You might want to update this answer with The truth that TLS 1.3 encrypts the SNI extension, and the most significant CDN is performing just that: site.cloudflare.com/encrypted-sni Of course a packet sniffer could just do a reverse-dns lookup for your IP addresses you're connecting to. Note having said that (as https://tommyg727ywu9.activosblog.com/profile