Even without the CP. Three decades ago, on the campus network when I was studying for my undergraduate degree, I fired up etherman (or something like it, it's been a loooong time). It helpfully parsed out the HTTP URLs for me, and I clicked on a few out of curiousity.

I turned that sniffer off soon after, and never ever looked again. Even the (likely) legal things people were looking for were hard to unsee.