{ "protocol": "HTTP/1.1", "request_raw": "GET /sitemap.xml HTTP/1.1\r\naccept: */*\r\nuser-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\r\naccept-encoding: gzip, br, zstd, deflate\r\nhost: h1.mail.futaccs.com\r\n\r\n", "request_lines": [ "GET /sitemap.xml HTTP/1.1", "accept: */*", "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "accept-encoding: gzip, br, zstd, deflate", "host: h1.mail.futaccs.com" ], "ja67": "79a9d3aff1048ea5", "meta": { "timestamp": "2026-09-01T02:57:12.916354+00:00", "timestamp_unix": 1788231432.916354, "mode": "auto", "server_port": 443, "expected_protocol": "auto", "client_ip": "216.73.217.61", "client_port": 54712 }, "transport": { "client": "216.73.217.61:54712", "tcp_nodelay": false, "recv_buffer": 131072, "mss": 1448 }, "tls": { "record_version": 769, "record_version_name": "TLS 1.0", "records_count": 1, "client_version": 771, "client_version_name": "TLS 1.2", "random": "9099fc518bffe41277eff06529c7d2acbb549cfd7da51830badfac24541aa06e", "session_id": "65c6432ae89d22b0ca95fc53a0b0ef0675e64dc6e72f5540c2084f55d58f854b", "session_id_len": 32, "cipher_suites": [ { "value": 4866, "hex": "0x1302", "name": "TLS_AES_256_GCM_SHA384" }, { "value": 4865, "hex": "0x1301", "name": "TLS_AES_128_GCM_SHA256" }, { "value": 4867, "hex": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256" }, { "value": 49196, "hex": "0xc02c", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384" }, { "value": 49195, "hex": "0xc02b", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256" }, { "value": 52393, "hex": "0xcca9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256" }, { "value": 49200, "hex": "0xc030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" }, { "value": 49199, "hex": "0xc02f", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" }, { "value": 52392, "hex": "0xcca8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" }, { "value": 255, "hex": "0x00ff", "name": "TLS_EMPTY_RENEGOTIATION_INFO_SCSV" } ], "compression_methods": [ 0 ], "extensions": [ { "type": 35, "hex": "0x0023", "name": "session_ticket", "length": 0, "data_hex": "", "decoded": { "length": 0 } }, { "type": 16, "hex": "0x0010", "name": "application_layer_protocol_negotiation", "length": 14, "data_hex": "000c02683208687474702f312e31", "decoded": [ "h2", "http/1.1" ] }, { "type": 43, "hex": "0x002b", "name": "supported_versions", "length": 5, "data_hex": "0403040303", "decoded": [ { "value": 772, "hex": "0x0304", "name": "TLS 1.3" }, { "value": 771, "hex": "0x0303", "name": "TLS 1.2" } ] }, { "type": 23, "hex": "0x0017", "name": "extended_master_secret", "length": 0, "data_hex": "" }, { "type": 13, "hex": "0x000d", "name": "signature_algorithms", "length": 20, "data_hex": "0012050304030807080608050804060105010401", "decoded": [ { "value": 1283, "hex": "0x0503", "name": "ecdsa_secp384r1_sha384" }, { "value": 1027, "hex": "0x0403", "name": "ecdsa_secp256r1_sha256" }, { "value": 2055, "hex": "0x0807", "name": "ed25519" }, { "value": 2054, "hex": "0x0806", "name": "rsa_pss_rsae_sha512" }, { "value": 2053, "hex": "0x0805", "name": "rsa_pss_rsae_sha384" }, { "value": 2052, "hex": "0x0804", "name": "rsa_pss_rsae_sha256" }, { "value": 1537, "hex": "0x0601", "name": "rsa_pkcs1_sha512" }, { "value": 1281, "hex": "0x0501", "name": "rsa_pkcs1_sha384" }, { "value": 1025, "hex": "0x0401", "name": "rsa_pkcs1_sha256" } ] }, { "type": 11, "hex": "0x000b", "name": "ec_point_formats", "length": 