# imath.kiev.ua — Recorded security evidence | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/imath.kiev.ua/ Machine-readable companion: https://phishdestroy.io/domain/imath.kiev.ua/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-09-19 22:02:12 UTC - Selected availability observation: 2026-11-05T00:08:26Z - Stored record updated: 2026-11-05 15:22:35 UTC - VirusTotal detections in the stored snapshot: 4/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 194.44.31.54 - Registrar in stored WHOIS data: ТЗОВ «Бізнес і Технології» - Last stored HTTP status: 302 (observed: 2026-11-05T00:08:26Z) - Registration date (registry RDAP, kiev.ua): 1992-12-01 22:00:00 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0bbb0-87cb-7301-a83f-ef2cc46ef655/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/imath.kiev.ua - Certificate Transparency search: https://crt.sh/?q=%25.imath.kiev.ua - Web Archive lookup: https://web.archive.org/web/*/https://imath.kiev.ua/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy stores a record for imath.kiev.ua. Source observations are dated separately; missing checks do not establish safety. PhishDestroy stores a record for imath.kiev.ua. Source observations are dated separately; missing checks do not establish safety. A reviewed analysis is not available for this text revision. Consult the dated source records below. Package revision: 3036b1738bbb5d56d51c751ac9fcac672b6fcb5e283d5e5992f2f9527c07ea28 Source facts (timestamps as stored): {"record_id":1166861,"first_recorded_at":"2026-09-20 00:02:12","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":4,"denominator":92,"malicious":4,"suspicious":0,"vendors":{"DNS8":"phishing","VIPRE":"phishing","SOCRadar":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-20T14:03:16Z","checked_at":null,"fetched_at":"2026-10-22T03:22:33Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":3,"denominator":92,"malicious":null,"suspicious":null,"vendors":["DNS8","Forcepoint ThreatSeeker","SOCRadar"],"observed_at":null,"checked_at":"2026-11-05 04:06:17","fetched_at":"2026-11-05 03:06:18","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"phishing","VIPRE":"phishing","SOCRadar":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["DNS8","VIPRE","SOCRadar","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":56,"malicious":4,"suspicious":0,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-03 18:00:21"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-20 04:30:12"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1166861,"scope":"checked_url","observed_at":"2026-11-05T00:08:26Z","http_status":302,"http_observed_at":"2026-11-05T00:08:26Z","stored_http_code":302,"stored_http_observed_at":"2026-11-05T00:08:26Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":"2026-11-05T00:08:26Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - Stored capture: https://i.ibb.co/spJPb72q/9af7ac78e015.png - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/01a0bbb0-87cb-7301-a83f-ef2cc46ef655.png Captured: 2026-09-19 22:01:56 UTC Source report: https://urlscan.io/result/01a0bbb0-87cb-7301-a83f-ef2cc46ef655/ - URLQuery: https://screenshots.phishdestroy.io/uq/73dac7bf-84e0-4ee3-8fc2-41748395e30e.png Captured: 2026-10-25 12:46:13 UTC Source report: https://urlquery.net/report/73dac7bf-84e0-4ee3-8fc2-41748395e30e SHA-256: 9e81ce55bb4718e447f63244775a01f987110f2f64796df6a457ad671a29ba9d - URLScan · 2026-04-04: https://screenshots.phishdestroy.io/us/019d58eb-7ed1-741a-9993-cdd5dac4331b.png Captured: 2026-04-04 14:35:34 UTC Source report: https://urlscan.io/result/019d58eb-7ed1-741a-9993-cdd5dac4331b/ SHA-256: 6530436ba1de6a0bae335fa28cc39e4cd57476c03c962b0adbb7c8caed35dacf - URLScan · 2026-04-22: https://screenshots.phishdestroy.io/us/019db665-5c9b-725b-a080-9d87abdc073c.png Captured: 2026-04-22 