Could try https first, then.

While it's possible to serve completely different pages and sites on https vs http, it's rare in practice, and would be reasonable to penalize.