moonpay-commerce-dal47mq58-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-dal47mq58-heliofi.vercel.app
This domain appears to host a web page branded as "MoonPay Commerce," presenting itself as a cryptocurrency payments and checkout service for merchants. The page title and metadata describe a platform for accepting crypto payments, setting up pay links and checkout widgets, and handling e-commerce or subscription-related transactions. The screenshot shows a minimalist landing page with an email entry field, wallet sign-in option, and links to documentation and policy pages.
Based on the domain structure, this is not hosted on MoonPay's primary corporate domain but on a subdomain of vercel.app, which suggests it may be a deployed web application or preview environment running on Vercel infrastructure. The page also references assets from hel.io and mentions MoonPay branding, indicating it may be attempting to represent a crypto-commerce integration or merchant onboarding flow associated with those brands.
Safety Assessment for moonpay-commerce-dal47mq58-heliofi.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, the page uses strong MoonPay branding while operating from a vercel.app subdomain rather than an obvious primary MoonPay-owned domain, which may increase the likelihood of brand imitation or credential-harvesting concerns. The screenshot shows an email capture field and wallet sign-in prompt, both of which are common elements on legitimate crypto platforms but can also be used in phishing workflows.
The malware scan did not identify flagged files on the page itself, and major content-malice blacklist databases were clean at the time of this scan. However, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting. A referenced external domain was also marked with a generic suspicious heuristic, though that alone would be low confidence without broader corroboration.
Taking the multi-engine phishing consensus, the branding mismatch between the displayed service and the hosting domain, and the very low trust score together, this website may pose potential risks to visitors at the time of this scan.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.3 in Walnut, United States. It presents a valid SSL/TLS certificate issued by Google Trust Services, with expiry in September 2026. DNS uses Vercel nameservers, and DNSSEC appears to be unsigned. The page structure and asset paths suggest a modern JavaScript application, likely built with a framework such as Next.js.
From a security perspective, the presence of HTTPS is positive but should not be treated as proof of legitimacy. The more notable concern is that a page using MoonPay branding is being served from a third-party hosting subdomain rather than a clearly official primary domain, which can be consistent with temporary deployments, clones, or impersonation pages. No malicious files were flagged in the page scan itself, but the reputation findings warrant caution.
Share your experience with this website. Was it safe? Did you encounter any issues?