tmgm-cn-broker[.]com

This domain, tmgm-cn-broker.com, is flagged as a high-risk brand impersonation phishing site. It was registered on May 11, 2026, via Realtime Register B.V. and resolves to IP 52.37.165.222, hosted on Amazon Web Services (AS16509) in the United States. The page title explicitly references the TMGM brand, a known forex and trading platform, claiming to offer a Chinese-language guide for login, registration, MT4/MT5 download, account types, and deposit/withdrawal instructions. This indicates the site attempts to impersonate TMGM to harvest credentials or financial information from users. The domain is active, returns HTTP 200 status, and uses a Let's Encrypt SSL certificate (E8). Security vendor analysis shows 2 out of 91 engines on VirusTotal flag it as malicious, and it appears on three security blocklists. AlienVault OTX includes it in one threat intelligence pulse. The Gridinsoft trust score is 0/100. The domain is blocked by PhishDestroy, MetaMask, and SEAL. Nameservers are hosted on Orderbox DNS infrastructure. Defenders should block this domain at the network and email gateway levels, flag any traffic to it, and warn users against visiting the site or entering credentials. The exact page content beyond the title has not been confirmed through direct analysis, but the combination of brand impersonation, low trust score, and detection by multiple security sources confirms it as a phishing threat. Monitoring for subdomains or related infrastructure under the same registrant is recommended.