# migural.ru homepage for МиГ Урал marble and granite products | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/migural.ru/ Machine-readable companion: https://phishdestroy.io/domain/migural.ru/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-31 19:09:41 UTC - Last availability or vendor check: 2026-10-31 19:23:17 UTC - Stored record updated: 2026-10-31 21:00:07 UTC - VirusTotal detections in the stored snapshot: 5/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 31.31.196.21 - Registrar in stored WHOIS data: REGRU-RU - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2015-09-03 13:52:52 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19368-e649-76da-abc0-674fab6051ec/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/migural.ru - Certificate Transparency search: https://crt.sh/?q=%25.migural.ru - Web Archive lookup: https://web.archive.org/web/*/https://migural.ru/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records the captured homepage of migural.ru, presenting itself as a marble and granite products site. The captured migural.ru homepage presents itself as "МиГ Урал — Изделия из Мрамора и Гранита Урал," a Russian-language site about marble and granite products. A search box sits in the header, and the main content opens with a "Главная" heading followed by a paragraph on natural stone as a building and decorative material, with links on "Природный камень" and "мраморные или гранитные" within the text. The stored VirusTotal domain result reports 5 detections out of 92 engines. VIPRE reported "phishing"; Seclookup reported "malicious". Package revision: c6a80827343c47b1e3146068e23de2770bb28df2090b63c433349285b2bbfc97 Text generated (not scan time): 2026-10-31 20:14:15 Reviewed evidence snapshot: {"domain":"migural.ru","screenshot_available":true,"page_title":"МиГ Урал — Изделия из Мрамора и Гранита Урал","virustotal":{"detections":5,"engines":92,"malicious":5,"suspicious":0,"retrieved_date":"2026-10-31","analysis_date":"2026-10-31","flagging_vendors":["VIPRE","Seclookup","Gridinsoft","Chong Lua Dao","alphaMountain.ai"],"vendor_labels":{"VIPRE":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-10-31T19:12:03Z","final_host":"migural.ru","captured_on":"2026-10-31"},"virustotal_public_summary":"The stored VirusTotal domain result reports 5 detections out of 92 engines. VIPRE reported \"phishing\"; Seclookup reported \"malicious\".","page_paragraph_target_characters":514} Source facts (timestamps as stored): {"record_id":1722930,"first_recorded_at":"2026-10-31 20:09:41","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":5,"denominator":92,"malicious":5,"suspicious":0,"vendors":{"VIPRE":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing"},"observed_at":"2026-10-31T10:09:49Z","checked_at":"2026-10-31 20:11:53","fetched_at":"2026-10-31T19:11:52Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":5,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Chong Lua Dao","Gridinsoft","Seclookup","VIPRE"],"observed_at":"2026-10-31 10:09:49","checked_at":"2026-10-31 20:11:53","fetched_at":"2026-10-31 19:11:54","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-10-31 20:11:58"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-31 20:30:14"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-10-31 20:23:17"}} ## Stored page captures - Primary capture: https://i.ibb.co/0j9cPGVF/6cdc54a6bf48.png Captured: 