4 ms·CURRYFINGER: SNI and Host header spoofing to find true IPs behind Cloudflare1 points by popcalc 3y agopopcalc 3y agoSource: https://github.com/tbiehn/CURRYFINGER https://github.com/tbiehn/CURRYFINGERzamnos 3y agoCloudflare provides their source addresses so you can protect your site by only responding to those addresses, which I believe protects you from discovery via this type of mechanism.