I don’t think it’s common for any website that is not a spam landing page to have more than 1 websocket connection active at the same time. Let’s just say that

I don’t think it’s common for any website that is not a spam landing page to have more than 1 websocket connection active at the same time. Let’s just say that most of the websites that require resources from a bunch of domain names are already a good heuristic for ad-infested pages.