{"report_id":"f9c4a1c3-6473-4dcb-b42b-97c729d4962a","version":6,"status":"done","tags":[],"date":"2025-12-05T21:21:14Z","url":{"schema":"http","addr":"caishen.bukdewi.com/","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"104.21.4.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"caishen.bukdewi.com/","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"title":"Demo PG Soft Gratis Scatter Hitam X1000 Akun Demo Gacor Mahjong 2 3 PG Free Spin 30X","dom":{"size":67049,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6883)","md5":"4209468ad0a208350f3aa39abb5aa484","sha1":"f317eb734214f28d876b5ab5608bbb645d9b7213","sha256":"7cfaccab9c2a1b3f143157d0eef83e95e2b0cedbc70f2d528528b2faadee1262","sha512":"0d8491f19603c1d02c6eaf844e39089b488aaee982f8c3d82fe7a5d5a762dd49c10d358e13c87a2f04791dac515e9e89b7967d87d9d6e9cb1168036351205b7d","ssdeep":"1536:HZ5F4g5A4WR2v8ZKAuhnYb+gYkImsHqpkEsy9rqG8T6/z:EZKAud7gYJVCkEsyJH","tlshash":"ab63c713b5e60059b0179755a2e0faaf2e30d903ca314d98fa9d9bc8dfc6f51b97220d","dom_hash":"domhash8f08175094d7cd28be15165153d421d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"caishen.bukdewi.com/","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"104.21.4.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-09T21:21:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-05T21:20:53Z","timestamp":1764969653,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.16","port":50540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-05T21:20:53.360656+0000\",\"flow_id\":2229007702154210,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":50540,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"updatemail2.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":470,\"bytes_toclient\":116,\"start\":\"2025-12-05T21:19:05.908258+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-05T21:21:00Z","timestamp":1764969660,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.16","port":34988,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-05T21:21:00.036526+0000\",\"flow_id\":1248404391663282,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":34988,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"updatemail2.duckdns.org\",\"url\":\"/1fed5711bf27f049e6956bde24c93c03/04c13b15b60ac3183743b985b11f5a5c.aspx\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":660,\"bytes_toclient\":116,\"start\":\"2025-12-05T21:19:09.792242+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-05T21:21:01Z","timestamp":1764969661,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.16","port":50570,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-05T21:21:01.459026+0000\",\"flow_id\":2234131598266219,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":50570,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"updatemail2.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":470,\"bytes_toclient\":116,\"start\":\"2025-12-05T21:19:07.053099+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-05T21:21:12Z","timestamp":1764969672,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.16","port":50528,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-05T21:21:12.135239+0000\",\"flow_id\":1114684879660363,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":50528,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"updatemail2.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":470,\"bytes_toclient\":116,\"start\":\"2025-12-05T21:19:05.255307+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"caishen.bukdewi.com","ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":33,"received_data":2362114,"sent_data":14836,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2025-12-01T03:25:51.278726Z","alert_count":0,"request_count":3,"received_data":309860,"sent_data":1393,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","size":284545,"data":"","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","size":7812,"data":"","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a87e2cce7117be00fc8129abfc72b1a1","sha1":"26d9bc2bbbd56217163ec1ccf05a4b4698e5c11a","sha256":"f65efecffe50465d1ffa59d289200cb42ae6115fac8232946635cedf4dd241ef","sha512":"d9232a321d406c6d15a92fcfb3266ab1a049fee6099c19fb010ee7913e2d6c1a65868a2f529ffca06dfb96b312a78429b07c3a5bd56b14f53199ce88af09a458","ssdeep":"192:8fQHMOgzKBbnnRrVGjoPGlxrO2tHxg7HzMb5F4g5A4WR2vN:20g2BbnnHUgTzMb5F4g5A4WR2vN","tlshash":"d042a424a54be2ac530341b484fab94a757ecd4fb8104035f0118ededf99e48bd7ba6e","size":12729,"data":"","first_seen":"2025-10-21T18:07:40.626035Z","last_seen":"2026-01-17T06:31:39.878615Z","times_seen":1395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"32:DF:47:F3:2F:CE:5D:A4:72:56:ED:4A:54:CB:BA:6B:00:BF:B3:E7","sha256":"5F:6C:43:00:4C:98:4F:F8:E7:02:6E:50:3A:2C:61:82:5E:27:43:6A:FF:3D:DC:DB:72:AA:8A:A0:E6:C1:B6:4C"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73132\r\ndate: Fri, 05 Dec 2025 21:20:52 GMT\r\nexpires: Fri, 05 Dec 2025 21:20:52 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"b52f38ef99ad402e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284545,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":109,"dns":1,"connect":21,"send":0,"wait":31,"receive":39,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/pavicon.png","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/pavicon.png HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"11f1b-677af1aa-237a75;;;\"\r\nlast-modified: Sun, 05 Jan 2025 20:55:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 73499\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8tGc%2FpmWUXiQnJs8JUnvJVDJV5YWhRSe9%2FTQvq48g2BnDr%2B8R%2Bz0z5AMFM04cIHvjM%2BXqcDGOLhaJIcPPrRkMokBptmPYLn4S%2B7lWmHLvI7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970a5b80712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 412 x 412, 8-bit/color RGBA, non-interlaced","md5":"16a87b91194aeaa309191fdf6575f66e","sha1":"fe68523f4616c7c1e45f279379711955ce650548","sha256":"c469db39931805a57955aa4bb4d00c92efbdcd2696a6cf09ef3e81cd69d734bd","sha512":"c91114dfb3da02b8506d6cdc602287ac78fbb86ef19d995c01a7948a0c89cbecc814fcaf3477a383fea5b07923063ad7f60454ea48eae783160ad382e2d5b7c8","ssdeep":"1536:0Ntb4DZusmTwXj2DLFuN0Kq4szaI7mHKTB:uctHIBupqnahE","tlshash":"8c730228192b11b3f84770c497a2281e87a18b66cd0b675cf5dff8296b05d7c16a3e87","first_seen":"2025-05-20T03:35:47.485046Z","last_seen":"2026-05-26T23:36:03.099097Z","times_seen":99,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/65.