Had a quick squizz at the url at the end. Cloudflare and Google hosting. I thought they'd be smarter than that.
Fucked up HSTS header too.