moonpay-commerce-git-feat-com2-2321-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-git-feat-com2-2321-heliofi.vercel.app
This website appears to present itself as a cryptocurrency payments and merchant-checkout service under the name "MoonPay Commerce." Based on the page title, meta description, and visible homepage text, it claims to help businesses accept crypto payments through pay links, checkout widgets, subscriptions, and instant deposits. The page includes an email entry field, a wallet sign-in option, and links to documentation and social platforms, which suggests it is designed as a product landing page or login gateway for a crypto-commerce platform.
The domain itself is a Vercel-hosted subdomain rather than an obvious primary corporate domain, and it references assets associated with hel.io as well as a MoonPay-branded interface. That combination may indicate a staging, preview, campaign, or cloned deployment rather than a standard production website. Based on the branding shown, the site appears to be attempting to associate itself with the MoonPay name and crypto-payment services, but the hosting pattern and domain structure do not look like a typical official brand domain.
Safety Assessment for moonpay-commerce-git-feat-com2-2321-heliofi.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 13 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, the domain closely resembles a branded crypto-commerce login or onboarding page while being hosted on a third-party subdomain, which may be consistent with look-alike abuse or credential-harvesting attempts. The page design also appears minimal and login-focused, which can be a common pattern in phishing campaigns targeting wallet users or merchant accounts.
The malware scan did not identify flagged files on the page itself, which suggests no obvious malicious payload was detected in the scanned resources at that moment. However, that cleaner result is outweighed by the broader multi-engine phishing consensus. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still adds some caution. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.195 in the United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, expiring in September 2026, which means the connection appears encrypted in transit. The page loads Next.js-style static assets and references external resources from hel.io, along with links to commerce.moonpay.com and other third-party domains.
DNSSEC appears to be unsigned, which is common but provides no additional DNS integrity protection. The main technical concern is not the certificate or hosting stack, but the mismatch between the branded presentation and the unusual Vercel subdomain structure. In combination with the phishing detections, that deployment pattern may warrant extra scrutiny.
Share your experience with this website. Was it safe? Did you encounter any issues?