To be fair, the form which includes the credit card details does not appear to be sent by email to either of the dodgy looking email addresses, but is submitted to the site using Bellsouth Hosting's secure https thingamijig.

Not to be confused with the reputable Bestway Travel company.

I did a quick search on Google for Bestway Travel and there are several different companies with the same or similar names. The Amaroo bestway is clearly not a reputable company or they would have given addresses, trade organisation membership, and wouldn't be using hotmail and yahoo as their email addresses. I doubt there's anything sinister going on, just some premies trying to provide a service, but if anything goes wrong, it could be a mess. It would be interesting to see the travel insurance claim - "So who exactly did you buy your ticket from?".