base-checklist[.]vercel[.]app

base-checklist.vercel.app is a phishing domain that currently evades detection by antivirus vendors, with 0 out of 91 VirusTotal detections. This domain exploits the critical 24-72 hour window between registration and antivirus database updates, allowing it to operate under the radar. PhishDestroy's early detection pipeline identifies such threats before they propagate to broader AV feeds.

The domain is registered with Vercel Inc. and hosted on an Amazon.com, Inc. IP address in the United States. Despite its active status, the site employs cloaking techniques, serving benign content to scanners to avoid immediate suspicion. This tactic is reflected in its low cloaking score of 1 out of 10, indicating a sophisticated approach to evading detection.

Public blocklists, including PhishDestroy, MetaMask, and SEAL, have flagged this domain, highlighting its potential threat. The SSL certificate is issued by Google Trust Services, adding a layer of legitimacy to deceive potential victims. The page title, 'Base Checklist,' suggests a generic phishing operation, likely targeting users with a checklist or task-oriented lure. PhishDestroy first identified this domain on June 22, 2026, emphasizing the importance of early threat intelligence in combating such emerging threats.