{
  "protocol": "HTTP/2",
  "request_raw": "GET /sitemap.xml HTTP/2\r\n:method: GET\r\n:scheme: https\r\n:authority: h2.mail.futaccs.com\r\n:path: /sitemap.xml\r\naccept: */*\r\nuser-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\r\naccept-encoding: gzip, br, zstd, deflate\r\n\r\n",
  "request_lines": [
    "GET /sitemap.xml HTTP/2",
    ":method: GET",
    ":scheme: https",
    ":authority: h2.mail.futaccs.com",
    ":path: /sitemap.xml",
    "accept: */*",
    "user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "accept-encoding: gzip, br, zstd, deflate"
  ],
  "ja67": "27217ccf520bc017",
  "meta": {
    "timestamp": "2026-09-01T06:01:19.722153+00:00",
    "timestamp_unix": 1788242479.722153,
    "mode": "auto",
    "server_port": 443,
    "expected_protocol": "auto",
    "client_ip": "216.73.217.61",
    "client_port": 64999
  },
  "transport": {
    "client": "216.73.217.61:64999",
    "tcp_nodelay": false,
    "recv_buffer": 131072,
    "mss": 1448
  },
  "tls": {
    "record_version": 769,
    "record_version_name": "TLS 1.0",
    "records_count": 1,
    "client_version": 771,
    "client_version_name": "TLS 1.2",
    "random": "503ce49e5b59dca0bd4b9342baea63ca616d9e48b7f56eba6905986688ebc77a",
    "session_id": "8e1a7ae88b2e89b96c6566d15cf25b897daef75c4426159783da7c5717435f6e",
    "session_id_len": 32,
    "cipher_suites": [
      {
        "value": 4866,
        "hex": "0x1302",
        "name": "TLS_AES_256_GCM_SHA384"
      },
      {
        "value": 4865,
        "hex": "0x1301",
        "name": "TLS_AES_128_GCM_SHA256"
      },
      {
        "value": 4867,
        "hex": "0x1303",
        "name": "TLS_CHACHA20_POLY1305_SHA256"
      },
      {
        "value": 49196,
        "hex": "0xc02c",
        "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
      },
      {
        "value": 49195,
        "hex": "0xc02b",
        "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
      },
      {
        "value": 52393,
        "hex": "0xcca9",
        "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"
      },
      {
        "value": 49200,
        "hex": "0xc030",
        "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
      },
      {
        "value": 49199,
        "hex": "0xc02f",
        "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
      },
      {
        "value": 52392,
        "hex": "0xcca8",
        "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"
      },
      {
        "value": 255,
        "hex": "0x00ff",
        "name": "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
      }
    ],
    "compression_methods": [
      0
    ],
    "extensions": [
      {
        "type": 10,
        "hex": "0x000a",
        "name": "supported_groups",
        "length": 8,
        "data_hex": "0006001d00170018",
        "decoded": [
          {
            "value": 29,
            "hex": "0x001d",
            "name": "X25519"
          },
          {
            "value": 23,
            "hex": "0x0017",
            "name": "secp256r1"
          },
          {
            "value": 24,
            "hex": "0x0018",
            "name": "secp384r1"
          }
        ]
      },
      {
        "type": 43,
        "hex": "0x002b",
        "name": "supported_versions",
        "length": 5,
        "data_hex": "0403040303",
        "decoded": [
          {
            "value": 772,
            "hex": "0x0304",
            "name": "TLS 1.3"
          },
          {
            "value": 771,
            "hex": "0x0303",
            "name": "TLS 1.2"
