Is vandexbn.com safe?
http://vandexbn.com/
Coveragestrong3 of 4 applicable core capabilities
Vandex Bank is a fake banking portal impersonating a real bank brand, flagged as phishing by multiple security engines.
vandexbn.com presents itself as "Vandex Bank©" with Login and Open Account buttons, but it is a brand impersonation site targeting the real Vandex bank brand. Independent security research identifies it as phishing and fraud, and 11 antivirus families have flagged it as malicious. The domain is only 227 days old and hosted on an IP with a high abuse confidence score. This is a credential-harvesting operation designed to steal banking login details.
Be the first to review vandexbn.com
Lost money to vandexbn.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
vandexbn.com presents itself as "Vandex Bank©" with Login and Open Account buttons, but it is a brand impersonation site targeting the real Vandex bank brand. Independent security research identifies it as phishing and fraud, and 11 antivirus families have flagged it as malicious. The domain is only 227 days old and hosted on an IP with a high abuse confidence score. This is a credential-harvesting operation designed to steal banking login details.
Brand Impersonation and Phishing Infrastructure
External security research explicitly identifies vandexbn.com as a brand impersonation site targeting Vandex, a recognized bank brand. The site uses the name "Vandex Bank©" and displays Login and Open Account buttons, which are the classic interface of a credential-harvesting portal designed to capture banking usernames and passwords.
The domain was flagged by 13 out of 92 security engines at the time of the scan, with multiple detections describing it as phishing or fraud-related. A separate saved antivirus observation shows 11 independent antivirus families reported an adverse result, confirming the detection is real and not a single-vendor false positive.
The hosting IP has an abuse confidence score of 70/100 across 267 saved reports, indicating the server is part of malicious infrastructure used for phishing and fraud campaigns.
Technical Checks Versus Operator Risk
The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection. These are clean technical signals, but they only mean no active blocklist entry or certificate error was observed at scan time. They do not establish that the site is safe or legitimate.
The registrable domain is only 227 days old, which is consistent with a recently created phishing domain. The site claims to be a banking institution but provides no verifiable regulatory information, banking license, or corporate registration details. The operator remains anonymous.
The presence of a contact email on the site's own domain and a postal address on the page are not favourable signals by themselves, as scam sites routinely print such details to appear legitimate. They do not offset the strong adverse evidence from security vendors and research.
Why the score is 12
11 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
14/ 93
detectionsSaved analysis from October 9, 2026 - stale
14 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 13
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| BitDefenderMalicious | phishing |
| Chong Lua DaoMalicious | malicious |
| EmsisoftMalicious | phishing |
| ESETMalicious | phishing |
| Forcepoint ThreatSeekerMalicious | phishing |
| FortinetMalicious | phishing |
| G-DataMalicious | phishing |
| GridinsoftMalicious | phishing |
| LionicMalicious | phishing |
| RisingMalicious | phishing |
| SophosMalicious | phishing |
| VIPREMalicious | malware |
| CertegoSuspicious | suspicious |
All 93 engine results
- alphaMountain.ai - phishing - Malicious
- BitDefender - phishing - Malicious
- Chong Lua Dao - Malicious
- Emsisoft - phishing - Malicious
- ESET - phishing - Malicious
- Forcepoint ThreatSeeker - phishing - Malicious
- Fortinet - phishing - Malicious
- G-Data - phishing - Malicious
- Gridinsoft - phishing - Malicious
- Lionic - phishing - Malicious
- Rising - phishing - Malicious
- Sophos - phishing - Malicious
- VIPRE - malware - Malicious
- Certego - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- ChainPatrol - Unrated
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Vandex Bank©
What the captured page showed
1 observation- 01
Vandex Bank©
03 · Investigation Story
Investigation story
What the site claims
Home - Vandex Bank©
What we observed
The page content was captured and checked alongside 61 antivirus results.
What independent research found
3 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Service and business model
Financial Service
Observed behavior
Evidence behind this classification
- 013 independent sources carry complaints or warnings about this site, including: "This domain was flagged by 13 out of 92 security engines at the time of this scan, with multiple detections describing it as phishing, fraud-related, or"
- 023 independent sources carry complaints or warnings about this site, including: "The domain vandexbn.com has been identified as a brand impersonation site targeting Vandex, a recognized bank brand."
- 033 independent sources carry complaints or warnings about this site, including: "In summary, vandexbn.com has a very low trust score which indicates that there is a strong likelyhood the website is a scam."
What this means for you
What Happens If You Enter Your Credentials
A visitor who clicks the Login button on this fake banking portal and enters their username and password would be sending those credentials directly to the attackers operating the site. The site is a brand impersonation targeting Vandex bank customers.
How the observed mechanism works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The harvested credentials could then be used to access the victim's real bank account, leading to financial theft. The site also features an Open Account button, which could be used to collect additional personal information under the false pretext of opening a bank account.
Do not enter any personal or banking information on vandexbn.com. If you have already entered credentials, contact your real bank immediately and change your passwords. Treat this site as a phishing operation and report it to your bank's fraud department.
Web research findings
Independent findings for vandexbn.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- PCriskopen
"This domain was flagged by 13 out of 92 security engines at the time of this scan, with multiple detections describing it as phishing, fraud-related, or"
- PhishDestroyopen
"The domain vandexbn.com has been identified as a brand impersonation site targeting Vandex, a recognized bank brand."
- Scamadviseropen
"In summary, vandexbn.com has a very low trust score which indicates that there is a strong likelyhood the website is a scam."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainvandexbn.com
- Redirects tovandexbn.com
- Hosted byLeads Globe
- Referencescdn.tailwindcss.com · cdn.jsdelivr.net
Domain Timeline
- Mar 9, 2026Domain registered
First appeared in WHOIS records — 7 months old when this review was saved.
- Oct 23, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Contact email on the site's own domain (customercare@vandexbn.com).
- Postal address visible on the page.
Domain & Encryption
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
11 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. · The hosting IP has an abuse confidence score of 70/100 across 267 saved reports.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
3 independent sources carry complaints or warnings about this site, including: "The domain vandexbn.com has been identified as a brand impersonation site targeting Vandex, a recognized bank brand." · 3 independent sources carry complaints or warnings about this site, including: "This domain was flagged by 13 out of 92 security engines at the time of this scan, with multiple detections describing it as phishing, fraud-related, or"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 14 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 9, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Independent research | 3 independent findings were saved | Completed | Adverse | this scan · Oct 23, 2026 |
- Antivirus
- Result14 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 9, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Independent research
- Result3 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 23, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is vandexbn.com a scam or a legit website?
Is vandexbn.com safe to use?
I already paid or entered my details on vandexbn.com — what should I do?
Can I get my money back from vandexbn.com?
Did vandexbn.com steal my password or personal information?
How do I report vandexbn.com?
vandexbn.com looks professional — how can it still be a scam?
Has vandexbn.com been flagged by antivirus engines?
Is vandexbn.com on any phishing or malware blacklists?
How old is the vandexbn.com domain?
Where is vandexbn.com hosted?
How often is the vandexbn.com report updated?
08 · Final Verdict
Final verdict
Vandex Bank is a fake banking portal impersonating a real bank brand, flagged as phishing by multiple security engines.
vandexbn.com presents itself as "Vandex Bank©" with Login and Open Account buttons, but it is a brand impersonation site targeting the real Vandex bank brand. Independent security research identifies it as phishing and fraud, and 11 antivirus families have flagged it as malicious. The domain is only 227 days old and hosted on an IP with a high abuse confidence score. This is a credential-harvesting operation designed to steal banking login details.
09 · Community