[eli]

Wouldn't it be fairly trivial to guess most of the domains you're visiting by looking at what IP addresses you connect to?

[philip1209]

Yes. To be fair though, many sites are on shared hosts, and lots of traffic goes through a handful of CDN networks.

I think that the SNI note below is probably the bigger hole.

[staticsafe]

You can guess some of it trivially, cloud services such as AWS are popular and mask the ORG using the IP addresses.

Example: any traffic to 17.0.0.0/8 = user probably has an Apple device