There is a proxy in between, from your example: socks5h://relay.8333.space:8882 That transfers all the control to this proxy alone, they get to choose what and how they want to display 👀 If it is someone with malicious intent, they will do whatever they want.