3 ms·
One more technique to find the backend IP address of the web-server is to lookup the DNS record history of the domain in question. Usually, the admins will test
by flicker-rate 4y ago
One more technique to find the backend IP address of the web-server is to lookup the DNS record history of the domain in question. Usually, the admins will test their website with with SSL on a real domain to ensure it works.
Only afterward, they will protect it with Cloudflare/Akamai/Cloudfront, etc, which means you'll have a DNS history trail to lookup.
I've had good luck with services such as SecurityTrails, Virustotal and CompleteDNS for DNS history.
Once you find the original A record IP address, you can put it in your hosts file, pointing to the domain. Then, you will be able to access the site, bypassing the CDN without issue.