Criticalscore 63 · flagged Thursday, October 22, 2026

vanguardright.blog

Appeared in the .blog zone on Thursday, October 22, 2026; by the end of that day the census found active website about legal. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: vanguard
+30
brand name and brand-styled page
matched: vanguard
+15
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
active website
HTTP status
200
Page title
Vanguard Right · Mark Kramer — Financial Fraud Recovery Attorney
Has a form
yes
Brand echoed
vanguard

Model opinions

Second opinionlooks like a scamconfidence 85%· claude-opus-5-5

A day-old .blog site runs the classic fund-recovery scam: an unverifiable 'attorney Mark Kramer' promises to recover money lost to crypto, broker and romance scams. Its lead form harvests name, contact details, fraud type and amount lost, backed by a live-chat widget and links to nationalcryptohelp.com. The 'Vanguard' in the name is its own invented brand rather than an imitation of the Vanguard Group, so this is a scam, not phishing.

First passlooks like a scamconfidence 92%· claude-haiku-4-5

The domain presents itself as a financial fraud recovery attorney service under the brand 'Vanguard Right' with a person named Mark Kramer, collecting victim information (name, email, phone, fraud type, amount lost) via a form. This is a common advance-fee or recovery scam targeting fraud victims by falsely promising to retrieve lost money; the 'Vanguard Right' branding is the scammer's own fabricated business identity, not impersonation of an existing organisation, and the links to 'nationalcry

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, October 22, 2026

Screenshot of vanguardright.blog taken by the zone census on 2026-10-22

Same data as JSON: /api/zone/domain/vanguardright.blog. This page is not indexed by search engines and does not link to the site it describes.