VirusTotal
15 / 91 engine detections
Abrir relatório“vandexio | AI Trading Platform | Official Website”
Imitação de Investment Scam: vandexio-software.com — Conteúdo indisponível. Resumo das evidências: VirusTotal 15/91 (alphaMountain.ai, BitDefender, CRDF…
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
15 / 91 engine detections
Abrir relatório2 det.
Abrir relatórioMalicioso
Abrir relatório4 community references
Abrir relatórioNo threat flag
Abrir relatórioNo malicious flag
Abrir relatórioResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
vandexio-software.com is a fake crypto exchange that presented itself as "vandexio," an AI-powered trading platform, and targeted people looking for automated crypto investment returns. PhishDestroy first identified it on 2026-09-23. The site is now dead. Its DNS stopped resolving on 2026-09-26, and it was still offline when last checked on 2026-10-19.
The page title, "vandexio | AI Trading Platform | Official Website," shows the typical pitch: an official-looking brand that promises an artificial-intelligence trading engine producing steady profits. Victims register, deposit cryptocurrency or fiat, and then watch a dashboard that displays growing balances. Those balances are not backed by any real trading. When users try to withdraw, the operators usually demand extra fees, taxes or verification deposits, or they simply stop responding. Everything sent to the platform should be treated as lost, along with any identity documents or personal details submitted during sign-up.
On 2026-09-25, VirusTotal showed 15 of 91 engines flagging the domain as malicious. The flagging vendors include alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data and Gridinsoft. The domain also appears in four AlienVault OTX threat pulses and is listed on the PhishDestroy blocklist. Detection from several established security vendors within days of discovery supports the fake exchange classification.
The domain was registered on 2026-07-15 through MainReg Inc., about ten weeks before PhishDestroy detected it. It was hosted at IP 185.62.58.179 on the Snel.com B.V. network in the Netherlands. The site used a domain-validated TLS certificate from ZeroSSL GmbH (ZeroSSL ECC DV SSL CA 2). That kind of certificate only proves control of the domain and says nothing about who runs it.
If you deposited funds with vandexio, do not pay any further "withdrawal fee" or "unlock" charge, because these demands are part of the same fraud. Gather your transaction IDs, wallet addresses, payment receipts and chat logs. Report the loss to your local police and national fraud reporting center, and contact your bank or the exchange you sent funds from right away. If you uploaded ID documents, watch for identity misuse and treat any later "recovery service" offers as a likely second scam. Change any password you reused on the site. Defenders should block the domain and its hosting IP and add the indicators to email and web filtering rules.
A reputação do Edge-IP não é atribuída a este domínio.
albert.ns.cloudflare.comyolanda.ns.cloudflare.comLocation describes the IP network.
0d2d0710654826a7639eb4e219ea761b2e776b557e825679823d0066dbe3ffb6Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of vandexio-software.com · checked Sep 23, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
Desconhecido→dns_inactive
dns_nxdomain
dns_inactive
dns_nxdomain
Acessível→Indisponível
4 community references
View sourceNo threat flag
View source15/91 engine detections
View sourcePD-20260923-7E7D5B
Page captured
View sourcevandexio-software.com
View sourceCompare what a browser and a crawler receive, and check for Keitaro traffic routing.
vandexio-software.com
PD-20260923-7E7D5B Recipient: complain@mainreg.com Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
vandexio-software.com)Mesmo que você não tenha todos os detalhes — registre uma ocorrência mesmo assim. Mesmo informações parciais ainda ajudam nas investigações.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraEnvie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarRelatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMonitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.