heavens[.]today

The domain heavens.today is a cryptocurrency phishing site engaged in brand impersonation targeting Solana users. It presents itself as a legitimate Solana-related platform but is designed to deceive victims into disclosing wallet credentials or transferring funds under false pretenses. No drainer kit was identified, but the site was actively used for cryptocurrency scams. As of the latest verification, heavens.today has been taken offline.

Technical indicators confirm the malicious nature of heavens.today. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist, specifically PhishDestroy. The domain was registered on February 21, 2026, and resolves to the IP address 104.21.64.1, hosted by Cloudflare in the US (AS13335). The SSL certificate is issued by Cloudflare TLS Issuing ECC CA 1, and the observed page title was 'Intro - Heaven Docs'. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with heavens.today should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts as an additional security measure. Monitor accounts for unauthorized transactions and report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.