I don't find it very surprising that you can see what domain someone's visiting; the system always needs to lookup the domain in a DNS query.