Probe a URL with a forged Origin to catch reflected-origin + credentials misconfigs.
We send a request with a forged Origin header and inspect the CORS response headers.