tismfmtp[.]com

This domain, tismfmtp.com, is currently active and returns HTTP 200 responses. The site resolves to IP 27.124.47.186, which is geolocated to Hong Kong and associated with Rackip Consultancy Pte. Ltd. The domain was registered on 15 June 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses the authoritative nameservers ns3.my-ndns.com and ns4.my-ndns.com. The TLS certificate presented is issued to "Telegram / *.local", a mismatch that suggests a deliberately crafted certificate to evade simple checks. The page title reported by the scanner is "Messenger", but no further content analysis is available. Gridinsoft assigns a trust score of 0/100, indicating a high likelihood of malicious intent. VirusTotal records 15 of 91 security vendors flagging the domain, and the domain appears on one public blocklist, where it is listed by PhishDestroy. The threat classification is credential phishing, targeting user credentials. Given the combination of a low trust score, mismatched certificate, multiple vendor detections, and blocklist inclusion, defenders should treat tismfmtp.com as hostile. Recommended actions include adding the domain to network deny lists, monitoring DNS queries for the domain, and employing URL filtering to block access. Further investigation of the site’s content and any associated payloads is advised to determine the full scope of the campaign.