HTTPS Everywhere site with some CloudFlare security header insecurity.

See: https://www.eff.org/https-everywhere/atlas/domains/random.org.html
See: http://toolbar.netcraft.com/site_report?url=https://www.random.org
See: https://observatory.mozilla.org/analyze.html?host=www.random.org F - F- C- status.
What has been acquired at some time should be retired: -https://www.random.org/
Detected libraries:
jquery - 1.11.0 : (active1) https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
Info: Severity: medium
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
(active) - the library was also found to be active by running code
1 vulnerable library detected → http://www.domxssscanner.com/scan?url=https%3A%2F%2Fajax.googleapis.com%2Fajax%2Flibs%2Fjquery%2F1.11.0%2Fjquery.min.js+

decodeing level javascript unpacker error:

ound JavaScript
     error: line:3: SyntaxError: missing ) in parenthetical:
          error: line:3: e&&e.documentElement?(l=e,m=e.documentElement,n=!f(e),g&&g!==g.top&&(g.addEventListener?g.addEventListener("unload",function(){k()},!1):g.attachEvent&&g.attachEvent("onunload",function(){k()})),c.attributes=gb(function(a){return a.className="i",!a.get
          error: line:3: ......................................................................^


some missing type conversions detected.

Only cache-control header properly implemented, strict-transport-security has warnings, __cfduid only with http only attribute set,

Crypto-report shows certificate installed correctly: https://cryptoreport.websecurity.symantec.com/checker/

Facebook social plug-in detected → http://www.domxssscanner.com/scan?url=https%3A%2F%2Fwww.random.org%2Fbanned-hosts%2F detected error

[decodingLevel=0] found JavaScript
     error: undefined variable _gat
     error: undefined function _gat._getTracker
     info: [script] wXw.google-analytics.com/ga.js
     info: [decodingLevel=1] found JavaScript

var pageTracker should be outside of try-catch block or if/else statement. Check whether it is loaded.

polonus (volunteer website security analyst and website error-hunter)