http://cardhk7pwtfkqdlrh5uml46e3djr5xselzrp2ie25p6sdup6gjzqtbyd.onion/index9548.html
Usually they get credit card number, expire date and CVV. Back in the days that was enough to use cards online and today you still can target insecure payment gateways to perform purchases only with this information, but actually in major cases you will need more information about the card owner as full name, city, state, country, address, zip, phone, email, date of birth.