Comment by Chrisoaks

That’s not true either, as they won’t possess https certificates for whatever the domain is and your browser would flag/block you from continuing.