Web protection of the free version of the antivirus, does not scan the protected protocols? We see the detection already in the browser cache.
Phishing. The fake page opens, although in the antivirus log, there is a warning about the lock.