2026-10-31 19:23:17 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a19368-e649-76da-abc0-674fab6051ec.png Captured: 2026-10-31 19:23:17 UTC Source report: https://urlscan.io/result/01a19368-e649-76da-abc0-674fab6051ec/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a1935c-afc6-770f-93cb-22f80f0146d7.png Captured: 2026-10-31 19:09:41 UTC Source report: https://urlscan.io/result/01a1935c-afc6-770f-93cb-22f80f0146d7/ - URLScan · 2026-05-09: https://screenshots.phishdestroy.io/us/019e0a6b-1062-71ef-83aa-5bce72a48877.png Captured: 2026-05-09 01:47:38 UTC Source report: https://urlscan.io/result/019e0a6b-1062-71ef-83aa-5bce72a48877/ SHA-256: f4f76e49e62e1e221cffcccf1861e996451902cecabf00b95f0d84fc6d9d7a45 - URLScan · 2026-09-18: https://screenshots.phishdestroy.io/us/01a0b52b-6140-7372-9f4b-ffad761d1d0c.png Captured: 2026-09-18 15:38:41 UTC Source report: https://urlscan.io/result/01a0b52b-6140-7372-9f4b-ffad761d1d0c/ SHA-256: 1fb8d2f03b00395a42cb36ba63d0e5e92b1c37a402e719e15f37f3a2846ca6fc - URLScan · 2026-10-31: https://screenshots.phishdestroy.io/us/01a1935d-f454-70ee-a53e-8f3cf53a5da5.png Captured: 2026-10-31 19:09:38 UTC Source report: https://urlscan.io/result/01a1935d-f454-70ee-a53e-8f3cf53a5da5/ SHA-256: 4375eaa74e31ea736cac652c066a919a2124b1d49b8bb66056448c3b5bee987c - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0b8f926c-c2e3-4d16-ba08-509a6e19e97a.png Captured: 2026-10-31 19:12:03 UTC Source report: https://radar.cloudflare.com/scan/0b8f926c-c2e3-4d16-ba08-509a6e19e97a SHA-256: fad440af0fd167f9e50bd8eeb32ff4b4d406caefb48c09413fef785887d228ed ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-31T19:48:27Z", "uuid": "01a19368-e649-76da-abc0-674fab6051ec", "scanned_at": "2026-10-31T19:21:38Z", "final_url": "https://migural.ru/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://migural.ru/", "from": "http://migural.ru/", "status": 307 } ], "ip": "31.31.196.21", "ptr": "server208.hosting.reg.ru", "domains": [ "mc.yandex.com", "mc.yandex.ru", "informer.yandex.ru" ], "ips": [ "77.88.21.119", "87.250.250.119", "31.31.196.21" ], "asns": [ "13238", "197695" ], "countries": [ "RU" ], "link_domains": [ "metrika.yandex.ru", "catchthemes.com" ], "doc_hash": "c40b38d4494afa783742e017c42bc191f7dac8519b7f7e921d863a1c3f34c406", "script_hashes": [ "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "7b4db17ae6cefea8f0fd97df42be3adcbe560e5ed494b45455c0fb966b545dce", "a9848907e998784525523ba5c1985975164e67ab9b033e64e61e94e2d7530dd5", "f9f8bd8563818a4fc6b90510703dd64cb2a70185540ad3a37e55bb77dca44a6f", "73b7c13bdf77881a7546967c4f52b3c6e306b61bb00387d34ddee583f410f6b2", "5c9b97d326150b1d83aa4fbb7ee58bb3a17d35208bb182c26b8eb3aa01cd179a", "fb82877818fa23c8c028053cc5744c5d7947faca82bd50a82b918016499bfb62", "49e2437ef0089b28fa0eee95e5a16a9b74c9b345fd8f7581acead07b1039a46c", "d35452fad65d6f3bc1d026ce4eff08cdf6b503b0ed61b70c663529c0bb5a83ff" ], "globals": [ "jQuery", "ym", "Waypoint", "bazz_ajax", "bazz_options", "_wpemojiSettings", "waypointContextKey", "twemoji", "wp", "Ya", "yaCounter66588130" ], "cookies": [ "bh", "_ym_uid", "_ym_d", "sync_cookie_csrf", "_ym_isad", "yabs-sid", "i", "yandexuid", "yuidss", "ymex", "sync_cookie_csrf_secondary" ], "storage_keys": [ "wpEmojiSettingsSupports", "_ymBRC", "_ym_synced", "_ym66588130_lsid", "_ym66588130:0_reqNum", "_ym_uid", "_ym_retryReqs", "_ym_jn" ], "tls": { "san": [ "migural.ru", "www.migural.ru" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "migural.ru", "protocol": "TLS 1.3", "valid_to": "2026-12-12T23:37:59Z", "valid_from": "2026-09-13T23:38:00Z" }, "domain_age_days": 3375, "apex_age_days": 3375, "tls_age_days": 47, "tls_valid_days": 89, "requests": 28, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 50, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-31T19:13:04Z", "uuid": "0b8f926c-c2e3-4d16-ba08-509a6e19e97a", "scanned_at": "2026-10-31T19:12:03Z", "final_url": "https://migural.ru/", "status": 200, "history": [ { "url": "https://migural.ru/", "status": 200 } ], "dom_hash": "748322943dfadcc0068579ab99f45e9bb9df16ba91d237ef29d375ce0bd34a30", "doc_hash": "c40b38d4494afa783742e017c42bc191f7dac8519b7f7e921d863a1c3f34c406", "domain_risks": [ "Business", "Business & Economy" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "migural.ru", "type": "A", "value": "31.31.196.21" }, { "name": "migural.ru", "type": "AAAA", "value": "2a00:f940:2:2:1:1:0:208" } ], "dnssec_valid": false, "ip": "127.0.1.68", "whois": { "registrar": "REGRU-RU", "created": "2015-09-03T15:52:52Z", "expires": "2027-09-03T15:52:52Z", "nameservers": [ "ns1.hosting.reg.ru", "ns2.hosting.reg.ru" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-31T19:11:52Z", "analysis_at": "2026-10-31T10:09:49Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 5, "suspicious": 0, "undetected": 34 }, "detections": { "VIPRE": "phishing", "Seclookup": "malicious", "Gridinsoft": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Business/Economy, Phishing (alphaMountain.ai)" }, "registrar": "REGRU-RU", "first_seen": "2024-03-05T16:56:52Z", "dns": [ { "ttl": 3600, "type": "A", "value": "31.31.196.21" }, { "ttl": 3600, "type": "AAAA", "value": "2a00:f940:2:2:1:1:0:208" }, { "ttl": 3600, "type": "TXT", "value": "v=spf1 ip4:31.31.196.21 a mx include:_spf.hosting.reg.ru ~all" }, { "ttl": 3600, "type": "MX", "value": "mx1.hosting.reg.ru", "priority": 10 }, { "ttl": 3600, "type": "NS", "value": "ns2.hosting.reg.ru" }, { "ttl": 3600, "type": "SOA", "rname": "support.reg.ru", "value": "server208.hosting.reg.ru" }, { "ttl": 3600, "type": "MX", "value": "mx2.hosting.reg.ru", "priority": 20 }, { "ttl": 3600, "type": "NS", "value": "ns1.hosting.reg.ru" } ], "dns_at": "2026-10-31T10:45:48Z", "jarm": "29d29d00029d29d00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "migural.ru", "www.migural.ru" ], "issuer": "Let's Encrypt / YR1", "serial": "5c2c371351fbd1af81e1e15c39fb22eace5", "sha256": "14a13aaddb93bfc7f1479db278fcb4a8bf8f99e77dcb3465eba81bbab0e692b9", "subject": "migural.ru", "valid_to": "2026-12-12T23:37:59Z", "valid_from": "2026-09-13T23:38:00Z" }, "whois": { "registrar": "REGRU-RU" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-31T19:13:15Z", "mail_config": { "mx": [ "mx1.hosting.reg.ru", "mx2.hosting.reg.ru" ], "spf": "v=spf1 ip4:31.31.196.21 a mx include:_spf.hosting.reg.ru ~all", "spf_lookups": 3 }, "caa_records": { "domain": "migural.ru" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-31T19:10:12Z", "first": "2015-11-03T18:13:18Z", "changes": 66, "days_archived": 73, "scans_per_day": 0.02, "avg_page_bytes": 6043 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "http://migural.ru/", "http://migural.ru/", "http://migural.ru/", "http://migural.ru/", "http://migural.ru/" ] }, "sitemap": { "present": true, "url_count": 8 }, "social_tags": { "title": "МиГ Урал — Изделия