A middlebox can't see the actual content but they know what sites you are visiting and how often if you are only using HTTPS - meaning they can also block you from accessing sites of their choosing