Archive through 2026-10-243578 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-10-24
Observed 2026-10-24
A .com wearing the UAE’s ICP uniform
kyc-smartservices-icp-gov-ae.com
This page presents itself as the UAE Federal Authority’s portal for identity, residency, and visa services.
Observed 2026-10-24
Acesso Seguro turns debt relief into a CPF funnel
desenrolaacesso.xyz
The page claims to offer access to Brazil’s Desenrola Brasil debt renegotiation program, then asks visitors for CPF, full name, and birth date.
Observed 2026-10-24
An Arabic-language Russian military recruitment funnel
nma-information-center.org
The page advertises one-year contract service in Russia to foreign citizens, pairing claimed pay and a possible citizenship route with an eligibility form.
Observed 2026-10-24
PeekExam: AI answers inside an exam lockdown browser
peekexam.com
A macOS app that embeds Peeksolve AI in an SEB-compatible browser, advertising screenshot answers, automatic form-filling, and hands-off quiz progression.
Observed 2026-10-24
A Teams meeting with an update-shaped detour
gwkinvestmicrosoftteams.com
The page imitates a Microsoft Teams meeting and store listing, then says an update installer is required to join.
Observed 2026-10-24
A Crédit Agricole login on an unrelated domain
conmatiscassiatico.asia
conmatiscassiatico.asia presents a Crédit Agricole-branded regional banking page with an online client sign-in flow.
Observed 2026-10-24
Ledger Recover, on an unrelated domain
ledger-recoverysecure.com
A Ledger Recover-branded sales page describes identity-based crypto-wallet recovery and bundles the service with Ledger hardware.
Observed 2026-10-24
Proton VPN Labs and the alpine-bunker pitch
protonvpn.buzz
A Chinese-language page presents itself as a Proton VPN experimental lab, promoting anti-censorship, post-quantum encryption, and VPN speed-boosting features.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 15 continue here in their published shelf order.
The Citadel Chronicle’s Bitcoin print issue
citadelchronicle.com
A Bitcoin-themed, newspaper-style issue with market commentary, interview features, and controls for viewing or printing its pages.
Certified Counselor License Check’s claimed registry
certifiedcounselorcheck.org
The site presents itself as a free search registry for counselor license status, with a one-time fee for full license details.
An NVIDIA giveaway mockup with a warning label
corask.site
A Traditional Chinese NVIDIA-themed rewards page invites visitors to register through LINE, but says the page is a design sample, not an official NVIDIA site.
The Claimed $10.5 Billion Musk–Dangote Initiative
initiativemuskdangote.com
The site presents a purported global funding and mentorship program for people working to develop their communities.
Orbtimus’s “Profit or Revert” stock-token arbitrage engine
orbtimus.com
Orbtimus presents a public flash-arbitrage engine for stock tokens traded across pools on Robinhood Chain.
An “Anonymous” ICE Tip Pipeline That Also Asks for Donations
reportillegalsnearyou.com
Report Illegals Near You solicits reports about undocumented immigrants and says it batches them for submission to ICE, while also soliciting donations.
PHP2Shell Check, with a Cloudflare Exit Ramp
php-shindan.com
A Japanese site offers a free PHP vulnerability check and steers visitors toward migrating PHP sites to Cloudflare.
Bhutan’s “Official” Visitor Gateway, on rbdot.org
rbdot.org
A travel-planning homepage claiming to be the Royal Government of Bhutan’s visitor platform, with destination guides, SDF estimates, provider checks and visitor assistance.
House of Amathongo: healing by ancestral divination
amathongohealing.com
A Kampala-based traditional healing practice offering consultations on family concerns, court cases, business, political power, and spiritual protection.
Patch Response’s PHP2Shell assessment
patchresponse.com
A paid service offering read-only checks for PHP2Shell exposure and, with the customer’s agreement, PHP patching for business websites and agency portfolios.
PHP2Shell Response Hub
checkphp2shell.com
A PHP version checker and response guide that presents mitigation steps, deployment checks, and audit materials for two listed PHP security advisories.
Corra por Valdir: a four-month fundraiser
corraporvaldir.com
A Brazilian Portuguese donation page presents a fundraiser for prostheses for a cane cutter who, it says, lost both legs after a snakebite.
A device-verification domain that lands on Scotiabank’s global site
deviceverify-scotia2fa.com
The observed domain redirects to Scotiabank’s public global page, a directory of country sites and banking services.
Barran Dodger’s emergency appeal and document archive
barrandodger.org
A GitHub Pages site pairs an urgent personal support appeal with links to a documentary archive, a reconstructed finding aid, church writings, and a dated legal brief.
A Bengali-English page asks for a Bangladesh NID number and date of birth, claiming to check the details against an Election Commission database.
Across the archive
3,578 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.