What Gridinsoft observed on projectmiracle.space
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260904063423-03693736
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
The concrete unused-service delegation exposure from the previous review has been removed, and the current reviewed apex/www website does not reproduce phishing or malware delivery. The historical account page and separately controlled blacklist labels do not justify retaining the warning for this remediated website.
Analyst findings
Review 4 documented observations View evidence
The formerly delegated account and store names no longer resolve. The unused Shopify alias exposure observed in the earlier review is no longer present.
- DNS fact account.projectmiracle.space and store.projectmiracle.space returned NXDOMAIN for A, AAAA and CNAME queries. Independent resolvers and authoritative nameservers confirmed the absence.
- DNS fact Two unconfigured test names also returned NXDOMAIN; this is consistent with no wildcard response but is not a complete zone audit.
The apex redirects to the www site. The home, about, contact and checkout pages returned the expected Project Miracle music-software website, ordinary contact/newsletter fields and Webflow commerce controls.
-
HTTP status
200 -
Final URL
https://www.projectmiracle.space/ - Analyst observation Reviewed HTTP responses and HTML showed no unrelated automatic redirect, brand-impersonation login receiver, automatic executable download or specific malware object.
The api and hooks roots returned generic 404 responses. The assets host returned a complete listing of music-product media and a logo, without an executable or script object in that listing.
- Analyst observation The non-truncated listing contained WAV, MP4, MOV and PNG objects and directories. These are listed object types, not a malware scan of every file.
- DNS fact analytics-1.projectmiracle.space, assistant-1.projectmiracle.space, license-validation.projectmiracle.space and update-check-1.projectmiracle.space returned NXDOMAIN.
URLScan preserves an unrelated online-slots page on the account host on June 27, 2026, followed by an unavailable-store page on July 27. Earlier Wayback snapshots show the Project Miracle Shopify store and music-software site. The current account hostname no longer resolves.
- Public artifact URL https://urlscan.io/result/019f09f4-b30f-74d9-bb24-be2f0e45d6f5/
- Analyst observation The historical scan states No classification. A preserved web page is not itself a malware sample, proof of credential theft, or evidence that the current primary site delivers that content.
Scope and limitations
- The result applies to the recorded public website and service-root checks, not all private backend code, future deployments or every media file.
- HTTP responses and HTML were reviewed; forms were not submitted, no purchase was made, and no authenticated application or JavaScript runtime security audit was performed.
- Public evidence does not establish the historical takeover mechanism or independently verify private login history, payment dates or multi-factor authentication settings.
- Some intelligence endpoints were restricted. An empty public index is not proof of absence.
Help protect others by sharing this page on social media! The more people who know about projectmiracle.space, the fewer chances they have to deceive someone else. Help others evaluate projectmiracle.space by sharing this page on social media!