18:13:17 UTC Source report: https://urlscan.io/result/019db665-5c9b-725b-a080-9d87abdc073c/ SHA-256: 586cb8888c5b7171a71c9cb03948eb2a7a266ce7927ae06be58444d9e698a99c - URLScan · 2026-06-21 → erneuern.spk-tan.top: https://screenshots.phishdestroy.io/us/019eea7b-8b4f-70e8-bcd6-fd40abfd1849.png Captured: 2026-06-21 14:01:00 UTC Source report: https://urlscan.io/result/019eea7b-8b4f-70e8-bcd6-fd40abfd1849/ SHA-256: 2abb72a22ddff882a75300c230bec97233c853cbb32a23d87546567541f669f2 - URLScan · 2026-06-21 → erneuern.spk-tan.top: https://screenshots.phishdestroy.io/us/019eea97-327b-76f9-a2ab-1fba44b08fb1.png Captured: 2026-06-21 14:31:13 UTC Source report: https://urlscan.io/result/019eea97-327b-76f9-a2ab-1fba44b08fb1/ SHA-256: f8f1b6e11f21d6aa0b37177536a1997214a1f1abf5e0fea9cba01945d9b48ee9 - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0bbac-5958-75ab-9bce-80c12b7673e0.png Captured: 2026-09-19 21:57:19 UTC Source report: https://urlscan.io/result/01a0bbac-5958-75ab-9bce-80c12b7673e0/ SHA-256: fb7e143fdb6b288d72a52459873dd522cafa39fa5a2c84f0278887d979665165 - URLScan · 2026-09-19: https://screenshots.phishdestroy.io/us/01a0bbae-1943-743a-b0a9-52e30ced9633.png Captured: 2026-09-19 21:59:11 UTC Source report: https://urlscan.io/result/01a0bbae-1943-743a-b0a9-52e30ced9633/ SHA-256: 959973f32c5927b0736e0000e2195a7cb8ff0913b2be3c001be2c930fb068eb7 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/06b6ae89-2a6a-4b61-8be8-e4101c754caf.png Captured: 2026-09-19 22:35:40 UTC Source report: https://radar.cloudflare.com/scan/06b6ae89-2a6a-4b61-8be8-e4101c754caf SHA-256: 91158f0de2f5cff07cbb50765e5186613e54fa5066f54cb0f6351ccab5fb96df ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T22:24:23Z", "uuid": "01a0bbb0-87cb-7301-a83f-ef2cc46ef655", "scanned_at": "2026-09-19T22:01:56Z", "final_url": "https://www.imath.kiev.ua/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://www.imath.kiev.ua/", "from": "http://www.imath.kiev.ua/", "status": 307 } ], "ip": "194.44.31.54", "ptr": "hydra.imath.kiev.ua", "domains": [ "imath.kiev.ua", "cdnjs.cloudflare.com", "ajax.googleapis.com", "ssl.google-analytics.com" ], "ips": [ "142.250.183.40", "104.17.24.14", "142.250.207.10", "194.44.31.54" ], "asns": [ "15169", "13335", "3255" ], "countries": [ "US", "UA" ], "link_domains": [ "imath.kiev.ua", "sites.google.com", "events.imath.kiev.ua", "bbb.imath.kiev.ua", "profcom.imath.kiev.ua", "kau.org.ua", "courses.imath.kiev.ua", "www.facebook.com", "www.youtube.com" ], "social": [ "https://www.facebook.com/groups/imath.kiev.ua", "https://www.youtube.com/@instituteofmathematics6005" ], "doc_hash": "f412ae90558c3bc932467a35c20837f8f08302450800cd2337b6ca1db26b713b", "script_hashes": [ "9b6e7f2cc56f22229cde2c8b3309c7c8e08a7195c34a8b6e2ba516f1cda56b8c", "f2202c21bcbfd72537b8a2d7c3cfa4fcd65c809af06a0a20b839d0005fcb5881" ], "globals": [ "$", "jQuery", "tinymce", "tinyMCE", "MathJax", "startList", "_gaq", "_gat", "gaGlobal" ], "cookies": [ "imath_session", "__utma", "__utmc", "__utmz", "__utmt", "__utmb" ], "storage_keys": [ "__storage_test__" ], "tls": { "san": [ "imath.kiev.ua", "www.imath.kiev.ua" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "imath.kiev.ua", "protocol": "TLS 1.3", "valid_to": "2026-12-09T19:33:41Z", "valid_from": "2026-09-10T19:33:42Z" }, "domain_age_days": 3406, "apex_age_days": 3406, "tls_age_days": 9, "tls_valid_days": 89, "requests": 33, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -50, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache/2.4.37 (Rocky Linux) OpenSSL/1.1.1k", "content-type": "text/html; charset=windows-1251", "x-powered-by": "PHP/7.4.33" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T22:31:59Z", "uuid": "06b6ae89-2a6a-4b61-8be8-e4101c754caf", "scanned_at": "2026-09-19T22:35:40Z", "final_url": "https://imath.kiev.ua/", "status": 200, "history": [ { "url": "https://imath.kiev.ua/", "status": 200 } ], "dom_hash": "b621169971232e11f1054f7f0e8219ef39c7e80dec63212458585c07e62a0cc4", "doc_hash": "7958025235c2e1e728a176999194196a801022e6e80b91e649af0ffe9c2d4569", "domain_risks": [ "Compromised Domain", "Security threats", "Educational Institutions", "Education", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "imath.kiev.ua", "type": "A", "value": "194.44.31.54" } ], "dnssec_valid": false, "ip": "194.44.31.54", "whois": { "registrar": "ua.bit", "created": "1997-12-16T22:00:00Z", "updated": "2026-07-30T21:01:05Z", "expires": "2027-06-30T21:00:00Z", "nameservers": [ "asterix.niisp.gov.ua", "ns1.imath.kiev.ua", "ns.imath.kiev.ua", "ns.secondary.net.ua" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T03:22:33Z", "analysis_at": "2026-10-20T14:03:16Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 4, "suspicious": 0, "undetected": 32 }, "detections": { "DNS8": "phishing", "VIPRE": "phishing", "SOCRadar": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": -1, "votes": { "malicious": 1 }, "categories": { "Google": "education", "Forcepoint ThreatSeeker": "reference materials" }, "popularity": { "Alexa": 410446, "Statvoo": 410446, "Cisco Umbrella": 627253 }, "registrar": "ua.bit", "expires": "2027-07-01T21:00:00Z", "dns": [ { "ttl": 21600, "type": "A", "value": "194.44.31.54" }, { "ttl": 21600, "type": "MX", "value": "zen.imath.kiev.ua", "priority": 4 }, { "ttl": 21600, "type": "TXT", "value": "spf2.0/pra ?all" }, { "ttl": 21600, "type": "NS", "value": "ns.secondary.net.ua" }, { "ttl": 21600, "type": "CAA", "value": "letsencrypt.org" }, { "ttl": 21600, "type": "SOA", "rname": "hostmaster.imath.kiev.ua", "value": "ns.imath.kiev.ua" }, { "ttl": 21600, "type": "MX", "value": "twinhead.imath.kiev.ua", "priority": 4 }, { "ttl": 21600, "type": "NS", "value": "ns.imath.kiev.ua" }, { "ttl": 21600, "type": "NS", "value": "ns1.imath.kiev.ua" }, { "ttl": 21600, "type": "TXT", "value": "gridinsoft-verify=vy1k7w0osbm7eqsieu47rc1ezv5e8l15hmntzj72xzlngmrmdxc6dxi29q2mrx9e" }, { "ttl": 21600, "type": "TXT", "value": "v=spf1 ip4:192.168.1.0/24 ip4:194.44.31.54 ip4:194.44.31.57 ip4:194.44.31.58 ip4:194.44.10.121 -all" }, { "ttl": 21600, "type": "TXT", "value": "google-site-verification=X_NQ9sBNA3HCANCwNvjqx0pY-NAqGvtO9laEadc9wqc" } ], "dns_at": "2026-10-20T14:03:55Z", "jarm": "07d14d16d21d21d00042d43d000000c9fb8328b8be888cb3e54ed04c707798", "cert": { "san": [ "imath.kiev.ua", "www.imath.kiev.ua" ], "issuer": "Let's Encrypt / YR1", "serial": "57cfc14d6a0beaabf66f264301d37fcc57a", "sha256": "76ff1f2f03ca1aa35049bc8154d9a6cf69304366cdc2acefaa8bf6c4e6ba9785", "subject": "imath.kiev.ua", "valid_to": "2026-12-09T19:33:41Z", "valid_from": "2026-09-10T19:33:42Z" }, "whois": { "registrar": "ua.bit" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T22:09:03Z", "mail_config": { "mx": [ "zen.imath.kiev.ua", "twinhead.imath.kiev.ua" ], "spf": "v=spf1 ip4:192.168.1.0/24 ip4:194.44.31.54 ip4:194.44.31.57 ip4:194.44.31.58 ip4:194.44.10.121 -all", "dmarc": true, "spf_lookups": 0 }, "caa_records": { "count": 1, "domain": "imath.kiev.ua", "issuers": [ "letsencrypt.org" ] }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-19T06:34:32Z", "first": "1999-01-25T10:01:54Z", "changes": 825, "days_archived": 1692, "scans_per_day": 0.17, "avg_page_bytes": -70934453 }, "social_tags": { "title": "Інститут математики НАН України" }, "trackers": { "requests": 32, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 5 }, { "name": "Google APIs", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Analytics", "company": "Google", "country": "US", "category": "Site Analytics", "requests": 2 } ] }, "mixed_content": { "no_sri": [ "https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js", "https://ajax.googleapis.com/ajax/libs/jqueryui/1.14.1/jquery-ui.min.js", "https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.1/MathJax.