You may want to update this response with The truth that TLS one.3 encrypts the SNI extension, and the largest CDN is executing just that: web site.cloudflare.com/encrypted-sni Of course a packet sniffer could just do a reverse-dns lookup for that IP addresses you happen to be connecting to. Notice however https://devendrac959oeu9.wikimillions.com/user