| Date/time (server, UTC) | 2026-10-30T14:50:13Z |
| Requested host | element.lawipac.com |
| Scheme (via X-Forwarded-Proto) | https |
| Behind a proxy? | true |
| X-Forwarded-Host | element.lawipac.com |
| X-Forwarded-For | 216.73.216.173 |
| X-Forwarded-Port | 443 |
| X-Forwarded-Server | 075f4cc79343 |
| Direct peer address | 100.127.254.10:36996 |
| Method / path | GET /sitemap.xml |
| User-Agent | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
| Answered by | f7700e744fee |
This host plain-HTTP server never sees raw TLS SNI (that's terminated upstream); "Requested host" is the Host header as forwarded by the proxy, which for any normal HTTPS client is the same value that was used as the TLS SNI to route the connection here in the first place.