Absolute Redirect Test

Clicking below triggers a server-side Response.Redirect built from Request.Url.GetLeftPart(UriPartial.Authority) — i.e. whatever host:port IIS itself believes it is. Watch the Location header in the redirect response (curl -v, or DevTools Network tab):

• Fix-at-source: Location shows the real vanity hostname on 443. Clean.
• L4 relay: Location still shows the real vanity hostname — IIS never learns anything changed. Clean.
• L7 proxy (if Host isn't preserved) / ALB / CloudFront without Host rewrite: Location leaks victim.ttx.anthonyaws.com:11000 or another origin, kicking the client off the front door you scanned from.

Trigger the redirect → | Back to dashboard