heovex[.]com
Domain Security & Threat Intelligence Report
Analyst Security Overview
AI-Generatedheovex.com is a phishing domain that impersonates Amazon, designed to steal user credentials and sensitive information. Its current VirusTotal score is 17/95, indicating that many security vendors recognize it as a threat. Gridinsoft rates its trust score at a concerning 1/100, categorizing it as suspicious and highlighting its high-risk nature involving potential cryptocurrency scams.
The domain is registered with NICENIC INTERNATIONAL GROUP CO., LIMITED, and has been active for 88 days. The IP address associated with this domain is 198.18.1.123, which hosts multiple phishing-related activities. The presence of an SSL certificate does not mitigate the risk as it's deemed high-risk by Gridinsoft due to its association with Amazon phishing and other scam signals.
As of now, heovex.com remains active, and PhishDestroy has reported this domain to the relevant authorities and has it on its blocklist for continuous monitoring to mitigate potential risks to users.
Threat Response Pipeline
Public Blocklist Status
Website Screenshot
Domain Intelligence
rodney.ns.cloudflare.com
VirusTotal Analysis
Evidence & External Reports
URLScan Report
VirusTotal
URLQuery
Gridinsoft 
Wayback Machine
WHOIS Lookup
Cloudflare Radar 
Shodan
ScamAdviser
ChainAbuse
Were You Affected by This Site?
If you have interacted with this domain, entered personal information, or connected a cryptocurrency wallet — take immediate action. Below are resources to help you report the incident and protect yourself.
Report to Your Local Authorities
Select your country to see local cybercrime reporting contacts and complaint templates.
Related Domain Reports
Other Domains on 198.18.1.123
More Domains at NICENIC INTERNATIONAL GROUP CO., LIMITED
Stay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive