 38 09 d9 7b 88 7c 00 5d be 1c c9 dd 34 f1 c4 Data Ascii: SB tEXtCreationTime2024:05:24 19:20:59RP!tEXtCreation Time2024:05:24 19:20:59fBIDATx^eK3t[u'V"&R&3M>d&3QRf2i0HD4@nTUt'9{>_kyoW7+"<=<<3"vo8/o^MT8{\|]4
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: aa e3 c4 fd 70 b3 b8 93 5e aa bf e2 b4 f9 e4 82 b1 37 2a ab db 3b cf 79 d3 8b 99 ea 7c 2c fb cd 41 75 66 6c 8c d4 46 27 95 3b 95 1d d4 cf d4 57 8e ea 97 e5 b4 29 a7 81 ca 90 6d 68 ab 3d 36 95 1d e6 17 d7 65 7d 7f 2f 5d 8e d2 ef 42 fa d1 bf d4 6f a6 8a f7 0e 6e df 83 ec 72 3a 2a 2e 79 c3 91 e4 4b c7 fd 56 b6 12 7f 5f b6 df af 16 b2 19 ba 5c db 78 bb dd da 76 1e d1 f7 7f e1 c0 fa b3 01 03 8e 2f a0 3f 4f 88 2f 4a b5 d9 9f 73 39 ff b2 c1 9f 77 db d0 2c ff 22 c5 e7 08 44 e6 c3 78 96 93 78 e0 61 1e d0 cd ef c2 9b f8 7f 1e c8 32 fe 65 87 ae 1d b3 ba 1d b3 36 90 b6 b0 5d 22 1a 5f 44 95 ff cc 56 ce 38 a7 25 42 9c 2c a0 1b 07 1e a6 81 87 f4 7c 00 5e 06 f2 e5 13 a4 bf 98 22 fa 9a 4c 1e 0f eb 97 d0 e4 3b 25 e8 16 96 81 70 fe 82 ae d0 46 89 b5 a5 79 ae 82 d6 7f 49 97 Data Ascii: p^7;y\|,AuflF';W)mh=6e}/]Bonr:.yKV_\xv/?O/Js9w,"Dxxa2e6]"_DV8%B,\|^"L;%pFyI
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 6b 99 58 6d b8 5b a9 88 bd db 02 fb 62 27 1c 88 23 64 ff c2 81 f5 f5 e0 f1 82 91 6b d8 05 0f 28 81 bf 04 df 00 69 d9 af c8 6e 20 e5 88 b2 86 5d 38 ff f2 78 5d 87 08 13 ff a6 32 1b f1 7f 06 40 4e 57 e6 c3 78 b7 dc af 8a 9f 03 f5 89 cc 6e de 9b e9 49 d4 0c 01 b1 d7 c4 bd 06 49 11 7c c8 4d 7d 22 0c 99 af eb 15 90 74 09 a9 17 f0 26 7c b4 5d 4b f4 b0 3c 3d 8d 6f 69 82 be cb df ed 3f 6f 2a 23 e1 ab f2 ce cb 7b 1d da b2 22 fc d3 c0 d7 c9 fd ff 55 48 7d 1f da ef eb c0 3c a2 ef b2 80 73 fd 9d 38 8f 27 3c b4 8f cb 54 ba 83 0a a1 15 e1 a0 a6 93 f6 0c 3a fc dd 6c c7 79 00 15 99 34 40 37 0e a0 13 f4 5d 5c 03 e4 e9 ef 8d e3 b0 86 44 dc 37 13 e3 74 44 b3 ac 0c 01 e4 f1 2f 64 f2 d2 a7 40 d1 86 bf 52 e7 78 a9 45 37 60 7e 68 5b 46 fe 99 3e b4 00 0f 18 db 09 15 93 30 d8 ce Data Ascii: kXm[b'#dk(in ]8x]2@NWxnII\|M}"t&\|]K<=oi?o*#{"UH}<s8'<T:ly4@7]\D7tD/d@RxE7`~h[F>0
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: af 2e ff 79 fe bf 62 40 dd ff 04 db db 3e a2 f9 53 36 d1 9f 09 b2 29 28 8b 72 69 cb 9f 43 c5 d7 e0 4f cb 93 7d a6 db 17 de 84 03 ac d3 1b e8 12 1e d2 ff fc 70 ae f5 c3 72 fe 2c 90 ec 0f 54 fc e7 82 ae cc d4 2f 75 7d 68 0b a0 4b 03 38 6d 66 27 23 9e f0 10 d7 e1 7d 68 8b 33 79 0f a0 2b c6 64 95 bf 2b c7 ef 36 64 81 27 4d 9c 0c 41 c6 09 1f e2 13 f8 c2 f2 eb ab 04 fa 1d 49 7f 59 c6 eb 20 9a 20 6a 85 90 ac f1 94 95 65 b5 e5 b4 98 8c 9d 53 04 a6 cd 4b 4a c0 da 19 ac 57 e6 08 99 ba 9a a0 8d 38 3f 79 3c 37 82 91 de c6 07 49 85 2c 25 a9 83 33 38 f2 99 79 e4 b4 f4 41 99 70 9e 6a 21 a8 db bc 4c 2b 66 96 f3 72 23 5a e3 24 1d 95 0e 55 77 3e 40 66 75 31 41 01 a6 2b 13 a8 39 f5 11 45 76 f5 67 81 a2 97 1b db c9 49 d3 58 8d 0e 44 32 91 95 13 5a 52 d0 1b d3 42 97 d2 ef f5 Data Ascii: .yb@>S6)(riCO}pr,T/u}hK8mf'#}h3y+d+6d'MAIY jeSKJW8?y<7I,%38yApj!L+fr#Z$Uw>@fu1A+9EvgIXD2ZRB
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: c4 ff a5 86 c6 00 35 04 de 84 eb 40 d3 67 aa 8d 1c af e1 57 c1 19 0f 71 85 f0 74 f1 69 70 7f a1 10 4d 5c 1b 7c 6d 39 49 6e 31 5d 5e c5 29 a7 e1 ad 79 1d 92 d7 20 f1 a9 6f f2 82 ef f2 31 1e 19 4b 91 d1 be 94 36 f5 6a 1e 09 fa da 96 42 64 c3 cb 97 b8 e5 5b e1 94 6d 61 8e 25 73 3b 2f 06 ae 93 d3 c4 00 cf 7f a2 6b ef 3a ca 7c d2 fc 83 57 f1 f8 d7 94 1b 69 f4 07 4c 18 7a 39 5d 35 22 41 a4 62 6b c2 90 9c 40 c8 a9 e5 18 d2 2a 11 4f 30 a6 ea 69 50 1c ca 24 c9 ac a4 eb 90 99 86 a4 f3 14 33 2d 29 33 64 4d 62 e1 44 0e 7d aa d5 3f 64 c1 93 74 40 6b 0b bd b4 38 b4 36 b0 1b a2 0e 51 96 79 44 ef 72 5b b6 08 23 30 5b e4 09 c3 3f 25 78 29 73 42 78 a4 93 0d 3d 9f 9c db 4d 22 c8 3c 8b 10 10 07 ce d3 d5 66 15 5e a3 a9 02 48 13 6d f5 8d 8c d4 f9 1c 2a 13 31 05 7a 57 8a 94 85 Data Ascii: 5@gWqtipM\\|m9In1]^)y o1K6jBd[ma%s;/k:\|WiLz9]5"Abk@O0iP$3-)3dMbD}?dt@k86QyDr[#0[?%x)sBx=M"<f^Hm1zW
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: ca 43 4d f4 84 c4 71 41 92 9b 97 88 1e c4 13 1e 96 75 06 0d 73 04 5d 3d 80 87 69 03 38 a5 41 39 df 91 1a b6 41 83 ae 22 ce c8 1c d6 44 e6 03 c9 9b 48 da c8 b8 64 7c 00 89 ea ca 00 ce 48 93 97 8f e2 0f 45 25 af 49 2a 8d 41 f1 b3 fa c3 ab f0 01 49 7d 26 26 e1 1c 87 9c 78 09 8e 17 e7 87 d4 d0 f3 85 db c8 15 91 5f b4 8d e8 50 47 46 88 37 34 1c 2a 23 e2 cc 85 f9 7a 9e f9 91 4a 5e ca c9 b8 33 3c a6 52 52 a0 53 02 b1 33 d2 0a 49 0d 28 47 32 63 5c 49 e7 a6 61 23 ac a5 55 8e cc 8f ec ac 35 21 ff 2a 91 40 38 44 80 0c c2 06 4c 96 74 4a 44 56 e8 d9 11 20 4c 32 09 57 07 7b 1e 09 e1 99 65 03 0d 6d d5 ad db f1 78 81 30 bd f2 52 7a 50 8b df 88 d4 35 f1 2d 38 4d 5e 3f 72 58 9c 83 48 6d 81 86 07 3a 97 15 e5 9c c9 54 a4 89 f3 50 c2 81 1e c6 11 07 57 13 d0 f2 f0 3b 7a a6 1d Data Ascii: CMqAus]=i8A9A"DHd\|HE%IAI}&&x_PGF74#zJ^3<RRS3I(G2c\Ia#U5!*@8DLtJDV L2W{emx0RzP5-8M^?rXHm:TPW;z
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: f8 af 83 4a da 08 33 4b ca a9 f0 20 69 48 3d c1 67 9c 48 f6 b1 1a 98 a0 89 0b 4c 46 a8 08 21 d0 c9 36 74 d3 8d ec 37 81 05 45 34 01 14 1f d6 b1 84 e7 c2 6a 58 21 b3 e8 07 09 b4 03 64 7c e2 85 b0 a6 45 93 79 a9 7b a6 81 6e 31 c0 43 bc d3 c8 20 30 b3 70 49 f4 35 d0 95 43 bc b2 36 fc 96 57 f1 0d ad 10 2e 43 80 de 4d 39 d0 43 fc 00 1a 3e 7d 4c 5b 69 1e a6 01 e3 3a a1 75 a8 f9 0d 69 c5 91 ee 42 97 e7 75 08 ee a4 49 a8 a2 5f 93 d5 42 f0 b5 b1 fa 54 10 7a 65 fe eb 78 f5 56 a5 79 06 ce 7a 25 a9 41 89 4e 23 07 65 90 34 f5 73 36 39 92 55 c9 21 f0 a2 c8 94 99 0b ba 96 a9 78 2c de 23 df f0 c0 60 9d a8 40 b4 46 b8 14 87 09 4e 29 19 78 d2 55 8e 14 09 e9 c1 03 2a 16 e8 41 17 ca 46 d4 20 74 50 55 b4 84 86 6d da 12 1d 56 1e f4 69 70 9d 10 70 1e 09 7d c0 cb 18 91 70 5a 71 Data Ascii: J3K iH=gHLF!6t7E4jX!d\|Ey{n1C 0pI5C6W.CM9C>}L[i:uiBuI_BTzexVyz%AN#e4s69U!x,#`@FN)xU*AF tPUmVipp}pZq
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 8f 2f 64 90 e0 92 e2 4f 06 28 cd d7 40 48 4b 78 28 ca 75 7b 9d e9 0c 92 a5 25 c9 97 85 60 7e 20 d2 d0 15 99 45 b4 70 8e e9 a6 dc 8f a4 a4 f9 6b c6 39 25 50 31 26 6a a3 5d da a4 4c 48 3c d0 8d 03 2e 46 48 97 97 00 51 57 76 05 50 49 06 be c9 ab fc 69 5f 5e a6 1d 57 f8 26 7a 70 ce d6 c3 61 a5 ab f3 64 c3 03 38 9f 4f 87 16 48 da 3f 09 ba b2 92 37 f5 24 59 a3 67 f1 84 e8 85 81 cd b2 8d 71 a2 22 2b 24 aa 29 83 8f 1e c6 d5 b4 23 35 70 5e 4d 93 49 db 47 9d ea 57 8c 19 82 a6 46 85 77 8e e3 a9 43 8a 00 02 a5 3f 78 aa 80 96 23 21 38 e8 c3 e7 f8 16 4c 61 46 3d 9c 80 56 11 c9 8c 3c 3f 2d b8 95 a1 3c e1 43 2e b4 42 29 a8 94 8d 3e c9 1b cf c0 05 29 98 ca 44 98 d1 06 af 58 27 cb 1c ea 14 88 4d 75 8c d3 f3 bc ac aa 73 c6 9c a5 98 e6 dc 98 e8 12 42 16 24 81 e5 19 72 e2 99 Data Ascii: /dO(@HKx(u{%`~ Epk9%P1&j]LH<.FHQWvPIi_^W&zpad8OH?7$Ygq"+$)#5p^MIGWFwC?x#!8LaF=V<?-<C.B)>)DX'MusB$r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49826	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	972	OUT	GET /media/cmkllpaa/icon_linkedin-white.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db1a8baf37ac13" Last-Modified: Wed, 09 Oct 2024 20:41:58 GMT Content-Type: image/svg+xml Content-Length: 787 Cache-Control: max-age=82204, public Expires: Wed, 01 Jan 2025 22:12:37 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 16-194337489-0 0CNN RT(1735687353493 279) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:33 UTC	787	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 35 20 31 32 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 32 33 31 66 32 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 21 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 125 125"> <defs> <style> .cls-1 { fill: #231f20; } .cls-2 { fill: #fff; } </style> </defs> <!-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49824	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	974	OUT	GET /site-media/icons/icon_logo-tca-color.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	347	IN	HTTP/1.1 200 OK Etag: "1db522f706251f2" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 15346 Cache-Control: max-age=33279, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 18-261311024-0 0CNN RT(1735687353458 376) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:33 UTC	1105	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 33 30 2e 36 32 20 34 32 2e 37 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 30 30 36 30 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 2c 2e 63 6c 73 2d 33 2c 2e 63 6c 73 2d 34 2c 2e 63 6c 73 2d 35 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 38 37 63 34 63 64 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 430.62 42.72"><defs><style>.cls-1{fill:#6c0060;}.cls-1,.cls-2,.cls-3,.cls-4,.cls-5{fill-rule:evenodd;stroke-width:0px;}.cls-2{fill:#87c4cd;}.cls-3{fill
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 2d 31 32 2e 30 36 2c 31 34 2e 39 38 2d 31 32 2e 30 36 2c 31 34 2e 39 38 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 30 35 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 34 32 2e 35 34 2c 34 31 2e 32 34 68 32 34 2e 36 73 2e 39 33 2d 36 2e 36 34 2c 34 2e 36 34 2d 39 2e 36 33 2c 31 34 2e 36 34 2d 39 2e 31 36 2c 31 33 2e 38 36 2d 31 31 2e 34 39 63 2d 31 2e 30 39 2d 33 2e 32 37 2d 39 2e 33 31 2d 32 2e 30 34 2d 39 2e 33 31 2d 32 2e 30 34 6c 2e 37 2e 35 31 73 33 2e 32 37 2d 2e 31 31 2c 31 2e 34 31 2c 31 2e 32 33 63 2d 31 2e 37 37 2c 31 2e 32 37 2d 31 31 2e 30 37 2c 35 2e 30 31 2d 31 37 2e 36 34 2c 37 2e 33 2d 31 33 2e 33 31 2c 34 2e 36 35 2d 31 38 2e 32 36 2c 31 34 2e 31 31 2d 31 38 2e 32 36 2c 31 34 2e 31 31 22 2f 3e 3c 70 61 74 68 Data Ascii: -12.06,14.98-12.06,14.98"/><path id="Path_2505" class="cls-2" d="M42.54,41.24h24.6s.93-6.64,4.64-9.63,14.64-9.16,13.86-11.49c-1.09-3.27-9.31-2.04-9.31-2.04l.7.51s3.27-.11,1.41,1.23c-1.77,1.27-11.07,5.01-17.64,7.3-13.31,4.65-18.26,14.11-18.26,14.11"/><path
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 37 2d 2e 36 2e 31 38 2d 31 2e 30 35 2e 33 33 2d 31 2e 33 35 2e 34 35 68 2d 2e 32 38 6c 2e 34 34 2d 32 2e 33 38 63 2e 33 35 2d 2e 30 39 2e 39 2d 2e 32 2c 31 2e 36 34 2d 2e 33 32 2e 37 33 2d 2e 31 32 2c 31 2e 34 37 2d 2e 31 38 2c 32 2e 32 2d 2e 31 38 2c 31 2e 31 32 2d 2e 30 37 2c 32 2e 32 34 2e 31 34 2c 33 2e 32 35 2e 36 32 2e 36 38 2e 33 39 2c 31 2e 30 38 2c 31 2e 31 33 2c 31 2e 30 34 2c 31 2e 39 32 2c 30 2c 2e 31 36 2d 2e 30 31 2e 33 31 2d 2e 30 33 2e 34 37 2d 2e 30 32 2e 31 37 2d 2e 30 34 2e 33 34 2d 2e 30 38 2e 35 6c 2d 31 2e 34 37 2c 36 2e 38 35 68 2d 32 2e 39 39 6c 2e 32 33 2d 31 2e 30 36 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 31 30 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 31 34 38 2e 34 2c 32 32 2e 34 37 63 Data Ascii: 7-.6.18-1.05.33-1.35.45h-.28l.44-2.38c.35-.09.9-.2,1.64-.32.73-.12,1.47-.18,2.2-.18,1.12-.07,2.24.14,3.25.62.68.39,1.08,1.13,1.04,1.92,0,.16-.01.31-.03.47-.02.17-.04.34-.08.5l-1.47,6.85h-2.99l.23-1.06Z"/><path id="Path_2510" class="cls-5" d="M148.4,22.47c
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 34 2d 2e 35 31 6c 2d 2e 39 2c 34 2e 31 39 68 2d 33 2e 30 34 6c 32 2e 39 38 2d 31 33 2e 37 35 68 33 2e 30 34 6c 2d 2e 32 33 2c 31 2e 30 35 63 2e 35 2d 2e 33 37 2c 31 2e 30 32 2d 2e 37 2c 31 2e 35 38 2d 2e 39 38 2e 35 2d 2e 32 34 2c 31 2e 30 35 2d 2e 33 35 2c 31 2e 36 2d 2e 33 35 2e 38 33 2d 2e 30 35 2c 31 2e 36 34 2e 32 39 2c 32 2e 31 39 2e 39 33 2e 35 35 2e 37 34 2e 38 32 2c 31 2e 36 35 2e 37 36 2c 32 2e 35 37 4d 31 36 36 2e 39 38 2c 32 36 2e 39 34 63 2e 32 35 2d 2e 34 31 2e 34 34 2d 2e 38 36 2e 35 35 2d 31 2e 33 32 2e 31 33 2d 2e 35 34 2e 32 2d 31 2e 30 39 2e 31 39 2d 31 2e 36 35 2e 30 33 2d 2e 34 34 2d 2e 30 39 2d 2e 38 38 2d 2e 33 33 2d 31 2e 32 35 2d 2e 33 31 2d 2e 33 32 2d 2e 37 35 2d 2e 34 39 2d 31 2e 31 39 2d 2e 34 33 2d 2e 33 2c 30 2d 2e 35 39 2e Data Ascii: 4-.51l-.9,4.19h-3.04l2.98-13.75h3.04l-.23,1.05c.5-.37,1.02-.7,1.58-.98.5-.24,1.05-.35,1.6-.35.83-.05,1.64.29,2.19.93.55.74.82,1.65.76,2.57M166.98,26.94c.25-.41.44-.86.55-1.32.13-.54.2-1.09.19-1.65.03-.44-.09-.88-.33-1.25-.31-.32-.75-.49-1.19-.43-.3,0-.59.
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 2e 32 35 6c 2e 36 32 2d 32 2e 38 38 68 33 2e 30 34 6c 2d 2e 36 32 2c 32 2e 38 38 68 32 2e 38 33 6c 2d 2e 34 36 2c 32 2e 31 33 68 2d 32 2e 38 33 6c 2d 2e 37 39 2c 33 2e 36 33 63 2d 2e 30 36 2e 32 35 2d 2e 31 31 2e 35 2d 2e 31 36 2e 37 36 2d 2e 30 35 2e 32 31 2d 2e 30 37 2e 34 33 2d 2e 30 38 2e 36 35 2d 2e 30 33 2e 32 38 2e 30 37 2e 35 36 2e 32 38 2e 37 35 2e 32 36 2e 31 36 2e 35 37 2e 32 33 2e 38 37 2e 32 31 2e 32 31 2c 30 2c 2e 34 32 2d 2e 30 34 2e 36 32 2d 2e 31 2e 32 31 2d 2e 30 35 2e 34 32 2d 2e 31 32 2e 36 31 2d 2e 32 32 68 2e 32 35 6c 2d 2e 34 37 2c 32 2e 31 35 63 2d 2e 33 36 2e 30 39 2d 2e 37 32 2e 31 36 2d 31 2e 30 38 2e 32 31 2d 2e 34 35 2e 30 35 2d 2e 39 2e 30 38 2d 31 2e 33 36 2e 30 38 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 Data Ascii: .25l.62-2.88h3.04l-.62,2.88h2.83l-.46,2.13h-2.83l-.79,3.63c-.06.25-.11.5-.16.76-.05.21-.07.43-.08.65-.03.28.07.56.28.75.26.16.57.23.87.21.21,0,.42-.04.62-.1.21-.05.42-.12.61-.22h.25l-.47,2.15c-.36.09-.72.16-1.08.21-.45.05-.9.08-1.36.08"/><path id="Path_25
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 64 3d 22 4d 32 32 34 2e 34 36 2c 32 30 2e 31 39 6c 2d 32 2e 31 38 2c 31 30 2e 30 36 68 2d 33 2e 30 33 6c 32 2e 31 38 2d 31 30 2e 30 36 68 33 2e 30 33 5a 4d 32 32 35 2e 33 38 2c 31 36 2e 33 32 6c 2d 2e 35 33 2c 32 2e 34 34 68 2d 33 2e 32 6c 2e 35 33 2d 32 2e 34 34 68 33 2e 32 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 31 39 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 32 33 35 2e 39 38 2c 32 33 2e 38 38 63 30 2c 2e 39 2d 2e 31 34 2c 31 2e 38 2d 2e 34 34 2c 32 2e 36 35 2d 2e 32 37 2e 37 38 2d 2e 37 2c 31 2e 35 2d 31 2e 32 35 2c 32 2e 31 32 2d 2e 35 34 2e 36 2d 31 2e 32 31 2c 31 2e 30 39 2d 31 2e 39 35 2c 31 2e 34 32 2d 2e 38 32 2e 33 35 2d 31 2e 37 2e 35 32 2d 32 2e 35 38 2e 35 2d 31 2e 31 38 2e 30 38 2d 32 2e 33 34 2d 2e Data Ascii: d="M224.46,20.19l-2.18,10.06h-3.03l2.18-10.06h3.03ZM225.38,16.32l-.53,2.44h-3.2l.53-2.44h3.2Z"/><path id="Path_2519" class="cls-5" d="M235.98,23.88c0,.9-.14,1.8-.44,2.65-.27.78-.7,1.5-1.25,2.12-.54.6-1.21,1.09-1.95,1.42-.82.35-1.7.52-2.58.5-1.18.08-2.34-.
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 32 2e 36 34 2d 31 2e 32 31 2c 34 2e 31 2d 2e 30 37 2e 38 33 2e 31 37 2c 31 2e 36 36 2e 36 37 2c 32 2e 33 32 2e 35 32 2e 35 31 2c 31 2e 32 33 2e 37 37 2c 31 2e 39 36 2e 37 32 2e 37 35 2c 30 2c 31 2e 35 2d 2e 31 37 2c 32 2e 31 37 2d 2e 35 2e 36 39 2d 2e 33 34 2c 31 2e 33 33 2d 2e 37 37 2c 31 2e 39 32 2d 31 2e 32 37 68 2e 33 34 6c 2d 2e 37 33 2c 33 2e 31 39 63 2d 2e 32 35 2e 31 31 2d 2e 35 34 2e 32 34 2d 2e 38 38 2e 33 39 2d 2e 33 31 2e 31 34 2d 2e 36 33 2e 32 37 2d 2e 39 36 2e 33 37 2d 2e 33 37 2e 31 32 2d 2e 37 35 2e 32 31 2d 31 2e 31 33 2e 32 39 2d 2e 34 38 2e 30 38 2d 2e 39 37 2e 31 31 2d 31 2e 34 36 2e 31 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 32 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 32 37 38 2e 33 32 2c 32 Data Ascii: 2.64-1.21,4.1-.07.83.17,1.66.67,2.32.52.51,1.23.77,1.96.72.75,0,1.5-.17,2.17-.5.69-.34,1.33-.77,1.92-1.27h.34l-.73,3.19c-.25.11-.54.24-.88.39-.31.14-.63.27-.96.37-.37.12-.75.21-1.13.29-.48.08-.97.11-1.46.1"/><path id="Path_2522" class="cls-5" d="M278.32,2
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 31 30 2e 30 36 68 2d 33 2e 30 33 6c 32 2e 31 38 2d 31 30 2e 30 36 68 33 2e 30 33 5a 4d 33 30 32 2e 34 34 2c 31 36 2e 33 32 6c 2d 2e 35 33 2c 32 2e 34 34 68 2d 33 2e 32 6c 2e 35 33 2d 32 2e 34 34 68 33 2e 32 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 32 36 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 33 31 34 2e 33 37 2c 31 36 2e 33 6c 2d 33 2e 30 32 2c 31 33 2e 39 35 68 2d 33 2e 30 34 6c 2e 32 33 2d 31 2e 30 35 63 2d 2e 32 39 2e 32 2d 2e 35 35 2e 33 38 2d 2e 37 37 2e 35 33 2d 2e 32 33 2e 31 37 2d 2e 34 38 2e 33 31 2d 2e 37 33 2e 34 34 2d 2e 32 34 2e 31 31 2d 2e 34 39 2e 32 2d 2e 37 34 2e 32 37 2d 2e 32 39 2e 30 36 2d 2e 35 38 2e 30 39 2d 2e 38 38 2e 30 39 2d 2e 38 33 2e 30 33 2d 31 2e 36 34 2d 2e 33 32 2d 32 2e 31 38 2d Data Ascii: 10.06h-3.03l2.18-10.06h3.03ZM302.44,16.32l-.53,2.44h-3.2l.53-2.44h3.2Z"/><path id="Path_2526" class="cls-5" d="M314.37,16.3l-3.02,13.95h-3.04l.23-1.05c-.29.2-.55.38-.77.53-.23.17-.48.31-.73.44-.24.11-.49.2-.74.27-.29.06-.58.09-.88.09-.83.03-1.64-.32-2.18-
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 30 34 6c 32 2e 31 38 2d 31 30 2e 30 36 68 33 2e 30 34 6c 2d 2e 33 32 2c 31 2e 34 38 63 2e 35 33 2d 2e 34 32 2c 31 2e 31 2d 2e 37 39 2c 31 2e 37 2d 31 2e 30 39 2e 35 33 2d 2e 32 37 2c 31 2e 31 32 2d 2e 34 32 2c 31 2e 37 31 2d 2e 34 32 2e 31 31 2c 30 2c 2e 32 33 2c 30 2c 2e 33 36 2c 30 73 2e 32 35 2e 30 31 2e 33 35 2e 30 33 6c 2d 2e 36 37 2c 33 2e 30 38 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 32 39 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 33 35 32 2e 31 39 2c 33 30 2e 32 35 68 2d 33 2e 32 36 6c 2d 2e 32 39 2d 32 2e 37 34 68 2d 34 2e 35 36 6c 2d 31 2e 34 36 2c 32 2e 37 34 68 2d 33 2e 33 36 6c 37 2e 34 38 2d 31 33 2e 33 34 68 33 2e 37 32 6c 31 2e 37 33 2c 31 33 2e 33 34 5a 4d 33 34 38 2e 34 2c 32 35 2e 31 33 6c 2d 2e Data Ascii: 04l2.18-10.06h3.04l-.32,1.48c.53-.42,1.1-.79,1.7-1.09.53-.27,1.12-.42,1.71-.42.11,0,.23,0,.36,0s.25.01.35.03l-.67,3.08Z"/><path id="Path_2529" class="cls-5" d="M352.19,30.25h-3.26l-.29-2.74h-4.56l-1.46,2.74h-3.36l7.48-13.34h3.72l1.73,13.34ZM348.4,25.13l-.
