{
  "captured_at": "2026-09-11T18:03:53.917050152+08:00",
  "peer_addr": "216.73.216.25:37169",
  "http_version": "HTTP/2.0",
  "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
  "method": "GET",
  "path": "/",
  "tls": {
    "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,43-10-35-51-11-45-23-0-16-13-5,29-23-24,0",
    "ja3_hash": "ec74908186b2939ee400d176dd1cac5f",
    "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
    "ja4_r": "t13d1011h2_00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401",
    "tls_version_record": "771",
    "tls_version_max": "772",
    "server_name": "fp.willowok.com",
    "cipher_suites": [
      "0x1302 TLS_AES_256_GCM_SHA384",
      "0x1301 TLS_AES_128_GCM_SHA256",
      "0x1303 TLS_CHACHA20_POLY1305_SHA256",
      "0xc02c TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "0xc02b TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "0xcca9 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
      "0xc030 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "0xc02f TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "0xcca8 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
      "0x00ff"
    ],
    "extensions": [
      "0x002b supported_versions",
      "0x000a supported_groups",
      "0x0023 session_ticket",
      "0x0033 key_share",
      "0x000b ec_point_formats",
      "0x002d psk_key_exchange_modes",
      "0x0017 extended_master_secret",
      "0x0000 server_name",
      "0x0010 application_layer_protocol_negotiation",
      "0x000d signature_algorithms",
      "0x0005 status_request"
    ],
    "supported_groups": [
      "0x001d X25519",
      "0x0017 P-256",
      "0x0018 P-384"
    ],
    "signature_algorithms": [
      "0x0503 ecdsa_secp384r1_sha384",
      "0x0403 ecdsa_secp256r1_sha256",
      "0x0807 ed25519",
      "0x0806 rsa_pss_rsae_sha512",
      "0x0805 rsa_pss_rsae_sha384",
      "0x0804 rsa_pss_rsae_sha256",
      "0x0601 rsa_pkcs1_sha512",
      "0x0501 rsa_pkcs1_sha384",
      "0x0401 rsa_pkcs1_sha256"
    ],
    "ec_point_formats": [
      "0"
    ],
    "alpn": [
      "h2",
      "http/1.1"
    ],
    "supported_versions": [
      "0x0304",
      "0x0303"
    ],
    "key_share_groups": [
      "0x001d X25519"
    ],
    "has_ech": false,
    "has_pq_key_share": false,
    "client_random": "4aca338c6cacf6007ba3636cfc4883c152c6cb0fa60ffc3fe2e84dccaeee9c12",
    "session_id": "7e07b78a46493503c003a85be395e7b4217df423015fc88a46b10818f47dffcd",
    "raw_client_hello_hex": "16030100ff010000fb03034aca338c6cacf6007ba3636cfc4883c152c6cb0fa60ffc3fe2e84dccaeee9c12207e07b78a46493503c003a85be395e7b4217df423015fc88a46b10818f47dffcd0014130213011303c02cc02bcca9c030c02fcca800ff0100009e002b00050403040303000a00080006001d0017001800230000003300260024001d0020d12191aef5ddae059dc69432b49d9bfb7c0b76f4d63568e384e1153a773bb67c000b00020100002d000201010017000000000014001200000f66702e77696c6c6f776f6b2e636f6d0010000e000c02683208687474702f312e31000d00140012050304030807080608050804060105010401000500050100000000",
    "spec_extensions": [
      "0x002b supported_versions",
      "0x000a supported_groups",
      "0x0023 session_ticket",
      "0x0033 key_share",
      "0x000b ec_point_formats",
      "0x002d psk_key_exchange_modes",
      "0x0017 extended_master_secret",
      "0x0000 server_name",
      "0x0010 application_layer_protocol_negotiation",
      "0x000d signature_algorithms",
      "0x0005 status_request"
    ]
  },
  "http2": {
    "akamai_fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p",
    "akamai_fingerprint_hash": "9b5dcd077a77c5e324b91d8cc306fd5a",
    "settings": [
      "2:0",
      "4:2097152",
      "5:16384",
      "6:16384"
    ],
    "window_update": 5177345,
    "priorities": null,
    "pseudo_header_order": [
      ":method",
      ":scheme",
      ":authority",
      ":path"
    ],
    "header_order": [
      "accept",
      "user-agent",
      "accept-encoding"
    ],
    "headers": [
      ":method: GET",
      ":scheme: https",
      ":authority: fp.willowok.com",
      ":path: /",
      "accept: */*",
      "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
      "accept-encoding: gzip, br, zstd, deflate"
    ]
  }
}