{
  "timestamp": "2026-09-21T16:29:57.491Z",
  "method": "GET",
  "url": "https://waf-test.sandboxedge.com/sitemap.xml",
  "path": "/sitemap.xml",
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "216.73.216.224",
    "cf-ipcountry": "US",
    "cf-ray": "a3ea73a24a2bee28",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "cookie": "__cf_bm=G_w.a9WbvxfFYOpDiGvzbnrdx0SQCqF1bLGJx3m95w4-1790008197.447462-1.0.1.1-7NaxJhlDyG8f5PavikuFbiHkB6NBPAncteOfKTcICSyYnx.UqtZvonpWgrP7HNJGbtHz4RLouUYpPaOicWzFMaUrkXuOY8z67fuHjaY6.9F0rlcvYazK71GvHUs_TiN7",
    "host": "waf-test.sandboxedge.com",
    "original-host": "waf-test.sandboxedge.com",
    "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "x-forwarded-proto": "https",
    "x-real-ip": "216.73.216.224"
  },
  "cf": {
    "httpProtocol": "HTTP/2",
    "clientAcceptEncoding": "gzip, deflate, br",
    "requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": {},
    "clientTcpRtt": 2,
    "clientQuicRtt": 0,
    "colo": "CMH",
    "asn": 16509,
    "asOrganization": "Anthropic, PBC",
    "country": "US",
    "isEUCountry": false,
    "city": "Columbus",
    "continent": "NA",
    "region": "Ohio",
    "regionCode": "OH",
    "timezone": "America/New_York",
    "longitude": "-82.99879",
    "latitude": "39.96118",
    "postalCode": "43215",
    "metroCode": "535",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES256-GCM-SHA384",
    "tlsClientRandom": "bCWThqMUeLv1glJzCpWvNRCpfhIt4vWT00xZu+MH6Gc=",
    "tlsClientCiphersSha1": "WUS9+h7TjVkF9aEouGuCEMjGQGA=",
    "tlsClientExtensionsSha1": "KGbj/L0WZCQxnPsjGoF1me8PH3c=",
    "tlsClientExtensionsSha1Le": "fdlSKMDHLsEeuKBCvdyCI9A2Rx4=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "1c8a4459ec3f10619f2f70af41e85f5d08ad9eebef6fdccb599c6bee7043c7fd8fbe420bb3ed066e3c85471e9efb2dfb",
      "serverHandshake": "d5db38f889b00d874798c458680a2333c57467e80f2e1ee4b1a506545697ed23606f565db8cc0566254391e3f6cbc79a",
      "clientFinished": "56685e7fd1d969c4043c811e2638b9b3584ec6cc2dcebc93243bd5994493978b843a36457b3df032be0b22d0509478c1",
      "serverFinished": "2a6b9798e7c0b5efa1b3249309709e10cd56f81be90f4e464d2f332b3581918ec23b2aa90eb628913ae2cad3c0ceaf4f"
    },
    "tlsClientHelloLength": "260",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "botManagement": {
      "score": 1,
      "corporateProxy": false,
      "verifiedBot": true,
      "staticResource": false,
      "ja3Hash": "edcefebaa2f8ae4806691659234ee6b5",
      "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
      "ja4Signals": {
        "cache_ratio_1h": 0.036555264,
        "ips_quantile_1h": 0.9992095,
        "browser_ratio_1h": 0.005735313,
        "h2h3_ratio_1h": 0.9974687,
        "uas_rank_1h": 25,
        "paths_rank_1h": 27,
        "reqs_rank_1h": 24,
        "ips_rank_1h": 177,
        "heuristic_ratio_1h": 0.2959233,
        "reqs_quantile_1h": 0.99989283
      },
      "jsDetection": {
        "passed": false
      },
      "detectionIds": [
        33563859,
        50331656,
        118965407
      ]
    },
    "clientTrustScore": 1,
    "verifiedBotCategory": "AI Crawler",
    "edgeL4": {
      "deliveryRate": 1417523
    }
  }
}