{ "protocol": "HTTP/1.1", "request_raw": "GET / HTTP/1.1\r\naccept: */*\r\nuser-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\r\naccept-encoding: gzip, br, zstd, deflate\r\nhost: h1.mail.futaccs.com\r\n\r\n", "request_lines": [ "GET / HTTP/1.1", "accept: */*", "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "accept-encoding: gzip, br, zstd, deflate", "host: h1.mail.futaccs.com" ], "ja67": "7e5bbf27d77817a5", "meta": { "timestamp": "2026-09-01T01:32:36.118830+00:00", "timestamp_unix": 1788226356.11883, "mode": "auto", "server_port": 443, "expected_protocol": "auto", "client_ip": "216.73.217.61", "client_port": 15273 }, "transport": { "client": "216.73.217.61:15273", "tcp_nodelay": false, "recv_buffer": 131072, "mss": 1448 }, "tls": { "record_version": 769, "record_version_name": "TLS 1.0", "records_count": 1, "client_version": 771, "client_version_name": "TLS 1.2", "random": "40cb62b407f53469f5860b95b1cc016b9d9cf5bf5b356e55adc2267aab4d18b1", "session_id": "1f4e24b22d2da89e68fb574ea964f49de57aa90d6d7e9ba74457df2a0d3b43b2", "session_id_len": 32, "cipher_suites": [ { "value": 4866, "hex": "0x1302", "name": "TLS_AES_256_GCM_SHA384" }, { "value": 4865, "hex": "0x1301", "name": "TLS_AES_128_GCM_SHA256" }, { "value": 4867, "hex": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256" }, { "value": 49196, "hex": "0xc02c", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" }, { "value": 49195, "hex": "0xc02b", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" }, { "value": 52393, "hex": "0xcca9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256" }, { "value": 49200, "hex": "0xc030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" }, { "value": 49199, "hex": "0xc02f", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" }, { "value": 52392, "hex": "0xcca8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" }, { "value": 255, "hex": "0x00ff", "name": "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" } ], "compression_methods": [ 0 ], "extensions": [ { "type": 43, "hex": "0x002b", "name": "supported_versions", "length": 5, "data_hex": "0403040303", "decoded": [ { "value": 772, "hex": "0x0304", "name": "TLS 1.3" }, { "value": 771, "hex": "0x0303", "name": "TLS 1.2" } ] }, { "type": 16, "hex": "0x0010", "name": "application_layer_protocol_negotiation", "length": 14, "data_hex": "000c02683208687474702f312e31", "decoded": [ "h2", "http/1.1" ] }, { "type": 11, "hex": "0x000b", "name": "ec_point_formats", "length": 2, "data_hex": "0100", "decoded": [ { "value": 0, "name": "uncompressed" } ] }, { "type": 45, "hex": "0x002d", "name": "psk_key_exchange_modes", "length": 2, "data_hex": "0101", "decoded": [ { "value": 1, "name": "psk_dhe_ke" } ] }, { "type": 0, "hex": "0x0000", "name": "server_name", "length": 24, "data_hex": "001600001368312e6d61696c2e667574616363732e636f6d", "decoded": [ { "type": 0, "name": "h1.mail.futaccs.com" } ] }, { "type": 23, "hex": "0x0017", "name": "extended_master_secret", "length": 0, "data_hex": "" }, { "type": 5, "hex": "0x0005", "name": "status_request", "length": 5, "data_hex": "0100000000", "decoded": { "status_type": 1 } }, { "type": 10, "hex": "0x000a", "name": "supported_groups", "length": 8, "data_hex": "0006001d00170018", "decoded": [ { "value": 29, "hex": "0x001d", "name": "X25519" }, { "value": 23, "hex": "0x0017", "name": "secp256r1" }, { "value": 24, "hex": "0x0018", "name": "secp384r1" } ] }, { "type": 13, "hex": "0x000d", "name": "signature_algorithms", "length": 20, "data_hex": "0012050304030807080608050804060105010401", "decoded": [ { "value": 1283, "hex": "0x0503", "name": "ecdsa_secp384r1_sha384" }, { "value": 1027, "hex": "0x0403", "name": "ecdsa_secp256r1_sha256" }, { "value": 2055, "hex": "0x0807", "name": "ed25519" }, { "value": 2054, "hex": "0x0806", "name": "rsa_pss_rsae_sha512" }, { "value": 2053, "hex": "0x0805", "name": "rsa_pss_rsae_sha384" }, { "value": 2052, "hex": "0x0804", "name": "rsa_pss_rsae_sha256" }, { "value": 1537, "hex": "0x0601", "name": "rsa_pkcs1_sha512" }, { "value": 1281, "hex": "0x0501", "name": "rsa_pkcs1_sha384" }, { "value": 1025, "hex": "0x0401", "name": "rsa_pkcs1_sha256" } ] }, { "type": 51, "hex": "0x0033", "name": "key_share", "length": 38, "data_hex": "0024001d002007ae3bf7203042abc946a1f36c8f9abdf39f80788fcac458b6ffc076a457284c", "decoded": [ { "group": 29, "hex": "0x001d", "name": "X25519", "key_exchange_len": 32 } ] }, { "type": 41, "hex": "0x0029", "name": "pre_shared_key", "length": 299, "data_hex": "00f600f0b939f52a18256fc517d02eeb7d3258e5546844c4b1400ba3c9cecc97fba21329e1b5b777f71bf8f39824fbb20f03a769d5efc1ae6f97461ec10d25e2dc21385ab751eff8034d1487b725770b1556e985b7dfd602eccec28c857a4abe8a50c4754acd1f816fecc7a94b4dc58c4a4d942b7134e7fc07ccdb2d0bed5e0e2fc346e39597a6aef69442d08a98cab115a13da4cb187f2af88fa0c2d5864cb5e1d58b2766f08e255098dc7de8be018e09145149d89f8d4ecc9488d596eb24fe2546b130ce7e52ff41a307e00647846c55427b2cd5b8ecd1508600273969db0b2823610ece14788c67a1a8e5a51598cf783227b706056844003130d867913e8f23723ac386005f1f557c653e38c39fd3c12c1762eda49692cd7b33918328ca7aa354dc5959e00bd85a1042" } ], "extensions_order": [ "supported_versions", "application_layer_protocol_negotiation", "ec_point_formats", "psk_key_exchange_modes", "server_name", "extended_master_secret", "status_request", "supported_groups", "signature_algorithms", "key_share", "pre_shared_key" ], "extensions_order_hex": [ "0x002b", "0x0010", "0x000b", "0x002d", "0x0000", "0x0017", "0x0005", "0x000a", "0x000d", "0x0033", "0x0029" ], "grease": { "present": false, "values": [], "count": 0 }, "supported_versions": [ { "value": 772, "hex": "0x0304", "name": "TLS 1.3" }, { "value": 771, "hex": "0x0303", "name": "TLS 1.2" } ], "alpn": [ "h2", "http/1.1" ], "ec_point_formats": [ { "value": 0, "name": "uncompressed" } ], "psk_key_exchange_modes": [ { "value": 1, "name": "psk_dhe_ke" } ], "server_name": "h1.mail.futaccs.com", "supported_groups": [ { "value": 29, "hex": "0x001d", "name": "X25519" }, { "value": 23, "hex": "0x0017", "name": "secp256r1" }, { "value": 24, "hex": "0x0018", "name": "secp384r1" } ], "signature_algorithms": [ { "value": 1283, "hex": "0x0503", "name": "ecdsa_secp384r1_sha384" }, { "value": 1027, "hex": "0x0403", "name": "ecdsa_secp256r1_sha256" }, { "value": 2055, "hex": "0x0807", "name": "ed25519" }, { "value": 2054, "hex": "0x0806", "name": "rsa_pss_rsae_sha512" }, { "value": 2053, "hex": "0x0805", "name": "rsa_pss_rsae_sha384" }, { "value": 2052, "hex": "0x0804", "name": "rsa_pss_rsae_sha256" }, { "value": 1537, "hex": "0x0601", "name": "rsa_pkcs1_sha512" }, { "value": 1281, "hex": "0x0501", "name": "rsa_pkcs1_sha384" }, { "value": 1025, "hex": "0x0401", "name": "rsa_pkcs1_sha256" } ], "key_share_groups": [ { "group": 29, "hex": "0x001d", "name": "X25519", "key_exchange_len": 32 } ], "signature_algorithms_cert": [], "session_ticket_present": false, "cert_compression_algs": [], "record_size_limit": null, "application_settings": null, "quic_transport_parameters": [], "alpn_present": true, "padding_present": false, "raw_client_hello_hex": "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", "raw_client_hello_len": 