# emma-coinbase-clone.netlify.app — SUSPICIOUS

> emma-coinbase-clone.netlify.app is a low-risk Coinbase impersonation domain now offline. Avoid interaction and verify official sites for your safety.

## Summary
PhishDestroy identifies emma-coinbase-clone.netlify.app as a low-risk brand impersonation domain targeting Coinbase users. Such domains pose risks by confusing users and potentially capturing sensitive data.

This domain was created on March 9, 2026, registered via Netlify, and flagged on two security blocklists. It currently resolves to IP 63.176.8.218 but is offline and displays a "Site not found" page. VirusTotal flagged 2 out of 95 security vendors, indicating limited but present concerns.

Users are advised not to engage with this domain and to confirm URLs carefully when accessing Coinbase services. Since the site is offline, risk is currently minimal, but continued vigilance is recommended for similar impersonation attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 404)
- Target brand: Coinbase
- Page title: Site not found

## Domain Intelligence
- Registered: 2026-03-09 19:07:02
- Registrar: Netlify
- Country: US
- IP: 63.176.8.218
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd3e3-1adc-703f-b39f-b1669bc4ae14.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/8b723771-8c5a-4696-8940-f53b83118963
- PhishDestroy: https://phishdestroy.io/domain/emma-coinbase-clone.netlify.app/
- LLM endpoint: https://phishdestroy.io/domain/emma-coinbase-clone.netlify.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/emma-coinbase-clone.netlify.app/
Last updated: 2026-03-19