ClientHello

Request headers

Raw JSON

{
  "timestamp": "2026-09-07T23:28:01.135Z",
  "transport": "tls",
  "remote_ip": "216.73.216.82",
  "remote_port": 12468,
  "client_ip": "216.73.216.82",
  "verdict": "DIRECT",
  "verdict_reason": "client IP 216.73.216.82 is not in any of the 287841 published Private Relay egress ranges",
  "meaning": "This connection arrived directly from your device's own address. Private Relay was not involved, so a gateway on your network path could see this connection and its TLS ClientHello. Over cellular, Number Verification can work over this path.",
  "asn": "AS16509",
  "org": "AMAZON-02 - Amazon.com, Inc., US",
  "asn_prefix": "216.73.216.0/22",
  "country": "US",
  "sni": "relay.aronstats.com",
  "tls_version_negotiated": "TLS 1.3",
  "cipher_negotiated": "TLS_AES_128_GCM_SHA256",
  "alpn_negotiated": "h2",
  "client_hello": {
    "server_name": "relay.aronstats.com",
    "supported_versions": [
      "TLS 1.3",
      "TLS 1.2"
    ],
    "cipher_suites": [
      "TLS_AES_256_GCM_SHA384",
      "TLS_AES_128_GCM_SHA256",
      "TLS_CHACHA20_POLY1305_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
      "0x00FF"
    ],
    "alpn": [
      "h2",
      "http/1.1"
    ],
    "supported_curves": [
      "X25519",
      "CurveP256",
      "CurveP384"
    ],
    "supported_points": [
      0
    ],
    "signature_schemes": [
      "ECDSAWithP384AndSHA384",
      "ECDSAWithP256AndSHA256",
      "Ed25519",
      "PSSWithSHA512",
      "PSSWithSHA384",
      "PSSWithSHA256",
      "PKCS1WithSHA512",
      "PKCS1WithSHA384",
      "PKCS1WithSHA256"
    ],
    "extensions": [
      "extended_master_secret(23)",
      "supported_groups(10)",
      "session_ticket(35)",
      "status_request(5)",
      "psk_key_exchange_modes(45)",
      "signature_algorithms(13)",
      "key_share(51)",
      "supported_versions(43)",
      "server_name(0)",
      "ec_point_formats(11)",
      "application_layer_protocol_negotiation(16)"
    ],
    "extension_ids": [
      23,
      10,
      35,
      5,
      45,
      13,
      51,
      43,
      0,
      11,
      16
    ],
    "ech_present": false,
    "grease": false
  },
  "http_protocol": "HTTP/2.0",
  "method": "GET",
  "path": "/sitemap.xml",
  "server_host": "relay.aronstats.com",
  "headers": [
    {
      "name": "Accept",
      "value": "*/*"
    },
    {
      "name": "Accept-Encoding",
      "value": "gzip, br, zstd, deflate"
    },
    {
      "name": "User-Agent",
      "value": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
    }
  ],
  "egress_list": {
    "prefixes": 287841,
    "source": "download:https://mask-api.icloud.com/egress-ip-ranges.csv",
    "loaded_at": "2026-09-07T07:46:42.779Z"
  }
}