You're requesting people to put their credit card info without having HTTPS enforced by default? Doesn't sound suspicious at all.
What year is this? How is this still a thing?
What year is this? How is this still a thing?
Also, if you look at the source, you'll see that the form doesn't actually post anywhere. It's a joke demo.