travisscottmerchhh[.]com

This domain, travisscottmerchhh.com, is flagged as a phishing site designed to impersonate an official merchandise platform. Analysis indicates the site was engineered to harvest user credentials, payment details, and personal information under the guise of selling branded merchandise. The infrastructure exhibits characteristics typical of fraudulent e-commerce operations, including the use of WordPress and Nginx, which are frequently leveraged in phishing campaigns for their ease of deployment and scalability. Evidence supporting this assessment includes detection by 3 out of 95 security vendors on VirusTotal, registration through NiceNIC International Group Co., Limited, and a creation date of February 21, 2026—an anomalous timestamp likely manipulated to evade age-based detection mechanisms. The domain appears on one security blocklist and resolves to the IP address 35.215.95.50, which has been associated with prior malicious activity. Technologies detected, such as jQuery Migrate and Slider Revolution, further suggest an attempt to mimic legitimate e-commerce platforms while concealing malicious functionality. Users who visited travisscottmerchhh.com or interacted with its content should immediately revoke any entered credentials, particularly for financial or email accounts. Monitor linked payment methods for unauthorized transactions and consider implementing a credit freeze if sensitive data was submitted. Network administrators are advised to block the domain and its associated IP (35.215.95.50) at the perimeter, while endpoint protection systems should be updated to flag any residual artifacts. Given the domain's current offline status, continued vigilance is warranted, as threat actors may re-deploy the infrastructure under a new domain or IP address.