The site DOES have an SSL cert (https://bankdata.io). It doesn't force you over to https until you're on a page that actually requires it (signup, login, the API).