You may want to update this reply with The point that TLS one.three encrypts the SNI extension, and the largest CDN is executing just that: blog.cloudflare.com/encrypted-sni Needless to say a packet sniffer could just do a reverse-dns lookup for that IP addresses you might be connecting to. Take note having https://fionaz011aul5.wannawiki.com/user