moonpay-commerce-nh8cagtat-heliofi.vercel.app

Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 20 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a strong content-risk indicator. The domain’s IP address is also listed on one mail-reputation blocklist; that signal is weaker than phishing detections, but it adds a small amount of additional caution.

The page visually imitates a cryptocurrency commerce login or onboarding experience and uses branding associated with a well-known payment company, while being hosted on a third-party subdomain rather than a clearly official primary domain. That combination can be consistent with credential-harvesting or brand-impersonation campaigns, especially when paired with broad multi-engine phishing detections. Although the malware file scan did not detect malicious files at the time of analysis, phishing pages often rely on deceptive content rather than downloadable malware.

Based on these findings, this website may pose potential risks to visitors.