563, "transport": "TCP", "fingerprints": { "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,43-16-11-45-0-23-5-10-13-51-41,29-23-24,0", "ja3_hash": "a3164d04bc20244ef136ccca4a451e95", "ja3n": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-41-43-45-51,29-23-24,0", "ja3n_hash": "bede4e899d33ded200e00281a2e58ed9", "ja4": "t13d1011h2_61a7ad8aa9b6_d4929ced8316", "ja4_r": "t13d1011h2_00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0017,0029,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401", "ja4_a": "t13d1011h2", "ja4_b_raw": "00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9", "ja4_c_raw": "0005,000a,000b,000d,0017,0029,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401" } }, "tls_session": { "version": "TLSv1.3", "cipher": [ "TLS_AES_256_GCM_SHA384", "TLSv1.3", 256 ], "alpn_selected": "http/1.1" }, "http": { "protocol": "HTTP/1.1", "request_line": "GET / HTTP/1.1", "request_line_eol": "CRLF", "method": "GET", "target": "/", "version": "HTTP/1.1", "headers": [ [ "accept", "*/*" ], [ "user-agent", "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" ], [ "accept-encoding", "gzip, br, zstd, deflate" ], [ "host", "h1.mail.futaccs.com" ] ], "headers_detailed": [ { "name": "accept", "value": "*/*", "value_raw": " */*", "raw_line": "accept: */*", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" }, { "name": "user-agent", "value": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "value_raw": " Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "raw_line": "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" }, { "name": "accept-encoding", "value": "gzip, br, zstd, deflate", "value_raw": " gzip, br, zstd, deflate", "raw_line": "accept-encoding: gzip, br, zstd, deflate", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" }, { "name": "host", "value": "h1.mail.futaccs.com", "value_raw": " h1.mail.futaccs.com", "raw_line": "host: h1.mail.futaccs.com", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" } ], "headers_order": [ "accept", "user-agent", "accept-encoding", "host" ], "headers_order_lower": [ "accept", "user-agent", "accept-encoding", "host" ], "headers_count": 4, "duplicate_headers": [], "malformed_lines": [], "header_case_map": { "accept": "lower", "user-agent": "lower", "accept-encoding": "lower", "host": "lower" } }, "body": { "length": 0, "hex": "", "text": "", "hexdump": "", "content_length_header": null, "actual_length": 0, "length_matches": null }, "tcpip": { "available": true, "detected_os": "Linux", "detected_os_detail": "Linux 3.x-6.x", "confidence": "средняя", "user_agent_os": null, "mismatch": null, "scores": { "Linux": 17.0, "Windows": 9.0, "Apple": 5.0, "BSD": 1.0, "Network": 1.0 }, "matched_fields": [ "порядок опций", "window scale", "MSS" ], "signature": "4:128+13:20:1460:62727,7:mss,sok,ts,nop,ws:df,id+:0", "hops": 13, "initial_ttl": 128, "mismatch_note": "сравнить не с чем: не определён стек или User-Agent", "raw": { "ip_version": 4, "ip_hdr_length": 5, "ip_tos": 0, "ip_total_length": 60, "ip_id": 50907, "ip_off": 16384, "ip_rf": 0, "ip_df": 1, "ip_mf": 0, "ip_ttl": 115, "ip_protocol": 6, "ip_checksum": 57651, "ip_nxt": null, "ip_plen": null, "src_ip": "216.73.217.61", "dst_ip": "5.199.168.94", "src_port": 15273, "dst_port": 443, "tcp_seq": 2472863566, "tcp_ack": 0, "tcp_off": 10, "tcp_flags": 2, "tcp_header_length": 40, "tcp_window_size": 62727, "tcp_checksum": 17114, "tcp_urp": 0, "tcp_options": "M1460,S,T,N,W7,", "tcp_options_ordered": "MSTNW", "tcp_option_names": [ "mss", "sok", "ts", "nop", "ws" ], "tcp_options_hex": "020405b40402080a7fbd789c0000000001030307", "tcp_mss": 1460, "tcp_window_scaling": 7, "tcp_timestamp": 2143123612, "tcp_timestamp_echo_reply": 0, "cap_len": 74, "header_len": 74, "ts": [ 1788226355, 993791 ] }, "field_reference": { "tcp_options": "строка опций TCP из SYN-пакета", "tcp_options_ordered": "только порядок опций, без значений", "ip_total_length": "полная длина IP-пакета в байтах", "tcp_window_size": "начальный размер окна TCP", "tcp_window_scaling": "коэффициент масштабирования окна", "tcp_mss": "TCP Maximum Segment Size", "tcp_off": "смещение данных TCP (длина заголовка / 4)", "tcp_flags": "флаги TCP числом (SYN = 2)", "tcp_timestamp": "значение TCP timestamp из опций", "ip_ttl": "IP Time To Live как он дошёл до сервера", "ip_tos": "IP Type of Service / DSCP", "ip_id": "поле IP Identification" } }, "raw": { "http_hex": "474554202f20485454502f312e310d0a6163636570743a202a2f2a0d0a757365722d6167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f3b20636f6d70617469626c653b20436c61756465426f742f312e303b202b636c61756465626f7440616e7468726f7069632e636f6d290d0a6163636570742d656e636f64696e673a20677a69702c2062722c207a7374642c206465666c6174650d0a686f73743a2068312e6d61696c2e667574616363732e636f6d0d0a0d0a", "http_hexdump": "00000000 47 45 54 20 2f 20 48 54 54 50 2f 31 2e 31 0d 0a |GET / HTTP/1.1..|\n00000010 61 63 63 65 70 74 3a 20 2a 2f 2a 0d 0a 75 73 65 |accept: */*..use|\n00000020 72 2d 61 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 |r-agent: Mozilla|\n00000030 2f 35 2e 30 20 41 70 70 6c 65 57 65 62 4b 69 74 |/5.0 AppleWebKit|\n00000040 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 |/537.36 (KHTML, |\n00000050 6c 69 6b 65 20 47 65 63 6b 6f 3b 20 63 6f 6d 70 |like Gecko; comp|\n00000060 61 74 69 62 6c 65 3b 20 43 6c 61 75 64 65 42 6f |atible; ClaudeBo|\n00000070 74 2f 31 2e 30 3b 20 2b 63 6c 61 75 64 65 62 6f |t/1.0; +claudebo|\n00000080 74 40 61 6e 74 68 72 6f 70 69 63 2e 63 6f 6d 29 |t@anthropic.com)|\n00000090 0d 0a 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e |..accept-encodin|\n000000a0 67 3a 20 67 7a 69 70 2c 20 62 72 2c 20 7a 73 74 |g: gzip, br, zst|\n000000b0 64 2c 20 64 65 66 6c 61 74 65 0d 0a 68 6f 73 74 |d, deflate..host|\n000000c0 3a 20 68 31 2e 6d 61 69 6c 2e 66 75 74 61 63 63 |: h1.mail.futacc|\n000000d0 73 2e 63 6f 6d 0d 0a 0d 0a |s.com....|", "http_len": 217 }, "log_files": null, "ja67_detail": { "ja67_tls": "9342d61fd4d867a3", "ja67_http": "153066ec4495221a", "ja67_id": "9d7ae10ca21e33dc", "ja67_canon": { "tls.version": 771, "tls.ciphers": [ "0x1302", "0x1301", "0x1303", "0xc02c", "0xc02b", "0xcca9", "0xc030", "0xc02f", "0xcca8", "0x00ff" ], "tls.ext_set": [ 0, 5, 10, 11, 13, 16, 23, 43, 45, 51 ], "tls.groups": [ "0x001d", "0x0017", "0x0018" ], "tls.key_share": [ "X25519" ], "tls.versions": [ "0x0304", "0x0303" ], "tls.sigalgs": [ "ecdsa_secp384r1_sha384", "ecdsa_secp256r1_sha256", "ed25519", "rsa_pss_rsae_sha512", "rsa_pss_rsae_sha384", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha512", "rsa_pkcs1_sha384", "rsa_pkcs1_sha256" ], "tls.sigalgs_cert": [], "tls.alpn": [ "h2", "http/1.1" ], "tls.alps": null, "tls.ec_point_formats": [ { "value": 0, "name": "uncompressed" } ], "tls.psk_modes": [ { "value": 1, "name": "psk_dhe_ke" } ], "tls.cert_compression": [], "tls.record_size_limit": null, "tls.ech": false, "h1.version": "HTTP/1.1", "h1.header_order": [ "accept", "user-agent", "accept-encoding", "host" ], "id.user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" } } }