coinbbaseexteension[.]gitbook[.]io

The domain coinbbaseexteension.gitbook.io has been identified as a confirmed brand impersonation site targeting Base, a cryptocurrency platform. Analysis indicates this infrastructure was designed to deceive users by mimicking legitimate Base services, likely for credential harvesting or cryptocurrency theft. The domain is currently offline, though prior activity suggests malicious intent. Infrastructure analysis reveals the domain was registered through GitBook and flagged by 10 of 95 security vendors on VirusTotal. It appears on three security blocklists and was created on May 25, 2026. No associated IP addresses or hosting providers beyond GitBook’s platform were identified in available telemetry. The domain’s detection rate and blocklist presence align with known patterns of brand impersonation campaigns targeting cryptocurrency users. Current status indicates the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to block this domain at the network level and review logs for prior connections. Users should verify the authenticity of any cryptocurrency-related service before engaging, particularly those hosted on third-party documentation platforms. Monitoring for similar impersonation domains targeting Base or other cryptocurrency brands is recommended.