ScanMalware.com

Security Scan Report: www.moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app

Redirected to:
https://moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/31979dbe-af98-4c52-80a5-6844fa4f6d94Domain and IP registration (RDAP)/api/v1/rdap/31979dbe-af98-4c52-80a5-6844fa4f6d94How often this domain was scanned/api/v1/domain/stats/moonpay-commerce-git-fix-com2-4528-heliofi.vercel.appScan history for this domain/api/v1/domain/history/moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app?limit=15
This website contacted 24 IPs in 2 countries across 15 domains to perform 45 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://www.moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/

Effective URL:
https://moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/
Redirected

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Unverifiable 'MoonPay Commerce' branding on a shared Vercel preview subdomain. No forms, no credential/payment capture, no malware or Indicators of Compromise; likely a developer deployment, but confirm the domain before signing in.

Risk Factors (3)
Brand of a different entity ('MoonPay Commerce') presented on a shared vercel.app preview subdomain, not on an official MoonPay domain — brand claim is unverifiable from the page itself
Subdomain on a free publishing platform: actual creation date unknown and not attributable to the platform's 2020 registration; the deployment could be minutes old
No About/contact/company-identity content to corroborate that the operator is MoonPay/Helio
Safety Factors (6)
No credential, login or payment form of any kind (0 forms, 0 password fields, 0 payment fields)
No Indicators of Compromise, no JavaScript YARA malware matches, no known malicious kit in the roster
No cross-origin credential exfiltration detected; only a single low-sensitivity cross-origin script host (vercel.live)
Page loads genuine Helio payment APIs (hel.io), consistent with the Helio → MoonPay Commerce product
Meta tags/content are internally consistent and contain no deceptive redirects or urgency lures
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

MoonPay Commerce | Sell more with crypto ⚡️

Scan Type

public

Domain Name Analysis

The domain 'www.moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'www.moonpay-commerce-git-fix-com2-4528-heliofi'. The core label 'vercel' covers 6 characters split between two vowels and 4 consonants. Splitting it apart reveals two words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/

Page Load Overview

14.92s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:176 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
51%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1143.204.181.13Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
164.239.109.193Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
134.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
154.170.198.134Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
1172.66.144.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
144.193.132.98Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
165.9.130.8Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4524--

Detected Technologies1

Open-Graph-Protocolvwebsite
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F434FE5C2118EA96C2B4B6C9655B4E5DF0B71FB9BB88CC5BECC810446434F49CE6FA0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:0zF5Qc6k2983/xqk1YZsiCVL3Mru9KTYibsTwQQR00VtFo:D98dLVKhskO0VtFo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59742:UkrMLIFdU1IBQwPSQCDJltAoEAKEIB8UBMkURoEAAUCPCxf5AQAVUORQ8lryAkoCkEoCJBMkUAQAmF0CO6SkiIQkBAFgAiAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffcfc7ff7f3f3e
Perceptual Hash:80ff07ce353098cf
Difference Hash:3000189c8ca0d0cc
Wavelet Hash:9efece4640383e02
Color Hash:#785b3a

Other Hashes

Crop Resistant:3000189c8ca0d0cc

Scan History

Scan history not available

Unable to load historical scan data