| www.googletagmanager.com/gtag/js?id=UA-152621184-1 |  142.250.74.72 | 200 OK | 76 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-152621184-1 IP142.250.74.72:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashe77da3ccd8d968f53d1b277e25615cd0 51d7f3a3bb08930a91b28099ef425d8c9924bef6 15ed288531f971f98aa3e60a2fb83f2b48d2b581dd43b72e37e13f0fa80ed934
GET /gtag/js?id=UA-152621184-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 28 Mar 2024 15:26:01 GMT
expires: Thu, 28 Mar 2024 15:26:01 GMT
cache-control: private, max-age=900
last-modified: Thu, 28 Mar 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75533
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-MF9XFBN | 142.250.74.72 | 200 OK | 85 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-MF9XFBN IP142.250.74.72:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (4575) Hashcaa10a1b7d1570bcdda03397b6854a50 b03c08b099814998170c93b3685d46f85ba5de0d 6db1cd55dedc7c50ff170de8b13bddef5952cb757fd31b1f24085df95d25e2f6
GET /gtm.js?id=GTM-MF9XFBN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 28 Mar 2024 15:26:01 GMT
expires: Thu, 28 Mar 2024 15:26:01 GMT
cache-control: private, max-age=900
last-modified: Thu, 28 Mar 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84958
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap | 142.250.74.74 | 200 OK | 1.1 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Inter:wght@400;700&display=swap IP142.250.74.74:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint04:B9:D9:E0:01:DB:5E:AB:5A:FF:F0:D9:ED:39:0F:C1:63:18:51:0B ValidityMon, 26 Feb 2024 08:18:27 GMT - Mon, 20 May 2024 08:18:26 GMT
File typegzip compressed data, max compression Hash925f2f6a8db1979ecf5d91cfb6b9c27d c04bcf52c8490aab92a522fd449c94e7c920bfc9 7882229824217bfe54d5951050de8f1958b4bda75f86fae3c035c23bc6e1bae3
GET /css2?family=Inter:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 28 Mar 2024 15:26:01 GMT
date: Thu, 28 Mar 2024 15:26:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-152621184-1&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 76 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=UA-152621184-1&l=dataLayer&cx=c IP142.250.74.72:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash5bd504c0f3bb24bb7c766677fae748a8 386801c77f717e6327380ef6c5f311d2d3954173 f232cc7244171104781a27e90e29b3bf1a8494429d6de21a3c42d86f0a196220
GET /gtag/js?id=UA-152621184-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 28 Mar 2024 15:26:01 GMT
expires: Thu, 28 Mar 2024 15:26:01 GMT
cache-control: private, max-age=900
last-modified: Thu, 28 Mar 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75466
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dems.ag/wp-content/themes/daga/fonts/Messapia-Bold.woff2 | 141.193.213.11 | 200 OK | 16 kB |
URL GET HTTP/3dems.ag/wp-content/themes/daga/fonts/Messapia-Bold.woff2 IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), CFF, length 15520, version 1.0 Hash96ee3d9b4a030d1dc4a651d592c507e4 03be6a738e33bc1199d9c7b78215c6f66e39a8db 0af53c307e0c24070ce7b3f2cf4d77dc60a5ed3b389c05d776b605911242ae66
GET /wp-content/themes/daga/fonts/Messapia-Bold.woff2 HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/wp-content/themes/daga/style.css?ver=1.0.1
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; _gcl_au=1.1.2121862811.1711639562
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: font/woff2
content-length: 15520
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
etag: "623dcd81-3ca0"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2dc694156ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 142.250.74.163 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP142.250.74.163:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dems.ag
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:29:55 GMT
expires: Fri, 28 Mar 2025 02:29:55 GMT
cache-control: public, max-age=31536000
age: 46566
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 142.250.74.163 | 200 OK | 47 kB |
URL GET HTTP/2fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP142.250.74.163:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF3:56:10:42:A8:3C:BF:F5:89:9C:4C:C0:F8:E3:DC:C4:1C:E9:34:9E ValidityMon, 26 Feb 2024 08:18:21 GMT - Mon, 20 May 2024 08:18:20 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46704, version 1.0 Hash30a274cd01b6eeb0b082c918b0697f1e 393311bde26b99a4ad935fa55bad1dce7994388b 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
