The scam IS seeing the https: address and one believes its 'secure'. Lol
I learned this some time ago and for one will never use again.
BTW: This was brought to my attention by x individual at the highest sec. levels for the largest US ins. company, financial division.
You're on your own.... Pal🏦