moonpay-commerce-git-fix-com2-2711-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-git-fix-com2-2711-heliofi.vercel.app
This URL appears to present itself as a cryptocurrency payments or checkout page branded as "MoonPay Commerce." The page title, meta description, and visible interface suggest a service for accepting crypto payments, with options such as email entry and wallet sign-in. It is hosted on a Vercel subdomain rather than on the official moonpay.com domain, while also referencing MoonPay-related branding assets and commerce.moonpay.com in its page resources.
Based on the domain structure and page content, this does not appear to be a standard standalone business website. Instead, it may be a hosted deployment or cloned landing page intended to resemble a financial-services login or onboarding portal. The categories assigned by multiple web-classification sources align with phishing and fraud concerns, while one classification source places it in financial services due to the payment-related branding and content.
Safety Assessment for moonpay-commerce-git-fix-com2-2711-heliofi.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. The page also closely imitates MoonPay branding while using a long Vercel-hosted subdomain rather than an official MoonPay web address, which may be consistent with a look-alike login or credential-harvesting setup.
The malware scan did not detect malicious files in the sampled page resources, and major content-malice blocklists listed here were clean at the time of this scan. However, that does not outweigh the broader phishing consensus from multiple security engines. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.131 in the United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, expiring in September 2026. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation.
From the retrieved resources, the page appears to be built with a modern JavaScript framework and loads static assets from both the Vercel deployment and hel.io asset paths. No malicious files or flagged external links were identified in the sampled scan data, but the use of a third-party hosted subdomain for a branded financial login-style page may be a technical and trust concern in this context.
Share your experience with this website. Was it safe? Did you encounter any issues?