{
  "captured_at": "2026-09-11T20:36:48.908099275+08:00",
  "peer_addr": "216.73.216.25:9445",
  "http_version": "HTTP/2.0",
  "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
  "method": "GET",
  "path": "/sitemap.xml",
  "tls": {
    "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,35-51-43-45-13-16-0-23-11-5-10,29-23-24,0",
    "ja3_hash": "eb0aaba2defcad2c0b44b4af16dc9623",
    "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
    "ja4_r": "t13d1011h2_00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401",
    "tls_version_record": "771",
    "tls_version_max": "772",
    "server_name": "fp.willowok.com",
    "cipher_suites": [
      "0x1302 TLS_AES_256_GCM_SHA384",
      "0x1301 TLS_AES_128_GCM_SHA256",
      "0x1303 TLS_CHACHA20_POLY1305_SHA256",
      "0xc02c TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "0xc02b TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "0xcca9 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
      "0xc030 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "0xc02f TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "0xcca8 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
      "0x00ff"
    ],
    "extensions": [
      "0x0023 session_ticket",
      "0x0033 key_share",
      "0x002b supported_versions",
      "0x002d psk_key_exchange_modes",
      "0x000d signature_algorithms",
      "0x0010 application_layer_protocol_negotiation",
      "0x0000 server_name",
      "0x0017 extended_master_secret",
      "0x000b ec_point_formats",
      "0x0005 status_request",
      "0x000a supported_groups"
    ],
    "supported_groups": [
      "0x001d X25519",
      "0x0017 P-256",
      "0x0018 P-384"
    ],
    "signature_algorithms": [
      "0x0503 ecdsa_secp384r1_sha384",
      "0x0403 ecdsa_secp256r1_sha256",
      "0x0807 ed25519",
      "0x0806 rsa_pss_rsae_sha512",
      "0x0805 rsa_pss_rsae_sha384",
      "0x0804 rsa_pss_rsae_sha256",
      "0x0601 rsa_pkcs1_sha512",
      "0x0501 rsa_pkcs1_sha384",
      "0x0401 rsa_pkcs1_sha256"
    ],
    "ec_point_formats": [
      "0"
    ],
    "alpn": [
      "h2",
      "http/1.1"
    ],
    "supported_versions": [
      "0x0304",
      "0x0303"
    ],
    "key_share_groups": [
      "0x001d X25519"
    ],
    "has_ech": false,
    "has_pq_key_share": false,
    "client_random": "58863d0fe5c3cc8cbf76c2968862d22d7d24ad0fb6c5e590f6027e6f17b7bf05",
    "session_id": "95bef17a1863127d6b900d21766bfa91f019c7915409e4932932d013ab216f18",
    "raw_client_hello_hex": "16030100ff010000fb030358863d0fe5c3cc8cbf76c2968862d22d7d24ad0fb6c5e590f6027e6f17b7bf052095bef17a1863127d6b900d21766bfa91f019c7915409e4932932d013ab216f180014130213011303c02cc02bcca9c030c02fcca800ff0100009e00230000003300260024001d002098bf97b35479c1163f115a2ebf7d411b9fc8ecf92d093894bd24f53ea4e7185d002b00050403040303002d00020101000d001400120503040308070806080508040601050104010010000e000c02683208687474702f312e3100000014001200000f66702e77696c6c6f776f6b2e636f6d00170000000b00020100000500050100000000000a00080006001d00170018",
    "spec_extensions": [
      "0x0023 session_ticket",
      "0x0033 key_share",
      "0x002b supported_versions",
      "0x002d psk_key_exchange_modes",
      "0x000d signature_algorithms",
      "0x0010 application_layer_protocol_negotiation",
      "0x0000 server_name",
      "0x0017 extended_master_secret",
      "0x000b ec_point_formats",
      "0x0005 status_request",
      "0x000a supported_groups"
    ]
  },
  "http2": {
    "akamai_fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p",
    "akamai_fingerprint_hash": "9b5dcd077a77c5e324b91d8cc306fd5a",
    "settings": [
      "2:0",
      "4:2097152",
      "5:16384",
      "6:16384"
    ],
    "window_update": 5177345,
    "priorities": null,
    "pseudo_header_order": [
      ":method",
      ":scheme",
      ":authority",
      ":path"
    ],
    "header_order": [
      "accept",
      "user-agent",
      "accept-encoding"
    ],
    "headers": [
      ":method: GET",
      ":scheme: https",
      ":authority: fp.willowok.com",
      ":path: /sitemap.xml",
      "accept: */*",
      "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
      "accept-encoding: gzip, br, zstd, deflate"
    ]
  }
}