Overall the web-site technically looks great, however the login form is using $_GET method. This should not be used there, since sensitive data is now posted into the URL.
Lol. It's a scam so why even bother about the security of the website? Why do you even care about it?
