sk Skill · meltedinhex
hunting-domain-fronting-and-cdn-abuse
Hunts for domain fronting and CDN abuse by detecting TLS SNI versus HTTP Host header mismatches and high-reputation CDN domains carrying anomalous traffic in network telemetry. Activates for requests to hunt domain fronting, detect SNI/Host mismatch, or find CDN abuse used to mask C2.
Open on skills.sh ↗read 2026-09-15
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 0
bashc2tlsPythoncdndomain-frontingthreat-hunting
- Host repository
- meltedinhex/analyst-ai-pack
- Version
- 1.0.0
- Licence
- Apache-2.0
- Host stars
- 22
- Host language
- Python