How can I send a secret to a server, and validate it, without risking bruteforcing of the hash?

Question

I want to send a secret to a server, say the domain the current browser is visiting, but I don\'t want the server to know what the website address is, only if the server has