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/65.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"caf6-65fe1668-237a59;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51958\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6OrdQ5AQj6aKMqReZCUqbxT9GRRnfNijhWUrx0OEo9Yvq42IKJr4K5sXOO34K%2Fp1MNRFMmOaJl5%2FSE8SQbdO0ivysRe2amoVvuhFm2jhXX5X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970abb88712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51958,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3dc42c5298db55654d220f09899aaefa","sha1":"75a14844aa0a8f701fd7c76eb4e950300e02c6f3","sha256":"0df256a17ddb76a766ab5e5953cee96f79a29fa0a1c5cd9a5e2c1bd9c80f54f6","sha512":"c7c7d3a03285a83e8e34f31fe0f71552c1e2bfebf92b170fe6b390915498ea9c23914f253b0a22216c2dc73eacb56c36c737010fe98ddc70f6f084c7fcab87cd","ssdeep":"1536:ktjgkewCu6pObm5bPVgW3U9AZj+zLUk7PRWpiG0:JkeBDMMxqIjyLUk7JAl0","tlshash":"ed33f152af7d7146f715d7f439d8d98b8112b0bca1cdc90cc8276d8ea7b896c0632693","first_seen":"2025-06-02T11:09:16.978946Z","last_seen":"2026-05-19T20:56:56.492468Z","times_seen":21,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":402,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/106.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/106.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"7e2c-65fe1668-237a62;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32300\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A45JEuB9P8VvDeyyfk%2Bo5HfzUzJldPTdWGxrxTHCPj0HDWQc7LtdD%2BafCGvhgYnkcFjlnuSzIORWja4lAsBRcyrC%2BClK%2FRF5IvQ1VM%2FYnHeN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b0b96712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2690f468511e41a9b4fecbb4dc374a86","sha1":"767ea24266aaba343e1e23218304719cf940f390","sha256":"bd2c1ec0b9cc7b6f8ee2fd6d36871925573e060ba7473e33f1d66c1b297d6d6f","sha512":"fca2fcb7b14192c0ce9c462d34ba329addbd6dd961585910ffd4962dcbd972f6cb9af3c7fad5096926e81dc49df306949ef8e56002c29a8f98fe1958991be9e5","ssdeep":"384:2Uz/q8GQC3B2d7FkV5eehmVP2lFvAQKxZwVUP+RPFaThAIdCo1cVLOHjuQimK9R1:20g7BUm5PlFoQkZwtRPFxIYiqOD0mu1","tlshash":"65e2e17554758e4eeb82423c45f80d4bda98b8c8278b38241d7cd2fb9b0525a277f70d","first_seen":"2025-06-29T14:29:43.223382Z","last_seen":"2025-12-05T21:21:22.953422Z","times_seen":4,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/117.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/117.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"7d7e-65fe1666-237a61;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32126\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K15dzF0YUsxnE1LldAbXmGrO24D%2BrjDZsbitq%2BXYhTSeP1s46bvxttu8z9j%2BI5sxKBgrLVa16XW7JWgWlYiAuI0ibGZLsJKr1FxXgoG3wLPB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b0b9a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc09d1d7938b1d016055e4111aa6716f","sha1":"c09fd660d1e51cbcb5efe0e83875b13b3e2a2b2c","sha256":"37d7139a16cf21823fc80cc794d931738f1064aadff8a313e3ecc466ef4ec0c2","sha512":"7e8bc910d8f59000912482427d388a5b4fe9fde169f0435a4e256082104f867f3a2bd388f59153b3fb3936910e45130cae70755dd4407d37d800200d9ffbbafc","ssdeep":"768:n2Dlecp0E9WUZaTlcLG7YWU8QldLAa5ag9DuAH:n2h5p0E91EcOYX8QXMaryAH","tlshash":"41e2e1fc93b5a699e8400abef017dd1fc004396bd1c918eacbde9257ec1b14a42d49f8","first_seen":"2025-06-29T14:29:43.224303Z","last_seen":"2025-12-05T21:21:22.954156Z","times_seen":4,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-05T21:20:51.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Dec 2025 21:20:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 05 Nov 2025 06:51:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8cAESk4xqhwFQCSxAfSOgmoL6pv441SWQdzA%2BOQk%2FYL8XZq2aAhJUr1cUZLPiCgyEt%2B9jk0Z1KpodP96pIbjlzR65OXEk6ZwJ1F9znsn4a%2F\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a9697040a1e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":41180,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (306), with CRLF line terminators","md5":"9e9fc33f080b0e51e4e7f779ece06b3b","sha1":"054439743c2445b2a5d3181104987ae612f158a5","sha256":"5ecccd3a71a9764d61607007faf36e818769c1158270f7d3e8f9770a66f2fb55","sha512":"102d48cbf8b558302862aa00974ec3d0aefe5b72d92f8fad33d88868388564742af5eb4493ec2fcede95e5d6cbbd910c664d7246c78b1ab844664c8c889334f0","ssdeep":"768:TjPNfnEwADhzLYnPpYD0fvt/f6LdmlHh8ry7v2aoQZNp:/PNfnEwADi1Np","tlshash":"e6036276a5d21052b1339769bf62950cff629113c3068998b7dce3a31ffbc948993a0d","first_seen":"2025-12-05T21:21:22.954768Z","last_seen":"2025-12-05T21:21:22.954768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":40,"dns":0,"connect":1,"send":0,"wait":428,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/135.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/135.