3 ms·

They POST forms unencrypted. And either they don't have an HTTPS version of the site, or it's broken.