Paypal also uses redirect to their own domain ensuring you don't give your CC to just anyone. This is the biggest selling point to me.

Services asking for a credit card number directly on the site may or may not be using Sprite, or a similar legitimate service, and may or may not contain malicious code that captures your input regardless. I really have no way of knowing.