Archive through 2026-10-093284 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-10-09
Observed 2026-10-09
The “NID Update” That Wants Your Banking Password
kumarinid-update.com
A page styled as Kumari Bank’s identity-verification portal asks visitors for mobile-banking credentials, a PIN, and an OTP.
Observed 2026-10-09
A Nike delivery portal with a separate R$97 fee
niketransporte.com
The page presents a Nike-branded order lookup and asks visitors to pay a separate delivery fee through PIX.
Observed 2026-10-09
A BlackRock-branded crypto platform, complete with a sample balance
blackrockreport.com
A crypto-buying page using BlackRock branding advertises recurring Bitcoin purchases, wallet features, and interest paid in crypto.
Observed 2026-10-09
A Fundsmith-branded ETF pitch on a .vip domain
smithfd.vip
A German-language page presents a “Fundsmith Equity ETF” and claims an AI-assisted, rules-based investment strategy.
Observed 2026-10-09
FinAudit KG and the card-transfer refund
finauditcg.ink
A Kyrgyz-language page claims to find tax overpayments and calculate compensation, then directs visitors to transfer an exact amount to a card.
Observed 2026-10-09
Medicare Register’s official-looking update page
medicare-register.com
The page presents an urgent Medicare registration notice that directs visitors to download software and submit personal details and a digital signature.
Observed 2026-10-09
A Telegram Login Page on an Unrelated Domain
www-stct.cloud
The page imitates Telegram’s sign-in flow, requesting a phone number and cloud password alongside QR-code and passkey options.
Observed 2026-10-09
Grokiverse’s proposed bot debit cards
grokiverse.app
A Solana-linked project describes launching Grok-powered bots whose spending is funded by creator fees and reported publicly.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 22 continue here in their published shelf order.
The HurriClaim Firm’s Isaias countdown
hurricaneisaiasdamage.com
A Florida law firm page solicits hurricane-insurance claims around a stated October 9, 2026, Hurricane Isaias landfall forecast.
The BNB Chain “Release Funds” Prompt
binancedt.com
A BNB Chain-themed page presents wallet verification prompts and says users need to add USDT to release funds.
Wanxiangyun: the warning thread is still open, the plans are still for sale
wanxiangyun.help
A third-party page compares user complaints about a VPN service with its still-online sales panel, and advises visitors to verify service before buying.
A Wallet Claim for the “Official” $HYPE Drop
hyperliquidexclusivenft.com
The page claims a Solana–Hyperliquid token distribution and invites visitors to connect a wallet to check their allocation.
Slash tickets, Eventim branding, and a different domain
slashtour-eventim.com
The page lists three April 2027 Slash Featuring Myles Kennedy and the Conspirators dates in Brazil, with ticket-purchase buttons and presale details.
Texas Institute of Technology and Science Wants a Wallet Connection
titsonsolana.live
A Solana airdrop page asks visitors to connect a wallet to claim purported $TITS tokens.
The $SHITCOIN airdrop with a wallet prompt
cetecoin.com
A page on a domain that redirects to scfraft.com pitches a supposed Solana-token airdrop and asks visitors to connect a wallet.
A Fiverr verification flow on eblozom.help
eblozom.help
The page presents a funds-verification step for Fiverr services and asks visitors to enter their Fiverr username.
A Hasbro Pulse storefront on a not-Hasbro domain
hasbropulsenm.shop
This page presents itself as an official Hasbro collectibles store, with priced listings for Transformers, Marvel, Star Wars, and G.I. Joe items.
Visivra’s ocular-supplement dispensary
visivraz.com
A direct-sales page for an eye-support supplement, organized around ingredient disclosures, batch verification, and selectable 60-, 90-, or 180-day supply options.
A trading floor under an unrelated name
ifxmarker.com
A Portuguese-language landing page presenting itself as an IQ Option trading platform, with forex, crypto, synthetic assets, and account-registration prompts.
A Mammut Outlet Storefront on an Unverified Domain
mammutoutletusa.com
The page presents outdoor clothing, footwear, and mountain equipment under the Mammut name, with discounted jackets and links to shop categories.
A termite-company domain wearing DADU11 branding
thenononsensetermitecompany.com
The page presents DADU11 as an online-game brand, wrapped in a supposed termite-extermination mission theme.
Vendor Investigator’s peptide case-file bureau
vendorinvestigator.org
The site presents itself as an independent watchdog that buys peptides, reports laboratory tests, and files public vendor records.
A tissue-company homepage with a casino hitch
midaswebsolution.com
A Chinese-language corporate-style homepage presents tissue and hygiene-product brands, company news and investor information, while its meta description also carries a World Cup gambling promotion.
Iracema de pé: a surgery fundraiser with a deadline
iracemadepe.com
A Portuguese-language appeal asks readers to help fund a R$115,000 hip surgery for 71-year-old Iracema, with preset contribution amounts and a displayed progress counter.
A nail-salon domain, a Mr Mortgage homepage
nailsaloninsuranceyes.com
nailsaloninsuranceyes.com presents a mortgage-advisory service offering free pre-qualification or pre-approval and several types of home loans.
RODA furniture, on a domain that doesn’t say RODA
wexornulvita.site
A detailed Italian outdoor-furniture catalog and company site appears at wexornulvita.site, a domain unrelated to the RODA name presented on the page.
Cosmic Dungeon Outpost: dice, console repairs, and a Fitzroy zine
cosmicdungeonoutpost.blog
The site presents a Fitzroy gaming outpost offering tabletop one-shots, retro-console repairs, campaign-room hire, and a printed gaming zine.
Cyinfoczs.cfd redirects to EasyPark
cyinfoczs.cfd
The observed domain resolves to EasyPark’s Dutch parking-app homepage, which describes managing parking sessions from a phone.
The page says a protected document can only be reviewed and signed after downloading “Docusign Desktop.”
The domain opens to a Chinese-language page for a battery-storage manufacturer, while its page title and description identify a short-video production company.
Across the archive
3,284 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.