          }
        ]
      },
      {
        "type": 16,
        "hex": "0x0010",
        "name": "application_layer_protocol_negotiation",
        "length": 14,
        "data_hex": "000c02683208687474702f312e31",
        "decoded": [
          "h2",
          "http/1.1"
        ]
      },
      {
        "type": 35,
        "hex": "0x0023",
        "name": "session_ticket",
        "length": 0,
        "data_hex": "",
        "decoded": {
          "length": 0
        }
      },
      {
        "type": 23,
        "hex": "0x0017",
        "name": "extended_master_secret",
        "length": 0,
        "data_hex": ""
      },
      {
        "type": 11,
        "hex": "0x000b",
        "name": "ec_point_formats",
        "length": 2,
        "data_hex": "0100",
        "decoded": [
          {
            "value": 0,
            "name": "uncompressed"
          }
        ]
      },
      {
        "type": 0,
        "hex": "0x0000",
        "name": "server_name",
        "length": 24,
        "data_hex": "001600001368322e6d61696c2e667574616363732e636f6d",
        "decoded": [
          {
            "type": 0,
            "name": "h2.mail.futaccs.com"
          }
        ]
      },
      {
        "type": 51,
        "hex": "0x0033",
        "name": "key_share",
        "length": 38,
        "data_hex": "0024001d0020e08a474594348bd5d9904ca0bce30779926df4aacdc84d02c9c13952e2a52950",
        "decoded": [
          {
            "group": 29,
            "hex": "0x001d",
            "name": "X25519",
            "key_exchange_len": 32
          }
        ]
      },
      {
        "type": 13,
        "hex": "0x000d",
        "name": "signature_algorithms",
        "length": 20,
        "data_hex": "0012050304030807080608050804060105010401",
        "decoded": [
          {
            "value": 1283,
            "hex": "0x0503",
            "name": "ecdsa_secp384r1_sha384"
          },
          {
            "value": 1027,
            "hex": "0x0403",
            "name": "ecdsa_secp256r1_sha256"
          },
          {
            "value": 2055,
            "hex": "0x0807",
            "name": "ed25519"
          },
          {
            "value": 2054,
            "hex": "0x0806",
            "name": "rsa_pss_rsae_sha512"
          },
          {
            "value": 2053,
            "hex": "0x0805",
            "name": "rsa_pss_rsae_sha384"
          },
          {
            "value": 2052,
            "hex": "0x0804",
            "name": "rsa_pss_rsae_sha256"
          },
          {
            "value": 1537,
            "hex": "0x0601",
            "name": "rsa_pkcs1_sha512"
          },
          {
            "value": 1281,
            "hex": "0x0501",
            "name": "rsa_pkcs1_sha384"
          },
          {
            "value": 1025,
            "hex": "0x0401",
            "name": "rsa_pkcs1_sha256"
          }
        ]
      },
      {
        "type": 45,
        "hex": "0x002d",
        "name": "psk_key_exchange_modes",
        "length": 2,
        "data_hex": "0101",
        "decoded": [
          {
            "value": 1,
            "name": "psk_dhe_ke"
          }
        ]
      },
      {
        "type": 5,
        "hex": "0x0005",
        "name": "status_request",
        "length": 5,
        "data_hex": "0100000000",
        "decoded": {
          "status_type": 1
        }
      }
    ],
    "extensions_order": [
      "supported_groups",
      "supported_versions",
      "application_layer_protocol_negotiation",
      "session_ticket",
      "extended_master_secret",
