You might want to update this reply with the fact that TLS 1.three encrypts the SNI extension, and the largest CDN is carrying out just that: web site.cloudflare.com/encrypted-sni Naturally a packet sniffer could just do a reverse-dns lookup with the IP addresses you're connecting to. You should utilize OpenDNS with https://paulm824gjf7.iamthewiki.com/user