Blocklist removal request: base-proof.vercel.app

Nobody has claimed this yet.

### Legitimate domains, IPs, IPFS hashes, or IPNS names

https://base-proof.vercel.app/

### Please explain why this content is legitimate

Hello MetaMask security / eth-phishing-detect maintainers,

I am requesting a false-positive review for **base-proof.vercel.app**.

The site is the public demo for the open-source **Base Proof** project:

- Source code: https://github.com/huklaa/base-proof
- Network: Base Sepolia (chain ID 84532)
- V1 registry: https://sepolia.basescan.org/address/0x0329a4ED3e098EE7bb5AbEda6f509dE41F9cfC10
- V2 registry: https://sepolia.basescan.org/address/0x1a6F58F1c98f2FCA265D3B3A0Fb3FD74273765De
- V2 deployment transaction: https://sepolia.basescan.org/tx/0xa72c71848f700516cfbddeab842fd24decab13d1562fd50bcce8e4e7f2ecab5a

The application analyzes **public GitHub pull-request data**, computes deterministic evidence hashes, and lets users read or register proof records on Base Sepolia. V2 also supports opening and resolving proof challenges.

Security properties of the current demo:

- It does **not** ask for a seed phrase, recovery phrase, private key, wallet password, or credentials.
- No private key is embedded in the public frontend.
- Public proof inspection is read-only and requires no wallet.
- Wallet connection is used only for explicit Base Sepolia write operations.
- The contracts and frontend are fully open source.
- The demo uses testnet only; it does not request mainnet token transfers or token approvals.
- There are no ERC-20 approvals, `setApprovalForAll`, token claims, airdrops, or asset-draining flows in the current UI.

MetaMask Mobile currently displays a **"This website may be harmful" / malicious-site warning** when the site is opened through the wallet-connect flow.

I also searched the current `MetaMask/eth-phishing-detect` repository for `base-proof.vercel.app` and found no direct match, so this may be a classification coming from another threat-intelligence source used by MetaMask.

Please review the domain and remove/override the malicious classification if confirmed to be a false positive.

Thank you.

### Is this a duplicate request?

I searched the issue tracker for `base-proof.vercel.app` and did not find an existing request.

Start by reviewing the linked Base Proof source code, public demo, and Base Sepolia registry deployments. Verify the stated wallet, credential, and transaction behavior, then determine whether the malicious-site classification is a false positive; done means recording the review outcome and removing or overriding the classification if confirmed.

Written by the indexing model from the issue text.