SECURITY WARNING
Ref: LB-2026-D7FD3183
Status: Offline / Suspended
Warning regarding aqrinc.net
The domain aqrinc.net (including URLs starting with https://aqrinc.net and https://www.aqrinc.net) is documented in the Liberty Board White Hat cyber-forensics registry under reference LB-2026-D7FD3183 due to verified indicators of Corporate Identity Cloning & Brand Impersonation (§ 12 BGB).
Affected URLs & Hostnames (Do not visit or enter credentials)
https://aqrinc.net/
https://www.aqrinc.net/
http://aqrinc.net/
aqrinc.net
Identity & Brand Abuse Notice: This domain unlawfully misuses the name or regulatory identity of AQR Capital Management. The legitimate organisation has no connection to
aqrinc.net.
Technical & Forensic Case Data
Public Case Reference
LB-2026-D7FD3183
Classification / Offense
Corporate Identity Cloning & Brand Impersonation (§ 12 BGB)
Identified Domain Registrar
ICANN Accredited Registrar // clientHold
Hosting / Network Infrastructure
DNS Zone Terminated (NXDOMAIN / clientHold)
Primary Evidence SHA-256
d7fd318367d3e827c554fb5b7708a5bbae357eed7e790849d95d4e6cdf11c17b
First Documented / Status
2026-10-28 19:30:00 UTC • OFFLINE / SUSPENDED (Takedown Successful)
Forensic Risk Indicators
- Forensic evidence preservation completed (SHA-256: d7fd318367d3e827c554fb5b...)
- Infrastructure status verified: DNS Zone Terminated (NXDOMAIN / clientHold) (ICANN Accredited Registrar // clientHold)
- Unlicensed financial / investment offering operating without regulatory authorization (Art. 16 EU-DSA)
- Unlawful impersonation of the protected corporate identity 'AQR Capital Management' (§ 12 BGB)
What to do if you interacted with aqrinc.net
1. Stop all payments
Do not pay alleged taxes, release fees or liquidity deposits. Contact your bank immediately to request a fraud recall.
2. Cut remote access
Uninstall AnyDesk, TeamViewer or RustDesk immediately and change your online banking and email passwords.
3. Report to police & Liberty Board
File a report with law enforcement referencing LB-2026-D7FD3183 and submit additional URLs or IBANs via our reporting form.