moonpay-commerce-git-fix-com2-2803-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-git-fix-com2-2803-heliofi.vercel.app
This URL appears to host a web page branded as "MoonPay Commerce," presenting itself as a cryptocurrency payments or checkout service for merchants. The page title and meta description suggest a platform for accepting crypto payments, creating pay links, and using checkout widgets for e-commerce, subscriptions, and deposits. The screenshot shows a minimalist landing page with an email entry field, wallet sign-in option, and links to documentation and social platforms.
Based on the hostname structure, this is not the primary MoonPay domain but a deployment on a Vercel subdomain. The page references domains associated with MoonPay Commerce and Helio-related assets, which may indicate an attempt to mirror or imitate a legitimate crypto-payment brand experience. The site appears to target users interested in financial services or cryptocurrency commerce rather than functioning as a general-content website.
Safety Assessment for moonpay-commerce-git-fix-com2-2803-heliofi.vercel.app
Multiple security signals raise concern about this page at the time of the scan. It was flagged by 15 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related content. The domain name itself also closely resembles a branded financial-service offering while being hosted on a third-party subdomain rather than an obvious primary corporate domain, which may indicate a look-alike page intended to collect user credentials or wallet access.
At the same time, the malware scan did not detect malicious files on the page itself, and major content-malware and phishing blocklists listed in the scan were otherwise clean at the time of review. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still worth noting. Given the strong multi-engine phishing consensus, the financial-services theme, and the brand-like presentation on a non-primary domain, based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.195 in the United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, with an expiry date in September 2026. The page appears to be built with a modern JavaScript framework, likely Next.js, based on the referenced static asset paths.
DNSSEC is unsigned, which is common but means DNS responses do not appear to have that additional integrity protection. No malicious files were flagged in the page scan, but the broader reputation data is unfavorable, and the use of a branded financial-services presentation on a hosted subdomain rather than a clearly official root domain may be a technical and trust concern.
Share your experience with this website. Was it safe? Did you encounter any issues?