moonpay-commerce-f9a9gwoyq-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-f9a9gwoyq-heliofi.vercel.app
This website appears to present itself as a cryptocurrency payments and merchant onboarding page branded as "MoonPay Commerce." Based on the page title, meta description, and visible interface, it is designed to invite users to enter an email address or sign in with a wallet in order to access crypto payment tools such as pay links, checkout widgets, subscriptions, and deposits.
The page is hosted on a vercel.app subdomain rather than on the better-known moonpay.com domain, while also referencing commerce.moonpay.com and MoonPay-themed assets. That combination suggests the site may be attempting to mimic or replicate a legitimate crypto-commerce service experience. The sparse landing-page design, wallet sign-in prompt, and branding indicate a finance/cryptocurrency-oriented service, but the hosting context and reputation signals warrant caution.
Safety Assessment for moonpay-commerce-f9a9gwoyq-heliofi.vercel.app
This domain was flagged by 14 out of 91 security engines at the time of this scan, with multiple detections describing it as phishing or malicious. The page also uses branding associated with MoonPay while operating from a long, non-official-looking vercel.app subdomain, which may indicate a look-alike page intended to resemble a legitimate crypto service. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than content-based phishing detections but still worth noting.
At the same time, some other checks were less conclusive: the malware scan did not identify flagged files on the page itself, and major threat-database checks shown here were otherwise clean at the time of this scan. However, those cleaner signals are outweighed by the multi-engine phishing consensus, the credential/wallet-entry workflow, and the branding resemblance to an established cryptocurrency payments platform.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it is hosted on Vercel infrastructure with the web server identified as Vercel. The page appears to be built with a modern JavaScript framework, likely Next.js, based on the referenced _next/static assets. DNSSEC is unsigned, which is common but means DNS responses do not benefit from DNSSEC validation.
From an infrastructure perspective, the use of a reputable hosting platform and valid SSL does not by itself establish legitimacy. A notable technical concern is that the page is deployed on a branded vercel.app subdomain rather than an obvious official MoonPay-owned primary domain, while still loading MoonPay-themed assets and presenting a wallet/email sign-in flow. That pattern can be consistent with temporary campaign pages, but it may also be used in impersonation scenarios.
Share your experience with this website. Was it safe? Did you encounter any issues?