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"9ed8-66044d9e-237a7d;;;\"\r\nlast-modified: Wed, 27 Mar 2024 16:47:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40664\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jB15%2BgaQvzDFiBgwOmPS9vvT19fbl%2BQHWygtanGK6X%2FTy7s6BZKtELUcJb8bSlBSIiIMf1jQRnUL%2FwbfGAfndDN2mc%2BUTg46MgxZwuxNdU%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970abb86712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa97bfdad1a9732d2b2d96c951e4866c","sha1":"98fafc38443aa67bf4af8f6035443dbe1c5224fb","sha256":"74a4462a1de9338c88210f5453d9ce4ab1de81616a8df811880c526e901dc173","sha512":"67c6aa0682871b01ad692221a9ed9d0c1ca76076e56e11d671874869be5d2a51bbb0bfc1d1950f406a3089e1b5f69b7c0b42b85d4e710d343727fbe606379748","ssdeep":"768:+uk+OFgm9urPWqrLRPNHKHkR0tiLnWTYwzEU7ZE0CTRkjx5bMN:+ubTrP3L7qa5y8cTWTyjro","tlshash":"1003e1c4b094ceccf550bf3e340622f4cb2f64818e66667e5aaecf5455c250278be29b","first_seen":"2025-06-02T11:09:16.981931Z","last_seen":"2025-12-05T21:21:22.955765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/homedewi4d.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/homedewi4d.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"642-66044cee-237a73;;;\"\r\nlast-modified: Wed, 27 Mar 2024 16:44:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1602\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peV0vjqGfPeDNR3J%2BCMQyjNzpl4fpvHTcnsBvOfJNoi2AcXlkVXr3dduhtu1XHyMxHtUdRVLKEc1cOk9SIrv2FjxdKCzRUCpyGWhthhIolj0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970abb89712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"777f2b115edc306efe95948dd92d2dea","sha1":"c61474c5012f3badb005c589368591fab08c0dbd","sha256":"d13a62aead4d6f0a89f3f8c6997a8d122c22e2f7b9e6ce5b956a9a079e5dd386","sha512":"d3cb26a53cb4a0cf03c015ab7bb796ae4c2f7c6e4213f78dc952d26e9fea2327ed25991eb6007cca45b744aad385e71ca96fb1283a94b57d318e8be139b6ab5b","ssdeep":"","tlshash":"3d312a0da31a8b3dc9efab7ce284e3635b2c707608789c897950804b184e8940d4b4b2","first_seen":"2025-02-17T09:36:28.830254Z","last_seen":"2026-05-26T23:36:03.093147Z","times_seen":103,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/110.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/110.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"da7e-65fe1667-237a64;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55934\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtLLP6CQDoNv7m2tTbOoBGeZ415dWn52HFQVlYUOVIe5%2FgXdHOiNUJfqTeGmjZQM1OPfT6wdv4Pig%2B1UlpBLJ%2B23IH2%2FrniGpqF5u%2FDKc1sc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970aeb8f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"460ea64e9fa8f874cec29ebfa91cc5eb","sha1":"4f8699126602e4a3cda9543430af6f0dd9d9e4ca","sha256":"4c5c41d19d000a808ad54a72a2634ea5b1ca99f5ddd1cbd6114f4e29fa4e9be2","sha512":"10d21f2d43c53ce5151f17a47b41a03851043b52dd4639cefbf99b526dbf3c9bd687a56d449cc64d10bfb08a3bc07824b0a92db918711f0dd2993393e005ee91","ssdeep":"1536:bJ/clhroUHQxvYsBwYxy92ezjMTOaeX4:aboUHsvYWw9xwK","tlshash":"1043028b7331a6a7f3601ef2294bd9802b58b7e28df1d60d84225655d096b77f1c27c4","first_seen":"2025-06-02T11:09:16.986912Z","last_seen":"2025-12-05T21:21:22.957554Z","times_seen":5,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/107.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/107.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"dcc6-65fe1663-237a78;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56518\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQ9wqBHPXjfy4w5OYjzhv42SJtXfHQeDvu1boGF1Zcu5uFgrHQA2Ul1KQAWXvIAgy%2FV%2BUbUy0z6RiznJIKpSRDK0MI2rNd1QsQMAw2yzpvU6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b1b9d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2407f901b72f949e614152dd13b7f708","sha1":"2ca348b49e94e4520a94b26fe907f5204d5d6f78","sha256":"c58df2c8b2030d8da5e7f923b9a54d861a96ff4635f0373bf8e582c643a1f172","sha512":"9effbdd4a8399ebe3711d9f288812d113bc18146a3b36426f9d96536221874d482aba40d9964e4bcc9d7cc880197843e826c1b9af8fef304c05ceb5c6e2c299e","ssdeep":"768:kt4JqDFHhfyP6zkqnB7PFg6RzzgOIp854cPMz42hgfPg5lTEy5hjCR/Cnr1oS/Uo:gQEzKQB79gNpVuFCeg5qyyR/CnrWcPAO","tlshash":"8f43028b5ba91689f793b5322b495cba78b93043ca889130139e5f3c0150bbe757b19f","first_seen":"2025-11-15T13:53:21.426191Z","last_seen":"2025-12-05T21:21:22.95865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/vs20olympdice.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:59.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/vs20olympdice.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:21:00 GMT\r\netag: \"7926-679501c4-237a6a;;;\"\r\nlast-modified: Sat, 25 Jan 2025 15:22:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31014\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:21:00 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcRFOiy5AqxXFljmtQMNbhNo99WInkwQk4zbDAliT5%2BNSmWcXkfIzaUntzq8lvfk03qwVT3VT9%2Bj3dkgkeGb746wsISm86CSZ48nNEa8FNNG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a9697362d7c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1efd8a53e2b38c99e3f4d56ecb29c243","sha1":"6fa80833c25a0c54bf673dd1f2f415a646c8524f","sha256":"46ce54fd8969d57c0f62823300dc2f23fd934f9e83ae056ec21760205e3b4faf","sha512":"73caa6a4ade9bbf445d6abf45a8f6b80dfddbaa34940eccbab3112bcb73bba2b02983c41fe1c44a9830f067420c8392080c859a9f637ed888b46388357e21cea","ssdeep":"768:OepUt2Fr/wyRiKVFHLH8BWhqmoNiQziyI450g/0NrsgcR:DpLFrIMRMWMmOhM5q","tlshash":"ded2f14e93f23cf9f780a13f6465b3fadfb9b2a84f541a38608d42780f14d586a1d658","first_seen":"2024-11-23T03:04:40.091135Z","last_seen":"2026-05-26T23:36:03.088644Z","times_seen":25,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/pavicon.png","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/pavicon.png HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"11f1b-677af1aa-237a75;;;\"\r\nlast-modified: Sun, 05 Jan 2025 20:55:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 73499\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mPndRGJwXm%2FE3Eqns4G85TBgHNVKKDsRmWjIfCPW3BruhWV%2F4Z0QZDVt3hUcJFJg3EsAcZ76OBR5DeU%2F3KQqUH025aYTP1TgUk3iY1SfkYj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970a5b7f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 412 x 412, 8-bit/color RGBA, non-interlaced","md5":"16a87b91194aeaa309191fdf6575f66e","sha1":"fe68523f4616c7c1e45f279379711955ce650548","sha256":"c469db39931805a57955aa4bb4d00c92efbdcd2696a6cf09ef3e81cd69d734bd","sha512":"c91114dfb3da02b8506d6cdc602287ac78fbb86ef19d995c01a7948a0c89cbecc814fcaf3477a383fea5b07923063ad7f60454ea48eae783160ad382e2d5b7c8","ssdeep":"1536:0Ntb4DZusmTwXj2DLFuN0Kq4szaI7mHKTB:uctHIBupqnahE","tlshash":"8c730228192b11b3f84770c497a2281e87a18b66cd0b675cf5dff8296b05d7c16a3e87","first_seen":"2025-05-20T03:35:47.485046Z","last_seen":"2026-05-26T23:36:03.099097Z","times_seen":99,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/104.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/104.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:54 GMT\r\netag: \"d6bc-65fe1668-237a63;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54972\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:54 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvLdh6LEDLmrdg2ULhwTBUNnF4pWZ7rLvhOeW1lItZSfPMPo%2BeRwA9K5bbitu8Zx%2BP%2BO5taGfvOjeD11BjLFqrdFcyTjg2atZV%2BqpWY%2BDpyx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b0b97712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54972,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f7a5717023644115357d953b62cdb6d9","sha1":"abb0b3bca73d382b94d54082aab7562ed303a79a","sha256":"f98bc1d44ab94f7f577e58076eac67e66e6d27a2720254f0e73cb8a8c289e307","sha512":"da287c4cd73fd46c2c3ff56cf2a4f99a5582255ef437cc01a78f711b0231f6adf75febaeada72bfc8cb0ebef4b9fb05641cd251c51e6b2de16748bd145f93e92","ssdeep":"768:3B3zeeCNsge8C7MJ+X/KlhhBPTvuN7BlngBHD7Q+bCLZS57q9FPDDEv/EeL:3onW77i+X/KHiNNlnuj7tb0Z91DDETL","tlshash":"4b330284b4ce27a5e9be47be4536096b88ad3a6d3bc96f36019793ef3d0e4140275036","first_seen":"2025-06-29T14:29:43.231965Z","last_seen":"2026-05-19T20:56:56.488104Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1466,"receive":422,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/74.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/74.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"dd84-66044d9e-237a58;;;\"\r\nlast-modified: Wed, 27 Mar 2024 16:47:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56708\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSMKwaNmkAco217B5wptY%2BDniAgT26uosSQQ50r8S6hWWUPpcx7VDrdV9%2Bkf0urODLxfrCiOqPs5PpU2WuBQl8bt9QjW4EZbzdn%2FnFG26B4p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970adb8d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4183fce1a3c62f43aa7e1e0144086202","sha1":"e73f999c1aab563a30989f79bd70b687a828d981","sha256":"932a4f7ac0838abf0c7a980a8a3c0b2ab1f6c7b15e69bf7776a0fe14ff911bf5","sha512":"d43783680f3b019606205ef140105fda3ba7c6674d9c3b01c3e9d895352a475d370b832084b3c889977bd2f20d909d377e48523f9d3e5d541c358a158ce1f639","ssdeep":"1536:jynJP4Tnrdc7mO6qglOj38vVRR0zlHutuE83L2:64j8gEjsv3olHuIb2","tlshash":"c24302fd53e2a94ad84098bc08966af3bc5b4486185cd6f1581f341e033fd7b43adada","first_seen":"2025-06-02T11:09:17.021292Z","last_seen":"2026-05-24T04:38:48.786376Z","times_seen":21,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/119.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/119.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"c146-65fe1664-237a5a;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49478\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMW8tNOrpT4DhekyyyDl0MR7w%2BIOurZtObd7jOJcccXCZwgtyy6qgNGBT%2BBHNEAzG5f3pNgX98LBoYab5Rv0PT6%2BK1X3LbIoiUeEij6Rh3oN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970afb94712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4369491233e246db49707a5ec61d04f5","sha1":"eb833872ad65ab9805bd34a55fdc9df53564f86a","sha256":"c27197716af7be40316eb85b32fc297098f8ab06f3004137bb9286ba00fb4e23","sha512":"7df69a843f1445fc314bb575645cc461f01a88401be6162edd9fe201bb79816b4fc96d5e51c4ddd0342ee10f7b37c4758cd16715e2c9e83b8bd933df632108fd","ssdeep":"1536:a8er53aS5unodSlUPGvPWAja/kCN9Feh1AjDJ4r20:2r5KS5unCSl6GvPWz/kCFq1sW","tlshash":"5723e1100df1978ef6378634911d0976ea94a21559a27ef7c8c5e71a212e46b80cfbd3","first_seen":"2025-11-15T13:53:21.401222Z","last_seen":"2025-12-05T21:21:22.962853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/zeus10000.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:59.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/zeus10000.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:21:00 GMT\r\netag: \"63cf2-679501c4-237a5d;;;\"\r\nlast-modified: Sat, 25 Jan 2025 15:22:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 408818\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:21:00 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmK1rattcsgCXZOZkx%2F6qOz%2B2mthHaIYGzmRPghwW1KpSMRlkmyJ6lVvc0YPSpy66ATCM9JIPMZdJc2qPwT5KF13jHmwNeeCwcJJiLszoIfJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a9697362d7d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e80d43932b8b1e07fba40583d04eb9c7","sha1":"3234f756f6eca2f4988fa1df18036e2f60bc3927","sha256":"435f222c8a67282c4ada41f8d7a5c195b8c5d636ceaeed5b3a2f6667a79d6262","sha512":"f8bf69f0c0c5e6ca9f85f24d78e7b6ed7cece14604d43b304b0a3eaf2d33f9a59928ba485b399b6a37947aafdb89287e6f7ebf0c351f9eb75fba804b68595fb9","ssdeep":"12288:fjJFpOICy50chayRS5AJkhoCLmOWtPvNaXrgjLO0:VCVcoWSCJnUmLtP1aXreLF","tlshash":"d394230b65daad68c4f4dc7fd90552075aa67c3eeec48f1ac20a1f125d2e6d8b0d2d0b","first_seen":"2025-06-18T12:51:05.600757Z","last_seen":"2026-06-05T21:48:01.386757Z","times_seen":358,"resource_available":false,"data":null}},"time_used":1397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":996,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"32:DF:47:F3:2F:CE:5D:A4:72:56:ED:4A:54:CB:BA:6B:00:BF:B3:E7","sha256":"5F:6C:43:00:4C:98:4F:F8:E7:02:6E:50:3A:2C:61:82:5E:27:43:6A:FF:3D:DC:DB:72:AA:8A:A0:E6:C1:B6:4C"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://caishen.bukdewi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3937\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 16:07:32 