You might want to update this respond to with the fact that TLS one.3 encrypts the SNI extension, and the most significant CDN is performing just that: site.cloudflare.com/encrypted-sni Needless to say a packet sniffer could just do a reverse-dns lookup for that IP addresses you might be connecting to. Observe https://aristotlef272xof8.wssblogs.com/profile