# bnbtigerswap.finance — SUSPICIOUS

> bnbtigerswap.finance is linked to phishing activity and blocked by multiple security lists. Stay vigilant and avoid this domain now.

## Summary
PhishDestroy has identified bnbtigerswap.finance as a medium-risk phishing domain. This site was designed to deceive users by mimicking legitimate financial services, aiming to harvest sensitive information. The domain's creation in early 2026 suggests it is part of recent malicious campaigns targeting crypto or finance users.

Technical analysis reveals that bnbtigerswap.finance was registered through a defunct registrar, which often indicates fraudulent intent. The domain appeared on several security blocklists and was flagged by multiple antivirus engines, confirming its suspicious nature. Despite limited detection coverage, these indicators point to a clear phishing threat.

Currently, the domain is offline and inaccessible, reducing immediate risk. However, users should remain cautious as similar domains may emerge. It is recommended to avoid interacting with this domain and report any suspicious activity linked to it. Regularly updating security defenses will help prevent exposure to such phishing attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: 403 Forbidden

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NameCheap, Inc.
- Country: US
- IP: 172.67.211.235
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["derek.ns.cloudflare.com", "arushi.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["G-Data", "Gridinsoft", "Netcraft"]
- Google Safe Browsing: clean
- Blocklists: 5 hits
  Lists: ["PhishDestroy", "ScamSniffer", "Polkadot", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019885c3-207b-72dd-b01c-a45c151a95ab.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1cd59c22-b8b3-4337-9b84-dc4becd599ad
- PhishDestroy: https://phishdestroy.io/domain/bnbtigerswap.finance/
- LLM endpoint: https://phishdestroy.io/domain/bnbtigerswap.finance/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bnbtigerswap.finance/
Last updated: 2026-03-19