moonpay-commerce-i8ziskj0g-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-i8ziskj0g-heliofi.vercel.app
This domain appears to present itself as a MoonPay Commerce login or onboarding page related to cryptocurrency payments. The page title and metadata describe a service for accepting crypto payments through pay links, checkout widgets, subscriptions, and deposits, and the screenshot shows a branded sign-in interface asking for an email address or wallet-based sign-in.
Based on the domain structure, this is not hosted on MoonPay's primary domain but on a Vercel subdomain that includes the MoonPay name. The page also references assets from hel.io and mentions MoonPay Commerce branding, which may indicate a third-party deployment, a staging environment, or a page attempting to imitate a financial-services brand. The site would most likely be relevant to cryptocurrency payments, merchant checkout, or account access workflows.
Safety Assessment for moonpay-commerce-i8ziskj0g-heliofi.vercel.app
This website shows multiple risk indicators at the time of this scan. It was flagged by 16 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page also uses branding associated with a known cryptocurrency payments company while operating from a Vercel subdomain rather than an obvious primary corporate domain, which may increase the likelihood of brand imitation or credential-harvesting behavior.
The malware scan did not report confirmed malicious files, but it did assign a generic suspicious heuristic to the domain and several static assets. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting. Although some threat databases were clean at the time of this scan, the broader multi-engine consensus and the page's branding pattern are stronger cautionary indicators.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.67 in the United States. It presents a valid TLS certificate issued by Google Trust Services, with expiry shown in September 2026. The domain uses Vercel nameservers and appears to serve a modern JavaScript application with Next.js-style static asset paths.
The domain is several years old, but it is DNSSEC unsigned, and the use of a hosted subdomain for a financial-branded login page may be a concern from a trust and verification standpoint. No confirmed malware files were identified in the provided scan, but multiple static resources were heuristically flagged, and the stronger concern comes from the phishing classifications rather than the TLS setup itself.
Share your experience with this website. Was it safe? Did you encounter any issues?