      "ec_point_formats",
      "server_name",
      "key_share",
      "signature_algorithms",
      "psk_key_exchange_modes",
      "status_request"
    ],
    "extensions_order_hex": [
      "0x000a",
      "0x002b",
      "0x0010",
      "0x0023",
      "0x0017",
      "0x000b",
      "0x0000",
      "0x0033",
      "0x000d",
      "0x002d",
      "0x0005"
    ],
    "grease": {
      "present": false,
      "values": [],
      "count": 0
    },
    "supported_groups": [
      {
        "value": 29,
        "hex": "0x001d",
        "name": "X25519"
      },
      {
        "value": 23,
        "hex": "0x0017",
        "name": "secp256r1"
      },
      {
        "value": 24,
        "hex": "0x0018",
        "name": "secp384r1"
      }
    ],
    "supported_versions": [
      {
        "value": 772,
        "hex": "0x0304",
        "name": "TLS 1.3"
      },
      {
        "value": 771,
        "hex": "0x0303",
        "name": "TLS 1.2"
      }
    ],
    "alpn": [
      "h2",
      "http/1.1"
    ],
    "session_ticket_present": true,
    "ec_point_formats": [
      {
        "value": 0,
        "name": "uncompressed"
      }
    ],
    "server_name": "h2.mail.futaccs.com",
    "key_share_groups": [
      {
        "group": 29,
        "hex": "0x001d",
        "name": "X25519",
        "key_exchange_len": 32
      }
    ],
    "signature_algorithms": [
      {
        "value": 1283,
        "hex": "0x0503",
        "name": "ecdsa_secp384r1_sha384"
      },
      {
        "value": 1027,
        "hex": "0x0403",
        "name": "ecdsa_secp256r1_sha256"
      },
      {
        "value": 2055,
        "hex": "0x0807",
        "name": "ed25519"
      },
      {
        "value": 2054,
        "hex": "0x0806",
        "name": "rsa_pss_rsae_sha512"
      },
      {
        "value": 2053,
        "hex": "0x0805",
        "name": "rsa_pss_rsae_sha384"
      },
      {
        "value": 2052,
        "hex": "0x0804",
        "name": "rsa_pss_rsae_sha256"
      },
      {
        "value": 1537,
        "hex": "0x0601",
        "name": "rsa_pkcs1_sha512"
      },
      {
        "value": 1281,
        "hex": "0x0501",
        "name": "rsa_pkcs1_sha384"
      },
      {
        "value": 1025,
        "hex": "0x0401",
        "name": "rsa_pkcs1_sha256"
      }
    ],
    "psk_key_exchange_modes": [
      {
        "value": 1,
        "name": "psk_dhe_ke"
      }
    ],
    "signature_algorithms_cert": [],
    "cert_compression_algs": [],
    "record_size_limit": null,
    "application_settings": null,
    "quic_transport_parameters": [],
    "alpn_present": true,
    "padding_present": false,
    "raw_client_hello_hex": "1603010103010000ff0303503ce49e5b59dca0bd4b9342baea63ca616d9e48b7f56eba6905986688ebc77a208e1a7ae88b2e89b96c6566d15cf25b897daef75c4426159783da7c5717435f6e0014130213011303c02cc02bcca9c030c02fcca800ff010000a2000a00080006001d00170018002b000504030403030010000e000c02683208687474702f312e310023000000170000000b0002010000000018001600001368322e6d61696c2e667574616363732e636f6d003300260024001d0020e08a474594348bd5d9904ca0bce30779926df4aacdc84d02c9c13952e2a52950000d00140012050304030807080608050804060105010401002d00020101000500050100000000",
    "raw_client_hello_len": 264,
    "transport": "TCP",
    "fingerprints": {
      "ja3": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,10-43-16-35-23-11-0-51-13-45-5,29-23-24,0",
      "ja3_hash": "8a3e5421c829957665f7c77eb9b50a8f",
      "ja3n": "771,4866-4865-4867-49196-49195-52393-49200-49199-52392-255,0-5-10-11-13-16-23-35-43-45-51,29-23-24,0",
      "ja3n_hash": "24dd0f987266c37f39231f6f2130d12e",
