Archive through 2026-09-253002 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-09-25
Observed 2026-09-25
A CFE-branded payment page on webcfe.online
webcfe.online
A Spanish-language page presents a way to check an electricity balance and pay by card or bank transfer.
Observed 2026-09-25
An FDIC-looking notice tells its recipient to stay quiet
privatecommunications.net
A page on a generic domain presents a supposed FDIC/FBI non-disclosure directive alongside a catalog of 19 purported FDIC document templates.
Observed 2026-09-25
A vote-for-cash page that asks for MAX codes—and 2FA passwords
votenow-web.study
The Russian-language page offers ₽350 in phone credit for a confirmed vote for one of three mobile games.
Observed 2026-09-25
A CFE-branded bill-payment page on webcfe.shop
webcfe.shop
The page presents a CFE-branded service-number lookup and electricity-bill payment flow, including card and SPEI transfer options.
Observed 2026-09-25
A CFE bill-payment page on webcfe.space
webcfe.space
A Spanish-language page presents a CFE balance lookup and bill-payment flow.
Observed 2026-09-25
Dentanol’s Missing Label, in Nine Findings
godentanol.com
A long-form Dentanol page compares the supplied label information with the product’s listed prices and pack options.
Observed 2026-09-25
A LifeMiles compensation claim with a price tag
liflbonrewds.com
An apparent LifeMiles lookalike claims users have 16,800 uncredited miles, then leads them through payment and bank-verification prompts.
Observed 2026-09-25
A Homebrew lookalike with a dangerous install line
homebrew.top
This Homebrew-branded page presents package-manager documentation and an installation command that decodes hidden text and runs it in a shell.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 16 continue here in their published shelf order.
EarnPad: a token launch funded by lending interest
earnpad.fun
EarnPad describes a Solana launch mechanism that puts deposited USDC in Jupiter Lend and uses earned interest for a coin’s first buy on pump.fun.
An “Official FBI” Recovery Portal on a .com
fbiassetrecoverydept.com
The page presents itself as an FBI victim-support portal offering crisis help, financial recovery assistance, and restitution guidance.
FedEx Shipping, on fdxshipping.com
fdxshipping.com
A shipping page presenting itself as FedEx, with shipment tracking, rate estimates, booking, and account links.
Mafia City Hacks’ Clan Scanner
mafiacity-hacks.shop
A web tool that says it scans Mafia City clans and displays villa locations, power, shield status, and last-seen activity.
Thornwell’s $220 “Charge-then-Channel” Memory Kit
naturalvitalityjournal.com
A field-journal-style sales page presents a twice-daily memory ritual using a transdermal patch and a scalp instrument.
Banplus banking on a mismatched domain
baningreplus.lat
A Spanish-language homepage presents banking accounts, payments, loans, and digital services under the name Banplus - Banco Universal.
KnowledgeFlood’s $300K–$2M data offer
knowledgefloodspace.com
KnowledgeFlood says it connects established service businesses with AI research teams seeking anonymized operational data, with selected partners offered $300,000 to $2 million.
三毛机场入口核对页: a lookalike-address guide with an affiliate detour
sanmaojichang.cfd
A Chinese-language guide explains how to compare lookalike addresses for the Sanmao VPN service, while directing readers to a competing service through disclosed promotional links.
The wallet-recovery console selling “credits”
uncha1n.com
Uncha1n presents a paid, browser-based crypto-wallet recovery service built around generated phrases, address checks, and target or random modes.
A Flare rewards vote with a wallet prompt and a date mismatch
www-flare.xyz
A Flare-branded page presents a vote on the start date of FLR rewards and invites visitors to connect a wallet.
Software Systems Design, Served Omakase
sushisecrets.buzz
SUSHI SECRETS INC. presents itself as a ten-seat, reservation-only omakase counter in Berkeley.
A Mirror Directory for a Claimed Onion Market
urlsfor-nexus.store
The page lists purported onion-market mirrors and describes a PGP-based check for their authenticity.
Chris’ Coffee, on a .mom domain
chriscoffee.mom
A substantial coffee-equipment storefront listing espresso machines, grinders, parts, coffee, and accessories.
Benefits advice under a free-shipping banner
vafelsent.com
vafelsent.com lists three articles about Vfficient benefits enrollment and PTO inside a commerce-style site shell.
gotapclicks.info redirects to TapClicks
gotapclicks.info
The observed .info domain leads to TapClicks’ marketing site for an AI-powered marketing data and reporting platform.
A Spanish-language page branded as Banplus lists personal and business accounts, payments, loans, investment products, and digital banking.
Across the archive
3,002 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.