base-verify-onchain-demo[.]vercel[.]app

base-verify-onchain-demo.vercel.app is a tenant hostname on Vercel, not a separately registered domain. PhishDestroy first observed the hostname on Jul 28, 2026. The hostname explicitly references Base and uses “verify,” a pattern consistent with a account-verification lure; stored content metadata identifies the same apparent target. The captured page title is “Base Verify Onchain Demo”. Stored page analysis classifies the content as impersonation. Current evidence score: 93/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, MetaMask, SEAL, and Google Safe Browsing. On Aug 12, 2026 at 04:34 UTC, VirusTotal recorded 8 detections among 91 engines: alphaMountain.ai, BitDefender, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safe Browsing, Kaspersky, Sophos; Google Safe Browsing flagged the domain: Social Engineering. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 23, 2026 at 18:20 UTC.

The collector marked the hostname reachable on Aug 21, 2026 at 10:01 UTC, but did not retain the HTTP response code. Vercel is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 216.198.79.67 on AS16509 (Amazon.com, Inc.). The IP and ASN identify shared Vercel infrastructure, not the tenant operator. The platform TLS certificate was issued by Google Trust Services with validity through Sep 26, 2026; checked Aug 10, 2026 at 13:02 UTC.

The content indicators and 4 positive source findings support the current Base-themed account-verification phishing classification.