GET /s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dems.ag
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46704
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:29:55 GMT
expires: Fri, 28 Mar 2025 02:29:55 GMT
cache-control: public, max-age=31536000
age: 46566
last-modified: Wed, 13 Sep 2023 23:49:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-C0KC0QE7ES&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 90 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-C0KC0QE7ES&l=dataLayer&cx=c IP142.250.74.72:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hashacdab8e45d3ff7fe8958db326421c741 4b35771ad0a77d5081bffc04fbc9d11ce17b646f 6235764cf1b08f53aee001d0004890eda5f1367190accc974210ade14c8e0a7d
GET /gtag/js?id=G-C0KC0QE7ES&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 28 Mar 2024 15:26:01 GMT
expires: Thu, 28 Mar 2024 15:26:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90050
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-06-aspect-ratio-13-10.jpg | 141.193.213.11 | 200 OK | 23 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-06-aspect-ratio-13-10.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 650x500, components 3 Hashb71065bad2040df734b8c82038806b5c fa821d709b4e504b93ef7b0d639f8070adb93236 a52f09d890996c427e371c89532e3c94a9e64a410b3f98c41e86918ef69bf734
GET /wp-content/uploads/2023/06/5.4.23-Website-Icons-06-aspect-ratio-13-10.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 23381
last-modified: Mon, 12 Jun 2023 14:57:19 GMT
etag: "6487324f-5b55"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafed56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-11-aspect-ratio-13-10.jpg | 141.193.213.11 | 200 OK | 24 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-11-aspect-ratio-13-10.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 650x500, components 3 Hash98565843b0da8d1713d1f886930e654b 6d2c1c90ca5c920e263332eb06c9c32f032b8f69 25a37c10873cce67ce186a14f8c641bb5d08bafc78f9f6482c111df69e7a347b
GET /wp-content/uploads/2023/06/5.4.23-Website-Icons-11-aspect-ratio-13-10.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 24373
last-modified: Mon, 12 Jun 2023 14:57:19 GMT
etag: "6487324f-5f35"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daaff156ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-05-aspect-ratio-13-10.jpg | 141.193.213.11 | 200 OK | 21 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-05-aspect-ratio-13-10.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 650x500, components 3 Hashaf3fd9e3a7611b346777074c0accefef be3e7ac0f63fdd7767b1c1af7eb6bf29e8b6142b 7f4396dc7fdba52353c5d5672fd6ee73ee3a0eef49320f607278d6edf85e173c
GET /wp-content/uploads/2023/06/5.4.23-Website-Icons-05-aspect-ratio-13-10.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 21253
last-modified: Mon, 12 Jun 2023 14:56:31 GMT
etag: "6487321f-5305"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafeb56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-04-aspect-ratio-13-10.jpg | 141.193.213.11 | 200 OK | 22 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-04-aspect-ratio-13-10.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 650x500, components 3 Hashf4f2f3ee70a44990365b09fb3874ee27 e8fded189afd09dc41c4e276c29ede0c832ea179 10d85eada027b2fa6575676a3816054bd584e45b0624bcfac005a1089dc70811
GET /wp-content/uploads/2023/06/5.4.23-Website-Icons-04-aspect-ratio-13-10.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 22451
last-modified: Mon, 12 Jun 2023 14:56:31 GMT
etag: "6487321f-57b3"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daaff056ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-12-aspect-ratio-13-10.jpg | 141.193.213.11 | 200 OK | 22 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-12-aspect-ratio-13-10.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 650x500, components 3 Hash77f03c26801a1740fdbc07ee91e307f3 e51bdf99b4afde9b029c904f0a70d1a8a1a50bda 18a42900ff88be3bff6dbd969627128a388aa86ee0d4610d7eb57c976f4ddabf
GET /wp-content/uploads/2023/06/5.4.23-Website-Icons-12-aspect-ratio-13-10.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 22443
last-modified: Mon, 12 Jun 2023 14:56:31 GMT
