Tag: domain-fronting

All the articles with the tag "domain-fronting".

• Two C2 Cases, One Day: Reading the Difference Between Infected and Blocked

  16 Mar, 2026

  Two C2 investigations on the same day with very different outcomes — one confirmed infection with active beaconing, one clean block. The key was knowing what the firewall logs were actually telling me.