{
  "timestamp": "2026-09-23T13:38:12.020Z",
  "method": "GET",
  "url": "https://waf-test.sandboxedge.com/sitemap.xml",
  "path": "/sitemap.xml",
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "216.73.216.169",
    "cf-ipcountry": "US",
    "cf-ray": "a3f9f2c91c58eee6",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "cookie": "__cf_bm=3qhOSeP3GYrZoU4FM60xMJ9U07w4tUgNiZ1_i_nTydU-1790170691.9632413-1.0.1.1-oerIm8wSgskMldcqSHz4rQ7L9MrVJ_IgxqGQHFPH25wUpJRqWgL9z4M8uX692dwDtjnTbQ.hOhUi7J_uEid.jGho6dN4iKJdLiLG6.sJTRUZqv_fFfr85t9nrtswidSK",
    "host": "waf-test.sandboxedge.com",
    "original-host": "waf-test.sandboxedge.com",
    "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "x-forwarded-proto": "https",
    "x-real-ip": "216.73.216.169"
  },
  "cf": {
    "httpProtocol": "HTTP/2",
    "clientAcceptEncoding": "gzip, deflate, br",
    "requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": {},
    "clientTcpRtt": 2,
    "clientQuicRtt": 0,
    "colo": "CMH",
    "asn": 16509,
    "asOrganization": "Anthropic, PBC",
    "country": "US",
    "isEUCountry": false,
    "city": "Columbus",
    "continent": "NA",
    "region": "Ohio",
    "regionCode": "OH",
    "timezone": "America/New_York",
    "longitude": "-82.99879",
    "latitude": "39.96118",
    "postalCode": "43215",
    "metroCode": "535",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES256-GCM-SHA384",
    "tlsClientRandom": "uMIu8oq4dSxnebUM6avIJ4NMcqbNyc0SOadYf+n2hOE=",
    "tlsClientCiphersSha1": "WUS9+h7TjVkF9aEouGuCEMjGQGA=",
    "tlsClientExtensionsSha1": "eG0MJq5RLpIfT4GNcsd6CfWwDX4=",
    "tlsClientExtensionsSha1Le": "B+mB8SPfmafLtBT7AEhqV+xbHOc=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "d44feb6366a97f663d08a9a8c351df6016544cc249102de6b185dc195cdd8dd4f71f3eecb851be8654aa04a5772c1b5a",
      "serverHandshake": "697221e10cc9fb183c1c5cc88cd2375b5d871f2c9a04eeb666dd2660e0d24a6e6a0f6f65fed6becc19c267c44c9b622d",
      "clientFinished": "7ade01de099ef3a8cc062050abcc054abe3a4b4f3035a4bc03c4bb51f061096a5ed2beb7dc3b6b6b1d2bf324c0e98c92",
      "serverFinished": "3c3dcbda056568e94a5bdd385bb94f2e24aa6160e40744afd51d03affdf16bac71bf10e06f6fe1459d5729ad9cdefed7"
    },
    "tlsClientHelloLength": "260",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "botManagement": {
      "score": 1,
      "corporateProxy": false,
      "verifiedBot": true,
      "staticResource": false,
      "ja3Hash": "506b22b169278f87285b1fcbda281edb",
      "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
      "ja4Signals": {
        "reqs_quantile_1h": 0.99994284,
        "h2h3_ratio_1h": 0.9978349,
        "heuristic_ratio_1h": 0.30867827,
        "ips_rank_1h": 179,
        "reqs_rank_1h": 23,
        "browser_ratio_1h": 0.004381787,
        "ips_quantile_1h": 0.99955523,
        "uas_rank_1h": 25,
        "paths_rank_1h": 22,
        "cache_ratio_1h": 0.033536214
      },
      "jsDetection": {
        "passed": false
      },
      "detectionIds": [
        118965407,
        50331656,
        33563859
      ]
    },
    "clientTrustScore": 1,
    "verifiedBotCategory": "AI Crawler",
    "edgeL4": {
      "deliveryRate": 2656880
    }
  }
}