moonpay-commerce-git-henryharris-com2-2779-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-git-henryharris-com2-2779-heliofi.vercel.app
This domain hosts a page branded as "MoonPay Commerce" and presents itself as a cryptocurrency payments or checkout service. The page title and meta description suggest functionality related to accepting crypto payments, pay links, checkout widgets, subscriptions, and merchant deposits. The visible interface includes an email entry field and a wallet sign-in option, which indicates it is likely intended to collect login or onboarding details for a financial-style service.
Based on the domain structure, this does not appear to be the primary official MoonPay domain. Instead, it is a long subdomain hosted on vercel.app, which is commonly used for deployed web applications and previews. The page also references assets associated with MoonPay branding and commerce.moonpay.com, so it appears to imitate or mirror a legitimate crypto-commerce brand experience rather than operate from the brand's main web property.
The site would most likely be categorized as a cryptocurrency or financial-services themed web page. However, because it uses branding associated with a known payment platform while operating from an unrelated hosted subdomain, its purpose may be promotional, deceptive, or credential-focused rather than a standard public corporate website.
Safety Assessment for moonpay-commerce-git-henryharris-com2-2779-heliofi.vercel.app
Multiple independent security signals raise concern about this page at the time of this scan. It was flagged by 16 out of 91 security engines, with many of those detections describing phishing or fraud-related behavior. In addition, several web-classification providers categorized the domain as phishing or financial fraud, while the page itself presents a login-style interface for a crypto payment brand on a third-party hosting subdomain rather than on the brand's primary domain.
The domain name and page presentation also resemble a look-alike of MoonPay's legitimate commerce service. Although the page uses convincing branding and references related assets, the hosted address is an unusually long vercel.app subdomain rather than an expected official brand domain, which may indicate an impersonation attempt. The malware scan did not report infected files, but its generic suspicious-object findings on multiple page resources do not offset the broader phishing consensus.
Blacklist data was mixed at the time of this scan: major content-malice databases were largely clean, but one threat database listing and one mail-reputation blocklist entry were present. A mail-reputation listing alone is a weaker signal, but in this case it appears alongside substantial phishing detections from security engines. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.131 in the United States. It uses a valid TLS certificate issued by Google Trust Services, with expiry in September 2026. The page appears to be built with a modern JavaScript framework, likely Next.js, based on the referenced _next/static assets.
From a domain-security perspective, DNSSEC is not enabled, and the site operates from a hosted vercel.app subdomain rather than a dedicated brand-owned domain. While valid HTTPS helps protect transport encryption, it does not verify business legitimacy. In this case, the combination of third-party hosting, brand-style presentation, and phishing-related detections may be more relevant than the presence of SSL alone.
Share your experience with this website. Was it safe? Did you encounter any issues?