You may want to update this remedy with the fact that TLS 1.3 encrypts the SNI extension, and the most important CDN is carrying out just that: site.cloudflare.com/encrypted-sni Obviously a packet sniffer could just do a reverse-dns lookup to the IP addresses you happen to be connecting to. @Pacerier: hacks https://englandf172umb6.corpfinwiki.com/user