Archive through 2026-10-083254 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-10-08
Observed 2026-10-08
The RBS IPO Centre’s extraordinary listing claims
digitalbankingrbs.com
A page styled as an RBS International IPO service lists upcoming and completed offerings in major private companies.
Observed 2026-10-08
The 16,800-mile compensation that asks for your bank password
lifffbbonmilles.com
A LifeMiles-lookalike page promises compensation for uncredited miles, then presents a payment flow requesting card details, a one-time code, and bank credentials.
Observed 2026-10-08
A purported Aloha POS security patch on an unrelated domain
toastupdate.app
The page poses as an NCR Aloha POS support portal and offers a purported critical payment-compliance update.
Observed 2026-10-08
A JETT booking page points users to another domain
jeett-khb.com
This Arabic-language page offers JETT ticket and baggage booking links, but its security notice names a different site as the only official address.
Observed 2026-10-08
The debt check that turns into an account-compromise scare
dolgkabinet.xyz
A Russian-language page presents itself as a tax-service debt checker, asks for a phone number and code, then displays an alleged Госуслуги account-intrusion warning.
Observed 2026-10-08
A Costa Rican Hacienda look-alike with virtual-office links
hacienda-tribucr.net
The page presents itself as Costa Rica’s Ministry of Hacienda, with links for declarations, a virtual office, and Exonet.
Observed 2026-10-08
QFS Vault Bank’s zero-loss wallet
qfsbanking.net
A fictional wallet interface concept that combines crypto, gold, silver, and NESARA/GESARA claims.
Observed 2026-10-08
See the Layer sells a dark-web course in the language of privacy
seethelayer.com
A Spanish-led training site advertises five manuals, a live class, and a private course room, with prices from $117 and Monero among its payment options.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 21 continue here in their published shelf order.
Afirme bank homepage on an unrelated .xyz domain
afirmenett.xyz
The page presents banking products, insurance, investment information, and online banking under Afirme’s name.
A woodworking catalog under a betting-site banner
syvitamining.com
The homepage presents a Chinese woodworking-machinery manufacturer, while its title and footer carry unrelated sports-betting branding.
Level Earth’s test-mode earthquake appeal
levelearthproject.com
A public fundraising page for earthquake survivors in eastern Indonesia, claiming donations go directly to affected families.
Nexbitu’s Castellan Capital Design Reproduction
nexbitu.xyz
A financial-services homepage reproduction presents advisory, wealth-management, and alternative-asset services under the Castellan Capital name.
A storefront for prescriptions without the clinic visit
medrecipebuy.com
A Russian-language page advertises stamped prescription forms, including forms it associates with controlled medicines, with delivery across Russia.
A human-rights portal under an esports banner
xiyangzaixian.com
The homepage pairs Chinese human-rights news, research and resource sections with 多宝电竞 gaming branding and promotional copy about finding teammates.
A fake tax-debt check with a coercive twist
dolgisud.xyz
The page impersonates Russia’s Federal Tax Service, offering a debt check before presenting a warning about an alleged account break-in.
The Prime Settlement Refund Checker
primesettlementrefund.com
A page offers a payment-notice checker and a three-question quiz that maps Amazon Prime membership history to settlement phases.
SaveContent wants to keep Telegram’s disappearing messages
savecontent.app
A Telegram bot that says it can save restricted channel posts, download stories, and retain deleted, edited, and view-once messages.
A Bybit-branded trading interface on an unrelated domain
bybiteplatform.cfd
The page presents a crypto-exchange interface branded Bybit, with market pairs and links for buying crypto, depositing, and P2P trading.
A sprayer catalog with a casino-shaped title
df1005.com
Taicang Jingang Plant Protection Equipment’s catalog describes agricultural sprayers, while casino branding appears in the page title, metadata, and footer links.
The Unofficial FBI Maintenance Screen
fbigovofficial.com
A demonstration page presents a simulated outage for “FBI Online Services,” complete with a maintenance countdown and progress display.
An Arcade-Branded Shop Selling Dadaist Frames by Email
revyoud.com
A product catalog titled BLACKLEAFARCADE.COM offers jackets, puzzles, framed art, and cushions, with orders placed by email.
Bitapnda’s Bitpanda referral redirect
bitapnda.com
bitapnda.com forwards to Bitpanda’s investment-broker page, carrying a `ref` parameter in the destination URL.
A Pi Wallet prompt on pinetworoks.xyz
pinetworoks.xyz
The page presents wallet-unlock and multisig-confirmation controls, with untranslated template strings visible throughout.
Sanlam’s “Proud Check” on a non-obvious domain
proudmoments-ci.com
A French-language landing page presents a two-minute insurance check for drivers, parents, and small-business owners in Côte d’Ivoire.
Sentinela Político’s dossier-and-monitoring portal
sentinelapolitico.org
A Portuguese-language political site presenting dossiers, connection graphs, timelines, and a claimed 24-hour monitoring console.
The PHP decoder that returns three files
jiemi.xyz
A web service offering online decoding for PHP files protected by ionCube, SourceGuardian, Swoole Compiler, or Xend.
A gambling headline on a stem-cell supply catalog
precision-allergy.com
The homepage pairs Chinese gambling-branded title and description text with a catalog and articles about stem-cell products, cell-culture supplies, and laboratory reagents.
The HSBC-branded .org that ends at HSBC.de
hsbc-werteinzug.org
hsbc-werteinzug.org resolves to HSBC Germany’s public banking homepage.
A page styled as a Brazilian tax-authority notice alleges a CPF tax discrepancy and urges visitors to pay R$138.45.
Across the archive
3,254 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.