GMT\r\nexpires: Thu, 03 Dec 2026 16:07:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 191600\r\netag: \"a1ee3895c747c6e2\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12729,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12614)","md5":"a87e2cce7117be00fc8129abfc72b1a1","sha1":"26d9bc2bbbd56217163ec1ccf05a4b4698e5c11a","sha256":"f65efecffe50465d1ffa59d289200cb42ae6115fac8232946635cedf4dd241ef","sha512":"d9232a321d406c6d15a92fcfb3266ab1a049fee6099c19fb010ee7913e2d6c1a65868a2f529ffca06dfb96b312a78429b07c3a5bd56b14f53199ce88af09a458","ssdeep":"192:8fQHMOgzKBbnnRrVGjoPGlxrO2tHxg7HzMb5F4g5A4WR2vN:20g2BbnnHUgTzMb5F4g5A4WR2vN","tlshash":"d042a424a54be2ac530341b484fab94a757ecd4fb8104035f0118ededf99e48bd7ba6e","first_seen":"2025-10-21T18:07:40.626035Z","last_seen":"2026-01-17T06:31:39.878615Z","times_seen":1395,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/kayutogeldemo.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/kayutogeldemo.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"11da-690af3ba-237a5f;;;\"\r\nlast-modified: Wed, 05 Nov 2025 06:50:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4570\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5G7VfklaL3DyKtmRXCmCCGLuZaXa%2BH0I1XyEREoSZw1wcbG5fHXvurIyborL46U7pv%2FEu%2Bhog6Q4lGxkLig3ENk1QSLXCGMSE28wD9AXLqi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970aab85712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2166af4c1f128eccc9b29e5453277907","sha1":"1a45465d902d798f02f56de9840c132298c6c989","sha256":"bc5d424bed9d205eec543f76f994daf000c7ceeaf5f3f36c92a0657f2fbf9e70","sha512":"6b9d46152dc6ab019e50e99b5e9a8bfd019cf16a497373b44e2a5c7c09cfe8ca767461de5153212ef4d3f873e9a9b77ab8c775ac99cda09bfb7094844800fac4","ssdeep":"96:SPyOWKt2JjqXyCcgwMWBhKpgF2Uxpcd7Sx6CSDD9US:W32dqQgwvD2Fd7SSv9US","tlshash":"cf917c6b181e63b8d7c34cbbc5a417f23a39c84e81c1d9e0ca8357dca6bb992a371111","first_seen":"2025-11-09T11:16:59.160882Z","last_seen":"2026-05-26T23:36:03.100193Z","times_seen":12,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/livechatdewi4d.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/livechatdewi4d.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"622-66044cef-237a53;;;\"\r\nlast-modified: Wed, 27 Mar 2024 16:44:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1570\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yycSgMFr5BVVtojtXZoXU%2FxLYcIWcHHya1grkrjWtM%2FbWLR9PmCwuznnPMqkhOXOnbBx1GF2UuVGpUjunsebTMOSfwkSU7QJ4jgvw9Swqv7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970acb8c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85a768ebe3bb3d7b0aa87bd4f91efad0","sha1":"517ac3b474312b72ac24ce02e0a1e35415dfc336","sha256":"b41be09d29fd4b68e340adb5f94547d11bf0e611041af4c211bc3aca5aa4ec1f","sha512":"ca869ec4d36287720eb8375cd3ac998089ee8952bfab909afdd8f222b534ead764845c4f179c9235d25a1e68e62b17523f35c2ff61c336c23563494b6864401b","ssdeep":"","tlshash":"7531ea654b691861d2dc08e13dce393aa34235e6517bff9760b938305215cb549b49c7","first_seen":"2025-02-17T09:36:28.820977Z","last_seen":"2026-05-26T23:36:03.102846Z","times_seen":105,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/79.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/79.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"a0fc-65fe1666-237a6b;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41212\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pf7eARGVxzbEmBXr2TuiE%2F6hSp0Nrd3fqHhS6mL55rTbrBwsN23v%2F0ua%2F18TGe4CFNuBhda7g0jcRbwihWClS%2BG2W%2BP6veJ4o%2BxuFbM2iS55\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970afb90712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c2e583e82770fbebfa283f983336643","sha1":"61236ce7d0d152f5d64947c86f6dbe88a0acc68e","sha256":"2cdd8df7bd444a466396558f6d3eb83e5fa3786af21a69478dd0a056a0f47559","sha512":"9e62e1f0f8ede951a1807dbcc5ebdac645bd891e13e592ae7ec88edc9914d8c72628b618e8e497cfef8abf1e18e134b93729c91a03403962006b4c6294f364d6","ssdeep":"768:Qv1r8FKqRD3JCJtkJb2G67j3u7vzOK/H80PsNhB8oWjgc6GX0Tgb264XwiQLM8A:QFQ3D3Mm4u7vSI1oWcc6E/4XwsT","tlshash":"7903f1dabb649aade84b4b7040dceae2b314b0438b97e75c7ed0409245a1b15435cafe","first_seen":"2025-06-02T11:09:16.997944Z","last_seen":"2026-04-06T23:56:11.613577Z","times_seen":6,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/53.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/53.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"b640-65fe1666-237a71;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46656\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wstduP93h%2BTETODJqWZYMQhZAa%2BI7Q6EpPOzJOOlKobEdKK6PyvfW%2Ftf1QXheYYIAbxPV3qQvd7TFVfj%2Be88BLPeBjxVac8JhYfC%2BxAMc%2F%2F4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970afb91712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a9403486c113f3290b2a6899297d338","sha1":"6d51ef8267431e537a33497970692d84dd424f70","sha256":"bf8ab51656b7bb89e3661473f666d7b62f63605e8a743ad79808c6dd3abb3016","sha512":"101bc5b261b8e385a003d54211999b987fa6034f6151e1528fc747569aaaebbf4fdfc3238b182bedfe6af3a229e83adfea0e9ed7801209c381a44d746fe82cae","ssdeep":"768:1ZDjLyrnxkncV6BM9Xix0XgkDybM/HDAc5vGuuezqnae2bYDmb32rvR4KFgslmWg:7Dj2L8Aix0XgjbM/HDpoUvPnGPyslmXL","tlshash":"962302c6c53b8d21e501a2bf07ba3361b59d913e9713ff7c8442dfd85a080a5614f2ea","first_seen":"2025-06-29T14:29:43.2338Z","last_seen":"2026-05-24T04:38:48.778011Z","times_seen":6,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"32:DF:47:F3:2F:CE:5D:A4:72:56:ED:4A:54:CB:BA:6B:00:BF:B3:E7","sha256":"5F:6C:43:00:4C:98:4F:F8:E7:02:6E:50:3A:2C:61:82:5E:27:43:6A:FF:3D:DC:DB:72:AA:8A:A0:E6:C1:B6:4C"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://caishen.bukdewi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2976\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 06:05:41 GMT\r\nexpires: Fri, 04 Dec 2026 06:05:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141312\r\netag: \"9215b9e0dcad338a\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7812,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7690)","md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/84.