miragelegends[.]shop

The domain miragelegends.shop impersonates the popular game Mobile Legends to conduct phishing operations. Despite being taken offline, it has already been flagged as malicious by 10 out of 95 vendors on VirusTotal. This domain was registered through GoDaddy.com, LLC and hosted on an IP address located in Russia under the organization JSC Selectel.

The site, titled 'MirageLegends — Магазин доната Mobile Legends', likely aimed to deceive users into divulging sensitive information under the guise of a legitimate in-game store. The absence of an SSL certificate further indicates its illegitimacy, as secure sites typically employ encryption to protect user data.

Interestingly, PhishDestroy's systems identified this domain on February 7, 2026, two weeks before its official registration date of February 21, 2026. This early detection underscores the effectiveness of PhishDestroy's proactive monitoring, capturing threats even before they fully materialize. The domain's inclusion in PhishDestroy's public blocklist further highlights its threat level, despite the site now being offline.