2, "data_hex": "0100", "decoded": [ { "value": 0, "name": "uncompressed" } ] }, { "type": 51, "hex": "0x0033", "name": "key_share", "length": 38, "data_hex": "0024001d0020d89179d0df1a8e944efd34ad49d546cfe2f8309412f477e02ccbc513ab11422f", "decoded": [ { "group": 29, "hex": "0x001d", "name": "X25519", "key_exchange_len": 32 } ] }, { "type": 10, "hex": "0x000a", "name": "supported_groups", "length": 8, "data_hex": "0006001d00170018", "decoded": [ { "value": 29, "hex": "0x001d", "name": "X25519" }, { "value": 23, "hex": "0x0017", "name": "secp256r1" }, { "value": 24, "hex": "0x0018", "name": "secp384r1" } ] }, { "type": 0, "hex": "0x0000", "name": "server_name", "length": 24, "data_hex": "001600001368312e6d61696c2e667574616363732e636f6d", "decoded": [ { "type": 0, "name": "h1.mail.futaccs.com" } ] }, { "type": 5, "hex": "0x0005", "name": "status_request", "length": 5, "data_hex": "0100000000", "decoded": { "status_type": 1 } }, { "type": 45, "hex": "0x002d", "name": "psk_key_exchange_modes", "length": 2, "data_hex": "0101", "decoded": [ { "value": 1, "name": "psk_dhe_ke" } ] } ], "extensions_order": [ "session_ticket", "application_layer_protocol_negotiation", "supported_versions", "extended_master_secret", "signature_algorithms", "ec_point_formats", "key_share", "supported_groups", "server_name", "status_request", "psk_key_exchange_modes" ], "extensions_order_hex": [ "0x0023", "0x0010", "0x002b", "0x0017", "0x000d", "0x000b", "0x0033", "0x000a", "0x0000", "0x0005", "0x002d" ], "grease": { "present": false, "values": [], "count": 0 }, "session_ticket_present": true, "alpn": [ "h2", "http/1.1" ], "supported_versions": [ { "value": 772, "hex": "0x0304", "name": "TLS 1.3" }, { "value": 771, "hex": "0x0303", "name": "TLS 1.2" } ], "signature_algorithms": [ { "value": 1283, "hex": "0x0503", "name": "ecdsa_secp384r1_sha384" }, { "value": 1027, "hex": "0x0403", "name": "ecdsa_secp256r1_sha256" }, { "value": 2055, "hex": "0x0807", "name": "ed25519" }, { "value": 2054, "hex": "0x0806", "name": "rsa_pss_rsae_sha512" }, { "value": 2053, "hex": "0x0805", "name": "rsa_pss_rsae_sha384" }, { "value": 2052, "hex": "0x0804", "name": "rsa_pss_rsae_sha256" }, { "value": 1537, "hex": "0x0601", "name": "rsa_pkcs1_sha512" }, { "value": 1281, "hex": "0x0501", "name": "rsa_pkcs1_sha384" }, { "value": 1025, "hex": "0x0401", "name": "rsa_pkcs1_sha256" } ], "ec_point_formats": [ { "value": 0, "name": "uncompressed" } ], "key_share_groups": [ { "group": 29, "hex": "0x001d", "name": "X25519", "key_exchange_len": 32 } ], "supported_groups": [ { "value": 29, "hex": "0x001d", "name": "X25519" }, { "value": 23, "hex": "0x0017", "name": "secp256r1" }, { "value": 24, "hex": "0x0018", "name": "secp384r1" } ], "server_name": "h1.mail.futaccs.com", "psk_key_exchange_modes": [ { "value": 1, "name": "psk_dhe_ke" } ], "signature_algorithms_cert": [], "cert_compression_algs": [], "record_size_limit": null, "application_settings": null, "quic_transport_parameters": [], "alpn_present": true, "padding_present": false, "raw_client_hello_hex": "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", "raw_client_hello_len": 