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 109, "tls": 45, "wait": 233, "connect": 63, "download": 0 }, "response_ms": 450 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 25, 53, 80, 110, 143, 443, 587, 993, 995 ] }, "carbon": { "bytes": 18906, "co2_grams": 0.0007, "cleaner_than": 58 }, "dns_server": { "ns": [ { "ip": "194.44.31.57", "host": "ns.imath.kiev.ua" }, { "ip": "194.44.31.54", "host": "ns1.imath.kiev.ua" }, { "ip": "195.149.112.1", "host": "ns.secondary.net.ua" } ], "zone": "imath.kiev.ua" }, "cookies": { "cookies": [ { "name": "imath_session", "session": true }, { "name": "__utma" }, { "name": "__utmc", "session": true }, { "name": "__utmz" }, { "name": "__utmt" }, { "name": "__utmb" } ] }, "location": { "ip": "194.44.31.54", "asn": "3255", "org": "LLC EKSINTECH", "city": "Lviv", "country": "UA" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "imath.kiev.ua" }, "dns": { "A": [ "194.44.31.54" ], "MX": [ "{\"exchange\": \"twinhead.imath.kiev.ua\", \"priority\": 4}", "{\"exchange\": \"zen.imath.kiev.ua\", \"priority\": 4}" ], "NS": [ "ns.imath.kiev.ua", "ns.secondary.net.ua", "ns1.imath.kiev.ua" ], "SOA": "{\"nsname\": \"ns.imath.kiev.ua\", \"hostmaster\": \"hostmaster.imath.kiev.ua\", \"serial\": 2026102601, \"refresh\": 3600, \"retry\": 600, \"expire\": 864000, \"minttl\": 7200}", "TXT": [ "google-site-verification=X_NQ9sBNA3HCANCwNvjqx0pY-NAqGvtO9laEadc9wqc", "v=spf1 ip4:192.168.1.0/24 ip4:194.44.31.54 ip4:194.44.31.57 ip4:194.44.31.58 ip4:194.44.10.121 -all", "spf2.0/pra ?all", "gridinsoft-verify=vy1k7w0osbm7eqsieu47rc1ezv5e8l15hmntzj72xzlngmrmdxc6dxi29q2mrx9e" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "194.44.31.54", "family": 4 }, "redirects": { "chain": [ "https://imath.kiev.ua" ] }, "rank": { "domain": "imath.kiev.ua" }, "linked_pages": { "external": [ "https://events.imath.kiev.ua/", "https://courses.imath.kiev.ua/", "https://events.imath.kiev.ua/event/2249/", "https://events.imath.kiev.ua/event/2248/", "https://events.imath.kiev.ua/event/2250/", "https://events.imath.kiev.ua/event/2247/", "https://events.imath.kiev.ua/event/2252/", "https://events.imath.kiev.ua/event/2253/", "https://kau.org.ua/deps/math/868-fakultatyvy-kafedry-matematyky", "https://sites.google.com/site/naukovoorganizacijnarobotaim/", "https://bbb.imath.kiev.ua/", "https://sites.google.com/view/imathcourses/", "https://sites.google.com/site/aspiranturaim/", "https://sites.google.com/view/institute-timokha-lecturing/", "https://sites.google.com/view/rmvimathnasu", "http://profcom.imath.kiev.ua/", "http://kau.org.ua/deps/math", "https://sites.google.com/view/imath-mathhub/", "https://www.facebook.com/groups/imath.kiev.ua", "https://www.youtube.com/@instituteofmathematics6005" ], "external_count": 20, "internal_count": 40 }, "whois": { "registrar": "BUSINESS AND TECHNOLOGIS LTD", "created": "1997-12-16T22:00:00Z", "updated": "2026-07-30T21:01:05Z", "expires": "2027-06-30T21:00:00Z", "status": [ "ok" ], "nameservers": [ "asterix.niisp.gov.ua", "ns1.imath.kiev.ua", "ns.imath.kiev.ua", "ns.secondary.net.ua" ] }, "headers": { "headers": { "server": "Apache/2.4.37 (Rocky Linux) OpenSSL/1.1.1k", "content-type": "text/html; charset=utf-8", "x-powered-by": "PHP/8.4.27" } } } } ``` ## Complete dated records Availability observations: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/imath.kiev.ua/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1166861, "scope": "checked_url", "observed_at": "2026-11-05T00:08:26Z", "http_status": 302, "http_observed_at": "2026-11-05T00:08:26Z", "stored_http_code": 302, "stored_http_observed_at": "2026-11-05T00:08:26Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": "2026-11-05T00:08:26Z", "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```