Interesting.

I wonder how this is configured in nginx.

Edit: http://www.cyberciti.biz/faq/unix-linux-appleosx-bsd-nginx-b...

On a different note, I think it's rather odd they find the time to block user agents but do not have HSTS set.