Trying to run defender and it will not work

When I am trying to open the Defender page in WP Dashboard it reloads for a while.
Also found that WordPress URL and Site URL are set to HTTP: instead of HTTPS. My client can't change it without contacting the hosting provider.