Make requests to example.com
but spoofing the TLS SNI as google.com
to bypass network security controls that only enforce based on SNI:
$ curl -sk https://google.com -H "Host: example.com" --resolve google.com:443:$(dig +short example.com)
$ (printf "GET / HTTP/1.1\r\nHost: example.com\r\n\r\n"; sleep 1) | openssl s_client -connect example.com:443 -servername google.com -state