Phishing attack from "tmonline.com.my"? Or Paranoid Dzof?

Dear dzof123,

Welcome to TM Online the smarter way to manage your telephone bills anytime, anywhere.

To activate the service log on to http://www.tmonline.com.my for TM Bill with the User ID and Temporary Password provided below:

USERID: dzof123
PASSWORD: *********

For security reason you will be required to change your temporary password immediately.

TM Online your one stop management of your telephone accounts.


Thank you,
TM Online

• It came completely out of the blue. I didn't ask for it, they didn't ask me for it, they just gave me a username and password straight away. And they give my username as dzof123, a name I would have never chosen on my own.
• The domain is tmonline.com.my instead of something like http://www.tm.net.my/ or https://tmbill.tm.net.my/SelfCare/Maintenance/selfcareLogin.jsp (which is where you really go to change your passwords and, oh yes, PAY TMNet BILLS ONLINE)
• When you do go to tmonline.com.my and look at the website, it looks... well, it just looks darned suspicious. Hard to explain it. There's no link to tm.com.my for example. And none of the usual terms and conditions and disclaimers. Also, no contact address/phone number. But more than that, it just looks... wrong.
• When you click on FAQ or Online Demo, it tries to surreptitiously forward you on to pagead2.googlesyndication.com and eview.connectme.tv.
• However, when you try to register and fail to give a valid account number, you get the message "No match was found for your account number. Kindly drop an email to tmonline@tm.com.my for personalised assistance" - which looks like a completely valid response. Could you spoof it? Interestingly, a search of both tm.net.my and tm.com.my shows NO contact email address. It's either by using forms or phoning in.