You might want to update this respond to with The truth that TLS one.3 encrypts the SNI extension, and the biggest CDN is accomplishing just that: website.cloudflare.com/encrypted-sni Not surprisingly a packet sniffer could just do a reverse-dns lookup to the IP addresses you are connecting to. This will adjust in https://billq516evk0.yourkwikimage.com/user