Checks

HTTP URL scanned

The URL submitted to the scanner used HTTP.

Why it matters

The canonical site should be the HTTPS URL. Scanning HTTP means the checks ran against plaintext first.

What to do

Scan the HTTPS URL and redirect HTTP to it.

Reference

HTTPS availability and redirect behavior are baseline transport security controls.

OWASP Transport Layer Security Cheat Sheet