tm2022[.]com

This domain, tm2022.com, is assessed as a high-risk generic phishing threat, currently active and flagged by multiple security sources. The domain was created on December 2, 2025, and registered through West263 International Limited, a Hong Kong-based registrar. It resolves to IP address 104.143.32.192, hosted on AS140227 (Hong Kong Communications International Co., Limited), with IP location in Hong Kong. The domain uses nameservers ns1.363.hk, ns1.myhostadmin.net, ns2.363.hk, and ns2.myhostadmin.net. No SSL certificate was detected, and the HTTP status returned is 403, indicating the server is configured to block direct access or is not serving standard content. The page title, as observed, is 'TMGM官网丨国际知名经纪商丨TMGM外汇交易首选平台入口', which references TMGM, a known forex and CFD broker brand. The scam type is classified as 'Fake Exchange', suggesting the domain is impersonating a legitimate trading platform to deceive users into providing credentials or financial information. The domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports 3 of 91 security vendors flagging this domain as malicious. AlienVault OTX indicates the domain is included in one threat intelligence pulse. The Gridinsoft trust score is 0 out of 100, reflecting a complete lack of trustworthiness. Defenders should treat this domain as actively hostile, block all traffic to and from it at the network level, and add it to blocklists for email and web filtering. Users who may have interacted with the domain should be alerted to potential credential theft or financial fraud, and any credentials entered should be considered compromised. The exact content of the landing page has not been fully analysed, but the title and scam classification strongly indicate a phishing site targeting TMGM customers. No further details about the hosting infrastructure or threat actor attribution are currently available.