Report - vadym.iatp.org.ua/liteeditor.html

Report Overview

Visited public
2023-12-01 19:34:44
Tags
URL
vadym.iatp.org.ua/liteeditor.html
Finishing URL
old.iatp.org.ua/
IP / ASN
89.184.75.213
#28907 Internet Invest Ltd.
Title
Майдан онлайн: Киев, веб-камера

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vadym.iatp.org.ua	unknown	2010-07-29	2015-11-18 12:28:22	2015-11-18 12:28:22	415 B	470 B	89.184.75.213
old.iatp.org.ua	unknown	2010-07-29	2017-03-17 07:49:48	2023-11-21 03:23:51	1.5 kB	4.2 kB	89.184.75.213
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-12-01 08:02:13	400 B	1.1 kB	142.250.74.138
pressorg24.com	580858	2013-12-31	2014-02-12 15:22:21	2023-11-25 20:57:29	336 B	689 B	89.184.75.213

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-01 19:34:32	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:32	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:32	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:32	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:32	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:32	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:32	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:33	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:33	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:33	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:33	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:34	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-12-01 19:34:34	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	old.iatp.org.ua/	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL old.iatp.org.ua/ IP 89.184.75.213 ASN #28907 Internet Invest Ltd. Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 04:03 Times Seen4633789 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	pressorg24.com/misc/js/smibtm.js	ScriptElement	333 B	2023-11-25	2024-08-20
Pretty URL pressorg24.com/misc/js/smibtm.js IP 89.184.75.213 ASN #28907 Internet Invest Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-25 20:57 Last Seen2024-08-20 17:56 Times Seen4 Hash 32fbaf2aa06e2184912bcc6f5b8a3485 a586061f0562bceb50ee8446a63099a5c9c32ddd 2a58dd4e99bad3be7d8e56c9c2352b23887e107df494ff08f50c9b771cb17865 Loading...

		Size	First Seen	Last Seen
	#1 Write - f6b491c0066dc1efc83a660041e2e4d9	34 B	2023-11-25 20:57	2024-08-20 17:56
Pretty Observations First Seen2023-11-25 20:57 Last Seen2024-08-20 17:56 Times Seen4 Hash f6b491c0066dc1efc83a660041e2e4d9 060297dc3c34c97704f4bf953d7e3140ee9763d0 56c97b4e6a774c72804d989372439aad2eef286ae6f78dd22b9e37c11b0ea86f Loading...

	#2 Write - d2b126bcb6a0a7d7796dd57707df4dd8	330 B	2024-08-20 17:08	2024-08-20 17:08
Pretty Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash d2b126bcb6a0a7d7796dd57707df4dd8 e3f69e6d0126b2803f67eeabc0bd1be74d8462a6 4038972285cbabf8950c5407ae4562bbad4ef8790c0ada2ff24d68bfbfdfccfa Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	vadym.iatp.org.ua/liteeditor.html	89.184.75.213	301 Moved Permanently	246 B
URL User Request GET HTTP/1.1 vadym.iatp.org.ua/liteeditor.html IP 89.184.75.213:80 ASN #28907 Internet Invest Ltd. File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 246 B (246 bytes) Hash 2d8535aa07130bc5659860db29eef182 fa36a295d843bff316a0765f2ece50558c48336c d2a1732308458ed5ee455aeb6c731b66d7500f6fa5f858922494261c95eb6f85 HTTP Headers `GET /liteeditor.html HTTP/1.1 Host: vadym.iatp.org.ua User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 01 Dec 2023 19:34:28 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 246 Connection: keep-alive Location: http://old.iatp.org.ua/liteeditor.html`

	old.iatp.org.ua/liteeditor.html	89.184.75.213		0 B
URL User Request GET old.iatp.org.ua/liteeditor.html IP 89.184.75.213:0 ASN #28907 Internet Invest Ltd. File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /liteeditor.html HTTP/1.1 Host: old.iatp.org.ua User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 01 Dec 2023 19:34:28 GMT Content-Type: text/html Content-Length: 0 Connection: keep-alive Location: /`

