{
  "captured_at": "2026-09-13T06:40:23.707685518+08:00",
  "peer_addr": "216.73.217.55:27737",
  "http_version": "HTTP/2.0",
  "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
  "method": "GET",
  "path": "/sitemap.xml",
  "tls": {
    "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,45-43-5-13-51-23-16-35-0-11-10,29-23-24,0",
    "ja3_hash": "d34bc8aeb78e31c5202c5f7d0f0ca646",
    "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
    "ja4_r": "t13d1011h2_00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401",
    "tls_version_record": "771",
    "tls_version_max": "772",
    "server_name": "fp.willowok.com",
    "cipher_suites": [
      "0x1302 TLS_AES_256_GCM_SHA384",
      "0x1301 TLS_AES_128_GCM_SHA256",
      "0x1303 TLS_CHACHA20_POLY1305_SHA256",
      "0xc02c TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "0xc02b TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "0xcca9 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
      "0xc030 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "0xc02f TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "0xcca8 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
      "0x00ff"
    ],
    "extensions": [
      "0x002d psk_key_exchange_modes",
      "0x002b supported_versions",
      "0x0005 status_request",
      "0x000d signature_algorithms",
      "0x0033 key_share",
      "0x0017 extended_master_secret",
      "0x0010 application_layer_protocol_negotiation",
      "0x0023 session_ticket",
      "0x0000 server_name",
      "0x000b ec_point_formats",
      "0x000a supported_groups"
    ],
    "supported_groups": [
      "0x001d X25519",
      "0x0017 P-256",
      "0x0018 P-384"
    ],
    "signature_algorithms": [
      "0x0503 ecdsa_secp384r1_sha384",
      "0x0403 ecdsa_secp256r1_sha256",
      "0x0807 ed25519",
      "0x0806 rsa_pss_rsae_sha512",
      "0x0805 rsa_pss_rsae_sha384",
      "0x0804 rsa_pss_rsae_sha256",
      "0x0601 rsa_pkcs1_sha512",
      "0x0501 rsa_pkcs1_sha384",
      "0x0401 rsa_pkcs1_sha256"
    ],
    "ec_point_formats": [
      "0"
    ],
    "alpn": [
      "h2",
      "http/1.1"
    ],
    "supported_versions": [
      "0x0304",
      "0x0303"
    ],
    "key_share_groups": [
      "0x001d X25519"
    ],
    "has_ech": false,
    "has_pq_key_share": false,
    "client_random": "2a5e6e54596d4e6d484758a677db48cbb8db9b904c5a666c16e860b1241d64a0",
    "session_id": "8815f04a3029310596548d146e21b9186f909acec6e54b12fc7af1c7170baeb2",
    "raw_client_hello_hex": "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",
    "spec_extensions": [
      "0x002d psk_key_exchange_modes",
      "0x002b supported_versions",
      "0x0005 status_request",
      "0x000d signature_algorithms",
      "0x0033 key_share",
      "0x0017 extended_master_secret",
      "0x0010 application_layer_protocol_negotiation",
      "0x0023 session_ticket",
      "0x0000 server_name",
      "0x000b ec_point_formats",
      "0x000a supported_groups"
    ]
  },
  "http2": {
    "akamai_fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p",
    "akamai_fingerprint_hash": "9b5dcd077a77c5e324b91d8cc306fd5a",
    "settings": [
      "2:0",
      "4:2097152",
      "5:16384",
      "6:16384"
    ],
    "window_update": 5177345,
    "priorities": null,
    "pseudo_header_order": [
      ":method",
      ":scheme",
      ":authority",
      ":path"
    ],
    "header_order": [
      "accept",
      "user-agent",
      "accept-encoding"
    ],
    "headers": [
      ":method: GET",
      ":scheme: https",
      ":authority: fp.willowok.com",
      ":path: /sitemap.xml",
      "accept: */*",
      "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
      "accept-encoding: gzip, br, zstd, deflate"
    ]
  }
}