2024-12-31 23:22:33 UTC	1452	IN	Data Raw: 31 36 68 2d 37 2e 30 32 76 2e 32 63 2d 2e 30 33 2e 36 32 2e 32 32 2c 31 2e 32 32 2e 36 39 2c 31 2e 36 33 2e 36 31 2e 34 34 2c 31 2e 33 36 2e 36 35 2c 32 2e 31 32 2e 35 39 2e 36 35 2c 30 2c 31 2e 32 39 2d 2e 31 32 2c 31 2e 38 39 2d 2e 33 36 2e 35 34 2d 2e 32 31 2c 31 2e 30 36 2d 2e 34 38 2c 31 2e 35 35 2d 2e 38 68 2e 33 34 6c 2d 2e 35 36 2c 32 2e 36 63 2d 2e 35 39 2e 32 38 2d 31 2e 32 32 2e 34 39 2d 31 2e 38 36 2e 36 32 2d 2e 36 38 2e 31 34 2d 31 2e 33 38 2e 32 31 2d 32 2e 30 38 2e 32 31 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 35 33 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 33 38 38 2e 31 35 2c 32 32 2e 34 37 63 30 2c 2e 31 39 2d 2e 30 31 2e 33 39 2d 2e 30 33 2e 35 38 2d 2e 30 32 2e 32 32 2d 2e 30 36 2e 34 34 2d 2e 31 Data Ascii: 16h-7.02v.2c-.03.62.22,1.22.69,1.63.61.44,1.36.65,2.12.59.65,0,1.29-.12,1.89-.36.54-.21,1.06-.48,1.55-.8h.34l-.56,2.6c-.59.28-1.22.49-1.86.62-.68.14-1.38.21-2.08.21"/><path id="Path_2532" class="cls-5" d="M388.15,22.47c0,.19-.01.39-.03.58-.02.22-.06.44-.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49825	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	976	OUT	GET /site-media/icons/icon-informationWhite.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:33 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db522f7062693a" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 826 Cache-Control: max-age=33279, public Expires: Wed, 01 Jan 2025 08:37:12 GMT Date: Tue, 31 Dec 2024 23:22:33 GMT X-CDN: Imperva X-Iinfo: 18-261311033-0 0CNN RT(1735687353472 371) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:33 UTC	826	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 2e 38 20 32 39 2e 38 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 29.8 29.8"> <defs> <style> .cls-1 { fill: #000; } .cls-1, .cls-2 {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49729	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:33 UTC	678	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-&oit=3&cp=25&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:34 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:34 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-AlQUSL0hC6PcKh1kZFXecA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:34 UTC	124	IN	Data Raw: 31 34 63 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 22 2c 5b 22 68 74 74 70 73 20 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 76 69 6f 6c 61 74 69 6f 6e 22 5d 2c 5b 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 Data Ascii: 14c)]}'["https://thetollroads.com-",["https //thetollroads.com-violation"],[""],[],{"google:clientdata":{"bpc":false,"tlw
2024-12-31 23:22:34 UTC	215	IN	Data Raw: 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 76 69 6f 6c 61 74 69 6f 6e 22 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 31 36 30 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 54 41 49 4c 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: ":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"//thetollroads.com-violation"}],"google:suggestrelevance":[600],"google:suggestsubtypes":[[160]],"google:suggesttype":["TAIL"],"google:verbatimrelevance":851}]
2024-12-31 23:22:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49828	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	1231	OUT	GET /media/51tplex4/sr-73-catalina-view-improvements-1200x600.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:34 UTC	350	IN	HTTP/1.1 200 OK Etag: "1db0a21b4afbe0f" Last-Modified: Wed, 18 Sep 2024 23:23:02 GMT Content-Type: image/png Content-Length: 1306895 Cache-Control: max-age=82209, public Expires: Wed, 01 Jan 2025 22:12:43 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT X-CDN: Imperva X-Iinfo: 18-261311045-261310250 2CNN RT(1735687353717 297) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 02 58 08 06 00 00 00 72 e6 1f 1a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 24 e8 00 00 24 e8 01 82 63 05 1c 00 00 00 0f 74 45 58 74 53 6f 75 72 63 65 00 49 4c 43 45 2d 37 4d 33 43 ab df 48 00 00 00 2a 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 e6 2c 04 49 00 00 00 07 74 49 4d 45 07 e8 09 11 0e 1b 1e 8a d1 ba 37 00 00 00 18 74 45 58 74 41 75 74 68 6f 72 00 4d 49 43 48 41 45 4c 20 4b 2e 20 50 48 49 50 50 53 fb d5 c0 4c 00 00 00 1e 74 45 58 74 43 6f 70 79 72 69 67 68 74 00 4d 45 44 49 41 20 53 54 55 44 49 4f 20 44 45 53 49 47 Data Ascii: PNGIHDRXrsRGBgAMAapHYs$$ctEXtSourceILCE-7M3CH*tEXtSoftwareAdobe Photoshop 25.11 (Macintosh),ItIME7tEXtAuthorMICHAEL K. PHIPPSLtEXtCopyrightMEDIA STUDIO DESIG
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 09 ee 1b cf 16 e1 c3 0c 6f 7d 82 2a 73 35 9f be 3a 54 37 18 56 7e b9 bc 9c ce a8 30 6c 55 f4 45 68 e4 f5 a0 6e b5 3f 99 6b 99 10 38 d6 09 fb 8b 5f 0c 36 a6 82 a9 ea 8f 67 f3 05 99 7d e0 b2 9e af f6 e2 0f 7b fc a9 e2 ed ed df 48 ab b6 08 99 7f dd 39 ec c5 1a 89 5d fd d8 30 7f e2 b2 0f d8 5b 42 a3 bc f7 0b 99 7a ce 6a 2b d3 9c d4 d0 b3 3e 1f c1 fe 6a 73 1d b8 e4 e7 ce 09 bf 02 20 78 a8 ce 53 c3 10 7b fc 61 e4 77 3e fe fa 6f e1 31 ac 77 7f d0 82 33 f9 5d 48 18 b1 f8 65 fa 9c 9f 1f 11 3b 93 76 e6 eb ff 07 eb 7a 22 be cf ee d3 ad 77 bf f5 01 82 16 10 dc bb c7 88 31 3b bc cf da cc ff f5 9f 41 26 e3 bf 67 5d c6 10 f1 08 0f 9f cb c4 31 26 b1 d6 0b e4 cf 3d aa 9e 34 b0 97 2b e4 17 58 2c 8a 07 f5 3f 75 88 f2 0a 77 21 b7 99 5d d0 3f 93 4c 3c 37 ad 8d 08 81 8b ee 2f Data Ascii: o}*s5:T7V~0lUEhn?k8_6g}{H9]0[Bzj+>js xS{aw>o1w3]He;vz"w1;A&g]1&=4+X,?uw!]?L<7/
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 35 63 5a 8f 84 c0 7f ea 46 c9 fb 2b 6c 0c f6 c5 d7 9e 88 5c 24 62 65 ba 1c c6 1a ef 9a 99 23 13 f7 7c ac 29 b3 35 5c 5f 88 93 41 6e b1 19 e7 7f 7e 9f 7d 31 40 30 e9 64 36 d1 c5 b7 b1 98 7f 8b 46 4f 33 e3 38 1d 39 20 0e 9a 8d 10 37 92 9f df e1 d1 27 2e 51 ea 8a 1d 3f 78 34 19 c6 59 b1 23 f3 a4 59 bd 69 e6 fb e2 d7 b3 20 81 f5 3f ec e2 61 f1 0b b7 b8 f0 f0 e1 db 74 dd 99 ae be 60 79 f0 7b 68 f0 ff af fe 09 00 b6 7e 29 12 cc cb bb cd 17 3f 52 0e 19 8f 6a f0 93 c9 b2 d3 4f 62 d2 78 6b 83 1a b3 33 c4 4c 0c 06 7a 26 74 19 51 f1 66 da fc ea 12 d9 d3 04 9b 1a 4e 7f f5 11 e2 9d 93 e1 58 0b 35 f2 8b e1 d5 11 42 f1 e4 7a d5 af be 5e 51 33 ee 03 e0 0b 94 e9 53 97 e3 9d 74 06 74 31 33 07 db 3e a2 3b 3b 84 2d 67 90 d1 02 95 c9 81 ec 17 8b fa 16 dd e9 17 d7 25 a8 4d 7d Data Ascii: 5cZF+l\$be#\|)5\_An~}1@0d6FO389 7'.Q?x4Y#Yi ?at`y{h~)?RjObxk3Lz&tQfNX5Bz^Q3Stt13>;;-g%M}
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 57 35 a7 f1 f1 59 1c 63 52 4f 4c ed 0b 7e 40 db 1d ff 46 11 b6 d4 aa 87 46 ea 46 b9 da c3 52 83 65 68 47 19 42 97 1a cd 75 b9 21 73 86 50 c1 67 34 3f 71 93 cf 5e 02 88 ac 01 3c a3 fd 72 f8 db 1a 17 e8 61 7b b8 16 42 3b b4 d8 8b a1 97 6e 1f 5f bf a0 c9 ac 23 91 6f 97 6f cf f4 6a c8 e0 8d ec f9 a2 7f bc 00 87 7d b5 36 4e f7 20 76 ea 02 8f 3a 3d f5 26 b3 d6 29 ef 3a fc d9 7f e7 2a ba c8 fe 49 3b 32 7f aa 13 9d 32 5f ce 18 eb f6 c8 40 5c 82 a5 2e 62 dd da b2 7e cf 0d 62 f3 9e 0b df 54 f7 0b 18 24 06 0f 13 7c d1 81 15 d5 f9 73 06 9c 90 e0 3f d4 7a 60 7a 11 63 ed fc ee 43 3b 57 6b c2 ca b8 3d fa 93 f0 3e 5f 7b fe 5f bc 49 23 10 8a 90 c1 b0 47 be 75 09 86 07 57 d9 f5 a0 f3 5c 67 16 ba 9d 1d dc 5c 1e 66 04 94 37 52 17 f8 e8 5c db e5 36 67 59 08 ad e2 7a 5d f9 00 Data Ascii: W5YcROL~@FFFRehGBu!sPg4?q^<ra{B;n_#ooj}6N v:=&):*I;22_@\.b~bT$\|s?z`zcC;Wk=>_{_I#GuW\g\f7R\6gYz]
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 55 b9 b5 06 f1 3b 2b 9c 85 8b 03 25 16 83 1c b0 e2 37 0e 87 5e f6 56 07 7d f8 30 bc 09 bd 0e f5 0d 52 94 5b b7 01 32 f3 23 04 dd ee 79 09 19 58 c8 3a f5 51 4a dc ac 8f 5e 19 8f a9 7b 41 bd 5f 3f 88 3d b4 df 51 fe fe 46 ce ef 4d 93 fd 60 32 dc e2 18 23 1c 2f 02 e7 a3 ae 6b 68 ee 91 7a 6a 84 27 56 31 ea 43 ae 67 7a fa 8f dc 5e 60 64 8f c1 22 d7 af 5e a5 e3 5f ef 8c 95 39 f9 7f bd ad fc 27 25 4e 70 bd b7 79 d8 2e ee 6a 92 ac 9b b1 5a 42 6f f7 e2 73 f8 17 1a ec 09 fa 8d 45 85 7e f1 ec 34 31 d5 83 98 4f 08 eb 2a a9 8f 26 e4 0c de 6c 46 a7 6f e4 de 1f 1b cb 2b 32 ac 11 d0 f3 ec b5 d6 9f 9f c3 67 09 b6 e1 ea de 38 f6 03 56 63 7e 33 78 dd 51 ae 4d cc 70 a5 c5 9e 8f 6b c8 2f d4 d2 a2 99 dc 18 cb f3 74 e0 13 c3 11 f1 e5 1b 0e de 00 1a 5d fb 73 85 ee 3e 66 9d be 46 Data Ascii: U;+%7^V}0R[2#yX:QJ^{A_?=QFM`2#/khzj'V1Cgz^`d"^_9'%Npy.jZBosE~41O*&lFo+2g8Vc~3xQMpk/t]s>fF
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 55 cf ff 5c ac fd 17 0b 80 cf 82 f9 7b fa d5 1b 24 9a 62 1b 0f 66 32 64 8f 8a fb 51 63 5c 47 e0 1a 87 e9 b3 b6 c7 c7 72 bd a9 4b eb 0a e3 79 5a 68 d7 11 3f ef 25 94 fa 6c 0f b8 2f 7d 8d c1 6f 3e c7 e2 17 f6 47 95 de 3d a9 90 f1 f0 7d a3 47 7d a8 21 61 e4 8b e5 a0 25 24 9c f2 8b df 62 40 f6 e0 d6 24 45 73 b1 7d 56 ce 14 85 3a b0 7b be 7c 33 48 bc 91 f1 4d 55 31 7f 9e 13 b0 7f c3 f3 06 ce 37 1a a7 ef 8e 28 ba ee f5 df 38 b5 75 65 eb a7 bd c5 0f b1 0b 78 7d d4 b6 37 31 27 ff 41 73 e4 f5 c3 75 e2 88 2e 38 72 d1 03 7b 4b 1d 57 e3 7c de 1c eb d6 f7 c7 b9 36 46 f8 c5 eb 59 98 cf 1f b8 cc d6 95 a1 99 75 85 ec 23 36 84 cc f6 1a 71 b9 6e 2d 7c 10 22 ff 8b 71 75 6e 3d 10 b6 5b d7 e9 9c 5b bb 9a c5 97 84 1d 96 6e f7 75 b0 f5 a0 5b 6c ce f1 f7 fd c1 b3 a3 2b d9 3b 39 Data Ascii: U\{$bf2dQc\GrKyZh?%l/}o>G=}G}!a%$b@$Es}V:{\|3HMU17(8uex}71'Asu.8r{KW\|6FYu#6qn-\|"qun=[[nu[l+;9
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 67 bd f1 e9 19 bf 3f e5 83 1f ae 9e b9 52 ef fd 8d 29 f4 23 d6 24 2c 38 7a 81 8e 0b 7d 70 5f af 9e cc e8 ec 0f 35 61 47 97 78 59 f3 ef 99 0a 9e b5 dd fa 96 4f 1e 7f 70 d3 19 4b b4 e7 00 b9 cf a5 60 ac 73 44 2c f0 e3 1b 23 b2 f5 a1 6c bc f7 3a 85 cd 78 c4 89 a8 cf f4 90 7e f4 ef 4b ab 09 6c 83 46 e4 7c 76 5d d5 60 67 ca 6c ed 11 94 6f 4d 8d 21 56 7b 26 e3 95 e4 ec d3 fc e3 f7 7d 7f 89 ae cf ad 8b c3 c8 d5 3f fd 6e 1c 5e 4b ee f9 f6 eb 53 c6 de ff 81 eb cf e2 59 47 e3 f7 79 c7 fd 37 d4 ce 2a 8a b6 88 8c 50 cf 04 75 34 4f 62 91 37 76 3c 0b aa 0f 43 1e 3c 38 7b a1 32 53 ef 6f ec ad 03 5a 8c 0c fe 7b 47 fe 37 65 13 a4 ff 24 2f ba ec 8b 79 c0 9b 17 f5 77 af d0 9d 1c 7e b1 24 f5 cd d7 7b 21 76 fe 96 20 e1 c8 61 5c 7a 46 ff da 47 75 90 d3 f8 e5 bd bd 77 ed ae 0d Data Ascii: g?R)#$,8z}p_5aGxYOpK`sD,#l:x~KlF\|v]`gloM!V{&}?n^KSYGy7*Pu4Ob7v<C<8{2SoZ{G7e$/yw~${!v a\zFGuw
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 5c a0 c5 29 9e 73 b0 fb 28 fd bd ec 57 62 5d d1 ec cc 52 c7 34 b5 82 c5 56 8d 8e ae 03 a2 d6 ca fd bf 21 07 cf de 0d fb 64 d6 98 1e f8 7c 0c b6 7d 5f ed 7f 27 d6 e4 7d b1 33 74 64 7f e8 07 be 59 0d 35 18 a7 99 c8 59 f6 b7 36 2e 17 01 15 b1 9f 46 bc da 50 66 64 6d e8 e9 af 86 58 c0 74 df 5e 4e d6 77 b1 32 bb 26 6d b7 1f e7 bc be 5b 3b 1c 51 98 1b ef 72 12 eb 44 d7 78 b1 51 3a a0 c8 e2 23 1b 0f 0d 67 07 27 ce 6a e2 18 e0 f0 25 76 a2 99 43 b1 bd cf 3b 8c ad e7 cf e7 25 54 2f f2 bd b3 66 1e fc b6 46 ff 75 41 59 a7 88 ae 33 4c 43 35 96 bd 11 11 5b 8a 46 27 c9 4c c2 ef 19 d0 d6 a3 af 13 31 98 ff 92 91 63 3c c4 1a ca e4 a7 f8 fa e6 aa 9f 99 b5 fa da f3 3e 80 62 1b 16 3f 99 ed 4b 34 fc 12 02 ba b3 df 7a 54 44 8e 26 bf ad 75 7a 24 4b bd 0a e9 6d f7 a8 11 42 f8 c6 Data Ascii: \)s(Wb]R4V!d\|}_'}3tdY5Y6.FPfdmXt^Nw2&m[;QrDxQ:#g'j%vC;%T/fFuAY3LC5[F'L1c<>b?K4zTD&uz$KmB
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 39 5b 57 d1 87 e8 7e fe 6c ed 67 75 45 96 d4 d1 97 a8 2c 01 39 fc ef 0c 74 1d d5 21 17 d8 d7 73 e2 60 10 d9 73 b0 f7 0e 17 4f 1b 0c b1 c5 af 1e 2f d1 e5 fe f9 e1 38 e7 cc 60 c2 05 4f c5 55 15 e4 6b e1 e1 e0 e5 16 2c 18 a5 97 1c f9 05 2f c7 7a 20 72 80 db 7b 75 fb 44 8f ce 55 df f6 eb 9e 01 8d 9d 79 af 7d dd 33 1c a8 ab 3e e7 d5 df da df 3f eb d2 16 5e 6c a8 89 16 03 9e e0 99 12 bf fb 87 70 d7 52 a3 57 87 d2 58 1a 63 09 df fc d0 50 ec d3 51 01 37 95 ae 86 d5 77 f4 f2 e3 af 0f 7d 4b cc 8b 81 0d f6 f9 57 36 de 72 fa 2f 8c 10 79 8e ea db e7 91 f4 f5 8b ed f7 7a 0a a1 0b c5 cf 05 92 f3 5f e8 b0 a1 c5 f2 6c 04 fb ce 3c fa 73 45 61 3d 30 c5 bf 1a d8 77 66 fc 60 7c 9e 7d c8 fc 19 17 cf 79 ba 4f df 7a 86 c2 d3 ab f5 ed 47 97 6b f5 31 a3 25 96 c4 8c 6f 06 3a 45 e4 Data Ascii: 9[W~lguE,9t!s`sO/8`OUk,/z r{uDUy}3>?^lpRWXcPQ7w}KW6r/yz_l<sEa=0wf`\|}yOzGk1%o:E
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: d0 07 7a 3b 99 d4 e7 6b 7d e3 3f d4 7d 6e 14 6c c4 f0 f5 57 3d 67 70 7d 58 0f 4a 8d 61 3c 7b 9f b1 75 7b ef e2 47 cc 3a 3a 64 d5 13 13 1e cd af 67 c4 6a fc 68 ac 11 ff f4 86 b8 11 df 3d 6c fc cc a9 d1 ff 59 82 3e e8 99 91 00 a3 aa ae cf 52 64 f2 46 b1 78 cd 91 ac c6 0a ff e9 9b fe 39 ab 4c 52 f4 58 b4 cf 0c b5 a6 ea a4 7b 6f 03 89 ad a1 3d 5d 5e 9d c9 c9 1c 02 f3 c7 67 16 0c 35 be da 23 fa b9 c6 67 c1 6a 1e 99 86 bf b1 25 93 5f f7 22 06 d7 05 cf 48 6f 8d 85 a1 e4 b9 bc bd a8 83 bf f2 bb 3f a5 c4 f3 2c df da d0 5b 4b ea 30 67 78 eb 81 17 91 b9 9f 77 fb dc 19 26 c1 cf fc 8b 11 8a af 16 f1 55 b1 17 dd 77 ea f8 d4 72 cf c2 78 70 fb 56 3f a7 4c dc 9f ff b2 ae b7 bf c1 52 a6 6b 44 77 b1 42 d4 6b 1c 8d b5 59 7b 2a d3 87 7c b1 13 0e fb 2e ff 8e b2 2e 3c 5c b7 90 Data Ascii: z;k}?}nlW=gp}XJa<{u{G::dgjh=lY>RdFx9LRX{o=]^g5#gj%_"Ho?,[K0gxw&UwrxpV?LRkDwBkY{*\|..<\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49827	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	1014	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1388295675 HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:34 UTC	138	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 81661
2024-12-31 23:22:34 UTC	1314	IN	Data Raw: 76 61 72 20 5f 30 78 34 65 63 36 3d 5b 27 5c 78 37 37 5c 78 36 66 5c 78 36 37 5c 78 36 63 5c 78 37 37 5c 78 33 34 5c 78 33 30 5c 78 33 64 27 2c 27 5c 78 35 36 5c 78 36 62 5c 78 33 38 5c 78 35 37 5c 78 35 38 5c 78 34 31 5c 78 33 38 5c 78 35 32 5c 78 36 33 5c 78 35 31 5c 78 35 32 5c 78 34 61 5c 78 34 62 5c 78 33 38 5c 78 34 62 5c 78 37 33 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 37 30 5c 78 35 39 5c 78 35 30 5c 78 37 33 5c 78 34 66 5c 78 36 61 5c 78 37 37 5c 78 33 34 5c 78 36 62 5c 78 33 64 27 2c 27 5c 78 34 63 5c 78 34 64 5c 78 34 62 5c 78 33 38 5c 78 37 37 5c 78 37 31 5c 78 36 65 5c 78 34 34 5c 78 36 61 5c 78 34 64 5c 78 34 62 5c 78 36 38 5c 78 37 37 5c 78 37 30 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 35 38 5c 78 34 33 5c 78 36 63 5c Data Ascii: var _0x4ec6=['\x77\x6f\x67\x6c\x77\x34\x30\x3d','\x56\x6b\x38\x57\x58\x41\x38\x52\x63\x51\x52\x4a\x4b\x38\x4b\x73','\x77\x36\x70\x59\x50\x73\x4f\x6a\x77\x34\x6b\x3d','\x4c\x4d\x4b\x38\x77\x71\x6e\x44\x6a\x4d\x4b\x68\x77\x70\x45\x3d','\x77\x36\x58\x43\x6c\
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 34 63 5c 78 37 37 5c 78 37 32 5c 78 35 61 5c 78 35 32 5c 78 34 65 5c 78 36 62 5c 78 34 35 5c 78 33 64 27 2c 27 5c 78 35 61 5c 78 34 32 5c 78 34 61 5c 78 37 33 5c 78 36 36 5c 78 34 64 5c 78 34 62 5c 78 37 31 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 33 38 5c 78 34 39 5c 78 35 33 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 34 39 5c 78 35 61 5c 78 37 37 5c 78 33 35 5c 78 37 36 5c 78 34 34 5c 78 37 36 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 37 5c 78 35 33 5c 78 37 32 5c 78 34 34 5c 78 37 33 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 37 34 5c 78 34 66 5c 78 34 35 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 34 38 5c 78 34 33 5c 78 37 33 5c 78 37 33 5c 78 34 Data Ascii: 4c\x77\x72\x5a\x52\x4e\x6b\x45\x3d','\x5a\x42\x4a\x73\x66\x4d\x4b\x71','\x77\x72\x38\x49\x53\x41\x3d\x3d','\x77\x72\x49\x5a\x77\x35\x76\x44\x76\x51\x3d\x3d','\x47\x53\x72\x44\x73\x67\x3d\x3d','\x77\x72\x74\x4f\x45\x77\x3d\x3d','\x77\x37\x48\x43\x73\x73\x4
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 35 31 5c 78 35 36 5c 78 35 30 5c 78 34 66 5c 78 33 31 5c 78 36 32 5c 78 34 34 5c 78 37 35 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 35 30 5c 78 34 33 5c 78 36 66 5c 78 34 64 5c 78 34 62 5c 78 34 31 27 2c 27 5c 78 37 37 5c 78 36 66 5c 78 35 34 5c 78 34 34 5c 78 36 38 5c 78 37 37 5c 78 33 33 5c 78 34 34 5c 78 36 65 5c 78 35 37 5c 78 34 65 5c 78 34 39 5c 78 34 39 5c 78 33 38 5c 78 34 66 5c 78 37 33 5c 78 34 38 5c 78 34 37 5c 78 37 33 5c 78 37 33 5c 78 37 37 5c 78 37 31 5c 78 34 65 5c 78 34 62 5c 78 34 64 5c 78 34 64 5c 78 34 62 5c 78 36 65 5c 78 35 30 5c 78 36 33 5c 78 34 62 5c 78 33 30 5c 78 37 37 5c 78 33 36 5c 78 35 31 5c 78 36 31 5c 78 37 37 5c 78 33 34 5c 78 37 30 5c 78 33 32 5c 78 37 37 5c 78 33 34 5c 78 32 66 5c 78 34 Data Ascii: 51\x56\x50\x4f\x31\x62\x44\x75\x51\x3d\x3d','\x77\x37\x50\x43\x6f\x4d\x4b\x41','\x77\x6f\x54\x44\x68\x77\x33\x44\x6e\x57\x4e\x49\x49\x38\x4f\x73\x48\x47\x73\x73\x77\x71\x4e\x4b\x4d\x4d\x4b\x6e\x50\x63\x4b\x30\x77\x36\x51\x61\x77\x34\x70\x32\x77\x34\x2f\x4
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 5c 78 36 35 5c 78 33 30 5c 78 35 61 5c 78 35 61 27 2c 27 5c 78 34 33 5c 78 37 33 5c 78 34 66 5c 78 37 32 5c 78 37 37 5c 78 37 30 5c 78 37 37 5c 78 33 64 27 2c 27 5c 78 34 65 5c 78 34 34 5c 78 37 30 5c 78 37 33 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 33 33 5c 78 34 34 5c 78 36 38 5c 78 36 38 5c 78 34 39 5c 78 35 36 5c 78 34 36 5c 78 33 33 5c 78 34 34 5c 78 34 33 5c 78 36 61 5c 78 36 63 5c 78 37 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 34 5c 78 34 38 5c 78 34 33 5c 78 37 32 5c 78 37 37 5c 78 33 37 5c 78 34 34 5c 78 36 65 5c 78 33 38 5c 78 34 66 5c 78 34 31 5c 78 37 37 5c 78 37 31 5c 78 33 33 5c 78 34 33 5c 78 36 39 5c 78 36 62 5c 78 37 34 5c 78 34 65 5c 78 37 37 5c 78 37 32 5c 78 37 61 5c 78 34 33 5c 78 36 64 5c 78 34 64 5c 78 34 62 5c 78 34 33 5c 78 37 Data Ascii: \x65\x30\x5a\x5a','\x43\x73\x4f\x72\x77\x70\x77\x3d','\x4e\x44\x70\x73','\x77\x71\x33\x44\x68\x68\x49\x56\x46\x33\x44\x43\x6a\x6c\x77\x3d','\x77\x34\x48\x43\x72\x77\x37\x44\x6e\x38\x4f\x41\x77\x71\x33\x43\x69\x6b\x74\x4e\x77\x72\x7a\x43\x6d\x4d\x4b\x43\x7
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 78 34 62 5c 78 36 33 5c 78 34 62 5c 78 36 61 5c 78 35 32 5c 78 36 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 34 61 5c 78 33 36 5c 78 37 37 5c 78 33 37 5c 78 33 30 5c 78 34 63 5c 78 36 36 5c 78 35 37 5c 78 34 36 5c 78 35 32 5c 78 37 37 5c 78 37 30 5c 78 34 31 5c 78 33 64 27 2c 27 5c 78 34 31 5c 78 36 33 5c 78 34 62 5c 78 33 37 5c 78 37 37 5c 78 33 34 5c 78 33 38 5c 78 36 63 5c 78 35 33 5c 78 35 34 5c 78 37 36 5c 78 34 34 5c 78 36 37 5c 78 34 64 5c 78 34 66 5c 78 37 61 5c 78 34 63 5c 78 37 33 5c 78 34 62 5c 78 34 66 5c 78 34 39 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 32 5c 78 34 63 5c 78 34 33 5c 78 36 62 5c 78 34 64 5c 78 34 66 5c 78 32 62 5c 78 36 36 5c 78 34 32 5c 78 35 36 5c 78 34 36 5c 78 36 31 5c 78 34 Data Ascii: x4b\x63\x4b\x6a\x52\x67\x3d\x3d','\x77\x71\x4a\x36\x77\x37\x30\x4c\x66\x57\x46\x52\x77\x70\x41\x3d','\x41\x63\x4b\x37\x77\x34\x38\x6c\x53\x54\x76\x44\x67\x4d\x4f\x7a\x4c\x73\x4b\x4f\x49\x77\x3d\x3d','\x77\x72\x4c\x43\x6b\x4d\x4f\x2b\x66\x42\x56\x46\x61\x4
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 5c 78 34 62 5c 78 35 37 5c 78 35 30 5c 78 34 34 5c 78 36 39 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 35 5c 78 34 31 5c 78 33 39 5c 78 37 33 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 34 31 5c 78 36 63 5c 78 35 35 5c 78 37 33 5c 78 34 62 5c 78 33 32 5c 78 37 37 5c 78 37 32 5c 78 37 32 5c 78 34 33 5c 78 37 33 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 33 5c 78 34 35 5c 78 37 30 5c 78 36 66 27 2c 27 5c 78 37 37 5c 78 33 36 5c 78 36 37 5c 78 37 32 5c 78 35 34 5c 78 34 31 5c 78 36 61 5c 78 34 34 5c 78 36 37 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 37 31 5c 78 33 34 5c 78 34 61 5c 78 37 37 5c 78 33 34 5c 78 36 32 5c 78 34 34 5c 78 37 33 5c 78 36 38 5c 78 33 38 5c 78 37 34 27 2c 27 5c 78 35 61 5c 78 34 64 5c 78 34 66 5c Data Ascii: \x4b\x57\x50\x44\x69\x41\x3d\x3d','\x55\x41\x39\x73','\x77\x71\x41\x6c\x55\x73\x4b\x32\x77\x72\x72\x43\x73\x51\x3d\x3d','\x43\x45\x70\x6f','\x77\x36\x67\x72\x54\x41\x6a\x44\x67\x41\x3d\x3d','\x77\x71\x34\x4a\x77\x34\x62\x44\x73\x68\x38\x74','\x5a\x4d\x4f\
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 34 33 5c 78 37 36 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 36 35 5c 78 34 64 5c 78 34 66 5c 78 37 61 5c 78 35 33 5c 78 34 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 39 5c 78 36 37 5c 78 35 30 5c 78 34 34 5c 78 36 62 5c 78 33 38 5c 78 34 62 5c 78 35 37 5c 78 37 37 5c 78 33 35 5c 78 34 38 5c 78 34 33 5c 78 37 31 5c 78 37 33 5c 78 34 62 5c 78 34 65 5c 78 37 37 5c 78 36 66 5c 78 35 38 5c 78 34 34 5c 78 36 61 5c 78 37 38 5c 78 34 36 5c 78 35 36 5c 78 34 64 5c 78 34 35 5c 78 35 36 5c 78 34 33 5c 78 37 37 5c 78 33 36 5c 78 37 61 5c 78 34 33 5c 78 36 38 5c 78 33 32 5c 78 33 39 5c 78 36 66 5c 78 37 37 5c 78 33 37 5c 78 36 37 5c 78 37 38 5c 78 37 37 5c 78 37 31 5c 78 36 66 5c 78 33 64 27 2c 27 5c 78 34 36 5c 78 34 35 5c 78 34 31 5c 78 35 31 27 2c 27 5c Data Ascii: 43\x76\x77\x3d\x3d','\x65\x4d\x4f\x7a\x53\x41\x3d\x3d','\x49\x67\x50\x44\x6b\x38\x4b\x57\x77\x35\x48\x43\x71\x73\x4b\x4e\x77\x6f\x58\x44\x6a\x78\x46\x56\x4d\x45\x56\x43\x77\x36\x7a\x43\x68\x32\x39\x6f\x77\x37\x67\x78\x77\x71\x6f\x3d','\x46\x45\x41\x51','\
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 34 64 5c 78 33 64 27 2c 27 5c 78 34 64 5c 78 33 31 5c 78 34 64 5c 78 33 32 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 32 66 5c 78 34 33 5c 78 36 39 5c 78 34 31 5c 78 35 39 5c 78 35 32 5c 78 34 37 5c 78 33 31 5c 78 36 36 5c 78 34 34 5c 78 36 63 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 35 34 5c 78 36 63 5c 78 35 34 5c 78 34 33 5c 78 37 33 5c 78 37 33 5c 78 34 66 5c 78 35 30 27 2c 27 5c 78 37 37 5c 78 37 30 5c 78 34 38 5c 78 34 33 5c 78 36 64 5c 78 34 64 5c 78 34 66 5c 78 37 37 27 2c 27 5c 78 37 37 5c 78 33 37 5c 78 35 38 5c 78 34 34 5c 78 37 31 5c 78 33 30 5c 78 36 34 5c 78 36 37 5c 78 37 37 5c 78 37 31 5c 78 33 38 5c 78 35 36 5c 78 37 37 5c 78 33 36 5c 78 33 38 5c 78 36 31 5c 78 37 37 5c 78 36 66 5c 78 36 37 5c 78 33 64 27 2c 27 5c 78 37 37 5c 78 33 Data Ascii: 4d\x3d','\x4d\x31\x4d\x32','\x77\x37\x2f\x43\x69\x41\x59\x52\x47\x31\x66\x44\x6c\x51\x3d\x3d','\x54\x6c\x54\x43\x73\x73\x4f\x50','\x77\x70\x48\x43\x6d\x4d\x4f\x77','\x77\x37\x58\x44\x71\x30\x64\x67\x77\x71\x38\x56\x77\x36\x38\x61\x77\x6f\x67\x3d','\x77\x3
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 78 37 37 5c 78 37 32 5c 78 34 34 5c 78 34 34 5c 78 36 61 5c 78 37 33 5c 78 34 62 5c 78 37 32 5c 78 37 37 5c 78 37 30 5c 78 34 35 5c 78 35 33 5c 78 35 61 5c 78 33 38 5c 78 34 66 5c 78 35 30 5c 78 35 38 5c 78 37 37 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 35 5c 78 37 33 5c 78 34 66 5c 78 34 33 5c 78 37 37 5c 78 37 32 5c 78 35 34 5c 78 34 33 5c 78 36 61 5c 78 33 38 5c 78 34 62 5c 78 33 31 5c 78 37 37 5c 78 36 66 5c 78 36 61 5c 78 34 33 5c 78 36 38 5c 78 36 33 5c 78 34 66 5c 78 36 38 5c 78 37 37 5c 78 37 32 5c 78 36 62 5c 78 33 64 27 2c 27 5c 78 34 61 5c 78 36 37 5c 78 37 32 5c 78 34 34 5c 78 36 63 5c 78 36 33 5c 78 34 62 5c 78 34 36 27 2c 27 5c 78 35 39 5c 78 37 37 5c 78 34 65 5c 78 36 39 5c 78 36 35 5c 78 36 33 5c 78 34 62 5c 78 33 37 5c 78 37 37 5c 78 37 Data Ascii: x77\x72\x44\x44\x6a\x73\x4b\x72\x77\x70\x45\x53\x5a\x38\x4f\x50\x58\x77\x3d\x3d','\x45\x73\x4f\x43\x77\x72\x54\x43\x6a\x38\x4b\x31\x77\x6f\x6a\x43\x68\x63\x4f\x68\x77\x72\x6b\x3d','\x4a\x67\x72\x44\x6c\x63\x4b\x46','\x59\x77\x4e\x69\x65\x63\x4b\x37\x77\x7
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 78 36 61 5c 78 37 34 5c 78 37 38 5c 78 37 37 5c 78 33 37 5c 78 36 65 5c 78 34 33 5c 78 37 30 5c 78 35 31 5c 78 33 64 5c 78 33 64 27 2c 27 5c 78 34 38 5c 78 34 36 5c 78 37 33 5c 78 37 32 5c 78 34 62 5c 78 34 64 5c 78 34 66 5c 78 33 33 5c 78 37 37 5c 78 37 30 5c 78 37 61 5c 78 34 34 5c 78 37 32 5c 78 36 38 5c 78 33 31 5c 78 35 33 5c 78 37 37 5c 78 37 30 5c 78 34 38 5c 78 34 34 5c 78 37 33 5c 78 36 33 5c 78 34 62 5c 78 34 32 5c 78 37 37 5c 78 37 30 5c 78 36 32 5c 78 34 33 5c 78 37 33 5c 78 36 65 5c 78 37 33 5c 78 35 33 5c 78 34 61 5c 78 34 64 5c 78 34 66 5c 78 32 62 5c 78 37 37 5c 78 37 30 5c 78 34 64 5c 78 34 39 5c 78 37 37 5c 78 33 35 5c 78 36 36 5c 78 34 33 5c 78 36 66 5c 78 35 34 5c 78 33 38 5c 78 37 36 5c 78 34 66 5c 78 37 61 5c 78 33 37 5c 78 34 34 5c Data Ascii: x6a\x74\x78\x77\x37\x6e\x43\x70\x51\x3d\x3d','\x48\x46\x73\x72\x4b\x4d\x4f\x33\x77\x70\x7a\x44\x72\x68\x31\x53\x77\x70\x48\x44\x73\x63\x4b\x42\x77\x70\x62\x43\x73\x6e\x73\x53\x4a\x4d\x4f\x2b\x77\x70\x4d\x49\x77\x35\x66\x43\x6f\x54\x38\x76\x4f\x7a\x37\x44\
2024-12-31 23:22:34 UTC	3926	OUT	GET /media/zw1kviit/board_highlights_2.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=rLH+AHzvYaCjPC8rTzu+c/fC+9LaW7QzQa0GXLak2KN30GV2bywLCDfKZchx9PL9MoFsvA3c8ogx63dJeVbDRBygbqtUR0BJHtKaDlb4NwNkDrwZwFWoDPTyTDmtOU12n4jBFc+Qt5xWgSswgcQyM3FUx8bwZW6zL5pXU8+YBAwW4YXttj1pAzZVjZTD0dP5A7DLJz+TWzgNUXDx9xVDJkhkBe+ovGcUrLOZnWPkt/2gV2XzqpqEJA4cmUxdhrw7mmfr8+COodX/zwbl8Xk1K9rh0TpXc2QkixvN07CA4qqVqr8SHpIqaMjZ+t+sYckLEBupbHFyCpTzrZ8gZhZgdkEL3jxkco/soHMyC4cV05sGZuiUJe0zOsCe9VdBg+Z+ZyP7zqfY/fLsxZjYJgbt+18AZkLruEKbXMJON [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49829	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	1208	OUT	GET /media/ppung3sx/board_highlights_1.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:34 UTC	349	IN	HTTP/1.1 200 OK Etag: "1db0f526f927f75" Last-Modified: Wed, 25 Sep 2024 13:54:27 GMT Content-Type: image/png Content-Length: 983413 Cache-Control: max-age=82208, public Expires: Wed, 01 Jan 2025 22:12:42 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT X-CDN: Imperva X-Iinfo: 18-261311064-261310155 2CNN RT(1735687353802 280) q(0 0 0 -1) r(0 0)
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 9b 08 06 00 00 00 66 62 a0 3f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 20 00 49 44 41 54 78 9c cc bd 67 97 16 47 b2 ef cb bb fb 01 ee ba 77 dd b3 d6 bd c7 ec 7d f6 ec d9 63 35 d2 8c 34 23 8b 90 47 08 ef bd 13 08 6f db d1 78 84 f0 20 40 1a 79 e1 1a 1a 1a 9a 46 c8 7c a1 f3 09 9e 4f 90 37 ff 59 15 99 11 91 91 55 d5 0d 7b e6 bc a8 f5 b8 7a aa b2 b2 b2 32 f3 17 ff 88 c8 69 9f 6f ff ea 7f 7d ba e5 6a ef e2 47 97 7b 67 3f bc e0 5f af f4 4e ac fd a4 77 e6 c3 f3 fe f3 c5 de d1 b5 1f f7 76 cc df dd 5b 37 73 63 ef c2 a6 4b bd bf 6f ff ca 7f 7f be f7 d5 ce 6f 7b df ed b9 1e f6 59 f5 ee da de be a5 fd bd 23 ab 8e f7 6e f7 df eb dd 1f 7a d4 fb 7a d7 77 bd e1 15 87 7a 47 57 1f ef dd ea bb Data Ascii: PNGIHDRfb?gAMAa IDATxgGw}c54#Gox @yF\|O7YU{z2io}jG{g?_Nwv[7scKoo{Y#nzzwzGW
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 6b bf 59 f9 1e b2 f2 a5 df ec f2 3d ca ca 65 97 29 af 93 31 a3 5c fc 19 e5 ff bb c7 bf 6b ac 2f 59 3f f2 39 69 7e b6 f0 1f 59 2f 13 b1 af b8 a7 36 d9 1f 8c e7 7d 47 dc aa df 78 fd 75 29 0f b5 b5 71 d1 de ec f6 ac 9f d1 fc 7f f2 59 d7 cf 16 5e 3b 3d 7f c6 33 11 9f 99 c2 6f e5 72 ff 90 d5 41 f9 39 b2 db 38 7f 96 62 3f ce ef 05 ef db 45 9f 4e f7 2e b5 73 79 7f 1f aa 36 c5 db f9 64 ef 61 53 5f 54 da af 7c 7f ad fe 96 ee 5f 73 fd e7 e3 4c bc 9e d0 ce c7 d5 f5 c8 63 f8 09 67 ac 17 d4 a3 07 50 e7 01 d6 79 18 15 1b be a3 0d 9f 3d 98 bb db 7e f3 00 ef ee e0 77 da 4f ed 7b 87 8e 87 fd e3 6f d5 77 38 17 b6 f8 3c c5 7b 3a 5e 97 25 dd db 7b ec 39 44 79 e9 be f1 ba a5 6b c6 ff e9 3a a8 3c f4 df f0 3d 95 93 6d b7 79 f9 d5 77 d8 46 fa 46 dd ad fd 77 42 d9 a9 0c d4 8e 52 Data Ascii: kY=e)1\k/Y?9i~Y/6}Gxu)qY^;=3orA98b?EN.sy6daS_T\|_sLcgPy=~wO{ow8<{:^%{9Dyk:<=mywFFwBR
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 38 06 22 fc f6 dd ee eb ee eb 5d df b9 eb fb 46 82 4a 0f 30 bf 5a 83 39 bd bf c2 d4 74 bc ff b4 56 d3 a1 94 1f 5d 7b 22 18 07 a0 e2 5f f2 60 7e 49 c1 79 a5 a2 5f 8c 96 8a 54 21 b5 65 c3 df 9c 2f b6 7f 1d 6f f6 c9 75 a7 fc 75 5e 08 ef 35 30 75 03 f4 87 72 00 1d 90 03 61 b2 7c 1b c0 60 c0 83 1e c8 4a 83 da 78 87 07 7e aa 9b 3d 49 6e 9a 2c 4a f0 6e 52 c2 73 eb 65 d7 87 7f aa a0 9e 97 a1 a4 86 37 d7 43 97 ce bd b9 bc bc 33 d5 6d 2d bf e7 12 9e ed 7d b9 f1 26 37 e8 68 18 d7 6d 89 26 43 71 f2 6d a8 2c f7 04 b0 e4 80 1e 01 52 a8 8a 12 9a 65 3b d7 d7 dd 6c 94 28 81 7f 59 45 37 9e df 29 00 7a d7 c1 54 4f 6e cb 7d 85 02 41 c3 98 37 2a 60 42 fe a6 af c5 2e 63 0e 64 79 5b 2e b5 ff f2 75 72 08 ee d2 77 54 93 a9 f6 63 8f 67 e5 d6 90 67 5d 9b 6c db b9 51 a5 7c 5f 75 fb Data Ascii: 8"]FJ0Z9tV]{"_`~Iy_T!e/ouu^50ura\|`Jx~=In,JnRse7C3m-}&7hm&Cqm,Re;l(YE7)zTOn}A7*`B.cdy[.urwTcgg]lQ\|_u
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 76 8f 0b a7 cf a4 b6 13 a8 03 dc e9 e2 10 93 1e 2d 14 75 a5 9d ad 63 d8 71 13 53 63 f8 d9 1d 58 76 d0 7d bf e7 46 68 48 49 55 9c 90 13 d3 a1 34 f1 ae 5c d3 b5 9a 97 c7 81 99 d0 d0 a0 ee f0 c1 6f aa f1 e1 7a 92 36 75 a5 3d 9f e0 37 2a 30 d9 a0 d6 1d 60 bb 29 d2 5d 00 bc d9 18 90 d4 fb 36 c5 a8 c5 6d a8 53 e7 d4 0c e8 1a 34 72 63 4c 9a f0 4f ed fe 75 6f 23 7c b2 2d 54 98 01 09 eb d2 65 3b 77 75 1f 1b b4 8c 57 93 53 b1 2d 85 9c ab d3 3a 3e 9f ef df 5d 25 ef 66 24 2b 0f f2 dc b5 3a 3d db 56 fc 7d 09 d4 4b 70 ce 55 38 fd 39 d6 b1 9a 04 4f 66 f0 6e 9b 18 70 03 90 86 72 79 ff 53 9d f3 f6 cc cf 3d b9 be a7 d9 95 dd 2e 6f ee 3e 2b fb 53 0e 06 f4 4c e5 e1 1f 59 5f 5f cc 45 92 43 7d fa 8e 54 0f e9 71 d0 15 ce ed ba 2a 4d ec a6 ee f6 6e 29 f2 d2 d3 c2 6e 17 56 dd 53 Data Ascii: v-ucqScXv}FhHIU4\oz6u=70`)]6mS4rcLOuo#\|-Te;wuWS-:>]%f$+:=V}KpU89OfnpryS=.o>+SLY__EC}TqMn)nVS
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: b6 7d e5 42 89 ff 78 dd a9 50 31 a8 d4 10 c7 be f5 b3 60 21 41 b9 f9 8d 3e b3 ee ac db 3e 77 47 78 5f 9c c0 65 ea 89 31 a9 53 8a 93 f8 6c 40 41 69 e0 ca 2d d5 5d 27 61 53 dd ca 71 3e 6d 96 48 5b 3d ef 62 95 cb ad 74 d2 cd fd 49 54 f5 ae e7 6f 8e ab b7 ae bb 7b b9 64 e7 5d 82 8b f6 fb ab 27 ea 53 55 cf ca ae 53 5a 81 e4 2a 7a ae 02 eb 4c d7 ed 90 ce 5d 45 b5 e1 8a 3f 4f b9 7a 9e 7b a4 64 13 40 4b b9 e9 10 4a d2 f4 7c eb e7 b2 a9 de ca a0 67 19 13 9a 33 b7 eb e4 56 3a 96 56 c6 9c 8e 9b 80 d8 e6 75 33 6e b4 05 6b 85 07 7e bf f2 a4 97 25 cf 85 72 52 c2 c9 b4 c7 26 30 28 3f 43 b9 0b 3b fd 56 8e f7 7b 94 5d af 7c 2d 03 ba be f6 74 8d cd 7d f9 93 f7 c9 ed 75 52 da d7 f6 1a 6a 8b 3d cf eb af 0d ce 4b 65 d7 7d 0c 7f 56 a4 31 4b 02 b1 95 15 5d 24 61 e3 ea 79 5f 72 Data Ascii: }BxP1`!A>>wGx_e1Sl@Ai-]'aSq>mH[=btITo{d]'SUSZ*zL]E?Oz{d@KJ\|g3V:Vu3nk~%rR&0(?C;V{]\|-t}uRj=Ke}V1K]$ay_r
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 5c bf d7 e7 98 9c 4a 9d 3e e7 6e 72 a5 ce 22 57 fc a5 ba 64 25 c3 6b cb de ae 3a f7 61 1d 07 35 d9 fb 63 4f 7a a9 b3 7d 52 e8 d7 2a 9f ce ae ae db fe 3d 43 f5 e5 4b 86 95 94 73 13 ae 8b 86 2d 99 f0 4d 83 ba 09 f8 86 6a de 16 4e d2 68 5c 1b ca d5 d1 b2 35 db 52 61 b9 61 41 19 35 da d4 73 e6 f6 9a 25 b9 0a 93 e8 31 03 d2 13 f8 27 55 b2 6c 54 d0 ae ec ba af e3 e1 0c 3c bc 41 64 7d 66 13 f6 a6 ba b6 fa 34 82 67 bb 3e db 26 1e 79 b9 db b6 b6 e3 14 af c1 68 a7 42 69 57 ed ae 7c ad 4f a7 df d6 c6 5c 3e 6e 74 7b ee bb b8 cd 97 da 76 ea 33 78 7d f0 f1 c1 ea a7 2c e3 a4 a8 73 66 f8 e1 b1 e0 72 7d f0 bb 35 6c 2b a0 8e cf 46 82 73 ec 17 12 cb f9 6d 44 2f d1 16 95 71 32 86 29 50 35 80 db 32 14 dc 66 90 7e ab de f8 7f a4 c2 2d 93 c7 66 49 ec 44 1c ba a5 88 8f 3b 6d a8 Data Ascii: \J>nr"Wd%k:a5cOz}R*=CKs-MjNh\5RaaA5s%1'UlT<Ad}f4g>&yhBiW\|O\>nt{v3x},sfr}5l+FsmD/q2)P52f~-fID;m
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 37 97 ae 6e 40 85 f8 76 66 8d 9c 9c eb 7b a9 e3 b5 cb 3e ae ca a5 eb 63 5c ec df 10 6f 33 cc e3 81 ac ba e6 00 2e eb 56 1b 0a 4a f5 34 35 40 2f ef 4f 03 84 04 71 7b e9 40 fd 7b 52 5d cb 49 dc 32 05 5c 43 b2 80 63 39 01 9c 2c 3c 99 5b 5b 8c 7a 06 eb f9 e4 d2 52 85 f8 f3 9d 06 59 e6 f6 cf 5d 50 59 dd f1 49 b1 56 d3 64 52 2b e5 7a ab 63 64 eb f3 a4 cc ce f9 72 6c ba ac 19 48 d7 d7 c3 b3 52 6b d8 97 40 2c 5d cb 75 ff 28 72 72 a8 8d 03 60 a5 12 94 62 fd 79 5b b5 21 bf 4d 25 d7 e1 1d 7a 12 42 c7 b2 ea c6 de a4 7b 3b 77 7b 6f 2e 83 04 ee ae ea 7e 75 ec ea fa 75 1b e5 a0 de f6 6c 8b 3e cc ac 5f d9 df 49 65 47 c6 8d f3 67 bd fb 18 93 ea bf 52 ce 13 e4 df 65 80 7e 8b a9 d2 12 d2 13 64 6b 90 15 cf 48 50 cb 2b 30 bf 59 6f e2 ff 99 3b 7a 52 ec 47 18 c4 6b 05 9f e0 9c Data Ascii: 7n@vf{>c\o3.VJ45@/Oq{@{R]I2\Cc9,<[[zRY]PYIVdR+zcdrlHRk@,]u(rr`by[!M%zB{;w{o.~uul>_IeGgRe~dkHP+0Yo;zRGk
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 5f 9c 5b 75 88 c3 32 59 9c e5 16 6a 4d 2a ed c9 e2 3f 0a cc db 41 70 b2 93 34 0e ea 96 6b fb d4 5c dc 1f 8b 8e 40 2b c4 d6 b9 ca ea fd 93 c0 ba a5 50 a7 f8 1b 6d e4 98 8a 7b bd 86 7c aa 53 3d 80 e4 06 80 32 a0 5b f7 ba fd 5e 96 dc 9b b8 3a c6 96 00 13 93 2e be 84 60 9e ec 4c 02 fa 38 83 42 9d 30 ce 52 50 0a 60 de 30 48 75 75 49 ce 00 de 70 5d cf 26 8e c2 ad 3d b9 9c e5 13 4e 5b a9 d6 ee 9d 7a 6d 62 b9 49 25 4f ba fa 36 03 3a 4f 7c a5 33 33 67 93 6d 35 81 e6 00 9f ee 3f ff ce 4a 22 97 54 6e 0b c6 73 6b ff 23 e1 22 ab 8d 1a 7c 82 90 00 b6 9c c9 b6 69 59 3c fd df 1c 4e ed b8 fb 52 3b d2 6a b7 be b7 3a 39 1c f5 f3 1c 50 ad ff 13 98 97 8c 07 d4 27 88 72 29 6f 14 99 39 3e 7f ae b5 81 a1 3c 49 7c 1c c7 b7 7c cc 60 46 82 08 67 94 f0 31 9f 20 e6 b0 95 c7 28 d3 f3 Data Ascii: _[u2YjM*?Ap4k\@+Pm{\|S=2[^:.`L8B0RP`0HuuIp]&=N[zmbI%O6:O\|33gm5?J"Tnsk#"\|iY<NR;j:9P'r)o9><I\|\|`Fg1 (
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: b9 97 9e 79 3d ec f7 ed ae 6b 6e e6 8b b3 dd dc 57 16 b8 05 d3 17 87 0b a4 85 e1 e9 02 b1 01 c6 71 13 b0 e6 39 ca 8d 8b c1 2b ca 83 8c ee 30 1c 10 a4 53 56 3d 24 8a c3 7b dc 1c 0c e2 a5 4e 73 d5 9b ab dd a6 99 9b 05 a0 f3 46 56 7a 70 9e 2e a0 4f d5 6d 39 87 dc 6e f1 ca e5 df cb 0a f6 14 13 c3 15 00 dd 2a 2f ff cd 52 db b5 c5 af 6c 2c 68 2e 6f c9 10 30 ae ca 62 0f 32 d6 c0 61 1b 0b 2c 0f 01 b2 ea 4e c6 b0 90 77 92 a5 fb fc b8 f0 6a 0d 20 e5 e5 3e 2c 68 cd 26 67 22 16 92 4f d0 f8 40 64 80 ba e5 66 1e 21 5c 26 62 b4 20 ad 49 5d 2d 6e 45 08 cf 61 5d 6f 77 d5 64 34 a9 8a 0f c5 e4 54 26 85 53 b1 9d d9 c4 59 26 85 b3 01 3d 01 47 7a 9f c7 cd e6 09 b4 f2 e5 da ee 0a 68 b2 d5 fd 52 72 a7 d2 e4 41 1b 40 aa b5 ac c7 52 62 2e c3 85 af d4 e6 42 3f 5b 68 17 7a 12 93 ab Data Ascii: y=knWq9+0SV=${NsFVzp.Om9n*/Rl,h.o0b2a,Nwj >,h&g"O@df!\&b I]-nEa]owd4T&SY&=GzhRrA@Rb.B?[hz
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 62 c8 91 c0 0d 0b cb 43 f9 3e 57 67 b8 43 65 0d 2c 1d 72 ab de 5d eb 2b ef 84 fb e0 e5 b9 61 e1 f9 51 5f d9 00 6f a4 bf 7f e7 f9 99 6e f1 f4 a5 ee c0 d2 83 ee 8a 07 77 c0 3c 2c 23 a8 bc 23 ab 8f 07 65 1c d6 06 c4 c2 93 cb fd 67 b5 8b 3b ce 89 4c ef b8 1e 7c 57 65 94 ff 2a 94 0f 03 63 53 a7 8a f5 f5 0e 2d 3f 1c ad 34 25 65 a4 dd 85 63 b2 40 dc c5 3a d7 d6 21 b4 75 4a 5d e1 3d 87 65 0b 8e f3 0e d2 06 d4 36 d5 dc ea f4 e8 3b 6b b2 a8 3b d1 92 fa cd 8d 09 36 1c e7 9d af 36 42 88 e3 4f 12 a0 53 fd 48 43 47 3e b8 58 ff ef 66 75 b6 db 8e d5 8e da 01 5d 4c a8 86 72 a0 ce 54 62 b5 d6 af 74 ff 7e 98 4f dc 2c d5 bc a0 5e 96 3a fd 12 a8 f3 10 94 26 17 e5 92 7a 6e c3 3a 37 34 a4 89 68 9e 18 89 1b 2b 54 e2 26 f1 bb 54 ac 05 a4 87 c9 3a 4b 14 47 0a 39 57 f3 94 e2 c7 5d Data Ascii: bC>WgCe,r]+aQ_onw<,##eg;L\|We*cS-?4%ec@:!uJ]=e6;k;66BOSHCG>Xfu]LrTbt~O,^:&zn:74h+T&T:KG9W]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49830	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	3909	OUT	GET /media/pcknkbmi/1.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=rLH+AHzvYaCjPC8rTzu+c/fC+9LaW7QzQa0GXLak2KN30GV2bywLCDfKZchx9PL9MoFsvA3c8ogx63dJeVbDRBygbqtUR0BJHtKaDlb4NwNkDrwZwFWoDPTyTDmtOU12n4jBFc+Qt5xWgSswgcQyM3FUx8bwZW6zL5pXU8+YBAwW4YXttj1pAzZVjZTD0dP5A7DLJz+TWzgNUXDx9xVDJkhkBe+ovGcUrLOZnWPkt/2gV2XzqpqEJA4cmUxdhrw7mmfr8+COodX/zwbl8Xk1K9rh0TpXc2QkixvN07CA4qqVqr8SHpIqaMjZ+t+sYckLEBupbHFyCpTzrZ8gZhZgdkEL3jxkco/soHMyC4cV05sGZuiUJe0zOsCe9VdBg+Z+ZyP7zqfY/fLsxZjYJgbt+18AZkLruEKbXMJON [TRUNCATED]
2024-12-31 23:22:34 UTC	343	IN	HTTP/1.1 200 OK Etag: "1db557538328d87" Last-Modified: Mon, 23 Dec 2024 19:59:48 GMT Content-Type: image/png Content-Length: 58173 Cache-Control: max-age=11342, public Expires: Wed, 01 Jan 2025 02:31:36 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT X-CDN: Imperva X-Iinfo: 15-142566492-0 0CNN RT(1735687353822 280) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:34 UTC	1109	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 38 00 00 04 38 08 02 00 00 00 63 72 fb d8 00 00 20 00 49 44 41 54 78 9c ec dd 89 77 14 65 da ff ff df ff 43 94 7d 47 54 50 36 51 16 19 50 40 71 41 14 5c 60 44 41 dc 07 14 51 c1 15 07 14 41 05 41 41 50 50 14 47 11 44 04 45 06 48 48 08 81 00 d9 48 42 c8 9e ee ec 49 cf ef 1e fa f9 e6 c9 93 ee ae ba bb ab ba af ba bb de af 73 1d cf 9c 33 54 f5 5d fb f5 49 57 57 fd 7f 0d 00 00 00 00 e0 31 ff 9f f4 00 00 00 00 00 a0 27 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf 21 a8 00 00 00 00 f0 1c 82 0a 00 00 00 00 cf Data Ascii: PNGIHDR88cr IDATxweC}GTP6QP@qA\`DAQAAAPPGDEHHHBIs3T]IWW1'!!!!!!
