SSLLabs.com’s SSL Server Test, run on www.refheap.com,
states that:
This server is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable.
The linked blog post seems to state that this issue can be fixed by updating
one’s OpenSSL version.