{
  "timestamp": "2026-09-15T04:38:23.685Z",
  "method": "GET",
  "url": "https://waf-test.sandboxedge.com/sitemap.xml",
  "path": "/sitemap.xml",
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "216.73.217.176",
    "cf-ipcountry": "US",
    "cf-ray": "a3b4f10e0ba22c82",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "cookie": "__cf_bm=BAmpyNGqmJEl.ZDpuZAUSxt7NccRr_fPgwzOpazmd7M-1789447099.8713748-1.0.1.1-0USINTLrlA4Jn8Zn1Xp0US8oqisIJiL6NJndyuJy5MvTTph5QuzRJyW0tDGDQ98qMClWlbTA4aQ.YjyjiWFGJt8RMwf1T4fB4NsGu9ovY5uhqTw_9T8zgXqfuSxQXfuT",
    "host": "waf-test.sandboxedge.com",
    "original-host": "waf-test.sandboxedge.com",
    "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "x-forwarded-proto": "https",
    "x-real-ip": "216.73.217.176"
  },
  "cf": {
    "httpProtocol": "HTTP/2",
    "clientAcceptEncoding": "gzip, deflate, br",
    "requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": {},
    "clientTcpRtt": 2,
    "clientQuicRtt": 0,
    "colo": "CMH",
    "asn": 16509,
    "asOrganization": "Anthropic, PBC",
    "country": "US",
    "isEUCountry": false,
    "city": "Columbus",
    "continent": "NA",
    "region": "Ohio",
    "regionCode": "OH",
    "timezone": "America/New_York",
    "longitude": "-82.99879",
    "latitude": "39.96118",
    "postalCode": "43215",
    "metroCode": "535",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES256-GCM-SHA384",
    "tlsClientRandom": "JBlVZEoLFLsFGpHeSuuJkTa31CB6y8T8ydo4ax94PUY=",
    "tlsClientCiphersSha1": "WUS9+h7TjVkF9aEouGuCEMjGQGA=",
    "tlsClientExtensionsSha1": "48zRMZP1YvyZFpPbcI9jWLGDr8E=",
    "tlsClientExtensionsSha1Le": "B5FPwe8P4a8z/EplfAGRGoirnVY=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "fa29f51f6719e7c2a276463a72d591e7fd1f8e310dc955e4f1f474d7a2570831e0a74493dc22cb8b36586a71c26000fe",
      "serverHandshake": "29da88565d8ef3887a9a6ed3a346c94abf0094c6bfc0a8ae52add7e73cd278eecda8b2532b197301b475005b45b96a5e",
      "clientFinished": "cad2629b8153494a850896765c025f3ed700457b9e81354c127d0bcbee1cf00d0334f61d637841c04914d4eba38a1fac",
      "serverFinished": "a958801fc9438affb0c511e23ced9aec801619a5b2e8cc40689463ecebf6223f6ab56291b5832ec1eed0842e88eb8ebb"
    },
    "tlsClientHelloLength": "260",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "botManagement": {
      "score": 1,
      "corporateProxy": false,
      "verifiedBot": true,
      "staticResource": false,
      "ja3Hash": "d06ca43185cb7796500cc04900fa5c43",
      "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
      "ja4Signals": {
        "h2h3_ratio_1h": 0.72943544,
        "reqs_rank_1h": 24,
        "ips_rank_1h": 174,
        "paths_rank_1h": 24,
        "browser_ratio_1h": 0.0060268957,
        "reqs_quantile_1h": 0.99995387,
        "ips_quantile_1h": 0.9996657,
        "cache_ratio_1h": 0.042477276,
        "uas_rank_1h": 23,
        "heuristic_ratio_1h": 0.27847442
      },
      "jsDetection": {
        "passed": false
      },
      "detectionIds": [
        33563859,
        50331656,
        118965407
      ]
    },
    "clientTrustScore": 1,
    "verifiedBotCategory": "AI Crawler",
    "edgeL4": {
      "deliveryRate": 1463365
    }
  }
}