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 91 cd 97 bf 90 ee a3 53 cd 5f 41 a5 a5 f8 53 e9 9d 8c a2 28 8a a2 28 8a a2 12 a9 96 e2 8d d2 dd 74 4a f9 28 a8 b4 16 bc 2d be 7b 51 14 45 51 14 45 51 54 c2 d5 5a f0 9e 74 4f 9d 3a 7e 09 2a 2d 25 5b 92 bd df 84 b2 c6 75 9e 99 dd 7e 6e 61 db c5 15 ad 85 1f b4 16 ae a3 28 8a a2 28 8a a2 7c 50 1f a8 f6 4f 35 81 aa 15 54 0d 61 b2 7b ce 6b 8f 2d f6 05 5f 04 95 e6 d2 3d c9 f8 5d 4a 67 ee 7d 2a d4 36 5d f9 35 58 7d b6 a1 be 4a 7a 29 01 00 00 e0 01 f5 55 aa 39 54 2d 62 6b c1 bb 9d b9 73 92 90 55 46 aa e6 56 7a 21 53 21 fd 83 4a 63 c5 61 17 9f f1 15 ca 9e da 76 61 45 53 d9 5e 3f 3f d3 1a 00 00 00 9a 02 b5 a5 aa 75 6c bb b0 3c 94 3d c5 b5 ac 92 79 93 6a 71 a5 97 2c e9 d2 3c a8 34 56 fe 3b 94 35 c6 9d ef 4f 72 66 34 95 ef 93 5e 20 00 00 00 98 aa a9 ec 07 d5 52 ba f3 Data Ascii: S_AS((tJ(-{QEQEQTZtO:~-%[u~na((\|PO5Ta{k-_=]Jg}6]5X}Jz)U9T-bksUFVz!S!JcavaES^??ul<=yjq,<4V;5Orf4^ R
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 00 00 c0 27 08 2a 26 21 a8 00 Data Ascii: &!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!'&!
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 8b a7 02 0f 56 28 f3 96 40 6d a1 f4 c6 01 00 37 11 54 4c 42 50 01 e0 73 4d e5 3f 8b 47 02 cf 56 5b fe 8b d2 db 07 00 dc 44 50 31 09 41 05 80 cf 75 66 4f 15 cf 03 5e ae c6 ab c7 a5 37 11 00 b8 86 a0 62 12 82 0a 00 3f 6b 29 de 24 9e 04 3c 5e 9d b9 73 a4 b7 12 00 b8 86 a0 62 12 82 0a 00 df 0a d4 96 84 32 6f 11 4f 02 de af e6 d2 5d d2 db 0a 00 dc 41 50 31 09 41 05 80 6f b5 5d f8 87 78 06 30 a2 42 a7 27 06 ea 2a a4 37 17 00 b8 80 a0 62 12 82 0a 00 7f 0a 56 66 8a 07 00 83 aa b5 e0 5d e9 2d 06 00 2e 20 a8 98 84 a0 02 c0 9f 3a ce ce 15 ef fe cd aa 60 75 9e f4 46 03 00 a7 08 2a 26 21 a8 00 f0 a1 e6 b2 3d e2 7d bf 71 d5 7e fe 29 e9 ed 06 00 4e 11 54 4c 42 50 01 e0 37 81 fa ca d0 e9 49 e2 7d bf 89 d5 54 71 48 7a eb 01 80 23 04 15 93 10 54 00 f8 8d 3a 8f 89 77 fc 86 Data Ascii: V(@m7TLBPsM?GV[DP1AufO^7b?k)$<^sb2oO]AP1Ao]x0B'7bVf]-. :`uF&!=}q~)NTLBP7I}TqHz#T:w
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: b2 41 e5 89 7b fb 8a af 04 8b 0a 56 e7 49 ef 38 00 fc 8e a0 62 12 82 0a 00 e3 34 95 ed 15 ef b9 a3 d6 84 d1 29 7d cf 63 a4 49 5e 7d f3 63 b8 da cf 2d 96 de 77 00 f8 1d 41 c5 24 04 15 00 c6 09 9d 9e 24 de 73 47 ad b1 37 0b bc 41 a5 bb e1 83 33 c4 57 82 75 35 55 1c 92 de 7d 00 f8 1a 41 c5 24 04 15 00 66 69 29 5a 2f de 6d c7 aa 71 a3 84 83 8a 22 be 12 ac ab 33 e7 6e e9 3d 08 80 af 11 54 4c 42 50 01 60 90 40 6d a1 78 ab 6d 51 04 15 9d 6a 29 d9 22 bd 1f 01 f0 2f 82 8a 49 08 2a 00 0c d2 9e ff 9c 78 9f 6d 51 04 15 9d 0a 65 8d 09 d4 95 49 ef 4a 00 7c 8a a0 62 12 82 0a 00 53 34 5e 3d 2e de 64 5b 17 41 45 b3 da 2e ae 94 de 9b 00 f8 14 41 c5 24 04 15 00 a6 e8 cc 9d 23 de 61 5b 17 41 45 bf 82 55 39 d2 3b 14 00 3f 22 a8 98 84 a0 02 c0 08 cd 97 77 8a f7 d6 b6 45 50 d1 Data Ascii: A{VI8b4)}cI^}c-wA$$sG7A3Wu5U}A$fi)Z/mq"3n=TLBP`@mxmQj)"/I*xmQeIJ\|bS4^=.d[AE.A$#a[AEU9;?"wEP
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 88 fd 4c 65 e9 bc be e2 8b 9f e2 0a 9d 9e 24 bd 77 03 30 0c 41 c5 24 04 15 00 49 15 ac ce 17 6f 67 53 59 85 fb c4 ee fe fa 6b 9b 8f ee fb ea aa 96 a2 f5 d2 fb 38 00 93 10 54 4c 42 50 01 90 54 ed e7 97 88 f7 b2 29 ae f9 b3 04 1e 52 3c 7d 62 6f f1 05 97 aa 40 6d a1 f4 6e 0e c0 18 04 15 93 10 54 00 24 4f 63 c5 ef e2 5d 6c ea eb d4 8e a1 a9 0f 2a 07 37 fa f1 eb 94 70 b5 e7 3f 27 bd a7 03 30 06 41 c5 24 04 15 00 c9 d3 79 66 96 78 17 2b 52 cb 1e ee 97 ca 94 b2 60 b6 5f 5e 9f 12 ab 1a af 1e 97 de d9 01 98 81 a0 62 12 82 0a 80 24 69 29 d9 2a de bf 4a 55 ed e1 11 37 0d 4f d1 e3 bf 86 0c cc a8 38 30 5c 7c 91 65 ab f3 cc bd d2 fb 3b 00 33 10 54 4c 42 50 01 90 0c 81 ba b2 50 d6 78 f1 fe 55 b0 8e 6f 4b d1 0d 60 87 3e f1 ef 4d 5f dd ab f9 f2 4e e9 bd 1e 80 01 08 2a 26 Data Ascii: Le$w0A$IogSYk8TLBPT)R<}bo@mnT$Oc]l7p?'0A$yfx+R`_^b$i)JU7O80\\|e;3TLBPPxUoK`>M_N*&
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 7b 4a 43 7d 95 f4 41 06 20 75 08 2a 26 21 a8 00 b0 10 ac b9 28 de 4a 9a 58 a3 6e 48 fc ad 8e 89 a9 e3 bd f5 89 56 4b d1 7a e9 e3 0c 40 ea 10 54 4c 42 50 01 60 a1 3d 7f 99 78 1f 69 5c ed 7a 7b 50 8a 53 8a f2 e1 cb 03 c4 17 dc dc 0a d4 14 48 1f 6a 00 52 84 a0 62 12 82 0a 80 58 1a 2b 8e 8a 77 90 26 d6 ec 29 bd 53 1f 54 c6 8d ba 4e 7c c1 cd ad b6 0b 2f 49 1f 6d 00 52 84 a0 62 12 82 0a 80 58 3a 72 ef 17 ef 20 8d ab 2b bf 0c 4f 7d 4a 09 3b bd 73 a8 f8 e2 9b 5b c1 ea 3c e9 03 0e 40 2a 10 54 4c 42 50 01 10 55 53 d9 5e f1 de d1 c4 da 29 71 df 57 d8 3f 5f e4 ee af c4 ab 3d 7f 99 f4 31 07 20 15 08 2a 26 21 a8 00 88 aa 33 fb 4e f1 de d1 c4 5a f2 50 5f a9 a0 72 df b4 3e e2 8b 6f 74 35 56 9e 90 3e ec 00 24 1d 41 c5 24 04 15 00 91 5a 4a b6 88 77 8d 86 d6 b4 db ae 97 0a Data Ascii: {JC}A u&!(JXnHVKz@TLBP`=xi\z{PSHjRbX+w&)STN\|/ImRbX:r +O}J;s[<@TLBPUS^)qW?_=1 *&!3NZP_r>ot5V>$A$ZJw
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 79 b9 a4 8f 51 00 6e 22 a8 98 84 a0 02 f8 5c eb a5 d5 e2 8d 20 45 79 b6 3a 73 ee 92 3e 46 01 b8 89 a0 62 12 82 0a e0 73 cd 97 bf 14 ef 05 29 ca b3 d5 7e fe 29 e9 63 14 80 9b 08 2a 26 21 a8 00 3e d7 78 f5 98 78 2f 48 51 9e ad d6 c2 7f 4a 1f a3 00 dc 44 50 31 09 41 05 40 28 eb 56 f1 76 90 a2 bc 59 ea 2a 29 7d 80 02 70 13 41 c5 24 04 15 00 ed e7 9f 16 6f 07 29 ca 83 a5 32 bc f4 d1 09 c0 65 04 15 93 10 54 00 34 97 6c 13 ef 08 29 ca 83 a5 32 bc f4 d1 09 c0 65 04 15 93 10 54 00 04 6a 2e 8a 77 84 14 e5 c1 6a 2e dd 25 7d 74 02 70 19 41 c5 24 04 15 00 0d ff 7d 9b ca 42 f1 a6 90 a2 3c 55 a1 cc 5b 02 f5 95 d2 87 26 00 97 11 54 4c 42 50 01 a0 34 95 fd 20 de 17 52 94 a7 aa ed d2 2a e9 e3 12 80 fb 08 2a 26 21 a8 00 08 0b 9d be 4d bc 35 a4 28 ef 54 b0 2a 5b fa a0 04 e0 Data Ascii: yQn"\ Ey:s>Fbs)~)c&!>xx/HQJDP1A@(VvY)}pA$o)2eT4l)2eTj.wj.%}tpA$}B<U[&TLBP4 R*&!M5(T[
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 00 00 00 9f 20 a8 98 84 a0 02 Data Ascii:
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 76 9d 5d d5 a1 71 f0 e0 c1 fc fc 7c d7 3f 2e 2e ea 82 75 ea d4 29 75 02 e9 3a eb 6e dd ba 55 0d 2c 81 97 8a aa 73 d1 9f 7f fe b9 63 c7 8e f0 32 aa 59 7d f1 c5 17 ea 2a 79 f9 f2 e5 64 8c bc 87 e2 e2 e2 03 07 0e a8 93 4c f8 5c ad 4e 83 ea f2 a1 4e 83 6a cd 8b 5c 3e d4 96 fd f6 db 6f d5 aa 58 bf 7e bd 1a 89 da b1 cb cb cb 53 3f 0c af 21 a8 98 84 a0 e2 9c f3 a0 a2 4e 6a 8f 59 52 97 96 1e 93 a8 b3 de aa 55 ab 26 4e 9c 18 eb 13 55 9f b4 70 e1 42 75 a2 b7 1d ff e1 c3 87 97 2e 5d 7a e3 8d 37 c6 9a d5 c0 81 03 1f 7f fc f1 bd 7b f7 c6 db 6e be f9 e6 9b d6 cb d5 23 7b a8 f3 fb a2 45 8b d4 c8 a3 0e 43 ad e7 19 33 66 a8 53 bf ba 12 c4 35 0c 1d aa 9d 55 5d f5 c3 0f 3f 3c 7c f8 70 8b ed 38 60 c0 80 7b ee b9 47 8d 41 ff 2e ff 48 b6 9b 5b 75 45 dd ff fd 91 23 47 e6 cd 9b Data Ascii: v]q\|?..u)u:nU,sc2Y}*ydL\NNj\>oX~S?!NjYRU&NUpBu.]z7{n#{EC3fS5U]?<\|p8`{GA.H[uE#G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49775	142.250.186.182	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	695	OUT	GET /vi_webp/3M2FsVe0muU/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:34 UTC	633	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2040 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 31 Dec 2024 22:43:34 GMT Expires: Wed, 01 Jan 2025 00:43:34 GMT Cache-Control: public, max-age=7200 Age: 2340 ETag: "1559863846" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-31 23:22:34 UTC	757	IN	Data Raw: 52 49 46 46 f0 07 00 00 57 45 42 50 56 50 38 20 e4 07 00 00 10 25 00 9d 01 2a 78 00 5a 00 3e 39 16 89 43 a2 21 21 13 a9 76 cc 20 03 84 b3 a2 3b 90 41 ae 3c 34 a3 74 3d bb ee 8f 4c 2f 36 fb 5d c0 4a 97 d3 6f 96 ef 80 4a ce 9d 38 0b 9a 8d 9a 7f d0 f1 ef a8 4f f6 2f f8 fd 09 7f f1 fa 01 fa a3 ff 0f b8 5f f2 df ed 9f f1 ba f8 fa 06 fe c3 9e 0f d6 3e 73 f1 02 a5 98 e9 75 18 14 5c cc 1a fa f7 38 57 6d 98 a2 fe ab 5d 24 e0 1e cc a3 b0 bd 15 94 e1 fc 6d 7c eb 88 d5 4a 27 48 b5 f1 67 46 c7 02 94 0b 87 9a 82 f2 15 dd 5a 1d 98 07 41 f5 46 57 4d de 8e d7 4d b8 7d 21 2f fb 78 ec c5 b3 f1 ca 0d b1 e5 b9 74 6e c3 48 86 42 e7 bb 05 9c 49 a9 0a 89 98 cf e8 91 21 2a 39 03 18 4b 02 a2 ca ae d1 35 03 b1 55 af 5c 73 2c 47 c2 03 3a 4a 1b e4 ad dc 75 0d 13 6d 0e 0c 05 b7 4d a1 Data Ascii: RIFFWEBPVP8 %xZ>9C!!v ;A<4t=L/6]JoJ8O/_>su\8Wm]$m\|J'HgFZAFWMM}!/xtnHBI!9K5U\s,G:JumM
2024-12-31 23:22:34 UTC	1283	IN	Data Raw: 09 ad 51 ab 96 88 76 07 4c aa 86 17 7e 88 6c de 37 22 b7 d1 13 4c d6 e6 f8 6d 61 01 35 33 bf 0b 39 1a 6a 0c b7 fe 42 47 3d 35 e6 32 d3 97 60 4c b1 4b a0 1c 0d e6 89 ee 86 f3 0f e8 be 54 08 38 1e 32 05 05 11 a9 e3 7a a4 63 20 b8 aa 1f 9d 68 d5 93 9e 6e d2 fd 9e 83 4e 62 e5 d0 dc 8e 1f 34 64 16 00 58 61 ce 90 8a e6 8e d6 a3 ad 38 47 5d a2 04 07 8a 87 90 cb 04 5b 68 bc d9 4f 56 cd cf 31 f3 9f 0e 20 d3 88 50 13 5c 9b 84 da 5b a6 cc 94 c0 6e bf 3b 61 bd f6 cb fb 4a ef 8e d6 a7 dc 65 1e 13 88 c0 59 48 3d 7a 52 26 ac 1f 40 bd c1 97 6d ba cc 54 81 b8 46 34 de a8 d9 6c 09 90 17 70 a2 02 89 41 7b f9 3b cc 26 91 41 87 99 17 09 71 00 55 c4 2e a3 5c d2 2a 51 1c 1a c8 9c 66 9e a4 aa 6a 70 58 78 f5 cc 6b 32 91 44 0d 53 56 6b 6e b9 6d 2a 6b f8 2e 2d 60 e7 79 e3 44 2b 66 Data Ascii: QvL~l7"Lma539jBG=52`LKT82zc hnNb4dXa8G][hOV1 P\[n;aJeYH=zR&@mTF4lpA{;&AqU.\QfjpXxk2DSVknmk.-`yD+f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49832	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	4167	OUT	GET /media/lhsdgn3y/image-mobile-app-intro.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=rLH+AHzvYaCjPC8rTzu+c/fC+9LaW7QzQa0GXLak2KN30GV2bywLCDfKZchx9PL9MoFsvA3c8ogx63dJeVbDRBygbqtUR0BJHtKaDlb4NwNkDrwZwFWoDPTyTDmtOU12n4jBFc+Qt5xWgSswgcQyM3FUx8bwZW6zL5pXU8+YBAwW4YXttj1pAzZVjZTD0dP5A7DLJz+TWzgNUXDx9xVDJkhkBe+ovGcUrLOZnWPkt/2gV2XzqpqEJA4cmUxdhrw7mmfr8+COodX/zwbl8Xk1K9rh0TpXc2QkixvN07CA4qqVqr8SHpIqaMjZ+t+sYckLEBupbHFyCpTzrZ8gZhZgdkEL3jxkco/soHMyC4cV05sGZuiUJe0zOsCe9VdBg+Z+ZyP7zqfY/fLsxZjYJgbt+18AZkLruEKbXMJON [TRUNCATED]
2024-12-31 23:22:34 UTC	426	IN	HTTP/1.1 200 OK Etag: "1dae861cec034b2" Last-Modified: Wed, 07 Aug 2024 00:36:14 GMT Content-Type: image/png Content-Length: 993202 Cache-Control: max-age=62273, public Expires: Wed, 01 Jan 2025 16:40:27 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Sun, 08 Dec 2024 06:15:17 GMT X-CDN: Imperva X-Iinfo: 16-194337529-0 0CNN RT(1735687353986 287) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:34 UTC	1026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 02 08 06 00 00 00 fa 7c ec 00 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec bd db ae 25 4b b2 25 b4 56 ae 95 59 17 a4 7e e6 13 10 97 be 20 1e 90 ba 81 6e 21 e0 23 78 e2 09 89 37 24 24 84 74 24 90 50 f7 0b 2f 08 f1 83 f5 09 9c da 3b 77 e6 ba 25 36 c6 b0 e1 3e dc c3 67 5e f6 a9 53 9c a2 6b ee bd 72 c6 8c f0 f0 70 37 37 37 b3 61 66 ee 71 ff 5f ff 27 ff e8 cb cb cb cb dd c3 c3 c3 dd bb 77 ef ee be 7c 79 e3 5f 7e ee ef ef ef ee eb c4 97 b7 2f 77 ef ea fb 5d fd c2 b9 77 5f ee ee 7e f3 e1 43 5d c0 39 9d 7f 7b 7b ab 7a be a0 c4 5d 15 62 39 7c fc bd d4 5b 3f 50 1e 45 1f 1e 1e ef 5e 5f 5f eb 19 6f 77 6f ef 74 0f 3e 5f be 54 Data Ascii: PNGIHDR\|sRGBsBIT\|d IDATx^%K%VY~ n!#x7$$t$P/;w%6>g^Skrp777afq_'w\|y_~/w]w_~C]9{{z]b9\|[?PE^__owot>_T
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 83 1e 79 47 1b 08 f6 10 78 02 cf 84 1c df 3f a5 66 5a 88 ce 2b 6a df d4 6b e6 b1 9c 07 7b 3f 73 ec f8 ac 6a 97 75 f3 2c 7b 30 02 aa 54 cd d4 8b 7d 80 92 8f ad bb 57 3a 4b b6 e4 9c c2 6c 2b 2a 48 17 e8 22 bf 5e df 34 e7 17 7a b7 2d 9a 74 c0 f5 17 da d7 ab 0c 60 55 5d 1f f4 08 3f 34 42 9b 36 f9 2c c8 15 b6 61 fd 83 7d 47 1d da b2 c2 76 38 4a e3 d8 e7 fd 6c cf d9 fc ed fe 5a 76 f1 1b 3d de 9e 05 c5 bf 9f d3 6f c9 91 ac 67 d8 45 2d 0b 2d 13 41 0b 1f fb 79 8f 55 af e5 9e af 5b 3f 58 87 92 34 55 d7 e3 a3 6c 71 7f d4 1f 0d 89 65 ce b0 63 df cd 72 2e 9f ba c1 fc bc eb 8c 21 5f d0 25 ea f7 96 25 90 39 68 7f 2b 61 cb 90 1c 7f 1c bb 5e eb 93 bd bf c6 2b af 65 ff e3 ef f9 f9 e5 ee f9 e9 a5 8e 3f df 3d 97 4c c6 1f f0 0b be 3f 7f fe c4 f9 c5 32 cf af b4 ab 9e ea fb f3 Data Ascii: yGx?fZ+jk{?sju,{0T}W:Kl+*H"^4z-t`U]?4B6,a}Gv8JlZv=ogE--AyU[?X4Ulqecr.!_%%9h+a^+e?=L?2
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 58 9f 2d d4 1a 48 60 22 41 08 3e 51 b0 35 40 e1 0c 84 21 e0 50 a2 9c b1 cc 7c d8 3a 93 63 ed 63 0b 94 5d a1 5b 78 de 02 e8 39 f1 ad 2c 46 9d 30 06 eb 3f 8c c9 9c 63 a2 b7 c1 51 62 db 13 4d d3 53 e9 c0 22 04 b5 01 e3 8f 46 d0 a7 a1 21 a2 b8 df fb 78 03 74 e1 73 32 96 a4 9c f0 27 ca 6e c9 27 5f 65 9d 4e ec 18 75 f3 19 d2 70 32 40 eb d7 63 1b 8c f7 15 d9 c8 36 a6 f1 e8 a8 b8 00 7a 01 f3 b2 fd 10 81 42 f4 dc 51 f4 bb 02 f8 5f 03 e8 04 e1 c5 71 04 eb 75 23 8d 68 44 c9 01 dc a1 e8 8b ce 1f de 63 96 c3 98 6f a0 5e e7 39 5d ec 59 0e 50 74 8f c8 1c 94 4e 47 55 6c 00 40 21 f0 49 d5 1d 19 fb d5 e6 7a 36 bd c8 a0 5f 47 91 11 d5 43 36 88 d0 04 2e 88 be b8 8f c0 80 8a 67 02 70 d1 c6 e0 da 7c d5 9e 63 4f 03 dc 83 67 77 94 5e a4 9e 9e 62 1c 33 83 a6 9e 91 80 dd e3 cf e7 Data Ascii: X-H`"A>Q5@!P\|:cc][x9,F0?cQbMS"F!xts2'n'_eNup2@c6zBQ_qu#hDco^9]YPtNGUl@!Iz6_GC6.gp\|cOgw^b3
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: b7 00 fa 17 3a 4e 9d 09 d5 ce 85 2f 33 d5 3e f9 6c b7 99 76 fe cc 79 74 60 46 2e 11 74 7d 2e cb 31 8d b9 e9 eb 58 4a f8 bd 00 1d 0e a8 7d 2e 0e 8b a9 fa b6 64 12 76 76 4d b6 6f cf 48 9c fd 5a db 9b bc b6 1f 7b 5e e6 98 83 e6 06 dd ab 8c 3a 00 f4 13 c1 ea 5c 66 16 ba 8e b7 b7 e9 10 3b d2 39 6c 86 77 c5 bb 39 d7 49 5f 48 0c fa 24 26 b8 64 fb bb e0 22 0f 5a 46 11 67 b4 88 81 a8 79 89 79 bd b7 e1 32 b7 03 a0 0f 40 f8 05 cb 6f e6 f2 97 1c 3f 94 d9 01 e3 49 5e 9d 52 dc df 45 36 85 eb 91 bd 3b d3 f7 2d 47 b0 c4 8b d7 a8 57 a1 ef d5 c1 19 49 d6 39 02 ed e6 9b d5 06 5c e9 37 fa 56 d9 a1 96 4f d3 01 01 f9 a1 c0 80 b3 72 87 ec de 09 58 04 46 db ac 53 5c 3e e7 5b de 92 3a c1 fc 47 a7 d3 2d 9e 6a dd c9 7e 6d 4b b1 ec 40 70 86 14 83 02 1b 40 37 38 9f df 95 f6 4e 80 0e Data Ascii: :N/3>lvyt`F.t}.1XJ}.dvvMoHZ{^:\f;9lw9I_H$&d"ZFgyy2@o?I^RE6;-GWI9\7VOrXFS\>[:G-j~mK@p@78N
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 36 fa 25 56 9c 9e 6b b6 07 fd ac 6f a5 c1 59 c0 89 6e bb 61 28 7a 01 cc b6 d0 eb 01 b1 b7 11 14 a6 c2 60 db 6b 12 f7 b1 66 1f 47 83 ff 93 9e 8d 88 ad 0f 77 cf df 6e 8c 24 03 9b f6 9e ac 36 28 76 9e db 85 13 ae a7 81 07 65 45 52 da 61 d1 b4 d6 38 77 aa 52 7b 66 e7 d8 cf f4 63 dc 9a 00 1d 5b 8b e9 19 1e 4b 03 f4 e6 bc 81 d4 09 8d 58 d6 9e f2 56 a7 3d 42 1a 38 a5 60 cd 28 7d ea 56 f1 c0 04 e8 53 d1 88 0a 79 fd b4 b9 c6 4e 2b ff 86 b3 62 08 44 03 34 ce 27 3d cf 73 0a bf 00 9e c7 c3 6c ec b9 22 02 f4 2a c3 e8 38 c6 1d 9e 61 a4 36 57 ea 28 d6 99 c3 2e 6e 70 8e 32 73 0d 7a cd d7 32 1e 3f d4 9a 73 44 da bd 51 1c e6 b5 52 dc 55 ef 63 03 7e ae 73 e7 f4 68 7a f6 e6 71 1e eb d1 9c 2a e4 bd 12 bc e9 a4 e6 9c e7 14 11 9c ba 53 7f 50 50 f8 38 6d 9d e0 da ba 84 51 f3 e6 Data Ascii: 6%VkoYna(z`kfGwn$6(veERa8wR{fc[KXV=B8`(}VSyN+bD4'=sl"8a6W(.np2sz2?sDQRUc~shzqSPP8mQ
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 0f f0 ad f6 ae 51 57 83 25 44 af 73 0e 8a 1f d4 07 ec b5 c1 96 f7 c4 19 00 ac 78 0d d9 42 f9 49 19 9b ed d9 cf 9b d6 9e 2b a8 da eb 80 73 ee be 1e 36 be 3a c9 71 d6 17 0d 19 73 15 e7 28 5f 63 d2 93 07 d7 73 28 ef 74 5f 81 75 94 97 53 03 1f a7 88 a3 4c be b9 63 97 fb 19 c5 4e 5e d9 9f ef df d6 25 ab c1 7c 06 4a 8e c8 8f 88 14 d7 c0 e8 23 79 2c e3 77 c8 d0 d4 b1 45 c7 bd ad ca fe 9f 4e 66 cb bd 2f 41 f3 01 a6 c9 01 e2 07 da 14 c5 57 5e 23 2e 50 2e 80 ee 5d dc cd 23 f9 cc 3d 1a 2e bb 45 f3 8b c7 bd 93 bb 78 56 cf 18 72 34 76 79 4f 80 af de af 60 cf f7 bb 3f eb 9a d2 76 9c c5 dc a0 52 ee 79 c2 37 3d 70 99 07 c0 c0 9c a3 83 e7 6f 00 4b f3 73 ea 8d dd 7e f0 58 9d 74 cb 65 6c 7a 4c 73 9e b8 0c e8 65 5e 75 1f ed 30 92 31 3f 75 ac e2 05 eb 18 e7 7c 4d be b3 f3 dc Data Ascii: QW%DsxBI+s6:qs(_cs(t_uSLcN^%\|J#y,wENf/AW^#.P.]#=.ExVr4vyO`?vRy7=poKs~XtelzLse^u01?u\|M
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 5b ed 1d 80 d7 ad 01 b0 eb b5 6a 88 a6 47 44 bd ee e1 f5 ba 1f 00 9d 11 f4 e2 5f 02 79 fa d5 a6 d3 f8 2f 15 a0 df 02 cc 63 2f d6 1f 11 18 df 51 f6 1f 2c 40 ff 57 ff f1 7c cd 9a 18 48 82 89 de 68 1a 95 13 61 10 a0 d7 e0 23 12 42 46 34 48 aa 39 ee f4 76 0b b0 9d 26 29 08 f2 1a ca a7 37 6c 57 48 8b 20 6b 20 be 4f 60 df b3 1b 08 30 ba 15 75 97 c1 05 66 ce 09 36 cb 1b 5c cd 08 3a 52 a7 2e cf e9 86 ef 4a fc 34 b8 8c a8 f5 9a 69 78 b6 84 b5 60 58 a7 81 23 03 c0 1f f5 43 06 01 be f1 2a 16 ef e4 ee 0d 47 6e 01 f4 bb f2 0e d3 83 d6 80 84 51 ba 02 69 5c 93 46 34 dc 26 62 0b 77 1b 82 27 85 63 1a 5d 14 fa 57 18 3d 15 84 eb 4c e5 ef 08 3a 53 f6 49 0c 80 15 a7 6c b6 40 ad 3e d8 09 30 05 e4 8c b0 27 f8 fe 1a 40 27 ff 36 90 57 c7 d5 7f 47 d0 f9 4a 71 69 65 3e 26 a3 fb 3c Data Ascii: [jGD_y/c/Q,@W\|Hha#BF4H9v&)7lWH k O`0uf6\:R.J4ix`X#C*GnQi\F4&bw'c]W=L:SIl@>0'@'6WGJqie>&<
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 01 dd 72 8f 6c c4 77 d8 1d be e7 cb 52 27 9e c7 75 ef 01 c0 59 67 bf 8e b3 d3 90 49 70 d4 83 72 48 97 67 a5 b3 3f 6a 77 46 e0 9b d6 01 50 5c c6 fd 9c 3a ac 75 52 67 05 61 fc a5 77 66 14 33 f5 dd 75 a6 81 b7 12 40 f2 09 35 ce e2 e1 9d cf 4f 00 7d 1a 9d 8a ea 8a 6f 04 8c 41 73 eb bc 4c 63 77 3b 76 c3 d8 6d 4d b9 b8 cb e9 93 71 b1 af 5f 4f 43 18 cf 4a bd 36 79 4d ad c0 9a 4e 18 be 80 d2 52 f3 2d b5 39 6f fa b5 72 aa 84 e5 e9 2c 73 c6 50 d4 ed 8d 1a 2c 07 d9 97 76 2e a5 1e 99 76 01 78 42 b2 28 37 f6 f4 f5 e1 d4 69 3e 35 6d a4 0f e6 be 0c 2b 80 3f a7 b8 0f fe 6b 50 ef 31 ba da 28 d3 6e 99 73 4a fc 94 7c 84 3e 62 43 47 f0 31 41 8d 0a 33 c8 21 67 9a e4 a1 37 2f cb 4d cc 12 1c f8 19 f9 7d e2 d1 5b d7 97 71 ed 1b 7d ee f2 9c 1e 2b cf 11 ef 8f c0 31 65 1a 53 2f 67 Data Ascii: rlwR'uYgIprHg?jwFP\:uRgawf3u@5O}oAsLcw;vmMq_OCJ6yMNR-9or,sP,v.vxB(7i>5m+?kP1(nsJ\|>bCG1A3!g7/M}[q}+1eS/g
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: b8 57 5d dc 28 0e a0 bb 40 38 22 e5 28 f7 fc fc 79 6c 06 e7 28 ba 00 7a d9 3c d8 18 ae 01 fa 4b dd ff 4b 01 75 80 79 00 74 9a 2e b0 1e ff 7f b0 06 fd 96 0c f8 b7 16 a0 e7 24 4a 81 37 41 96 14 95 99 9f 46 14 85 44 1b 5f 9e 84 54 ec de c9 75 ce f7 5b 02 c9 53 17 d3 8a 1b 4a d4 fd 1f 2a 0a 93 6b f0 3c d1 5f 9c 7e 4f 6f 91 14 ef 5d 6d 72 70 99 64 00 74 ed 5d e3 bd 6d 78 bc 2f c3 4b 3b 27 6a 0d ab 64 4d 87 c9 28 08 dd 9a 9a 92 db 3b 19 c9 30 21 68 ce 4a 06 65 00 24 65 dc 9c 68 6a 8a 9c 84 67 1a ed 16 22 4a 93 9c e2 b8 12 5d d4 5f 44 fe 68 40 d9 96 32 d8 9d ca cf 3b 55 a7 11 e7 e3 dd e0 30 0d b3 0d bb e0 f5 bd 06 4e bb 81 72 91 ee a0 6f 93 d4 a4 c5 77 7a 28 7d 0f ea 7a 62 28 d3 69 fe ba d1 3b 10 13 58 2b d4 29 7d 18 79 e0 73 58 04 0e 65 84 4b b0 72 2c da 18 f7 Data Ascii: W](@8"(yl(z<KKuyt.$J7AFD_Tu[SJ*k<_~Oo]mrpdt]mx/K;'jdM(;0!hJe$ehjg"J]_Dh@2;U0Nrowz(}zb(i;X+)}ysXeKr,
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: ea c2 d0 d2 ee 6b 89 3e de 38 40 7d 2f 27 1b 36 88 e3 2b cf 68 f4 51 2c 30 e2 8d 1b e9 24 96 9e 54 3b 42 77 e7 a6 72 09 ce 51 86 ef 34 ef 67 d2 00 e0 b8 0a e4 27 40 d7 7d d3 e1 05 2b f5 08 d0 c9 18 73 0c ed ac da e7 0e 4a 30 d2 ed 68 7c b3 05 e5 26 77 41 47 5b 64 1c 09 72 88 ae fb e7 b5 68 b3 cb d2 e4 c3 e4 31 1b 09 2b c8 d0 78 b2 3d 11 31 a4 b3 aa 3f 13 d0 88 e6 da e0 4d 91 77 d5 25 d5 9e 91 44 9c b7 c3 d6 75 f3 de 06 e8 6e 17 41 7d 45 ae 12 dc ab 3c ee 57 1a bb 69 a7 fa f4 cc 6c 6b f6 77 31 c0 bb 3f 0b b0 83 74 6f 30 71 01 7c 4d 03 8e 5e 00 b4 04 3e 38 e6 4b 6b c2 38 e6 31 c7 3d 1c 67 4d bb a4 b9 65 1a b2 71 fc ee 5c 14 33 28 c7 eb 74 f8 6c d0 16 ba 07 f2 ac fb 8f 65 5d 36 a8 dd 1e 4b 09 3b 6e 4c 27 f1 ad 65 8e 1a a2 76 cc e3 f9 6a 35 5c 93 fc c2 b2 95 Data Ascii: k>8@}/'6+hQ,0$T;BwrQ4g'@}+sJ0h\|&wAG[drh1+x=1?Mw%DunA}E<Wilkw1?to0q\|M^>8Kk81=gMeq\3(tle]6K;nL'evj5\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49834	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	3939	OUT	GET /media/4plinse4/241_santiagocreekbridge_cropped.jpg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=rLH+AHzvYaCjPC8rTzu+c/fC+9LaW7QzQa0GXLak2KN30GV2bywLCDfKZchx9PL9MoFsvA3c8ogx63dJeVbDRBygbqtUR0BJHtKaDlb4NwNkDrwZwFWoDPTyTDmtOU12n4jBFc+Qt5xWgSswgcQyM3FUx8bwZW6zL5pXU8+YBAwW4YXttj1pAzZVjZTD0dP5A7DLJz+TWzgNUXDx9xVDJkhkBe+ovGcUrLOZnWPkt/2gV2XzqpqEJA4cmUxdhrw7mmfr8+COodX/zwbl8Xk1K9rh0TpXc2QkixvN07CA4qqVqr8SHpIqaMjZ+t+sYckLEBupbHFyCpTzrZ8gZhZgdkEL3jxkco/soHMyC4cV05sGZuiUJe0zOsCe9VdBg+Z+ZyP7zqfY/fLsxZjYJgbt+18AZkLruEKbXMJON [TRUNCATED]
2024-12-31 23:22:34 UTC	428	IN	HTTP/1.1 200 OK Etag: "1db0ec93f7b0737" Last-Modified: Tue, 24 Sep 2024 21:32:25 GMT Content-Type: image/jpeg Content-Length: 3931575 Cache-Control: max-age=82202, public Expires: Wed, 01 Jan 2025 22:12:36 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Sun, 08 Dec 2024 06:15:17 GMT X-CDN: Imperva X-Iinfo: 14-107583327-0 0CNN RT(1735687354043 322) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:34 UTC	1024	IN	Data Raw: ff d8 ff e1 12 fb 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 11 00 00 01 03 00 01 00 00 00 a0 10 00 00 01 01 03 00 01 00 00 00 10 0b 00 00 02 01 03 00 03 00 00 00 da 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 0c 00 00 00 e0 00 00 00 0f 01 02 00 12 00 00 00 ec 00 00 00 10 01 02 00 09 00 00 00 fe 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 07 01 00 00 1b 01 05 00 01 00 00 00 0f 01 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 22 00 00 00 17 01 00 00 32 01 02 00 14 00 00 00 39 01 00 00 3b 01 02 00 10 00 00 00 4d 01 00 00 98 82 02 00 27 00 00 00 5d 01 00 00 69 87 04 00 01 00 00 00 84 01 00 00 f4 03 00 00 08 00 08 00 08 00 48 69 67 68 77 61 79 20 32 34 31 00 4e 49 4b 4f 4e 20 43 Data Ascii: ExifII*(1"29;M']iHighway 241NIKON C
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 42 04 00 00 1b 01 05 00 01 00 00 00 4a 04 00 00 28 01 03 00 01 00 00 00 02 00 00 00 01 02 04 00 01 00 00 00 52 04 00 00 02 02 04 00 01 00 00 00 a1 0e 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: BJ(RHHAdobe_CMAdobed
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 3d cc 68 7d 66 36 58 e7 b5 bb 8e d2 e7 35 9b cf b3 76 ef 66 f6 3f f4 95 ab 03 ec d6 31 a2 e6 6f dd 00 b1 8d db a1 d5 e5 a6 7f 7b db fb ea b9 ab ac e1 be aa 6c a4 5f 57 e6 d9 07 92 61 af b1 c4 b7 67 f6 df f4 11 7f 65 75 13 6d 76 63 d1 6b 47 3f a5 63 b8 3f 49 ae 6b ab 7d 5f 4b f7 53 24 06 fc 43 fb d1 3d 92 3c 8f d5 1b fa 63 18 d1 67 4e bd cd 71 f6 ba b7 e9 a8 fc dd f2 df 73 7f 92 a3 93 67 51 f4 45 77 38 b1 cc 86 fa 72 03 dc 06 ad d8 ef dd 67 fd 69 68 d7 d1 7a 99 6b 83 58 29 3b 77 34 0d d2 24 fe 8c 37 d8 df dd fc fb 51 99 d2 ba 83 ac a8 93 5d b7 30 8b 1a d7 0d a6 b1 f4 65 bb f6 bd cd fd ff 00 7a 67 ba 74 d4 4a 8d d9 16 55 c1 da c5 fd 8e 73 31 31 69 63 c3 c3 9e 20 0f 54 d8 49 dc 3d be d7 31 f5 57 b1 db 95 b6 8e 1b 5b ac da c2 1b b6 1a f6 bb be ff 00 77 bd bf Data Ascii: =h}f6X5vf?1o{l_WageumvckG?c?Ik}_KS$C=<cgNqsgQEw8rgihzkX);w4$7Q]0ezgtJUs11ic TI=1W[w
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 97 fd 14 88 19 69 43 fc 58 ba 96 fd 6e 2e 30 dc 2c 53 a4 0d cc 7d 87 4f 93 15 0b 7a cb ec bc 64 b3 17 1e ab db a8 b2 ba 5a d7 0d 36 7e 73 dd f9 bf c8 4f d5 fa 5d 7d 3f 0e bb a8 b9 d6 58 fb 03 0e f0 03 76 96 bd fe d6 37 f3 b7 37 f7 d6 46 55 39 bf 63 66 55 25 ed a5 a4 b3 22 c6 68 03 8c 7a 5e a6 df a1 bb f7 be 82 6e 3c 90 9c 78 a2 00 17 57 5f f7 c9 90 9c 4d 12 6f cf fe f5 d3 b3 ab f5 4b 06 e3 6b 9a 07 81 0d 1f f8 1b 18 b3 32 3a a6 63 af 15 ba e7 39 83 5b 09 2e 76 9e 0d de f7 35 66 ba a7 13 2f 7b 9e 7f 94 49 ff 00 aa 49 f2 d6 c9 93 e4 ac 47 cf f6 31 48 27 c3 ea b9 98 d6 3a c6 3c b9 d6 02 2c 6c ed 6b 81 fc df 61 6a d3 af aa 55 90 c7 31 bb b0 cb 19 b9 d5 8b 34 20 7d 2f 4b f9 bd bf da f5 2c 5c f1 dd df c3 4e f0 9d b0 40 98 70 ed bb 91 f0 43 26 18 cf 5d a5 fb ca Data Ascii: iCXn.0,S}OzdZ6~sO]}?Xv77FU9cfU%"hz^n<xW_MoKk2:c9[.v5f/{IIG1H':<,lkajU14 }/K,\N@pC&]
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 72 6f 6f 66 43 4d 59 4b 00 38 42 49 4d 04 3b 00 00 00 00 02 2d 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 17 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 00 00 00 52 67 73 4d 62 6f 6f 6c 00 00 00 00 00 43 72 6e 43 62 6f 6f 6c 00 00 00 00 00 43 6e 74 43 62 6f 6f 6c 00 00 00 00 00 4c 62 6c 73 62 6f 6f 6c 00 00 00 00 00 4e 67 74 76 62 6f 6f 6c 00 00 00 00 00 45 6d 6c 44 62 6f 6f 6c 00 00 00 00 00 49 6e 74 72 62 6f 6f 6c 00 00 00 00 00 42 63 6b 67 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 6c 20 20 64 6f 75 Data Ascii: roofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@oBl dou
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 05 88 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 10 a0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d Data Ascii: umESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenum
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 00 dd 43 85 86 7c 8e 13 fa 3c 3e 31 3f f7 2e 93 43 5c dd cc 21 ed f1 69 04 27 15 93 c0 95 97 53 c0 73 ac aa c3 4b dc 3f 9c ac b7 5f 95 83 e8 ff 00 c1 bf 7a 4f 19 f6 30 87 59 eb d8 de 77 17 d6 c3 f1 ab 72 b7 fe 95 1c 3a e3 3c 5d b8 bd 3f e3 35 8f c3 8d fa 66 0c 7c bd 5f e2 ba 36 59 45 50 2d b1 ac 27 40 09 d7 fc d6 fb 94 99 b2 d6 ee a9 c1 e0 73 b7 58 f8 fe ea c0 ce 7d d8 f4 32 c7 d0 34 8f 5f d3 04 e9 fc 8f 53 da df fb fa 6c 6b 77 df 47 a4 f7 1b 2f dc 58 e6 13 24 4f e6 fe 7b f7 37 f3 9c 84 3e 27 90 fa 8e 31 c1 ae c7 d5 e9 fe b7 fe 82 93 c8 47 e5 12 3c 5e 23 fe e5 e8 0b 0a 6d aa a3 73 dd 4b cd 36 d9 ea 39 9c ee 1b b8 2e 1e e7 b3 67 ee fb 1d fe 11 15 bd 57 01 cf 15 be c6 d6 e7 7d 19 32 0f e0 d5 67 17 3f 86 7a 59 89 ed 21 ff 00 75 f2 30 64 e4 b2 42 f4 12 af dd Data Ascii: C\|<>1?.C\!i'SsK?_zO0Ywr:<]?5f\|_6YEP-'@sX}24_SlkwG/X$O{7>'1G<^#msK69.gW}2g?zY!u0dB
