http://k3oxb4lrs7l3vt2lhy3w5ilrrqzeltdxjyne3t7sctmnyu3ypwpuszid.onion/sni-bug.html
If the server at the IP address pointed to by the SNI is willing to forward the client's traffic to a second server, then the first server is called an "SNI bug host." Effectively the customer has gained free access to the entire web due to the SNI bug. SNI bug hosts are often SSL/TLS sites proxied by a CDN. If the ISP checks only the SNI, and does not check the SNI against the IP address of the server, you can use the related technique of "SNI spoofing."