=== ORIGIN: AWS BACKEND ===

remote_addr (TCP peer): 64.252.76.35
X-Forwarded-For:        '216.73.217.62'
X-Amz-Cf-Id:            'aSxeyU0K_SD78Q7Be4Kl7bOShC9h8_Sy44EgOp-vwVwvx4wd0SXMDw=='
Host:                   origin-aws.cf-saas.demotw.com
SNI:                    origin-aws.cf-saas.demotw.com
TLS:                    TLSv1.3 / TLS_AES_128_GCM_SHA256
Time:                   2026-08-14T04:51:11+00:00

This is Origin A (AWS). If you see X-Amz-Cf-Id, traffic arrived via CloudFront.
If XFF is populated, traffic arrived via a terminating edge (ALB or CloudFront).