Public Cyber-Forensic Domain Advisory | LB-2026-6996A67A
LB
Liberty Board // White Hat Anti-Fraud & Malware Detection Unit
Public Domain Warning & Evidence Verification
Submit Evidence / Tip
SECURITY WARNING Ref: LB-2026-6996A67A
Status: Offline / Suspended

Warning regarding kofaxstoreshop.com

The domain kofaxstoreshop.com (including URLs starting with https://kofaxstoreshop.com and https://www.kofaxstoreshop.com) is documented in the Liberty Board White Hat cyber-forensics registry under reference LB-2026-6996A67A due to verified indicators of Fraudulent Precious Metals & E-Commerce Shop (Advance-Payment Fraud).

Affected URLs & Hostnames (Do not visit or enter credentials)
https://kofaxstoreshop.com/
https://www.kofaxstoreshop.com/
http://kofaxstoreshop.com/
kofaxstoreshop.com

Technical & Forensic Case Data

Public Case Reference
LB-2026-6996A67A
Classification / Offense
Fraudulent Precious Metals & E-Commerce Shop (Advance-Payment Fraud)
Identified Domain Registrar
ICANN Accredited Registrar // clientHold
Hosting / Network Infrastructure
DNS Zone Terminated (NXDOMAIN / clientHold)
Primary Evidence SHA-256
6996a67ae393e4b305d9613e680c2f604e3aea405034ed9092ec85f1b1a0f43b
First Documented / Status
2026-10-28 19:30:00 UTC • OFFLINE / SUSPENDED (Takedown Successful)

Forensic Risk Indicators

  • Forensic evidence preservation completed (SHA-256: 6996a67ae393e4b305d9613e...)
  • Infrastructure status verified: DNS Zone Terminated (NXDOMAIN / clientHold) (ICANN Accredited Registrar // clientHold)
  • Unlicensed financial / investment offering operating without regulatory authorization (Art. 16 EU-DSA)

What to do if you interacted with kofaxstoreshop.com

1. Stop all payments Do not pay alleged taxes, release fees or liquidity deposits. Contact your bank immediately to request a fraud recall.
2. Cut remote access Uninstall AnyDesk, TeamViewer or RustDesk immediately and change your online banking and email passwords.
3. Report to police & Liberty Board File a report with law enforcement referencing LB-2026-6996A67A and submit additional URLs or IBANs via our reporting form.