etag: "6487321f-57ab"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafef56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-10-aspect-ratio-13-10.jpg | 141.193.213.11 | 200 OK | 20 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2023/06/5.4.23-Website-Icons-10-aspect-ratio-13-10.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 650x500, components 3 Hashdb9c1b6ef0d318fd79629be25095607c 3eda8e261fc70926ed2d780dd0741cd76353ab8c 8d78565b7fe4bbb7b2cd0ee35f0fb8a62be3c3bbb17da17b4b44662cb45484d2
GET /wp-content/uploads/2023/06/5.4.23-Website-Icons-10-aspect-ratio-13-10.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 19698
last-modified: Mon, 12 Jun 2023 14:56:31 GMT
etag: "6487321f-4cf2"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2dabff356ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2022/09/Website-Headshots-Campbell.jpg | 141.193.213.11 | 200 OK | 45 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2022/09/Website-Headshots-Campbell.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 690x530, components 3 Hashaa644e7beb7a56dd41187c12c91886d5 28a1c662be33a03e1ed0367dc6ad57f7e37ed0a1 9d7ef3a04d7374047b37d4723c483216b9e71501b0d1ae0671faaaea8d05d81a
GET /wp-content/uploads/2022/09/Website-Headshots-Campbell.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 44912
last-modified: Mon, 08 May 2023 19:47:02 GMT
etag: "645951b6-af70"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafde56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 141.193.213.11 | 200 OK | 59 kB |
URL User Request GET HTTP/2IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2954), with CRLF, LF line terminators Hashfc13b9f485f64625010f6c99b35ef3b2 3ccc17e48a097cb8d3451e188aeef6b0acf54c27 c7bf998e934d51407f69a8e15a437a2b233e28095c21633b229d855520fe55fd
GET / HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie
link: <https://dems.ag/wp-json/>; rel="https://api.w.org/", <https://dems.ag/wp-json/wp/v2/pages/148>; rel="alternate"; type="application/json", <https://dems.ag/>; rel=shortlink
x-powered-by: WP Engine
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: HIT: 1
x-cache-group: normal
content-encoding: br
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; path=/; expires=Thu, 28-Mar-24 15:56:01 GMT; domain=.dems.ag; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 86b8a2d6186d56c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dems.ag/wp-content/uploads/2024/02/Website-Headshots-Bonta.jpg | 141.193.213.11 | 200 OK | 47 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2024/02/Website-Headshots-Bonta.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 690x530, components 3 Hashf76f5258771f221f529b0c334b2b8a46 a4b0c0a1c26db73781bd190fc380519655c89a48 a71a46320dfa40f73c07696f24e812c3ba767abbfc46cb25d48bd14e9f10f97b
GET /wp-content/uploads/2024/02/Website-Headshots-Bonta.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 46839
last-modified: Wed, 14 Feb 2024 21:15:16 GMT
etag: "65cd2d64-b6f7"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafe956ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2024/02/Website-Headshots-Jennings.jpg | 141.193.213.11 | 200 OK | 45 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2024/02/Website-Headshots-Jennings.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 690x530, components 3 Hashb176a842c24f7eb043dc677f78cef0b0 153a6099ef8f58ea23c16bc5f9d586c08ae09cf8 adaa391278f86124ee0f2d353bcb1052cfbaebf561a539aad1434a592ade3fde
GET /wp-content/uploads/2024/02/Website-Headshots-Jennings.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 44990
last-modified: Wed, 14 Feb 2024 21:17:40 GMT
etag: "65cd2df4-afbe"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafce56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2024/02/Website-Headshots-Ellison.jpg | 141.193.213.11 | 200 OK | 48 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2024/02/Website-Headshots-Ellison.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 690x530, components 3 Hash637c775226b178ce0cf808cf77ac65cf b79da7ed9ce01c5a99447ed32e3cc7785bee0037 eb172a969ec73d1113589ab8f3bb2272d7803b0f829d213f68c5e734011fd79b
GET /wp-content/uploads/2024/02/Website-Headshots-Ellison.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 47887
last-modified: Wed, 14 Feb 2024 21:02:59 GMT
