A few interesting things of note. When you try to look up the domain information for vaultmex.com they've activated whoisguard to hide the information. The registrar for the website is Namecheap and their site is hosted by Incapsula so those are two places they can be reported. The other is that I tried to make a lot of withdrawals yesterday which were pending approval for more than 16 hours. Only one went through. Then another small withdrawal I made today went through instantly, and after that none are going through again. Even if it were just their site being terrible the lack of response from the support team indicates that they don't care. The helpdesk gives no way to confirm that your ticket was submitted since the registration page doesn't allow you to create a password, and you need to log in to check ticket status.
I have looked at all those angles as well.
The Privacy Protection won't help protect them if someone decides to take legal action. It is but a small barrier and was never designed to help people commit fraud. I know this from years of being associated with a company that had to regularly enforce infringement of their copyright material. I know at least one of them is located in Australia, so the long-arm statutes of the United States could be applied. Personally, I haven't lost enough money to pursue this option. However, it isn't that difficult in the event that someone who has lost a significant amount of capital wants to take a crack at it.
Reporting the website to the registrar and hosting company is going to be my final act if these issues are never resolved.