appmavia[.]org

appmavia.org is a phishing domain engaged in brand impersonation targeting users of the game 'Heroes of Mavia'. The site falsely presents itself as an official platform for the game, specifically promoting a fake 'Build Your Base & Battle for RUBY' event to deceive victims into participating in an NFT mint scam. No crypto drainer kit was identified, but the domain impersonates the 'base' brand and has been taken offline following detection.

Technical indicators show appmavia.org had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not flag it. The domain appears on 2 security blocklists (PhishDestroy and Enkrypt) and is registered through ARIN. It resolved to the IP address 172.67.172.153, hosted by Cloudflare in the US (AS13335). No SSL certificate was present, and the page title observed was 'Heroes of Mavia | Build Your Base & Battle for RUBY'. Trust scores from Gridinsoft and Scamadviser were 0/100 and 1/100, respectively, further indicating its malicious nature.

Victims of appmavia.org should immediately cease any interaction with the site. Since this is an NFT mint scam, users who connected wallets should revoke any token approvals granted to the domain and transfer funds to a new, secure wallet. Enable two-factor authentication on all accounts linked to the game or wallet. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's official security team to aid in takedown efforts.