      "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
      "ja4_r": "t13d1011h2_00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401",
      "ja4_a": "t13d1011h2",
      "ja4_b_raw": "00ff,1301,1302,1303,c02b,c02c,c02f,c030,cca8,cca9",
      "ja4_c_raw": "0005,000a,000b,000d,0017,0023,002b,002d,0033_0503,0403,0807,0806,0805,0804,0601,0501,0401"
    }
  },
  "tls_session": {
    "version": "TLSv1.3",
    "cipher": [
      "TLS_AES_256_GCM_SHA384",
      "TLSv1.3",
      256
    ],
    "alpn_selected": "h2"
  },
  "http": {
    "protocol": "HTTP/2",
    "preface": "PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n",
    "frames": [
      {
        "type": "SETTINGS",
        "flags": "0x00",
        "stream_id": 0,
        "length": 24,
        "settings": [
          {
            "id": 2,
            "name": "ENABLE_PUSH",
            "value": 0
          },
          {
            "id": 4,
            "name": "INITIAL_WINDOW_SIZE",
            "value": 2097152
          },
          {
            "id": 5,
            "name": "MAX_FRAME_SIZE",
            "value": 16384
          },
          {
            "id": 6,
            "name": "MAX_HEADER_LIST_SIZE",
            "value": 16384
          }
        ]
      },
      {
        "type": "WINDOW_UPDATE",
        "flags": "0x00",
        "stream_id": 0,
        "length": 4,
        "window_size_increment": 5177345
      },
      {
        "type": "HEADERS",
        "flags": "0x05",
        "stream_id": 1,
        "length": 133
      }
    ],
    "settings": [
      [
        {
          "id": 2,
          "name": "ENABLE_PUSH",
          "value": 0
        },
        {
          "id": 4,
          "name": "INITIAL_WINDOW_SIZE",
          "value": 2097152
        },
        {
          "id": 5,
          "name": "MAX_FRAME_SIZE",
          "value": 16384
        },
        {
          "id": 6,
          "name": "MAX_HEADER_LIST_SIZE",
          "value": 16384
        }
      ]
    ],
    "window_update": 5177345,
    "priority_frames": [],
    "priority_in_headers": null,
    "stream_id": 1,
    "headers": [
      [
        ":method",
        "GET"
      ],
      [
        ":scheme",
        "https"
      ],
      [
        ":authority",
        "h2.mail.futaccs.com"
      ],
      [
        ":path",
        "/sitemap.xml"
      ],
      [
        "accept",
        "*/*"
      ],
      [
        "user-agent",
        "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
      ],
      [
        "accept-encoding",
        "gzip, br, zstd, deflate"
      ]
    ],
    "headers_order": [
      ":method",
      ":scheme",
      ":authority",
      ":path",
      "accept",
      "user-agent",
      "accept-encoding"
    ],
    "pseudo_header_order": [
      ":method",
      ":scheme",
      ":authority",
      ":path"
    ],
    "regular_header_order": [
      "accept",
      "user-agent",
      "accept-encoding"
    ],
    "headers_count": 7,
    "duplicate_headers": [],
    "hpack": {
      "block_len": 133,
      "block_hex": "8287418d9c4bd23350bcb6a464221721e90489610649691d6bf9a68f5383f963e77aced07f66a281b0dae0521aeba0bc8b1e632586d975765c53facd8f7e8cff4a506ea5531149d4ff6a10f4d6349a3a0bf6a5ea076c85ba74b015c1f6a7fb2503b642c674ffe875267b0f5988b90f4ff750929bd9abfa523b3e94f684c9f4a4859681a4bf",
      "representations": [
        {
          "repr": "indexed",
          "index": 2
        },
        {
          "repr": "indexed",
          "index": 7
        },
        {
          "repr": "literal_incremental_indexing",
