moonpay-commerce-6xnwbvw2o-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-6xnwbvw2o-heliofi.vercel.app
This domain appears to present itself as a cryptocurrency payments and checkout page branded as "MoonPay Commerce." The page title and metadata describe a service for accepting crypto payments, pay links, checkout widgets, subscriptions, and instant deposits. The screenshot shows a minimalist landing page with an email entry field, a wallet sign-in option, and branding that resembles a commercial crypto-payment platform.
However, the scanned hostname is a long subdomain under vercel.app rather than an obvious primary corporate domain. It also references assets and links associated with MoonPay- and Helio-related infrastructure, which suggests the page may be attempting to imitate or proxy a legitimate crypto-commerce experience rather than operating from a clearly official web property. Based on the branding and content, the site appears to target users interested in cryptocurrency payments or merchant onboarding.
No clear operator identity is established from the scan data alone beyond the use of Vercel hosting and references to third-party assets. Because the page uses recognizable financial-technology branding on a hosted subdomain, visitors may want to verify whether it is officially associated with the brand it references before entering credentials or connecting a wallet.
Safety Assessment for moonpay-commerce-6xnwbvw2o-heliofi.vercel.app
The strongest risk signal in this scan is that the URL was flagged by 19 out of 91 security engines, with many of those detections classifying it as phishing at the time of the scan. That level of multi-engine agreement is a significant warning sign, especially for a page that asks for an email address and offers wallet sign-in while using recognizable crypto-payment branding. The domain name itself also combines the MoonPay name with a long hosted subdomain on vercel.app, which may indicate a look-alike or unofficial deployment rather than a clearly verified corporate site.
Other signals are mixed but do not outweigh the phishing detections. A malware scan did not identify malicious files, and major content-malice databases listed in the scan were clean at the time checked. However, the domain's IP address is listed on one mail-reputation blocklist, which is a minor cautionary signal rather than direct proof of harmful web content. In this case, the broader phishing consensus across security engines carries much more weight than the clean file scan.
The page's financial theme, wallet-login prompt, and brand-style presentation increase the potential impact if the site is not legitimate. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.67 in Walnut, United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry shown as 2026-09-26. The presence of HTTPS indicates encrypted transport, but that alone does not verify the legitimacy of the service or brand association.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation. The page loads Next.js-style static assets and references external resources from hel.io, along with links to commerce.moonpay.com and social platforms. No malicious files or flagged external links were identified in the provided file-level scan, but the hosting pattern and branded subdomain structure may still be consistent with a phishing setup.
Share your experience with this website. Was it safe? Did you encounter any issues?