Exploiting popular CDNs: A trap we didn’t see coming