base-checker-vercel[.]info

The domain base-checker-vercel.info is currently active and classified as a high-risk brand impersonation threat. Analysis confirms it mimics Google, using an identical page title to deceive users into believing they are interacting with legitimate Google services. This domain is part of a broader pattern of fraudulent infrastructure designed to exploit trust in widely recognized brands for malicious purposes. Technical indicators reveal the domain was registered on May 27, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, an entity frequently associated with abusive registrations. It resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.), a network commonly leveraged to obscure malicious activity. VirusTotal detection metrics show 18 of 95 security vendors flagging the domain as malicious, while it appears on three distinct security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt (serial number E7), a detail that does not mitigate the domain's fraudulent nature. Infrastructure analysis further indicates the domain's creation date is anomalous, suggesting potential typosquatting or preemptive registration for future abuse. Current status remains active, with no evidence of takedown or mitigation. Organizations and users are advised to block this domain at the DNS or proxy level, update endpoint protection rules to include its IP and associated indicators, and monitor for related infrastructure patterns. Given the domain's impersonation of Google and its presence on multiple blocklists, it poses a significant risk for credential theft, malware distribution, or social engineering attacks. Network defenders should treat any interaction with this domain as malicious and investigate potential exposure within their environments.