Inspect the edge decision

1 · Who am I at the edge?

Live view of what Cloudflare sees on this request: colo, ASN, country, bot fields, Ray ID.

{
  "request": {
    "method": "GET",
    "path": "/lab",
    "host": "adi-shop.deepnest.com",
    "userAgent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "acceptLanguage": null,
    "ray": "a287e4d3581ad858",
    "ip": "216.73.217.174"
  },
  "locale": {
    "lang": "en",
    "bcp47": "en-US",
    "market": "United States",
    "currency": "USD",
    "timezone": "America/New_York",
    "flag": "🇺🇸"
  },
  "edge": {
    "colo": "CMH",
    "country": "US",
    "city": "Columbus",
    "continent": "NA",
    "timezone": "America/New_York",
    "region": "Ohio",
    "asOrganization": "Anthropic, PBC",
    "asn": 16509,
    "httpProtocol": "HTTP/2",
    "tlsVersion": "TLSv1.3",
    "clientTcpRtt": 1
  },
  "botManagement": {
    "score": 1,
    "corporateProxy": false,
    "verifiedBot": true,
    "staticResource": false,
    "ja3Hash": "f398b7837f14df054aee16d78ddcbd45",
    "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
    "ja4Signals": {
      "browser_ratio_1h": 0.0064555327,
      "h2h3_ratio_1h": 0.6988667,
      "ips_rank_1h": 190,
      "heuristic_ratio_1h": 0.26660782,
      "reqs_quantile_1h": 0.9999483,
      "uas_rank_1h": 216,
      "ips_quantile_1h": 0.9994545,
      "cache_ratio_1h": 0.022782082,
      "paths_rank_1h": 21,
      "reqs_rank_1h": 18
    },
    "jsDetection": {
      "passed": false
    },
    "detectionIds": [
      33563859,
      50331656,
      118965407
    ]
  },
  "note": "botManagement fields are present when Bot Management is entitled and the request was scored. score 0 means not computed (e.g. a Redirect Rule ran first), not human."
}

2 · Money path

Walk checkout as a browser. This is the path the bot-score rule protects. Note the Ray ID in DevTools → Network.

3 · Login API

POST JSON to the Kong-analogue login. Failures return 401 so identity-based rate limiting has something to count.

curl -s -X POST https://adi-shop.deepnest.com/api/v1/auth/login \
  -H 'content-type: application/json' \
  -d '{"email":"you@example.com","password":"nope"}'