Interesting that they left their email services opened, with a SSL certificate that includes their hostname, but not their HTTP services. I wonder if they were attempting to prevent this leakage (by only allowing RP connections from ddosguard on their webserver or something), but were foolish enough to have these services on the domain domain.