Access and login to the website.
Press F12 on your keyboard or right-click on the website to open dev-tool.
At Application tab, choose Cookies and there are some sensitive cookies without Secure flag.
https://docs.google.com/document/d/1YVviy1mBrbc8Z2PaSizfaoDrTkW0bPlg0nv3WF_hSVQ/
-you can see i use https but the secure is still false/uncheck-