thanks for the update, everyone must make double , triple sure on any site where money/currency is involved that it is secure, have valid certificate, and make sure there is https and not only http in the url.

thanks for the post