ScanMalware.com

Security Scan Report: moonpay-commerce-868w0wpy4-heliofi.vercel.app

Redirected to:
https://moonpay-commerce-868w0wpy4-heliofi.vercel.app/
Site favicon
Submitted: Sep 29, 2026, 12:45:04 PMCompleted: Sep 29, 2026, 12:45:54 PMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7247af1f-b28f-404c-8c77-baacf364c5d7Domain and IP registration (RDAP)/api/v1/rdap/7247af1f-b28f-404c-8c77-baacf364c5d7Certificate Transparency/api/v1/ct/moonpay-commerce-868w0wpy4-heliofi.vercel.appHow often this domain was scanned/api/v1/domain/stats/moonpay-commerce-868w0wpy4-heliofi.vercel.appScan history for this domain/api/v1/domain/history/moonpay-commerce-868w0wpy4-heliofi.vercel.app?limit=15

This website contacted 26 IPs in 2 countries across 14 domains to perform 54 HTTP transactions. The main domain is moonpay-commerce-868w0wpy4-heliofi.vercel.app and was registered 3 years 10 months ago.

Submitted URL: http://moonpay-commerce-868w0wpy4-heliofi.vercel.app/

Effective URL:

https://moonpay-commerce-868w0wpy4-heliofi.vercel.app/
Redirected

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Brand claims on a shared Vercel deploy subdomain with no forms, no malware, and no threat-intel hit. Likely a Helio/MoonPay Commerce preview deploy, but authenticity can't be verified - use caution.

Risk Factors (3)
Brand name (MoonPay Commerce) displayed on a non-official vercel.app subdomain rather than moonpay.com
Hosted on a free/shared deployment platform where the subdomain's true age and publisher identity cannot be verified
Generic MITRE 'commonly abused cloud hosting service' (vercel.app) Suricata alerts associated with the deployment
Safety Factors (6)
No credential, login, or payment form present (0 forms, 0 password/payment fields)
No Indicators of Compromise, no YARA malware patterns, no known phishing kit, no Safe Browsing hit
Only external interactions are standard web3/wallet-auth and support SDKs (WalletConnect, Web3Auth, Intercom, Sentry, Google Fonts)
'Sign in with wallet' is wallet-based authentication, not a password/credential capture form
Content and backend references (hel.io) align with the genuine MoonPay Commerce / Helio product
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

MoonPay Commerce | Sell more with crypto ⚡️

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'moonpay-commerce-868w0wpy4-heliofi.vercel.app' is registered; it also runs on subdomain 'moonpay-commerce-868w0wpy4-heliofi'. Count 6 characters in 'vercel' with 2 vowels and 4 consonants. Breaking it apart gives two words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://moonpay-commerce-868w0wpy4-heliofi.vercel.app/

Page Load Overview

13.18s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:176 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
51%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2143.204.181.76Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2192.178.170.95Google · CDNUnited States
AS15169Google LLC
264.239.123.129Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
234.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
234.247.145.16Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
2104.20.16.230Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
252.201.71.106Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
265.9.130.8Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23.174.46.20Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5426--

Detected Technologies1

Open-Graph-Protocolvwebsite
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B34340E5D2118EA96D2B4B6C9655B4E5DF0B71FB9BB88CC5BECC800446034F49CE6FA0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:0zF5Qc7jwfyn3/xqk1YZsiCVL3Mru9KTYibsTwQQR00VtFo:NyndLVKhskO0VtFo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59734:EIAdACBkABiYUICwoCDeOWIpAgCcwSIUh0C3lGKkSAgRIFnxLAATQxgQIoCAhBWggksAlwOEszAAIyBQSAG4MKGS4UFAHHHM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffcfc7ff7f3f3e
Perceptual Hash:80ff07ce353098cf
Difference Hash:3000189c8ca0d0cc
Wavelet Hash:9efece4640383e02
Color Hash:#ac539c

Other Hashes

Crop Resistant:3000189c8ca0d0cc

Scan History

Scan history not available

Unable to load historical scan data