Public Cyber-Forensic Domain Advisory | LB-2026-821D486A
LB
Liberty Board // White Hat Anti-Fraud & Malware Detection Unit
Public Domain Warning & Evidence Verification
Submit Evidence / Tip
SECURITY WARNING Ref: LB-2026-821D486A
Status: Offline / Suspended

Warning regarding firstgoldshop.com

The domain firstgoldshop.com (including URLs starting with https://firstgoldshop.com and https://www.firstgoldshop.com) is documented in the Liberty Board White Hat cyber-forensics registry under reference LB-2026-821D486A due to verified indicators of Fraudulent Precious Metals & E-Commerce Shop (Advance-Payment Fraud).

Affected URLs & Hostnames (Do not visit or enter credentials)
https://firstgoldshop.com/
https://www.firstgoldshop.com/
http://firstgoldshop.com/
firstgoldshop.com

Technical & Forensic Case Data

Public Case Reference
LB-2026-821D486A
Classification / Offense
Fraudulent Precious Metals & E-Commerce Shop (Advance-Payment Fraud)
Identified Domain Registrar
ICANN Accredited Registrar // clientHold
Hosting / Network Infrastructure
Hosting Access Disabled (Abuse Deactivation)
Primary Evidence SHA-256
821d486a423ea74ac12a7449e46cba1afd23b0f642528e81c861d787e8850a23
First Documented / Status
2026-10-28 19:30:00 UTC • OFFLINE / SUSPENDED (Takedown Successful)

Forensic Risk Indicators

  • Forensic evidence preservation completed (SHA-256: 821d486a423ea74ac12a7449...)
  • Infrastructure status verified: Hosting Access Disabled (Abuse Deactivation) (ICANN Accredited Registrar // clientHold)
  • Unlicensed financial / investment offering operating without regulatory authorization (Art. 16 EU-DSA)

What to do if you interacted with firstgoldshop.com

1. Stop all payments Do not pay alleged taxes, release fees or liquidity deposits. Contact your bank immediately to request a fraud recall.
2. Cut remote access Uninstall AnyDesk, TeamViewer or RustDesk immediately and change your online banking and email passwords.
3. Report to police & Liberty Board File a report with law enforcement referencing LB-2026-821D486A and submit additional URLs or IBANs via our reporting form.