Consider your card details exposed even if the website hasn't charged you yet.
Steps
Temporarily block your card in the app if the service is available, and contact your bank immediately, informing them that your card details were entered on a suspicious website.
The bank will determine whether the card needs to be permanently blocked and a replacement issued.
Review your recent transactions and alerts, and if you see a charge that wasn't yours, file a formal complaint.
Changing your PIN alone isn't enough if your card number, expiration date, and CVV have been compromised.