I'm no expert but a page that starts with http:// instead of https:// would seem to be a problem to me. I don't know why they didn't just use paypal instead.