Blend C2 into trusted traffic with domain fronting
A TLS SNI for a high-reputation CDN domain with a Host header pointing at your backend routes command traffic through infrastructure defenders trust.
Tag: egress
Fingerprint egress channels before delivering a payload
Learn which outbound paths a host allows first, then pick a C2 channel that blends with normal traffic.