Archive through 2026-11-113941 cards in this category
Category home · 15
Pages with credibility, finance, impersonation, or trust concerns that reward careful reading.
Visual leads · 2026-11-11
Observed 2026-11-11
An apparent INSS biometric-payment portal
regularizabiometria.org
The page presents a claimed mandatory biometric registration for Brazilian benefit recipients, then asks them to pay R$87.54 by PIX.
Observed 2026-11-11
RentStock Protocol’s one-week stock vaults
rentstockprotocol.xyz
The site presents a Robinhood Chain protocol where owners deposit shares into stock-specific vaults and renters pay upfront for potential weekly gains above a chosen threshold.
Observed 2026-11-11
The Seven-Hour Offer Letter
docs-share-online.com
A page styled as a Google Drive and OneDrive file share presents an urgent offer-letter download.
Observed 2026-11-11
The urgent countdown at MLB Stocks
mlb-stocks.com
A page pitching investment insights also displays an urgent registration warning, personal account details, and a prompt to enter an investment amount.
Observed 2026-11-11
A CNN-Labeled Baking Soda Weight-Loss Pitch
thesliminsider.site
The page presents a CNN Health-branded story about baking soda and weight loss, alongside paid “focus” packages.
Observed 2026-11-11
Adobe Updater’s suspicious install guide
adobe-updater.com
An unrelated domain presents a step-by-step guide for installing what it calls the official Adobe Updater on Windows.
Observed 2026-11-11
A DoorDash support page with an unverified identity
dasherhelpdesk.com
An apparent DoorDash-branded support page asks Dasher visitors to submit account details and a six-digit verification code.
Observed 2026-11-11
Veyra AI’s €220 “official” server-allocation pitch
passiefwinstai.xyz
A Dutch-language page pitches private investors on allocating AI server capacity, citing a €220 minimum deposit and daily returns.
Complete daily shelf · Suspicious Gentlemen
The eight visual leads appear above; the remaining 17 continue here in their published shelf order.
Veyra AI’s “official” Dutch server-allocation pitch
rendementuitai.xyz
The page asks Dutch individuals for a €220 starting deposit, claiming they will receive server capacity that is rented to technology companies for daily returns.
The €220 Dutch AI-server allocation pitch
techwinstdelen.xyz
Veyra AI presents itself as an official Dutch system for allocating datacenter capacity to individual investors.
A Drone Route Wants to Rent the Low Sky Over Michigan Farms
greatlakesairspace.com
Great Lakes Airspace says it is organizing paid drone-delivery corridors across rural Michigan, starting with a route between Millington and Clio.
Counterlure’s face-and-name reporting register
counterlure.com
Counterlure offers tech workers a form to report someone they suspect of operating under different names.
CRUSH LOGS: manuals for stolen account data
crushlogs.com
A Russian-language manual library about infostealer logs, including stolen passwords, cookies, and access to gaming and financial accounts.
Entrepreneur Legal’s official-sounding registry portal
entrepreneur-legal.com
Entrepreneur Legal presents itself as a portal for looking up French company records and activating a professional space.
The Laundry: a pump.fun launchpad with mule wallets
thelaundromat.fun
The site describes a Solana launchpad that routes each coin’s trade tax through fresh wallets, with outcomes tied to holder behavior.
pkill Lookup’s email-to-identity dossier
pkill.top
The page advertises a paid API that claims to connect a US email address with personal details, social accounts, and cryptocurrency wallets.
pub1220’s FIRE-to-IRIS filing bridge
pub1220.com
The site offers to validate Publication 1220 files or CSVs, convert them to IRIS XML, and submit information returns.
Starlink Mini for USD 59.90—with “lifetime” service
tiendastarlink.lat
A Spanish-language storefront offers a Starlink Mini kit for USD 59.90 and claims the purchase includes service for life, with no monthly fee.
The Vietnam Health Award’s 73-name register
vietnamhealthaward.org
Vietnam Health Award presents an editor-selected 2026 register of health-sector honorees across 12 categories.
Watchdog Income System: paid reports on your block
watchdogincomesystem.com
For a one-time $19 fee, the site offers an account for submitting neighborhood safety observations from a phone, with payment claimed for accepted reports.
Clash Verge Rev’s official download hub—on a .courses domain
clashvergens.courses
The page presents itself as the official home for the open-source Clash Verge Rev client and directs Windows, macOS, and Linux users to GitHub Releases for downloads.
Electrum’s download warning, reached through electrum-assets.com
electrum-assets.com
The observed domain redirects to Electrum’s Bitcoin wallet homepage at electrum.org, where visitors can find downloads and signature-verification instructions.
Lannister Mining’s Basin Gulch Investor Page
lannistermininggold.com
An investor-facing page presents Lannister Mining as a publicly traded company advancing a gold-silver project in Montana.
metameskae.com: a near-match that redirects to MetaMask
metameskae.com
The observed domain redirects to MetaMask’s crypto-wallet homepage, a substantial page promoting trading, payments, and developer tools.
A footwear sale under the wrong outlet sign
whogivesacrapoutlet.com
A storefront for Oliver Cabell footwear, advertised with comfort and pain-relief claims, sits at a domain reading “Who Gives a Crap Outlet.”
Across the archive
3,941 cards provide an early longitudinal view—not a measure of the whole web.
The rolling 21-day upper threads compare daily category medians; the bold thread is Suspicious Gentlemen. Below, signal colour shows the share of that day’s published Suspicious Gentlemen cards carrying each mark.
This exposes association inside the published catalogue, not causation or site quality. The 80+ threshold is the pipeline’s editorial-interest score.