you are viewing a single comment's thread
view the rest of the comments
[–] 20 points 11 months ago

They are giving response codes like 403 so it's not a failure to resolve and I agree it's not DNS... It's behaving differently based on different sub pages so it's something underneath the https encryption. Maybe an intermediary WAF that decrypts? Maybe some weird server side tooling that has govt provided?

I would guess WAF but I'd love to hear from someone who actually knows.

  • source
  • parent