Domain Fronting
May 02, 2018
If your domain becomes blocked you "could use" another one to bypass the block:
curl -s -H "Host: your-blocked-domain" -H "Connection: close" "https://new-tld/your/path"
Both domains must be hosted within the same CDN, example:
curl -s -H "Host: images-na.ssl-images-amazon.com" -H "Connection: close" "https://cdn.atlassian.com/images/I/01rgQ3jqo7L.css"
More info:
- https://www.optiv.com/blog/escape-and-evasion-egressing-restricted-networks
- https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains