- work with host from headers (aka real proxy)
- inject an alert