I have contacted my host provider and he told me the following:
“why would you allow a demo import from an external host? this is a security risk always upload a full template besides it fails because they are not very stict on their https, if they do not have that fixed then I would not trust anything else there too on top of that callback urls arent that save either”