Skip to content
Scammers.com
Investment fraudReviewed

volksvermogen-netherlands.com flagged as phishing

Anti-phishing project PhishDestroy posted on Mastodon on 10 November 2026 that volksvermogen-netherlands[.]com is a phishing detection, alongside a run of AI-trading sign-up pages it flagged the same morning. The doma…

First reported
Reports
1

Source: mastodon.social · published

Screenshot of the volksvermogen-netherlands.com investment page
Image: PhishDestroy (via Mastodon)

What happened

Anti-phishing project PhishDestroy posted on Mastodon on 10 November 2026 that volksvermogen-netherlands[.]com is a phishing detection, alongside a run of AI-trading sign-up pages it flagged the same morning. The domain is also on the Phishing Army blocklist. Its name (Dutch for "people's wealth") suggests an investment offer aimed at the Netherlands. Check any investment platform against the Dutch regulator AFM's warning list before signing up or sharing your phone number.

How the scam works

The domain volksvermogen-netherlands.com, whose name is Dutch for "people's wealth", was flagged by PhishDestroy alongside a run of AI-trading sign-up pages the same morning and is also on the Phishing Army blocklist. Investment sites aimed at a particular country often use a local-language name, a professional-looking dashboard and a request for a phone number or an initial deposit.

Check any investment platform against the Dutch regulator AFM's warning list and register before signing up, sharing a phone number or sending money. The detection comes from a public PhishDestroy post and has not been independently checked by scammers.com.

A Dutch-language name, a .com address and a professional layout are not a substitute for AFM authorisation. If you have already had a call or have sent even a small deposit, treat further requests for more money, tax, or a verification fee as a continuation of the same approach and report them rather than paying.

Source

Public post on Mastodon, 10 November 2026: https://mastodon.social/@phishdestroy/117591813189117954

The indicators come from this source and have not been independently checked by scammers.com.

Red flags

  • An investment website using a local-language wealth name that you cannot find on the AFM register.
  • A request for a phone number, identity documents or an immediate deposit.
  • Pressure to invest quickly, or promises of high or guaranteed returns.
  • A domain that appears on a public blocklist or a regulator warning list.

If you were targeted

  1. 1Check any investment platform against the AFM warning list and register before signing up.
  2. 2Do not share your phone number or send money until you have verified the firm.
  3. 3If you already paid, contact your bank and report the firm to the AFM.
  4. 4Ignore follow-up calls that press you to deposit more.
  5. 5Do not install remote-access software at a broker's request.

Fake Zerion crypto-wallet site zerion-inc.webflow.io flagged as phishing

Anti-phishing project PhishDestroy posted on Mastodon on 12 November 2026 that zerion-inc[.]webflow[.]io is a suspected phishing site. Its domain record shows a page copying Zerion's wallet homepage ("Crypto Wallet fo…

  • zerion-inc.webflow.io
  • Webflow subdomain; VirusTotal 17/92; URLScan brand: Zerion
  • Crypto wallet phishing, drainers and address-poisoning cluster (12 Nov 2026)
Reported Nov 12, 20261 report

Wexford Advisory clone flagged again by Spain's CNMV on new domain; MalwareTips finds 14% 'fund release' fee notice

MalwareTips published an investigation today into the 'Wexford Advisory' crypto and stock trading site. It reports that Spain's securities regulator, the CNMV, lists the name twice as a clone: an October 19, 2026 entr…

  • market.wexford-advisory.limited
  • Earlier clone domain wexfordadvisory-ltd.com (CNMV Oct 19); back end pro-simp-pd.com per MalwareTips
  • Unauthorised / AI-trading investment sites flagged 12 Nov 2026
Reported Nov 12, 20261 report

Norwegian-language crypto trading sign-up sites yeldunravu-norway.com and yeldunravu.shop flagged

PhishDestroy posted on Mastodon on 12 November 2026 two related suspected scam domains, yeldunravu-norway[.]com (registered July 2026) and yeldunravu[.]shop (registered September 2026). Its records describe the first…

  • yeldunravu-norway.com
  • Also yeldunravu.shop; VirusTotal 16/92 and 14/92
  • Unauthorised / AI-trading investment sites flagged 12 Nov 2026
Reported Nov 12, 20261 report

Eight 'AI trading platform' sign-up sites on 185.62.57-58.x flagged, incl. zedarontrader-2ai.com

PhishDestroy posted on Mastodon on 12 November 2026 a series of suspected scam domains that, according to its domain records, all show "AI trading platform" pages with account-registration forms collecting names, emai…

  • zedarontrader-2ai.com
  • Also zeltixaipro.com yieldarioai.click xoven-aisoft.com zentrax-nova-tech.com zenitdexeris.online xixochain.pro
  • Unauthorised / AI-trading investment sites flagged 12 Nov 2026
Reported Nov 12, 20261 report

MalwareTips: household-goods store deniudy.com in scam network, flagged by 5 VirusTotal vendors

MalwareTips published an investigation today rating deniudy.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new na…

  • deniudy.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: candy store thebakedbox.in in scam network, flagged by 5 VirusTotal vendors

MalwareTips published an investigation today rating thebakedbox.in a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…

  • thebakedbox.in
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report