{
  "ip": "216.73.217.70",
  "method": "GET",
  "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
  "tls": {
    "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-23-10-16-35-11-43-5-51-13-45,29-23-24,0",
    "ja3_hash": "3083b3e9777245ec621786798fecff39",
    "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
    "ja4_r": "t13d1011h2_00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401",
    "raw_client_hello": "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",
    "tls_version_record": "769",
    "tls_version_negotiated": "772",
    "client_random": "7a0f77d887a7d398b3a6aaa35f7ccd753ee87797333d86ba3d108a5304d412aa",
    "session_id": "d18adc299c7f7dd1dd5d01ec737a2fd28ee4106409b3d866bb6f4c652b195bc6",
    "tls_version": "TLS 1.3",
    "sni": "tls.backdoor.co",
    "ciphers": [
      "TLS_AES_256_GCM_SHA384 (0x1302)",
      "TLS_AES_128_GCM_SHA256 (0x1301)",
      "TLS_CHACHA20_POLY1305_SHA256 (0x1303)",
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c)",
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)",
      "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9)",
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)",
      "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8)",
      "TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff)"
    ],
    "extensions": [
      "server_name (0x0000)",
      "extended_master_secret (0x0017)",
      "supported_groups (0x000a)",
      "application_layer_protocol_negotiation (0x0010)",
      "session_ticket (0x0023)",
      "ec_point_formats (0x000b)",
      "supported_versions (0x002b)",
      "status_request (0x0005)",
      "key_share (0x0033)",
      "signature_algorithms (0x000d)",
      "psk_key_exchange_modes (0x002d)"
    ],
    "supported_groups": [
      "x25519 (0x001d)",
      "secp256r1 (0x0017)",
      "secp384r1 (0x0018)"
    ],
    "signature_algorithms": [
      "ecdsa_secp384r1_sha384 (0x0503)",
      "ecdsa_secp256r1_sha256 (0x0403)",
      "ed25519 (0x0807)",
      "rsa_pss_rsae_sha512 (0x0806)",
      "rsa_pss_rsae_sha384 (0x0805)",
      "rsa_pss_rsae_sha256 (0x0804)",
      "rsa_pkcs1_sha512 (0x0601)",
      "rsa_pkcs1_sha384 (0x0501)",
      "rsa_pkcs1_sha256 (0x0401)"
    ],
    "alpn": "h2"
  },
  "tcpip": {
    "cap_length": 74,
    "dst_port": 443,
    "src_port": 61185,
    "ip": {
      "id": 50029,
      "ttl": 120,
      "ip_version": 4,
      "src_ip": "216.73.217.70",
      "dst_ip": "45.55.54.155"
    },
    "tcp": {
      "ack": 0,
      "checksum": 37508,
      "seq": 2834126505,
      "window": 62727
    }
  },
  "http2": {
    "akamai_fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p",
    "akamai_fingerprint_hash": "9b5dcd077a77c5e324b91d8cc306fd5a",
    "settings": [
      {
        "id": 2,
        "value": 0
      },
      {
        "id": 4,
        "value": 2097152
      },
      {
        "id": 5,
        "value": 16384
      },
      {
        "id": 6,
        "value": 16384
      }
    ],
    "window_update": 5177345,
    "pseudo_header_order": [
      ":method",
      ":scheme",
      ":authority",
      ":path"
    ],
    "header_order": [
      "accept",
      "user-agent",
      "accept-encoding"
    ]
  },
  "http": {
    "method": "GET",
    "version": "HTTP/2.0",
    "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "ja4h": "ge20nn030000_80b089f68b8e_000000000000_000000000000",
    "ja4h_r": "ge20nn030000_accept,user-agent,accept-encoding_",
    "header_order": [
      ":method",
      ":scheme",
      ":authority",
      ":path",
      "accept",
      "user-agent",
      "accept-encoding"
    ],
    "headers": {
      "Accept": "*/*",
      "Accept-Encoding": "gzip, br, zstd, deflate",
      "User-Agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
    }
  },
  "http_version": "h2"
}
