ScanMalware.com

Security Scan Report: moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app

Redirected to:
https://moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ece3f194-472e-4de3-8d63-fdacf0d14790Domain and IP registration (RDAP)/api/v1/rdap/ece3f194-472e-4de3-8d63-fdacf0d14790How often this domain was scanned/api/v1/domain/stats/moonpay-commerce-git-fix-com2-4528-heliofi.vercel.appScan history for this domain/api/v1/domain/history/moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app?limit=15
This website contacted 24 IPs in 2 countries across 14 domains to perform 45 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/

Effective URL:
https://moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/
Redirected

AI Security Verdict

Low Risk

Confidence: 55%

3
Risk Score

Vercel preview subdomain carrying MoonPay Commerce branding on a non-MoonPay domain, but it has no forms, no credential/payment capture, no wallet-drain behavior, and no threat-intel or malware hits; weak-prior + brand-on-mismatched-host only, so moderate.

Risk Factors (4)
Hosting-platform preview subdomain with a git branch-style name; creation date unknown and apex age is not attributable to this page
Claims a third-party brand (MoonPay Commerce) on a non-brand domain (vercel.app)
Domain is unranked / has no reputation in Cisco Umbrella
Generic IDS tags noting the abused cloud-hosting service (vercel.app) in DNS and TLS SNI
Safety Factors (6)
No forms at all — no password, credential, or payment fields (verified from captured DOM)
Sign-in is wallet-based (web3), not a credential-harvesting login form
No Indicators of Compromise, no YARA malware patterns, no known malicious kit
No cross-origin credential exfiltration detected
Backend resources point to Helio/MoonPay domain infrastructure, consistent with a real product deployment
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

MoonPay Commerce | Sell more with crypto ⚡️

Scan Type

public

Domain Name Analysis

Domain 'moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'moonpay-commerce-git-fix-com2-4528-heliofi'. The second-level label 'vercel' is 6 characters long with 2 vowels and 4 consonants. Splitting it apart reveals two words: ver, cel. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://moonpay-commerce-git-fix-com2-4528-heliofi.vercel.app/

Page Load Overview

11.75s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:176 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain51% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
51%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1143.204.181.76Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
164.239.109.193Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
134.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
134.247.145.16Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
1104.20.16.230Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
144.193.132.98Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
165.9.130.19Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.92Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4524--

Detected Technologies1

Open-Graph-Protocolvwebsite
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F434FE5C2118EA96C2B4B6C9655B4E5DF0B71FB9BB88CC5BECC810446434F49CE6FA0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:0zF5Qc6k2983/xqk1YZsiCVL3Mru9KTYibsTwQQR00VtFo:D98dLVKhskO0VtFo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:59742:UkrMLIFdU1IBQwPSQCDJltAoEAKEIB8UBMkURoEAAUCPCxf5AQAVUORQ8lryAkoCkEoCJBMkUAQAmF0CO6SkiIQkBAFgAiAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bfffcfc7ff7f3f3e
Perceptual Hash:80ff07ce353098cf
Difference Hash:3000189c8ca0d0cc
Wavelet Hash:9efece4640383e02
Color Hash:#b6c587

Other Hashes

Crop Resistant:3000189c8ca0d0cc

Scan History

Scan history not available

Unable to load historical scan data