You might want to update this response with The point that TLS 1.3 encrypts the SNI extension, and the biggest CDN is executing just that: website.cloudflare.com/encrypted-sni Needless to say a packet sniffer could just do a reverse-dns lookup for the IP addresses you are connecting to. This will modify in https://wesleyf359soi8.evawiki.com/user