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/84.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"e586-65fe1664-237a57;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58758\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rk6%2FBuBkreNFyBAms7tnkqQz7V56ETlXQ1lUkvBZ9LOeF8AJWLnxHUYb9LFAL6nqOE8EYZJfYYvqlU3%2FZ4LF67nIpxrUp8nFKw9tr81LksK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970abb87712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71e12d4864082550f3ebd7bb05a54735","sha1":"1a5aab63fa125b43b0490c5c3b0696cadd57da75","sha256":"c56d9dc08c67673efe13574b696a8b6fa3184cf2244fbbd56f5c8fbb52e40fc3","sha512":"53d873c0b19b272ea45a93bddabcc04e93fa96fa9da4e43bb14646a3e61ef2d6ab2463f68a0b1ec8cfe8cc195f2cf92ef5b9f703f9719230e3f8684bb9caed67","ssdeep":"1536:D6JD3Xi+tTWOXQ7eqI+yf+n8/LGRt/0sH2Hcz1uOth2nIC1JsF2At+6U2:DGD7HQ7olfI8wRqm9e/I/w2","tlshash":"b943f176b2b21eb2eb75c43454d227e141c41b4203c77b81279f95538bfe692e88ed2b","first_seen":"2025-06-02T11:09:16.984446Z","last_seen":"2025-12-05T21:21:22.968738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/89.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/89.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"9c94-65fe1668-237a7b;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40084\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZaWQwuhyO4dayVpHg%2FHkxMvR1UW91R%2Bl0JEHUqQWic6r%2FU9zGQ3iadY%2FTDylhZYzKcHD%2FNVlh4wzLA6hmMs0WXDdbQDXO5ndsJv7Aawmbqk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970aeb8e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40084,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89e4dcf753a13637458f408b3cecaacf","sha1":"3c4eac75d53629f275980fe1798a19c2e422afda","sha256":"bfe7470812bd093aac3fdaba4d5b0f7c2362b38f27dea5651e986dab8b7bcbd3","sha512":"58e2983a727dd330106a21a3adfb8111683df7ca15d4735c20fe6568c9f72f87bf2f6dc4b5cf654fab8793fc17b04c598b99ee23a53314e5043621507af5e498","ssdeep":"768:8OWzQbkCw4pS377L4Nt4pTmRdYBAOGgpFGAIK6:85Q4/4pY4Nt4h2GAgrGVz","tlshash":"2b03f11d424da39af79b10f603d3f9b289fc5e3f3b05b7082744199386611e8c9b5ba8","first_seen":"2025-06-02T11:09:17.018507Z","last_seen":"2026-05-24T04:38:48.775405Z","times_seen":19,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/75.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/75.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"ed10-65fe1666-237a65;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60688\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezX0lswa%2FJ941TrptBGHwALDf0158pvZJ%2BC80qorKVJXMLZKIMrMY2yvHjHh1sl6t7YsTuDh%2FlISAZA5%2FCNybSSzzDwcHDKD0H0rFbLKSt5%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970afb92712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c68e178a4015c9d2bcdda7bbb919ec0f","sha1":"a02aa95f394463bf2df75ee6392d42f58de0a1f2","sha256":"39cdb112913009930be5bbd3784a6042830f92b7057cac1aed1fb85e5e43bb65","sha512":"e58ca53abc8033deb3e6ca3978c0699a4bbf74824cb541f941061129d99f3dd233124541515ea190304347c2a6ffe9a19613e473cf7edcbc6baf372bb1a36452","ssdeep":"1536:cob4mzy3bRfeg/zkBhRo/eK6xzq1lpvbDE0+Wr:coPYbRfegrYRo/1/b2Wr","tlshash":"e053f13b73a61cafd035f336e6d13be64a69b04b8a491607a971135580630cdad74efc","first_seen":"2025-06-02T11:09:17.022619Z","last_seen":"2025-12-05T21:21:22.970927Z","times_seen":5,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/62.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/62.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"bea4-65fe1665-237a56;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48804\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2qrnN8keJ%2FTUDXduEtL5f%2Fz%2BjQNAKc%2FWY9LFjxh37Uk7LPKgJJP2HqHHV3e77TTnnnuSk9seja4a%2F%2FyM5HHDwbItClCAAQTJ4VxIecnGLRn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970afb93712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23e3d9347734c991cb4546b368639430","sha1":"3996d07aff124dfd423c7572e047eb7ee939bb23","sha256":"6cb9ab85307cd5d1ad82c3a085e20ee458bb6a9b798f68653285a1a3de67e89c","sha512":"62a89f1fdaca45fd3fa414f0be39b5cdb4e6f912f553ca6290ea1d70c2cde77c3d02be108ffaccb57cab41914bcf5f41705513250b16477bdfead39542abcdbe","ssdeep":"768:aAcMfaiSTiG9JwnIs4dXfCLhXYKHdr6toujZ5FEZc9q2eQz9nIrHK2:aAi4iwn9MPC1FEt/bFIc9Rz9nWD","tlshash":"ae23f135e3a4a240d618eeb8d510cede6ff4b523ab4985e25a088c70358d9e5743b64b","first_seen":"2025-06-02T11:09:16.990531Z","last_seen":"2026-04-06T23:56:11.629564Z","times_seen":4,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":397,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/71.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/71.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"ca9e-65fe1667-237a6d;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51870\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIUzngziBGMh%2Fj%2FH40Yliw7l2RY54GRtmBYHrOPw5VKAjZ593rncR8mD44Q4PgFOtRxJNR2ClXWgAG210RJp19duUee5fVlmfLM%2FGJKREkWu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b0b99712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7bdb2e4215994106ac252e319437f1d7","sha1":"3dd09f0a1355e4812557f05658278cdfaf827301","sha256":"3dfc66ccfb13bcc925db5cbd03b0caa73cc216785dd8a0f956af46fe2e4e1f4e","sha512":"db52360c69e1eb4ac3eadc5d8f364eef9e300de0c358ec39b8295d8acc4c21153d701af1d1b35a63f7e25d6958788c647fe607c70ed4b70c7d8edaca86ba1c01","ssdeep":"1536:KHikHeA9SDZSB42TkPAh/M9/reZ/8xZ4zCGQRb3kqN:wiHA9SDkB4Q+AhS/QklFx3kqN","tlshash":"6d3302dc7977178bc84a94bcf62756034f5e9425f622c84f91839ca4d05bb43a00b6ef","first_seen":"2025-06-29T14:29:43.239461Z","last_seen":"2026-04-06T23:56:11.583657Z","times_seen":16,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/57.