mavias[.]click

The domain mavias.click is a confirmed phishing site engaged in brand impersonation targeting users of the game 'Heroes of Mavia'. It specifically poses as the in-game 'base' feature to conduct an NFT mint scam, tricking victims into connecting wallets under the guise of claiming or purchasing in-game assets. As of the latest verification, mavias.click has been taken offline, though prior activity indicates it was actively used for fraudulent purposes.

Technical indicators for mavias.click show limited detection at the time of analysis, with 0 of 95 VirusTotal vendors flagging the domain. The domain is registered through arin and resolves to the IP address 172.67.139.250, hosted on Cloudflare's infrastructure in the US (AS13335). It appears on 3 security blocklists: PhishDestroy, ScamSniffer, and Enkrypt. No SSL certificate was observed, and the page title displayed 'Heroes of Mavia | Build Your Base & Battle for RUBY'. The Gridinsoft trust score for the domain is 0 out of 100, reinforcing its malicious classification.

Users who interacted with mavias.click should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or Revoke.cash. Move remaining funds to a new, secure wallet to prevent unauthorized access. Report the domain to relevant platforms, including the impersonated brand's support team, and submit it to additional blocklists such as Google Safe Browsing or PhishTank. Enable two-factor authentication on all accounts and monitor for unauthorized transactions or login attempts.