mavia[.]nu

The domain mavia.nu was a generic phishing site posing no specific brand impersonation or drainer-kit affiliation. It operated as a broad credential-harvesting page targeting login credentials without a clear victim brand. The site is currently taken offline, reducing immediate risk but leaving past victims exposed.

mavia.nu was detected by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. Google Safe Browsing did not flag the domain, though it appeared on 1 security blocklist (PhishDestroy). The domain was registered through ARIN, with no creation date available. It resolved to IP address 165.22.112.89, hosted by DigitalOcean, LLC in Great Britain (AS14061), with no SSL certificate issued. The observed page title was 'accueil - La Souris Blanche', and the domain used a single nameserver.

Victims of mavia.nu should immediately change any credentials entered on the site, particularly if reused across platforms. Enable two-factor authentication on all accounts to prevent unauthorized access. Monitor financial and communication channels for signs of fraud or identity theft. Report the domain to local cybercrime authorities or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.