mvia[.]info

The domain mvia.info has been identified as a phishing site engaged in brand impersonation, specifically targeting the Base brand. The site was previously active but is now taken offline. Its page title was observed as 'Heroes of Mavia | Build Your Base & Battle for RUBY', indicating an attempt to lure users by mimicking a legitimate service. This domain is currently under investigation for its involvement in impersonation scams.

Technical analysis shows that mvia.info was created on February 21, 2026, and resolves to the IP address 172.67.165.231, located in the US under AS13335 Cloudflare, Inc. The SSL certificate is issued by E1. Notably, 0 of 95 vendors on VirusTotal have detected this domain as malicious so far, and it is not flagged by Google Safe Browsing. However, mvia.info appears on two security blocklists: PhishDestroy and Enkrypt, confirming its association with phishing activities. The registrar information is not available.

If users interacted with mvia.info, especially by entering credentials or sensitive information, it is recommended to change passwords immediately, enable two-factor authentication, and monitor accounts for suspicious activity. Those affected by the phishing attempt should report the incident to relevant security organizations and the impersonated brand. Since no drainer kit is involved, crypto-specific actions are not required unless wallet credentials were compromised, in which case moving assets to a new wallet is advised.