Comment by vb-8448

> If the traceroute info in the post is to be trusted, in this particular case Linode and Hetzner themselves—or perhaps their datacenter operators—seem to be performing the intercept.

Ok, now I get it. Thanks.