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 99 f9 bc b9 34 d7 82 5a 18 c2 eb ca 5f bc bf 07 29 87 1e bb c8 75 9b ff d1 cb 6e 0d d7 1f 6e 61 b2 7b 57 45 96 7f df 93 5d d1 b3 28 c5 b2 d3 6e 53 8f d1 a8 3b 14 b1 9b 9d fc a7 ef 73 b6 ff 00 39 fd 85 b9 67 d7 5e a3 1e cc 50 c1 e3 63 88 ff 00 aa b5 aa 9d 9f 5c fa b9 fa 36 d1 49 8f cd 20 bb ef 68 b1 47 73 f0 8f f7 a4 91 c1 76 7d 63 b0 8d 7f dd 39 df 56 b1 f2 b7 df 4b 3d 57 de f9 2f a9 e6 b6 34 b4 6c 77 a8 ef b5 86 ec b3 de cf e6 ac f7 b1 74 a3 a3 f5 ab 61 c3 12 90 39 83 6b 48 f2 d2 bd ed f6 ac 4b 7e b5 75 7b 44 3f 39 d1 e0 c6 3b fb ab 54 ec ea f9 96 e8 fc 8c 87 fc da d1 ff 00 54 f4 c9 46 32 3c 52 e0 be fe a9 ff 00 dd 2e 12 23 48 f1 57 48 ec f4 ff 00 b0 3a a8 82 ff 00 b3 57 b4 40 2e 7b 8f e5 6b 12 1d 35 ec 3b ad ce c3 a9 da 12 e0 c6 b8 e9 fc b7 5c d7 2e 48 Data Ascii: 4Z_)unna{WE](nS;s9g^Pc\6I hGsv}c9VK=W/4lwta9kHK~u{D?9;TTF2<R.#HWH:W@.{k5;\.H
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 34 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 08 01 01 00 03 01 00 ff e1 bd 63 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 61 36 61 36 33 39 36 38 61 2c 20 32 30 32 34 2f 30 33 2f 30 36 Data Ascii: hopAdobe Photoshop 20248BIMchttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.a6a63968a, 2024/03/06
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 37 33 34 34 33 31 33 2d 32 63 38 61 2d 34 32 31 39 2d 61 63 37 39 2d 37 61 38 65 39 31 32 30 37 30 37 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 64 34 34 61 36 61 63 2d 33 33 63 63 2d 36 62 34 36 2d 62 30 65 66 2d 36 31 34 35 34 63 34 63 38 33 39 30 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 75 75 69 64 3a 43 31 37 36 44 43 36 37 36 41 31 33 44 45 31 31 38 31 42 44 44 43 30 34 39 34 41 43 45 35 37 46 22 20 65 78 69 66 45 58 3a 50 68 6f 74 6f 67 72 61 70 68 69 63 53 65 6e 73 69 74 69 76 69 74 79 3d 22 32 30 30 22 20 65 78 69 66 45 58 3a 4c 65 6e Data Ascii: xmpMM:InstanceID="xmp.iid:97344313-2c8a-4219-ac79-7a8e91207072" xmpMM:DocumentID="adobe:docid:photoshop:cd44a6ac-33cc-6b46-b0ef-61454c4c8390" xmpMM:OriginalDocumentID="uuid:C176DC676A13DE1181BDDC0494ACE57F" exifEX:PhotographicSensitivity="200" exifEX:Len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49835	172.217.16.194	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	697	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-31 23:22:34 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 31 Dec 2024 23:22:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49836	172.217.18.6	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	675	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-31 23:22:34 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 31 Dec 2024 23:12:14 GMT Expires: Tue, 31 Dec 2024 23:27:14 GMT Cache-Control: public, max-age=900 Age: 620 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-31 23:22:34 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49838	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	4211	OUT	GET /site-media/icons/icon_arrow-left-disabled.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/css/components/capital-programs-list.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=rLH+AHzvYaCjPC8rTzu+c/fC+9LaW7QzQa0GXLak2KN30GV2bywLCDfKZchx9PL9MoFsvA3c8ogx63dJeVbDRBygbqtUR0BJHtKaDlb4NwNkDrwZwFWoDPTyTDmtOU12n4jBFc+Qt5xWgSswgcQyM3FUx8bwZW6zL5pXU8+YBAwW4YXttj1pAzZVjZTD0dP5A7DLJz+TWzgNUXDx9xVDJkhkBe+ovGcUrLOZnWPkt/2gV2XzqpqEJA4cmUxdhrw7mmfr8+COodX/zwbl8Xk1K9rh0TpXc2QkixvN07CA4qqVqr8SHpIqaMjZ+t+sYckLEBupbHFyCpTzrZ8gZhZgdkEL3jxkco/soHMyC4cV05sGZuiUJe0zOsCe9VdBg+Z+ZyP7zqfY/fLsxZjYJgbt+18AZkLruEKbXMJON [TRUNCATED]
2024-12-31 23:22:34 UTC	426	IN	HTTP/1.1 200 OK Etag: "1db522f70626863" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 611 Cache-Control: max-age=7525, public Expires: Wed, 01 Jan 2025 01:27:59 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Sun, 08 Dec 2024 06:15:17 GMT X-CDN: Imperva X-Iinfo: 16-194337558-0 0CNN RT(1735687354347 329) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:34 UTC	611	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 37 2e 30 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 38 38 38 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 31 38 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#888;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#fff;}</style></defs><circle id="Ellipse_181" class="cls-1" cx=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49840	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	968	OUT	GET /media/vbxdaes3/241_cp_1200x600.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:34 UTC	344	IN	HTTP/1.1 200 OK Etag: "1db143c234f79c9" Last-Modified: Tue, 01 Oct 2024 19:57:26 GMT Content-Type: image/png Content-Length: 634569 Cache-Control: max-age=82209, public Expires: Wed, 01 Jan 2025 22:12:43 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT X-CDN: Imperva X-Iinfo: 17-227071737-0 0CNN RT(1735687354407 322) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:34 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ee 00 00 01 77 08 02 00 00 00 75 fe 59 8b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRwuYgAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: a7 18 b7 19 2f 99 4c a6 05 d3 97 99 c8 54 30 d7 32 1b 99 67 98 0f 98 6f 55 58 2a f6 2a 7c 15 91 ca 12 95 3a 95 56 95 7e 95 e7 aa 54 55 73 55 3f d5 79 aa 0b 54 ab 55 0f ab 5e 56 7d a6 46 55 b3 50 e3 a9 09 d4 16 ab d5 a9 1d 55 bb a9 36 ae ce 52 77 52 8f 50 cf 51 5f a3 be 5f fd 82 fa 63 0d b2 86 85 46 a0 86 48 a3 54 63 b7 c6 19 8d 21 16 c6 32 65 f1 58 42 d6 72 56 03 eb 2c 6b 98 4d 62 5b b2 f9 ec 4c 76 05 fb 1b 76 2f 7b 4c 53 43 73 aa 66 ac 66 91 66 9d e6 71 cd 01 0e c6 b1 e0 f0 39 d9 9c 4a ce 21 ce 0d ce 7b 2d 03 2d 3f 2d b1 d6 6a ad 66 ad 7e ad 37 da 7a da be da 62 ed 72 ed 16 ed eb da ef 75 70 9d 40 9d 2c 9d f5 3a 6d 3a f7 75 09 ba 36 ba 51 ba 85 ba db 75 cf ea 3e d3 63 eb 79 e9 09 f5 ca f5 0e e9 dd d1 47 f5 6d f4 a3 f5 17 ea ef d6 ef d1 1f 37 30 34 08 36 Data Ascii: /LT02goUX**\|:V~TUsU?yTU^V}FUPU6RwRPQ__cFHTc!2eXBrV,kMb[Lvv/{LSCsfffq9J!{--?-jf~7zbrup@,:m:u6Qu>cyGm7046
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 6d e0 f8 60 c0 60 cf c3 59 0f ef 0e 09 87 9e fe 94 ff d3 87 e1 d2 47 cc 47 d5 23 46 23 8d 8f 9d 1f 1f 1b 0d 1a bd f2 64 ce 93 e1 a7 b2 a7 13 cf ca 7e 56 ff 79 eb 73 ab e7 df fd e2 fb 4b cf 58 fc d8 f0 0b f9 8b cf bf ae 79 a9 f3 72 ef ab a9 af 3a c7 23 c7 1f bc ce 79 3d f1 a6 fc ad ce db 7d ef b8 ef ba df c7 bd 1f 99 28 fc 40 fe 50 f3 d1 fa 63 c7 a7 d0 4f f7 3e e7 7c fe fc 2f f7 84 f3 fb 2d 47 38 cf 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 27 5c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 Data Ascii: m``YGG#F#d~VysKXyr:#y=}(@PcO>\|/-G8 cHRMz&u0`:pQ<pHYsgR'\iTXtXML:com.adobe.xmp<?xpacket begin="" id="
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 20 64 72 6f 6e 65 2d 64 6a 69 3a 46 6c 69 67 68 74 59 61 77 44 65 67 72 65 65 3d 22 2b 31 34 2e 31 30 22 20 64 72 6f 6e 65 2d 64 6a 69 3a 46 6c 69 67 68 74 50 69 74 63 68 44 65 67 72 65 65 3d 22 2b 34 2e 31 30 22 20 64 72 6f 6e 65 2d 64 6a 69 3a 43 61 6c 69 62 72 61 74 65 64 46 6f 63 61 6c 4c 65 6e 67 74 68 3d 22 33 30 35 31 2e 36 31 33 30 33 37 22 20 64 72 6f 6e 65 2d 64 6a 69 3a 43 61 6c 69 62 72 61 74 65 64 4f 70 74 69 63 61 6c 43 65 6e 74 65 72 58 3d 22 32 30 30 30 2e 30 30 30 30 30 30 22 20 64 72 6f 6e 65 2d 64 6a 69 3a 43 61 6c 69 62 72 61 74 65 64 4f 70 74 69 63 61 6c 43 65 6e 74 65 72 59 3d 22 31 31 32 35 2e 30 30 30 30 30 30 22 20 61 75 78 3a 41 70 70 72 6f 78 69 6d 61 74 65 46 6f 63 75 73 44 69 73 74 61 6e 63 65 3d 22 30 2f 31 30 30 22 20 70 68 Data Ascii: drone-dji:FlightYawDegree="+14.10" drone-dji:FlightPitchDegree="+4.10" drone-dji:userbratedFocalLength="3051.613037" drone-dji:userbratedOpticalCenterX="2000.000000" drone-dji:userbratedOpticalCenterY="1125.000000" aux:ApproximateFocusDistance="0/100" ph
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 6a 75 73 74 6d 65 6e 74 41 71 75 61 3d 22 30 22 20 63 72 73 3a 48 75 65 41 64 6a 75 73 74 6d 65 6e 74 42 6c 75 65 3d 22 30 22 20 63 72 73 3a 48 75 65 41 64 6a 75 73 74 6d 65 6e 74 50 75 72 70 6c 65 3d 22 30 22 20 63 72 73 3a 48 75 65 41 64 6a 75 73 74 6d 65 6e 74 4d 61 67 65 6e 74 61 3d 22 30 22 20 63 72 73 3a 53 61 74 75 72 61 74 69 6f 6e 41 64 6a 75 73 74 6d 65 6e 74 52 65 64 3d 22 30 22 20 63 72 73 3a 53 61 74 75 72 61 74 69 6f 6e 41 64 6a 75 73 74 6d 65 6e 74 4f 72 61 6e 67 65 3d 22 30 22 20 63 72 73 3a 53 61 74 75 72 61 74 69 6f 6e 41 64 6a 75 73 74 6d 65 6e 74 59 65 6c 6c 6f 77 3d 22 30 22 20 63 72 73 3a 53 61 74 75 72 61 74 69 6f 6e 41 64 6a 75 73 74 6d 65 6e 74 47 72 65 65 6e 3d 22 30 22 20 63 72 73 3a 53 61 74 75 72 61 74 69 6f 6e 41 64 6a 75 73 Data Ascii: justmentAqua="0" crs:HueAdjustmentBlue="0" crs:HueAdjustmentPurple="0" crs:HueAdjustmentMagenta="0" crs:SaturationAdjustmentRed="0" crs:SaturationAdjustmentOrange="0" crs:SaturationAdjustmentYellow="0" crs:SaturationAdjustmentGreen="0" crs:SaturationAdjus
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 3a 50 65 72 73 70 65 63 74 69 76 65 41 73 70 65 63 74 3d 22 30 22 20 63 72 73 3a 50 65 72 73 70 65 63 74 69 76 65 53 63 61 6c 65 3d 22 31 30 30 22 20 63 72 73 3a 50 65 72 73 70 65 63 74 69 76 65 58 3d 22 30 2e 30 30 22 20 63 72 73 3a 50 65 72 73 70 65 63 74 69 76 65 59 3d 22 30 2e 30 30 22 20 63 72 73 3a 47 72 61 69 6e 41 6d 6f 75 6e 74 3d 22 30 22 20 63 72 73 3a 50 6f 73 74 43 72 6f 70 56 69 67 6e 65 74 74 65 41 6d 6f 75 6e 74 3d 22 30 22 20 63 72 73 3a 53 68 61 64 6f 77 54 69 6e 74 3d 22 30 22 20 63 72 73 3a 52 65 64 48 75 65 3d 22 30 22 20 63 72 73 3a 52 65 64 53 61 74 75 72 61 74 69 6f 6e 3d 22 30 22 20 63 72 73 3a 47 72 65 65 6e 48 75 65 3d 22 30 22 20 63 72 73 3a 47 72 65 65 6e 53 61 74 75 72 61 74 69 6f 6e 3d 22 30 22 20 63 72 73 3a 42 6c 75 65 48 Data Ascii: :PerspectiveAspect="0" crs:PerspectiveScale="100" crs:PerspectiveX="0.00" crs:PerspectiveY="0.00" crs:GrainAmount="0" crs:PostCropVignetteAmount="0" crs:ShadowTint="0" crs:RedHue="0" crs:RedSaturation="0" crs:GreenHue="0" crs:GreenSaturation="0" crs:BlueH
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 66 3a 46 6f 63 61 6c 4c 65 6e 67 74 68 49 6e 33 35 6d 6d 46 69 6c 6d 3d 22 32 36 22 20 65 78 69 66 3a 53 63 65 6e 65 43 61 70 74 75 72 65 54 79 70 65 3d 22 30 22 20 65 78 69 66 3a 47 61 69 6e 43 6f 6e 74 72 6f 6c 3d 22 30 22 20 65 78 69 66 3a 43 6f 6e 74 72 61 73 74 3d 22 30 22 20 65 78 69 66 3a 53 61 74 75 72 61 74 69 6f 6e 3d 22 30 22 20 65 78 69 66 3a 53 68 61 72 70 6e 65 73 73 3d 22 30 22 20 65 78 69 66 3a 53 75 62 6a 65 63 74 44 69 73 74 61 6e 63 65 52 61 6e 67 65 3d 22 30 22 20 65 78 69 66 3a 47 50 53 56 65 72 73 69 6f 6e 49 44 3d 22 32 2e 32 2e 30 2e 30 22 20 65 78 69 66 3a 47 50 53 4c 61 74 69 74 75 64 65 3d 22 33 33 2c 35 31 2e 36 33 33 38 4e 22 20 65 78 69 66 3a 47 50 53 4c 6f 6e 67 69 74 75 64 65 3d 22 31 31 37 2c 34 32 2e 39 39 33 39 57 22 20 Data Ascii: f:FocalLengthIn35mmFilm="26" exif:SceneCaptureType="0" exif:GainControl="0" exif:Contrast="0" exif:Saturation="0" exif:Sharpness="0" exif:SubjectDistanceRange="0" exif:GPSVersionID="2.2.0.0" exif:GPSLatitude="33,51.6338N" exif:GPSLongitude="117,42.9939W"
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 36 38 2d 39 32 36 30 2d 38 34 31 31 30 66 36 39 38 36 64 34 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 31 30 2d 30 31 54 31 32 3a 35 37 3a 30 30 2d 30 37 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 33 61 37 30 39 33 34 2d 39 36 37 62 2d 34 33 39 37 2d 39 33 64 30 2d 34 34 30 65 65 32 36 34 36 30 62 30 22 20 73 74 52 65 66 3a 64 Data Ascii: 68-9260-84110f6986d4" stEvt:when="2024-10-01T12:57:00-07:00" stEvt:softwareAgent="Adobe Photoshop 25.12 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:93a70934-967b-4397-93d0-440ee26460b0" stRef:d
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 6f 6e 74 72 61 73 74 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 43 6c 61 72 69 74 79 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 53 68 61 72 70 6e 65 73 73 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 42 72 69 67 68 74 6e 65 73 73 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 54 6f 6e 69 6e 67 48 75 65 3d 22 32 31 33 22 20 63 72 73 3a 4c 6f 63 61 6c 54 6f 6e 69 6e 67 53 61 74 75 72 61 74 69 6f 6e 3d 22 30 2e 38 39 38 35 35 31 22 20 63 72 73 3a 4c 6f 63 61 6c 45 78 70 6f 73 75 72 65 32 30 31 32 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 43 6f 6e 74 72 61 73 74 32 30 31 32 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 48 69 67 68 6c 69 67 68 74 73 32 30 31 32 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 6c 53 68 61 64 6f 77 73 32 30 31 32 3d 22 30 22 20 63 72 73 3a 4c 6f 63 61 Data Ascii: ontrast="0" crs:LocalClarity="0" crs:LocalSharpness="0" crs:LocalBrightness="0" crs:LocalToningHue="213" crs:LocalToningSaturation="0.898551" crs:LocalExposure2012="0" crs:LocalContrast2012="0" crs:LocalHighlights2012="0" crs:LocalShadows2012="0" crs:Loca
2024-12-31 23:22:34 UTC	1452	IN	Data Raw: 3a 4d 6f 64 65 3d 22 30 22 20 65 78 69 66 3a 46 75 6e 63 74 69 6f 6e 3d 22 54 72 75 65 22 20 65 78 69 66 3a 52 65 64 45 79 65 4d 6f 64 65 3d 22 46 61 6c 73 65 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 6a eb 75 05 00 09 7c 82 49 44 41 54 78 9c 6c fd 49 ac 6e db 96 26 06 7d 63 ce b5 d6 5f ee f2 d4 e7 56 af 2e 22 32 22 32 22 33 9d ae d2 06 99 06 6e 58 08 81 44 97 46 4a 88 06 0d e8 d2 a1 63 59 4a 09 01 a2 85 44 83 06 72 03 83 6c ac c4 b2 84 2d 83 e9 a4 92 cc 74 46 64 be 88 17 2f 5e 79 8b 53 ee 73 76 f5 17 ab 98 73 0e 1a a3 58 73 df e0 e8 c6 8b 73 f6 fe ff b5 66 31 e6 18 df f8 46 31 e9 3f fc 9a 1b 42 26 00 Data Ascii: :Mode="0" exif:Function="True" exif:RedEyeMode="False"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>ju\|IDATxlIn&}c_V."2"2"3nXDFJcYJDrl-tFd/^ySsvsXssf1F1?B&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49841	142.250.181.228	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	658	OUT	GET /js/th/WuArCo6uiOC32QOIiNWeSH9h2H5vf_jv_ihZ0ZQebSo.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:35 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 55054 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 31 Dec 2024 18:09:48 GMT Expires: Wed, 31 Dec 2025 18:09:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 18766 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-31 23:22:35 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 45 7d 29 2c 63 3d 38 31 29 3a 63 3d 3d 39 38 26 26 28 63 3d 62 26 26 62 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 39 30 3a 67 29 7d 7d 7d 63 61 74 63 68 28 58 29 7b 69 66 28 4c 3d 3d 34 36 29 74 68 72 6f 77 20 58 3b 4c 3d 3d 32 31 26 26 28 42 3d 58 2c 63 3d 31 38 29 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 4e 2e 63 61 6c 6c 28 74 68 69 73 2c 67 29 7d 2c 5a 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 71 28 33 33 2c 33 34 2c 39 39 2c 38 35 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 67 2e 65 76 61 6c 28 6e 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 22 31 22 29 29 3d 3d Data Ascii: ,createScriptURL:E}),c=81):c==98&&(c=b&&b.createPolicy?90:g)}}}catch(X){if(L==46)throw X;L==21&&(B=X,c=18)}},E=function(g){return N.call(this,g)},Z=this\|\|self;(0,eval)(function(g,n){return(n=q(33,34,99,85,"error","ad",null))&&g.eval(n.createScript("1"))==
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 65 61 6b 20 61 7d 45 3d 2d 31 7d 42 3d 38 31 7d 65 6c 73 65 20 69 66 28 42 3d 3d 32 31 29 42 3d 28 6e 7c 34 30 29 3d 3d 6e 3f 36 38 3a 31 38 3b 65 6c 73 65 7b 69 66 28 42 3d 3d 31 38 29 72 65 74 75 72 6e 20 45 3b 42 3d 3d 34 35 3f 28 74 68 69 73 2e 51 24 3d 41 2e 64 6f 63 75 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 2c 42 3d 32 31 29 3a 42 3d 3d 39 30 3f 42 3d 28 28 6e 7c 35 29 26 33 30 29 3c 36 26 26 28 6e 2b 37 26 31 31 29 3e 3d 35 3f 33 34 3a 38 31 3a 42 3d 3d 39 38 26 26 28 42 3d 28 6e 26 37 35 29 3d 3d 6e 3f 38 35 3a 39 30 29 7d 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 63 2c 4c 2c 7a 2c 67 2c 62 2c 43 2c 4e 2c 42 2c 45 2c 5a 29 7b 69 66 28 28 63 26 35 38 29 3d 3d 63 29 69 66 28 67 3d 4c 69 28 22 61 72 72 61 79 22 2c 7a 2c 22 63 61 6c 6c 22 29 3d Data Ascii: eak a}E=-1}B=81}else if(B==21)B=(n\|40)==n?68:18;else{if(B==18)return E;B==45?(this.Q$=A.document\|\|document,B=21):B==90?B=((n\|5)&30)<6&&(n+7&11)>=5?34:81:B==98&&(B=(n&75)==n?85:90)}},I=function(n,c,L,z,g,b,C,N,B,E,Z){if((c&58)==c)if(g=Li("array",z,"call")=
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 58 3d 3d 37 33 3f 28 42 2b 3d 42 3c 3c 33 2c 42 5e 3d 42 3e 3e 31 31 2c 67 3d 42 2b 28 42 3c 3c 31 35 29 3e 3e 3e 30 2c 43 3d 6e 65 77 20 4e 75 6d 62 65 72 28 67 26 28 4e 3d 31 3c 3c 4c 2c 2d 32 2a 7e 4e 2b 32 2a 7e 28 4e 7c 31 29 2b 28 4e 5e 31 29 29 29 2c 43 5b 30 5d 3d 28 67 3e 3e 3e 4c 29 25 7a 2c 5a 3d 43 2c 58 3d 36 39 29 3a 58 3d 3d 39 36 3f 58 3d 39 38 3a 58 3d 3d 34 3f 28 74 68 69 73 2e 73 72 63 3d 6e 2c 74 68 69 73 2e 6c 3d 7b 7d 2c 74 68 69 73 2e 46 66 3d 30 2c 58 3d 37 36 29 3a 58 3d 3d 32 30 3f 28 42 2b 3d 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 45 29 2c 42 2b 3d 42 3c 3c 31 30 2c 42 3d 28 62 3d 42 3e 3e 36 2c 7e 28 42 26 62 29 2d 7e 42 2d 28 7e 42 5e 62 29 2b 28 7e 42 7c 62 29 29 2c 58 3d 34 31 29 3a 58 3d 3d 31 34 3f 28 45 3d 42 3d 30 2c 58 Data Ascii: X==73?(B+=B<<3,B^=B>>11,g=B+(B<<15)>>>0,C=new Number(g&(N=1<<L,-2~N+2~(N\|1)+(N^1))),C[0]=(g>>>L)%z,Z=C,X=69):X==96?X=98:X==4?(this.src=n,this.l={},this.Ff=0,X=76):X==20?(B+=n.charCodeAt(E),B+=B<<10,B=(b=B>>6,~(B&b)-~B-(~B^b)+(~B\|b)),X=41):X==14?(E=B=0,X
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 29 3c 34 3f 34 34 3a 35 33 3a 5a 3d 3d 37 36 3f 5a 3d 28 4e 3d 6f 56 5b 62 5d 29 3f 36 37 3a 32 39 3a 5a 3d 3d 33 32 3f 28 58 3d 43 2c 5a 3d 32 31 29 3a 5a 3d 3d 38 31 3f 28 43 3d 67 28 62 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2b 2f 67 2c 22 2d 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 3d 2f 67 2c 22 22 29 2c 5a 3d 33 32 29 3a 5a 3d 3d 31 31 3f 5a 3d 32 36 3a 5a 3d 3d 32 34 3f 5a 3d 32 36 3a 5a 3d 3d 33 39 3f 28 74 68 69 73 2e 69 3d 42 2c 5a 3d 39 29 3a 5a 3d 3d 38 37 3f 28 45 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 5a 3d 31 31 29 3a 5a 3d 3d 38 34 3f 5a 3d 28 42 3d 7a 29 3f 33 39 3a 38 37 3a 5a 3d 3d 33 30 26 26 28 5a 3d 39 34 29 7d 7d 2c 47 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 63 2c Data Ascii: )<4?44:53:Z==76?Z=(N=oV[b])?67:29:Z==32?(X=C,Z=21):Z==81?(C=g(b).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,""),Z=32):Z==11?Z=26:Z==24?Z=26:Z==39?(this.i=B,Z=9):Z==87?(E=this.constructor,Z=11):Z==84?Z=(B=z)?39:87:Z==30&&(Z=94)}},Gy=function(n,c,
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 3d 6e 26 26 28 6e 2d 31 5e 36 29 3c 6e 26 26 28 67 3d 71 49 28 74 72 75 65 2c 38 2c 4c 29 2c 31 32 38 2d 28 7e 67 26 31 32 38 29 26 26 28 67 3d 28 7a 3d 28 67 7c 63 29 2d 28 67 5e 31 32 37 29 2b 28 7e 67 26 31 32 37 29 2c 62 3d 71 49 28 74 72 75 65 2c 38 2c 4c 29 3c 3c 37 2c 2d 7e 28 7a 7c 62 29 2b 28 7a 5e 62 29 2b 28 7e 7a 5e 62 29 29 29 2c 58 3d 67 29 2c 58 7d 2c 50 71 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 63 2c 4c 2c 7a 2c 67 29 7b 66 6f 72 28 7a 3d 31 36 3b 7a 21 3d 35 33 3b 29 69 66 28 7a 3d 3d 31 32 29 7a 3d 4c 3e 3e 31 26 31 3f 32 34 3a 34 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 31 36 29 7a 3d 31 32 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 34 29 74 68 69 73 2e 47 3d 74 68 69 73 2e 47 2c 74 68 69 73 2e 6e 6e 3d 74 68 69 73 2e 6e 6e 2c 7a 3d 32 34 3b 65 6c 73 Data Ascii: =n&&(n-1^6)<n&&(g=qI(true,8,L),128-(~g&128)&&(g=(z=(g\|c)-(g^127)+(~g&127),b=qI(true,8,L)<<7,-~(z\|b)+(z^b)+(~z^b))),X=g),X},Pq=function(n,c,L,z,g){for(z=16;z!=53;)if(z==12)z=L>>1&1?24:4;else if(z==16)z=12;else if(z==4)this.G=this.G,this.nn=this.nn,z=24;els
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 3f 5a 3d 28 63 2b 31 26 31 33 29 3d 3d 31 3f 33 38 3a 32 32 3a 5a 3d 3d 34 3f 5a 3d 28 63 5e 36 38 29 3c 31 30 26 26 28 28 63 5e 34 34 29 26 31 35 29 3e 3d 38 3f 39 34 3a 36 38 3a 5a 3d 3d 38 37 3f 28 42 3d 62 2e 6c 65 6e 67 74 68 2c 4e 3d 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 62 2e 73 70 6c 69 74 28 7a 29 3a 62 2c 43 3d 4c 2c 5a 3d 32 31 29 3a 5a 3d 3d 32 33 3f 5a 3d 43 3f 34 31 3a 35 30 3a 5a 3d 3d 37 3f 28 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 62 2c 5a 3d 32 33 29 3a 5a 3d 3d 38 34 3f 28 73 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 4c 3f 4c 2e 74 79 70 65 3a 22 22 29 2c 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d Data Ascii: ?Z=(c+1&13)==1?38:22:Z==4?Z=(c^68)<10&&((c^44)&15)>=8?94:68:Z==87?(B=b.length,N=typeof b==="string"?b.split(z):b,C=L,Z=21):Z==23?Z=C?41:50:Z==7?(this.relatedTarget=b,Z=23):Z==84?(sJ.call(this,L?L.type:""),this.relatedTarget=this.currentTarget=this.target=
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 68 3f 4c 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 3a 6e 75 6c 6c 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 4c 2e 74 61 72 67 65 74 7c 7c 4c 2e 73 72 63 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 7a 2c 62 3d 4c 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 2c 5a 3d 33 30 29 3a 5a 3d 3d 32 37 3f 5a 3d 67 3d 3d 22 6d 6f 75 73 65 6f 76 65 72 22 3f 33 37 3a 38 33 3a 5a 3d 3d 36 35 26 26 28 62 3d 7a 2c 62 5e 3d 62 3c 3c 31 33 2c 62 5e 3d 62 3e 3e 31 37 2c 62 5e 3d 62 3c 3c 35 2c 28 62 3d 31 2d 7e 28 62 7c 67 29 2b 28 62 7c 7e 67 29 2b 28 7e 62 7c 67 29 29 7c 7c 28 62 3d 31 29 2c 45 3d 2d 32 2a 28 4c 26 62 29 2d 7e 28 4c 26 62 29 2b 2d 32 2d 7e 28 4c 7c 62 29 2c 5a 3d 37 32 29 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: h?L.changedTouches[0]:null,this.target=L.target\|\|L.srcElement,this.currentTarget=z,b=L.relatedTarget,Z=30):Z==27?Z=g=="mouseover"?37:83:Z==65&&(b=z,b^=b<<13,b^=b>>17,b^=b<<5,(b=1-~(b\|g)+(b\|~g)+(~b\|g))\|\|(b=1),E=-2*(L&b)-~(L&b)+-2-~(L\|b),Z=72)}},k=function(
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 3a 36 34 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 32 29 7b 69 66 28 28 67 2e 5a 3d 28 67 2e 54 2b 3d 28 58 3d 28 43 3d 28 45 3d 28 42 3d 28 4c 7c 7c 67 2e 4d 45 2b 2b 2c 67 2e 52 41 3e 30 26 26 67 2e 72 7a 26 26 67 2e 59 69 29 26 26 67 2e 45 73 3c 3d 31 26 26 21 67 2e 4a 26 26 21 67 2e 48 26 26 28 21 4c 7c 7c 67 2e 43 43 2d 7a 3e 31 29 26 26 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 3d 3d 30 2c 67 2e 4d 45 3d 3d 63 29 29 7c 7c 42 3f 67 2e 46 28 29 3a 67 2e 59 5f 2c 43 2d 67 2e 59 5f 29 2c 58 3e 3e 31 34 3e 30 29 2c 67 2e 49 26 26 28 67 2e 49 3d 28 5a 3d 67 2e 49 2c 4d 3d 28 67 2e 54 2b 31 3e 3e 32 29 2a 28 58 3c 3c 32 29 2c 32 2a 28 4d 7c 30 29 2d 28 5a 26 4d 29 2b 7e 4d 2d 28 7e 5a 7c 4d 29 29 29 2c 67 29 2e 54 2b 31 3e 3e 32 21 3d 30 7c 7c 67 2e 5a 2c 45 Data Ascii: :64;else if(l==2){if((g.Z=(g.T+=(X=(C=(E=(B=(L\|\|g.ME++,g.RA>0&&g.rz&&g.Yi)&&g.Es<=1&&!g.J&&!g.H&&(!L\|\|g.CC-z>1)&&document.hidden==0,g.ME==c))\|\|B?g.F():g.Y_,C-g.Y_),X>>14>0),g.I&&(g.I=(Z=g.I,M=(g.T+1>>2)(X<<2),2(M\|0)-(Z&M)+~M-(~Z\|M))),g).T+1>>2!=0\|\|g.Z,E
2024-12-31 23:22:35 UTC	1390	IN	Data Raw: 28 63 26 34 37 29 3d 3d 63 3f 35 32 3a 36 35 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 32 33 29 7a 3d 74 79 70 65 6f 66 20 4c 2c 78 3d 7a 3d 3d 6e 26 26 4c 21 3d 6e 75 6c 6c 7c 7c 7a 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 6c 3d 34 31 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 34 36 29 6c 3d 43 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 43 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3f 36 39 3a 37 32 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 35 32 29 6e 2e 63 6c 61 73 73 4c 69 73 74 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 4c 2c 66 75 6e 63 74 69 6f 6e 28 53 29 7b 74 42 28 31 36 2c 33 2c 22 20 22 2c 22 73 74 72 69 6e 67 22 2c 30 2c 22 22 2c 6e 2c 53 29 7d 29 3a 59 28 22 73 74 72 69 6e 67 22 2c 33 33 2c 6e 2c 41 72 72 61 79 2e Data Ascii: (c&47)==c?52:65;else if(l==23)z=typeof L,x=z==n&&L!=null\|\|z=="function",l=41;else if(l==46)l=C.addListener&&C.removeListener?69:72;else if(l==52)n.classList?Array.prototype.forEach.call(L,function(S){tB(16,3," ","string",0,"",n,S)}):Y("string",33,n,Array.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49842	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	1255	OUT	GET /site-media/icons/icon_arrow-right-active.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/css/components/capital-programs-list.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:35 UTC	344	IN	HTTP/1.1 200 OK Etag: "1db522f7062686b" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 619 Cache-Control: max-age=7524, public Expires: Wed, 01 Jan 2025 01:27:59 GMT Date: Tue, 31 Dec 2024 23:22:35 GMT X-CDN: Imperva X-Iinfo: 18-261311147-0 0CNN RT(1735687354661 363) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:35 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 37 2e 30 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 31 38 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><circle id="Ellipse_181" class="cls-1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49843	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:34 UTC	3926	OUT	GET /media/zw1kviit/board_highlights_2.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=rLH+AHzvYaCjPC8rTzu+c/fC+9LaW7QzQa0GXLak2KN30GV2bywLCDfKZchx9PL9MoFsvA3c8ogx63dJeVbDRBygbqtUR0BJHtKaDlb4NwNkDrwZwFWoDPTyTDmtOU12n4jBFc+Qt5xWgSswgcQyM3FUx8bwZW6zL5pXU8+YBAwW4YXttj1pAzZVjZTD0dP5A7DLJz+TWzgNUXDx9xVDJkhkBe+ovGcUrLOZnWPkt/2gV2XzqpqEJA4cmUxdhrw7mmfr8+COodX/zwbl8Xk1K9rh0TpXc2QkixvN07CA4qqVqr8SHpIqaMjZ+t+sYckLEBupbHFyCpTzrZ8gZhZgdkEL3jxkco/soHMyC4cV05sGZuiUJe0zOsCe9VdBg+Z+ZyP7zqfY/fLsxZjYJgbt+18AZkLruEKbXMJON [TRUNCATED]
