You might want to update this answer with The point that TLS 1.3 encrypts the SNI extension, and the most significant CDN is undertaking just that: web site.cloudflare.com/encrypted-sni Obviously a packet sniffer could just do a reverse-dns lookup for the IP addresses you might be connecting to. You should utilize https://miker947waz5.mycoolwiki.com/user