264, "transport": "TCP", "fingerprints": { "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,35-16-43-23-13-11-51-10-0-5-45,29-23-24,0", "ja3_hash": "21ee157eb77c0a024d893b09eb517f71", "ja3n": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0", "ja3n_hash": "24dd0f987266c37f39231f6f2130d12e", "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3", "ja4_r": "t13d1011h2_00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401", "ja4_a": "t13d1011h2", "ja4_b_raw": "00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9", "ja4_c_raw": "0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401" } }, "tls_session": { "version": "TLSv1.3", "cipher": [ "TLS_AES_256_GCM_SHA384", "TLSv1.3", 256 ], "alpn_selected": "http/1.1" }, "http": { "protocol": "HTTP/1.1", "request_line": "GET /sitemap.xml HTTP/1.1", "request_line_eol": "CRLF", "method": "GET", "target": "/sitemap.xml", "version": "HTTP/1.1", "headers": [ [ "accept", "*/*" ], [ "user-agent", "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" ], [ "accept-encoding", "gzip, br, zstd, deflate" ], [ "host", "h1.mail.futaccs.com" ] ], "headers_detailed": [ { "name": "accept", "value": "*/*", "value_raw": " */*", "raw_line": "accept: */*", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" }, { "name": "user-agent", "value": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "value_raw": " Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "raw_line": "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" }, { "name": "accept-encoding", "value": "gzip, br, zstd, deflate", "value_raw": " gzip, br, zstd, deflate", "raw_line": "accept-encoding: gzip, br, zstd, deflate", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" }, { "name": "host", "value": "h1.mail.futaccs.com", "value_raw": " h1.mail.futaccs.com", "raw_line": "host: h1.mail.futaccs.com", "space_after_colon": 1, "trailing_ws": 0, "eol": "CRLF", "name_case": "lower" } ], "headers_order": [ "accept", "user-agent", "accept-encoding", "host" ], "headers_order_lower": [ "accept", "user-agent", "accept-encoding", "host" ], "headers_count": 4, "duplicate_headers": [], "malformed_lines": [], "header_case_map": { "accept": "lower", "user-agent": "lower", "accept-encoding": "lower", "host": "lower" } }, "body": { "length": 0, "hex": "", "text": "", "hexdump": "", "content_length_header": null, "actual_length": 0, "length_matches": null }, "tcpip": { "available": true, "detected_os": "Linux", "detected_os_detail": "Linux 3.x-6.x", "confidence": "средняя", "user_agent_os": null, "mismatch": null, "scores": { "Linux": 17.0, "Windows": 9.0, "Apple": 5.0, "BSD": 1.0, "Network": 1.0 }, "matched_fields": [ "порядок опций", "window scale", "MSS" ], "signature": "4:128+13:20:1460:62727,7:mss,sok,ts,nop,ws:df,id+:0", "hops": 13, "initial_ttl": 128, "mismatch_note": "сравнить не с чем: не определён стек или User-Agent", "raw": { "ip_version": 4, "ip_hdr_length": 5, "ip_tos": 0, "ip_total_length": 60, "ip_id": 14004, "ip_off": 16384, "ip_rf": 0, "ip_df": 1, "ip_mf": 0, "ip_ttl": 115, "ip_protocol": 6, "ip_checksum": 29019, "ip_nxt": null, "ip_plen": null, "src_ip": "216.73.217.61", "dst_ip": "5.199.168.94", "src_port": 54712, "dst_port": 443, "tcp_seq": 3614477338, "tcp_ack": 0, "tcp_off": 10, "tcp_flags": 2, "tcp_header_length": 40, "tcp_window_size": 62727, "tcp_checksum": 29204, "tcp_urp": 0, "tcp_options": "M1460,S,T,N,W7,", "tcp_options_ordered": "MSTNW", "tcp_option_names": [ "mss", "sok", "ts", "nop", "ws" ], "tcp_options_hex": "020405b40402080ae4b9617e0000000001030307", "tcp_mss": 1460, "tcp_window_scaling": 7, "tcp_timestamp": 3837354366, "tcp_timestamp_echo_reply": 0, "cap_len": 74, "header_len": 