	old.iatp.org.ua/	89.184.75.213	200 OK	1.6 kB
URL GET HTTP/1.1 old.iatp.org.ua/ IP 89.184.75.213:80 ASN #28907 Internet Invest Ltd. Requested by http://old.iatp.org.ua/ File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (543) Size 1.6 kB (1649 bytes) Hash cdb289929657122630a6b5b08a474b89 17d932d327366b4521d4c5069c2d5ab9b24bafde 977299832395e17138199593b96dd0073c55a8e546a9c08065aaf8eb8278df4e HTTP Headers `GET / HTTP/1.1 Host: old.iatp.org.ua User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 19:34:28 GMT Content-Type: text/html Content-Length: 1649 Connection: keep-alive Last-Modified: Tue, 26 Aug 2014 18:56:56 GMT ETag: "c90-5018cde0d0e00-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip`

	fonts.googleapis.com/css?family=Open+Sans+Condensed:700&subset=latin,cyrillic-ext	142.250.74.138	200 OK	583 B
URL GET HTTP/1.1 fonts.googleapis.com/css?family=Open+Sans+Condensed:700&subset=latin,cyrillic-ext IP 142.250.74.138:80 ASN #15169 GOOGLE Requested by http://old.iatp.org.ua/ File type ASCII text Size 583 B (583 bytes) Hash 5c723f50cb3fa0e8146159ab622af843 be467b0298cda5b6b7e88b0aa28c60bb5e0b9772 cdb595f87a8cc9028f43a6024615794954af4c094cfb9b28c83986d3c74c2960 HTTP Headers `GET /css?family=Open+Sans+Condensed:700&subset=latin,cyrillic-ext HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://old.iatp.org.ua/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Access-Control-Allow-Origin: * Timing-Allow-Origin: * Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin Expires: Fri, 01 Dec 2023 19:34:29 GMT Date: Fri, 01 Dec 2023 19:34:29 GMT Cache-Control: private, max-age=86400 Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Content-Encoding: gzip Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

	pressorg24.com/misc/js/smibtm.js	89.184.75.213	200 OK	333 B
URL GET HTTP/1.1 pressorg24.com/misc/js/smibtm.js IP 89.184.75.213:80 ASN #28907 Internet Invest Ltd. Requested by http://old.iatp.org.ua/ File type ASCII text Size 333 B (333 bytes) Hash 32fbaf2aa06e2184912bcc6f5b8a3485 a586061f0562bceb50ee8446a63099a5c9c32ddd 2a58dd4e99bad3be7d8e56c9c2352b23887e107df494ff08f50c9b771cb17865 HTTP Headers `GET /misc/js/smibtm.js HTTP/1.1 Host: pressorg24.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://old.iatp.org.ua/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 19:34:29 GMT Content-Type: application/javascript Content-Length: 333 Last-Modified: Fri, 10 Jan 2014 00:12:08 GMT Connection: keep-alive ETag: "52cf3ad8-14d" Expires: Tue, 12 Dec 2023 19:34:29 GMT Cache-Control: max-age=950400, public, must-revalidate, proxy-revalidate Accept-Ranges: bytes`

	old.iatp.org.ua/favicon.ico	89.184.75.213	301 Moved Permanently	0 B
URL GET HTTP/1.1 old.iatp.org.ua/favicon.ico IP 89.184.75.213:80 ASN #28907 Internet Invest Ltd. Requested by http://old.iatp.org.ua/ File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: old.iatp.org.ua User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://old.iatp.org.ua/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 01 Dec 2023 19:34:29 GMT Content-Type: text/html Content-Length: 0 Connection: keep-alive Location: /`

	old.iatp.org.ua/	89.184.75.213	200 OK	1.6 kB
URL GET HTTP/1.1 old.iatp.org.ua/ IP 89.184.75.213:80 ASN #28907 Internet Invest Ltd. Requested by http://old.iatp.org.ua/ File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (543) Size 1.6 kB (1649 bytes) Hash cdb289929657122630a6b5b08a474b89 17d932d327366b4521d4c5069c2d5ab9b24bafde 977299832395e17138199593b96dd0073c55a8e546a9c08065aaf8eb8278df4e HTTP Headers `GET / HTTP/1.1 Host: old.iatp.org.ua User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://old.iatp.org.ua/ DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 19:34:29 GMT Content-Type: text/html Content-Length: 1649 Connection: keep-alive Last-Modified: Tue, 26 Aug 2014 18:56:56 GMT ETag: "c90-5018cde0d0e00-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP