Combines MITM interception with domain fronting through Xray and self-signed certificates, showing network researchers how unencrypted traffic can be captured and forwarded covertly.