etag: "65cd2a83-bb0f"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafd156ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2024/02/Website-Headshots-Raoul.jpg | 141.193.213.11 | 200 OK | 52 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2024/02/Website-Headshots-Raoul.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 690x530, components 3 Hashf86d5b8cd238483dec7a83bf547cc8e5 09d19602f163634dc41e69bef7ff43f32b4d0976 3e657027675631828ba5d7a70e651b22acc3c58f9e8052a64a9c38e968a37a51
GET /wp-content/uploads/2024/02/Website-Headshots-Raoul.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/jpeg
content-length: 52177
last-modified: Wed, 14 Feb 2024 21:12:50 GMT
etag: "65cd2cd2-cbd1"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafd556ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2024/02/Website-Headshots-Ford.jpg | 141.193.213.11 | 200 OK | 54 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2024/02/Website-Headshots-Ford.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 690x530, components 3 Hash31497a4ebf953c1eb68fe60c4200874c 5e1fa61d85120e734f31ccda3dd0703023cecd61 30d947046d83a709a5545f69a5ce4b3fb85d321385f2989bc3edd10ee97c1a51
GET /wp-content/uploads/2024/02/Website-Headshots-Ford.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/jpeg
content-length: 54095
last-modified: Wed, 14 Feb 2024 21:17:40 GMT
etag: "65cd2df4-d34f"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafcc56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/themes/daga/favicon/favicon-16x16.png | 141.193.213.11 | 200 OK | 368 B |
URL GET HTTP/3dems.ag/wp-content/themes/daga/favicon/favicon-16x16.png IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hashb10b2bac2829d716839b737cce035600 d9c4245f0ec4d0776e644816d07653ad382b4ed8 2cb1ceff22b72b151340fd65bc1545b6f0b514f4b0ed749fa651e2004b4841b8
GET /wp-content/themes/daga/favicon/favicon-16x16.png HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; _gcl_au=1.1.2121862811.1711639562; wp-wpml_current_language=en; _ga_C0KC0QE7ES=GS1.1.1711639561.1.0.1711639561.0.0.0; _ga=GA1.1.312163027.1711639562
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/webp
content-length: 368
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=906
content-disposition: inline; filename="favicon-16x16.webp"
etag: "623dcd81-38a"
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
vary: Accept
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2e12d5256ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/themes/daga/favicon/apple-touch-icon.png | 141.193.213.11 | 200 OK | 2.0 kB |
URL GET HTTP/3dems.ag/wp-content/themes/daga/favicon/apple-touch-icon.png IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash74756e414fe7e72a0bc1732005610b1b b9129a8d298da21f3a72b062d2df06112098e6a4 24122558859246667d6173247e5a902f2b8abbe17a450b54d7e362c29c0129f7
GET /wp-content/themes/daga/favicon/apple-touch-icon.png HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; _gcl_au=1.1.2121862811.1711639562; wp-wpml_current_language=en; _ga_C0KC0QE7ES=GS1.1.1711639561.1.0.1711639561.0.0.0; _ga=GA1.1.312163027.1711639562
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/webp
content-length: 1954
access-control-allow-origin: *
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3009
content-disposition: inline; filename="apple-touch-icon.webp"
etag: "623dcd81-bc1"
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
vary: Accept
cf-cache-status: HIT
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2e12d5156ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2022/03/homepage-desktop.jpg | 141.193.213.11 | 200 OK | 955 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2022/03/homepage-desktop.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x1364, components 3 Size955 kB (954925 bytes) Hasha4fff3eba99760bd53c5c999b00f8b3e 55cd1e307c82d5d476abce94df4cc8b2ed6018aa fe0d3bed187d8ffdf78c72929ffe93285cd8fe6d04191d20d94279fe3a9ae888
GET /wp-content/uploads/2022/03/homepage-desktop.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/jpeg
content-length: 954925
last-modified: Wed, 16 Mar 2022 15:04:23 GMT
etag: "6231fc77-e922d"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2da9fc356ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/themes/daga/js/scripts.js?ver=1.0.1 | 141.193.213.11 | 200 OK | 93 kB |
URL GET HTTP/3dems.ag/wp-content/themes/daga/js/scripts.js?ver=1.0.1 IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashf4d727b51844a6e87d7762a4365a2112 3d343b10f988cc0da0c4ca58fe6e26cdc4cf55df 8d0d0251614e63c66de207727d86c379393085caba768da7e9c8277c5abc43b7
