{
  "timestamp": "2026-09-13T20:35:29.365Z",
  "method": "GET",
  "url": "https://waf-test.sandboxedge.com/sitemap.xml",
  "path": "/sitemap.xml",
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "216.73.216.238",
    "cf-ipcountry": "US",
    "cf-ray": "a3a9f04c8b29eddd",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "cookie": "__cf_bm=54AC_uJHNZyYkwHqoeSRbQukP5VooEODF.H8abBbwzQ-1789331729.282277-1.0.1.1-iln35ZY3D7JRQXKFjegzmAdEWDzqnGhmTw_6kR6pvdXduNkB8cmEmyNMp45UYlCn7t01bNgKeQTtKNtwnponfRNdW8AbERJzJED9SFqj9Ynb87xH1pGkN5S3cNRxYkT3",
    "host": "waf-test.sandboxedge.com",
    "original-host": "waf-test.sandboxedge.com",
    "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "x-forwarded-proto": "https",
    "x-real-ip": "216.73.216.238"
  },
  "cf": {
    "httpProtocol": "HTTP/2",
    "clientAcceptEncoding": "gzip, deflate, br",
    "requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": {},
    "clientTcpRtt": 2,
    "clientQuicRtt": 0,
    "colo": "CMH",
    "asn": 16509,
    "asOrganization": "Anthropic, PBC",
    "country": "US",
    "isEUCountry": false,
    "city": "Columbus",
    "continent": "NA",
    "region": "Ohio",
    "regionCode": "OH",
    "timezone": "America/New_York",
    "longitude": "-82.99879",
    "latitude": "39.96118",
    "postalCode": "43215",
    "metroCode": "535",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES256-GCM-SHA384",
    "tlsClientRandom": "7H5+PP4ZKUwAS0Kftnl9TuYs9Urs1jNb7bdrjO/OtoI=",
    "tlsClientCiphersSha1": "WUS9+h7TjVkF9aEouGuCEMjGQGA=",
    "tlsClientExtensionsSha1": "ZW6DqGb0F2l0CsqKGkdVWOEqW4U=",
    "tlsClientExtensionsSha1Le": "P5ql+LGarkBgxHyfoT1+qVPFh8M=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "27cdb7f80a88fc30c741117c209f5d12a1c2cf483a87936a606f4c33ef7f60dc1758915d865f06c8be5149c86081fe8c",
      "serverHandshake": "b97776ca604ad13386bcc5dff9e97a8a7f835541d72647c019ce343f7b32aa10187e7f8ea1fd8f53e36677a264f2e474",
      "clientFinished": "a184250ebe9bea27fe78b34d64620966d028faf971ec930e1c1754156fffd78f348297dd51f7f2102d776b0d76d84fc6",
      "serverFinished": "46851eb4838b4095d4758e4882175241420062a04195cd11564eabaf4e9f90c3bb4b62b757d0a23fb0172d1e6e2d6026"
    },
    "tlsClientHelloLength": "260",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "botManagement": {
      "score": 1,
      "corporateProxy": false,
      "verifiedBot": true,
      "staticResource": false,
      "ja3Hash": "bf2e994223408e3d8213d4ebff239272",
      "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
      "ja4Signals": {
        "reqs_rank_1h": 24,
        "uas_rank_1h": 26,
        "h2h3_ratio_1h": 0.72131866,
        "reqs_quantile_1h": 0.999957,
        "heuristic_ratio_1h": 0.28761038,
        "cache_ratio_1h": 0.03870387,
        "browser_ratio_1h": 0.006358689,
        "paths_rank_1h": 25,
        "ips_rank_1h": 171,
        "ips_quantile_1h": 0.9996938
      },
      "jsDetection": {
        "passed": false
      },
      "detectionIds": [
        33563859,
        50331656,
        118965407
      ]
    },
    "clientTrustScore": 1,
    "verifiedBotCategory": "AI Crawler",
    "edgeL4": {
      "deliveryRate": 1857203
    }
  }
}