Just for an info, I have written a mitming proxy that takes care of those (cname cloaking) and a lot of other things, including fingerprinting, supercookies etc., with support for various blocklist (domain to adblock), js injection where the injected scripts are handled in same manner as blocklist (you can stockpile them and make rules), changing validity of cookies (to session cookies for instance), saves your data trough highly effective caching and even helps spying cdns save some bandwidth as they are mostly no longer visited. And yes, works as transparent proxy too (for router enforced usage). Imagine fully armored firefox for whole network, regardless of browser, freebsd,linux,windows,arm8. Working on cross platform gui, release soon.

So I might know a thing or two. ;)