You'll notice that the Mudcat Search engine results page has the prefix http://, while the main Mudcat page has the more secure https:// prefix. It costs money to get that https:// certification, and I'm supposing Max didn't feel it was worth the money to get the certification on all aspects of Mudcat. Mudcat is pretty safe, but not secure enough to exchange sensitive information like credit card numbers.