Recently I realized I wasn't browsing your site via HTTP and noticed your site does not have redirects setup so when individuals come to this site it allows them to via HTTP but redirects them to HTTPS. Not sure your backend is but you can do this on your load balancer / firewall or if your using the cloud like Azure App services you can set it up directly on the App Service which is basically IIS. Or do the same thing in Apache.