I think they reply with their own HTTP server IP, which then redirects you to the "correct" address.
I assume it breaks if you type a wrong https:// address, but I guess few people do that, they just type the domain and let the site redirect to https:// if needed.