          "name_index": 1,
          "value_huffman": true,
          "value_len": 13
        },
        {
          "repr": "literal_without_indexing",
          "name_index": 4,
          "value_huffman": true,
          "value_len": 9
        },
        {
          "repr": "literal_incremental_indexing",
          "name_index": 19,
          "value_huffman": true,
          "value_len": 3
        },
        {
          "repr": "literal_incremental_indexing",
          "name_index": 58,
          "value_huffman": true,
          "value_len": 78
        },
        {
          "repr": "literal_incremental_indexing",
          "name_index": 16,
          "value_huffman": true,
          "value_len": 18
        }
      ],
      "error": null
    },
    "akamai_fingerprint": "2:0;4:2097152;5:16384;6:16384|5177345|0|m,s,a,p",
    "body_len": 0,
    "method": "GET",
    "target": "/sitemap.xml",
    "request_line": "GET /sitemap.xml HTTP/2",
    "version": "HTTP/2"
  },
  "body": {
    "length": 0,
    "hex": "",
    "text": "",
    "hexdump": ""
  },
  "tcpip": {
    "available": true,
    "detected_os": "Linux",
    "detected_os_detail": "Linux 3.x-6.x",
    "confidence": "средняя",
    "user_agent_os": null,
    "mismatch": null,
    "scores": {
      "Linux": 17.0,
      "Windows": 9.0,
      "Apple": 5.0,
      "BSD": 1.0,
      "Network": 1.0
    },
    "matched_fields": [
      "порядок опций",
      "window scale",
      "MSS"
    ],
    "signature": "4:128+13:20:1460:62727,7:mss,sok,ts,nop,ws:df,id+:0",
    "hops": 13,
    "initial_ttl": 128,
    "mismatch_note": "сравнить не с чем: не определён стек или User-Agent",
    "raw": {
      "ip_version": 4,
      "ip_hdr_length": 5,
      "ip_tos": 0,
      "ip_total_length": 60,
      "ip_id": 15788,
      "ip_off": 16384,
      "ip_rf": 0,
      "ip_df": 1,
      "ip_mf": 0,
      "ip_ttl": 115,
      "ip_protocol": 6,
      "ip_checksum": 27235,
      "ip_nxt": null,
      "ip_plen": null,
      "src_ip": "216.73.217.61",
      "dst_ip": "5.199.168.94",
      "src_port": 64999,
      "dst_port": 443,
      "tcp_seq": 1562970315,
      "tcp_ack": 0,
      "tcp_off": 10,
      "tcp_flags": 2,
      "tcp_header_length": 40,
      "tcp_window_size": 62727,
      "tcp_checksum": 32180,
      "tcp_urp": 0,
      "tcp_options": "M1460,S,T,N,W7,",
      "tcp_options_ordered": "MSTNW",
      "tcp_option_names": [
        "mss",
        "sok",
        "ts",
        "nop",
        "ws"
      ],
      "tcp_options_hex": "020405b40402080a87af88500000000001030307",
      "tcp_mss": 1460,
      "tcp_window_scaling": 7,
      "tcp_timestamp": 2276427856,
      "tcp_timestamp_echo_reply": 0,
      "cap_len": 74,
      "header_len": 74,
      "ts": [
        1788242479,
        597162
      ]
    },
    "field_reference": {
      "tcp_options": "строка опций TCP из SYN-пакета",
      "tcp_options_ordered": "только порядок опций, без значений",
      "ip_total_length": "полная длина IP-пакета в байтах",
      "tcp_window_size": "начальный размер окна TCP",
      "tcp_window_scaling": "коэффициент масштабирования окна",
      "tcp_mss": "TCP Maximum Segment Size",
      "tcp_off": "смещение данных TCP (длина заголовка / 4)",
      "tcp_flags": "флаги TCP числом (SYN = 2)",
      "tcp_timestamp": "значение TCP timestamp из опций",
      "ip_ttl": "IP Time To Live как он дошёл до сервера",
      "ip_tos": "IP Type of Service / DSCP",
      "ip_id": "поле IP Identification"
    }
  },
  "raw": {
