Only the IP of the host server has to be known in HTTPS, the path and and other things are sent over an encrypted channel. However it&#x27;s unlikely you&#x27;re using Tor or DNSSEC, so the DNS lookup your browser does is also done over the clear, so the domain you&#x27;re accessing is also probably compromised.