moonpay-commerce-o8bjttdzi-heliofi.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of moonpay-commerce-o8bjttdzi-heliofi.vercel.app
This domain appears to present itself as a cryptocurrency payments and commerce portal branded as “MoonPay Commerce.” Based on the page title, meta description, and visible interface, it claims to help merchants accept crypto payments through pay links, checkout widgets, subscriptions, and related e-commerce features. The page includes an email entry field, a wallet sign-in option, and links to documentation and social channels, which suggests it is designed to collect user credentials or initiate account access flows.
However, the scanned hostname is a subdomain on vercel.app rather than the better-known moonpay.com domain referenced in the page assets and linked domains. That mismatch may indicate the page is imitating a legitimate financial-services brand rather than operating as an official MoonPay property. Based on the available content and classifications, this site appears to fit within the cryptocurrency or financial-services space, but it may be doing so in a deceptive way.
Safety Assessment for moonpay-commerce-o8bjttdzi-heliofi.vercel.app
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 19 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, a major threat database listed the URL for social-engineering activity, which is a strong content-risk signal. Although one malware scan reported no confirmed malicious files, its generic heuristic also marked the domain and several static resources as suspicious; on its own that heuristic would be low confidence, but here it is reinforced by broader multi-engine phishing detections.
The page also appears to mimic the branding of MoonPay while being hosted on a vercel.app subdomain rather than an official moonpay.com property. That resemblance may indicate a look-alike login or credential-harvesting page, especially given the financial-services theme and the sign-in prompts shown on the landing page. The domain's IP address is also listed on one mail-reputation blocklist, though that signal is weaker than the phishing and social-engineering detections and may reflect shared infrastructure rather than website content.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.131 in the United States. It presents a valid TLS certificate issued by Google Trust Services, with expiry in September 2026. The domain uses Vercel nameservers and appears to serve a modern JavaScript application with Next.js-style static assets. DNSSEC is not enabled, as the domain is unsigned.
From a security perspective, the presence of valid HTTPS should not be treated as proof of legitimacy, since phishing pages commonly use properly issued certificates as well. The main technical concern here is not TLS configuration but the combination of brand-style presentation, hosting on a third-party app subdomain, and the substantial number of phishing-related detections at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?