SECURITY WARNING
Ref: LB-2026-3E5D32FF
Status: Offline / Suspended
Warning regarding user.primesignalagt.net
The domain user.primesignalagt.net (including URLs starting with https://user.primesignalagt.net and https://www.user.primesignalagt.net) is documented in the Liberty Board White Hat cyber-forensics registry under reference LB-2026-3E5D32FF due to verified indicators of Manipulated Crypto, CFD & Trading Platform (Unlicensed Financial Service).
Affected URLs & Hostnames (Do not visit or enter credentials)
https://user.primesignalagt.net/
https://www.user.primesignalagt.net/
http://user.primesignalagt.net/
user.primesignalagt.net
Technical & Forensic Case Data
Public Case Reference
LB-2026-3E5D32FF
Classification / Offense
Manipulated Crypto, CFD & Trading Platform (Unlicensed Financial Service)
Identified Domain Registrar
ICANN Accredited Registrar // clientHold
Hosting / Network Infrastructure
DNS Zone Terminated (NXDOMAIN / clientHold)
Primary Evidence SHA-256
3e5d32ffcf3235a61b6802e1fdccb2506481f8a1962abcb6a7728686ec36f7c5
First Documented / Status
2026-10-28 19:30:00 UTC • OFFLINE / SUSPENDED (Takedown Successful)
Forensic Risk Indicators
- Forensic evidence preservation completed (SHA-256: 3e5d32ffcf3235a61b6802e1...)
- Infrastructure status verified: DNS Zone Terminated (NXDOMAIN / clientHold) (ICANN Accredited Registrar // clientHold)
- Unlicensed financial / investment offering operating without regulatory authorization (Art. 16 EU-DSA)
What to do if you interacted with user.primesignalagt.net
1. Stop all payments
Do not pay alleged taxes, release fees or liquidity deposits. Contact your bank immediately to request a fraud recall.
2. Cut remote access
Uninstall AnyDesk, TeamViewer or RustDesk immediately and change your online banking and email passwords.
3. Report to police & Liberty Board
File a report with law enforcement referencing LB-2026-3E5D32FF and submit additional URLs or IBANs via our reporting form.