2024-12-31 23:22:35 UTC	426	IN	HTTP/1.1 200 OK Etag: "1db0f5271f1374e" Last-Modified: Wed, 25 Sep 2024 13:54:31 GMT Content-Type: image/png Content-Length: 926522 Cache-Control: max-age=82208, public Expires: Wed, 01 Jan 2025 22:12:42 GMT Date: Tue, 31 Dec 2024 23:22:34 GMT Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Sun, 08 Dec 2024 06:15:17 GMT X-CDN: Imperva X-Iinfo: 14-107583340-0 0CNN RT(1735687354676 298) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:35 UTC	1026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 9b 08 06 00 00 00 66 62 a0 3f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 20 00 49 44 41 54 78 9c ec bd 69 b7 15 47 92 ae c9 a7 fe dc eb ae d5 dd 6b dd ea 7b bb aa b2 2a 87 ca 54 a6 32 25 21 a5 e6 09 31 cf 83 98 04 87 c3 3c 1f e0 00 42 12 48 20 94 1a 11 42 c0 39 87 51 80 a4 5f 76 7f c1 fe 05 71 fd b5 08 77 37 33 37 f3 88 7d 90 52 59 bd ea 43 ac bd 77 ec 18 3d 3c dc fd b1 d7 cc 7c c1 be 4f be fc 5f 7b 3e fa db 68 f2 c2 e5 d1 ce f7 3f 1a 4d 7e f8 c9 68 db e9 f7 c2 f7 0f 47 13 1f 5c 1c 6d 9d 7e 77 b4 72 cf fe d1 a2 ad db 47 93 e7 3f 1e 85 ed 47 13 61 bb 03 9f 7e 3d 3a fc e5 75 da e6 8d b7 b7 8c d6 1d 3a 3a da 7c f2 cc 68 ea db 3b a3 53 b3 0f 47 07 3f bb 3a da 74 fc d4 68 cb a9 b3 Data Ascii: PNGIHDRfb?gAMAa IDATxiGk{*T2%!1<BH B9Q_vqw737}RYCw=<\|O_{>h?M~hG\m~wrG?Ga~=:u::\|h;SG?:th
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 21 7f 0f e7 7d e7 bd 0b a3 d5 7b 0f fc af 05 db 4e 9f 6b 02 44 37 f8 5c 77 f8 58 b3 75 fa 5c b3 ff 93 2f 9b c3 5f dd 68 de 39 fb 41 b3 74 e7 ae e6 f0 95 1b cd fe bf 5d 69 02 44 37 01 a2 9b fd 9f 7e dd 1c fc e2 1a ad c7 f6 01 e0 9b 00 c5 cd 1b 5b b6 d1 f7 50 99 9a 23 57 67 9a e5 bb f6 34 4b b6 ef 6c 42 41 36 e1 01 37 a1 f3 69 0e 84 e3 04 48 6e f6 7d fc 79 b3 fb e2 df e8 78 01 d8 c3 b1 ff 46 c7 8f e7 d8 d3 fd 17 e0 9c 96 89 0f 2e 86 73 bd db 04 18 6f 02 c4 37 01 dc 69 dd ae 0f 2e d1 ba 00 eb 4d 28 80 66 22 2c e1 26 e9 7a f0 19 6e 36 2c e1 f3 ec fb 4d 78 50 74 7c 5c cf 81 4f be 6a 36 9f 3c 4b df c3 0b d0 9c c4 72 f3 bb 76 89 df f9 ba b0 84 ce 4e 2c a1 a3 4e 9f 71 e1 bf d3 76 37 ef 8b e3 e0 b8 f1 9c a7 f4 12 ca 2e 2f 8f 7e 82 e5 a1 f1 e9 1f 7f 7a e8 32 67 2f Data Ascii: !}{NkD7\wXu\/_h9At]iD7~[P#Wg4KlBA67iHn}yxF.so7i.M(f",&zn6,MxPt\|\Oj6<KrvN,Nqv7./~z2g/
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: df 2b fd 9c 80 f7 b9 4a 3d 65 fb 7a e3 46 ab 2c 6d 03 4c 69 58 29 ea 51 a5 fd 2e eb be 12 50 06 8c ff ad 7e 51 94 63 8f 61 24 02 7e cd f8 62 be 13 43 c7 e0 8f 51 87 87 be 57 53 a1 cd 5a bc 6d 47 f3 c4 4b 2f 87 36 fc 5e b3 e9 f8 c9 b0 9c ca 90 4e f0 7d 8e a0 9c 96 d3 80 f3 f7 9b ed 67 df 67 90 de 02 3a d6 6d 3c 76 32 00 fa 34 f1 e3 f6 77 a3 c0 db 82 39 78 72 27 87 69 06 db f8 4e e0 fe c1 45 3a e6 c6 63 27 12 94 b7 c2 f1 87 02 e4 77 76 db 67 28 ef 8e 1f b6 6d cf f5 61 b3 6a cf be d1 02 c8 ff a0 fd 65 13 bb c3 32 49 1b 4c df 7a 44 4a f4 ba 43 47 9b 57 d7 6d 20 cb c4 44 00 60 28 ec ff df 1f fe d0 fc ea c9 27 9b 35 07 0e d3 41 50 20 5b 02 38 ef 0a 17 86 42 03 2c a3 00 08 7a 43 45 03 84 a3 23 c2 7f 87 be f8 b6 39 18 e0 fc e8 d7 33 a4 d2 03 cc f7 46 30 a7 ef 9f Data Ascii: +J=ezF,mLiX)Q.P~Qca$~bCQWSZmGK/6^N}gg:m<v24w9xr'iNE:c'wvg(maje2ILzDJCGWm D`('5AP [8B,zCE#93F0
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: a7 98 6f ef a0 bc 05 f3 f3 d9 85 bd 73 5d 07 a0 c3 c5 1d cc 18 dd d7 85 f2 fd 3e 53 be 13 6c 7f 98 44 e1 16 d0 3f 68 36 1e 9d 4a ec 09 71 39 86 64 c7 85 f6 61 bc 4a a1 db 51 70 06 d7 06 be 5d bd f7 c0 68 41 80 61 04 a3 d3 01 a1 9c 9f 9c 7d 40 ae df 4b 27 26 9b 97 d7 ac 6b b6 bf fb 01 d1 ff db c7 4f 91 ab 00 00 1e ee ef 70 63 87 2b 01 be e3 c6 27 de bf 48 b1 00 b8 48 9c 0c 8d 31 e2 d6 0f 7e f1 6d 73 e2 66 eb fe 0e e5 1b 3e ff 9b 4f 9e a6 65 cf c5 cf 28 8e 1d c7 21 b7 84 50 a0 54 50 e1 e2 71 13 14 9f 1e 40 7d 5f 00 76 40 39 0a 15 bf a3 fa be 27 2c 93 5a 4d 07 b0 9f bf 94 ad 14 d1 32 11 8e b7 e5 f4 bb 64 08 e0 8d 0e 1e c8 e1 2f af 87 4a 65 43 3a ef a8 e9 7b 55 79 29 07 e4 45 c7 65 0d 1e 4d 40 af c3 b4 37 c0 1b eb 25 af 0d e6 6a 03 44 bd e8 4e 6d 0c 80 ad 35 Data Ascii: os]>SlD?h6Jq9daJQp]hAa}@K'&kOpc+'HH1~msf>Oe(!PTPq@}_v@9',ZM2d/JeC:{Uy)EeM@7%jDNm5
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 0f 75 31 e5 80 7b 14 c8 4b ab d7 36 6b f6 1d 6c 0b 2b 7c 2e da ba 3d c5 7d 23 21 1b 6e 10 2a 38 f6 83 12 8e 7d 8f 85 8e b5 fd fd 55 52 c7 01 df 38 2f 5c d0 61 d1 c0 0d e1 46 b6 4c 9f 25 2b 07 92 d3 61 01 bc 23 89 1d 92 d1 21 c0 1f 85 8b c2 a0 07 d1 15 7a 8c 63 87 85 e4 f0 97 df 8a 07 bd e3 dd 0b cd 8a c9 3d 1d a0 db 03 b8 42 3d 31 a0 42 77 56 fc b7 09 05 15 f5 d4 1b d8 fe 14 90 e6 be e0 7d 03 45 4f cd 31 00 7d ec c4 12 dc e2 d8 d3 18 7b e0 3e f6 f9 2b 56 dc 9a 41 62 5e 86 04 77 f0 5a 3e a7 de 81 75 8f d5 b9 56 17 5c 60 61 8a 9f 05 e8 96 7b f6 38 90 ae 55 47 ed 59 32 c8 2d dc 00 72 4b b9 19 14 4a 52 79 bf 6b 1d a5 0b 2a fa 78 a6 31 41 b9 ab 3a 2e a8 69 e1 89 ae e2 c0 9c 0f dc 5d 40 ac d7 29 bf 0e 3c 92 f5 80 d5 05 9e 5d de f7 5c c8 e5 51 ba 7b db 6d 91 07 Data Ascii: u1{K6kl+\|.=}#!n8}UR8/\aFL%+a#!zc=B=1BwV}EO1}{>+VAb^wZ>uV\`a{8UGY2-rKJRykx1A:.i]@)<]\Q{m
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 20 78 c8 a0 df 84 7a 0f ca 7d 17 b0 da 80 ce 03 f6 c1 f0 6d bd f0 03 40 b5 00 73 cb 5a e7 80 b8 fe ee 59 54 c7 06 74 ed 4e e5 34 16 11 ce ab 0d aa 03 c4 bd 46 08 0e ea ce 60 55 37 92 b5 81 b4 79 3d 46 63 eb 0f e6 fd 7a 23 07 cb 4e 47 91 40 a4 8c 99 16 89 89 6a 83 b4 0a 98 17 40 68 c2 ba 9d 7c ce 52 3d bd 77 71 a8 71 8d 0f 38 cd 77 dc ea 60 95 32 68 4d ab 66 66 6d d7 ea b9 3b 80 be 53 40 c0 49 55 fe 32 89 5c cd a8 60 b5 39 b2 ad d3 86 16 61 7c 11 e5 f1 a8 5e d6 0e b4 4e 3b e5 d9 3b f0 f0 ca 7d 80 d1 53 bf 6b 05 dc 7b 03 24 a3 5e 99 de 1a 03 3c a1 3c 08 b7 de cb 72 9b 5a bf 31 46 bb 6f b5 ff 2e 4c 1b f7 a4 9e 7f ad dd 3c ad da 29 5d e6 dc f0 a3 15 e6 b4 5c eb e6 44 2f 80 da 82 f3 db 2c f3 7b de 37 c6 9f 67 77 f4 7b c6 bb 66 00 77 32 14 a8 6c ec 04 e9 b7 f2 Data Ascii: xz}m@sZYTtN4F`U7y=Fcz#NG@j@h\|R=wqq8w`2hMffm;S@IU2\`9a\|^N;;}Sk{$^<<rZ1Fo.L<)]\D/,{7gw{fw2l
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: a6 9c 5f 97 03 ba 50 d1 15 a8 5a 8b 86 64 01 c7 6a 00 38 2e 3c 99 40 65 9c ab 0a eb c6 e0 d2 34 32 f0 f7 9b 6d 63 65 c2 17 65 77 9d 0f a2 b5 7a 7e 27 4f d1 54 49 2c 25 54 ba e4 7e 7e df 2f b3 c2 65 f5 a1 b8 f7 78 1c 13 f6 05 10 db 70 3b ad ca cf be 06 56 df 9c 36 51 42 b4 86 7b 0e e4 fd ed a9 a5 30 9b c6 0a cb 70 50 2c cc 08 c3 ef d1 50 ea 3d e0 2e bf 7b 83 b8 87 ac bc e4 73 d2 7d 8b 06 74 b7 af 50 50 23 06 4d 6a 30 95 fb 35 ed 1d 92 df f5 da fe ba 3f ca 9f 31 6e 39 bb 81 a7 3a 9f 54 e9 5b 02 d2 39 64 cb d8 6d 15 a3 7e 2d 83 73 cc 93 73 8c 1d 33 c5 8b 0b 77 f3 0c f7 71 3a 34 4b c1 97 8b 06 f4 f6 1a b8 6b 3e f7 74 c1 e7 71 65 48 e0 c9 e8 62 19 e8 b8 f6 d2 60 17 af 5b 87 c7 a8 76 45 c5 97 cb 25 1b 20 f8 1c f1 19 cc 65 fb ae db 93 76 76 8d 32 37 88 0c 71 b2 Data Ascii: _PZdj8.<@e42mceewz~'OTI,%T~~/exp;V6QB{0pP,P=.{s}tPP#Mj05?1n9:T[9dm~-ss3wq:4Kk>tqeHb`[vE% evv27q
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: f0 ad 04 06 01 e8 e9 ff 32 33 b3 37 d8 96 39 03 ee 8b b2 8c ff d5 a1 53 01 60 01 aa d2 9b 88 bb c8 6a a3 c6 f4 2c 1b 20 74 fb 4d 9b c7 e9 b6 ef a9 0b 5e d6 78 0b 18 4b d8 37 8e 69 18 21 b4 87 c8 30 40 d7 1e 0b a5 7a ae 95 68 79 ce d2 60 54 80 8d 35 28 32 55 7d 66 cc 98 cb cf d2 6c 93 ba ed 13 9c 29 8f 12 01 e8 0a b6 44 bb a2 de 89 04 93 49 01 ce f1 d9 04 a8 2c 7e 3c c1 f6 d5 39 e1 5a 9e 80 9b b9 a4 27 e5 dd 84 f3 5b 62 5b 6d 08 cb 2a 79 7e b7 8e 2b 38 b7 c0 9c c7 9f db 5e 30 fa d8 59 c9 97 fb 79 89 dc e4 f7 72 2e 73 3b 6e 3d 79 d4 f0 6d b8 62 2e 16 63 5f ae a4 1b ed a0 eb 55 a5 f2 61 88 7e c0 69 e7 0b a0 50 f0 5d 8c 65 3a 90 17 e0 d1 01 a4 15 43 5c 26 55 fb e5 c1 dc 32 18 d8 ca b7 5c 2f 93 e6 f5 29 e6 35 05 de 4e 3e 27 15 72 6d 30 98 1f 9c cf 6b 5c a6 c6 Data Ascii: 2379S`j, tM^xK7i!0@zhy`T5(2U}fl)DI,~<9Z'[b[m*y~+8^0Yyr.s;n=ymb.c_Ua~iP]e:C\&U2\/)5N>'rm0k\
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 4a 45 db 85 74 0b ce d5 3b c3 5d 8e 93 f2 a1 07 80 7a 80 a8 ca ae 58 df 1d af 68 ef 8d 01 a6 a5 7c 16 db b2 ba c5 0d 44 ad e1 e8 ae 54 78 99 ca 4b 2a ba 80 f2 db 85 6a 2d e0 dc 88 57 a7 b8 73 f5 5d c4 8d 33 e5 fb 78 07 d0 e9 1c 5c 99 ef 3e 75 a2 3a 9d b4 4e 02 77 19 17 cf 55 7f 5c cf d1 ab 33 d2 dd dd 74 69 bf 23 da 01 db f0 56 4e d3 68 ce 14 a1 55 73 11 5e 60 83 b6 36 08 71 83 8b b5 9f d9 e6 b3 7a c5 0d 6e d6 fb 2e 60 5c f7 5f b7 be 17 03 7f 6d c8 d6 d0 6a b9 b6 ff 23 2f a7 d5 f7 a1 0a b7 05 e8 25 3c 7b 70 3e 54 0d 97 d7 e8 ed 5b 85 e5 39 c3 a0 e2 00 7a 31 c6 1a 32 1e ea 1b db 59 63 26 a3 cd e2 60 5e 1d df ce d5 c7 55 66 7b 38 2b 13 c9 72 43 95 d7 c7 d6 c6 34 d3 6a f1 00 bd 28 6f 6e e4 51 eb b9 71 ab f6 8c 7c 40 af 78 8d 15 ff fb fc a1 ff c3 6f d4 bd 18 Data Ascii: JEt;]zXh\|DTxK*j-Ws]3x\>u:NwU\3ti#VNhUs^`6qzn.`\_mj#/%<{p>T[9z12Yc&`^Uf{8+rC4j(onQq\|@xo
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 3e 1b 84 14 71 8a c6 35 54 8d 56 3c 7c 20 dd 67 6b 4c 91 61 19 df 15 40 a4 01 9d ae 61 f6 51 61 b8 b5 14 74 4f f1 4d 40 79 9d cd 35 ce ea b7 95 a0 4d 82 73 0b c7 e4 7e 9e a0 7c c6 04 74 7c 8f a0 2d 63 d9 b3 91 eb 98 5a c7 63 c6 75 8e 07 9d 79 5d 4c f7 56 28 fe 32 fb fb f1 98 f4 8e bb ec 7b 49 21 13 a0 2b f7 f4 a2 1c e5 b5 25 17 f6 9b 32 9c 40 b6 59 b6 9b 7a d9 86 6b a3 a4 95 18 4e 19 da 98 e2 cd 8d 47 a7 d4 7b 92 40 42 8f 01 ba be d2 9c e3 9c c1 c6 7f 26 b5 dc 87 ea 9f f7 3e 38 98 eb df 76 66 f6 61 31 e7 63 c5 93 d7 c6 49 d6 98 b2 32 8e ea 75 bb f6 c6 c5 c6 98 f8 94 fa dd 0b df c6 71 fd f6 5c 8d 5d b4 82 6e 8c 3b ea e0 ae da f6 8a 01 fa 94 71 2f d9 a8 65 7b 53 58 e3 cd aa 8a ce fa da 21 de 64 7a bc 69 95 a9 66 26 d4 57 6a 03 43 fb f5 dc b2 e5 cd eb 1b 37 Data Ascii: >q5TV<\| gkLa@aQatOM@y5Ms~\|t\|-cZcuy]LV(2{I!+%2@YzkNG{@B&>8vfa1cI2uq\]n;q/e{SX!dzif&WjC7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49844	142.250.186.54	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	460	OUT	GET /vi_webp/3M2FsVe0muU/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:35 UTC	633	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2040 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 31 Dec 2024 22:43:34 GMT Expires: Wed, 01 Jan 2025 00:43:34 GMT Cache-Control: public, max-age=7200 Age: 2341 ETag: "1559863846" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-31 23:22:35 UTC	757	IN	Data Raw: 52 49 46 46 f0 07 00 00 57 45 42 50 56 50 38 20 e4 07 00 00 10 25 00 9d 01 2a 78 00 5a 00 3e 39 16 89 43 a2 21 21 13 a9 76 cc 20 03 84 b3 a2 3b 90 41 ae 3c 34 a3 74 3d bb ee 8f 4c 2f 36 fb 5d c0 4a 97 d3 6f 96 ef 80 4a ce 9d 38 0b 9a 8d 9a 7f d0 f1 ef a8 4f f6 2f f8 fd 09 7f f1 fa 01 fa a3 ff 0f b8 5f f2 df ed 9f f1 ba f8 fa 06 fe c3 9e 0f d6 3e 73 f1 02 a5 98 e9 75 18 14 5c cc 1a fa f7 38 57 6d 98 a2 fe ab 5d 24 e0 1e cc a3 b0 bd 15 94 e1 fc 6d 7c eb 88 d5 4a 27 48 b5 f1 67 46 c7 02 94 0b 87 9a 82 f2 15 dd 5a 1d 98 07 41 f5 46 57 4d de 8e d7 4d b8 7d 21 2f fb 78 ec c5 b3 f1 ca 0d b1 e5 b9 74 6e c3 48 86 42 e7 bb 05 9c 49 a9 0a 89 98 cf e8 91 21 2a 39 03 18 4b 02 a2 ca ae d1 35 03 b1 55 af 5c 73 2c 47 c2 03 3a 4a 1b e4 ad dc 75 0d 13 6d 0e 0c 05 b7 4d a1 Data Ascii: RIFFWEBPVP8 %xZ>9C!!v ;A<4t=L/6]JoJ8O/_>su\8Wm]$m\|J'HgFZAFWMM}!/xtnHBI!9K5U\s,G:JumM
2024-12-31 23:22:35 UTC	1283	IN	Data Raw: 09 ad 51 ab 96 88 76 07 4c aa 86 17 7e 88 6c de 37 22 b7 d1 13 4c d6 e6 f8 6d 61 01 35 33 bf 0b 39 1a 6a 0c b7 fe 42 47 3d 35 e6 32 d3 97 60 4c b1 4b a0 1c 0d e6 89 ee 86 f3 0f e8 be 54 08 38 1e 32 05 05 11 a9 e3 7a a4 63 20 b8 aa 1f 9d 68 d5 93 9e 6e d2 fd 9e 83 4e 62 e5 d0 dc 8e 1f 34 64 16 00 58 61 ce 90 8a e6 8e d6 a3 ad 38 47 5d a2 04 07 8a 87 90 cb 04 5b 68 bc d9 4f 56 cd cf 31 f3 9f 0e 20 d3 88 50 13 5c 9b 84 da 5b a6 cc 94 c0 6e bf 3b 61 bd f6 cb fb 4a ef 8e d6 a7 dc 65 1e 13 88 c0 59 48 3d 7a 52 26 ac 1f 40 bd c1 97 6d ba cc 54 81 b8 46 34 de a8 d9 6c 09 90 17 70 a2 02 89 41 7b f9 3b cc 26 91 41 87 99 17 09 71 00 55 c4 2e a3 5c d2 2a 51 1c 1a c8 9c 66 9e a4 aa 6a 70 58 78 f5 cc 6b 32 91 44 0d 53 56 6b 6e b9 6d 2a 6b f8 2e 2d 60 e7 79 e3 44 2b 66 Data Ascii: QvL~l7"Lma539jBG=52`LKT82zc hnNb4dXa8G][hOV1 P\[n;aJeYH=zR&@mTF4lpA{;&AqU.\QfjpXxk2DSVknmk.-`yD+f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49845	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	979	OUT	GET /site-media/icons/icon_arrow-left-disabled.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:35 UTC	344	IN	HTTP/1.1 200 OK Etag: "1db522f70626863" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 611 Cache-Control: max-age=7524, public Expires: Wed, 01 Jan 2025 01:27:59 GMT Date: Tue, 31 Dec 2024 23:22:35 GMT X-CDN: Imperva X-Iinfo: 14-107583361-0 0CNN RT(1735687354884 323) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:35 UTC	611	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 37 2e 30 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 38 38 38 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 31 38 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#888;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#fff;}</style></defs><circle id="Ellipse_181" class="cls-1" cx=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49846	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	1223	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.36632120898314513 HTTP/1.1 Host: thetollroads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://thetollroads.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:35 UTC	122	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1
2024-12-31 23:22:35 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49847	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	979	OUT	GET /media/a2afb2cf/sr-241-loma-ridge-1220x600.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:35 UTC	343	IN	HTTP/1.1 200 OK Etag: "1db0a1f5e59a8b5" Last-Modified: Wed, 18 Sep 2024 23:06:18 GMT Content-Type: image/png Content-Length: 1554869 Cache-Control: max-age=82208, public Expires: Wed, 01 Jan 2025 22:12:43 GMT Date: Tue, 31 Dec 2024 23:22:35 GMT X-CDN: Imperva X-Iinfo: 7-21118547-0 0CNN RT(1735687355054 311) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:35 UTC	1109	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 02 58 08 06 00 00 00 72 e6 1f 1a 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 87 0f 00 00 8c 0f 00 00 fd 52 00 00 81 40 00 00 7d 79 00 00 e9 8b 00 00 3c e5 00 00 19 cc 73 3c 85 77 00 00 0a 2f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 c7 9d 96 77 54 54 d7 16 87 cf bd 77 7a a1 cd 30 d2 19 7a 93 2e 30 80 f4 2e 20 1d 04 51 18 66 06 18 ca 00 c3 0c 4d 6c 88 a8 40 44 11 11 01 45 90 a0 80 01 a3 a1 48 ac 88 62 21 28 a8 60 0f 48 10 50 62 30 8a a8 a8 64 46 d6 4a 7c 79 79 ef e5 e5 f7 c7 bd df da 67 ef 73 f7 d9 7b 9f b5 2e 00 24 4f 1f 2e 2f 05 96 02 20 99 27 e0 07 7a 38 d3 57 85 47 d0 b1 fd 00 06 78 80 01 a6 00 30 59 e9 a9 be 41 ee c1 40 24 2f 37 17 7a ba c8 Data Ascii: PNGIHDRXrgAMA\|Q cHRMR@}y<s<w/iCCPICC ProfileHwTTwz0z.0. QfMl@DEHb!(`HPb0dFJ\|yygs{.$O./ 'z8WGx0YA@$/7z
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: b8 89 58 41 3c 4e bc 42 1c 25 be 23 c9 90 f4 49 2e a4 48 92 90 b4 93 74 84 74 9e 74 8f f4 8a 4c 26 6b 93 1d c9 11 64 01 79 27 b9 91 7c 91 fc 98 fc 56 82 22 61 24 e1 25 c1 96 d8 28 51 25 d1 2e 31 28 f1 42 12 2f a9 25 e9 24 b9 56 32 47 b2 5c f2 a4 e4 0d c9 69 29 bc 94 b6 94 8b 14 53 6a 83 54 95 d4 29 a9 61 a9 59 69 8a b4 a9 b4 9f 74 b2 74 b1 74 93 f4 55 e9 49 19 ac 8c b6 8c 9b 0c 5b 26 5f e6 b0 cc 45 99 31 0a 42 d1 a0 b8 50 58 94 2d 94 7a ca 25 ca 38 15 43 d5 a1 7a 51 13 a8 45 d4 6f a8 fd d4 19 59 19 d9 65 b2 a1 b2 59 b2 55 b2 67 64 47 68 08 4d 9b e6 45 4b a2 95 d0 4e d0 86 68 ef 97 28 2f 71 5a c2 59 b2 63 49 cb 92 c1 25 73 72 8a 72 8e 72 1c b9 42 b9 56 b9 3b 72 ef e5 e9 f2 6e f2 89 f2 bb e5 3b e4 1f 29 a0 14 f4 15 02 14 32 15 0e 2a 5c 52 98 56 a4 2a da 2a Data Ascii: XA<NB%#I.HtttL&kdy'\|V"a$%(Q%.1(B/%$V2G\i)SjT)aYitttUI[&_E1BPX-z%8CzQEoYeYUgdGhMEKNh(/qZYcI%srrrBV;rn;)2\RV*
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 21 fa 61 e1 23 a9 47 e5 8f 95 1e d7 fd a8 f7 63 eb 88 e5 c8 99 51 d7 d1 be 27 41 4f 1e 8c b1 c6 9e ff 94 fe d3 87 f1 fc a7 e4 a7 e5 13 aa 13 8d 93 66 93 a7 a7 dc a7 6e 3e 5b fd 6c fc 79 ea f3 f9 e9 82 9f a5 7f ae 7e a1 fb e2 bb 5f 1c 7f e9 9b 59 35 33 fe 92 ff 72 e1 d7 e2 57 f2 af 8e bc 5e f6 ba 7b d6 7f f6 f1 9b e4 37 f3 73 85 6f e5 df 1e 7d c7 78 d7 fb 3e ec fd c4 7c e6 07 ec 87 8a 8f 7a 1f bb 3e 79 7f 7a b8 90 bc b0 f0 1b f7 84 f3 fb 37 04 29 1e 00 00 00 09 70 48 59 73 00 00 24 e8 00 00 24 e8 01 82 63 05 1c 00 00 00 0f 74 45 58 74 53 6f 75 72 63 65 00 49 4c 43 45 2d 37 4d 33 43 ab df 48 00 00 00 28 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 4c 69 67 68 74 72 6f 6f 6d 20 37 2e 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 40 d3 82 cc 00 00 00 07 Data Ascii: !a#GcQ'AOfn>[ly~_Y53rW^{7so}x>\|z>yz7)pHYs$$ctEXtSourceILCE-7M3CH(tEXtSoftwareAdobe Lightroom 7.5 (Macintosh)@
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: f9 d3 59 19 8c c6 d2 7f 57 4e 7b d5 6f 34 b0 2d b7 9b 85 74 dc 97 a3 ca 19 0d 27 58 5a 65 1d cb 60 38 90 3c e9 3a 18 69 9e a6 45 85 1b 84 7c e4 96 de c8 ed 7a dc 6d 4d 07 cf e9 b8 2b 93 e9 54 76 1f 95 ed 76 25 59 92 26 9d 97 8b 7b e9 d4 2f 7b 95 3b 1a d9 e8 75 1c 0d 6c 0b 3a 01 3a f3 7d 80 6c c6 cf 58 fa 6d b7 3b 5a ba 8c 64 b7 ed 76 5b 4e 07 fa 16 7d 84 82 d5 1e b2 01 fd 69 38 96 9e c3 b1 fb f9 e9 b0 53 2e 76 51 17 50 d9 ee 73 7d 85 b2 fb 68 a8 b2 05 ab d5 ca fd 69 22 b9 59 d7 81 68 b6 bb 95 6d 4e 6f 5c 2e 77 65 bd de 94 f1 64 2e fe a1 da 7b 54 66 f3 b9 ea a0 fa 62 e3 01 b6 91 cd a5 eb 49 b8 fd ee 58 fa 92 df 1f aa 27 4b 26 ed 76 44 17 d1 ec f7 2b a5 91 7d 61 39 18 7e 38 9e 97 9e ec ad c2 cd 7f 54 67 40 cf fd 56 7d 45 fd 6f a4 fa 78 1a 91 0c ca 3a 88 86 Data Ascii: YWN{o4-t'XZe`8<:iE\|zmM+Tvv%Y&{/{;ul::}lXm;Zdv[N}i8S.vQPs}hi"YhmNo\.wed.{TfbIX'K&vD+}a9~8Tg@V}Eox:
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 36 52 d1 ce 06 6c 35 c4 23 e3 3e a1 74 cf 6e 13 3b 28 70 da e1 87 19 a8 7e 8b 7b 9c 3d 87 32 99 8c c4 a7 d9 01 de de b1 f4 a3 33 b9 cd 68 e3 dd 5e 36 53 7a a8 b4 eb a5 78 ce 43 38 57 fc 1d c2 47 bc a3 11 f6 8e 76 df 6f 77 65 bb a3 0e a3 32 9d ce ca 68 3c 32 2f dc 38 a7 68 cb b1 6c b0 dd 6d 2c 77 68 07 19 ce ab 18 ab d0 e3 38 39 a8 cf 94 e3 de f4 f4 37 6c 10 ce 2f b5 eb 66 59 56 8b 3b d1 5e 95 f1 e5 23 e7 f3 85 4e 7f 1a e0 74 11 2d 8e cb c1 b0 ef f6 a6 7c 9c 2c 87 e3 d6 76 c6 11 46 dd 77 ab 7b c9 5a 94 e9 fc 52 55 39 94 dd fa 4e 79 b2 eb 68 26 bb a9 fd 65 c2 d1 44 79 e2 d9 ad 70 52 0d ed d4 64 9c ee 71 62 da 03 a6 99 9d b6 75 d9 13 cd ef 1a 13 bb 7d 99 e2 34 93 fe 47 a9 76 c4 11 86 e3 d6 75 95 cd 71 0c aa 9c be 6c b7 df dc ab 6d d5 1e ea e7 47 d5 79 79 7b Data Ascii: 6Rl5#>tn;(p~{=23h^6SzxC8WGvowe2h<2/8hlm,wh897l/fYV;^#Nt-\|,vFw{ZRU9Nyh&eDypRdqbu}4GvuqlmGyy{
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 33 1e 2a 4f 3a 88 1e e7 c6 78 3a f3 ee 2d 76 f4 b0 23 68 ac 72 86 83 61 59 e3 54 ac 65 a0 23 0e 15 ea 8f 73 09 dd 70 cc 78 27 95 64 f4 ab c3 e4 b8 df 28 2f ea 8c 43 e5 28 79 ec 4a c3 e6 3b 95 47 9f b3 93 4a 3c 7c d8 8d 85 f3 af d7 3b ea a3 b2 70 5e a9 4c 76 7b e1 5c 3b e0 d8 91 2e 47 f1 6e d8 61 66 87 db 3c ca 57 bb 8d 27 13 f1 30 3a f8 2e 3d 7a f7 10 3c 07 b5 95 eb ca 6e 2e e9 89 01 d6 8b 3b 99 e9 58 66 f3 99 6d 3c 90 7e b3 d9 dc 36 da 6d d5 36 d8 62 3c 57 18 8e 1a 9c 99 e6 97 ec 03 3b a5 24 0f 7b a8 36 92 43 2b a8 7d c7 ec dc e2 bb e6 20 9e bd 72 70 04 b1 c3 c9 ff a5 53 76 eb 85 fb 3a bb 10 b1 83 fb 90 ca 1a 49 07 ec b9 5d 2d 6c 3b 59 a3 f4 35 1e 98 84 f7 47 1c 60 4a 17 b5 87 74 61 0e 98 cd d4 a6 5b d9 7e 8b a3 75 6b db f4 65 97 fe 00 bb 69 9c a8 cf f6 Data Ascii: 3*O:x:-v#hraYTe#spx'd(/C(yJ;GJ<\|;p^Lv{\;.Gnaf<W'0:.=z<n.;Xfm<~6m6b<W;${6C+} rpSv:I]-l;Y5G`Jta[~ukei
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 63 bc 1d 88 b6 3d 63 48 76 1e 8e 65 bf 95 fa c2 a1 4c e7 8f c5 13 3b ca d0 59 0a da 51 66 95 71 10 a9 ee bd 01 e5 70 4c 4e 6d 26 5a 46 59 e8 c2 ae 2f f5 01 d1 d2 4e 68 c4 ae 41 f7 07 21 4f 6a 28 1c 4c c0 40 7d 25 8f 58 e2 58 a4 5e d8 c7 b6 95 ce e8 04 0d df 15 e4 d3 7e cc 5f b4 03 1d 01 67 17 8e 6a 76 80 0d 86 aa 39 3b e8 04 38 0e c9 1f 8f 07 65 b7 5e 9a df 0e bb a2 71 63 e7 af 6c ca 4e 2f fa a2 c6 27 8e a8 e1 48 fd 5a 34 f4 09 09 96 d6 d2 d5 f6 0b 7d 38 ca 39 c1 01 25 19 c7 23 47 29 65 4b f5 7f da 68 54 fb 21 3b e5 18 af fd e1 cc 76 db 2c 57 9a 3b 84 93 2e d8 7f b3 56 5f 9a 8c ca ec 72 26 25 8f 76 ea 8d 95 96 31 dd 96 43 d5 85 3e cb 8e 2c bb 35 7f b1 03 eb 1c f2 cb bf 79 09 f8 1a 80 06 48 fa 8c 03 99 16 a6 86 5f 0d 59 4c c3 f2 67 84 e4 ff 3a b5 1f 96 71 Data Ascii: c=cHveL;YQfqpLNm&ZFY/NhA!Oj(L@}%XX^~_gjv9;8e^qclN/'HZ4}89%#G)eKhT!;v,W;.V_r&%v1C>,5yH_YLg:q
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 71 a5 69 64 05 d8 73 ac 32 f8 60 77 5c 3c e8 d4 ec 98 93 5e 1c e3 a3 2e 38 0f 7d d4 91 c2 04 dc 79 06 0f ce 3f ec cc 6e af 74 82 0e b0 a9 75 d1 1c dc 8f 6f 5c da 78 bb e3 88 61 4f 7d 56 7d 59 f6 42 06 71 80 7b c2 4a 6f ab 98 e8 45 83 13 74 5c f3 e8 ff de d5 45 83 ab ff d3 cf d0 f5 84 43 56 63 78 bb 5d 5b 0e 77 72 b1 ab cf 8e 38 89 e1 18 25 47 16 71 c8 61 0f 36 c6 ed d5 4f 71 62 1d 54 27 8e 68 a2 73 51 dd 8e a7 70 b0 62 27 1c be 7c af bb 2d 55 37 fa 55 af 3f 2e c3 09 bb 15 d5 2f cc c7 8e 39 8d 75 09 8d 63 9e 9a df 70 d2 49 cf cb ab 2b cb 62 dc d1 87 fb dc 9d 45 3b d0 26 bf 70 60 bd 0e f1 e5 8a f1 ff f9 e0 e7 b5 ac 07 87 42 26 93 3f 0f 38 d3 a3 5b ad 87 e5 91 07 ae 86 ee 20 1d 9a 8c 26 49 92 27 9e 74 86 49 e3 3c 45 52 8e c7 be e2 49 0b fa 8c b6 03 89 73 98 Data Ascii: qids2`w\<^.8}y?ntuo\xaO}V}YBq{JoEt\ECVcx][wr8%Gqa6OqbT'hsQpb'\|-U7U?./9ucpI+bE;&p`B&?8[ &I'tI<ERIs
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 9d 43 31 a2 b6 5b 76 74 b1 53 8d cb f5 39 ea 88 63 47 42 4e 38 8c 90 25 eb 30 8f 9c e2 98 9e c4 d9 01 88 83 88 f6 c0 99 c8 d1 4d 9c 2f f4 3d 1c 9f 13 76 8b a9 fc 9e db 38 8e 2f c6 f1 4e 1c 4c f4 ed 59 d9 ee 38 ba c9 5d 6b e1 a0 f2 45 e8 aa 0b 76 a6 a1 bc 53 8e 50 3d f5 c8 6e 33 e3 68 07 bb 96 54 5e dc 03 c7 f1 48 d7 05 a7 91 da 14 db 70 f1 bd e7 2d d9 8f 3b a4 14 13 5e 8a 6b 2c 84 ad 71 42 b1 9b 4c 63 69 73 2f fd 38 fe c8 6e 34 78 d8 25 47 c5 65 03 55 96 63 86 be 47 0b 89 aa 0f fd 13 7e 3e 38 de d0 90 23 97 fc f0 01 77 55 ed b6 38 9b c4 4b df 93 2d d8 35 45 5b c7 ee 37 c9 52 9b e1 44 c4 89 c5 2e 33 c6 c0 44 73 01 3a 73 c9 3b 17 b8 fb bb 58 fc f0 a0 06 7d 14 67 e2 7a b1 10 df b4 5c 3f be b6 0d b9 e7 0b bb 1d b9 5f 4b ba f2 a3 05 bf 70 60 fd 0b 00 06 ac bf Data Ascii: C1[vtS9cGBN8%0M/=v8/NLY8]kEvSP=n3hT^Hp-;^k,qBLcis/8n4x%GeUcG~>8#wU8K-5E[7RD.3Ds:s;X}gz\?_Kp`
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 3f 9d 83 47 b7 1f 3a e0 fc e2 97 0e 39 22 87 83 65 b7 93 de 6a 57 76 a9 31 fe b8 48 df 9a aa 4f e0 60 b3 e3 4d 7d 0b 87 0e bb 81 f8 b5 48 ee 31 63 47 99 98 ca 5a 63 c0 8e 3e d5 05 87 23 3a 71 94 8e a3 8c 76 e0 a8 5f 70 a1 39 0e 36 1f e5 93 ae 38 6c 26 aa c3 74 32 b5 13 6c 4f 9b 9e 22 8f 9d 45 cc 0f b1 fb 08 27 26 8e 46 f5 1f c9 89 b9 52 f2 c6 73 97 c9 a5 fc de 09 35 14 5e 3c c3 a1 28 b0 a1 70 1c 2b 45 ae b9 c4 e3 bb a7 70 be 49 6d 55 41 c3 87 5a 86 6e c8 22 bf 70 84 4f e3 8a 63 a3 31 17 50 de 50 63 22 c6 e5 80 fb c9 ec 00 e4 02 7a fa 08 bb af 70 c6 62 23 c9 c0 c4 e6 ea 97 cd 0a a7 66 29 d3 f9 5c 34 5b 1f 6d a5 5d a9 17 47 30 bd 23 0b 7d 34 3f d1 f7 70 f2 cd 2f ae 3c 6e 28 99 76 c6 a6 e8 35 90 ae 23 cd 21 a5 70 ef 98 fa 2b f5 56 fd e8 07 6e 57 74 a4 8d 0a Data Ascii: ?G:9"ejWv1HO`M}H1cGZc>#:qv_p968l&t2lO"E'&FRs5^<(p+EpImUAZn"pOc1PPc"zpb#f)\4[m]G0#}4?p/<n(v5#!p+VnWt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49849	142.250.186.70	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	500	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-31 23:22:35 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 31 Dec 2024 23:12:14 GMT Expires: Tue, 31 Dec 2024 23:27:14 GMT Cache-Control: public, max-age=900 Age: 621 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-31 23:22:35 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49848	172.217.16.194	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	706	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-31 23:22:35 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Tue, 31 Dec 2024 23:22:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:35 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 46 61 74 79 78 6b 35 68 35 63 73 6e 42 53 47 68 52 50 34 76 34 57 74 34 70 75 4f 37 53 37 72 73 5f 2d 57 35 76 42 43 68 54 42 5a 58 6a 67 6d 70 59 4f 56 63 6e 54 73 6a 52 68 37 59 58 36 67 6c 61 6b 63 66 62 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKrFatyxk5h5csnBSGhRP4v4Wt4puO7S7rs_-W5vBChTBZXjgmpYOVcnTsjRh7YX6glakcfb","type":4}
