There is a big increase in clients with denied connection since June 13:
The mayority of them are using domain fronting: