Wordfence Free redirects to HTTP wp-admin login instead of scan results

I hope I’ve stopped it happening for now, but I assume I may have malware if this is happening?

From the WF dashboard, I was getting asked to re-sign in, but this time using a non-HTTPS wp-admin login page.