    "http_hex": "505249202a20485454502f322e300d0a0d0a534d0d0a0d0a000018040000000000000200000000000400200000000500004000000600004000000004080000000000004f00010000850105000000018287418d9c4bd23350bcb6a464221721e90489610649691d6bf9a68f5383f963e77aced07f66a281b0dae0521aeba0bc8b1e632586d975765c53facd8f7e8cff4a506ea5531149d4ff6a10f4d6349a3a0bf6a5ea076c85ba74b015c1f6a7fb2503b642c674ffe875267b0f5988b90f4ff750929bd9abfa523b3e94f684c9f4a4859681a4bf",
    "http_hexdump": "00000000  50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a  |PRI * HTTP/2.0..|\n00000010  0d 0a 53 4d 0d 0a 0d 0a 00 00 18 04 00 00 00 00  |..SM............|\n00000020  00 00 02 00 00 00 00 00 04 00 20 00 00 00 05 00  |.......... .....|\n00000030  00 40 00 00 06 00 00 40 00 00 00 04 08 00 00 00  |.@.....@........|\n00000040  00 00 00 4f 00 01 00 00 85 01 05 00 00 00 01 82  |...O............|\n00000050  87 41 8d 9c 4b d2 33 50 bc b6 a4 64 22 17 21 e9  |.A..K.3P...d\".!.|\n00000060  04 89 61 06 49 69 1d 6b f9 a6 8f 53 83 f9 63 e7  |..a.Ii.k...S..c.|\n00000070  7a ce d0 7f 66 a2 81 b0 da e0 52 1a eb a0 bc 8b  |z...f.....R.....|\n00000080  1e 63 25 86 d9 75 76 5c 53 fa cd 8f 7e 8c ff 4a  |.c%..uv\\S...~..J|\n00000090  50 6e a5 53 11 49 d4 ff 6a 10 f4 d6 34 9a 3a 0b  |Pn.S.I..j...4.:.|\n000000a0  f6 a5 ea 07 6c 85 ba 74 b0 15 c1 f6 a7 fb 25 03  |....l..t......%.|\n000000b0  b6 42 c6 74 ff e8 75 26 7b 0f 59 88 b9 0f 4f f7  |.B.t..u&{.Y...O.|\n000000c0  50 92 9b d9 ab fa 52 3b 3e 94 f6 84 c9 f4 a4 85  |P.....R;>.......|\n000000d0  96 81 a4 bf                                      |....|",
    "http_len": 212
  },
  "log_files": null,
  "ja67_detail": {
    "ja67_tls": "f1c9e8778fdd9e7d",
    "ja67_http": "01f7010323821783",
    "ja67_id": "9d7ae10ca21e33dc",
    "ja67_canon": {
      "tls.version": 771,
      "tls.ciphers": [
        "0x1302",
        "0x1301",
        "0x1303",
        "0xc02c",
        "0xc02b",
        "0xcca9",
        "0xc030",
        "0xc02f",
        "0xcca8",
        "0x00ff"
      ],
      "tls.ext_set": [
        0,
        5,
        10,
        11,
        13,
        16,
        23,
        35,
        43,
        45,
        51
      ],
      "tls.groups": [
        "0x001d",
        "0x0017",
        "0x0018"
      ],
      "tls.key_share": [
        "X25519"
      ],
      "tls.versions": [
        "0x0304",
        "0x0303"
      ],
      "tls.sigalgs": [
        "ecdsa_secp384r1_sha384",
        "ecdsa_secp256r1_sha256",
        "ed25519",
        "rsa_pss_rsae_sha512",
        "rsa_pss_rsae_sha384",
        "rsa_pss_rsae_sha256",
        "rsa_pkcs1_sha512",
        "rsa_pkcs1_sha384",
        "rsa_pkcs1_sha256"
      ],
      "tls.sigalgs_cert": [],
      "tls.alpn": [
        "h2",
        "http/1.1"
      ],
      "tls.alps": null,
      "tls.ec_point_formats": [
        {
          "value": 0,
          "name": "uncompressed"
        }
      ],
      "tls.psk_modes": [
        {
          "value": 1,
          "name": "psk_dhe_ke"
        }
      ],
      "tls.cert_compression": [],
      "tls.record_size_limit": null,
      "tls.ech": false,
      "h2.settings": [
        [
          2,
          0
        ],
        [
          4,
          2097152
        ],
        [
          5,
          16384
        ],
        [
          6,
          16384
        ]
      ],
      "h2.window_update": 5177345,
      "h2.prio": [
        null,
        null,
        null
      ],
      "h2.priority_frames": [],
      "h2.pseudo_order": [
        ":method",
        ":scheme",
        ":authority",
        ":path"
      ],
      "id.user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
    }
  }
}