I have come across something of a curious situation that a website ([Palestinian News Network](http://english.pnn.ps/)) has a valid TLS certificate ([see here](https://www.ssllabs.com/ssltest/analyze.html?d=english.pnn.ps&s=104.24.101.41)) but that the website *always* forces loading of the site via *`http://`*. 

*(This includes the main domains as well as the referenced sub domains.)*

So:
===

1) Is there any way that I as a client can establish if there is a MITM/attacker which is denying/redirecting HTTPS connection? (this cause is suggested by the "HTTPS Everywhere" plugin)

2) Assuming there is no MITM attacker, is there any way that I as a client can force the server to maintain the valid secured connection?

3) What are some methods as to how the server can enforce redirecting valid HTTPS connection? I've found this issue very hard to research as - expectedly - search results are nearly all about doing it the other way around ("how to `http` --> `https`" etc. etc.) .

Try the website address here, note I am going straight to the secured protocol: 

<https://english.pnn.ps> 

Thank you.