moonpay-commerce-git-henryharris-com2-1363-heliofi[.]vercel[.]app

The domain moonpay-commerce-git-henryharris-com2-1363-heliofi.vercel.app is currently flagged as an active generic phishing threat targeting cryptocurrency payment credentials. Analysis indicates the domain impersonates MoonPay Commerce, a legitimate crypto payment gateway, to deceive users into submitting sensitive financial information. Infrastructure analysis reveals the domain resolves to the IP address 216.198.79.67 and is registered through Vercel Inc. As of the latest scan, the domain is detected by 1 of 95 security vendors on VirusTotal, indicating limited but confirmed malicious recognition. The SSL certificate is issued by Google Trust Services, which may lend an appearance of legitimacy to unsuspecting users. No additional blocklist entries or historical abuse reports were identified in available threat intelligence feeds. The domain remains active and poses an elevated risk due to its targeted impersonation of a trusted crypto payment service. Organizations and individuals are advised to block the domain and its resolving IP at the network perimeter. Endpoint protection systems should be updated to include this domain in phishing and credential theft detection rules. Users who may have interacted with the domain should revoke any exposed credentials and monitor associated accounts for unauthorized transactions. Security teams are recommended to review logs for connections to 216.198.79.67 and the domain in question to identify potential compromise.