The site is pulling css and javascript over http instead of https - I've seen this too often to count, why aren't the webmasters fixing it? Are they using old browsers?
They don't seem to particularly give a shit considering friendly reporting of a XSS resulted in lawsuit threats