teachenglishonline.org
Classification: Malicious
teachenglishonline.org is a malicious hostname. Linked to Darkgate malware. 14 sightings from ThreatFox Abuse.ch and URLhaus Abuse.ch, last seen 2025-04-15.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 08:33:35.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: DARKGATE (S1111)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DarkGate | ThreatFox Abuse.ch | 2025-04-13 06:22:22 | 2025-04-15 06:28:15 | malicious-activity | S1111 DarkGate |
| Malware Download | URLhaus Abuse.ch | 2023-10-05 15:18:04 | 2023-10-06 07:18:06 | malicious-activity |
Tags
darkgate pikabot meh mehcrypterIP addresses resolved by this hostname
- 13.248.213.45 (2024-01-13 08:07:11)
- 76.223.67.189 (2024-01-13 08:07:11)
- 198.57.247.173 (2023-12-07 12:24:33)
- 192.254.232.197 (2023-11-11 02:36:31)
- 2606:4700:3030::ac43:95cd (2026-10-16 00:38:35)
- 2606:4700:3034::6815:1dd0 (2026-10-16 00:38:35)
- 172.64.80.1 (2026-10-17 04:34:55)
- 172.67.149.205 (2026-10-18 08:33:35)
- 104.21.29.208 (2026-10-18 08:33:35)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 08:33:35)
Whois information
- AS name
- AS46606 Unified Layer
- Domain
- teachenglishonline.org
- TLD
- org
- DNSSEC
- ['unsigned']
- Nameservers
- a.ns36.de, b.ns36.de, lauryn.ns.cloudflare.com, leland.ns.cloudflare.com
- Registrant
- Cloudflare, Inc.
- Address
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- State
- CT
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected]
- Domain created
- 2025-05-07 17:17:50
- Domain expires
- 2027-05-07 17:17:50
- First indexed
- 2023-10-05 15:18:04
- Last updated
- 2026-10-18 08:33:35