I believe the entire .new TLD uses HSTS. In up-to-date browsers you will never make a request on port 80, even if you omit the protocol in the URL.

Probably Microsoft didn't get around to re-issuing the cert yet...