genesis[.]heavendex[.]app

The domain genesis.heavendex.app is a cryptocurrency phishing site engaged in brand impersonation, specifically targeting users of the decentralized finance platform Aave. This scam site posed an elevated risk by mimicking Aave's branding to deceive victims into connecting their crypto wallets, potentially leading to unauthorized transactions or fund theft. As of the latest verification, genesis.heavendex.app has been taken offline.

Technical indicators confirm the malicious nature of genesis.heavendex.app. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Fortinet, and appears on 1 security blocklist (PhishDestroy). It was created on 2026-02-21 and resolves to the IP address 104.21.96.1, hosted on Cloudflare's network (AS13335). The SSL certificate is issued by WE1, and the observed page title was 'Heaven'. No registrar information is available, and Google Safe Browsing did not flag the domain at the time of analysis. Gridinsoft assigned a trust score of 0/100.

Users who interacted with genesis.heavendex.app should immediately revoke any token approvals granted to unknown or suspicious contracts using a tool like Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Enable two-factor authentication (2FA) on all accounts, even those unrelated to crypto, to prevent credential reuse attacks. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.