You may want to update this reply with The reality that TLS one.3 encrypts the SNI extension, and the greatest CDN is carrying out just that: blog.cloudflare.com/encrypted-sni Certainly a packet sniffer could just do a reverse-dns lookup to the IP addresses you're connecting to. This might adjust in potential with https://colettes404yqf8.blogoxo.com/profile