Archive through 2026-09-283083 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-09-28
Observed 2026-09-28
eChallan’s suspicious APK detour
c-chalian.top
The page presents itself as India’s government eChallan service, then urges visitors to download an Android verification app.
Observed 2026-09-28
The FOMO Study’s empty market
fomostudy.xyz
An on-chain Solana token experiment treats an intentionally empty market as a way to observe buying driven by other buyers.
Observed 2026-09-28
A Red Crescent relief page with a USDT donation rail
redcrescenticrc.com
An Arabic-language humanitarian page presents war-relief updates, photo documentation and a USDT donation interface.
Observed 2026-09-28
NetNet Capital Management’s treasury, with blackjack on the side
sitemujufs1975v4.xyz
A crypto-finance page describing a token treasury, holder distributions, and related offerings that include coin flips and blackjack.
Observed 2026-09-28
NetNet Capital’s Treasury Pool, with a prospectus and blackjack
sitemuk7fvnvihra.xyz
The site presents $NET as a reserve-backed digital instrument and promotes staking payouts, tokenized-equity offers, and gambling-adjacent programs.
Observed 2026-09-28
Xaman’s “XRPL allocation” vote on xrpl-promos.xyz
xrpl-promos.xyz
A Xaman-branded page presents an XRPL allocation check alongside a community proposal vote with XP rewards.
Observed 2026-09-28
Ghost Ads: a storefront with two versions
ghostadsapp.com
Ghost Ads sells a reverse-proxy service that says it shows a clean page to ad reviewers, scrapers, and competitors while showing customers the actual shop.
Observed 2026-09-28
The Fiverr funds-release checkpoint
gigloop.help
gigloop.help presents a verification flow that asks for a Fiverr username before continuing to a purported funds-collection step.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 15 continue here in their published shelf order.
Petrol Pump Dealer Chayan’s application portal
petrolpumpdealarchayen.com
The site presents itself as a portal for applying for petrol pump dealership opportunities, with applicant registration, application checks, and state-specific notices.
NetNet Capital Management’s Treasury Pool
sitemuk6zd201nsw.xyz
A retro-styled financial site pitches NET as a reserve-backed token, alongside staking distributions, buybacks, gambling games, and shareholder services.
The “Free” Passport Appointment Portal
pasaport-gov.com
A Spanish-language page presents itself as a Valle del Cauca passport appointment portal, with booking instructions and staged payment steps.
A $40,000 pitch for foreign military recruits
leonework.click
A recruitment page advertises Russian military contracts to foreign men, promising a large signing bonus, monthly pay, housing, travel, and a path to citizenship.
Hofmann Papers’ digital document-replica shop
otrisovkadocumentov.org
A Russian-language landing page offers commissioned digital replicas of documents including bank statements, passports, bills, and organizational letters.
larpgod.wtf’s wallet props
larpgod.wtf
A web app for staging simulated wallet balances and transfers in familiar financial-app interfaces, pitched for creators and roleplay.
A PayPal-style wallet on an unrelated domain
pyplconversion.center
The page presents a PayPal-branded wallet dashboard with a GBP-to-USD conversion panel, balance, activity, and rewards.
The video archive that asks for your Telegram code
ruvideoalbom.com
A purported video archive displays a codec error, then presents Telegram sign-in as the way to view the file.
A recruitment pitch with a bounty for recruiters
workword.click
A French-language page solicits foreign men for Russian military contracts, advertises pay and benefits, and offers bonuses to people who recruit others.
Pendle’s rewards-date vote, on a separate domain
pendle-ecosystem.top
A Pendle-branded page asks visitors to vote among three rewards-distribution dates and advertises a boost for early voters.
The Rebel Rabbits wallet-claim page
rebel-rabbits.xyz
A page advertising a live Rebel Rabbits NFT giveaway asks visitors to connect a wallet to check eligibility and claim tokens.
Ruhsuzpanel2’s menu of private-data claims
ruhsuzpanel2.website
The Turkish-language homepage advertises free and VIP searches for identity, phone, address, family, and other sensitive records.
dewapg’s APK safety dossier, with numbers that don’t line up
dewapgw.com
An Indonesian-language page offers a dewapg APK download alongside version comparisons, installation instructions, reviews, and security assurances.
Timea’s memorial and its crypto donation addresses
timea.world
A memorial page recounts Timea’s life and illness, and asks for voluntary help with funeral and burial expenses through cryptocurrency.
A self-described reserve-backed NET token dashboard advertises staking, buybacks and USDG subscriptions alongside casino-style promotions.
Across the archive
3,083 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.