GET /wp-content/themes/daga/js/scripts.js?ver=1.0.1 HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
etag: W/"623dcd81-16c94"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 86b8a2dabff556ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.9 | 141.193.213.11 | 200 OK | 271 B |
URL GET HTTP/3dems.ag/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.9 IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashfa59067bdb89e04689c590a1a0dd9137 889de1104b2f5309342e5a601789fa85fdb069fe 38c43d75fb76b67d833284f2e7da39531f52c83ae8efd663e7b1f415c43abbe4
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.9 HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Thu, 11 Jan 2024 03:39:52 GMT
etag: W/"659f6308-10f"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 86b8a2da9fbc56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/uploads/2024/02/Website-Headshots-Rosenblum.jpg | 141.193.213.11 | 200 OK | 48 kB |
URL GET HTTP/3dems.ag/wp-content/uploads/2024/02/Website-Headshots-Rosenblum.jpg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 690x530, components 3 Hash8ebf515e976e64918d012c4233208474 d2b176893064a761c71be7f0b35749879cf6db7b 0b3a8a9a88333110f24564f4fd7ae1160ae02fd4499f24631d2c8727f5d0bdfb
GET /wp-content/uploads/2024/02/Website-Headshots-Rosenblum.jpg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/jpeg
content-length: 48360
last-modified: Wed, 14 Feb 2024 20:54:48 GMT
etag: "65cd2898-bce8"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
server: cloudflare
cf-ray: 86b8a2daafea56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/themes/daga/images/daga-logo.svg | 141.193.213.11 | 200 OK | 14 kB |
URL GET HTTP/3dems.ag/wp-content/themes/daga/images/daga-logo.svg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash545a09a3c343916798fb95c0db305aea 3dfa43ad2a5bd01f867989210e0d2469c8517045 a54be57c482e85ead7bf3126b3a406f7acfbb270b59d49fc6e208391fdc4979c
GET /wp-content/themes/daga/images/daga-logo.svg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/wp-content/themes/daga/style.css?ver=1.0.1
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; _gcl_au=1.1.2121862811.1711639562
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
etag: W/"623dcd81-36e0"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 86b8a2dc592b56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 | 141.193.213.11 | 200 OK | 908 B |
URL GET HTTP/3dems.ag/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (909), with no line terminators Hash2cef21e3edbca260b157c80f930a2b83 18fb445d19f41211b330b3a04be0eb61a6e899be 266fa31d7d0fac8decf150ff4e8877f604086c6f44eac66135786202430ed9e3
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.min.css?ver=1 HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Thu, 11 Jan 2024 03:39:53 GMT
etag: W/"659f6309-38c"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 86b8a2da9fb456ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9 | 141.193.213.11 | 200 OK | 59 kB |
URL GET HTTP/3dems.ag/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9 IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (18820) Hash4940e4ae72b6124a6eab7e97fc8df1f4 20986cbb9965f176b6c6ccf1adefcf783f9e9e9a 58c855e7eb9b917e71e6b733e73c542c25bacb986f3ba7df2be1570200312135
GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.9 HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Thu, 11 Jan 2024 03:39:53 GMT
etag: W/"659f6309-e768"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 86b8a2da9fb356ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| marvin-occentus.net/statistic/js/stat.js |  91.212.166.21 | 200 OK | 229 B |
URL GET HTTP/2marvin-occentus.net/statistic/js/stat.js IP91.212.166.21:443
CertificateIssuerLet's Encrypt Subjectmarvin-occentus.net Fingerprint52:2C:9B:86:16:B6:B5:FA:F0:D3:24:0E:0B:EF:AA:26:E9:35:E0:0E ValidityWed, 31 Jan 2024 10:03:10 GMT - Tue, 30 Apr 2024 10:03:09 GMT
File typeJavaScript source, ASCII text, with no line terminators Hash9439e368fa4d34cd56ad4cf1cbdbce0d ac42ff77f91dcd6adb6d6312b6651a02172ad0a4 6416f7b03438bc55ace26745cf5274525467747a2449e5dfe2eb516c76c543da
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | FAKEUPDATES | | Quad9 DNS | malicious | Sinkholed |
GET /statistic/js/stat.js HTTP/1.1
Host: marvin-occentus.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 28 Mar 2024 13:24:05 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 11:33:34 GMT
etag: W/"65f2e08e-e5"
