Yes, your ISP can see you used AnyProxy, and even which region: the server name such as sg.anyproxy.site travels unencrypted in the connection setup. It cannot see which sites you open inside it.
Full answer
Your ISP carries every packet, so it always knows you connected somewhere; the question is what it can read. We checked our own setup on 15 October 2026. The home page anyproxy.site sits behind Cloudflare and publishes an Encrypted Client Hello key in DNS, so a browser that supports ECH can hide even that name. The pages you browse, though, are served from regional servers named sg.anyproxy.site, fr.anyproxy.site and us.anyproxy.site. These have their own certificates and no ECH record, so their name appears in plain text in the TLS handshake (the SNI field), along with the server address. An ISP can therefore log that you used AnyProxy, which region you picked, when, and roughly how much data moved. What it cannot see is everything inside the encrypted connection: the sites you opened through the proxy, the pages, searches or videos. Your DNS lookups also reveal the proxy name unless you use encrypted DNS. In countries that filter by name, that is exactly how blocking works: OONI has documented Iranian ISPs resetting connections when a blocked name appears in the handshake. So a web proxy hides your destinations from the ISP, not the fact that you use a proxy.
In practice
We looked at our own servers the way an ISP would. anyproxy.site: Cloudflare, with an ECH key published in DNS. sg/fr/us.anyproxy.site, where proxied pages load: their own Let's Encrypt certificates and no ECH, so the region name is readable in every connection. The sites you open travel only inside the encrypted connection.
Sources: OONI - Iran censorship study (2025) · SNI - glossary · What a proxy hides - hop by hop
People also ask
See also
Related questions