You may want to update this answer with The reality that TLS one.3 encrypts the SNI extension, and the most significant CDN is executing just that: weblog.cloudflare.com/encrypted-sni Obviously a packet sniffer could just do a reverse-dns lookup to the IP addresses you happen to be connecting to. You can use https://shintaroy489xwu2.wikikarts.com/user