mavvia[.]app

This domain, mavvia.app, poses a brand impersonation threat targeting players of the mobile game Heroes of Mavia. The site falsely presented itself as an official platform for the game, using the title 'Heroes of Mavia | Build Your Base & Battle for RUBY' to lure users into engaging with fraudulent content. Players were likely enticed with promises of in-game currency (RUBY) or exclusive rewards, a common tactic to harvest credentials or distribute malware. The site specifically impersonates the base-building mechanics of the legitimate game, increasing the risk for users who may unknowingly provide sensitive account information or download malicious files. Analysis indicates the domain was flagged by 2 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. It appears on two security blocklists, including PhishDestroy and Enkrypt, and was assigned a trust score of 0/100 by Gridinsoft. The domain was registered through ARIN and previously resolved to the IPv6 address 2606:4700:3032::6815:55e6. While the site is currently offline, its infrastructure and historical activity remain concerning, particularly given its targeted approach toward a specific gaming community. If you visited mavvia.app or interacted with its content, immediate action is recommended. First, change the passwords for your Heroes of Mavia account and any other platforms where you may have reused credentials. Enable multi-factor authentication (MFA) on all gaming and financial accounts to add an extra layer of security. Scan your device for malware using a reputable security tool to detect any potential infections. Monitor your accounts for unauthorized transactions or suspicious activity, and report any findings to the official Heroes of Mavia support team. Avoid clicking on links or downloading files from unofficial sources, especially those promising in-game rewards or exclusive content.