Domain Arrivals
You’re viewing the 2026-08-17 issue, not the current issue. Go to the current issue: 2026-09-10

Featured in Domain Arrivals · 2026-08-17

The Job Application That Asks for Your Telegram Password

joinnow.blog ↗ · Suspicious Gentlemen · score 84.0
○Open: public page gives enough substance to understand the site $Paid: pricing, booking, ecommerce, subscription, or paid access is visible ADAds: visible ad load or ad-supported content ✦Pretty: notable design, copy, craft, or presentation ◆Pro: polished, finished-feeling, serious, or operationally mature ◇Niche: specific audience, workflow, or unusually focused use case ◉Human: personal, local, community, civic, handmade, or real-person signal !Suspicious: scammy, spammy, trust theater, finance fog, or credibility concern

A Malay-language job-application page requesting a MyKad name, phone number, Telegram verification code, and Telegram security password.

Why it surfaced

The page stages a complete verification-and-payout funnel: enter personal details, submit Telegram credentials, then share the event into WhatsApp groups to unlock an 'automatic' withdrawal. Fabricated-looking comments and inflated engagement counts add a layer of trust theater to the specimen.

Read the complete issue Observed source ↗

Continue into the edition

Monica’s Calendar of Flowers

August 17’s newborn domains include a calendar that spreads flowers for Monica across the months after JP’s death, 17 years of a master mariner’s logbooks, the seconds between a modem connection and the first web request, and an Indian bus cabin carrying 632 songs.

This is one of 1,000 discoveries in the 2026-08-17 Domain Arrivals issue.

Explore the complete issue Browse Suspicious Gentlemen

More from Suspicious Gentlemen

Three more arrivals

gsv2 — the reverse tunnel that refuses to let go desaklanteng.net

A terminal-first reverse-tunnel and remote-shell kit for keeping targets connected to a relay and handing operators an encrypted shell on demand.

 BYPASS: The Fake-Play APK Operations Panel playsinstallgroup.online

A Portuguese-language platform for building APK payloads, fake Google Play installation screens, PDF droppers, QR codes, and post-install WebView redirects.

 The TÜVTÜRK Clone Asking for Your Card and SMS Code tuvtruk.com

A Turkish vehicle-inspection appointment site at tuvtruk.com that closely imitates TÜVTÜRK and presents a 350 TL payment flow.