tmgmmarketsinc[.]com

This domain, tmgmmarketsinc.com, was registered on June 15, 2026, through GoDaddy.com, LLC and is currently flagged as an active credential phishing site targeting users of the TMGM trading platform. Infrastructure analysis reveals the domain resolves to 188.114.97.3, a Cloudflare-hosted IP located in Canada, and uses Cloudflare nameservers (kenneth.ns.cloudflare.com and mona.ns.cloudflare.com). The site presents an HTTP 525 error (SSL handshake failed), which may indicate either misconfigured phishing infrastructure or an attempt to evade automated detection systems. The domain appears on three security blocklists and has been identified in two AlienVault OTX threat intelligence pulses, confirming its classification as malicious. While the page title ('tmgmmarketsinc.com | 525: SSL handshake failed') suggests an impersonation of TMGM, the exact content and functionality of the site remain unanalyzed due to the SSL handshake failure. The SSL certificate is issued by Google Trust Services (WE1), a common choice for both legitimate and malicious sites. Defenders should treat this domain as high-risk credential phishing infrastructure. The domain is blocked by multiple security vendors, including PhishDestroy, MetaMask, and SEAL. Network-level blocking of 188.114.97.3 and the domain itself is recommended until further analysis confirms takedown or remediation. No antivirus detections were reported by the 91 vendors that scanned the domain, though this absence does not indicate safety. Monitoring for changes in SSL status or error resolution may provide additional indicators of compromise.