"Boobs check" – Technique to verify if sites behind CDN are hosted in Iran

https://twitter.com/hkashfi/status/1995109785679573167

71•defly•1h ago

https://xcancel.com/hkashfi/status/1995109785679573167

Comments

ThePowerOfFuet•30m ago

https://xcancel.com/hkashfi/status/1995109785679573167

Boogie_Man•17m ago

Thanks for posting this. I mostly gave up on viewing the one or two Twitter feeds that interest me after nitter stopped working. It wasn't ideological, I just wasn't able to reliably view and navigate without an account, and when I made an account it just kept showing me like "black HS football player bad sportsmanship".

Look like I've got about two years of James Cage White story arcs to check in on.

KiranRao0•18m ago

Does anyone have sample sites that return this?

phgn•1m ago

Also interested in a sample site where the request successfully resolves :)

lovegrenoble•10m ago

Why not?

Aloisius•7m ago

So presumably Iran has a reverse proxy in front of the entire internet for HTTP?

I really want to know what's on the webpage for the iframe.

Yokolos•5m ago

I'm wondering for what purpose one would be interested in finding out if a site is hosted in Iran or not.

shishcat•4m ago

This behavior only works when the reverse proxy or CDN is configured like this:

Proxy/CDN: HTTPS (443) → Origin server: plain HTTP (80)

If the origin server uses any proper TLS configuration, even a self-signed certificate, this method stops working. It only succeeds when the upstream connection to the origin is unsecured.

If you want to test this on a random site without Cloudflare or reverse proxy in general on HTTP: curl http://www.digiboy.ir/boobs.jpg -v

Writing a Good Claude.md

Advent of Code 2025

Windows drive letters are not limited to A-Z

Migrating Dillo from GitHub

ETH-Zurich: Digital Design and Computer Architecture; 227-0003-10L, Spring, 2025

LLVM-MOS – Clang LLVM fork targeting the 6502

Program-of-Thought Prompting Outperforms Chain-of-Thought by 15% (2022)

ESA Sentinel-1D delivers first high-resolution images

"Boobs check" – Technique to verify if sites behind CDN are hosted in Iran

GitHub to Codeberg: my experience

CachyOS: Fast and Customizable Linux Distribution

Don't push AI down our throats

A Second Look at Geolocation and Starlink

Stop Hacklore (modern urban legends about digital safety)

Show HN: Boing

RetailReady (YC W24) Is Hiring Associate Product Manager

NixOS 25.11 released

There is No Quintic Formula [video]

Show HN: Real-time system that tracks how news spreads across 200k websites

Show HN: Fixing Google Nano Banana Pixel Art with Rust

People keep flocking to Linux, not just to escape Windows

Langjam Gamejam: Build a programming language then make a game with it

Modern cars are spying on you. Here's what you can do about it

Zigbook Is Plagiarizing the Zigtools Playground

Paul Hegarty's updated CS193p SwiftUI course released by Stanford

Finding the grain of sand in a heap of Salt

Notes on Shadowing a Hospitalist

All it takes is for one to work out

The Easiest Way to Build a Type Checker

What's Hiding Inside Haribo's Power Bank and Headphones?

"Boobs check" – Technique to verify if sites behind CDN are hosted in Iran

Comments

Writing a Good Claude.md

Advent of Code 2025

Windows drive letters are not limited to A-Z

Migrating Dillo from GitHub

ETH-Zurich: Digital Design and Computer Architecture; 227-0003-10L, Spring, 2025

LLVM-MOS – Clang LLVM fork targeting the 6502

Program-of-Thought Prompting Outperforms Chain-of-Thought by 15% (2022)

ESA Sentinel-1D delivers first high-resolution images

"Boobs check" – Technique to verify if sites behind CDN are hosted in Iran

GitHub to Codeberg: my experience

CachyOS: Fast and Customizable Linux Distribution

Don't push AI down our throats

A Second Look at Geolocation and Starlink

Stop Hacklore (modern urban legends about digital safety)

Show HN: Boing

RetailReady (YC W24) Is Hiring Associate Product Manager

NixOS 25.11 released

There is No Quintic Formula [video]

Show HN: Real-time system that tracks how news spreads across 200k websites

Show HN: Fixing Google Nano Banana Pixel Art with Rust

People keep flocking to Linux, not just to escape Windows

Langjam Gamejam: Build a programming language then make a game with it

Modern cars are spying on you. Here's what you can do about it

Zigbook Is Plagiarizing the Zigtools Playground

Paul Hegarty's updated CS193p SwiftUI course released by Stanford

Finding the grain of sand in a heap of Salt

Notes on Shadowing a Hospitalist

All it takes is for one to work out

The Easiest Way to Build a Type Checker

What's Hiding Inside Haribo's Power Bank and Headphones?