expires: Fri, 29 Mar 2024 13:24:05 GMT
cache-control: max-age=86400
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| dems.ag/wp-content/themes/daga/style.css?ver=1.0.1 | 141.193.213.11 | 200 OK | 82 kB |
URL GET HTTP/3dems.ag/wp-content/themes/daga/style.css?ver=1.0.1 IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (65263) Hash015c2be7908d2fb96e7f250d24b22c59 19b27e245ff25b881bc7b7be57723a4f179610ce 5312a4458246ff2b19f16b55b5e6cace215abc5706d457c8888090380165af4b
GET /wp-content/themes/daga/style.css?ver=1.0.1 HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:01 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 15 Apr 2022 15:48:38 GMT
etag: W/"625993d6-140bb"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: HIT
server: cloudflare
cf-ray: 86b8a2da9fb656ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/themes/daga/images/arrow-triple-white.svg | 141.193.213.11 | 200 OK | 661 B |
URL GET HTTP/3dems.ag/wp-content/themes/daga/images/arrow-triple-white.svg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash2e053fdfa3ecfd87c85f97881d9d9523 99dc358cc61702d72cb45d19fbcd215b349ee414 82c638fbdf91e8d7fbd01e64b9f97b309131a05aa5f7e8b7b93647630ab768bc
GET /wp-content/themes/daga/images/arrow-triple-white.svg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/wp-content/themes/daga/style.css?ver=1.0.1
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; _gcl_au=1.1.2121862811.1711639562
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
etag: W/"623dcd81-295"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 86b8a2dc693b56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| pluralism.themancav.com/lbK9kO6Q3vnxkIeio4aRsueQh7L82d/o+dXbsug= | 166.1.173.27 | 404 Not Found | 0 B |
URL GET HTTP/2pluralism.themancav.com/lbK9kO6Q3vnxkIeio4aRsueQh7L82d/o+dXbsug= IP166.1.173.27:443 ASN#399820 ATOMIC-NETWORKS-1
CertificateIssuerZeroSSL Subjectpluralism.themancav.com Fingerprint9C:90:4C:84:2B:6C:B5:AD:84:A8:7C:58:98:23:AA:8F:50:ED:CD:D7 ValidityThu, 29 Feb 2024 00:00:00 GMT - Wed, 29 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lbK9kO6Q3vnxkIeio4aRsueQh7L82d/o+dXbsug= HTTP/1.1
Host: pluralism.themancav.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Thu, 28 Mar 2024 15:26:05 GMT
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
|
|
| dems.ag/wp-content/themes/daga/images/caret-down.svg | 141.193.213.11 | 200 OK | 130 B |
URL GET HTTP/3dems.ag/wp-content/themes/daga/images/caret-down.svg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash9c3a4fdc65f73e3f4dd78951deb77821 2b16704202f6ef6a4a52e92b2948efd7b2088e03 da6d90062011b3aaa671069b3e877cf14c0b7bc2bc21ad38814c0f9ba8e7c464
GET /wp-content/themes/daga/images/caret-down.svg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/wp-content/themes/daga/style.css?ver=1.0.1
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; _gcl_au=1.1.2121862811.1711639562
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
etag: W/"623dcd81-82"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 86b8a2dc693856ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| dems.ag/wp-content/themes/daga/images/arrow-triple-navy.svg | 141.193.213.11 | 200 OK | 319 B |
URL GET HTTP/3dems.ag/wp-content/themes/daga/images/arrow-triple-navy.svg IP141.193.213.11:443 ASN#209242 Cloudflare London, LLC
CertificateIssuerCloudflare, Inc. Subjectdems.ag Fingerprint83:0E:9D:B0:0B:CF:C2:FC:9F:BA:81:76:43:08:CB:10:90:B1:D9:67 ValidityFri, 29 Dec 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4fc8bff92d8f09c328c5bb7abc37e7a8 39be7fca57b62519f1ffe1c700f76c518fdd03b4 1ae3be67a6292f4f23f0909da957600250a06f52f97860f153d585ed70b713c7
GET /wp-content/themes/daga/images/arrow-triple-navy.svg HTTP/1.1
Host: dems.ag
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dems.ag/wp-content/themes/daga/style.css?ver=1.0.1
Cookie: __cf_bm=yBMM21dX5QJoq6yqpi4ZEFTxKA2U8SGvf4w3o99494M-1711639561-1.0.1.1-6jsjTh8XJ08hoYZUvhVo4w1mbtUrtX26YWV368.ceGTjW1ezUHUlyoVuFmfN4Tjxuc5dAR_b0x8nj3r3ly6GVA; _gcl_au=1.1.2121862811.1711639562
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:26:02 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 25 Mar 2022 14:11:13 GMT
etag: W/"623dcd81-13f"
cache-control: public, max-age=31536000
access-control-allow-origin: *
content-encoding: br
cf-cache-status: MISS
server: cloudflare
cf-ray: 86b8a2dc593556ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0