the website itself is ''https'' and has the padlock, and recently the domain also got verified by the Phantom wallet team which was awesome for a community based project.
pretty much why we feel comfortable telling others now, cause it can be verified since you can see the https and also Phantom wallet simple won't allow any connections unless you're domain was verified.