Public Cyber-Forensic Domain Advisory | LB-2026-7C7BCA19
LB
Liberty Board // White Hat Anti-Fraud & Malware Detection Unit
Public Domain Warning & Evidence Verification
Submit Evidence / Tip
SECURITY WARNING Ref: LB-2026-7C7BCA19
Status: Offline / Suspended

Warning regarding philoro-de.to

The domain philoro-de.to (including URLs starting with https://philoro-de.to and https://www.philoro-de.to) is documented in the Liberty Board White Hat cyber-forensics registry under reference LB-2026-7C7BCA19 due to verified indicators of Fraudulent Precious Metals & E-Commerce Shop (Advance-Payment Fraud).

Affected URLs & Hostnames (Do not visit or enter credentials)
https://philoro-de.to/
https://www.philoro-de.to/
http://philoro-de.to/
philoro-de.to
Identity & Brand Abuse Notice: This domain unlawfully misuses the name or regulatory identity of philoro EDELMETALLE GmbH. The legitimate organisation has no connection to philoro-de.to.

Technical & Forensic Case Data

Public Case Reference
LB-2026-7C7BCA19
Classification / Offense
Fraudulent Precious Metals & E-Commerce Shop (Advance-Payment Fraud)
Identified Domain Registrar
ICANN Accredited Registrar // clientHold
Hosting / Network Infrastructure
DNS Zone Terminated (NXDOMAIN / clientHold)
Primary Evidence SHA-256
7c7bca19bce547840dd8b23edc16f32cb34f8637ec4b95f4a1ed34ea1e583dcb
First Documented / Status
2026-10-28 19:30:00 UTC • OFFLINE / SUSPENDED (Takedown Successful)

Forensic Risk Indicators

  • Forensic evidence preservation completed (SHA-256: 7c7bca19bce547840dd8b23e...)
  • Infrastructure status verified: DNS Zone Terminated (NXDOMAIN / clientHold) (ICANN Accredited Registrar // clientHold)
  • Unlicensed financial / investment offering operating without regulatory authorization (Art. 16 EU-DSA)
  • Unlawful impersonation of the protected corporate identity 'philoro EDELMETALLE GmbH' (§ 12 BGB)

What to do if you interacted with philoro-de.to

1. Stop all payments Do not pay alleged taxes, release fees or liquidity deposits. Contact your bank immediately to request a fraud recall.
2. Cut remote access Uninstall AnyDesk, TeamViewer or RustDesk immediately and change your online banking and email passwords.
3. Report to police & Liberty Board File a report with law enforcement referencing LB-2026-7C7BCA19 and submit additional URLs or IBANs via our reporting form.