In reply to Daniel Garcia.

Hello Daniel, yes, https has been observed at least in two cases:
1) Small portion of the total communication with the word-based DGA domains is over https.
2) In some cases, scripts that are part of the "redirection chain" are served by CDNs, and that can happen over https as well.