{
  "timestamp": "2026-09-15T14:17:28.245Z",
  "method": "GET",
  "url": "https://waf-test.sandboxedge.com/sitemap.xml",
  "path": "/sitemap.xml",
  "headers": {
    "accept": "*/*",
    "accept-encoding": "gzip, br",
    "cf-connecting-ip": "216.73.217.176",
    "cf-ipcountry": "US",
    "cf-ray": "a3b8414f8927cf79",
    "cf-visitor": "{\"scheme\":\"https\"}",
    "connection": "Keep-Alive",
    "cookie": "__cf_bm=1Z7lxlovebvGJ.CbetI1kI1n.LQ_Nkbotd4daQr3A7I-1789481848.191929-1.0.1.1-ae7TkkEJO3J2b56xY.fb6KYbajLRONZPh2xYmsI8unwmZ5pGeKo073FPNl3X6SpZsVoQOiPy0t0Bq3e5PMGHPyDxSCFir7bEXQitz7TxtpyVrpdktqsXOC8d9sHjqtA_",
    "host": "waf-test.sandboxedge.com",
    "original-host": "waf-test.sandboxedge.com",
    "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "x-forwarded-proto": "https",
    "x-real-ip": "216.73.217.176"
  },
  "cf": {
    "httpProtocol": "HTTP/2",
    "clientAcceptEncoding": "gzip, deflate, br",
    "requestPriority": "weight=16;exclusive=0;group=0;group-weight=0",
    "edgeRequestKeepAliveStatus": 1,
    "requestHeaderNames": {},
    "clientTcpRtt": 2,
    "clientQuicRtt": 0,
    "colo": "CMH",
    "asn": 16509,
    "asOrganization": "Anthropic, PBC",
    "country": "US",
    "isEUCountry": false,
    "city": "Columbus",
    "continent": "NA",
    "region": "Ohio",
    "regionCode": "OH",
    "timezone": "America/New_York",
    "longitude": "-82.99879",
    "latitude": "39.96118",
    "postalCode": "43215",
    "metroCode": "535",
    "tlsVersion": "TLSv1.3",
    "tlsCipher": "AEAD-AES256-GCM-SHA384",
    "tlsClientRandom": "lgFuu60gJdHhCv1NFvMj2xQNFHU+QNzY1kQVnOx/T0g=",
    "tlsClientCiphersSha1": "WUS9+h7TjVkF9aEouGuCEMjGQGA=",
    "tlsClientExtensionsSha1": "+D5BWTk7bLSje82N2YOKEWOyeL0=",
    "tlsClientExtensionsSha1Le": "sgS1M1WRNEGjk4Jj+u8ub4cBYDQ=",
    "tlsExportedAuthenticator": {
      "clientHandshake": "8608e82942da7c134b84bd05bf426f80dd827abeb9c33a917593a241a6ec445e4d8606b0878f6618fcc2386830913375",
      "serverHandshake": "f9b751efc798f39b9cd7bbc1f1ef85f0b93dc1edbcb665a4c85a4a90cd9904dfc4961d078dd53d537b39368006058880",
      "clientFinished": "570d5cefce7e922870a7c3070a913414d2f97d7dc697f6d216108c0ea4d2390357f4a8f3dbe77cc036157dcc92b98b1c",
      "serverFinished": "4eed3806083fa42669e13b3e3d840c6c325bb538e226fd947fb2285d0b69e179c326bd3a3dc990b4e5572d02d969096b"
    },
    "tlsClientHelloLength": "260",
    "tlsClientAuth": {
      "certPresented": "0",
      "certVerified": "NONE",
      "certRevoked": "0",
      "certIssuerDN": "",
      "certSubjectDN": "",
      "certIssuerDNRFC2253": "",
      "certSubjectDNRFC2253": "",
      "certIssuerDNLegacy": "",
      "certSubjectDNLegacy": "",
      "certSerial": "",
      "certIssuerSerial": "",
      "certSKI": "",
      "certIssuerSKI": "",
      "certFingerprintSHA1": "",
      "certFingerprintSHA256": "",
      "certNotBefore": "",
      "certNotAfter": "",
      "certRFC9440": "",
      "certRFC9440TooLarge": false,
      "certChainRFC9440": "",
      "certChainRFC9440TooLarge": false
    },
    "botManagement": {
      "score": 1,
      "corporateProxy": false,
      "verifiedBot": true,
      "staticResource": false,
      "ja3Hash": "5198afb0de1f743393c0341e11b0839f",
      "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
      "ja4Signals": {
        "ips_quantile_1h": 0.99951863,
        "h2h3_ratio_1h": 0.7194403,
        "browser_ratio_1h": 0.00579686,
        "paths_rank_1h": 27,
        "heuristic_ratio_1h": 0.30789462,
        "reqs_quantile_1h": 0.9999334,
        "ips_rank_1h": 188,
        "cache_ratio_1h": 0.031733584,
        "reqs_rank_1h": 26,
        "uas_rank_1h": 25
      },
      "jsDetection": {
        "passed": false
      },
      "detectionIds": [
        33563859,
        118965407,
        50331656
      ]
    },
    "clientTrustScore": 1,
    "verifiedBotCategory": "AI Crawler",
    "edgeL4": {
      "deliveryRate": 1683720
    }
  }
}