Archive through 2026-09-022517 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-09-02
Observed 2026-09-02
The DeviantArt Payment-Verification Impostor
deviantart-appeal.click
A DeviantArt lookalike that asks visitors to enter a card number, expiry date, and CVV to restore account access.
Observed 2026-09-02
The “Millisecond” Order-Snatching System
shangfen.vip
A Windows client that claims to automatically monitor merchant orders, filter them, and grab selected payments at high speed.
Observed 2026-09-02
The Black Ops Market Mirror Board
blackops-market.watch
A polished homepage claims to verify three Tor addresses for a darknet marketplace and warns visitors about phishing mirrors.
Observed 2026-09-02
The DeviantArt Payment-Verification Impersonator
deviantartrestore.top
A fake-looking account-check page asks DeviantArt users to enter a card number, expiry date, and CVV to restore access.
Observed 2026-09-02
DIDscape: The Agent Map With No Prompt Box
didscape.com
DIDscape presents a field interface for observing public autonomous-agent activity and, eventually, spawning agents whose rooms, tasks, pacing, and responses are controlled by the system.
Observed 2026-09-02
GhostNav, the anti-surveillance GPS
ghostnav.net
A tactical navigation system that claims to route Android users around license-plate readers, speed radars, and red-light cameras.
Observed 2026-09-02
The Meta Copyright Violation Notice
meta-support.help
A page styled as a Meta Community Standards warning that asks an account holder to request a review.
Observed 2026-09-02
SMSEO: Three Taps to a Verification Code
usesmseo.org
A service that rents phone numbers in 150+ countries for receiving signup verification codes, with a dashboard and REST API.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 11 continue here in their published shelf order.
The Bot Client Investigation
bot-client.net
An evidence-heavy investigation into Bot Client, former Storm Client personnel, alleged account compromise, and recycled client code.
A Signature Request That Wants a Windows Download
documentapproval.digital
A sparse document-signing page asks recipients to download a secured file and review it on a Windows computer.
The Bank That Arrived by the Wrong Address
nb-acess.lat
The domain nb-acess.lat redirects to novobanco.pt, the Portuguese bank’s retail site.
Iran, January 8–9: A Record With No Room for Certainty
iranmassacres2026.com
A multilingual longform page purporting to document a lethal crackdown on Iranian protesters during January 8–9, 2026.
The Mountain Spring Water Site Selling an Ex-Watch
mountainsspringwater.com
A domain named for natural spring water opens with water marketing before switching into a WordPress smartwatch storefront.
ShotMock: Screenshot Shells, Tables, and Watermarks
shotmock.top
A macOS screenshot utility that claims to turn captures into device mockups, watermarked images, and structured tables.
HUSHMIST’s Catalog of Unrelated Bargains
hushmist.shop
A storefront called HUSHMIST sells a wildly mixed catalog of tires, wine, batteries, garage cabinets, saws, and farm equipment.
The Personal Points Portal That Lives Somewhere Else
personalvi.help
An Argentine Spanish-language page says Personal customers have rewards waiting and asks for their registered mobile number to check them.
The Government-Looking Address That Lands at ANSSI
cyber-gouv.com
cyber-gouv.com redirects to the French cybersecurity agency ANSSI’s substantial public homepage at cyber.gouv.fr.
Agent Bck Office Leads to Nterval Funding
agentbckoffice.com
A misspelled, developer-sounding domain redirects to a real-estate commission-advance application site.
A Chinese-language site presenting itself as Hong Kong’s Social Welfare Department and offering online applications for benefits and subsidies.
Across the archive
2,517 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.