[icebraining]

In the request from the Signal app to Amazon's servers, they pretend that's the domain they want to contact, but inside the encrypted connection, they actually ask for a different domain (the latter of which they own).