moonpay-commerce-8ics8t062-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-8ics8t062-heliofi.vercel.app
This website appears to present itself as a MoonPay Commerce login or onboarding page related to cryptocurrency payments. The page title and metadata describe a service for accepting crypto payments through pay links, checkout widgets, deposits, subscriptions, and similar commerce features. The visible interface is minimal and asks for an email address or wallet sign-in, which suggests an account-access or merchant-portal workflow rather than a general informational homepage.
Based on the domain structure, however, this page is hosted on a vercel.app subdomain rather than on MoonPay's primary corporate domain. The page also references MoonPay branding and links to commerce.moonpay.com and assets hosted under hel.io. That combination may indicate a campaign, preview deployment, partner integration, or an unofficial page imitating a financial-services brand. Because the operator is not clearly identified from the page itself, ownership should be treated as uncertain based on available data.
Safety Assessment for moonpay-commerce-8ics8t062-heliofi.vercel.app
Several independent security signals raise concern about this domain at the time of this scan. It was flagged by 14 out of 91 security engines, with multiple classifications indicating phishing or fraud-related activity. In addition, several web-classification providers categorized it as phishing or financial-fraud related. The page uses MoonPay branding while operating from a long, non-primary vercel.app subdomain, which may indicate a look-alike login page rather than an official MoonPay property.
The malware scan did not detect malicious files on the page itself, which can happen when a phishing page is primarily collecting credentials rather than delivering malware. Blacklist checks for major content-malice databases were otherwise clean at the time of this scan, but the domain's IP address was listed on one mail-reputation blocklist, which is a weaker secondary signal and not conclusive on its own. Even so, the multi-engine phishing consensus is a much stronger indicator here than the clean file scan.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.67, with hosting attributed to CYPRESS COMMUNICATIONS, LLC in the United States. It uses a valid TLS certificate issued by Google Trust Services, expiring on 2026-09-26. The domain uses Vercel nameservers and DNSSEC appears to be unsigned.
From a technical perspective, the presence of HTTPS is positive for transport encryption, but it does not verify that the page is legitimate. The use of a branded financial-services login experience on a third-party hosting subdomain is a notable concern, especially when combined with phishing detections from multiple security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?