moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app favicon

moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app

Category: Phishing

Scanned: Aug 5, 2026, 02:16 PM UTC · First seen: Aug 5, 2026 · Threat Engines: 16 / 91 · Times Scanned: 1
5 / 100 Trust Score Based on scan findings at the time of analysis
Potentially Dangerous
0 - High Risk50 - Moderate100 - No Threats
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Protect yourself from potentially harmful websites
Combo Cleaner's real-time web protection module actively blocks access to scam, phishing & malware-infected websites.
★★★★★ 4.8 / 5 Recommended by PCrisk.com editors Windows · Mac · Android · iOS
Download Combo Cleaner Free scan · no signup

To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Screenshot of moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app Captured Aug 5, 2026
https://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app
Screenshot of moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app
This website has been flagged as potentially harmful
Screenshot blurred for safety. Multiple security engines flagged potential threats at the time of scanning.
6 years 6 months (vercel.app)
Not Ranked - This website does not appear in the Tranco top list
Flagged by 16 of 91 engines
✓ Valid (TLS)
Vercel, Inc
Walnut, United States
Vercel
Next.js
216.198.79.131
Domain & WHOIS Information
Registrar Tucows Domains Inc
Registered January 28, 2020 (vercel.app)
Expires January 28, 2036
Name Servers ns1.vercel-dns-3.com
DNSSEC Unsigned
Hosting Vercel, Inc
This site is hosted on vercel.app - a free hosting platform. The WHOIS data above belongs to the platform, not to moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app. The actual creation date of this subdomain is unknown and could be as recent as today.
Reputation & Threat Check 91 security engines checked
File Scan Summary Powered by Quttera Engine
14 files scanned
No threats
14
Low Risk
0
Medium Risk
0
High Risk
0
No threats Low Risk Medium Risk High Risk
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/# 30.8 KB No threats
telegram.org/js/telegram-widget.js?22 20.0 KB No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/cirJG4RHa351GkwrYLmRo/_buildManifest.js?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 7.4 KB No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/cirJG4RHa351GkwrYLmRo/_ssgManifest.js?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 77 B No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/css/65aa3619a1925c9d.css?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 25.4 KB No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/css/93cbe59a57053a3b.css?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 249.3 KB No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/polyfills-42372ed130431b0a.js?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 110.0 KB No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/c47d579c-4693250ecd233037.js?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 1.8 KB No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/framework-a4c93638ade66cc3.js?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 137.0 KB No threats
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/webpack-9267b2c9e43c93b5.js?dpl=dpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKg 58.2 KB No threats
Show 4 more...
External Links & Domains
32
External Links
13 Flagged
0
Iframes
Clean
5
Referenced Domains
1 Flagged
14
Flagged Resources
Detected
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.appFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/18010-3d63e70ace14a633.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/96164-e59d568f39488e3b.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/c47d579c-4693250ecd233037.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/framework-a4c93638ade66cc3.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/main-cbf4a98431d9dbe2.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/pages/_app-7acf2ef19e3cace3.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/pages/index-4390f4506da976eb.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/polyfills-42372ed130431b0a.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/webpack-9267b2c9e43c93b5.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/cirJG4RHa351GkwrYLmRo/_buildManifest.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/cirJG4RHa351GkwrYLmRo/_ssgManifest.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/css/65aa3619a1925c9d.css?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/css/93cbe59a57053a3b.css?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/18010-3d63e70ace14a633.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/96164-e59d568f39488e3b.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/c47d579c-4693250ecd233037.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/framework-a4c93638ade66cc3.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/main-cbf4a98431d9dbe2.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/pages/_app-7acf2ef19e3cace3.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/pages/index-4390f4506da976eb.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/polyfills-42372ed130431b0a.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/chunks/webpack-9267b2c9e43c93b5.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/cirJG4RHa351GkwrYLmRo/_buildManifest.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/cirJG4RHa351GkwrYLmRo/_ssgManifest.js?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/css/65aa3619a1925c9d.css?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
http://moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app/_next/static/css/93cbe59a57053a3b.css?dpl%3Ddpl_DCcYHyWXrGQCdqvbdSGDnEv6FAKgFlagged: Generic Suspicious Object
https://assets.hel.io/favicon/manifest.json?2025bNot flagged
https://assets.hel.io/favicon/safari-pinned-tab.svg?2025bNot flagged
Show 17 more...
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.appFlagged: Generic Suspicious Object
assets.hel.ioNot flagged
commerce.moonpay.comNot flagged
telegram.orgNot flagged
vercel.liveNot flagged
moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app Overview

Description of moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app

This URL appears to host a web page branded as "MoonPay Commerce," presenting itself as a cryptocurrency payments and checkout service for merchants. The page title and meta description suggest functionality related to accepting crypto payments, pay links, subscriptions, and e-commerce checkout flows. The visible interface is minimal and includes an email entry field, a wallet sign-in option, and links to documentation and policy pages.

Based on the domain structure, this is not hosted on MoonPay's primary corporate domain but on a vercel.app deployment subdomain. It also references assets from hel.io and mentions commerce.moonpay.com among related domains, which may indicate a staging, preview, partner, or imitation deployment. Because the branding closely matches a known crypto payments company while being served from a third-party hosting subdomain, the page may warrant additional scrutiny regarding who operates it and whether it is officially authorized.

Safety Assessment for moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app

Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In addition, one threat-database style listing in the provided blacklist data marked the site, and the domain's IP address is listed on one mail-reputation blocklist. While the malware scan did not identify confirmed malicious files, its generic suspicious-object findings on numerous page resources are lower-confidence indicators and are outweighed here by the broader multi-engine phishing consensus.

The page also uses the branding of a well-known cryptocurrency payments company while being hosted on a long, unusual vercel.app subdomain rather than an obvious primary brand domain. That kind of presentation may resemble a look-alike or unauthorized deployment, especially for a login or wallet-connected page that requests user interaction. The combination of brand-style presentation, phishing-oriented detections, and lack of established traffic ranking increases the likelihood of user risk.

Based on these findings, this website may pose potential risks to visitors at the time of this scan.

Technical Description

The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.131 in Walnut, United States. It presents a valid SSL/TLS certificate issued by Google Trust Services, which means the connection appears encrypted in transit. The domain uses Vercel nameservers and the web assets appear to be delivered through a modern JavaScript application stack, likely Next.js, based on the referenced _next/static resources.

DNSSEC is unsigned, which is common but provides no additional DNS integrity protection. The domain itself is several years old, but this age reflects the vercel.app base domain rather than necessarily the specific project deployment path. From a security perspective, the main concerns are not certificate validity or hosting quality, but the phishing-related detections, brand-style presentation on a hosted subdomain, and the presence of a mail-reputation blocklist hit on the serving IP at the time of the scan.

HTTP Redirect Chain
No redirects detected - direct connection to destination
Website Insights
Not Ranked
Tranco Rank
Not in Top 1M
Visitors Unknown
Category: Phishing
Rank History (30 days)
No rank data available
1 cookie detected
Essential1
Analytics0
Advertising0
Social0
1 1st party cookie
0 3rd party (trackers)
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step…
To submit your dispute for moonpay-commerce-git-remove-withdraw-feature-flag-heliofi.vercel.app, please click the verification link we just emailed you. Once verified, we'll review it within 1-2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?