2024-12-31 23:22:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49851	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	971	OUT	GET /media/ppung3sx/board_highlights_1.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:35 UTC	344	IN	HTTP/1.1 200 OK Etag: "1db0f526f927f75" Last-Modified: Wed, 25 Sep 2024 13:54:27 GMT Content-Type: image/png Content-Length: 983413 Cache-Control: max-age=82207, public Expires: Wed, 01 Jan 2025 22:12:42 GMT Date: Tue, 31 Dec 2024 23:22:35 GMT X-CDN: Imperva X-Iinfo: 14-107583374-0 0CNN RT(1735687355256 275) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:35 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 02 9b 08 06 00 00 00 66 62 a0 3f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 20 00 49 44 41 54 78 9c cc bd 67 97 16 47 b2 ef cb bb fb 01 ee ba 77 dd b3 d6 bd c7 ec 7d f6 ec d9 63 35 d2 8c 34 23 8b 90 47 08 ef bd 13 08 6f db d1 78 84 f0 20 40 1a 79 e1 1a 1a 1a 9a 46 c8 7c a1 f3 09 9e 4f 90 37 ff 59 15 99 11 91 91 55 d5 0d 7b e6 bc a8 f5 b8 7a aa b2 b2 b2 32 f3 17 ff 88 c8 69 9f 6f ff ea 7f 7d ba e5 6a ef e2 47 97 7b 67 3f bc e0 5f af f4 4e ac fd a4 77 e6 c3 f3 fe f3 c5 de d1 b5 1f f7 76 cc df dd 5b 37 73 63 ef c2 a6 4b bd bf 6f ff ca 7f 7f be f7 d5 ce 6f 7b df ed b9 1e f6 59 f5 ee da de be a5 fd bd 23 ab 8e f7 6e f7 df eb dd 1f 7a d4 fb 7a d7 77 bd e1 15 87 7a 47 57 1f ef dd ea bb Data Ascii: PNGIHDRfb?gAMAa IDATxgGw}c54#Gox @yF\|O7YU{z2io}jG{g?_Nwv[7scKoo{Y#nzzwzGW
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: c6 7e 38 2e 7e f7 df ef 5c b8 e7 7f 4d f3 85 74 47 56 1f 77 be 90 ae 7f c9 a0 c3 67 0f e1 ee fb 3d 37 9d 2f 80 db 3c 7b ab bb b6 f7 a6 fb 62 c7 37 ee f2 d6 cf dc a7 5b 3e 73 1e ce dd 37 bb af f9 ef 6f b9 e3 6b 3e 76 be 42 9c 87 62 b7 6a e6 7a b7 73 fe 6e 77 ff c0 23 77 7d df 6d b7 75 ee 76 b7 71 d6 66 e7 2b d4 f9 1b ec fc e0 13 8e e3 01 db 7d be ed 0b e7 a1 3c 6c 57 b7 7e 1e df 5f 0e ef af 86 f7 1e a6 9d 87 f3 b0 9d db 74 d1 f9 4a 75 1e c6 c3 f7 17 36 7f 1a be c3 e7 f3 f5 7b 5f 51 7e 3b ef fc 45 86 f2 e0 d5 5f ac 7f 3d 13 ae e5 c0 aa c3 e1 b8 28 cf 17 db be 0a d7 8d f7 fe 01 70 7e 60 72 7e a0 0a 1b bd c7 eb 58 78 ad be f7 83 5d da 06 c6 c3 f5 54 ef 1f a4 8d 7f ae f7 bd 17 b6 87 e2 f8 74 ce f0 ca 36 ff 20 b2 ed 07 e7 1f b0 6c d3 df 97 f6 ab 7e ab 8e 83 d7 Data Ascii: ~8.~\MtGVwg=7/<{b7[>s7ok>vBbjzsnw#w}muvqf+}<lW~_tJu6{_Q~;E_=(p~`r~Xx]Tt6 l~
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 4a cf 40 9b c1 b3 fa 2f da 60 04 22 01 7a 0c 10 18 44 da 60 9c 03 ba 9e af 54 7d 95 06 70 39 86 4f a8 f3 73 e8 b0 a1 d8 06 f7 09 06 7e f1 3b 6e 68 60 e7 26 80 d6 d7 63 41 4a 09 de 73 e0 ce c1 5a 03 94 09 e8 6a 7f 7e 4f 04 f0 eb 3a 6a 80 39 4b b0 79 c0 e6 86 72 6c a9 de 37 8d 73 12 de f3 79 96 35 67 2d cd 1b 9b ee 2b af bf dc 00 61 b5 23 6b 1c 2c b5 7d 29 a0 d0 fc c2 7e 46 4a f3 d3 1f 64 3d 1a f3 69 dd 47 27 63 58 d9 10 33 d5 39 78 6a c7 e5 76 da 06 e8 8f 0e 36 b5 fd 9f dc a8 ef b3 36 cf dc ec de 78 e6 4d df ef 3e 70 07 56 1c 74 c3 2b 0f 07 48 0e d0 0d f8 f6 1b a0 fc a8 df f0 0a 30 3f b9 fe 74 78 fd b8 86 77 ec 8b ef 86 fc ff 0f ad 3a 52 01 74 2d ec 82 1d f1 fe 74 84 e9 4a 00 26 d8 26 c8 c6 76 ee c3 8b e1 58 83 2b 86 03 74 57 a2 71 25 1c 13 80 9f ae 01 9c Data Ascii: J@/`"zD`T}p9Os~;nh`&cAJsZj~O:j9Kyrl7sy5g-+a#k,})~FJd=iG'cX39xjv66xM>pVt+H0?txw:Rt-tJ&&vX+tWq%
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 92 1e 8b c6 eb 7b 9c f5 f1 83 76 bf da 04 e8 e3 6c 8c 0c e3 65 06 d4 0a 82 b8 e2 57 54 84 0d 57 ed c2 31 09 5a 09 d0 b3 b9 88 3a 76 17 d5 af a4 c2 b6 b9 a2 db ca 76 d9 b5 bd 59 a1 2c bb a5 97 3d 01 b4 cb 7b fe bd 05 aa 99 01 a0 e0 95 a0 5d ac 4b ca 37 37 e0 d2 be 1c 2c db e7 59 d6 b8 42 f3 cc f2 bc 94 1b 1c 84 27 03 87 cd 4c 35 cf e7 9c da 63 b4 6b 5f db dd cb aa 34 0e e4 5e 9e f9 f5 3e ce af 57 3c 77 e5 fa 69 12 e1 74 3d 88 ba 9c 02 98 b7 ed 7f db f7 65 5b 67 6d 75 6f 3f f7 4e f8 0c 86 dc b7 a4 3f 00 fa 31 a6 96 13 98 93 4a 4e 1b a0 3b ba b0 d7 aa f5 90 07 6b b8 b8 07 40 67 4a 37 89 bc 5c f9 e6 ca 39 c1 35 5e 71 6c 00 7a 80 f1 3a 0c 9b 42 b2 69 23 b0 27 41 f9 c2 e6 4b 51 70 26 2f f1 5d 0b f7 f4 a6 7d b1 fd ab de ae 05 7b dd e0 b2 e1 a0 9c a3 43 45 01 a1 Data Ascii: {vleWTW1Z:vvY,={]K77,YB'L5ck_4^>W<wit=e[gmuo?N?1JN;k@gJ7\95^qlz:Bi#'AKQp&/]}{CE
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: b1 e3 26 34 d9 b1 ef b2 8e 74 39 73 97 f0 09 76 3e 0d 72 34 67 94 7d 93 ec ab 72 c8 6c 56 cd cd f7 35 08 c7 57 26 d2 98 ed 86 b7 3f 65 ec c9 af a7 ec be cf 15 ec 71 f5 9b 9e 73 a6 7e b4 69 1c 6f 1a 07 f3 63 4e 55 20 cb 8d 1f f6 dc 55 f6 f5 8f 9d 3d 0f 67 df 15 bd 35 ca de 21 6d cf 19 fa aa 5d 73 77 bb b9 2f cd 8d df 7d e5 d9 12 8c 0a f5 fa 08 12 c5 79 6e 25 48 0f f1 e6 75 ec 39 c0 9a 5e 29 4f d9 99 e0 7a 7e 31 a8 ef 08 d9 26 18 af 14 ee 0a ce 21 f2 56 fb 55 a2 2f 98 f2 52 0d de 94 0f 0d 0c 0a 57 77 c4 b1 5f a8 85 62 80 fe d1 d5 27 dc f0 8a c3 ae 7f d9 01 cf d2 fb 2b 36 5e b8 27 24 82 db 36 7f a7 db 32 77 7b d8 90 70 1d d7 b0 df b3 ee a6 0f b6 f4 a6 7d b5 f3 bb 9e df 82 b2 7c c3 03 37 e2 ce 37 cf d9 1a 20 1d 3b 7f f8 c1 e6 60 11 80 52 0e 97 33 a8 e4 d8 ef Data Ascii: &4t9sv>r4g}rlV5W&?eqs~iocNU U=g5!m]sw/}yn%Hu9^)Oz~1&!VU/RWw_b'+6^'$62w{p}\|77 ;`R3
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: e7 77 b9 40 d2 74 ac 04 ec e9 7f 39 20 67 c6 20 51 46 56 4f da 83 a3 83 7b 78 97 98 73 61 1c 2e cc 47 26 3b 1e d2 6f dc 2b 75 fc 00 07 f8 2e 63 ac 5c d9 a0 ec d1 d0 34 ef b6 3d 62 9a 8c 41 93 79 0e 91 ad 7d fb 9c 1d 6e f6 df e6 84 cf 18 3f f0 df 2f 77 7c 1d 00 1d 2e ee 60 58 2c b7 46 ca 79 04 f4 1a ca 29 3f 19 c5 82 23 7f 19 a0 18 e2 2e 42 a1 f1 1d f6 09 ae e7 ab 8f 85 30 ec 7e 78 74 2f ee af d4 ef 05 b5 fa 3d 6f 47 10 8e b1 e1 33 ce 0f 61 1b 80 0e d8 ff 64 c3 69 11 bb 9e 92 9a 57 b1 e8 00 7f 70 2c 65 80 e7 b1 ec fe 5c bd 69 58 28 1d 20 0c 25 1b 4a f3 c1 95 47 03 d0 c2 0a 30 eb e5 b9 c1 2a 40 90 4c 4a 3b 54 73 c4 6d 43 55 3f ed 01 19 d0 8d 93 c0 85 1d ee eb d8 1f d6 62 40 ef f6 05 bb 02 44 03 ea 31 18 a0 42 bf 0d aa fb 48 58 43 7d 8b bf 40 2a 2c 8e 8f 63 Data Ascii: w@t9 g QFVO{xsa.G&;o+u.c\4=bAy}n?/w\|.`X,Fy)?#.B0~xt/=oG3adiWp,e\iX( %JG0@LJ;TsmCU?b@D1BHXC}@,c
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 5d e5 f0 48 a5 9c 8b 6b b1 63 cf ed 39 a4 d5 bf 1b c2 08 13 43 f8 b8 68 26 ae 2e 1a b8 75 7f 9f 9e 8f 52 79 28 8c 89 8f 93 a5 b9 6e db 3d d1 f1 f6 7a 1c 4e f5 cd c2 2e 4c 2f 11 69 e8 a1 0d 6d 13 fd ee fe 45 7d 6e c1 2b 0b 2b 60 af e7 a2 f8 1f b8 b1 7f f9 50 e0 44 78 5b 43 49 47 d2 35 ca 9f 16 54 6f 0f dd 78 05 6c 03 be 37 cf d9 16 d4 6f 7c 07 d7 73 7c de 34 67 6b b5 54 db 9a 13 f5 aa 63 17 42 2c 3a 31 ed f9 7a d9 34 b9 bc f7 85 08 e1 87 57 1f 0f e7 24 57 75 da 17 ef 63 d2 72 91 c4 bc 52 cf 79 36 78 9c 63 60 d9 81 de b4 fe 65 43 bd d9 af ce 77 8b df 58 16 0e 0a 55 1b 16 02 f8 ed 23 b0 7d e7 fc 3d c1 95 1d 52 ff 4e 7f 51 f0 95 c7 7e b0 12 c0 a7 fe fb dd 37 02 dc 63 43 85 41 05 ff 78 7d b5 f6 1c 54 6d fc 0f 95 81 41 0d 0d 8b 3a 01 b8 0a c0 c5 bd 82 e2 1f c2 Data Ascii: ]Hkc9Ch&.uRy(n=zN.L/imE}n++`PDx[CIG5Toxl7o\|s\|4gkTcB,:1z4W$WucrRy6xc`eCwXU#}=RNQ~7cCAx}TmA:
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 66 24 c8 bf d3 e5 ca 15 4e db a5 dd 06 ae b6 79 61 f3 7c af e4 ea 9e 03 7a 9b 82 de a6 0a 97 43 27 f5 5c 30 19 0d ac d0 9e dc 23 2a 8d 97 5c 08 69 cb ef 52 8a 4f d7 7d 3e 7f 2e 12 a0 e7 65 e2 c7 1a 67 f5 df 7d 4e 5d 76 c3 cf 79 89 87 a6 a4 b6 91 d7 71 2e c6 91 7a 8e 55 b7 66 bd f0 41 f8 5c 79 fd dd 8f 80 7e 6c f5 09 b7 f4 ad 95 01 c2 b1 54 19 f2 a6 1d ad 33 b8 83 5f 3f a9 dd da f9 52 69 e7 d8 12 69 80 68 88 cf 7b 6a f5 5b af 6f 0e 58 3f 55 bb b3 13 64 5f a8 c5 60 72 5d c7 7b 88 d2 70 b5 3f 1f b2 bc 5f 09 80 ae d7 41 3f 5b ab ee 94 0d fe 2c 5b 17 9d a0 7f ff d2 81 de 34 7f 91 3d 5c dc 77 bb af 05 0b c4 a7 5b ae d4 4a f8 b7 c1 e5 1c 03 13 00 7b eb fc 1d ee 93 75 a7 c2 f7 58 a7 1c 30 7e ae 5e e7 0d 6e ee 70 2f c0 7b 04 c8 0f ae 38 18 d4 70 02 6f 80 3e 6e ca Data Ascii: f$Nya\|zC'\0#*\iRO}>.eg}N]vyq.zUfA\y~lT3_?Riih{j[oX?Ud_`r]{p?_A?[,[4=\w[J{uX0~^np/{8po>n
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 29 e3 fa 99 b0 d4 f5 bc df 97 49 26 85 51 54 f7 f7 0c d0 d3 b8 97 da 9e 84 f5 d4 d6 b2 f1 56 01 63 09 d0 ff 99 70 5e 02 f6 76 90 96 80 de e4 b6 6f b9 c1 8b 84 5c e6 66 40 79 34 1a 94 f6 61 fb 65 8a 79 57 00 6f f6 ac cc e7 96 79 12 b7 2e de 99 f9 7c 51 7e 57 9a f7 b6 cd 1b 09 e4 f3 ec e8 25 21 24 ef 4b c7 d8 f3 d1 2a 5e 64 f3 9b b2 f7 58 0e bf 8f b3 fa e2 65 8e cf 8b f2 42 69 9a 4b 97 0c 1c 69 2c 4c 5e 02 65 6f ae 6e f1 fa 0f 6a 40 47 1f 7a 64 e5 51 f7 ee 5f de 8b f5 4f 2b cb a0 4e 60 40 45 b2 72 b8 a7 03 d2 11 7f 0e 50 af 96 5a ab 32 b3 23 7c ba 52 d3 ab 25 d6 08 b8 01 e7 01 b6 83 82 be 3f 84 64 73 70 97 f0 7c 31 c6 9d 9f 67 f1 e7 04 dc 38 06 92 d3 c1 8d 1e 9f c9 93 fb 62 54 d1 2b 40 3f 17 63 d6 2f c5 a4 e6 3c 36 1d fb 78 ae ee 4d bb ba f5 f3 1e dc c8 e1 Data Ascii: )I&QTVcp^vo\f@y4aeyWoy.\|Q~W%!$K*^dXeBiKi,L^eonj@GzdQ_O+N`@ErPZ2#\|R%?dsp\|1g8bT+@?c/<6xM
2024-12-31 23:22:35 UTC	1452	IN	Data Raw: 97 02 74 9d e8 2d ba e5 f7 df 8d 89 6e b1 8a 8d 56 df 53 e6 78 4b 45 1f cb 96 7e 13 de 30 7a 63 2e ee ba ee 75 3f 6d 1a 5a 8d 3e 4f 3f 7f 22 49 68 06 e7 f2 39 d6 ed 4d 86 10 a5 7d 2c 80 a2 f1 93 8f 65 62 fc 2b aa bb ff 7c 75 bc 09 d0 25 a4 73 97 f4 2e 80 ae dd e4 6d 43 44 39 2e dd fa de 82 f2 d2 67 56 5e 01 75 93 cd ff 93 83 6f 59 60 e9 02 e9 f9 9c d3 16 2c ca f3 1f 6b 4e 2a d4 72 f1 5d 69 ce 6c a9 ca 0d d0 6d 1a ae 64 52 4e 31 0f 2b cc 79 24 a3 fc 20 9e 29 0b d2 75 06 75 db d0 d2 3c ff d4 e3 96 35 7f ec 66 98 b6 59 85 3c 66 d0 ae af ed bd e9 4e ae 3d 15 d4 73 f4 35 c4 66 d4 6f 7d bf e7 7a f8 ee da 9e 1b ae 6f d9 a0 1b 58 7e a0 02 f4 35 c7 03 9c e3 15 ea 39 a9 e9 88 43 47 d8 36 bc bf 23 7c d7 89 d9 b0 42 19 04 e0 f3 06 a0 9f 15 db 05 b1 76 39 a9 ea 78 c5 Data Ascii: t-nVSxKE~0zc.u?mZ>O?"Ih9M},eb+\|u%s.mCD9.gV^uoY`,kN*r]ilmdRN1+y$ )uu<5fY<fN=s5fo}zoX~59CG6#\|Bv9x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49852	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	679	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-w&oit=3&cp=26&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49854	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	978	OUT	GET /site-media/icons/icon_arrow-right-active.svg HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:35 UTC	344	IN	HTTP/1.1 200 OK Etag: "1db522f7062686b" Last-Modified: Thu, 19 Dec 2024 16:02:44 GMT Content-Type: image/svg+xml Content-Length: 619 Cache-Control: max-age=7524, public Expires: Wed, 01 Jan 2025 01:27:59 GMT Date: Tue, 31 Dec 2024 23:22:35 GMT X-CDN: Imperva X-Iinfo: 17-227071948-0 0CNN RT(1735687355583 284) q(1 -1 -1 -1) r(1 -1)
2024-12-31 23:22:35 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 2e 31 34 20 34 37 2e 30 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 63 66 33 64 3b 7d 2e 63 6c 73 2d 31 2c 2e 63 6c 73 2d 32 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 70 78 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 30 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 31 38 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46.14 47.07"><defs><style>.cls-1{fill:#ffcf3d;}.cls-1,.cls-2{stroke-width:0px;}.cls-2{fill:#000;}</style></defs><circle id="Ellipse_181" class="cls-1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49853	172.217.18.4	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:35 UTC	483	OUT	GET /js/th/WuArCo6uiOC32QOIiNWeSH9h2H5vf_jv_ihZ0ZQebSo.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:36 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 55054 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 31 Dec 2024 10:49:18 GMT Expires: Wed, 31 Dec 2025 10:49:18 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 45198 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-31 23:22:36 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 45 7d 29 2c 63 3d 38 31 29 3a 63 3d 3d 39 38 26 26 28 63 3d 62 26 26 62 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 39 30 3a 67 29 7d 7d 7d 63 61 74 63 68 28 58 29 7b 69 66 28 4c 3d 3d 34 36 29 74 68 72 6f 77 20 58 3b 4c 3d 3d 32 31 26 26 28 42 3d 58 2c 63 3d 31 38 29 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 4e 2e 63 61 6c 6c 28 74 68 69 73 2c 67 29 7d 2c 5a 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 71 28 33 33 2c 33 34 2c 39 39 2c 38 35 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 67 2e 65 76 61 6c 28 6e 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 22 31 22 29 29 3d 3d Data Ascii: ,createScriptURL:E}),c=81):c==98&&(c=b&&b.createPolicy?90:g)}}}catch(X){if(L==46)throw X;L==21&&(B=X,c=18)}},E=function(g){return N.call(this,g)},Z=this\|\|self;(0,eval)(function(g,n){return(n=q(33,34,99,85,"error","ad",null))&&g.eval(n.createScript("1"))==
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 65 61 6b 20 61 7d 45 3d 2d 31 7d 42 3d 38 31 7d 65 6c 73 65 20 69 66 28 42 3d 3d 32 31 29 42 3d 28 6e 7c 34 30 29 3d 3d 6e 3f 36 38 3a 31 38 3b 65 6c 73 65 7b 69 66 28 42 3d 3d 31 38 29 72 65 74 75 72 6e 20 45 3b 42 3d 3d 34 35 3f 28 74 68 69 73 2e 51 24 3d 41 2e 64 6f 63 75 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 2c 42 3d 32 31 29 3a 42 3d 3d 39 30 3f 42 3d 28 28 6e 7c 35 29 26 33 30 29 3c 36 26 26 28 6e 2b 37 26 31 31 29 3e 3d 35 3f 33 34 3a 38 31 3a 42 3d 3d 39 38 26 26 28 42 3d 28 6e 26 37 35 29 3d 3d 6e 3f 38 35 3a 39 30 29 7d 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 63 2c 4c 2c 7a 2c 67 2c 62 2c 43 2c 4e 2c 42 2c 45 2c 5a 29 7b 69 66 28 28 63 26 35 38 29 3d 3d 63 29 69 66 28 67 3d 4c 69 28 22 61 72 72 61 79 22 2c 7a 2c 22 63 61 6c 6c 22 29 3d Data Ascii: eak a}E=-1}B=81}else if(B==21)B=(n\|40)==n?68:18;else{if(B==18)return E;B==45?(this.Q$=A.document\|\|document,B=21):B==90?B=((n\|5)&30)<6&&(n+7&11)>=5?34:81:B==98&&(B=(n&75)==n?85:90)}},I=function(n,c,L,z,g,b,C,N,B,E,Z){if((c&58)==c)if(g=Li("array",z,"call")=
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 58 3d 3d 37 33 3f 28 42 2b 3d 42 3c 3c 33 2c 42 5e 3d 42 3e 3e 31 31 2c 67 3d 42 2b 28 42 3c 3c 31 35 29 3e 3e 3e 30 2c 43 3d 6e 65 77 20 4e 75 6d 62 65 72 28 67 26 28 4e 3d 31 3c 3c 4c 2c 2d 32 2a 7e 4e 2b 32 2a 7e 28 4e 7c 31 29 2b 28 4e 5e 31 29 29 29 2c 43 5b 30 5d 3d 28 67 3e 3e 3e 4c 29 25 7a 2c 5a 3d 43 2c 58 3d 36 39 29 3a 58 3d 3d 39 36 3f 58 3d 39 38 3a 58 3d 3d 34 3f 28 74 68 69 73 2e 73 72 63 3d 6e 2c 74 68 69 73 2e 6c 3d 7b 7d 2c 74 68 69 73 2e 46 66 3d 30 2c 58 3d 37 36 29 3a 58 3d 3d 32 30 3f 28 42 2b 3d 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 45 29 2c 42 2b 3d 42 3c 3c 31 30 2c 42 3d 28 62 3d 42 3e 3e 36 2c 7e 28 42 26 62 29 2d 7e 42 2d 28 7e 42 5e 62 29 2b 28 7e 42 7c 62 29 29 2c 58 3d 34 31 29 3a 58 3d 3d 31 34 3f 28 45 3d 42 3d 30 2c 58 Data Ascii: X==73?(B+=B<<3,B^=B>>11,g=B+(B<<15)>>>0,C=new Number(g&(N=1<<L,-2~N+2~(N\|1)+(N^1))),C[0]=(g>>>L)%z,Z=C,X=69):X==96?X=98:X==4?(this.src=n,this.l={},this.Ff=0,X=76):X==20?(B+=n.charCodeAt(E),B+=B<<10,B=(b=B>>6,~(B&b)-~B-(~B^b)+(~B\|b)),X=41):X==14?(E=B=0,X
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 29 3c 34 3f 34 34 3a 35 33 3a 5a 3d 3d 37 36 3f 5a 3d 28 4e 3d 6f 56 5b 62 5d 29 3f 36 37 3a 32 39 3a 5a 3d 3d 33 32 3f 28 58 3d 43 2c 5a 3d 32 31 29 3a 5a 3d 3d 38 31 3f 28 43 3d 67 28 62 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2b 2f 67 2c 22 2d 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 3d 2f 67 2c 22 22 29 2c 5a 3d 33 32 29 3a 5a 3d 3d 31 31 3f 5a 3d 32 36 3a 5a 3d 3d 32 34 3f 5a 3d 32 36 3a 5a 3d 3d 33 39 3f 28 74 68 69 73 2e 69 3d 42 2c 5a 3d 39 29 3a 5a 3d 3d 38 37 3f 28 45 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 5a 3d 31 31 29 3a 5a 3d 3d 38 34 3f 5a 3d 28 42 3d 7a 29 3f 33 39 3a 38 37 3a 5a 3d 3d 33 30 26 26 28 5a 3d 39 34 29 7d 7d 2c 47 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 63 2c Data Ascii: )<4?44:53:Z==76?Z=(N=oV[b])?67:29:Z==32?(X=C,Z=21):Z==81?(C=g(b).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,""),Z=32):Z==11?Z=26:Z==24?Z=26:Z==39?(this.i=B,Z=9):Z==87?(E=this.constructor,Z=11):Z==84?Z=(B=z)?39:87:Z==30&&(Z=94)}},Gy=function(n,c,
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 3d 6e 26 26 28 6e 2d 31 5e 36 29 3c 6e 26 26 28 67 3d 71 49 28 74 72 75 65 2c 38 2c 4c 29 2c 31 32 38 2d 28 7e 67 26 31 32 38 29 26 26 28 67 3d 28 7a 3d 28 67 7c 63 29 2d 28 67 5e 31 32 37 29 2b 28 7e 67 26 31 32 37 29 2c 62 3d 71 49 28 74 72 75 65 2c 38 2c 4c 29 3c 3c 37 2c 2d 7e 28 7a 7c 62 29 2b 28 7a 5e 62 29 2b 28 7e 7a 5e 62 29 29 29 2c 58 3d 67 29 2c 58 7d 2c 50 71 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 63 2c 4c 2c 7a 2c 67 29 7b 66 6f 72 28 7a 3d 31 36 3b 7a 21 3d 35 33 3b 29 69 66 28 7a 3d 3d 31 32 29 7a 3d 4c 3e 3e 31 26 31 3f 32 34 3a 34 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 31 36 29 7a 3d 31 32 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 34 29 74 68 69 73 2e 47 3d 74 68 69 73 2e 47 2c 74 68 69 73 2e 6e 6e 3d 74 68 69 73 2e 6e 6e 2c 7a 3d 32 34 3b 65 6c 73 Data Ascii: =n&&(n-1^6)<n&&(g=qI(true,8,L),128-(~g&128)&&(g=(z=(g\|c)-(g^127)+(~g&127),b=qI(true,8,L)<<7,-~(z\|b)+(z^b)+(~z^b))),X=g),X},Pq=function(n,c,L,z,g){for(z=16;z!=53;)if(z==12)z=L>>1&1?24:4;else if(z==16)z=12;else if(z==4)this.G=this.G,this.nn=this.nn,z=24;els
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 3f 5a 3d 28 63 2b 31 26 31 33 29 3d 3d 31 3f 33 38 3a 32 32 3a 5a 3d 3d 34 3f 5a 3d 28 63 5e 36 38 29 3c 31 30 26 26 28 28 63 5e 34 34 29 26 31 35 29 3e 3d 38 3f 39 34 3a 36 38 3a 5a 3d 3d 38 37 3f 28 42 3d 62 2e 6c 65 6e 67 74 68 2c 4e 3d 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 62 2e 73 70 6c 69 74 28 7a 29 3a 62 2c 43 3d 4c 2c 5a 3d 32 31 29 3a 5a 3d 3d 32 33 3f 5a 3d 43 3f 34 31 3a 35 30 3a 5a 3d 3d 37 3f 28 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 62 2c 5a 3d 32 33 29 3a 5a 3d 3d 38 34 3f 28 73 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 4c 3f 4c 2e 74 79 70 65 3a 22 22 29 2c 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d Data Ascii: ?Z=(c+1&13)==1?38:22:Z==4?Z=(c^68)<10&&((c^44)&15)>=8?94:68:Z==87?(B=b.length,N=typeof b==="string"?b.split(z):b,C=L,Z=21):Z==23?Z=C?41:50:Z==7?(this.relatedTarget=b,Z=23):Z==84?(sJ.call(this,L?L.type:""),this.relatedTarget=this.currentTarget=this.target=
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 68 3f 4c 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 3a 6e 75 6c 6c 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 4c 2e 74 61 72 67 65 74 7c 7c 4c 2e 73 72 63 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 7a 2c 62 3d 4c 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 2c 5a 3d 33 30 29 3a 5a 3d 3d 32 37 3f 5a 3d 67 3d 3d 22 6d 6f 75 73 65 6f 76 65 72 22 3f 33 37 3a 38 33 3a 5a 3d 3d 36 35 26 26 28 62 3d 7a 2c 62 5e 3d 62 3c 3c 31 33 2c 62 5e 3d 62 3e 3e 31 37 2c 62 5e 3d 62 3c 3c 35 2c 28 62 3d 31 2d 7e 28 62 7c 67 29 2b 28 62 7c 7e 67 29 2b 28 7e 62 7c 67 29 29 7c 7c 28 62 3d 31 29 2c 45 3d 2d 32 2a 28 4c 26 62 29 2d 7e 28 4c 26 62 29 2b 2d 32 2d 7e 28 4c 7c 62 29 2c 5a 3d 37 32 29 7d 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: h?L.changedTouches[0]:null,this.target=L.target\|\|L.srcElement,this.currentTarget=z,b=L.relatedTarget,Z=30):Z==27?Z=g=="mouseover"?37:83:Z==65&&(b=z,b^=b<<13,b^=b>>17,b^=b<<5,(b=1-~(b\|g)+(b\|~g)+(~b\|g))\|\|(b=1),E=-2*(L&b)-~(L&b)+-2-~(L\|b),Z=72)}},k=function(
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 3a 36 34 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 32 29 7b 69 66 28 28 67 2e 5a 3d 28 67 2e 54 2b 3d 28 58 3d 28 43 3d 28 45 3d 28 42 3d 28 4c 7c 7c 67 2e 4d 45 2b 2b 2c 67 2e 52 41 3e 30 26 26 67 2e 72 7a 26 26 67 2e 59 69 29 26 26 67 2e 45 73 3c 3d 31 26 26 21 67 2e 4a 26 26 21 67 2e 48 26 26 28 21 4c 7c 7c 67 2e 43 43 2d 7a 3e 31 29 26 26 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 3d 3d 30 2c 67 2e 4d 45 3d 3d 63 29 29 7c 7c 42 3f 67 2e 46 28 29 3a 67 2e 59 5f 2c 43 2d 67 2e 59 5f 29 2c 58 3e 3e 31 34 3e 30 29 2c 67 2e 49 26 26 28 67 2e 49 3d 28 5a 3d 67 2e 49 2c 4d 3d 28 67 2e 54 2b 31 3e 3e 32 29 2a 28 58 3c 3c 32 29 2c 32 2a 28 4d 7c 30 29 2d 28 5a 26 4d 29 2b 7e 4d 2d 28 7e 5a 7c 4d 29 29 29 2c 67 29 2e 54 2b 31 3e 3e 32 21 3d 30 7c 7c 67 2e 5a 2c 45 Data Ascii: :64;else if(l==2){if((g.Z=(g.T+=(X=(C=(E=(B=(L\|\|g.ME++,g.RA>0&&g.rz&&g.Yi)&&g.Es<=1&&!g.J&&!g.H&&(!L\|\|g.CC-z>1)&&document.hidden==0,g.ME==c))\|\|B?g.F():g.Y_,C-g.Y_),X>>14>0),g.I&&(g.I=(Z=g.I,M=(g.T+1>>2)(X<<2),2(M\|0)-(Z&M)+~M-(~Z\|M))),g).T+1>>2!=0\|\|g.Z,E
2024-12-31 23:22:36 UTC	1390	IN	Data Raw: 28 63 26 34 37 29 3d 3d 63 3f 35 32 3a 36 35 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 32 33 29 7a 3d 74 79 70 65 6f 66 20 4c 2c 78 3d 7a 3d 3d 6e 26 26 4c 21 3d 6e 75 6c 6c 7c 7c 7a 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 6c 3d 34 31 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 34 36 29 6c 3d 43 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 43 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3f 36 39 3a 37 32 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 35 32 29 6e 2e 63 6c 61 73 73 4c 69 73 74 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 4c 2c 66 75 6e 63 74 69 6f 6e 28 53 29 7b 74 42 28 31 36 2c 33 2c 22 20 22 2c 22 73 74 72 69 6e 67 22 2c 30 2c 22 22 2c 6e 2c 53 29 7d 29 3a 59 28 22 73 74 72 69 6e 67 22 2c 33 33 2c 6e 2c 41 72 72 61 79 2e Data Ascii: (c&47)==c?52:65;else if(l==23)z=typeof L,x=z==n&&L!=null\|\|z=="function",l=41;else if(l==46)l=C.addListener&&C.removeListener?69:72;else if(l==52)n.classList?Array.prototype.forEach.call(L,function(S){tB(16,3," ","string",0,"",n,S)}):Y("string",33,n,Array.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49859	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	994	OUT	GET /media/51tplex4/sr-73-catalina-view-improvements-1200x600.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:36 UTC	345	IN	HTTP/1.1 200 OK Etag: "1db0a21b4afbe0f" Last-Modified: Wed, 18 Sep 2024 23:23:02 GMT Content-Type: image/png Content-Length: 1306895 Cache-Control: max-age=82207, public Expires: Wed, 01 Jan 2025 22:12:43 GMT Date: Tue, 31 Dec 2024 23:22:36 GMT X-CDN: Imperva X-Iinfo: 18-261311306-0 0CNN RT(1735687355760 314) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:36 UTC	1107	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 02 58 08 06 00 00 00 72 e6 1f 1a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 24 e8 00 00 24 e8 01 82 63 05 1c 00 00 00 0f 74 45 58 74 53 6f 75 72 63 65 00 49 4c 43 45 2d 37 4d 33 43 ab df 48 00 00 00 2a 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 e6 2c 04 49 00 00 00 07 74 49 4d 45 07 e8 09 11 0e 1b 1e 8a d1 ba 37 00 00 00 18 74 45 58 74 41 75 74 68 6f 72 00 4d 49 43 48 41 45 4c 20 4b 2e 20 50 48 49 50 50 53 fb d5 c0 4c 00 00 00 1e 74 45 58 74 43 6f 70 79 72 69 67 68 74 00 4d 45 44 49 41 20 53 54 55 44 49 4f 20 44 45 53 49 47 Data Ascii: PNGIHDRXrsRGBgAMAapHYs$$ctEXtSourceILCE-7M3CH*tEXtSoftwareAdobe Photoshop 25.11 (Macintosh),ItIME7tEXtAuthorMICHAEL K. PHIPPSLtEXtCopyrightMEDIA STUDIO DESIG
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 8b 8b 2e c3 bc f4 6e 18 83 c3 2f f6 d6 ff 7b e6 66 36 e6 a0 5c cd 1f 1d 43 1c 23 35 e4 fd cf 1f 79 8e c2 77 4d 8d a3 1d 3c fe fa e0 9f 7b d0 da 22 43 c6 1e c6 7c 67 c3 77 27 43 dd 6a b1 86 bf d1 f9 49 17 6f f2 e3 89 c1 9e 7d 79 e2 41 7f c7 5e 9e 8f fe de 6b 4d ef 23 04 59 91 9c ff d1 fb 43 1f 94 8c 5c d5 c1 e0 0b 21 e1 9c 69 75 db da 53 65 48 51 22 6b 77 8a 04 30 e3 1e 5f bd 32 d0 b3 d7 a1 7f e4 cc d1 6b 29 7a d7 03 65 be 7c f9 a1 ce ce a2 94 6a 67 ed d3 9a 13 b6 f7 2e d4 67 08 4a 72 ac 7f 57 1b c4 7b e0 fc fc f3 53 c3 5f f6 2e f6 8c 9e 5b b0 f8 04 73 f5 5d 2e e3 42 d3 43 57 d7 cb 83 1c 3e e3 af ff e0 fd fe 30 6f 8f 44 74 4d c4 c1 0d ce fd c2 97 58 ad dd cf 0b 02 f6 7c 43 97 80 bf 7e 60 c3 3b 93 57 ce e3 84 9c e7 76 f0 b7 eb 60 fb 59 05 dd b4 77 bf 64 f8 Data Ascii: .n/{f6\C#5ywM<{"C\|gw'CjIo}yA^kM#YC\!iuSeHQ"kw0_2k)ze\|jg.gJrW{S_.[s].BCW>0oDtMX\|C~`;Wv`Ywd
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: ec 3e 3a b4 71 a5 5e 98 c5 fa 78 c2 17 75 cf 3b f6 1d 1e 9d 4e b5 13 3c 04 a6 b5 e5 97 78 ce 5b 7f f8 f7 4c 6a 80 28 58 9b 06 67 a2 3c 3b ba c5 f2 4b ee 55 82 fd b8 7a dc 99 2d 76 46 a7 a6 49 1d 98 be f1 07 b4 1a 6a 12 38 47 a9 a8 22 ba 27 f6 4d 6d c9 75 f2 9e 31 6b 68 d7 c8 43 2c ac 91 be 67 13 ac de 66 0c 1b 9b ba 0c 1d 32 78 6e 64 ea de 44 bc f3 b0 ba a5 8b 8f 2f 31 70 cb 7d e3 fd 18 f5 ef 5e 1b 89 e5 92 1a e7 a3 ea 22 b2 a6 f8 ff c5 17 07 88 0d d8 58 24 9a cf db b7 fb cb 16 5f 12 56 bb 7e 6f 9e 44 4d cc ef fe c8 85 f7 d1 70 be ae fe 0d 7b fd 40 8c ba 7b 13 32 8e 01 42 d5 d9 a3 f7 3c f8 f4 fb ec f1 91 9b ad 75 46 83 d2 f5 81 d9 5f c4 38 c2 66 18 83 76 3e bb f5 ad d7 d7 1f d4 c4 55 bf f8 d4 d4 24 c5 30 81 67 af 8c 17 1e f3 ce b5 7b 13 52 05 19 9b 5c dc Data Ascii: >:q^xu;N<x[Lj(Xg<;KUz-vFIj8G"'Mmu1khC,gf2xndD/1p}^"X$_V~oDMp{@{2B<uF_8fv>U$0g{R\
