How to not answer anything instead of 404 when browser hit the http port 80 without the expected hostname?

I think when I use 443, Istio is used to just hang or giving some other error when the browser url is the ip directly, so no hostname.

But when doing the same thing with port 80, it’s sending 404, and provide extra info I prefer not been public, like a header: server: istio-proxy. How can I tell Istio that when I don’t have a Virtual Service matching to not answer anything?