# 695274coinbase.com — SUSPICIOUS

> 695274coinbase.com is under investigation for phishing. Learn key details and stay protected from this suspicious crypto-related domain.

## Summary
PhishDestroy has identified 695274coinbase.com as a potentially malicious domain involved in generic phishing activities. Although it is not yet conclusively classified, the domain’s name mimics a well-known cryptocurrency platform, raising suspicion for credential theft or fraud attempts targeting unsuspecting users.

From a technical perspective, 695274coinbase.com resolves to the IP address 172.67.198.202 and was registered on March 6, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. Despite extensive scanning by VirusTotal yielding zero detections, the domain’s recent creation date combined with its registrar and naming pattern suggests it could be part of a phishing campaign. The domain has not been flagged by any security vendors yet, but its infrastructure is actively monitored.

Currently, 695274coinbase.com remains active and under investigation by PhishDestroy analysts. Users and organizations are advised to exercise caution when encountering this domain or related links. Continuous monitoring and further intelligence gathering are underway to determine the full extent of its threat, with updates to follow as new evidence emerges.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Target brand: Coinbase
- Page title: Coinbase Help

## Domain Intelligence
- Registered: 2026-03-08 13:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.198.202
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["mack.ns.cloudflare.com", "meiling.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ccd4c-5342-762c-8e00-9ac3421c2076.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/71ddca87-b626-4639-b966-21f8a5195a77
- Wayback Machine: https://web.archive.org/web/https://695274coinbase.com
- PhishDestroy: https://phishdestroy.io/domain/695274coinbase.com/
- LLM endpoint: https://phishdestroy.io/domain/695274coinbase.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/695274coinbase.com/
Last updated: 2026-03-19