74, "ts": [ 1788231432, 793664 ] }, "field_reference": { "tcp_options": "строка опций TCP из SYN-пакета", "tcp_options_ordered": "только порядок опций, без значений", "ip_total_length": "полная длина IP-пакета в байтах", "tcp_window_size": "начальный размер окна TCP", "tcp_window_scaling": "коэффициент масштабирования окна", "tcp_mss": "TCP Maximum Segment Size", "tcp_off": "смещение данных TCP (длина заголовка / 4)", "tcp_flags": "флаги TCP числом (SYN = 2)", "tcp_timestamp": "значение TCP timestamp из опций", "ip_ttl": "IP Time To Live как он дошёл до сервера", "ip_tos": "IP Type of Service / DSCP", "ip_id": "поле IP Identification" } }, "raw": { "http_hex": "474554202f736974656d61702e786d6c20485454502f312e310d0a6163636570743a202a2f2a0d0a757365722d6167656e743a204d6f7a696c6c612f352e30204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f3b20636f6d70617469626c653b20436c61756465426f742f312e303b202b636c61756465626f7440616e7468726f7069632e636f6d290d0a6163636570742d656e636f64696e673a20677a69702c2062722c207a7374642c206465666c6174650d0a686f73743a2068312e6d61696c2e667574616363732e636f6d0d0a0d0a", "http_hexdump": "00000000 47 45 54 20 2f 73 69 74 65 6d 61 70 2e 78 6d 6c |GET /sitemap.xml|\n00000010 20 48 54 54 50 2f 31 2e 31 0d 0a 61 63 63 65 70 | HTTP/1.1..accep|\n00000020 74 3a 20 2a 2f 2a 0d 0a 75 73 65 72 2d 61 67 65 |t: */*..user-age|\n00000030 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 |nt: Mozilla/5.0 |\n00000040 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e |AppleWebKit/537.|\n00000050 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 |36 (KHTML, like |\n00000060 47 65 63 6b 6f 3b 20 63 6f 6d 70 61 74 69 62 6c |Gecko; compatibl|\n00000070 65 3b 20 43 6c 61 75 64 65 42 6f 74 2f 31 2e 30 |e; ClaudeBot/1.0|\n00000080 3b 20 2b 63 6c 61 75 64 65 62 6f 74 40 61 6e 74 |; +claudebot@ant|\n00000090 68 72 6f 70 69 63 2e 63 6f 6d 29 0d 0a 61 63 63 |hropic.com)..acc|\n000000a0 65 70 74 2d 65 6e 63 6f 64 69 6e 67 3a 20 67 7a |ept-encoding: gz|\n000000b0 69 70 2c 20 62 72 2c 20 7a 73 74 64 2c 20 64 65 |ip, br, zstd, de|\n000000c0 66 6c 61 74 65 0d 0a 68 6f 73 74 3a 20 68 31 2e |flate..host: h1.|\n000000d0 6d 61 69 6c 2e 66 75 74 61 63 63 73 2e 63 6f 6d |mail.futaccs.com|\n000000e0 0d 0a 0d 0a |....|", "http_len": 228 }, "log_files": null, "ja67_detail": { "ja67_tls": "f1c9e8778fdd9e7d", "ja67_http": "153066ec4495221a", "ja67_id": "9d7ae10ca21e33dc", "ja67_canon": { "tls.version": 771, "tls.ciphers": [ "0x1302", "0x1301", "0x1303", "0xc02c", "0xc02b", "0xcca9", "0xc030", "0xc02f", "0xcca8", "0x00ff" ], "tls.ext_set": [ 0, 5, 10, 11, 13, 16, 23, 35, 43, 45, 51 ], "tls.groups": [ "0x001d", "0x0017", "0x0018" ], "tls.key_share": [ "X25519" ], "tls.versions": [ "0x0304", "0x0303" ], "tls.sigalgs": [ "ecdsa_secp384r1_sha384", "ecdsa_secp256r1_sha256", "ed25519", "rsa_pss_rsae_sha512", "rsa_pss_rsae_sha384", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha512", "rsa_pkcs1_sha384", "rsa_pkcs1_sha256" ], "tls.sigalgs_cert": [], "tls.alpn": [ "h2", "http/1.1" ], "tls.alps": null, "tls.ec_point_formats": [ { "value": 0, "name": "uncompressed" } ], "tls.psk_modes": [ { "value": 1, "name": "psk_dhe_ke" } ], "tls.cert_compression": [], "tls.record_size_limit": null, "tls.ech": false, "h1.version": "HTTP/1.1", "h1.header_order": [ "accept", "user-agent", "accept-encoding", "host" ], "id.user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" } } }