I am trying to identify sources of unattributable, "direct" traffic to my website. One source is http links from https websites - e.g. Google search results - because the referrer is stripped when going from https to http. With that in mind, I went to Google Search Console to make sure http versions of my pages are not being indexed and I was surprised to see that the non-https version of the homepage receives an equal number of impressions and significantly more clicks than the https version, according to Google Search Console.
This website has never been http only and I'm fairly certain http has always been redirected to https.
If I click the magnifying glass next to the http version to "inspect" the page, it says it is not indexed and the https version is the canonical version.
If I do a Google search for
site:mysite.com inurl:http or
site:mysite.com -inurl:https I get no results.
Why is the http version of my homepage receiving more Google search traffic than the https version?