Archive through 2026-11-093895 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-11-09
Observed 2026-11-09
AARP Fraud Watch’s Recovery Pitch
aarp-fraud-watch.org
A financial-fraud recovery site using AARP’s name, hosted at aarp-fraud-watch.org, offers case guidance, alerts, victim stories, and a contact form.
Observed 2026-11-09
A DIAN tax portal on a .click domain
dianbarrancabermeja.click
The page presents itself as Colombia’s DIAN tax and customs agency, with links to taxpayer services, customs procedures, and user access.
Observed 2026-11-09
TronLink wallet on an unexpected .courses address
tronlink.courses
A Chinese-language page presents itself as the TronLink self-custody wallet, with download routes, TRON features, and security guidance.
Observed 2026-11-09
A ProtonVPN download page on a .courses domain
protonmax.courses
protonmax.courses presents a Chinese-language page claiming to offer official ProtonVPN downloads, privacy information, and free and paid plan comparisons.
Observed 2026-11-09
The A/R recovery offer—and its exposed draft notes
aimedicalrevenue.com
Ai Medical Services offers private practices help recovering old unpaid insurance claims and denials.
Observed 2026-11-09
PlusKeys’ ChatGPT Plus recharge flow
pluskeysgo.com
A Chinese-language page offers ChatGPT Plus activation through a redemption code and the account’s Session data.
Observed 2026-11-09
ContraBet.org’s 30% reimbursement claim
contrabet.org
A Portuguese-language campaign asks people affected by online betting to submit a short account for a purported research report.
Observed 2026-11-09
CFX’s X.25 Scanning Control Panel
postaltelegraphandtelephoneservice.asia
An access-key-gated dashboard labeled “CFX // x25 uk” presents controls for network scans, target datasets, worker status, and findings exports.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 9 continue here in their published shelf order.
The scientific calculator with a PIN-hidden AI menu
vovocorpai.com
VovoCorp sells scientific calculators with an AI menu for typed or photographed questions, plus notes, chat, games, and a color gallery.
SCAMSEM’s four-tier airdrop
scamsemsol.com
The page claims to offer Solana users token rewards for connecting a wallet and completing blockchain activities.
The Party Pros’ RSVP Wants Your Spherinc Password
thepartypros.art
A corporate-party planning page includes an RSVP form asking invitees for a Spherinc.com email and password.
Minwax’s wood-stain catalog, under a gibberish domain
sophrulvexqan.online
The page presents a full Minwax-branded wood-finishing catalog, with product categories, color tools, how-to guides, and retailer links.
Noptcha, the CAPTCHA-solving API
noptcha.xyz
A planned API that says it can classify image CAPTCHAs and return text, matching images, or grid tiles to click.
A tax portal reached through an odd domain
bioenterpris-jp.com
bioenterpris-jp.com was observed redirecting to Japan’s e-Tax portal, whose homepage publishes filing information, availability hours, and service notices.
DoseTools’ peptide calculator and clinic directory
dosetools.site
A peptide reconstitution and syringe-unit calculator sits alongside a directory comparing telehealth clinic prices for GLP-1 medications and other compounds.
Papa Tracker’s claimed South America itinerary
papatracker.com
A Spanish-language page presents a live map and 33-stop schedule for a claimed Pope Leo XIV tour of Uruguay, Argentina, and Peru.
The page presents a purported Chronopost reimbursement form that collects shipment, identity, address, and payment-card details.
Across the archive
3,895 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.