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/57.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:54 GMT\r\netag: \"114e2-65fe1665-237a60;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 70882\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:54 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4w8x%2BWoZKd4CTcex2h0qufacjzdH7DFx34pqKCZaCXT%2F%2Fw54a%2Fuh9S04sddLieKNICIoz9F%2BOeebdngb%2B0x3UeJSso%2FCTt2wG4%2Bo%2BUhjhX8n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b0b9b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70882,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e230beae71fc4fd20516949d2bd884a4","sha1":"6058f956e2940138980e19982bf05e82d42e291e","sha256":"3401b8402b60a05cf7323d20db71acd87cef442d5058b8167678dde2ca26435a","sha512":"310e34373c961d10699c81b2069bb5dc2d191eaec9ec110369e7fd16a7d72f15b1a3058941dcad0ee3b72acfd2446324d3686fc6b3aa10f4cc891c6c23c23d8c","ssdeep":"1536:7jp+W3XVCbSKmo60CDuWlegqVdAZa5FbtMVF3viUzH9JtiVZSdyNqvV:Xp/Ctn/CiqegdcBM3bJgSdVV","tlshash":"fb63023e23058e82ed143f74939c77dba56a73919f437b1766af8263069b0681c4d20f","first_seen":"2025-11-15T13:53:21.395001Z","last_seen":"2025-12-05T21:21:22.973246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1434,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/87.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/87.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"ce30-65fe1667-237a69;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52784\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63h8CuhpGrvZFA9%2F%2BUzGH%2FtbrJH7PxnbbDWWdHyeua4fKJcnSbLu9tp2rpyrP52VE0WUhHt6tYtgnpkY6nJGd%2FhfZH1met070T1Al1Pf%2B5p0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b0b98712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5562f3ecf612b0de8173d8b0efc87a10","sha1":"2f06aed998f7da9493e073aea7b6651b936fa0c0","sha256":"edca132d427a59691bdd91536b3d9411b49316ac72b50cc18c7491bff8fb0ba4","sha512":"8c7a21d92db85a58fad2d3aa079f50841ed0dbcbf477508ae6efeaa9be29a5560aa84fdea6b1654f20eee983fa6385ee95454c48400b1f172e77d28fabd29bbc","ssdeep":"1536:lJBrkHuYDl5h2Y21j5WIEclKSt+g9vBFG:lDrkH5L2Yqj5W7y+ABc","tlshash":"4b3301e4c341a1becf71ecb0029de75e30b4ad87639f99aa509174e271870e9db3c624","first_seen":"2025-06-29T14:29:43.238493Z","last_seen":"2025-12-05T21:21:22.974305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":379,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/60.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/60.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:54 GMT\r\netag: \"10b70-65fe1665-237a5e;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68464\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:54 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jZp%2B0xr0lquyb%2FyiC8NoKVFLpZd9evU65Pwl1iHGsuYZW4o13Csqv5ayjIqDjUCqb6M3CvMUEjTw4RC20cChMxb9heLb9WOrT0Nn0aeo5%2Bv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b1b9c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9af96a8bfef2c4efc1bea4e927c2b501","sha1":"7d38100b3ee6ae5f80217fb19c7625459a2b7409","sha256":"3af640bf4f22fb9d52a219d34936224adfc9e7b7cc1367b6f23dd2af06b47d45","sha512":"00586048b2b5cf7ca62d78bf2a79e4df0bb989985004f954f688cfeddfac7148fed296568920638c58d52d523bc98d04fb18c39519350d3fcc80ea9d4e902138","ssdeep":"1536:lps0BjFGbBoVGwgzVIRlaHTrznyS8OKuL6xrLu3:Ds0BISVGwgCmdzKuGrq3","tlshash":"f663f1d4429704dac9ebd878e4ade8fa64d0013159649b3f47963a5e63c0bf0b891ec3","first_seen":"2025-11-15T13:53:21.390879Z","last_seen":"2025-12-05T21:21:22.975348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1474,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/vs20olympgate.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/vs20olympgate.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"9806-679501c3-237a72;;;\"\r\nlast-modified: Sat, 25 Jan 2025 15:22:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38918\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhq%2Fv6HoudEulqlzWWWB7fhixYnvV8NbagKlUqfe%2FQlFaW67KfO2dh5UaqB79m3EAdt5Uv5vM6RAKWSeR9ELgDOYwbXqtYSPWMPyFofn74Mx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970b1b9e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a054a3d52b0e0648a34bb644ed63fb3","sha1":"537fa60c32a84bb2676deed7df7e689fba28720d","sha256":"24e18090ca5d0d86a5371d49ed7bdcc110137fb4ae76520f7e3adc4c9fb7eca3","sha512":"3b409d455c469143fdd715e3e41183daa5368809a2311d1bccc12b32780f9afcc51b91346be9fa8ff7bca4f2c4dcc99a8b2bf697fc17401f870ad7446e499913","ssdeep":"768:QVwpsYJb2rVZtXbc2w+L5b89NuIK737F66Uf5qigv5y/lyZLZMabaFWHGX:oJrzLd8TuI+3h66aZgi6ib+GX","tlshash":"1f03f1ac3456126af7493df167894476c37b312357206c2f538398ace4dbacca4e86a7","first_seen":"2025-06-02T11:09:17.011735Z","last_seen":"2026-05-26T23:36:03.115439Z","times_seen":38,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/starlight1000.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:59.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/starlight1000.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:21:00 GMT\r\netag: \"81a06-679501c5-237a74;;;\"\r\nlast-modified: Sat, 25 Jan 2025 15:22:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 530950\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:21:00 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3B%2FuT1fVCVFzIjQq6%2FjNWEFvK506LulnPsONnPIbcx7GPkyX8FjFirrX67SRg2SawWgpe%2BcGzBgJ7frtXIg7B120JjqGGVo1k4JXCacemB53\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a9697362d7e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":530950,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e135f1717921e102c3c50e53012bf7a3","sha1":"795cd21eba3186e3a0de675aaf9087e23fb12e14","sha256":"dd9f605c91b4ceb2229afc2c74175ff4c2b30a18f6856d4c19285c1afc13aca0","sha512":"7a5c346a6f5cab8ec35153510c9ae9a8b4a64b6bdfc67edccc7bcf1b5bbee42107753a347d92382d2c77888efd9281922de7a28ffb94df764c2bd53d78ea6b1c","ssdeep":"12288:Us2lA1hf5R9bQE01Za6cBo9PqYsjZsW5wJVJetCBG0/R:x0ANfQza6qDNkJVJ+H0/R","tlshash":"8ab423872785e885d274c6fbb21339f3d89e0125ce654405e198e6f82c5cf9fe2b618e","first_seen":"2025-06-18T12:51:05.597252Z","last_seen":"2026-05-17T08:09:45.580531Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":985,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/olympus.