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: fd 45 51 46 41 6f c2 27 e7 7b e6 ea 2c 97 69 71 b9 05 f4 a9 0c 42 c2 15 35 ec 5c 9e cd 33 4f ee f0 c6 ec dc f0 ec 3f f9 63 4f 0d 7e 8e 55 cf 1c e6 ad 17 cc ee b9 e5 f6 d9 4d 8f 16 f2 c3 94 58 93 fe 50 f2 c1 eb ff 43 72 76 7a 06 ba a7 c5 74 80 f1 6c 7d 6a 3e e7 44 76 ee c8 73 6e 3e ea 21 d6 07 af 7e 35 fb 45 a3 46 ed fa 2a b6 86 c6 60 6d 9b 7d ed 39 62 2d ad 53 db d5 e2 20 16 67 e5 02 5e 15 60 19 0a 99 7b 5e f9 c2 f2 29 ad 23 23 7b 64 f5 f0 16 d9 58 3e 9f 1c 8a d1 12 8f fc 48 e3 a5 02 f8 4e e2 ed 53 a8 b0 39 13 df 7a 58 c7 f6 5d 04 ba d3 83 01 8b ff f0 6f ad c7 f6 2c bf b3 ae ad f6 e3 5e af f8 ce 43 4d fa c3 d9 7a 9f 3b f8 fe 82 15 87 12 b4 73 2c ae 1f 88 17 31 4f f6 b9 bc 39 44 29 a5 61 4e 43 8c fe d6 1f f9 3d bb f1 ef eb 97 5f 26 62 97 b0 16 eb 99 c3 fe Data Ascii: EQFAo'{,iqB5\3O?cO~UMXPCrvztl}j>Dvsn>!~5EF*`m}9b-S g^`{^)##{dX>HNS9zX]o,^CMz;s,1O9D)aNC=_&b
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 4f 17 e4 d1 fc a8 dd 7b 7a ff 94 ee f5 be 7b d9 3e 13 6b 75 dd f3 e6 72 bf 75 46 4f ac 3b 9f f0 f6 16 a7 c9 d7 a7 eb 39 64 be c4 4e 5c ff 69 eb c3 74 6a ae cc f8 18 03 9e cb 62 10 7b b5 0a 64 e2 72 b9 79 6f f6 9e d3 c4 36 58 ed cb d5 33 23 5b 98 f8 e6 aa ba 1d 68 cc d4 9a 9a 94 77 6d fe 90 f1 88 9d 11 fe df 1b 08 43 2e 71 a2 85 fe f0 82 b5 06 9a 40 be c5 2c e4 a3 be 40 17 fb b3 f5 96 f3 90 64 18 85 07 aa a6 a1 b6 38 69 3a ae 3d 58 e0 c3 33 a2 5b 15 92 df 40 9f a6 0e 4a 2b b7 94 d8 bf 1b 8c 39 f4 0b 51 9d f9 e3 1b c7 22 c2 f3 10 56 40 5f de 4c c4 e3 8d 24 3e d8 ad 51 58 37 07 32 26 3e 3d a0 bd f1 6b 13 c3 41 22 8e 6b 03 db 17 79 c2 34 c6 8e b1 2e d1 67 d6 36 b8 b9 c4 e4 c7 17 4e ac e8 53 d3 58 f3 33 ed 6a 4d ec 1b f3 61 66 ed 9b ee 06 6e 9d 8c 58 1e 9f ab Data Ascii: O{z{>kuruFO;9dN\itjb{dryo6X3#[hwmC.q@,@d8i:=X3[@J+9Q"V@_L$>QX72&>=kA"ky4.g6NSX3jMafnX
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: d0 3d 58 c4 91 cf b8 15 7f df 06 12 63 1b e2 b7 a3 07 c8 30 ae 15 4b 70 4f f3 62 7f 72 60 c7 84 ee 36 08 96 50 5e 8a 06 09 f5 c5 99 68 68 e9 17 60 46 7e a9 57 14 e2 f4 a7 b1 6e e0 d1 c9 56 fe e1 42 60 d8 03 1f 82 e0 9a ab ba ff 56 dc dd 34 fa e1 03 7b fa f0 88 9d 5e 06 b9 ed b9 d8 2e b8 6b d4 96 2a 5e ed 5d d9 ef 83 5b 49 1d 00 18 c6 fa ae 5e cf 7a d7 18 ba 5c c7 b3 77 c4 16 1a 0f 6c da 0f b3 37 1c c9 8b ad fb 46 cd 5d af f5 f5 b0 f9 f3 f3 5b 2c e9 fc c0 55 ae 7f 58 63 f3 cb 07 d5 e8 14 82 4f df fa 30 f6 52 32 1e b5 7e 63 45 1d b6 b5 41 58 f6 c2 85 44 7c cf 67 d7 61 17 5f 5d 21 f4 4c 95 66 cb 40 1f 5e ff d3 7d 72 4a d8 4e 77 31 11 1f cf 1a 3f fb f5 95 0f 93 fd 82 5d 65 bb 7e a8 c6 da f4 89 70 35 99 ff 68 3c 13 b6 87 45 b9 bc 7f e0 6b f7 2a b6 a4 cc c3 ee Data Ascii: =Xc0KpObr`6P^hh`F~WnVB`V4{^.k^][I^z\wl7F][,UXcO0R2~cEAXD\|ga_]!Lf@^}rJNw1?]e~p5h<Ek
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 3a 9e 5f 70 bc e9 d2 67 be f1 fa d5 57 2a d7 9e f5 0d ed 08 1f 28 0f 48 f7 c9 bd 59 3f 03 be 87 86 eb 6a 35 e1 16 fb 7c d1 9b 7f e2 31 de 4f 40 f1 45 ae 5b eb cc 50 9d 8b 71 ea 83 aa 75 8c 0e 9b a1 96 98 61 74 95 0c e8 6c ec 0c ea d3 5e f5 8f c2 a3 6a 6a ea cd e0 59 e0 8b e1 a0 1a 01 46 17 fd af 96 cd d8 9f ae ee 27 ea 7f 7b f1 47 5e ee 45 14 0c 3a f9 31 26 57 a5 f8 84 e4 ad 21 e7 4e 81 0b 63 49 7e a9 e5 f5 be 85 4b e9 13 bd 8a e8 9e f1 eb de 34 7e d7 d6 20 de 43 61 95 8c f1 99 1b 3c 63 7b a8 3f 48 04 ec a5 ae 86 3e 55 ea 73 24 52 72 a0 c3 8a d7 3d 5f 3e 27 3f c2 d5 44 0e f6 75 f1 21 6b 4b 0c 74 f6 02 7d f8 c8 a8 2e ba a4 1f 33 bd 2f ff ac fa 67 62 ec 99 c8 9a ef 99 f0 7b 4e 22 61 98 fc e2 10 05 3e 33 bf 8b 07 b9 22 f8 d5 5f 8f 92 e7 02 0d 6f 04 93 dc 38 Data Ascii: :_pgW*(HY?j5\|1O@E[Pquatl^jjYF'{G^E:1&W!NcI~K4~ Ca<c{?H>Us$Rr=_>'?Du!kKt}.3/gb{N"a>3"_o8
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 81 e0 59 87 c2 66 a8 e8 5e 21 ae c1 5d 6d b1 b4 e3 77 76 82 34 e4 e2 4a c5 b2 c7 fd 27 c9 f7 bc 44 49 5d 1a 33 b7 27 da 6e 2d 6a 40 46 c6 80 4c 38 c5 bf f5 eb c8 1c c8 41 64 fa fe 2d 2e e7 63 3f 2e 7f ea 56 03 ec 33 84 60 a9 57 e3 47 1f ea fd bf 17 d9 99 5c 2f cc d6 d7 a8 67 66 45 5d 99 01 97 f0 b7 ec 09 b2 f0 b7 06 8d 07 92 44 45 ee 1b 75 55 ca de cf fa 41 cf 10 8e be 21 27 86 71 32 82 fb f5 39 23 7b d1 fa ea d3 1a f0 b9 38 88 b1 2f 0f 36 d7 e2 1e 6a 15 d9 78 8d e2 b9 f1 9c 2d c6 f2 80 f5 0d db 37 be 31 99 bd 64 0c f7 ed 03 90 d7 f7 10 af 69 e7 5f 63 a6 cd ef 4c 40 cc 56 d6 3e 10 ae 97 e8 b2 8a b2 f3 a7 de f5 50 1e 86 cb d5 bd 3e 5d 6c f3 a5 8e bf c5 75 fe 62 8c c1 7c f6 d1 eb 0f fe e3 6f 0d 52 66 58 dd b0 b3 e6 08 60 21 6a 95 3f 3f 95 19 38 b0 57 b9 8a Data Ascii: Yf^!]mwv4J'DI]3'n-j@FL8Ad-.c?.V3`WG\/gfE]DEuUA!'q29#{8/6jx-71di_cL@V>P>]lub\|oRfX`!j??8W
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: a0 eb 6b 54 e3 af 07 a8 c3 fb e5 0a de 8b 75 91 72 90 c7 9f 0f 4a 62 53 ef fd 81 14 fa d3 79 05 f4 21 94 ad e7 a2 09 84 b6 a6 b7 8e 57 5f cd 1f 0f c9 67 b3 32 58 7e a9 77 3d d1 2d bc b1 c9 f7 db f9 d2 62 5d 4e 64 55 38 ae 4f 11 ad c1 67 c2 ec d2 f9 6c ad d6 79 98 81 16 47 dd 61 0c 30 bd 21 d8 03 6a 86 2f a6 6f f4 23 be fe 72 e1 75 39 cf a0 d8 fb ba 8e 8e 58 f8 7c fc 9f 9e 09 7f 03 e8 e7 79 e2 43 81 79 88 15 fd c5 bf 7a 9c d9 31 74 bc cf 0b 1e a0 39 b0 f1 ba 4a 0d f8 41 60 41 b7 66 0d dc 0f e4 90 ff fd ad 03 07 93 39 8a ef 19 1f fd f5 7b 73 1c c4 08 3b 3a ee 31 7c 76 df db 8f 8f 6f b8 3e 1f 27 42 d6 09 22 43 20 f6 ac 3b d4 a8 80 19 eb 87 35 c3 47 05 f4 53 5b ef 35 98 ac c7 fa 2b ff e2 f4 8a bf 5f 22 ec 35 c4 ff 11 02 38 f4 17 58 5f 78 3d 6c 87 fa c8 dd db Data Ascii: kTurJbSy!W_g2X~w=-b]NdU8OglyGa0!j/o#ru9X\|yCyz1t9JA`Af9{s;:1\|vo>'B"C ;5GS[5+_"58X_x=l
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 8c 52 67 50 ad 75 82 04 b0 75 9f 1d f4 79 4a 42 b0 ee 9c 72 de 98 3f 48 f3 d9 03 b3 67 ba 08 bb 37 b4 dd 59 8e 8d 7e eb 0b 16 dd c9 41 5f ae c5 e8 f3 1c 64 71 3d 23 f8 61 8f 2e fe 9e 7f 62 f2 07 a6 b8 53 a3 98 d8 f6 fa 71 79 e0 8b 51 ab 8c cd 33 85 1e 79 f6 d7 5e f6 e6 1f d9 c3 ec e7 c5 25 f7 ad d5 fe a8 63 df 98 eb 66 5c 74 ff dc fe 93 63 76 f6 ab 7f 6b 27 72 70 a4 aa 13 b1 32 9d 2f 3f c6 17 61 9c 3e 0b c3 aa c3 c6 79 c6 44 6f 5a 47 f1 80 b0 fc 66 cf 9d 36 fa 92 bc aa a9 91 78 e1 21 72 44 78 5f 5e cd b7 e6 c5 50 a7 a8 e5 f6 8f 5e d4 a7 66 27 fa 27 11 97 b3 00 ad 0f ac d3 f5 e0 9f 38 71 b8 3c d6 26 f7 d5 85 0b d6 6a 8c 4b 2d 66 2e 6a bd 29 5f 5d 9f 3d b0 ac 33 3c 6b 8b 93 31 0a d6 5f 5c 6c a4 30 0d 56 62 5f 1d b1 f7 fd 3d 45 e2 0d 30 9e ec 25 5a ea d9 7a Data Ascii: RgPuuyJBr?Hg7Y~A_dq=#a.bSqyQ3y^%cf\tcvk'rp2/?a>yDoZGf6x!rDx_^P^f''8q<&jK-f.j)_]=3<k1_\l0Vb_=E0%Zz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49857	142.250.186.142	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:36 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 31 Dec 2024 23:22:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49860	142.250.185.162	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	502	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-12-31 23:22:36 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Tue, 31 Dec 2024 23:22:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:36 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 57 41 62 4f 74 52 51 42 42 4b 45 74 6c 64 4f 55 6d 4e 36 76 56 46 2d 31 45 4d 75 72 4a 55 4c 6d 36 70 2d 6e 6a 59 66 46 38 36 6f 39 4a 76 51 59 6b 50 36 45 50 6f 68 53 64 74 45 58 46 76 52 7a 76 47 53 4d 70 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpWAbOtRQBBKEtldOUmN6vVF-1EMurJULm6p-njYfF86o9JvQYkP6EPohSdtEXFvRzvGSMp","type":4}
2024-12-31 23:22:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49861	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	975	OUT	GET /media/lhsdgn3y/image-mobile-app-intro.png HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:36 UTC	344	IN	HTTP/1.1 200 OK Etag: "1dae861cec034b2" Last-Modified: Wed, 07 Aug 2024 00:36:14 GMT Content-Type: image/png Content-Length: 993202 Cache-Control: max-age=62271, public Expires: Wed, 01 Jan 2025 16:40:27 GMT Date: Tue, 31 Dec 2024 23:22:36 GMT X-CDN: Imperva X-Iinfo: 18-261311389-0 0CNN RT(1735687356330 294) q(0 -1 -1 -1) r(0 -1)
2024-12-31 23:22:36 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 03 02 08 06 00 00 00 fa 7c ec 00 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec bd db ae 25 4b b2 25 b4 56 ae 95 59 17 a4 7e e6 13 10 97 be 20 1e 90 ba 81 6e 21 e0 23 78 e2 09 89 37 24 24 84 74 24 90 50 f7 0b 2f 08 f1 83 f5 09 9c da 3b 77 e6 ba 25 36 c6 b0 e1 3e dc c3 67 5e f6 a9 53 9c a2 6b ee bd 72 c6 8c f0 f0 70 37 37 37 b3 61 66 ee 71 ff 5f ff 27 ff e8 cb cb cb cb dd c3 c3 c3 dd bb 77 ef ee be 7c 79 e3 5f 7e ee ef ef ef ee eb c4 97 b7 2f 77 ef ea fb 5d fd c2 b9 77 5f ee ee 7e f3 e1 43 5d c0 39 9d 7f 7b 7b ab 7a be a0 c4 5d 15 62 39 7c fc bd d4 5b 3f 50 1e 45 1f 1e 1e ef 5e 5f 5f eb 19 6f 77 6f ef 74 0f 3e 5f be 54 Data Ascii: PNGIHDR\|sRGBsBIT\|d IDATx^%K%VY~ n!#x7$$t$P/;w%6>g^Skrp777afq_'w\|y_~/w]w_~C]9{{z]b9\|[?PE^__owot>_T
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: da d7 ab 0c 60 55 5d 1f f4 08 3f 34 42 9b 36 f9 2c c8 15 b6 61 fd 83 7d 47 1d da b2 c2 76 38 4a e3 d8 e7 fd 6c cf d9 fc ed fe 5a 76 f1 1b 3d de 9e 05 c5 bf 9f d3 6f c9 91 ac 67 d8 45 2d 0b 2d 13 41 0b 1f fb 79 8f 55 af e5 9e af 5b 3f 58 87 92 34 55 d7 e3 a3 6c 71 7f d4 1f 0d 89 65 ce b0 63 df cd 72 2e 9f ba c1 fc bc eb 8c 21 5f d0 25 ea f7 96 25 90 39 68 7f 2b 61 cb 90 1c 7f 1c bb 5e eb 93 bd bf c6 2b af 65 ff e3 ef f9 f9 e5 ee f9 e9 a5 8e 3f df 3d 97 4c c6 1f f0 0b be 3f 7f fe c4 f9 c5 32 cf af b4 ab 9e ea fb f3 cb b3 78 b0 da f8 5c f4 78 7a 7a 5e 30 10 ce 0b f7 78 8a ef fa a7 e7 72 d5 31 75 20 0a 8b 9f f2 63 0c b3 9c bc f1 e3 28 9f ae d3 4f bc 72 9e ae e7 9a 7b 7e 64 db 80 2d 68 30 fe e0 27 eb b8 29 4f 7f b0 ce 3f 69 f1 2f 5f fe 70 ff 5f fe b3 7f e7 cb Data Ascii: `U]?4B6,a}Gv8JlZv=ogE--AyU[?X4Ulqecr.!_%%9h+a^+e?=L?2x\xzz^0xr1u c(Or{~d-h0')O?i/_p_
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 78 03 74 e1 73 32 96 a4 9c f0 27 ca 6e c9 27 5f 65 9d 4e ec 18 75 f3 19 d2 70 32 40 eb d7 63 1b 8c f7 15 d9 c8 36 a6 f1 e8 a8 b8 00 7a 01 f3 b2 fd 10 81 42 f4 dc 51 f4 bb 02 f8 5f 03 e8 04 e1 c5 71 04 eb 75 23 8d 68 44 c9 01 dc a1 e8 8b ce 1f de 63 96 c3 98 6f a0 5e e7 39 5d ec 59 0e 50 74 8f c8 1c 94 4e 47 55 6c 00 40 21 f0 49 d5 1d 19 fb d5 e6 7a 36 bd c8 a0 5f 47 91 11 d5 43 36 88 d0 04 2e 88 be b8 8f c0 80 8a 67 02 70 d1 c6 e0 da 7c d5 9e 63 4f 03 dc 83 67 77 94 5e a4 9e 9e 62 1c 33 83 a6 9e 91 80 dd e3 cf e7 13 00 2a 63 a8 2d 5f b6 6f fc 1e 46 c2 94 a3 e2 65 00 0e 09 84 07 79 35 9a 6e 1a 75 0b 1e c8 41 d2 b3 3d c2 06 ed 66 24 02 6d ba 07 d6 e8 e2 72 3d 1c 26 e2 01 45 f5 f8 a4 18 ab d3 71 02 94 99 55 35 a3 b1 e3 9e 88 a0 03 74 9c 00 3a b3 30 40 ab 88 Data Ascii: xts2'n'_eNup2@c6zBQ_qu#hDco^9]YPtNGUl@!Iz6_GC6.gp\|cOgw^b3*c-_oFey5nuA=f$mr=&EqU5t:0@
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 13 c1 ea 5c 66 16 ba 8e b7 b7 e9 10 3b d2 39 6c 86 77 c5 bb 39 d7 49 5f 48 0c fa 24 26 b8 64 fb bb e0 22 0f 5a 46 11 67 b4 88 81 a8 79 89 79 bd b7 e1 32 b7 03 a0 0f 40 f8 05 cb 6f e6 f2 97 1c 3f 94 d9 01 e3 49 5e 9d 52 dc df 45 36 85 eb 91 bd 3b d3 f7 2d 47 b0 c4 8b d7 a8 57 a1 ef d5 c1 19 49 d6 39 02 ed e6 9b d5 06 5c e9 37 fa 56 d9 a1 96 4f d3 01 01 f9 a1 c0 80 b3 72 87 ec de 09 58 04 46 db ac 53 5c 3e e7 5b de 92 3a c1 fc 47 a7 d3 2d 9e 6a dd c9 7e 6d 4b b1 ec 40 70 86 14 83 02 1b 40 37 38 9f df 95 f6 4e 80 0e b0 ae 25 46 f8 7e c2 5f 01 78 c8 f2 cf 05 d2 31 17 18 41 07 cd 01 d0 f1 fc e6 2f 8d c3 d4 61 ea d3 39 c5 1d f6 c5 ae a7 7e 24 d2 7d a4 23 ec a2 03 bd 7e a8 de 6e 7e b6 ad 93 a0 6f 8e c5 7e 21 e7 e4 49 de 2c 72 2b ec 83 ef 7e c0 9f aa a0 53 dc c1 Data Ascii: \f;9lw9I_H$&d"ZFgyy2@o?I^RE6;-GWI9\7VOrXFS\>[:G-j~mK@p@78N%F~_x1A/a9~$}#~n~o~!I,r+~S
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 77 aa 52 7b 66 e7 d8 cf f4 63 dc 9a 00 1d 5b 8b e9 19 1e 4b 03 f4 e6 bc 81 d4 09 8d 58 d6 9e f2 56 a7 3d 42 1a 38 a5 60 cd 28 7d ea 56 f1 c0 04 e8 53 d1 88 0a 79 fd b4 b9 c6 4e 2b ff 86 b3 62 08 44 03 34 ce 27 3d cf 73 0a bf 00 9e c7 c3 6c ec b9 22 02 f4 2a c3 e8 38 c6 1d 9e 61 a4 36 57 ea 28 d6 99 c3 2e 6e 70 8e 32 73 0d 7a cd d7 32 1e 3f d4 9a 73 44 da bd 51 1c e6 b5 52 dc 55 ef 63 03 7e ae 73 e7 f4 68 7a f6 e6 71 1e eb d1 9c 2a e4 bd 12 bc e9 a4 e6 9c e7 14 11 9c ba 53 7f 50 50 f8 38 6d 9d e0 da ba 84 51 f3 e6 11 c8 9d e6 73 de 57 7f 4a 95 e7 54 11 b0 c7 39 89 1a a5 76 81 cf 1a d0 f3 61 dc 88 06 4a d1 6b 8d b5 57 05 c1 3c da 33 c8 0c e0 22 9e 48 df 22 eb 43 35 2d 53 ec cf 24 6f 41 36 50 26 e2 f9 92 93 e8 27 f9 16 ff b5 2c a4 81 d3 32 05 e7 28 fb 9a 16 Data Ascii: wR{fc[KXV=B8`(}VSyN+bD4'=sl"8a6W(.np2sz2?sDQRUc~shzqSPP8mQsWJT9vaJkW<3"H"C5-S$oA6P&',2(
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: a3 4c be b9 63 97 fb 19 c5 4e 5e d9 9f ef df d6 25 ab c1 7c 06 4a 8e c8 8f 88 14 d7 c0 e8 23 79 2c e3 77 c8 d0 d4 b1 45 c7 bd ad ca fe 9f 4e 66 cb bd 2f 41 f3 01 a6 c9 01 e2 07 da 14 c5 57 5e 23 2e 50 2e 80 ee 5d dc cd 23 f9 cc 3d 1a 2e bb 45 f3 8b c7 bd 93 bb 78 56 cf 18 72 34 76 79 4f 80 af de af 60 cf f7 bb 3f eb 9a d2 76 9c c5 dc a0 52 ee 79 c2 37 3d 70 99 07 c0 c0 9c a3 83 e7 6f 00 4b f3 73 ea 8d dd 7e f0 58 9d 74 cb 65 6c 7a 4c 73 9e b8 0c e8 65 5e 75 1f ed 30 92 31 3f 75 ac e2 05 eb 18 e7 7c 4d be b3 f3 dc fc 94 bc 95 f7 9c da bf df 93 e5 b3 df 29 13 f7 3a a5 f3 f5 59 e6 78 44 db 67 9b 40 a0 59 c3 68 53 80 b7 b8 ca f1 35 ad 5c f6 b4 07 19 97 f4 85 a3 c2 65 13 a0 ef 73 75 ef 2b e7 34 9b 27 27 83 81 08 a7 15 f8 0b 5f 00 a9 d1 fe b4 7f bd 68 6c b7 4d Data Ascii: LcN^%\|J#y,wENf/AW^#.P.]#=.ExVr4vyO`?vRy7=poKs~XtelzLse^u01?u\|M):YxDg@YhS5\esu+4''_hlM
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: f4 76 0b b0 9d 26 29 08 f2 1a ca a7 37 6c 57 48 8b 20 6b 20 be 4f 60 df b3 1b 08 30 ba 15 75 97 c1 05 66 ce 09 36 cb 1b 5c cd 08 3a 52 a7 2e cf e9 86 ef 4a fc 34 b8 8c a8 f5 9a 69 78 b6 84 b5 60 58 a7 81 23 03 c0 1f f5 43 06 01 be f1 2a 16 ef e4 ee 0d 47 6e 01 f4 bb f2 0e d3 83 d6 80 84 51 ba 02 69 5c 93 46 34 dc 26 62 0b 77 1b 82 27 85 63 1a 5d 14 fa 57 18 3d 15 84 eb 4c e5 ef 08 3a 53 f6 49 0c 80 15 a7 6c b6 40 ad 3e d8 09 30 05 e4 8c b0 27 f8 fe 1a 40 27 ff 36 90 57 c7 d5 7f 47 d0 f9 4a 71 69 65 3e 26 a3 fb 3c 45 9d 25 75 28 23 d5 7c 21 80 65 d3 14 73 c3 06 f8 00 e8 e0 37 96 d1 33 f9 d9 8c 7d 9f e4 3b cf db 76 a7 e3 a0 0d c2 8c 25 9a 3f b0 c3 3a ab da 0c 09 fd ec d7 78 39 82 5e 29 ee 48 37 c5 6b d3 b0 fa ff 3d 76 65 af 57 af 61 33 6d a5 b8 63 af 08 1c Data Ascii: v&)7lWH k O`0uf6\:R.J4ix`X#C*GnQi\F4&bw'c]W=L:SIl@>0'@'6WGJqie>&<E%u(#\|!es73};v%?:x9^)H7k=veWa3mc
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 1a 9d 8a ea 8a 6f 04 8c 41 73 eb bc 4c 63 77 3b 76 c3 d8 6d 4d b9 b8 cb e9 93 71 b1 af 5f 4f 43 18 cf 4a bd 36 79 4d ad c0 9a 4e 18 be 80 d2 52 f3 2d b5 39 6f fa b5 72 aa 84 e5 e9 2c 73 c6 50 d4 ed 8d 1a 2c 07 d9 97 76 2e a5 1e 99 76 01 78 42 b2 28 37 f6 f4 f5 e1 d4 69 3e 35 6d a4 0f e6 be 0c 2b 80 3f a7 b8 0f fe 6b 50 ef 31 ba da 28 d3 6e 99 73 4a fc 94 7c 84 3e 62 43 47 f0 31 41 8d 0a 33 c8 21 67 9a e4 a1 37 2f cb 4d cc 12 1c f8 19 f9 7d e2 d1 5b d7 97 71 ed 1b 7d ee f2 9c 1e 2b cf 11 ef 8f c0 31 65 1a 53 2f 67 a0 20 9c d9 51 e6 25 f3 d1 fe cc 53 8a bb 6d 09 83 13 df 7b 0b e0 9e fa ec f6 7b ee ef 36 4b ce 4d 88 d2 e4 0f d2 eb f5 bc f4 52 36 d8 2a b7 0b 02 5d 9a 20 31 b5 ea ba 5d 1e cc 9b 60 73 5a f6 52 f2 6b ce b5 8d 7c 6b cc f7 87 ca 66 22 fb c8 ee a0 Data Ascii: oAsLcw;vmMq_OCJ6yMNR-9or,sP,v.vxB(7i>5m+?kP1(nsJ\|>bCG1A3!g7/M}[q}+1eS/g Q%Sm{{6KMR6*] 1]`sZRk\|kf"
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 5b 02 c9 53 17 d3 8a 1b 4a d4 fd 1f 2a 0a 93 6b f0 3c d1 5f 9c 7e 4f 6f 91 14 ef 5d 6d 72 70 99 64 00 74 ed 5d e3 bd 6d 78 bc 2f c3 4b 3b 27 6a 0d ab 64 4d 87 c9 28 08 dd 9a 9a 92 db 3b 19 c9 30 21 68 ce 4a 06 65 00 24 65 dc 9c 68 6a 8a 9c 84 67 1a ed 16 22 4a 93 9c e2 b8 12 5d d4 5f 44 fe 68 40 d9 96 32 d8 9d ca cf 3b 55 a7 11 e7 e3 dd e0 30 0d b3 0d bb e0 f5 bd 06 4e bb 81 72 91 ee a0 6f 93 d4 a4 c5 77 7a 28 7d 0f ea 7a 62 28 d3 69 fe ba d1 3b 10 13 58 2b d4 29 7d 18 79 e0 73 58 04 0e 65 84 4b b0 72 2c da 18 f7 de 09 63 94 69 6c ab 3d 5c 83 0d 9e a1 42 51 44 5c af df 02 68 ef 48 2c c4 1f b3 31 1a 44 8e f7 81 3a fa 0e ef e5 4a 85 09 14 34 2e 39 b7 a0 ab ad 7c 06 2d 59 6c ae f7 53 db f1 7c 2d 9e 76 39 1b d1 28 ce 73 f8 ee 2c 96 bb 77 cf 04 d3 04 d7 15 35 Data Ascii: [SJ*k<_~Oo]mrpdt]mx/K;'jdM(;0!hJe$ehjg"J]_Dh@2;U0Nrowz(}zb(i;X+)}ysXeKr,cil=\BQD\hH,1D:J4.9\|-YlS\|-v9(s,w5
2024-12-31 23:22:36 UTC	1452	IN	Data Raw: 26 77 41 47 5b 64 1c 09 72 88 ae fb e7 b5 68 b3 cb d2 e4 c3 e4 31 1b 09 2b c8 d0 78 b2 3d 11 31 a4 b3 aa 3f 13 d0 88 e6 da e0 4d 91 77 d5 25 d5 9e 91 44 9c b7 c3 d6 75 f3 de 06 e8 6e 17 41 7d 45 ae 12 dc ab 3c ee 57 1a bb 69 a7 fa f4 cc 6c 6b f6 77 31 c0 bb 3f 0b b0 83 74 6f 30 71 01 7c 4d 03 8e 5e 00 b4 04 3e 38 e6 4b 6b c2 38 e6 31 c7 3d 1c 67 4d bb a4 b9 65 1a b2 71 fc ee 5c 14 33 28 c7 eb 74 f8 6c d0 16 ba 07 f2 ac fb 8f 65 5d 36 a8 dd 1e 4b 09 3b 6e 4c 27 f1 ad 65 8e 1a a2 76 cc e3 f9 6a 35 5c 93 fc c2 b2 95 34 6c 4d 07 00 74 03 73 eb 89 fc f6 58 a6 31 ea 67 ba 4d 06 8a a4 9f d7 8c 7a 82 35 bd bb 75 a3 9d 39 06 a8 e7 f2 0e 71 ca 1e 81 17 bf 1f 9a 59 18 9d ed 84 6f 38 e2 41 0e be a6 0d 54 0d de 41 9b ec 6c 80 ac 03 40 37 c8 73 9f 92 cf fc f6 87 bc b6 Data Ascii: &wAG[drh1+x=1?Mw%DunA}E<Wilkw1?to0q\|M^>8Kk81=gMeq\3(tle]6K;nL'evj5\4lMtsX1gMz5u9qYo8ATAl@7s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49862	45.60.150.166	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	986	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.36632120898314513 HTTP/1.1 Host: thetollroads.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
2024-12-31 23:22:36 UTC	122	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1
2024-12-31 23:22:36 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49864	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	682	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-wfmo&oit=3&cp=29&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:37 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:22:36 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-JbOAZLrRjBogzaU4ESNuHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:22:37 UTC	124	IN	Data Raw: 31 62 62 0d 0a 29 5d 7d 27 0a 5b 22 68 74 74 70 73 3a 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 77 66 6d 6f 22 2c 5b 22 68 74 74 70 73 20 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 77 66 6d 6f 6e 6c 69 6e 65 22 2c 22 68 74 74 70 73 20 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 77 66 6d 6f 2e 63 6f 6d 22 5d 2c 5b 22 22 2c 22 22 Data Ascii: 1bb)]}'["https://thetollroads.com-wfmo",["https //thetollroads.com-wfmonline","https //thetollroads.com-wfmo.com"],["",""
2024-12-31 23:22:37 UTC	326	IN	Data Raw: 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 77 66 6d 6f 6e 6c 69 6e 65 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 2f 2f 74 68 65 74 6f 6c 6c 72 6f 61 64 73 2e 63 6f 6d 2d 77 66 6d 6f 2e 63 6f 6d 22 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 31 36 30 5d 2c 5b 31 36 30 5d 5d 2c Data Ascii: ],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"//thetollroads.com-wfmonline"},{"mp":"\u2026 ","t":"//thetollroads.com-wfmo.com"}],"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[160],[160]],
2024-12-31 23:22:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49867	142.250.186.142	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:37 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 31 Dec 2024 23:22:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49866	142.250.186.142	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:36 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:37 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 31 Dec 2024 23:22:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49870	142.250.186.142	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:22:37 UTC	780	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 549 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:22:37 UTC	549	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 35 36 38 37 33 35 34 37 36 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"41",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1735687354761",null,null,null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49885	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:23:25 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:23:25 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:23:25 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CkKFh4bQx1rahkoRN47-3w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:23:25 UTC	124	IN	Data Raw: 37 37 34 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 65 6e 6e 65 73 73 65 65 20 76 6f 6c 75 6e 74 65 65 72 73 20 66 6f 6f 74 62 61 6c 6c 22 2c 22 6d 65 78 69 63 6f 20 74 65 71 75 69 6c 61 20 6c 61 6b 65 22 2c 22 69 72 73 20 73 74 69 6d 75 6c 75 73 20 63 68 65 63 6b 73 22 2c 22 6e 79 74 20 73 74 72 61 6e 64 73 20 64 65 63 65 6d 62 65 72 20 33 31 22 2c 22 77 65 61 74 68 65 Data Ascii: 774)]}'["",["tennessee volunteers football","mexico tequila lake","irs stimulus checks","nyt strands december 31","weathe
2024-12-31 23:23:25 UTC	1390	IN	Data Raw: 72 20 66 6f 72 65 63 61 73 74 20 73 6e 6f 77 20 73 74 6f 72 6d 22 2c 22 61 75 72 6f 72 61 20 62 6f 72 65 61 6c 69 73 20 6e 6f 72 74 68 65 72 6e 20 6c 69 67 68 74 73 20 66 6f 72 65 63 61 73 74 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 73 65 22 2c 22 6d 6c 62 20 79 61 6e 6b 65 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 Data Ascii: r forecast snow storm","aurora borealis northern lights forecast","apple iphone se","mlb yankees"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestd
2024-12-31 23:23:25 UTC	401	IN	Data Raw: 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 6b 76 62 53 38 77 59 33 46 30 4e 44 45 53 49 6b 35 6c 64 79 42 5a 62 33 4a 72 49 46 6c 68 62 6d 74 6c 5a 58 4d 67 34 6f 43 55 49 45 4a 68 63 32 56 69 59 57 78 73 49 48 52 6c 59 57 30 79 6b 67 31 6b 59 58 52 68 4f 6d 6c 74 59 57 64 6c 4c 33 42 75 5a 7a 74 69 59 58 4e 6c 4e 6a 51 73 61 56 5a 43 54 31 4a 33 4d 45 74 48 5a 32 39 42 51 55 46 42 54 6c 4e 56 61 45 56 56 5a 30 46 42 51 55 52 72 51 55 46 42 51 6b 46 44 51 55 31 42 51 55 46 44 57 44 5a 35 4b 79 74 42 51 55 46 42 5a 6d 78 43 54 56 5a 46 57 43 38 76 4c 7a 68 55 53 6b 56 6e 51 55 46 45 56 55 46 42 52 Data Ascii: 002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"CgkvbS8wY3F0NDESIk5ldyBZb3JrIFlhbmtlZXMg4oCUIEJhc2ViYWxsIHRlYW0ykg1kYXRhOmltYWdlL3BuZztiYXNlNjQsaVZCT1J3MEtHZ29BQUFBTlNVaEVVZ0FBQURrQUFBQkFDQU1BQUFDWDZ5KytBQUFBZmxCTVZFWC8vLzhUSkVnQUFEVUFBR
2024-12-31 23:23:25 UTC	96	IN	Data Raw: 35 61 0d 0a 44 5a 4f 61 31 6f 78 55 31 64 58 4e 55 74 56 62 57 64 6b 53 32 74 36 52 48 68 4e 62 30 46 42 51 31 56 42 51 55 49 77 4f 56 4a 73 4f 47 35 4e 4d 55 6c 42 51 55 4e 72 51 55 46 43 5a 54 41 33 56 6e 70 52 51 55 46 42 52 55 64 56 62 45 56 52 56 6c 4a 4a 61 56 6b 78 57 44 45 0d 0a Data Ascii: 5aDZOa1oxU1dXNUtVbWdkS2t6RHhNb0FBQ1VBQUIwOVJsOG5NMUlBQUNrQUFCZTA3VnpRQUFBRUdVbEVRVlJJaVkxWDE
2024-12-31 23:23:25 UTC	1390	IN	Data Raw: 39 32 32 0d 0a 79 53 33 4a 50 51 6b 4a 47 52 6b 46 48 61 54 4a 4f 55 6d 64 6e 4d 58 51 34 54 6a 67 33 4b 79 39 33 4f 48 56 56 65 56 46 72 62 57 4a 31 53 6d 35 7a 61 46 6c 61 4f 58 46 61 62 32 64 55 51 6a 4e 71 62 57 56 6b 4f 46 55 76 62 6e 4a 69 4c 7a 41 33 64 56 4d 79 4c 32 64 79 57 55 5a 50 63 56 6c 75 51 6b 59 77 65 69 39 36 54 44 52 43 65 6b 74 72 56 6a 52 6b 52 31 5a 4d 52 57 59 7a 63 32 5a 34 4f 45 70 4a 5a 55 78 58 55 58 67 32 52 53 74 32 62 30 4a 6c 51 7a 56 58 62 30 6c 33 4f 44 5a 5a 62 31 55 78 59 58 5a 6b 55 6d 5a 44 4e 58 4a 73 5a 6c 64 56 4d 33 4a 70 51 57 5a 55 4f 55 77 7a 56 45 6c 46 55 47 68 74 59 7a 46 5a 5a 33 4a 70 4e 53 39 43 57 47 46 34 62 30 39 51 53 44 4a 57 59 32 39 57 64 6d 55 76 53 56 63 34 63 45 6b 76 4d 32 4e 59 62 58 46 54 55 Data Ascii: 922yS3JPQkJGRkFHaTJOUmdnMXQ4Tjg3Ky93OHVVeVFrbWJ1Sm5zaFlaOXFab2dUQjNqbWVkOFUvbnJiLzA3dVMyL2dyWUZPcVluQkYwei96TDRCektrVjRkR1ZMRWYzc2Z4OEpJZUxXUXg2RSt2b0JlQzVXb0l3ODZZb1UxYXZkUmZDNXJsZldVM3JpQWZUOUwzVElFUGhtYzFZZ3JpNS9CWGF4b09QSDJWY29WdmUvSVc4cEkvM2NYbXFTU
2024-12-31 23:23:25 UTC	955	IN	Data Raw: 54 46 52 35 4d 30 5a 77 51 6b 30 33 4d 57 74 34 5a 58 46 49 5a 6b 73 77 59 6b 73 7a 52 6b 70 51 4d 6a 68 36 54 6b 34 78 57 47 5a 6f 62 58 6c 57 59 6e 52 73 61 33 4d 77 51 57 31 61 5a 56 64 46 4d 32 35 71 53 54 52 4c 62 45 51 31 59 6a 49 76 62 57 46 36 59 7a 45 76 51 58 70 6a 5a 55 6b 77 51 6d 6c 42 63 31 42 57 52 6d 39 42 64 6e 5a 6b 56 47 74 55 57 6e 6c 4e 4e 6e 4d 32 53 6c 45 34 59 57 52 70 54 44 42 49 4d 58 68 56 4d 6d 52 69 56 54 68 4b 63 33 64 6b 57 47 5a 43 53 6d 77 31 4f 47 4e 54 53 6b 68 54 51 79 39 75 63 48 68 68 54 33 68 74 61 6b 31 79 4d 6a 46 61 64 6d 52 32 59 32 52 50 4e 54 64 48 65 56 49 72 65 6d 4a 45 64 6a 49 76 51 6d 63 72 55 44 4a 6b 61 46 45 76 56 30 34 77 55 6e 4e 4b 61 48 6c 44 54 6d 56 78 59 56 64 32 5a 55 6c 58 4e 6e 70 36 65 6c 52 Data Ascii: TFR5M0ZwQk03MWt4ZXFIZkswYkszRkpQMjh6Tk4xWGZobXlWYnRsa3MwQW1aZVdFM25qSTRLbEQ1YjIvbWF6YzEvQXpjZUkwQmlBc1BWRm9BdnZkVGtUWnlNNnM2SlE4YWRpTDBIMXhVMmRiVThKc3dkWGZCSmw1OGNTSkhTQy9ucHhhT3htak1yMjFadmR2Y2RPNTdHeVIremJEdjIvQmcrUDJkaFEvV04wUnNKaHlDTmVxYVd2ZUlXNnp6elR
