I'd feel more comfortable with a Stripe branded off-site transaction if that's the case. Get that credit card field off of the seedy untrusted site.