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/olympus.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:52 GMT\r\netag: \"17aea-690af3a2-237a7a;;;\"\r\nlast-modified: Wed, 05 Nov 2025 06:50:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 97002\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:52 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDRiS%2FZ0bOnS4lHKDOd2M9tRyWbJlrA%2B%2Bbx7x6Tzc9mXNC%2BEA7R2FA9zc8hdOiOvglGl7hqzqr7nwktlfAe64mpDOk%2BDwkLqhVjExLT8UK%2F7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a9697079b69712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97002,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14afc2b2099a64d61c9b061015273fe9","sha1":"c187c5937302fcb1cfe467701632a9c104c230cd","sha256":"c0a105534f43c99797d9b29c02f7532233e42d614ad90fd00cc65151bc6930bd","sha512":"e574c07042dc548729811cc38449aba3afdbb4dd91078f2468908fa66b62bfb6a6cabc10d2d12b3882bb207c0ee43f8d0799e2f9e69a221899c4391a8018ac57","ssdeep":"1536:8fwW88JocvZlSucbEiEeh/ESrzJG+B1yZR58A1mPTWoDrc6jJXzeJPTjFRpQ/g1L:85+Ml6Eeh/ESr1Gft45cIcTjLpQoyG","tlshash":"a893125ce4da59e50017a60c2f967f2e68f71ee9fa7083e192afd8c70d38764282c195","first_seen":"2025-12-05T21:21:22.978467Z","last_seen":"2026-02-28T06:16:49.609122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/daftardewi4d.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/daftardewi4d.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"5c6-66044cee-237a5b;;;\"\r\nlast-modified: Wed, 27 Mar 2024 16:44:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1478\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIMohLtqrGQkfmY%2F%2FqmUbduq%2Fi2UxmvDuiLqMOnHmC%2FxPhGbTIV4l2GbjHkErVVp9MNH%2B1n2MxIyZQ%2BBT1qyfhE1LVOIAToGOwu6urHEAvGa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970acb8a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6dca1bcb3bfd87883e9e610ef271089","sha1":"296bdb4cfde16e0cddc7f29661635ee706e70858","sha256":"2a96cfdff1bb3d20fbe23a96136f5e79c4aabac175a9415e394d72ac9676e7ec","sha512":"5f15ba41b8bc38072e7a87491bada5b91ab4cf21052a5b5acdedd0d4cb63d94d7cbd9f726cc1124f762a406a04a193263f7ea40eb23f4d61d483c57b13f1b843","ssdeep":"","tlshash":"f8311c74c0f0049142e6329c74715a69c35a43a857b421055e31f0c351f936170f2eec","first_seen":"2025-02-17T09:36:28.81997Z","last_seen":"2026-05-26T23:36:03.094287Z","times_seen":103,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/wadewi4d.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/wadewi4d.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"73c-66044cef-237a66;;;\"\r\nlast-modified: Wed, 27 Mar 2024 16:44:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1852\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=594KA1XX8CTWDzmv120PGEhshJ8Td5fsxEkQgLh75O635%2FFBM%2FlVc0DNtd3BJw%2Boj9CeptsjhrdChhoNvbyJyby2JHQF4sVOVSbtWw3D86YC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970acb8b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55cd4f9f3e07ac8c65ebc5d379569b0e","sha1":"7827caf211c944c79a2435363531e86985f3e304","sha256":"e2d3ef51b78bbcba74be6e8d0c00f27975fc1fe6c90b45b0fe039361d5340a85","sha512":"8c49ac569c15c716940188a5b9c0df072b33bd372534f3accc0a7be9dfefc392b85db62cbf3bf669e8dcad41765fe23db82fe33743dc9d55b11e171180085e67","ssdeep":"","tlshash":"49312d327755fecec5ca20054779af2ec117282705c2f7d75140d1b11017d54553f12a","first_seen":"2025-02-17T09:36:28.832799Z","last_seen":"2026-05-26T23:36:03.112751Z","times_seen":98,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caishen.bukdewi.com/img/112.webp","fqdn":"caishen.bukdewi.com","domain":"bukdewi.com","tld":"com"},"ip":{"addr":"172.67.131.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caishen.bukdewi.com/","date":"2025-12-05T21:20:52.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bukdewi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 10:50:27 GMT","end":"Thu, 26 Feb 2026 11:48:06 GMT"},"fingerprint":{"sha1":"49:60:25:65:5D:FA:31:C3:22:95:9B:15:E4:D9:8C:E2:F4:40:69:0C","sha256":"C5:14:DE:7C:5E:F8:02:99:9F:87:62:5F:78:BA:57:9B:63:76:8C:8C:52:2B:C8:CA:FA:BF:44:0B:91:7B:14:F2"}}},"request":{"raw":"GET /img/112.webp HTTP/1.1\r\nHost: caishen.bukdewi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://caishen.bukdewi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Dec 2025 21:20:53 GMT\r\netag: \"ecc0-65fe1664-237a5c;;;\"\r\nlast-modified: Fri, 22 Mar 2024 23:38:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 60608\r\naccept-ranges: bytes\r\ndate: Fri, 05 Dec 2025 21:20:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7WExaW12%2FLuioz4PU2qZHjS9vwYHoTDmVWS9DBJm2eQ8gwW4%2B6Li3flUHt6SSzcwR8ZoduuKIlOCrydV5md1xJkaug8hACcETR8RhvYcSVH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a96970afb95712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99a1e6290c284f5346b9063adc6052cb","sha1":"22da565b27106b87975949e785999ae9ffa2a0f7","sha256":"3cf4b6f2804c00164ec6dcba5f06841096ba697fe9b72902beea4e2bb5db1d4e","sha512":"31774f4ed0f290fc8c6308068fefb663cbc32eea5acd5a33ce1c87b4c71e0609749fab3d91e12c97a5d9555df41e558209e8f0b74531de8de459c6f756200db8","ssdeep":"1536:VmSQZrz+/etMj+GSUYPe/tWMpTqJDildE:J7/etMj+HUl3T++bE","tlshash":"9943026e01583671fee097b52ebc45ad8e9c8abe5ecece52f5541a315b0200cdca0ef1","first_seen":"2025-11-15T13:53:21.387724Z","last_seen":"2025-12-05T21:21:22.981209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":416,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}