2024-12-31 23:23:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49886	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:23:27 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:23:27 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:23:27 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-aPQIRR8vwC62UqQm1rog4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:23:27 UTC	124	IN	Data Raw: 33 35 36 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 75 73 20 6e 61 76 79 20 70 69 6c 6f 74 73 20 73 68 6f 74 20 64 6f 77 6e 20 72 65 64 20 73 65 61 22 2c 22 63 68 65 65 72 66 75 6c 20 63 68 61 73 65 20 6d 6f 6e 6f 70 6f 6c 79 20 67 6f 20 72 65 77 61 72 64 73 22 2c 22 73 7a 61 20 6c 79 72 69 63 73 22 2c 22 67 72 6f 63 65 72 79 20 73 74 6f 72 65 73 20 6f 70 65 6e 20 6f 6e 20 Data Ascii: 356)]}'["",["us navy pilots shot down red sea","cheerful chase monopoly go rewards","sza lyrics","grocery stores open on
2024-12-31 23:23:27 UTC	737	IN	Data Raw: 63 68 72 69 73 74 6d 61 73 20 64 61 79 22 2c 22 6e 6f 74 72 65 20 64 61 6d 65 20 66 6f 6f 74 62 61 6c 6c 20 76 73 20 67 65 6f 72 67 69 61 22 2c 22 63 68 72 69 73 74 6d 61 73 20 74 72 61 76 65 6c 20 77 65 61 74 68 65 72 20 66 6f 72 65 63 61 73 74 22 2c 22 73 7a 61 20 6c 79 72 69 63 73 20 61 6e 6f 74 68 65 72 20 6c 69 66 65 22 2c 22 75 6e 63 6c 61 69 6d 65 64 20 69 72 73 20 73 74 69 6d 75 6c 75 73 20 63 68 65 63 6b 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a Data Ascii: christmas day","notre dame football vs georgia","christmas travel weather forecast","sza lyrics another life","unclaimed irs stimulus checks"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJ
2024-12-31 23:23:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49887	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:23:28 UTC	647	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=w&oit=1&cp=1&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49888	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:23:29 UTC	650	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo&oit=1&cp=4&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49889	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:23:29 UTC	651	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.&oit=1&cp=5&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:23:29 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:23:29 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zcoLza_XlN2XkC_LvMrASQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:23:29 UTC	124	IN	Data Raw: 31 35 64 0d 0a 29 5d 7d 27 0a 5b 22 77 66 6d 6f 2e 22 2c 5b 22 77 66 6d 75 20 72 61 64 69 6f 22 2c 22 77 66 6d 6f 20 6d 65 61 6e 69 6e 67 22 2c 22 77 66 6d 6f 20 61 6d 22 2c 22 74 75 6c 61 6e 65 20 77 66 6d 6f 22 2c 22 6e 6f 61 61 20 77 66 6d 6f 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 Data Ascii: 15d)]}'["wfmo.",["wfmu radio","wfmo meaning","wfmo am","tulane wfmo","noaa wfmo"],["","","","",""],[],{"google:clientdata
2024-12-31 23:23:29 UTC	232	IN	Data Raw: 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 2c 35 35 32 2c 35 35 31 2c 35 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 30 2c 31 30 5d 2c 5b 33 30 5d 2c 5b 33 30 5d 2c 5b 35 2c 33 30 5d 2c 5b 35 2c 33 30 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: ":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600,552,551,550],"google:suggestsubtypes":[[30,10],[30],[30],[5,30],[5,30]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]
2024-12-31 23:23:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49890	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:23:30 UTC	652	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.x&oit=1&cp=6&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-31 23:23:30 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 31 Dec 2024 23:23:30 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VluW8v3pZTk2Bx4jmKtl5g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-31 23:23:30 UTC	124	IN	Data Raw: 37 65 0d 0a 29 5d 7d 27 0a 5b 22 77 66 6d 6f 2e 78 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 74 72 75 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 Data Ascii: 7e)]}'["wfmo.x",[],[],[],{"google:clientdata":{"bpc":false,"tlw":true},"google:suggesttype":[],"google:verbatimrelevance"
2024-12-31 23:23:30 UTC	8	IN	Data Raw: 3a 38 35 31 7d 5d 0d 0a Data Ascii: :851}]
2024-12-31 23:23:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49891	142.250.185.132	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-31 23:23:31 UTC	653	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.xy&oit=1&cp=7&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Target ID:	0
Start time:	18:21:48
Start date:	31/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	18:21:49
Start date:	31/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:21:50
Start date:	31/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://thetollroads.com-wfmo.xyz/us"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	18:22:34
Start date:	31/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5100 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	18:22:34
Start date:	31/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 --field-trial-handle=1944,i,6544471191016140883,1729877314279263397,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Email	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://thetollroads.com-wfmo.xyz
Source: Email	Joe Sandbox AI: AI detected Typosquatting in URL: https://thetollroads.com-wfmo.xyz

Source: https://thetollroads.com/	HTTP Parser: Iframe src: https://www.youtube.com/embed/3M2FsVe0muU?feature=oembed
Source: https://thetollroads.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-FXMPC209X2&gacid=412420669.1735687350&gtm=45je4cc1v9123471210za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1254518336

Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59221 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:61002 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:56398 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:58135 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:54749 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59324 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:53065 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:55591 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59251 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:51522 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:52546 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:60286 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59959 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:53250 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:65080 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:55386 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:57432 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:49919 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:64589 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:55950 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:56886 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:53091 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:55058 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:52373 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59520 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:55180 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:57377 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:57000 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:56196 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:52270 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:53739 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59777 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:58169 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:54865 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:54778 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:65181 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:60481 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:57077 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:58373 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59217 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:60905 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:59200 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:58160 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058564 - Severity 2 - ET PHISHING Transit Scam Domain in DNS Lookup : 192.168.2.16:56328 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2823606 - Severity 1 - ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016 : 45.60.150.166:443 -> 192.168.2.16:49811
Source: Network traffic	Suricata IDS: 2823606 - Severity 1 - ETPRO EXPLOIT_KIT Possible Evil Redirect Leading to EK Dec 04 2016 : 45.60.150.166:443 -> 192.168.2.16:49827

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=the&oit=1&cp=3&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thet&oit=1&cp=4&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=theto&oit=1&cp=5&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetoll&oit=1&cp=7&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollr&oit=1&cp=8&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollro&oit=1&cp=9&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroa&oit=1&cp=10&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads&oit=1&cp=12&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads.&oit=1&cp=13&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads.c&oit=1&cp=14&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=thetollroads.co&oit=3&cp=15&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/global.css?v=1734624164460 HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://thetollroads.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/components/press-releases.css HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /css/components/press-releases-list.css HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /css/components/capital-programs-list.css HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /css/components/capital-programs.css HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /css/components/intro-split-view.css HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /css/components/intro-box-overlapping.css HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /site-media/tca-logo-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /site-media/toll_roads_logo.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/3pzp4doo/the-toll-roads-mobile-app-over-shoulder-2x.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/safjozvp/icon_homepage-pay-tolls.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /js/global.js?v=1734624164460 HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/b35pwkub/icon_homepage-toll-violations.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/cpwdwtyv/icon_homepage-my-account.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/hrwichhw/fastrak_logo_2024.svg?rmode=max&width=341&height=254 HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /site-media/tca-logo-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /site-media/toll_roads_logo.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/4plinse4/241_santiagocreekbridge_cropped.jpg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/qljj3avn/closures_1200x800.jpg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/safjozvp/icon_homepage-pay-tolls.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/b35pwkub/icon_homepage-toll-violations.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/tcuceq0z/homepage-intro-placeholder-tall-corpped.jpg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/3pzp4doo/the-toll-roads-mobile-app-over-shoulder-2x.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/lzdjsoqt/download_on_the_app_store_badge.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/cpwdwtyv/icon_homepage-my-account.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/e2ybixdp/google_play_store_badge_en.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://thetollroads.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/hrwichhw/fastrak_logo_2024.svg?rmode=max&width=341&height=254 HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-FXMPC209X2&gacid=412420669.1735687350&gtm=45je4cc1v9123471210za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1254518336 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_footer-phone.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==
Source: global traffic	HTTP traffic detected: GET /media/lzdjsoqt/download_on_the_app_store_badge.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_footer-walk-in-center.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/e2ybixdp/google_play_store_badge_en.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/d5kpftah/icon_facebook-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /js/global.js?v=1734624164460 HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/5p2brkd1/icon_instagram-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/qljj3avn/closures_1200x800.jpg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/3jyijhrd/icon_twitter-x-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_footer-phone.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/dv5d04qo/icon_youtube-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_footer-walk-in-center.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/tcuceq0z/homepage-intro-placeholder-tall-corpped.jpg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/cmkllpaa/icon_linkedin-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_logo-tca-color.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/d5kpftah/icon_facebook-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon-informationWhite.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/5p2brkd1/icon_instagram-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/3jyijhrd/icon_twitter-x-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1388295675 HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/pcknkbmi/1.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/zw1kviit/board_highlights_2.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/ppung3sx/board_highlights_1.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/dv5d04qo/icon_youtube-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/vbxdaes3/241_cp_1200x600.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/a2afb2cf/sr-241-loma-ridge-1220x600.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/cmkllpaa/icon_linkedin-white.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_logo-tca-color.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon-informationWhite.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-&oit=3&cp=25&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/51tplex4/sr-73-catalina-view-improvements-1200x600.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=1388295675 HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/ppung3sx/board_highlights_1.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/pcknkbmi/1.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /vi_webp/3M2FsVe0muU/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/lhsdgn3y/image-mobile-app-intro.png HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /media/4plinse4/241_santiagocreekbridge_cropped.jpg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /media/zw1kviit/board_highlights_2.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_arrow-left-disabled.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/css/components/capital-programs-list.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /media/vbxdaes3/241_cp_1200x600.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /js/th/WuArCo6uiOC32QOIiNWeSH9h2H5vf_jv_ihZ0ZQebSo.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_arrow-right-active.svg HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/css/components/capital-programs-list.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/zw1kviit/board_highlights_2.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /vi_webp/3M2FsVe0muU/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_arrow-left-disabled.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.36632120898314513 HTTP/1.1Host: thetollroads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://thetollroads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /media/a2afb2cf/sr-241-loma-ridge-1220x600.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /media/ppung3sx/board_highlights_1.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-w&oit=3&cp=26&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site-media/icons/icon_arrow-right-active.svg HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /js/th/WuArCo6uiOC32QOIiNWeSH9h2H5vf_jv_ihZ0ZQebSo.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/51tplex4/sr-73-catalina-view-improvements-1200x600.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /media/lhsdgn3y/image-mobile-app-intro.png HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.36632120898314513 HTTP/1.1Host: thetollroads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; AWSALBCORS=betoVcHsXENneTSaiLRYe/CSGpSQ+yRVrhgQcmmeb4vCsnsroCeuIBw8KNlH5dWNWU/fj+b7m/fpQbD8hjhWZ2uFzqSuw/S+wG/m+E4qTA4MMyPyE+ga97MSCceT; visid_incap_1798175=hKfU9FzQT2aZKk9L1QOW2rR8dGcAAAAAQUIPAAAAAABW4mYr5xC212D35xm3xYzH; nlbi_1798175=W2sAbrI8Mx2fleHnVfziBgAAAACUDukXhAoLbe/ZW0TA7fsD; incap_ses_182_1798175=KpkLA9ZIcF0VUbrFPpiGArR8dGcAAAAA+t6so3FOeM5+zdLxzDKCBw==; _ga_FXMPC209X2=GS1.1.1735687350.1.0.1735687350.60.0.0; _ga=GA1.1.412420669.1735687350
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fthetollroads.com-wfmo&oit=3&cp=29&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=w&oit=1&cp=1&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo&oit=1&cp=4&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.&oit=1&cp=5&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.x&oit=1&cp=6&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wfmo.xy&oit=1&cp=7&pgcl=4&gs_rn=42&psi=S2GVvnqCJd4u5S-J&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: thetollroads.com-wfmo.xyz
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: thetollroads.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: thetollroads.com-wfmo
Source: global traffic	DNS traffic detected: DNS query: wfmo.xyz

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: thetollroads.com-wfmo.xyz
Source:	DNS query: thetollroads.com-wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source:	DNS query: wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: wfmo.xyz
Source:	DNS query: wfmo.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.140
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_206.1.dr, chromecache_193.1.dr	String found in binary or memory: tag.src = "https://www.youtube.com/iframe_api"; equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: (g.Dq(V,"redirector.googlevideo.com"),N=V.toString()):V.T.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Dq(V,"www.youtube.com"),N=V.toString()):(V=XQ9(N),XY(V)&&(N=V));V=new g.v1(N);V.set("cmo=pf","1");H&&V.set("cmo=td","a1.googlevideo.com");return V}; equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: 0?"http":"https";this.Vn=H8((C?C.customBaseYoutubeUrl:p.BASE_YT_URL)\|\|"")\|\|H8(this.iW)\|\|this.protocol+"://www.youtube.com/";d=C?C.eventLabel:p.el;N="detailpage";d==="adunit"?N=this.S?"embedded":"detailpage":d==="embedded"\|\|this.D?(N=hm(N,d,gru),d!=="shortsaudiopivot"\|\|this.G("web_player_shorts_audio_pivot_event_label")\|\|(N="detailpage")):d&&(N="embedded");this.Wr=N;oQH();d=null;N=C?C.playerStyle:p.ps;X=g.W5(W$L,N);!N\|\|X&&!this.D\|\|(d=N);this.playerStyle=d;this.Y=g.W5(W$L,this.playerStyle);this.houseBrandUserStatus= equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: C=this.api.K();p=this.api.getVideoData();var V="";C.V\|\|(C=g.zM(C),C.indexOf("www.")===0&&(C=C.substring(4)),V=g.t_(p)?"Watch on YouTube Music":C==="youtube.com"?"Watch on YouTube":g.Ks("Watch on $WEBSITE",{WEBSITE:C}));this.updateValue("title",V)}; equals www.youtube.com (Youtube)
Source: chromecache_232.1.dr	String found in binary or memory: GTy=function(p,C){if(!p.T["0"]){var V=new WB("0","fakesb",{video:new wO(0,0,0,void 0,void 0,"auto")});p.T["0"]=C?new zn(new g.v1("http://www.youtube.com/videoplayback"),V,"fake"):new VM(new g.v1("http://www.youtube.com/videoplayback"),V,new D0(0,0),new D0(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_232.1.dr	String found in binary or memory: YI.prototype.Wd=function(){return this.w7.l()};var Vry=(new Date).getTime();var dkY="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ihu=/\bocr\b/;var soV=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var ZhY=0,uLH=0,Uk1=0;var e0=null,Po=!1,vcy=1,LX=Symbol("SIGNAL"),gE={version:0,lIa:0,d2:!1,F4:void 0,Qw:void 0,mF:void 0,KG:0,uf:void 0,Kg:void 0,bH:!1,pE:!1,kind:"unknown",zbV:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: g.GM=function(p){var C=g.zM(p);Ha9.includes(C)&&(C="www.youtube.com");return p.protocol+"://"+C}; equals www.youtube.com (Youtube)
Source: chromecache_232.1.dr	String found in binary or memory: g.h.getVideoUrl=function(p,C,V,N,H,X,d){C={list:C};V&&(H?C.time_continue=V:C.t=V);V=d?"music.youtube.com":g.zM(this);H=V==="www.youtube.com";!X&&N&&H?X="https://youtu.be/"+p:g.yj(this)?(X="https://"+V+"/fire",C.v=p):(X&&H?(X=this.protocol+"://"+V+"/shorts/"+p,N&&(C.feature="share")):(X=this.protocol+"://"+V+"/watch",C.v=p),BW&&(p=LGj())&&(C.ebc=p));return g.GD(X,C)}; equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: g.zM=function(p){p=AR(p.Vn);return p==="www.youtube-nocookie.com"?"www.youtube.com":p}; equals www.youtube.com (Youtube)
Source: chromecache_232.1.dr	String found in binary or memory: p))):this.api.K().G("enable_adb_handling_in_sabr")&&V==="BROWSER_OR_EXTENSION_ERROR"&&!N.Y?(N=N.hostLanguage,p="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",N&&(p=g.GD(p,{hl:N})),this.Jc(j4(this,"BROWSER_OR_EXTENSION_ERROR",p))):this.Jc(g.pZ(p.errorMessage)):this.Jc(j4(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(p=N.hostLanguage,V="//support.google.com/youtube/?p=player_error1",p&&(V=g.GD(V, equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: p.details.rc!=="429"?p.errorCode==="ump.spsrejectfailure"&&(H="HTML5_SPS_UMP_STATUS_REJECTED"):(H="TOO_MANY_REQUESTS",X="6");this.Ta.a_(p.errorCode,p.severity,H,yu(p.details),X)}else this.Ta.publish("nonfatalerror",p),N=/^pp/.test(this.videoData.clientPlaybackNonce),this.oN(p.errorCode,p.details),N&&p.errorCode==="manifest.net.connect"&&(p="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ip)(),kv(p,"manifest",function(d){C.Y=!0;C.k_("pathprobe",d)},function(d){C.oN(d.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_136.1.dr	String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)
Source: chromecache_232.1.dr	String found in binary or memory: this.KS=!this.va;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(C==null\|\|!C.deviceIsAudioOnly);this.I6=sB(this.I6,p.ismb);this.MR?(M=p.vss_host\|\|"s.youtube.com",M==="s.youtube.com"&&(M=AR(this.Vn)\|\|"www.youtube.com")):M="video.google.com";this.jS=M;og(this,p,!0);this.vr=new CI;g.R(this,this.vr);T=C?C.innertubeApiKey:a_("",p.innertube_api_key);c=C?C.innertubeApiVersion:a_("",p.innertube_api_version);M=C?C.innertubeContextClientVersion:a_("",p.innertube_context_client_version);T=g.pO("INNERTUBE_API_KEY")\|\| equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: this.yn.sY&&(p.authuser=this.yn.sY);this.yn.pageId&&(p.pageid=this.yn.pageId);isNaN(this.cryptoPeriodIndex)\|\|(p.cpi=this.cryptoPeriodIndex.toString());var H=(H=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.f0()))?H[1]:"";H==="ATV"&&(p.cdt=H);this.W=p;this.W.session_id=N;this.a$=!0;this.C.flavor==="widevine"&&(this.W.hdr="1");this.C.flavor==="playready"&&(C=Number(Wb(C.experiments,"playready_first_play_expiration")),!isNaN(C)&&C>=0&&(this.W.mfpe=""+C),this.a$=!1);C="";g.o5(this.C)?Az(this.C)?(N=V.C)&&(C="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_209.1.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_232.1.dr	String found in binary or memory: var uk={};var fmP={YE:[{Rn:/Unable to load player module/,weight:20},{Rn:/Failed to fetch/,weight:500},{Rn:/XHR API fetch failed/,weight:10},{Rn:/JSON parsing failed after XHR fetch/,weight:10},{Rn:/Retrying OnePlatform request/,weight:10},{Rn:/CSN Missing or undefined during playback association/,weight:100},{Rn:/Non-recoverable error. Do not retry./,weight:0},{Rn:/Internal Error. Retry with an exponential backoff./,weight:0},{Rn:/API disabled by application./,weight:0}],y8:[{callback:cu9,weight:500}]};var fPX=/[&\?]action_proxy=1/,UJs=/[&\?]token=([\w-])/,OLY=/[&\?]video_id=([\w-])/,yuQ=/[&\?]index=([\d-])/,qqv=/[&\?]m_pos_ms=([\d-])/,bLy=/[&\?]vvt=([\w-]*)/,mJV="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),IPH="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),SqX={android:"ANDROID", equals www.youtube.com (Youtube)

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://thetollroads.com-wfmo.xyz/us

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Windows Analysis Report
https://thetollroads.com-wfmo.xyz/us