gas97[.]com

gas97.com has been flagged by PhishDestroy as an active gas-pump skimmer scam site. Threat analysts confirmed a HIGH risk of financial credential harvesting with an under-investigation status. The domain lures victims searching for fuel discounts or payment cards and immediately harvests entered payment details for immediate fraudulent use. This is not a generic phishing lure, but a highly targeted fake checkout page designed to steal real credit-card data at the point of sale.

This domain was flagged with absolute threat indicators: VirusTotal shows 1/95 detections at present (scanners have not yet blacklisted it), the domain was registered through NAMECHEAP INC on 2026-03-10, resolving to IP 188.114.97.3 under a Let's Encrypt SSL certificate. No current listings on Google Safe Browsing, PhishTank, OpenPhish, or spamhaus DBL were observed, placing users at maximum risk until blocklists catch up. The young domain age (registered March 10, 2026) combined with zero detections indicates a brand-new scam site likely operating within hours of creation. Trust scores from WOT or Cisco Talos are absent, confirming no reputation to counterbalance the threat.

Users must immediately block gas97.com via browser, router, or firewall blacklists. If any payment card data was entered, cancel that card at once and report the fraud to the issuing bank to freeze further transactions. Avoid any links from social media, ads, or search results referencing fuel discounts or gas cards. Forward suspicious messages to the FTC at reportfraud.ftc.gov and include the domain for takedown requests. Monitor bank statements daily for 90 days post-interaction to catch fraudulent charges early. Businesses can proactively block the IP 188.114.97.3 and domain gas97.com at DNS/edge to protect customers.