moonpay-commerce-git-feat-com2-2122-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-git-feat-com2-2122-heliofi.vercel.app
This domain appears to present itself as a MoonPay Commerce login or onboarding page related to cryptocurrency payments. The page title and metadata describe a service for accepting crypto payments through pay links, checkout widgets, deposits, subscriptions, and related e-commerce features. The visible interface is minimal and asks for an email address or wallet sign-in, which suggests an account-access or merchant onboarding flow rather than a general informational homepage.
Based on the hostname structure, this page is hosted on a Vercel subdomain rather than on MoonPay's primary branded domain. The page also references assets associated with hel.io and mentions MoonPay branding in the favicon paths and page content. That combination may indicate a development, preview, or cloned deployment, but it also means the site does not use the main official MoonPay web address shown in one of the referenced domains.
The site appears to target users interested in cryptocurrency commerce tools, merchant payments, or wallet-based sign-in. Because the branding closely matches a known crypto payments company while being served from a third-party hosting subdomain, the page may be attempting to resemble an official service portal.
Safety Assessment for moonpay-commerce-git-feat-com2-2122-heliofi.vercel.app
Scan results indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, with multiple detections describing the page as phishing or malicious. In addition, the page closely imitates MoonPay branding while using a long Vercel-hosted subdomain instead of the expected primary branded domain, which may be a look-alike setup intended to capture credentials or wallet access.
The malware scan did not detect malicious files in the sampled page resources, and several major threat databases were clean at the time of this scan. However, that does not outweigh the broader phishing consensus from multiple security engines. There is also a secondary reputation concern: the domain's IP address is listed on one mail-reputation blocklist, though that signal alone is weaker than direct phishing detections.
The page design is sparse, requests sign-in details, and uses strong brand resemblance without the reassurance of the official primary domain. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.195 in the United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, which means the connection appears encrypted in transit. The certificate validity does not by itself confirm legitimacy, since both legitimate and deceptive sites can use HTTPS.
DNSSEC appears to be unsigned, so DNS responses may not benefit from that additional integrity layer. The page loads Next.js-style static assets and references external resources from assets.hel.io, along with domains including commerce.moonpay.com and telegram.org. The main technical concern is not the TLS setup but the mismatch between the strong MoonPay branding and the non-primary Vercel subdomain used to host the page.
Share your experience with this website. Was it safe? Did you encounter any issues?