teach[.]laitiaozhan[.]com

Analysis of teach.laitiaozhan.com indicates that the domain was created on 21 January 2026 and is currently taken offline. DNS resolution points to the IPv4 address 50.3.173.141, which is advertised as belonging to AS62904 operated by Eonix Corporation in the United States. The domain is delegated to Cloudflare name servers jasper.ns.cloudflare.com and simone.ns.cloudflare.com, and no TLS certificate was observed, meaning HTTPS connections are not available. Registration was performed through Metaregistrar BV, a registrar known for low‑cost bulk registrations.

The Gridinsoft trust scoring system assigns a score of 0 out of 100, reflecting a high‑confidence malicious classification. Ten of ninety‑one security engines on VirusTotal flagged the domain, and it appears on at least one public blocklist used by PhishDestroy, confirming external detection of malicious activity. No Safe Browsing, Open Threat Exchange, or page‑title information was provided, so the specific lure or target brand cannot be confirmed at this time.

Defensive recommendations include adding 50.3.173.141 to network deny lists, enforcing DNS filtering for the domain and its parent zone, and ensuring that endpoint web filters block any HTTP requests to teach.laitiaozhan.com. Organizations should monitor Cloudflare name‑server queries for similar subdomains, and consider expanding threat‑intel feeds to include the registrar Metaregistrar BV and the AS62904 range. Because the site currently returns no HTTP response, any future re‑activation will likely present a credential‑harvesting page, so proactive blocking is advised.