из Мрамора и Гранита Урал", "robots": "max-image-preview:large", "generator": "WordPress 7.1.4", "canonicalUrl": "https://migural.ru/" }, "trackers": { "requests": 23, "trackers": [ { "name": "Yandex", "company": "Yandex", "country": "RU", "category": "Advertising", "requests": 2 }, { "name": "Yandex Metrika", "company": "Yandex", "country": "RU", "category": "Site Analytics", "requests": 1 } ] }, "mixed_content": { "passive_insecure": [ "http://migural.ru/wp-content/uploads/2015/10/reWalls.com-35251-e1444656025559-150x94.jpg" ], "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 4, "tls": 58, "wait": 206, "connect": 60, "download": 5 }, "response_ms": 333 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 37435, "co2_grams": 0.0014, "cleaner_than": 43 }, "dns_server": { "ns": [ { "ip": "31.31.198.177", "host": "ns1.hosting.reg.ru" }, { "ip": "37.140.192.31", "host": "ns2.hosting.reg.ru" } ], "zone": "migural.ru" }, "cookies": { "cookies": [ { "name": "bh", "secure": true, "same_site": "None" }, { "name": "_ym_uid", "secure": true, "same_site": "None" }, { "name": "_ym_d", "secure": true, "same_site": "None" }, { "name": "sync_cookie_csrf", "secure": true, "same_site": "None" }, { "name": "_ym_isad", "secure": true, "same_site": "None" }, { "name": "sync_cookie_csrf", "secure": true, "same_site": "None" }, { "name": "yabs-sid", "secure": true, "session": true, "same_site": "None" }, { "name": "i", "secure": true, "http_only": true, "same_site": "None" }, { "name": "yandexuid", "secure": true, "same_site": "None" }, { "name": "yuidss", "secure": true, "same_site": "None" }, { "name": "ymex", "secure": true, "same_site": "None" }, { "name": "receive-cookie-deprecation", "secure": true, "http_only": true, "same_site": "None" }, { "name": "bh", "secure": true, "same_site": "None" } ] }, "location": { "ip": "2a00:f940:2:2:1:1:0:208", "asn": "197695", "org": "Domain names registrar REG.RU , Ltd", "city": "Moscow", "country": "RU" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "migural.ru" }, "dns": { "A": [ "31.31.196.21" ], "MX": [ "{\"exchange\": \"mx1.hosting.reg.ru\", \"priority\": 10}", "{\"exchange\": \"mx2.hosting.reg.ru\", \"priority\": 20}" ], "NS": [ "ns2.hosting.reg.ru", "ns1.hosting.reg.ru" ], "SOA": "{\"nsname\": \"server208.hosting.reg.ru\", \"hostmaster\": \"support.reg.ru\", \"serial\": 2022041742, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 86400}", "TXT": [ "v=spf1 ip4:31.31.196.21 a mx include:_spf.hosting.reg.ru ~all" ], "AAAA": [ "2a00:f940:2:2:1:1:0:208" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2a00:f940:2:2:1:1:0:208", "family": 6 }, "redirects": { "chain": [ "https://migural.ru" ] }, "subdomains": { "count": 1, "subdomains": [ "www.migural.ru" ] }, "linked_pages": { "external": [ "http://migural.ru/%d0%be%d0%b1%d1%80%d0%b0%d0%b7%d1%86%d1%8b-%d0%ba%d0%b0%d0%bc%d0%bd%d1%8f/", "http://migural.ru/", "http://migural.ru/%d0%b3%d0%bb%d0%b0%d0%b2%d0%bd%d0%b0%d1%8f/rewalls-com-3525-2/", "https://metrika.yandex.ru/stat/", "http://catchthemes.com/" ], "external_count": 5, "internal_count": 13 }, "whois": { "registrar": "REGRU-RU", "created": "2015-09-03T15:52:52Z", "expires": "2027-09-03T15:52:52Z", "status": [ "REGISTERED, DELEGATED, VERIFIED" ], "nameservers": [ "ns1.hosting.reg.ru.", "ns2.hosting.reg.ru." ] }, "headers": { "headers": { "server": "nginx", "content-type": "text/html; charset=UTF-8" } } } } ```