base-checklist[.]vercel[.]app

base-checklist.vercel.app is a tenant hostname on Vercel, not a separately registered domain. PhishDestroy first observed the hostname on Jun 22, 2026. The hostname explicitly references Base; stored content metadata identifies the same apparent target. The captured page title is “Base Checklist”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 90/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 1 detections among 91 engines: alphaMountain.ai on Jul 26, 2026 at 02:34 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 10:20 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Jun 22, 2026 at 15:30 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:33 UTC.

Cloaking was recorded with HTTP 200 on Aug 8, 2026 at 10:00 UTC. The cloaking probe recorded content split conditional delivery at 1/100 on Aug 8, 2026 at 10:00 UTC: alive_content: raw=ok; http=200; via=https_proxy; server=Vercel. Vercel is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 64.29.17.131 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The IP and ASN identify shared Vercel infrastructure, not the tenant operator. DOM analysis on Jun 22, 2026 at 18:20 UTC returned 90/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by Google Trust Services / WR1 with validity through Jul 27, 2026; checked Jun 22, 2026 at 16:00 UTC.

The content indicators and 3 positive source findings support the current Base-themed brand impersonation classification.