Inspect the edge decision

1 · Who am I at the edge?

Live view of what Cloudflare sees on this request: colo, ASN, country, bot fields, Ray ID.

{
  "request": {
    "method": "GET",
    "path": "/lab",
    "host": "adi-shop.deepnest.com",
    "userAgent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
    "acceptLanguage": null,
    "ray": "a46e2aca9cea4440",
    "ip": "216.73.216.101"
  },
  "locale": {
    "lang": "en",
    "bcp47": "en-US",
    "market": "United States",
    "currency": "USD",
    "timezone": "America/New_York",
    "flag": "🇺🇸"
  },
  "edge": {
    "colo": "CMH",
    "country": "US",
    "city": "Columbus",
    "continent": "NA",
    "timezone": "America/New_York",
    "region": "Ohio",
    "asOrganization": "Anthropic, PBC",
    "asn": 16509,
    "httpProtocol": "HTTP/2",
    "tlsVersion": "TLSv1.3",
    "clientTcpRtt": 3
  },
  "botManagement": {
    "score": 1,
    "corporateProxy": false,
    "verifiedBot": true,
    "staticResource": false,
    "ja3Hash": "f170405ce90147122f4601c9939ef789",
    "ja4": "t13d1011h2_61a7ad8aa9b6_3fcd1a44f3e3",
    "ja4Signals": {
      "cache_ratio_1h": 0.03323375,
      "ips_quantile_1h": 0.99980545,
      "ips_rank_1h": 165,
      "uas_rank_1h": 26,
      "h2h3_ratio_1h": 0.99764663,
      "reqs_rank_1h": 23,
      "reqs_quantile_1h": 0.9999729,
      "browser_ratio_1h": 0.0076267803,
      "paths_rank_1h": 25,
      "heuristic_ratio_1h": 0.30539626
    },
    "jsDetection": {
      "passed": false
    },
    "detectionIds": [
      118965407,
      33563859,
      50331656
    ]
  },
  "note": "botManagement fields are present when Bot Management is entitled and the request was scored. score 0 means not computed (e.g. a Redirect Rule ran first), not human."
}

2 · Money path

Walk checkout as a browser. This is the path the bot-score rule protects. Note the Ray ID in DevTools → Network.

3 · Login API

POST JSON to the Kong-analogue login. Failures return 401 so identity-based rate limiting has something to count.

curl -s -X POST https://adi-shop.deepnest.com/api/v1/auth/login \
  -H 'content-type: application/json' \
  -d '{"email":"you@example.com","password":"nope"}'