moonpay-commerce-git-henryharris-com2-2757-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-git-henryharris-com2-2757-heliofi.vercel.app
This website appears to present itself as a MoonPay Commerce login or onboarding page related to cryptocurrency payments. The page title and visible branding reference "MoonPay Commerce," and the metadata describes services such as crypto checkout widgets, pay links, subscriptions, and instant deposits. The page layout shown in the screenshot is minimal, with an email entry field and a wallet sign-in option, suggesting a portal intended for account access or merchant onboarding rather than a full informational website.
Based on the domain structure, however, this page is hosted on a Vercel subdomain rather than on MoonPay's primary branded domain. The scanned page also references assets associated with hel.io and includes a link reference to commerce.moonpay.com, which may indicate an attempt to imitate or mirror a legitimate financial-services brand experience. In practical terms, the site appears to target users interested in crypto payment processing or merchant commerce tools.
Safety Assessment for moonpay-commerce-git-henryharris-com2-2757-heliofi.vercel.app
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. Although the malware scan did not detect malicious files in the page resources that were checked, phishing pages often rely on deceptive branding and credential collection rather than downloadable malware, so a clean file scan does not materially offset the broader reputation findings.
The domain name itself closely aligns with MoonPay branding while using a long third-party hosting subdomain, which may be consistent with a look-alike or impersonation setup. The screenshot shows MoonPay Commerce branding and a sign-in flow, which could increase the risk of credential harvesting if visitors assume it is an official login page. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting.
Taken together, the combination of multi-engine phishing detections, financial-services branding, and the use of a non-primary branded host suggests this website may pose potential risks to visitors at the time of this scan. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.195 in the United States. It uses a valid SSL/TLS certificate issued by Google Trust Services, with an expiry date of 2026-09-26, which indicates that encrypted HTTPS connections appear to be supported. The domain uses Vercel nameservers and the web content appears to be delivered as a modern JavaScript application with Next.js-style static asset paths.
DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from DNSSEC validation. No malicious files, flagged external links, or iframe-based threats were identified in the page resources that were scanned. The main technical concern is not the TLS setup but the apparent mismatch between the branded financial-service presentation and the third-party hosted subdomain, alongside the reputation-based phishing detections.
Share your experience with this website. Was it safe? Did you encounter any issues?