I used amass and enumerated some http subdomains. I then used EyeWitness to take screenshots of the links I had generated.
I found an interesting subdomain but when I tried to access it on both firefox and chrome the page was not loaded as it automatically redirects to using the https protocol.
Running an nmap scan showed that the https port was closed but the http port was open. Even if the web server automatically forwarded http requests to https, how was EyeWitness able to take a screenshot?
Is there a way to load the http page? Thanks.