NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Let me be clear and say that my knowledge is limited, no one knows everything about computers. I am fairly new, I have only been programming since the 1980's. Yes, I did look and yes, I see that...
If I recall the RFC correctly, I think the domain name might be unobscured (because it’s converted to an IP at that point), but the trailing part of the url is definitely encrypted. You might be able to block based on domain or IP, but not the whole URL.
There is further discussion here:
https://security.stackexchange.com/questions/7705/does-ssl-tls-https-hide-the-urls-being-accessed