pc[.]ttmgm[.]com

The domain pc.ttmgm.com was observed hosting a site with the page title “TMGM”. The site was registered on 21 April 2026 through Name SRS AB and uses Cloudflare’s DNS service (alfred.ns.cloudflare.com, kristin.ns.cloudflare.com). The SSL certificate is issued by Let’s Encrypt (E8) and the server presents HTTP/3 support, indicating a modern web stack. Front‑end fingerprints show the use of Ant Design, Vue.js, and Cloudflare Browser Insights, which are common in automated phishing kits.

VirusTotal scans recorded two detections out of ninety‑four security vendors, confirming that at least a small subset of scanners flagged the domain as malicious. The domain is listed on a single public phishing blocklist and has been actively blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Network resolution points to the Cloudflare edge address 172.67.213.14, located in Canada, which provides no direct attribution to the operator but confirms the use of a globally distributed CDN.

The site’s current status is offline, limiting real‑time analysis, but historical evidence indicates a generic phishing campaign targeting users of the TMGM brand. Defenders should add pc.ttmgm.com to URL filtering rules, monitor for similar domains that share the same nameserver pair or TLS fingerprint, and consider tightening outbound traffic controls to Cloudflare edge nodes that resolve to the same IP range. Continuous review of emerging detections on VirusTotal and blocklist feeds is recommended to capture any re‑activation attempts.