moonpay-commerce-odmpgxbzz-heliofi[.]vercel[.]app

The domain moonpay-commerce-odmpgxbzz-heliofi.vercel.app was registered on July 04, 2026 through Vercel Inc. and resolves to IP 216.198.79.67, which is geolocated to the United States and listed as owned by Cypress Communications, LLC. The site presents a valid SSL certificate issued by Google Trust Services under the WR1 profile and enforces HTTP Strict Transport Security, indicating a typical Vercel deployment. The page title reads "MoonPay Commerce | Sell more with crypto ⚡️," and the threat is classified as a crypto‑related generic phishing campaign. Infrastructure analysis shows a Gridinsoft trust score of 0/100 and a single detection out of 91 vendors on VirusTotal, while the domain is already blocked by PhishDestroy, MetaMask, and SEAL and appears on three additional security blocklists. The risk rating is high and the site remains active with an HTTP 200 response. Defenders should immediately add the domain and its resolved IP address to outbound and inbound deny lists, monitor for additional subdomains or similarly structured Vercel‑hosted URLs, and consider sinkholing the IP if possible. Continuous surveillance of Cypress Communications‑owned assets is advised, as the rapid creation date and low trust score suggest a short‑lived malicious infrastructure that may spawn further phishing variants.